Author Topic: Novice Needs HELP!  (Read 5103 times)

0 Members and 1 Guest are viewing this topic.

Meg3851

  • Guest
Novice Needs HELP!
« on: February 11, 2009, 07:29:45 PM »
Because I'm new, please excuse me if I am repeating another existing subject. I am not a familiar navigator. Here's my problem:
I got an Avast warning of a Trojan Horse. I do not know the name of the virus, but I did a screen capture of the Avast scan report. Following instructions, I tried first to put them in the chest. When that failed, I tried the other two options. They all failed.

Now what?
The instructions stopped at that point.
In the scan report, the files that could not be moved to the chest were designated as passcode protected.

In the first scan (I did it about 3 times!) the files were in the Temporary Internet Files.
In the last scan, the result message changed to: "Unable to scan...The system cannot find the specified file" and the Operation notes were all error messages.
The files had moved to the main drive: "E:\MAV\mavnet.exe"

I am not a technician, that's about the best information I can supply -- I am completely perplexed -- Has Avast handled the problem or is the sky about to fall in?  :-\

If you can help, please remember you have to spell out the directions for the fix for me -- the novice. I don't understand computer-speak.
Thank you SO much!

ardvark

  • Guest
Re: Novice Needs HELP!
« Reply #1 on: February 11, 2009, 07:46:20 PM »
Hi...

By any chance, did you mean "Navnet.exe?" Also, could you post a copy of the avast scan report you mentioned?

As an option, you can perform the regimen found in post #4 from Tech at this thread...

I would encourage you to perform the following. First, see post #4 by Tech at this thread...

http://forum.avast.com/index.php?topic=39312.msg330023#msg330023

In addition, I suggest an online scan be performed...

http://housecall65.trendmicro.com/

or

http://www.bitdefender.com/scan8/ie.html

Others who post here may know more about this particular piece of malware and/or virus/trojan removal processes and offer different suggestions and solutions.

Hope this helps. :)   

May God Bless you! :)   
« Last Edit: February 11, 2009, 07:49:40 PM by ardvark »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: Novice Needs HELP!
« Reply #2 on: February 11, 2009, 08:09:00 PM »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Meg3851

  • Guest
Re: Novice Needs HELP!
« Reply #3 on: February 11, 2009, 09:05:35 PM »
I performed a screen capture, but I cannot seem to copy and paste it here.  (If I can send you the actual report I will, but you'll have to tell me how)
More carefully coppied, the files all begin with:
E:\MAV\mavinst.exe\%MAINDIR%\

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33926
  • malware fighter
Re: Novice Needs HELP!
« Reply #4 on: February 11, 2009, 09:11:09 PM »
Hi Meg3851,

First try to disinfect your USB with this: http://download.bleepingcomputer.com/sUBs/Flash_Disinfector.exe
Instructions how to use here: http://experi3nc3.wordpress.com/2007/05/10/flash-disinfector-by-subs/

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

JimIT

  • Guest
Re: Novice Needs HELP!
« Reply #5 on: February 11, 2009, 10:24:22 PM »
Hi Meg,

This critter has nothing to do with Norton or Symantec, so no need to run an uninstaller on it.

avast! has been able to identify mavinst.exe, and the first thing I would try is running a boot-time scan with avast! to see if it can remove the thing at next boot.  There are instructions on how to do that here in the forums.  You can also reboot your pc in Safe Mode by tapping your F8 key just before Windows begins to start, and then running avast! under Windows Safe Mode, which might help.

You can also try a couple of free antispyware apps to see if they can help.  One is Malwarebytes, which can be found at www.malwarebytes.org, and has had some success with this Adware/Trojan.

Regardless, those files under that folder (e:\mav\) should be quarantined at least, if avast! or Malwarebytes offers the option.  I would personally have the programs delete them, assuming that "E" refers to your USB drive.

Good luck!