Author Topic: unknown trojan  (Read 2815 times)

0 Members and 1 Guest are viewing this topic.

Tockken

  • Guest
unknown trojan
« on: March 19, 2009, 01:19:34 PM »
Hi, have a difficult problem.. I found a trojan in my system files some time ago, unfortunately i have thrown away the note with its name and when i scan my computer again Avast cant find it. This trojan changes the time to six hours earlier and everytime i change back my internet goes down, i restart my computer and after some time the time changes back again.. I know this isnt very easy to get help with but still. Its called Win32.... something and its a trojan..

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: unknown trojan
« Reply #1 on: March 19, 2009, 01:35:25 PM »
I suggest:

1. Clean your temporary files.
2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
3. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them. After that, into Windows, you can see the Chest to know the file names and paths and the virus names.
4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
6. Disable System Restore and then reenable it again.
7. Immunize your system with SpywareBlaster.
8. Check if you have insecure applications with Secunia Software Inspector.
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: unknown trojan
« Reply #2 on: March 19, 2009, 04:14:40 PM »
Hi, have a difficult problem.. I found a trojan in my system files some time ago, unfortunately i have thrown away the note with its name and when i scan my computer again Avast cant find it.

Check the avast! Log Viewer (right click the avast 'a' icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe

So what is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ? 
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Tockken

  • Guest
Re: unknown trojan
« Reply #3 on: March 19, 2009, 06:08:04 PM »
Hi, have a difficult problem.. I found a trojan in my system files some time ago, unfortunately i have thrown away the note with its name and when i scan my computer again Avast cant find it.

Check the avast! Log Viewer (right click the avast 'a' icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe

So what is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ? 
Thats one more thing, unfortunately i uninstalled avast home when i bought the pro edition, and when i tried to check the virus chest it wasnt there.. I will try Dr cure, and get back, thanks!

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89029
  • No support PMs thanks
Re: unknown trojan
« Reply #4 on: March 19, 2009, 06:13:35 PM »
Yes the chest and its contents would also have been removed when you uninstalled the Home version.

You could simply have entered the Pro licence key into the Home version and if you were on-line it would have converted it to the pro version retaining the chest and any other settings you had made.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security