avast found trojans-delete? or what?-in chest

[bball142023]

i downloaded ie7, cant i just delete the one i found from superanti...and the other 2 in the avast virus chest      or do i have to delete all of my system restores, let me know what u think i should do

[Lisandro]

do i have to delete all of my system restores

If you restore an infected point, you'll have the infection again.
If you don't need the restore points (i.e., your computer is working now), better deleting them and create a new, clean, one.

[bball142023]

i might it isnt working right   now i have the trojans in the virus chest and aybe more  and is it safe to delete the 2 restore trojans(mentioned before) in avast chest and  the one found in superanti...

[Lisandro]

i might it isnt working right   now i have the trojans in the virus chest and aybe more  and is it safe to delete the 2 restore trojans(mentioned before) in avast chest and  the one found in superanti...

Files into Chest are safe to be kept there. No rush to delete them.
To be sure you're clean, I suggest:

1. (if you want) Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
7. Immunize your system with SpywareBlaster or Windows Advanced Care.
8. Check if you have insecure applications with Secunia Software Inspector.

[bball142023]

ok 1)ill delete temp files from internet options
2)scan w avast-and archievefiles-thorogh  in safe mode
then delete all system restores w/o creating one if im right
3)use superanti and malware anti-malware and send items to quarantine not delete them
4)test w anti roots provided
5)make a ht log after completing all this
6)immunize w links prvided
i alreadu used secunia
is this right

[Lisandro]

is this right

I think so...

[bball142023]

i was wondering if i could try to restore to a point that is not infected and also is it possible to delete everything from my computer and start fresh like it was when i bought it- i dont have many things i need  just wondering

[Lisandro]

i was wondering if i could try to restore to a point that is not infected

It's possible, but only testing will say it...

and also is it possible to delete everything from my computer and start fresh like it was when i bought it- i dont have many things i need  just wondering

This is the last solution - format/reinstall - but if like you've said, there are few other things, maybe, it will be the faster solution.

[jennifermapco]

Hello. Avast shows Trojans every time. Delete that trojans(treats) if shows the path like C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp133062928.tmp\6.DLL. If Avast detects the system file like C:\windows\system32\xxx.dll, please do not delete that files it may be harm to your system.
---------------------------------------------------------------------------------------------------------------------------------------
Jennifer
edit by admin (SPAM)

[bball142023]

these are in the virus chest (like i mentioned before) so is it ok to delete them?   becasue i was told to leave them in the chest


Move files to temporary folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp
FileID: 0000000007  Original file name: C:\SYSTEM VOLUME INFORMATION\_RESTORE{21D7D692-4662-421F-93B0-877BC3820711}\RP290\A0087349.DLL  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\7.DLL

FileID: 0000000008  Original file name: C:\SYSTEM VOLUME INFORMATION\_RESTORE{21D7D692-4662-421F-93B0-877BC3820711}\RP292\A0087411.EXE  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\8.EXE

FileID: 0000000005  Original file name: C:\WINDOWS\WT\WTUPDATES\WTWEBDRIVER\FILES\3.3.1.001\NPWTHOST.DLL  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\5.DLL

FileID: 0000000004  Original file name: C:\WINDOWS\WT\WEBDRIVER\WTMULTI.DLL  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\4.DLL

FileID: 0000000006  Original file name: C:\WINDOWS\WT\WTUPDATES\WTWEBDRIVER\FILES\3.3.1.001\WTMULTI.DLL  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\6.DLL

Scan files in the temporary folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp
C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\4.DLL  Win32:Adware-gen [Adw]
C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\5.DLL  Win32:Spyware-gen [trj]
C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\6.DLL  Win32:Adware-gen [Adw]
C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\7.DLL  Win32:Adware-gen [Adw]
C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\8.EXE\nsis.hdr  -- no virus --
C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp125742140.tmp\8.EXE  Win32:Adware-gen [Adw]
------------------------------------------------------------------------------------------

[Lisandro]

File into Chest (Quarantine) are safe to stay there. There is no rush to delete anything from the Chest, a protected area where it can do no harm. Anything that you send to the Chest you should leave there for a few weeks. If after that time you have suffered no adverse effects from moving these to the Chest, scan them again (right clicking the file inside the Chest) and if they are still detected as viruses, delete them.

[bball142023]

i sanned using avast and got more

Virus has been detected!
File Name: A0091307.dll
FileID: 10
Virus Description: Win32:Adware-gen [Adw]

Virus has been detected!
File Name: A0091308.dll
FileID: 11
Virus Description: Win32:Spyware-gen [trj]

Virus has been detected!
File Name: A0091309.dll
FileID: 12
Virus Description: Win32:Adware-gen [Adw]

Virus has been detected!
File Name: A0091846.exe
FileID: 13
Virus Description: Win32:Spyware-gen [trj]

Virus has been detected!
File Name: WTMULTI.DLL
FileID: 4
Virus Description: Win32:Adware-gen [Adw]

Virus has been detected!
File Name: NPWTHOST.DLL
FileID: 5
Virus Description: Win32:Spyware-gen [trj]

Virus has been detected!
File Name: WTMULTI.DLL
FileID: 6
Virus Description: Win32:Adware-gen [Adw]

Virus has been detected!
File Name: A0087349.DLL
FileID: 7
Virus Description: Win32:Adware-gen [Adw]

Virus has been detected!
File Name: A0087411.EXE
FileID: 8
Virus Description: Win32:Adware-gen [Adw]

Virus has been detected!
File Name: Dc1.exe
FileID: 9
Virus Description: Win32:Spyware-gen [trj]

Move files to temporary folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp
FileID: 0000000007  Original file name: C:\SYSTEM VOLUME INFORMATION\_RESTORE{21D7D692-4662-421F-93B0-877BC3820711}\RP290\A0087349.DLL  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\7.DLL
FileID: 0000000008  Original file name: C:\SYSTEM VOLUME INFORMATION\_RESTORE{21D7D692-4662-421F-93B0-877BC3820711}\RP292\A0087411.EXE  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\8.EXE
FileID: 0000000010  Original file name: C:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP304\A0091307.dll  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\10.dll
FileID: 0000000011  Original file name: C:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP304\A0091308.dll  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\11.dll
FileID: 0000000012  Original file name: C:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP304\A0091309.dll  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\12.dll
FileID: 0000000013  Original file name: C:\System Volume Information\_restore{21D7D692-4662-421F-93B0-877BC3820711}\RP313\A0091846.exe  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\13.exe
FileID: 0000000009  Original file name: C:\RECYCLER\S-1-5-21-2914288250-963918322-4271176276-1006\Dc1.exe  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\9.exe
FileID: 0000000005  Original file name: C:\WINDOWS\WT\WTUPDATES\WTWEBDRIVER\FILES\3.3.1.001\NPWTHOST.DLL  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\5.DLL
FileID: 0000000004  Original file name: C:\WINDOWS\WT\WEBDRIVER\WTMULTI.DLL  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\4.DLL
FileID: 0000000006  Original file name: C:\WINDOWS\WT\WTUPDATES\WTWEBDRIVER\FILES\3.3.1.001\WTMULTI.DLL  New folder: C:\DOCUME~1\JESSIE~1\LOCALS~1\Temp\_avast4_\unp259163270.tmp\6.DLL

[Jtaylor83]

Here's the info on this infection:

http://www.bleepingcomputer.com/startups/dc1.exe-18690.html

Also, you have WildTangent. I suggest you download Spybot - Search & Destroy.

[wyrmrider]

IF you do not play wild online games you can deal with wild tangent
do that spybot scan and report back

[bball142023]

i used avast anitroot and got nothin should i download the micro trend or no and do i really have to immunize my system?

wild tangent- my brother plays runescape, do u guys know if i need it, but once i was in my registry and deleted wild tangent and isnt in my programs
 i also used superantispyware and malwarebytes anti-malware and they got nothing i also have adaware, but still will use spybot