Please help! Trojan virus

[new2avast]

I need alot of help!!! Every time i turn on my computer, Avast tells me i have an infected virus on my computer but not to worry and to put it in the chest. So i put it in the chest and i've run scans all the time and it says i have no viruses on my computer. It's a trojan virus "Win32:Small-gen2[trj]" & it's found in the location of C:\DOCUME~1\Sue\LOCALS~1\Temp.  Also when i'm on my computer, Avast tells me that a trojan horse is trying to enter my computer but to abort the connection. It gives me a website that i've never even been to. I have a feeling it might be because of this Win32:Small-gen2[trj] on my computerr but i can't seem to get rid of it. I tried installing SUPERAntiSpyware and i've even done various scans on Trend Micro Housecalls and have cleaned my computer and even deleted all of my temp files. I've tried everything and i can't seem to get rid of this trojan. If anyone can help, i'd appreciate it. Thanks

[FreewheelinFrank]

Hi new2avast,

Here's some standard cleaning advice you can follow:

Look for and remove rootkits (hidden malware):



Panda Antirootkit

Blacklight

AVG Anti-Rootkit

Try a scan with DrWeb CureIT!



Try the usual free adware/spyware scanners.



AVG Anti-Spyware Free (Requires Win2k/XP)

Ad-Aware Free

Spybot Search & Destroy

Download, install and update the programs. Disconnect from the internet (pull the plug) before running scans in Safe Mode if possible.



Always select the option to quarantine any malware found rather than delete it, then you will be able to restore files or registry entries wrongly identified as malware- a rare but not unknown event for any malware scanner.



Try some online scans. (Disable avast! while scanning.)



F-Secure

BitDefender

Panda

Trend Micro Housecall



If still having problems, post a HijackThis! log.

Good luck!

[Lisandro]

Talking almost the same as Frank, but in other way, I suggest:

1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on.
4. Use AVG Antispyware; SUPERantispyware and/or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications. I suggest AVG or Trend Micro RootkitBuster.
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.

[oldman]

Just to add to FWF and Tech's suggestions, if you do use superantispyware, run it in safe mode.

First update SAS Then

Under Configuration and Preferences, click the Preferences button.
Then click the Scanning Control tab.

Under Scanner Options make sure the following are checked
- CHECK ALL BOXES

and do a complete scan.

If still no joy, when you get to #6 in tech's list you may also want to run this scanner, it's similar to Hijackthis, but looks deeper and at more things.

Please download Deckard's System Scanner (DSS) and save it to your Desktop.

• Close all other windows before proceeding.
• Double-click on dss.exe and follow the prompts.
  
• When it has finished, dss will open two Notepads main.txt and extra.txt  -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.