Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: jayburd74 on December 28, 2005, 06:03:33 AM
-
I keep getting this window "A Trojan Horse was found" popping up asking me to abort connection. I press abort and it pops up a minute later. What can I do?
-
Double click on the blue "a" ball near the clock.Select More Details, Web Shield->Customize->Advanced tab->Silent mode.
This will automatically abort the connection.
-
Maybe browse to a site which isn't trying to infect your computer with malware?
-
Maybe browse to a site which isn't trying to infect your computer with malware?
This is a good idea too! ;)
-
Thanks for the reply.
The silent mode worked but I'm still gettin the scanner message on the bottom right. Yeah I was on a sight I shouldn't have been on the other day. But Im not browsing anything and it keeps popping up. I'm also gettin this message that "your computer is infected with spyware". I ran Spyblaster, but I still get the message. How do I get rid of this?
-
Oh Oh looks like you may be infected with spyaxe or mssearchnet.exe check out my thread on this forum to see if it looks familiar, there are links there to cleaning solutions http://www.fixmyxp.com/forums/viewtopic.php?t=600
Also check this link for a new variant http://www.fixmyxp.com/forums/viewtopic.php?t=613
-
Hi jaybird74,
To be sure you will not click the wrong links to be further infested
download the DrWeb hyperlink pre-scanning plug-in for IE, FF or Opera (only a very small install, and all your hyperlinks can be pre-scanned onto the anti-viral update servers of DrWeb to see if the link is clean, get the all green and an OK there, you can click that link, without having to be afraid to get infested. I use it for more than one year now in FF and now in the Flock browser, and I would not know how to live without it, get it here: http://download.drweb.com/drweb+antivirus+free+services/
polonus
-
I downloaded the Dr. Web and it found 2 trojans. But I'm still getting the Avast scanner message. Also my internet explorer browser keeps wanting to change my homepage to about.blank.
-
Have you checked my links to see if you recognise the symptoms ?
-
Yeah the second link with the movie you posted was kinda similar to what happenend at first. The command prompt came up, it kept changing my IE, my desktop wallpaper is gone, trojans were found from the scanner(which wont stop), and said my computer is infected with spyware. But I just ran a scan with that Dr. Web and it picked up allota bad stuff. I'm not getting the "your computer is infected with spyware" anymore tho...
-
I hope you are clear now then
-
Do I understand correctly that a Webshield message can also mean a Trojan downloader is trying to download malware from a remote site?
-
If it's using the standard HTTP protocol (which is quite likely), then yes, it is possible.
-
Better will be having a firewall and see which is starting to download...
Did the user run a boot time avast scanning with avast to know if everything is cleaned after Dr.Web scanning?
-
Hi, Happy New Year,
I have the home edition of Avast and I am constantly getting warning messages regarding
Win32:Trojano-3267 [Trj]. No matter whether I select "Move to Chest" or "Delete", the Trojan
regenerates itself within seconds.
The file name is C:\Documents and Settings\Steve\Local Settings\Temporary Internet Files\Content.
IE5\2PJGH8NE\xp_0031[1].exe
I also constantly get the message "The process cannot access the file because it is being used by
another process".
Please can someone help and tell me how to remove this virus from my PC permanently?
-
Welcome Amadeus,
Would you mind copying your post and pasting it into a new topic- makes it easier for people to see and respond.
Thanks.
-
Hi Frank,
Thank you for the reply.
After downloading and running a dozen spyware programs, one called Dr Web seems to have stopped it. I am certainly not getting the constant Avast warning pop ups. I do now however get Registry error on start up warning me that certain files cannot be found! Was this Dr Web removing something from the Registry?
I would have started a new topic if I could have found where to start one!
Steve.
-
Oh well. Not to worry.
Had you tried a boot time scan with avast!? This will usually (not always) remove malware which is in use during a normal boot.
See the instructions here:
http://forum.avast.com/index.php?topic=18256.msg155264#msg155264
DrWeb has probably removed the malware files but left the start up commands in the registry as you say.
If you run a scan with HijackThis!, we can remove them.
http://www.bleepingcomputer.com/forums/tutorial42.html
For future reference, if you go to Viruses and Worms, there's a New Topic button on the right at the top of the postings.
Also for future reference, Ewido and a-Squared (both free scanners) are good at cleaning stubborn Trojans.
http://www.ewido.net/en/
http://www.emsisoft.com/en/
-
Hi again,
Just tried Hijackthis and it worked. Thank you so much.
DrWeb had removed the Trojan but left part of the Registry corupted at C:Windows/inet20001/services.exe.
Have a good new year and thank you again for being online and helping. I will make a note of the other two sites you suggested for future reference.
Steve.
-
http://www.sophos.com/virusinfo/analyses/trojkreppery.html
This seems to have been Krepper-Y.
There may be more registry entries to delete as mentioned in the Sophos article.
Happy new year to you too.
FwF