Author Topic: What do I do with this virus?  (Read 3719 times)

0 Members and 1 Guest are viewing this topic.

sandytob

  • Guest
What do I do with this virus?
« on: November 21, 2006, 11:21:02 PM »
Hi,

I am really a newbie.  I have always had Norton in the past but there were problems with the newest version on my computer, so I had to get rid of it.  I just downloaded Avast Home version.  I have Windows XP. 

Right after I downloaded, I ran the program.  It did a scan on a blue screen -- I've never seen anything like that....don't know if this was safe mode.  It showed 1 infected file and gave me options as to which action to take.  I tried "repair" but it couldn't, so I moved it to the chest.

The name of the file is delwbi.tmp  The virus or worm is actually Win32:Dialer-711.  It is in C\Documents and Settings\xxxx\Local...         

I checked the virus cleaner tool on the avast site but it does not list that virus as one that it removes.  So, what do I do?  Can I just leave it in the chest and forget about it?  Should I delete it?

Please, I need help in very non technical terms.

Thank you.

sandytob

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89149
  • No support PMs thanks
Re: What do I do with this virus?
« Reply #1 on: November 22, 2006, 12:02:36 AM »
This is a boot-time scan, done before windows boots (not safe mode), this doesn't happen every time (but can be selected when required) and avast is the only AV that can do this (as far as I'm aware). It is a very handy tool for dealing with files that would be difficult to deal with if windows and they were running.

Not all files can be repaired, Trojans generally can't be repaired (either by the VRDB or avast virus cleaner), because the entire content of the file is malware, so it is either move to chest or delete, move to the chest being the best option (first do no harm). When a file is in the chest it can't do any harm and you can investigate the infected warning.

The VRDB only protects certain files, .exe, dll and other system files, it doesn't protect data files or all files, it is not a back-up program, so there are going to be many occasions where repair won't be an option. Since you won't have run this yet it can't offer any repair option.

Only true virus infection can be repaired, e.g. when a virus infects a file it adds a small part to it, provided that file is one that avast's VRDB would monitor and you have run the VRDB, then it may be possible to repair the file to its uninfected state.

However, for the most part so called viruses, trojans (adware/spyware/malware, etc.) can't be repaired because the complete content of the file is malicious.

The virus cleaner tool is designed to clean a small number of viruses and worm infections (listed on the page as you saw) and this is neither a virus or worm.

You have done the right thing, 'first do no harm' don't delete, send virus to the chest and investigate.
There is no rush to delete anything from the chest, a protected area where it can do no harm. Anything that you send to the chest you should leave there for a week or two. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: What do I do with this virus?
« Reply #2 on: November 22, 2006, 02:18:59 AM »
I checked the virus cleaner tool on the avast site
If you have full avast installed, you don't need to run this tools and the installed version will do the same (and more) job.

So, what do I do?  Can I just leave it in the chest and forget about it?  Should I delete it?
Follow David advice... let it on Chest (Quarentine) for more two or three weeks. Than right click it into Chest, scan and if it is infected, delete it.

Are you sure you fully uninstalled Norton?
1) Remove NAV through Add/Remove programs from Control Panel. Boot.
2) Use Symantec removal tool following the three steps defined in the SymNRT tool info or here.
3) Boot.
4) Install avast! and boot.
The best things in life are free.

sandytob

  • Guest
Re: What do I do with this virus?
« Reply #3 on: November 22, 2006, 02:39:49 AM »
Thank you both very much!

sandytob

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: What do I do with this virus?
« Reply #4 on: November 22, 2006, 03:04:54 AM »
Feel free to come back and ask any question you need  8)
Welcome to avast forums  ;)
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89149
  • No support PMs thanks
Re: What do I do with this virus?
« Reply #5 on: November 22, 2006, 01:42:40 PM »
Thank you both very much!

sandytob

Glad we could help, welcome to the forums.
Stick around and browse the forums, especially the sticky topics at the top of each of the forums. They provide a wealth of information to help you get the best from avast.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security