*** Advice&Tools for virus/trojan/malware Removal & Prevention***

[bob3160]

My "C" drives hold only the OS and program files.  Thats why it's so small. All pics, music, and other data are on my "D" drive.  That way when I restore an image I do not loose any of my data.

Shadowprotect costs about $100 per computer.  It's by far the best HD imaging program available and, in my opinion, well worth the cost.  I'll never be without it.

Simply backing up you OS is actually meaningless. It's simply a program and can always be re-installed.
My importance is placed on my personal files, pictures, documents, emails, etc.
In most instances it's the personal data that's impossible to recreate. It's also the personal date that's now being hijacked in one way or another and in some cases held hostage till you pay to have it released.
If you don't back up the whole computer, you've actually not backed up anything of importance.
The OS and the programs can always be recreated even without a backup.

I don't mind spending $100.00 to purchase a 1.5 to 2.0 TB external HD to use for my total Image backups. I'm not willing to spend $100.00 for "shadowprotect" when the service is already available in my operating system.

[YoKenny]

I don't mind spending $100.00 to purchase a 1.5 to 2.0 TB external HD to use for my total Image backups. I'm not willing to spend $100.00 for "shadowprotect" when the service is already available in my operating system.

I agree

Backup and Restore
 
Now you can easily configure and schedule regular backups of your important files like photos and financial records—just in case.

http://www.microsoft.com/windows/windows-7/features/backup-and-restore.aspx

[ghaliaa]

My computer has apparently downloaded a trojan virus, although I was not downloading at the time and running Avast, but on a public WiFi. There is a blue message on the desktop instructing me that there is Spyware on the computer, and everything I do is infected, including emails, etc. I cannot delete this message, and am getting all kinds of errors popping up. Disconnected asap from internet, and deleted a new file that appeared in programs. Unable to use control-alt-delete to check running files.

I ran a quick scan. Avast found two trojan files, but not able to delete them, in the chest ... Lnk: lnkbaddst-S

I am running WindowsWP. Unable to run SafeMode. NTFS file found on system at bootup, but does boot after scan.

Automatically starts running something called "System Tool" to scan for viruses, but this is the new file I deleted!

Warning: the file AvastSvc.exe is infected.

What can I do??? Will try the instructions above, but found nothing in the forum or on internet about this file.

[Pondus]

you have posted in the wrong place, this topic is for info only

when you need help you should start a new topic

her is a Guide for your problem, read it all before you start

Remove System Tool and SystemTool (Uninstall Guide)
http://www.bleepingcomputer.com/virus-removal/remove-system-tool

[JDourg]

Help!

I was infected with a virus, which I think I have cleaned out.  I did a boot scan, full system scan, malwarebytes.  Everything indicates I am clean.

However, every time I sign on and boot Internet Explorer, Avast blocks a malicious malware.  That is good, of course, but why is this happening every time?  I fear I have a virus somewhere in my PC.  Here is what is being blocked.  Any advice or help is greatly appreciated!

Malware: cikh71lynks66.com/3uk04lved5j3fuqz2t08l7/pnn+sopab5+jcbi+s:

Process: c:\program files\internet explorer\iexplore.exe

[Gargamel360]

Here is a similar case to yours>>http://forum.avast.com/index.php?topic=67750.0

Anyway, start your own topic within this thread, and follow the guide here for starters>>http://forum.avast.com/index.php?topic=53253.0

[nodgeman]

hi all,
i am trying to help out a friend over the phone who has your product and can use some help....sorry if i dont have all the details but she is 2 hours away and her laptop is jammed up and she needs to use it with a deadline approaching....she has a laptop running Windows Vista and has your product set for automatic updates and scans. She let someone use her computer to log into Facebook + it looks like she caught a virus.She keeps getting numerous windows popping up for porn+to sell a fake av program....the trouble is that AVAST says everything is ok, but when i have her try to get updates and run a scan she cant...whatever is in there is blocking her from going to any other websites, but her internet connection is good...its also blocking her from using task manager, system restore, etc.....any ideas?

[bob3160]

hi all,
i am trying to help out a friend over the phone who has your product and can use some help....sorry if i dont have all the details but she is 2 hours away and her laptop is jammed up and she needs to use it with a deadline approaching....she has a laptop running Windows Vista and has your product set for automatic updates and scans. She let someone use her computer to log into Facebook + it looks like she caught a virus.She keeps getting numerous windows popping up for porn+to sell a fake av program....the trouble is that AVAST says everything is ok, but when i have her try to get updates and run a scan she cant...whatever is in there is blocking her from going to any other websites, but her internet connection is good...its also blocking her from using task manager, system restore, etc.....any ideas?

Welcome to the forum,
Please start your own topic so this may be addressed without hijacking a thread not related to your problem. 

[nodgeman]

sorry, I'll try to figure out how to do that....can you let me know how in case i cant?

[nodgeman]

got it....started a new post

[REDACTED]

can you help me with new heur level 9 ? or autorun.inf it can't delete

[DavidR]

Start your own new topic here http://forum.avast.com/index.php?board=4.0 and click the New Topic button at the top of the page; this on is not resolving individual problems but advice and tools that can be used.

There we will need information on your system, Operating System, avast version, information about the detection, malware name, file name, location.

[dimensioninc]

I'm sorry bother you, I'm new in this board, even I don't know how to post a message. I have a big problem, I'm have receiving frequently
messages I have virus "JS:Fake AV-GV, when I finish scanning my computer apparently is clear, no infected files found, but normally after  few days Avast show a message about suspected files. My computer is acting funny when I'm in Internet shows a message from AV "computer have infected file" and immediately star to scan, what I'm doing is shut-of the computer. I have read about this virus and I know is to difficult to remove, maybe it could you help o show me how to post a message asking for help, please.
I'm sorry about my broken english
Thank you
AG 

[DavidR]

Please start your own new topic in this forum http://forum.avast.com/index.php?board=4.0, as mentioned in the post above yours.

[Rappaping]

Here my (no more) personal collection: I'm trying keeping that updated (in red the last posted).

Online file multiscanners (like VirusTotal)
-------------------------------------------

http://www.virscan.org/ o http://virscan.org/

http://www.filterbit.com/

http://vscan.novirusthanks.org/

http://www.viruschief.com/

http://bugbopper.com/SubmitAFile.asp

http://www.garyshood.com/virus/  <------------ also files up to 20 MB and URL checker

http://www.allthreats.com/index.pl <---- also URL analyzer

http://www.anti-virus.by/check/

http://www.offensivecomputing.net/?q=node/1558#comment_form <--- it analyzes doc and pdf files for exploits but needs to ask for a free access


http://malwaresurvival.net/verify-website-or-spam/ <--- also URL scanner

https://www.microsoft.com/security/portal/Submission/Submit.aspx

https://www.webimmune.net/default.asp

http://www.fortiguard.com/antivirus/virus_scanner.html <--- I'm posting this link cause it's an absent in file multiscanners



Analysys report of installers (like ThreatExpert)
-------------------------------------------------

http://www.sunbeltsecurity.com/sandbox/

http://eureka.cyber-ta.org/ <--- it also bypasses API obfuscation

http://anubis.iseclab.org/ <---- it scans also URLs

http://wepawet.iseclab.org/ ---> it analyzes only HTML, flash, java script, pdf files

http://www.offensivecomputing.net/?q=user/reset/69179/1311890323/367fd8fa6c060b3c21c6130a430b0de2 <--- it needs to ask for a free access

http://www.xandora.net/upload/

https://www.vicheck.ca/


http://valkyrie.comodo.com/

http://camas.comodo.com/

https://vms.drweb.com/sendvirus/

http://www.norman.com/security_center/security_tools/



Online Web-site scanners
------------------------

http://www.zerodayscan.com/

http://www.google.com/safebrowsing/diagnostic?site=www.example.com (replace www.example.com with your own site address)

http://www.unmaskparasites.com/

http://sitecheck.sucuri.net/scanner/

https://www.vicheck.ca/submit.php

http://www.urlvoid.com/

http://wepawet.iseclab.org

http://onlinelinkscan.com/

http://safeweb.norton.com/

http://linkscanner.explabs.com/linkscanner/default.aspx

http://hosts-file.net/

http://www.siteadvisor.com/

http://www.browserdefender.com

http://siteanalytics.compete.com/

http://linkscanner.explabs.com/linkscanner/default.aspx

http://siteanalytics.compete.com/

http://online.us.drweb.com/?url=1

http://hackertarget.com/website-scan/


http://www.mywot.com/en/trustseal <----- sites reputation

http://www.websecurityguard.com <----- sites reputation

http://www.malwareblacklist.com/ <------ database of malicious URLs <---new



Safe-connection tests
---------------------

http://www.pcflank.com/

http://www.auditmypc.com/firewall-test.asp

http://security.symantec.com/sscv6/WelcomePage.asp <---- also scanning of your whole system

http://www.hackerwatch.org/probe/


http://www.popupcheck.com/ <---- popup online tester!

http://www.popuptest.com/ <---- other popup online tester (used by Mozilla to test Firefox browser)!



Malware (files, programs, CLSIDs, entries, etc.) lists
------------------------------------------------------

http://www.bleepingcomputer.com

http://www.file.net/process/index.html

http://www.systemlookup.com/

http://whatisprocess.com/

http://www.google.com/custom?hl=en&client=pub-2525978113243420&cof=FORID%3A1%3BAH%3Aleft%3BCX%3AMalware%2520Search%2520Engine%3BL%3Ahttp%3A%2F%2Fwww.google.com%2Fintl%2Fen%2Fimages%2Flogos%2Fcustom_search_logo_sm.gif%3BLH%3A30%3BLP%3A1%3BVLC%3A%23551a8b%3BDIV%3A%23cccccc%3B&adkw=AELymgVi96syFRSdwKJey4pUCj56-TJfLF8FhARL2PLxRvIzvCMSkLAh8jV6r5mNLnP8_NjJviTKKCcJfjtaGvGQl4NSD6OrGYKXXRkqHsTGB76sJGmOqYU&boostcse=0&q=&btnG=Search&cx=000803903574434752404%3Aznxwnaiatxq



Online whole pc scanners
------------------------

A) detection & cleaning

   - http://www.windowsecurity.com/trojanscan/ <--- trojan scanner
 
   - http://www.bitdefender.com/scanner/online/free.html
 
   - http://housecall.trendmicro.com/

B) without disinfection/cleaning (only detection)

   - http://www.kaspersky.com/it/virusscanner

   - http://www.pandasecurity.com/activescan/requirements/?error=javascript
 
   - http://www.emsisoft.com/en/software/ax/?scan=1
 
   - http://www.eset.com/home/products/online-scanner
 
   - http://www.f-secure.com/en_EMEA-Labs/security-threats/tools/online-scanner
   

Online "tracking coockies" scanners
-----------------------------------

http://www.aboutads.info/choices/

http://www.networkadvertising.org/managing/opt_out.asp