Author Topic: Avast has found Trojan but can't delete?  (Read 20462 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast has found Trojan but can't delete?
« on: February 01, 2015, 08:16:48 PM »
hi guys
hope someone can help me as I'm at the end of my tether.
I'll start at the beginning.
I run Windows XP
A few days back I updated a youtube program (dvd video soft) and I wish I hadn't bothered, my pc went crazy. It downloaded all this junk ad stuff and something called Uline? Anyway I deleted it and thought everything was ok.
Then I started to get a Google desktop error read (please see attached .jpg)
so I thought I should just uninstall completely as I've never used it. But I was concerned that it would mess up my PC (if it was attached to other programs?) so I have left it.
anyway, long story short -
yesterday on the right hand side of my screen the google desktop pops up "thank you for installing google desktop"
I had no idea how this happened as a) I didn't install, it was already on PC b) why on earth would that happen now when I'm contemplating uninstalling? does it know!? (haha)
since then my pc has been very slow, browser, opening files, etc.,
Did a boot scan and avast found 3 viruses, one is in chest, one has been deleted and the other (a trojan no less) is yet to be dealt with "on next boot scan" I've done a boot scan (twice) and the trojan is still there.
Why can't avast delete it? am I doing something wrong?
please help as I need my pc for work etc., and honestly can't do without it for more than a day or 2.

sorry guys, forgot to add the image for the trojan, see below! sorry.

 
« Last Edit: February 01, 2015, 08:19:09 PM by buzzybee »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
  • F-Secure user
Re: Avast has found Trojan but can't delete?
« Reply #1 on: February 01, 2015, 08:28:15 PM »
Logs to assist in cleaning malware. https://forum.avast.com/index.php?topic=53253.0


REDACTED

  • Guest
Re: Avast has found Trojan but can't delete?
« Reply #2 on: February 01, 2015, 09:09:56 PM »
hi Pondus
thanks for your reply.
I already have Malwarebytes on my PC and have completed a good few scans since finding virus, but Malwarebytes has come up with nothing. It says my PC is clear of threats (!!)
I really have no idea what to do next...

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
  • F-Secure user
Re: Avast has found Trojan but can't delete?
« Reply #3 on: February 01, 2015, 09:14:58 PM »
Quote
    I really have no idea what to do next...
You follow instructions and attach requested logs


REDACTED

  • Guest
Re: Avast has found Trojan but can't delete?
« Reply #4 on: February 01, 2015, 10:47:31 PM »
Hi Pondus
I'm busy doing a custom MBAM scan but its taking forever! (>.<)

I have just checked log again on Avast (regarding Trojan, that cannot be removed) and it says it is Google Desktop (!)

I have attached jpg... do you think I should just uninstall google desktop? will this solve problem??

thank you!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
  • F-Secure user
Re: Avast has found Trojan but can't delete?
« Reply #5 on: February 01, 2015, 10:54:23 PM »
stop malwarebytes .....

Quote
I have attached jpg... do you think I should just uninstall google desktop? will this solve problem??
i think diagnostic logs will tell us what to do .... then we dont have to guess

attach Farbar Recovery Scan Tool logs (two logs)




Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast has found Trojan but can't delete?
« Reply #6 on: February 01, 2015, 10:54:30 PM »
Hi it depends on the type of google desktop, as there is a bad version around

If you wish you can stop the MBAM scan

Please download Farbar Recovery Scan Tool and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 
  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Select  additions at the bottom
  • Press Scan button.

  • It will produce a log called FRST.txt in the same directory the tool is run from. 
  • Please attach both logs generated.

REDACTED

  • Guest
Re: Avast has found Trojan but can't delete?
« Reply #7 on: February 01, 2015, 11:05:30 PM »
hi Pondus and essexboy,

thank you for your help, I'm beyond grateful!

(apologies for my stupidity!) but do you mean attach the scan log from Avast??

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast has found Trojan but can't delete?
« Reply #8 on: February 01, 2015, 11:12:13 PM »
No FRST will produce two logs attach those :)

REDACTED

  • Guest
Re: Avast has found Trojan but can't delete?
« Reply #9 on: February 01, 2015, 11:18:30 PM »
hi essexboy

oh I'm so sorry!  :-[

ok, I'm going to wait until this scan has finished then I will do the FRST thing. (is it safe?) thanks!

one other thing...I tried to put the trojan into chest but I got a error message "the system cannot find the file specified (2) "  is this good or bad? has it spread? I am so confused right now....  ??? :'(
« Last Edit: February 01, 2015, 11:20:51 PM by buzzybee »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast has found Trojan but can't delete?
« Reply #10 on: February 01, 2015, 11:19:58 PM »
No it means it was probably detected in memory.  I will be going off line now but will be back after lunch tomorrow

REDACTED

  • Guest
Re: Avast has found Trojan but can't delete?
« Reply #11 on: February 01, 2015, 11:22:27 PM »
essexboy,

thank you for your help! hopefully by tomorrow I will have some more info for you.  :)


REDACTED

  • Guest
Re: Avast has found Trojan but can't delete?
« Reply #12 on: February 02, 2015, 02:46:02 PM »
Hey essexboy
Having major problems today. Using my phone for this message.
Can't open a browser connect to Internet and it won't let me update
Avast.
I haven't downloaded FRST yet either! So I don't know what to do???

EDIT: finally downloaded! attached logs essexboy, many thx for your help! will await your instructions. also... should I delete the FRST or keep it on PC???

EDIT 2: re your Google desktop question, forgot to mention that I use XP (!) and have had this pc for about 7/8 years?? so not sure what version of GD this is. It was installed on pc when I got it. Never use it! I definitely want rid of it after this trojan is gone!
« Last Edit: February 02, 2015, 03:29:01 PM by buzzybee »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37698
  • F-Secure user
Re: Avast has found Trojan but can't delete?
« Reply #13 on: February 02, 2015, 03:39:55 PM »
Quote
should I delete the FRST or keep it on PC???
essexboy will remove all tools used when he is finish working your computer
follow his instructions, no more no less



Quote
AVG 2011 (Version: 10.0.1153 - AVG Technologies) Hidden
AVG 2011 (Version: 10.0.424 - AVG Technologies) Hidden
do you have avast and AVG installed?
« Last Edit: February 02, 2015, 03:41:54 PM by Pondus »

REDACTED

  • Guest
Re: Avast has found Trojan but can't delete?
« Reply #14 on: February 02, 2015, 04:21:19 PM »
hi Pondus,
thank you for your reply, I shall await instructions  :)

I have Avast and MBAM installed. Used to have AVG years ago, but deleted that and used MS Essentials then when Microsoft stopped XP updates I had to delete MSE and that was when I started using Avast. There are leftover files from AVG and many other programs that I no longer have on my pc! (>.<)

EDIT hey Pondus / essexboy, I'm busy copying files onto a USB ( worried in case I lose stuff ) and I just got this message (attached jpg) Should I be worried?? Is it spreading???
« Last Edit: February 02, 2015, 04:30:51 PM by buzzybee »