Win32:Adan-001

[lindamnovak]

  Avast cannot access  the file  adstatkeep.exe    to remove, what do i do?

[DavidR]

- What OS are you using? is it up to date?
- What avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
- Where was it found example (C:\windows\system32\infected-filename.xxx)?

[lindamnovak]

The file name:  c:\program files\adstatus service\adstatkeep.exe

Malware name:  Win32:Adan-001[Adw]

VPS version:  0508-4, 02/27/2005

I get the message:  Access is denied
Cannot process "c:\program files\adstatus service\adstatleep.exe"
everytime I open up avast i get the warning that memory is infected. 

Prior to getting this message i had run an update of avast and had run  a complete virus check, including  all files.  Now i can't "move to chest" the affected file.

I tried to delete file at the next system start, to no avail.

I am using avast v.4.6 home edition

What can I do??

My VPS file version is: 0508-4,  compilation date:  02/27/2005

[Lisandro]

Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Access denied means, generally, that the file is in use by another process (program) and cannot be repaired/cleaned/moved/handled by avast!

[lindamnovak]

I have windows 98

I will try the boot-time scan

Linda

[DavidR]

The reason I asked what OS, are you using is, if you have XP you can schedule a boot-time scan from within avast. Now you have let us know you have win98, boot-time scan is not available on win98.

A google search for adstatleep.exe indicates that this is likely to be spyware, if you haven't got this software, get it install it and run it (freeware).

1. Ad-Aware
2. Spybot Search and Destroy
3. Spywareblaster
4. Download HijackThis.zip

[Lisandro]

I have windows 98 - I will try the boot-time scan

You can´t as it's not a Windows 98 feature, only XP... 
You can try to boot into safe mode (pressing F8 while booting) and trying to scan/remove the virus there.

[lindamnovak]

 
I ran avast from safe mode, did a through scan,
avast still would not move to chest,
but it did let me delete the file.

the file was:  C;\Windows\TEMP\_avast4_\unp251899839

will removing this file affect avast?  the screen appears in black and white now, but seems to be functioning

the infection was:  WIN32:Adan-001[Adw]

after deleteling I rebooted, i opened avast, and my computer is now clean   Is there anything else i need to do?

I do have ad-aware installed,  and i run it weekly

anyway, hopefully my computer is safe, again

thanks for your help!!!!!! 

Linda

[Lisandro]

The file was:  C;\Windows\TEMP\_avast4_\unp251899839
Will removing this file affect avast?

No. It's safe to be deleted, it's a temporary file.

After deleteling I rebooted, i opened avast, and my computer is now clean   Is there anything else i need to do?

Set your sensitivity to High (on the Standard Shield provider settings). 
Keep your avast installation updated and run regular (weekly based) scannings