Avast WEBforum

Other => General Topics => Topic started by: click85 on October 10, 2004, 12:08:38 PM

Title: please help
Post by: click85 on October 10, 2004, 12:08:38 PM

I've somehow downloaded an adware virus that replaces my home page and has accompanying pop ups. I've run norton anti virus which tells me the name of the virus as 'Adware.Main.Search.' It also identifies the name of the infected file as system32\cgkef.dll. When I click 'delete' in nortans  the message comes up 'cannot delete, file is either right protected of in use'. I also went into the windows directory and tried to delete the file manually but to no avail with the same message coming up. I then followed Nortons next recommendations which were; 1. Run and download  Nortons virus update. 2.Restart the computor in safe mode. 2. Do a complete system scan on Norton. 3. Delete any infected files. Unfortunately it's when I get to this stage I get the same message 'cannot delete, file is either right protected of in use'. I'm really at a loose end and would very much appreciate any help.
Kind regards  :'(
 

Title: Re:please help
Post by: lee16 on October 10, 2004, 12:32:08 PM

Hi click85

This is Spyware/Adware not a virus.

I suggest downloading, updating then running these 2 good free programs, they are ad-ware (http://www.majorgeeks.com/downloadget.php?id=506&file=9&evp=8dbaff7daca8f4b55bf695220993fc0f)
and spybot (http://www.majorgeeks.com/downloadget.php?id=2471&file=9&evp=2470f9bfb0cc682334ff8c4459556118).
Also after that could you post a hijackthis log here so we can check your system is clean.

--lee

Title: Re:please help
Post by: DavidR on October 10, 2004, 05:05:53 PM

As Lee said this is not a virus.

However, according to your information you are running Nortons AV, this is a support forum for users of the avast anti-virus software.

Are you running two AVs (are you an avast user?)as this is not a good idea? There are too many possibilities for conflict.

Download HijackThis.zip (http://www.spywareinfo.com/~merijn/files/hijackthis.zip)

Post your hijackthis-Log here for a diagnosis: tomcoyote.org/hjt (http://tomcoyote.org/hjt)

Title: Re:please help
Post by: click85 on October 11, 2004, 01:39:04 PM

Thanks guys, downloaded the ad-aware program and it has completely fixed up the problem. Great to know there are champions like yourselves out there prepared to help others.
Kind regards
click85 ;D