Avast WEBforum
Other => General Topics => Topic started by: SCORPIONINBLUE on October 28, 2004, 04:01:24 PM
-
I posted a message earlier, but didn't have all the info. for the moderator to really help me. Here is my problem,
I ran a thorough scan and it came up with two viruses the name and locations are as follows:
Name: Win32:Trojano-495(Trj)
Locations: C:/WINNT/SYSTEM32/pfrlbmsg.exe
C:/WINNT/system/xXQYOBllTKW.exe
I ran a scan the day before got a warning of two viruses being present each at separate locations, I clicked repair and the scan continued on until the log at the end, it said that the viruses were successfully repaired, why are they back? I have a firewall (ZoneAalarm) although I allow Explorer full access, should I limit it? Could this be the cause? Also why doesn't the separate virus cleaning tool work? I was going to see if Norton or McAfee had a tool that could get rid of it, hate to betray the causeb but I'm very uneasy with this trojan in my system, can't undestand how it got in I have the Standard Shield set on high, and I use Yahoo web based email (Norton prortected) so I'm puzzled. Can you advise me on what to do? If I move them to the virus chest and there is a system malfunction, how easy is it to put the files back?
-
Trojans are, by their nature un-repairable, they are new files. In order to be able to repair a file that is infected, it must be one that has been scanned by the VRDB process in order for a repair to be attempted.
You can move them to the chest and after investigation delete them. They can also be restored easilly if found to be ok. These however, don't look like system files. A check on google would confirm or deny this (this is what I mean by investigate).
A boot scan you be your best option (disable system restore first otherwise it will end up there after deletion), so these trojans are not protected by windows.
-
Also why doesn't the separate virus cleaning tool work?
The tool is only for certain infections, not ALL infections.
why are they back?
Since I can't check on your system I have to guess. These are some possibillities:
- They where not (completely) gone in the first place
- Browsing behaviour
- Download behaviour
My suggestion, run a boottime scan and let Avast handle it or (perhaps even better) have a look at the page in my signature and follow all steps as explained there.
-
Hey!!
Thanks for the info., although I must confess that being a novice user, I have no idea whatsoever on checking flle information in GOOGLE, give me an idea how that's done, I just came from there but I put the file names in, nothing more and came up with nothing. Another question, the bootime scan is something that's set to begin when the computer is turned on correct!! Sorry for the obvious, but please bear with me, I still possess that intimidation thing when it come to computer problems, I haven't acquired "master" status as of yet!!
;D ;)
-
boottime scan :
start Avast > Menu > Schedule boot scan
About the file names :
They look like they are generated randomly, so it is not surprising that you don't find anything on Google.
-
Thanks, I will schedule that for tomorrow morning, wish I could today, but work 2nd shift, will be back in contact with you fellas after the scan is done with the results. Thanks again, you've really eased my mind!! Also on the virus chest, I put something in there a while back because it wasn't repairable, and luckily there weren't any bad 'side effects' ::)!! I do need more info. on restoring things in case I have to dispose of these two files, is the help section clear or would I get a better picture here in the forum?
-
Those two files can be removed without causing a problem.