Author Topic: New Trojan found stop avast from running  (Read 3840 times)

0 Members and 1 Guest are viewing this topic.

clementng

  • Guest
New Trojan found stop avast from running
« on: February 20, 2006, 09:52:49 AM »
I had found new trojan or maybe its virus extract itself and save as winlog.exe and winlog.dll in system32 folder, than it add itself a key2 in registry run in startup. Avast fail to detect and stop running at logon windows. After i quickly restart the system to safe mode then move and rename the 2 files and try to find any new create files. Then delete the key in registry.
Restart the windows avast start in tray but without any protection process. now i have to reinstall the avast again.   >:(

I attach the virus files which already rename with .vir extention and rar it. but the file cannot upload so i change the extention to .txt  ;) rename it back to .rar and extract it out and test.
Hopefully avast team will add it to detection.
« Last Edit: February 20, 2006, 11:21:22 AM by igor »

clementng

  • Guest
Re: New Trojan found stop avast from running
« Reply #1 on: February 20, 2006, 10:03:52 AM »
OK! i found the virus name with Kaspersky online scan.  :-\

winlog.exe.vir - infected by Email-Worm.Win32.Bagle.fc

Hope avast will find the way to prevent the virus stop it to scan and run.

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: New Trojan found stop avast from running
« Reply #2 on: February 20, 2006, 02:27:35 PM »
Hi clementng,

Try Ewido: it's good against these process injecting Trojans.

http://www.ewido.net/en/
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog