Author Topic: Is this really a virus?  (Read 6046 times)

0 Members and 1 Guest are viewing this topic.

HypnoT0AD

  • Guest
Is this really a virus?
« on: August 04, 2004, 01:26:34 AM »
Yesterday Avast updated its virus database and since then has been finding this virus all the time.

It says I have a trojan32 (other) in:

c:\windows\tgbcde\library32.dll

Now I don't even have a directory called 'tgbcde' if I use the find function in windows XP it can't find library32.dll.

If I start Avast 4.0 Home from the Simple User Interface it says this virus is their, I can't delete it but can move it, if I choose move then all seems well until I reboot and it says it's back in the original place.

Once it's moved if Avast rescans the memory it says it's okay.

I have rebooted and deleted it several times during the boot scan but it always says it's back again. But you can't delete it when you have booted up and you can't even move or delete the one it put's in the 'moved' folder. Which is the only one you can see on my computer.

Any ideas????

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Is this really a virus?
« Reply #1 on: August 04, 2004, 02:05:36 AM »
there is a new update.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

HypnoT0AD

  • Guest
Re:Is this really a virus?
« Reply #2 on: August 04, 2004, 02:21:28 AM »
I downloaded the update and it says it's older than my version which is:

Vps: Already up to date (current version 0432-1)

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Is this really a virus?
« Reply #3 on: August 04, 2004, 03:12:40 AM »
Hi HypnoT0AD,
Welcome to the Forum.
Quote
Vps: Already up to date (current version 0432-1)
You're right that's the latest update as far as I know.
I'm sure someone will be along shortly with additional help.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Is this really a virus?
« Reply #4 on: August 04, 2004, 04:34:25 AM »
HypnoT0AD, did you try to confirm it by on-line scanning (see http://www.security-ops.tk/ for a lot of suggestions)  ;)
The best things in life are free.

techie101

  • Guest
Re:Is this really a virus?
« Reply #5 on: August 04, 2004, 04:46:17 AM »
Hypno,

I hate to tell you this, but you really are infected.
You have the Trojan virus "Banker".
It creates the folder that you have found and modifies your registry.

Read this for info and removal instructions.

http://uk.trendmicro-europe.com/enterprise/security_info/ve_detail.php?Vname=TROJ_BANKER.N

Good luck




HypnoT0AD

  • Guest
Re:Is this really a virus?
« Reply #6 on: August 04, 2004, 10:37:13 AM »
Thanks for the information it was much appreciated.

The funny thing was the directory could not be found using the find/search function even if set to find hidden files/folders.

I found the directory using the command prompt and after changing the filenames and rebooting I could delete the files and directory.

I then deleted the registry entries as per the site you sent me too.

Seems these virus fools are getting more and more sneaky.

Cheers  

 :)