Avast WEBforum

Other => Viruses and worms => Topic started by: zkaterboy on July 02, 2004, 05:18:08 PM

Title: need help.. big time!!
Post by: zkaterboy on July 02, 2004, 05:18:08 PM: hi´... i´ve downloaded avast! 4 home for about 2 weeks ago.. no problems there. it succesfully discovered 2 trojans after my 1st day on the net....

here is the problem: i´ve got about 80 viruses on my computer, all of the name Virus-90, what is that exactly?? they appear in my: system volume information/restore. tried to repair them.. but didnt work out! so i moved em to the chest and is now asking...: what am i supposed to do with them??? please help!
Title: Re:need help.. big time!!
Post by: niko on July 02, 2004, 11:04:03 PM: Hi Zkaterboy and welcome to avast! forum !
Please, give more info ( OS etc...) !
Title: Re:need help.. big time!!
Post by: Max M.Wachtel III on July 02, 2004, 11:14:16 PM: Hello-
Disable system restore and reboot,that will clear out all files in system restore.
Perhaps you should reboot into safe mode.That will allow you to delete folders that other programs may be using.
-max
Title: Re:need help.. big time!!
Post by: zkaterboy on July 06, 2004, 01:32:17 PM: thanx alot!!! ;D... but what is virus-90? never heard of it....
Title: Re:need help.. big time!!
Post by: zkaterboy on July 06, 2004, 01:36:54 PM: ps. my OS is XP home. and i use AdAware 6.0, sygate personal firewall and zonealarm... i´ve heard that there should be many programs/software out there so i just wanted to ask: do i need more?? please Reply
Title: Re:need help.. big time!!
Post by: Max M.Wachtel III on July 06, 2004, 02:06:51 PM: See my site for links
-max
Title: Re:need help.. big time!!
Post by: whocares on July 06, 2004, 06:13:54 PM: Quote from: zkaterboy on July 06, 2004, 01:32:17 PM
but what is virus-90? never heard of it....

It seems to be a COM-fileInfector:
http://www.virusbtn.com/resources/vgrep/vgrep.cgi?terms=virus-90&product=1

A bit unusual to have so much of it in RESTORE..

where was it found initially (i.e. outside RESTORE: full path/folder/filename, see avast's report & LOGs) ?

if you find it again, please test it with other scanners, see the links in my or madmax sigs

;)
Title: Re:need help.. big time!!
Post by: DavidR on July 07, 2004, 05:15:07 PM: Quote from: zkaterboy on July 06, 2004, 01:32:17 PM
thanx alot!!! ;D... but what is virus-90? never heard of it....

Further info at http://vil.nai.com/vil/content/Print1351.htm (http://vil.nai.com/vil/content/Print1351.htm)

If you are in doubt or want information on something search it out with Google, a search on virus-90 returned 881 hits. In true X-Files style, The information is out there ;D
Title: Re:need help.. big time!!
Post by: zkaterboy on July 09, 2004, 04:22:29 PM: hmm..... this is from the Avast! log viewer!

Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP110\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP111\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP112\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP112\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP113\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP113\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP114\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP115\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP115\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.
Sign of "Virus-90" has been found in "C:\System Volume Information\_restore{1A5BB231-CCF8-48FF-8AD3-21401F791F13}\RP116\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2969962186-2111342016-2801439982-1005" file.

the other 80 of them is in the same folder! so eh.....
Title: Re:need help.. big time!!
Post by: DavidR on July 09, 2004, 07:01:53 PM: Disable system restore, reboot, run avast and if clean enable system restore and reboot.