Author Topic: need help  (Read 2810 times)

0 Members and 1 Guest are viewing this topic.

kvv

  • Guest
need help
« on: November 17, 2006, 11:48:25 AM »
Please help me... there is computer OS Windows 2000 Service Pack 4.... everyday avast finds VBS:Malware [Gen] in c:\winnt\explorer.exe and ADNM says that file was moved to chest... please tell me, how can I cure the computer from that virus?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: need help
« Reply #1 on: November 17, 2006, 11:58:13 AM »
Can you schedule a boot time scanning with avast? Use repair option. If you have run VRDB (virus recovery database) before, maybe you can recover the clean, original file.
Do you have Windows CD to restore the original explorer.exe file?
The best things in life are free.

kvv

  • Guest
Re: need help
« Reply #2 on: November 17, 2006, 12:07:03 PM »
I can take the original explorer.exe file from other computer with the same OS version , but its interesting cause the size of this files are the same (243,472bytes)...

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: need help
« Reply #3 on: November 17, 2006, 12:16:32 PM »
Hi kvv,

It may be that malware has injected a process into explorer.exe, rather than infecting the original file. Try a boot time scan with avast which will remove the Trojan before it can infect the explorer.exe process, or use an anti-Trojan scanner which can remove process-injecting Trojans like AVG Anti-spyware:

http://www.ewido.net/en/

Also, as this is an adware infection, try some specialist adware/spyware scanners:

a-Squared free:

http://www.emsisoft.com/en/software/free/

Ad-Aware:

http://www.download.com/3000-2144-10045910.html

Spybot Search & Destroy:

http://www.safer-networking.org/

Good luck!
     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

kvv

  • Guest
Re: need help
« Reply #4 on: November 17, 2006, 12:20:46 PM »
thanks a lot