Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: ziko on December 29, 2007, 12:25:19 PM
-
Hello
Replace my modem two days ago and from this point my mail scanner get crazy, every few minutes this message :
(http://i123.photobucket.com/albums/o295/ziko156/mail.jpg)
what can i do ?
thank's
-
Your computer could have been used to send spam by trojans. I suggest:
1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on.
4. Use AVG Antispyware (http://www.ewido.net/en/); SUPERantispyware (http://www.superantispyware.com) and/or Spyware Terminator (http://www.spywareterminator.com/) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications (http://www.antirootkit.com/software/index.htm). I suggest AVG (http://www.grisoft.com/doc/download-free-anti-rootkit/us/crp/0) or Trend Micro RootkitBuster (http://www.trendmicro.com/download/rbuster.asp).
6. Make a HijackThis (http://www.bleepingcomputer.com/files/hijackthis.php) log to post here or, better, submit the RunScanner (http://www.runscanner.net/) log to to on-line analysis.
7. Immunize your system with SpywareBlaster (http://www.javacoolsoftware.com/spywareblaster.html) or Windows Advanced Care (http://www.iobit.com/AdvancedWindowsCarePersonal/index.html).
8. Check if you have insecure applications with Secunia Software Inspector (http://secunia.com/software_inspector/).
By the way, which email program do you use?
Are you sending emails when the message appears?
-
Thank you,i'll try it ASAP
By the way, which email program do you use?
Are you sending emails when the message appears?
I use IncrediMail as default program and the message appears also when the mail program is closed
-
the message appears also when the mail program is closed
So, your computer seems infected...
-
OK
With help from AVG progs the PC looks clean for now :)
Thank you and Happy New Year !
-
With help from AVG progs the PC looks clean for now :)
Did you try the other steps?
Happy New Year too!
-
Try few programs axcept Rootkit - looks not so safe to remouve hidden files to me.
The AVG find 3 terrorists and now i can work without this popups
(http://i123.photobucket.com/albums/o295/ziko156/AVG.jpg)
-
Try few programs axcept Rootkit - looks not so safe to remouve hidden files to me.
The AVG find 3 terrorists and now i can work without this popups
Can AVG restore them to another folder and, from there, you can send to virus (at) avast.com for analysis. It's a pity that avast missed three detections that, indeed, seems infected.
-
I'll happy to do so but don know how...
The virus report is the same as i post early (picture) and don see more information about trojans there.