Author Topic: virus id help needed  (Read 2929 times)

0 Members and 1 Guest are viewing this topic.

bart

  • Guest
virus id help needed
« on: January 19, 2006, 09:09:34 PM »
Norton doesn't pick up this virus but Avast did.  It shows up twice when I do a scan.  It finds it in the C:\tmp.exe\g.exe and it only identifies it as
Win32: Trojan-gen (UPX!)  When I try to move it to the chest it tells me "Error occurred during moving file to chest."

The scan also produces the message that it is unable to read in my documents and settings file under local settings the admin.dll and lvreg.dll file.

When I sign on I also get a pop up message (not from Avast) that states my internet URL for your IE Urls is attempting to be changed from
home.microsoft.com/search/lobby/search.asp to http://bfc.myway.com/search/de_srchlft.html.  I always block it.

I don't even know how to find more information to identify which virus it is.  Help?




Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 34051
  • malware fighter
Re: virus id help needed
« Reply #1 on: January 20, 2006, 11:27:19 AM »
Hi Bart,

This may have caused it:
http://www.scumware.com/apps/scumware.php/action::view_article/article_id::1063294991/topic::Scumware,-Spyware,-Adware-&-Malware-Applications/

Is your computer spy- and adware protected through Ad-Aware, Spybot Search & Destroy or SpywareBlaster. No, install these free anti-spyware solutions.
If you do not want to remove the MyWay Browser Helper Object manually, you can use Toolbarcop, see here:
http://windowsxp.mvps.org/toolbarcop.htm Short on the use of Toolbarcop here:
http://www.winhelponline.com/tbchelp.htm

polonus
« Last Edit: January 20, 2006, 11:33:37 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!