Author Topic: Help Required.Infected Files  (Read 5673 times)

0 Members and 1 Guest are viewing this topic.

Neal

  • Guest
Help Required.Infected Files
« on: September 20, 2004, 01:36:11 AM »
Hi.
I have recently uploaded Microsoft XP and have had a few different pop ups advising me of the following.
1.Back Web-7288971 wants to connect to the internet.
2.Generic host process for WIN32 Services wants to connect to the internet.

I know nothing about these and have not seen them before.
Is this normal ?

Also after running Avast I found I had numerous Infected files which I sent to the chest.I ran it again and the same file was found to be reinfected,what can I do (see the attached) A0038737.exec:\System Volume Information\-restore...   WIN32:Trojan-ge...   I have this in the chest 3 times the only difference is in the first part of the file reference.A0038738 + A0038739.My questions are  1 Are the files safe in the chest ?
2 I would presume that the file above is still operational even after running Avast three times.Can anybody please explain ?
Regards
Neal  ???

neal62

  • Guest
Re:Help Required.Infected Files
« Reply #1 on: September 20, 2004, 01:42:27 AM »
Neal,

Please give us more information as to which O.S. you had and did you do an upgrade to WinXP? We need more info to really be able to help you. BTW,
welcome to the forum.  :)
« Last Edit: September 20, 2004, 01:46:44 AM by neal62 »

neal62

  • Guest
Re:Help Required.Infected Files
« Reply #2 on: September 20, 2004, 01:51:34 AM »
If your running WinXp do you have the option "System Restore" activated? If you do I suggest you turn that feature off. Many times an infection with this option turned on gets into the system restore files. When this happens the infection will keep reappearing even if you are successful in getting rid of it. Let us know if this is the case.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31078
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Help Required.Infected Files
« Reply #3 on: September 20, 2004, 01:53:49 AM »
You got by change Kodak Easyshare installed? If so look at this http://forum.avast.com/index.php?board=9;action=display;threadid=5796;start=msg58697#msg58697
What I said there about the Logitect backweb goes also for the Kodak backweb.
« Last Edit: September 20, 2004, 01:56:15 AM by Eddy »

Neal

  • Guest
Re:Help Required.Infected Files
« Reply #4 on: September 20, 2004, 08:18:37 PM »
Hi Eddy,You are correct I do have Easyshare on my P.C.
Thanks for the info.
Neal

Neal

  • Guest
Re:Help Required.Infected Files
« Reply #5 on: September 20, 2004, 08:22:39 PM »
Hi Neal62
Yes the infection keeps returning after I thought I had got rid of it.How do I turn off the restore feature ?
Thanks for the help it is much appreciated !
Neal

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Help Required.Infected Files
« Reply #6 on: September 20, 2004, 10:10:44 PM »
Yes the infection keeps returning after I thought I had got rid of it.
How do I turn off the restore feature ?

Control Panel > System > System Restore ... Disable
You can just enable it again after.
To be absolutely sure  ;D, disable > boot > enable  ;)
The best things in life are free.

Neal

  • Guest
Re:Help Required.Infected Files
« Reply #7 on: September 22, 2004, 10:20:27 PM »
Hi All
I turned off the restore feature and ran avast.........
no virus.Thanks guys.
Neal