Author Topic: adware problem  (Read 6835 times)

0 Members and 1 Guest are viewing this topic.

Suzem

  • Guest
adware problem
« on: November 07, 2006, 11:44:58 PM »
I received a message this morning that I had infected file, win32:adware gen, or something to that effect.  Unfortunately, in my ignorance, I chose to delete the file.  Now I can't get into the Internet.  What can I do? I am using avast 4.7 home edition.

Thanks,
Suzem

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: adware problem
« Reply #1 on: November 07, 2006, 11:50:37 PM »
Can you remember which file it was that you deleted.

i.e. C:\windows\system32\ file.name

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: adware problem
« Reply #2 on: November 08, 2006, 12:06:50 AM »
Deletion isn't really a good first option (you have none left), 'first do no harm' don't delete, send virus to the chest and investigate.

Check in the avast! Log Viewer (right click avast icon) and check the Warning section of the log viewer, it has details of the detections, malware name, original file name and original location.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Suzem

  • Guest
Re: adware problem
« Reply #3 on: November 08, 2006, 01:45:20 AM »
the log was:  Win32:Adware-gen.[Adw]

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: adware problem
« Reply #4 on: November 08, 2006, 02:05:24 AM »
That is no different to what you have already told us and unfortunately not very helpful. The log contains all the other information requested.

Now I can't get into the Internet.  What can I do?
Why, what errors are you getting ?
The more information you can give us the easier it will be to try and help.

Lost Internet Connection - To recover you internet connection, try downloading and running WinsockXPfix: http://www.snapfiles.com/get/winsockxpfix.html
This assumes you are using XP, what is your OS ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Suzem

  • Guest
Re: adware problem
« Reply #5 on: November 08, 2006, 05:48:30 PM »
Check in the avast! Log Viewer (right click avast icon) and check the Warning section of the log viewer, it has details e detections, malware name, original file name and original location.

Here is what was on the log viewer:

Sign of "Win32:Adware-gen[Adw]" has  been found in "C:\System Volume Information\_restore{F20DC6C2-5212-4F33-8959-AB7D05D4CDB6}\RP852\A0107337.exe" file.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: adware problem
« Reply #6 on: November 08, 2006, 06:23:51 PM »
Well even if windows let avast delete that, which I doubt, it shouldn't have had any effect on your internet connection.

The c:\System Volume Information folder is a part of the system restore function and as such is protected by windows, the only way to clean infected _restore points is to disable system restore and reboot. This will clear ALL _restore points. Once you have disabled system restore, reboot, scan your PC again and if clear enable system restore.

Win XP - How to disable System Restore

So the connection issue is unrelated to this, as I asked earlier, what errors are you getting when you try to connect ?

Did you download and run the winsockxpfix link that I gave you ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Suzem

  • Guest
Re: adware problem
« Reply #7 on: November 08, 2006, 06:30:37 PM »
I just tried to download the winsock file and failed.  If I can't get on the internet, how can I download it?

I am getting the standard message, "This page cannot be displayed. . . The page you are looking for is currently unavailable. . ." when I try to get on the Internet. 

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: adware problem
« Reply #8 on: November 08, 2006, 06:38:54 PM »
If I can't get on the internet, how can I download it?
Can't you use another computer or ask to a friend to do it for you and send it in a floppy or USB drive?
The best things in life are free.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: adware problem
« Reply #9 on: November 08, 2006, 06:56:08 PM »
How are you connecting to post here ?
I assumed you are using a different computer to post, use that to connect and download the fix, save it to a floppy or CD and use that on your system that can't connect.

For XP SP2, you could also try, Windows Start, Run - and type 'netsh winsock reset' without the quotes - this may be enough to fix the issue.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Suzem

  • Guest
Re: adware problem
« Reply #10 on: November 08, 2006, 07:09:29 PM »
Thanks for all your suggestions.

I am using a laptop to connect here.  I am currently rescanning my computer after disabling system restore and rebooting.  If that doesn't work, I will try the winsockfix that you suggested.  Hopefully, one of these things will work.  If not, I will try your most recent suggestion.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: adware problem
« Reply #11 on: November 08, 2006, 07:19:34 PM »
I doubt that a scan or disabling system restore will resolve the connection problem, they seem unrelated. If your version of XP is SP2 then try the netsh winsock reset trick first, no need to go on line to try that. If that doesn't work it will have to be trying the winsockxpfix download.

A belated welcome to the forums, good luck.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Suzem

  • Guest
Re: adware problem
« Reply #12 on: November 08, 2006, 07:55:28 PM »
Unfortunately, none of the fixes you suggested worked.  I tried 'netsh winsock reset,' and the 'winsockxpfix'.  Do you have any other suggestions?

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88898
  • No support PMs thanks
Re: adware problem
« Reply #13 on: November 08, 2006, 08:29:49 PM »
Sorry, they are the standard fixes for lost connections, you still haven't answered what errors are you getting when you try to connect, that may throw some more light on it ?

Without information we are just suggesting standard options or guessing.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Spiritsongs

  • Guest
Re: adware problem
« Reply #14 on: November 08, 2006, 08:30:22 PM »
 :)  Hi Suzem :

     Perhaps it is obvious to the others making suggestions, but it might be helpful if you
     DEFINITELY told us the NAME of the Operating System of the "infected" computer !?
     If Win XP, is it SP1 or SP2 ? Have you recently "upgraded" to IE 7 ? Which IE are
     you using ?

     P.S. Another possibility is to download "LSP-Fix" from www.cexx.org/lspfix.htm using
     the laptop onto a floppy or CD ( the CD is better ), then install it into the other ; there
     is a "Tutorial" on using this program at :
     www.bleepingcomputer.com/tutorials/tutorial59.html .
« Last Edit: November 08, 2006, 08:38:34 PM by Spiritsongs »