Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: lmw28if on October 31, 2004, 12:02:30 AM

Title: Virus found
Post by: lmw28if on October 31, 2004, 12:02:30 AM
Avast is coming up with finding these viruses ALOT on my PC..wondering what could be causing it.  Most of the filenames are like 3.tmp, 40.tmp..etc. but the virus is usually this:  win32:winadcli-4[trj].
Is this common?  I've been putting it to the Chest as Avast cannot repair.  Any assistance would be appreciated.
Thanks
Title: Re:Virus found
Post by: bob3160 on October 31, 2004, 12:21:57 AM
lmw28if
Welcome to the forum. ;D
Please help us help you.
What version of Avast! are you using
What vps version?
What OS?
What exactly is the error message? (If you are getting one.)
Please include the full path and name.
etc. etc.
The more info. you supply, the easier it is to help.
Title: Re:Virus found
Post by: techie101 on October 31, 2004, 12:51:14 AM
The "virus" you mentioned is not actually a virus, but a trojan which has nested itself into your Temporary directory.

Open up the Avast Virus Chest and see if the files are listed.  If they are, then you will need to clean out your Temporary Directory.
If the files are not listed, then Avast did not move them successfully.  Avast is telling you that it cannot repair the files which usually requires a manual deletion.

Follow the path/s given by Avast to the files and delete them manually.

Then, reboot the computer.

Download and install A2-Trojan Scanner (freeware) and run a scan.
Get it here:  http://www.emsisoft.com/en/ (http://www.emsisoft.com/en/)

Remove any trojans detected.

Rerun Avast set to Thorough scan with archives.

Let me know the results.

 :)
Title: Re:Virus found
Post by: lmw28if on October 31, 2004, 02:25:51 AM
I'm running winxp sp2.  attached is a screenshot of the warning.  I've been getting these types of warnings alot lately.  any ideas?
Thanks,
Title: Re:Virus found
Post by: bob3160 on October 31, 2004, 02:31:48 AM
lmw28if
Follow Techie101's advice.
Title: Re:Virus found
Post by: techie101 on October 31, 2004, 04:29:43 AM
Also, I would recommend cleaning out the temporary folder.

Use the instructions found here:

http://support.microsoft.com/default.aspx?scid=kb;en-us;260897 (http://support.microsoft.com/default.aspx?scid=kb;en-us;260897)

Good luck.
 ;)
Title: Re:Virus found
Post by: lmw28if on October 31, 2004, 05:05:23 AM
After doing a complete scan I had a list of files where some of them said archive is password protected.  Does that have anything to do with, being XP, there are several different users that are pw protected on my pc?  Also, when I'm signed in and within IE I delete cookies and temp files, is that only removing MY temp files not other users' temp files?
Thanks,
Title: Re:Virus found
Post by: Eddy on October 31, 2004, 05:10:32 AM
Quote
Also, when I'm signed in and within IE I delete cookies and temp files, is that only removing MY temp files not other users' temp files?
If you mean temp files in IE, that are only the cached files from IE, not temp files created by other applicactions.
Title: Re:Virus found
Post by: techie101 on October 31, 2004, 05:37:26 AM
The temp files you delete should have no effect on system or other users performance.  These files are usually left over from program installations and such.

You will often get "Password Protected" after a scan.  If you examine the files listed, you will notice that most of them are system files.  Windows PPs the files to prevent unauthorized and accidental tampering.

You may also see files with paths to the System Restore which Avast will not scan.  To do these, you will need to disable the System Restore, but be aware that when you disable the SR, all restore points are lost.

Food for thought!   ;)
Title: Re:Virus found
Post by: lmw28if on October 31, 2004, 03:18:11 PM
Why all of a sudden is Avast finding these 'viruses'.  Is it due to a newer VRDB?  Can I delete these immediately when they come in?  What's weird is that I can leave my pc for hours with nothing up and running and I'll come back with a warning page that it found one of these viruses.
Thanks,
Title: Re:Virus found
Post by: techie101 on October 31, 2004, 03:46:10 PM
Actually, this is not uncommon.  To us, the computer is not doing anything, but it is ALWAYS doing a task or two.

Some of the trojans, viri and malware are self replicating which means they make little "baby" ones.

Once you clean out the Temp files, Cache, Cookies and such, then run a good antispyware program, you should be ok.

As for the VPS database.....
the new detections could be the result of the updated signature files, but most likely you still have leftover junk that you need to clean out.

Regularly running a full AV scan, AntiSpyware scan and a good Anti-Trojan scanner like A-Squared (A-2) will keep most troublesome "invaders" out of your system.

There is no magic answer here.  It will take some time and effort to get your system "bug" free, but it can....and will be done.

Talk to you when you have accomplished the tasks outlined here.

Good luck.
Title: Re:Virus found
Post by: lmw28if on October 31, 2004, 03:59:05 PM
Thank you for all of your help.  And if, after I've run a full AV scan, bootscan, run AdAware, a2, Yahoo Anti Spy and Spybot S&D I still get this stuff is this just supm I'll have to live with?  And am I safe just deleting these right away vs. sending them to the chest?
Thanks again
Title: Re:Virus found
Post by: Lisandro on October 31, 2004, 04:26:51 PM
And am I safe just deleting these right away vs. sending them to the chest?

Chest is always safe.
Send file to it, wait some days (maybe one week) and after that you can delete the file from the Chest  ;)
Title: Re:Virus found
Post by: lmw28if on November 01, 2004, 12:00:55 AM
I seem to get this virus warning...the win32 trojan with the filename a.tmp..or 48.tmp..etc....everytime I boot my maching.  What could this be..anything I can do to stop this or is my system doing what it should be doing..finding it...just wondering what's doing it and if I could stop it from coming...
Thanks,
Title: Re:Virus found
Post by: Lisandro on November 01, 2004, 12:30:39 AM
I seem to get this virus warning...the win32 trojan with the filename a.tmp..or 48.tmp..etc....everytime I boot my maching.  What could this be..anything I can do to stop this or is my system doing what it should be doing..finding it...just wondering what's doing it and if I could stop it from coming...
Thanks,

Which is your operational system?
Did you schedule a boot time scanning?
Title: Re:Virus found
Post by: lmw28if on November 01, 2004, 01:00:38 AM
I'm on WIN XP sp2...I have run a boot time scan, a thorough scan, Adaware, spybot s&d, a2, and the Avast virus and worm cleaner...still get these warnings.
thanks,
Title: Re:Virus found
Post by: bob3160 on November 01, 2004, 01:12:22 AM
lmw28if
Please post the full path and name of the file(s) in question.
Thanks
Title: Re:Virus found
Post by: lmw28if on November 01, 2004, 04:26:12 AM
Here's a screenshot of a few of the files in the chest...hope this helps.
Title: Re:Virus found
Post by: Lisandro on November 01, 2004, 02:06:28 PM
Please, clean your temporary files.
In 'Links' on my signature there are a lot of suggestions of applications to do that automatically, my favorite is BeClean.
Title: Re:Virus found
Post by: lmw28if on November 02, 2004, 01:17:49 AM
I hate to beat this to death...but I have cleaned out my temp files...it seems as though these .tmp files  keep coming in.  Not sure what's doing it.  Is it just supm that has to be dealt with?  It just seems to be happening alot lately...
Title: Re:Virus found
Post by: Lisandro on November 02, 2004, 01:46:32 AM
Did you try to boot in Safe Mode (F8 while booting) and delete the files?
If this does not help, did you try BeClean as an automatic cleaner?
If you do not succeed, can you try a boot time scanning of avast?
At last, can you download MoveOnBoot and delete the file at booting?

BeClean and MoveOnBoot links on my signature (Links).  ;)
Title: Re:Virus found
Post by: ianb on November 02, 2004, 12:31:50 PM
Crap Cleaner will make sure ALL your temp files are gone.
http://www.majorgeeks.com/download4191.html
Title: Re:Virus found
Post by: cnw on November 02, 2004, 04:08:31 PM
In the past I have deleted specific viruses from, I think, My Computer or another app or accessory - does anyone know?  Thanks
Title: Re:Virus found
Post by: lmw28if on November 03, 2004, 02:00:04 AM
Man...I don't get it.  I rean BeClean, removed alot of files...then I rebooted, and it seems lately EVERYTIME I reboot Avast finds a virus..like a .tmp file...How can it find a virus right on boot.  This baffles me.
Thanks,