Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: thaumielx72 on September 12, 2004, 09:15:59 PM

Title: Cant Remove Tojans w/o Removing Ability to Connect
Post by: thaumielx72 on September 12, 2004, 09:15:59 PM
Hello All.

I ran a memory scan as I do every weekend and Avast told me the Operating system had viruses/trojans in memory so I of course ran a boot time scan.  It flagged 3 files in a folder called C"/program files/winad client.   I moved them to the chest.  When the machine finished loading it no longer had an option in the start menu called Connect To...  and any connectivity test I ran failed due to lack of ethernet modem (!).  Well ... I went to the chest and restored the 3 files and rebooted and now can log on just fine.  Of Course I'm sure the same 3 virus/trojan files are now back in memory and they cannot be repaired as they are in use by Windows.  Any suggestions?
Title: Re:Cant Remove Tojans w/o Removing Ability to Connect
Post by: whocares on September 12, 2004, 10:26:31 PM
Hi,

please read the link "VirusRemoval" below in my sig, and then come back with more info, e.g.:
- full Trojanname and path/folder/filename for each trojan
- results of onlinescanners
- a hijackthis-Log
- win version
- avast version & VPS..

Also enter the names of the trojans in the link "VirusInfo" below and search there.. ;)
Title: Re:Cant Remove Tojans w/o Removing Ability to Connect
Post by: DavidR on September 13, 2004, 06:56:47 PM
Hi thaumielx72, welcome to the forums.

You have to remove the commands that are loading them into memory.

Follow Eddy's  (http://members.home.nl/edeijl/acred/cleaning.htm) website instructions and you will be well on your way to clearing the persistant problem.

David

Edit: Oops, messed up and forgot it.
Title: Re:Cant Remove Tojans w/o Removing Ability to Connect
Post by: Eddy on September 13, 2004, 07:01:14 PM
Perhaps next time also include the link in your message David ;)

thaumielx72, click on the link in my signature to go to the page David was talking about.