Author Topic: Help! My avast deteceted two virus yesterday C:\windows\system32\config\SOFTWARE  (Read 6428 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
I tried to boot scan but avast couldn't detected it. And when I try to run full scan avast detects this two virus  :-\ I tried to delete,move to chest or fix it automatically but it says action postponed until next reboot and when i try to delete or move it to chest it says access denied (5)
« Last Edit: March 06, 2015, 08:36:06 AM by gohan312 »


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Quote
I tried to delete,move to chest or fix it automatically but it says action postponed until next reboot and when i try to delete or move it to chest it says access denied (5)
where are detected files located? .... full file path


EDIT: sorry, did not read your topic title ...so guess this is the location
Quote
C:\windows\system32\config\SOFTWARE

follow instructions in the guide Eddy gave link to
« Last Edit: March 06, 2015, 09:01:35 AM by Pondus »

REDACTED

  • Guest
I tried to scan it with malwarebytes and it couldn't detect this two virus.  :-\ But when I triy to full scan with avast it detects this virus  :o :o :o

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
what malware name does avast give?


REDACTED

  • Guest
oh thanks !  ::)

REDACTED

  • Guest

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Quote
I tried to delete it or move it to chest but doesn't do anything, why?
probably because the file is in use .....


REDACTED

  • Guest
Quote
probably because the file is in use .....

Is there anyway to fix this?   :( :-\ ???

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Follow the instructions in the link I gave you.

REDACTED

  • Guest
Here is it, eddy.  Tell me if I've left any important details out :O So what do I do next?  Thanks!
« Last Edit: March 07, 2015, 06:29:06 AM by gohan312 »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Let me know if the alerts cease after this

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
c:\windows\system32\config\software.log1
c:\windows\system32\config\software.log2
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that