win32 adloader-Ac[trj]

[sammieoteal]

please help i have recently encountered the mentioned virus during a thorough scan. it advised to sent it to the chest but when tried that it gave me the error message that there was "not enough room on disk. cannot process "c:\windows\memory.dmp."file.i had to x out the screen in order to continue with scan, hope this was ok..not sure where the trojan has gone or what
any advise

[DavidR]

First it is possible to increase the size of the chest and max file size, etc. Program Settings, Chest, here you can increase sizes.

However, I would ignore this and delete the memory.dmp file. I wouldn't normally say to delete a file, but memory.dmp files aren't used again and are redundant if they are old. When you have a system crash, what is in memory is dumped to that file, this is useful in trying to ascertain what the cause was. If there happened to be  malware loaded in memory that too would be in the memory.dmp file.

If the memory.dmp file is deleted and you have a system crash sometime in the future the file would simply be created, so no problem in deletion.

[Lisandro]

not sure where the trojan has gone or what

Why don't you schecule a boot time scanning to be sure?
Are you using XP?

Click on the Menu button.
Choose Schedule Boot Time Scan.
Doing so displays a dialog allowing you to schedule virus scanning.
Check Archives, if you want scan all the archives.
Specify whether all the disks or just a specific folder should be scanned.
Select Advanced options for scheduling details.
Select how to automatically process infected files.
Choose how to automatically process infected system files.
Click the Schedule button to confirm the settings.

If any file is detected as being infected, please, send to Chest and do not delete it. First do not harm...

[DavidR]

Tech, avast can deal with the infected file, other than it is too big for the chest without adjustment, so no difference if detected by boot-time scan.

As I said in my post, I wouldn't normally delete a file, but did you look at the file name.

[Lisandro]

Tech, avast can deal with the infected file

I know that.

I've posted quoting a question of sammieoteal:

not sure where the trojan has gone or what

I want him to be sure he is clean...

[sammieoteal]

hi again i have went and ran a boot schedule scan and there is quite a few corrupt files but didn't say it detected a virus..i had expected it to give me a list of them so didn't record them.but they were in owner, program files ,and documents..

I am running windows xp sp 2
amd athelon 64 processor
2.20 ghz
512 mb ram

I tried to change the size of chest files before to zero and didn't help to send it there as still got error message
i guess the next step is to delete the memory dmp file but need help as where to find it?
sorry not the brightest bulb in the package when it comes to this.

[DavidR]

There is not only a size for the chest but also a file size limit which is probably the problem as memory dump files could be the same size as your installed memory and that could be very large up to 512MB in your case.

As I said before this file is redundant, so there is no harm in getting rid of it.

[sammieoteal]

so at this point i assume that the trojan has been dealt with? is that correct?
i still need someone to help me delete that memory dmp file as i sure don't want to delete the wrong thing
also what does this virus do?

[DavidR]

The trojan at some point in time was in memory (check file properties for creation date) if it isn't detected on your HDD or in current memory, yes it would be reasonable to assume that it has been dealt with.

I personally haven't a clue what this virus does and I wouldn't spend too much time worrying about that, but a google search would be where I would start, http://www.google.com/search?q=win32%3Aadloader-Ac.

Just navigate using windows explorer to the c:\windows\memory.dmp file and right click on it and select delete. Check your recycle bin and ensure you have the correct file in there. If so, empty the recycle bin otherwise avast could find it there when you next do a scan depending on your settings.

[sammieoteal]

hi David
thank you i think i am good to go again.
Wasn't able to locate the dmp file using windows explorer but found it going directly to windows, i scanned it there and sent it to the chest and this time it took it ..
please let me know if it is safe to leave it there or should i delete it out of chest as well?
thanks a million you helped greatly

[DavidR]

Going directly to the windows folder 'is' using windows explorer, that is what is meant by navigating to the file, first go to the folder and then locate the file.

There is no rush to delete anything from the chest, a protected area where it can do no harm. Anything that you send to the chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.

However, in this case you really didn't need to send it to the chest, so just delete it from the chest now no need to wait.