need help please

[skooidi]

hi, i'm a noob and need a little help. i scanned my pc with avast and moved the infected files to chest. problem is, now i can't open drives on double click. i need to right click and choose open or explore. i'm guessing the file that was needed for this is in the chest/deleted (i think i deleted infected files). so my question is how do i get things back to where they were and if viruses attack files that are meant to run the system, wouldn't it things to not work when files are isolated?

[FreewheelinFrank]

Hi skooidi,

You should always put infected files in quarantine ('the chest') rather than delete them so you have the option of restoring the file if it was a false positive.

However, I think this may well be a registry change made by the malware, rather than a missing system file.

See this thread:

http://forum.avast.com/index.php?topic=28632.msg234088#msg234088

And the descriptions of symptoms here:

http://forums.techguy.org/security/556776-autorun-vbs.html

If this seems to match your problem, try running the Clean_Autoruns batch file linked to in the second page above.

The effect of deleting or moving a system file will depend on the job the file does: some are critical and the system won't start without them. Others are only called on demand so you might not notice any problem until you try to perform a specific task.

[sasin44]

hi check avast log
right-click on avast simple user interface[the thing that comes up after u click on the avast ickon on desktop]>>there click on the option named log viewer..
u'll get the list of malware that avast has detected and from there u can find the name of the malware that u are speaking about...

from my encounter with a similar virus i think u have classic symptom of VBS:Solow..
it causes the same effect..
if ur infected u should also consider boot-time scaning ur comp..right click on the avast simple user interface and select boot-time scan option..cos a lot of malware have a bad habit of sittin in "system restore information" folder

[polonus]

Hi sasin44,

The manual removal routine for solow-c:
Solow.c manual removal:
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\maskrider
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Window Title=[new title]
Help: how to remove registry entries

Delete files:
maskrider2001.vbs
Help: how to remove harmful files

Misc:
The maskrider2001.vbs file can be found in the root of the main hard drive (C:). It also resides in main Windows folder C:\WINDOWS or C:\WINNT.

polonus