Avast WEBforum

Other => Viruses and worms => Topic started by: kvv on November 17, 2006, 11:48:25 AM

Title: need help
Post by: kvv on November 17, 2006, 11:48:25 AM

Please help me... there is computer OS Windows 2000 Service Pack 4.... everyday avast finds VBS:Malware [Gen] in c:\winnt\explorer.exe and ADNM says that file was moved to chest... please tell me, how can I cure the computer from that virus?

Title: Re: need help
Post by: Lisandro on November 17, 2006, 11:58:13 AM

Can you schedule a boot time scanning with avast? Use repair option. If you have run VRDB (virus recovery database) before, maybe you can recover the clean, original file.
Do you have Windows CD to restore the original explorer.exe file?

Title: Re: need help
Post by: kvv on November 17, 2006, 12:07:03 PM

I can take the original explorer.exe file from other computer with the same OS version , but its interesting cause the size of this files are the same (243,472bytes)...

Title: Re: need help
Post by: FreewheelinFrank on November 17, 2006, 12:16:32 PM

Hi kvv,

It may be that malware has injected a process into explorer.exe, rather than infecting the original file. Try a boot time scan with avast which will remove the Trojan before it can infect the explorer.exe process, or use an anti-Trojan scanner which can remove process-injecting Trojans like AVG Anti-spyware:

http://www.ewido.net/en/

Also, as this is an adware infection, try some specialist adware/spyware scanners:

a-Squared free:

http://www.emsisoft.com/en/software/free/

Ad-Aware:

http://www.download.com/3000-2144-10045910.html

Spybot Search & Destroy:

http://www.safer-networking.org/

Good luck!

Title: Re: need help
Post by: kvv on November 17, 2006, 12:20:46 PM

thanks a lot