Avast WEBforum

Other => Viruses and worms => Topic started by: bluesky on April 10, 2004, 09:00:41 PM

Title: new
Post by: bluesky on April 10, 2004, 09:00:41 PM

hello;
 i just downloaded avast to my comp. it tells me i have a virus-win32'trojan generated; i have tried delete ;repair over and over it says it cannot access please help me in simple terms as possible for i am new to this :'(

   thank you so much

  if it helps i have windows me  dial up

Title: Re:new
Post by: .: Mac :. on April 10, 2004, 09:47:55 PM

hello, welcome to the AVAST forums!

Please reboot your computer into safemode and scan agian.

also have you scanned with spybot search and destroy? It has an extensive anti-trojan database.

Title: Re:new
Post by: bluesky on April 13, 2004, 07:47:54 AM

i did both things u said to do .i ran my comp in safemode and ran avast trojan still detected still there; i also downloaded spybot sand d. it also detected same trojan but says it cannot access file just as avast says please help !!!!!

   thank you :'(

Title: Re:new
Post by: whocares on April 13, 2004, 01:32:38 PM

Hi,

what WIN do you have ?
Where exactly was the infected File found  (full pathname and filename) ?

test the file with OnlineScanners e.g. from Trend & KAV (see below) to get a more specific name
(you need to temporarily disable AV-Resident Shields/Monitors to be able to scan the file online)


-remove the Virus/Malware and it's system modifications according to VirusInfos
from Avast, VGREP, TrendMicro, Kaspersky;
you might also try searching for the virus name or filename with google

general removal procedure:
- disable system restore on Win ME/XP
- kill respective Backdoor/Trojan process with task manager
- search for the file/process names in the registry; remove the malware's startup entries in the registry
- disinfect or (if disinfection is not possible) delete the file; this may be possible only after a reboot
 

-Secure your system:
   change passwords, secure shares, install patches/updates for WIN&IE;
   disable ActiveX and Scripting in IE except for know secure sites - or better use a secure browser
- scan your whole system with updated avast and maybe a 2nd scanner ,e.g. TrendMicro to check whether your PC is clean ;)
- reenable system restore on Win ME/XP


if it's of the trojan-gen kind: spybot, ad-aware and cwshredder might also help
if you still can't remove it, you could post a logfile of Hijackthis here

see www.lurkhere.com ->nicefiles and www.lavasoft.de

Further Details and Links via the board search above ;)