Author Topic: need help, i got infected with loads of trojan  (Read 2619 times)

0 Members and 1 Guest are viewing this topic.

blast000

  • Guest
need help, i got infected with loads of trojan
« on: June 28, 2011, 02:24:25 PM »
I did a full scan on my computer and found tons of trojans, look at picture i attached. they are all running in the memory. Avast cant clean them, i cant select anything in the file i attached. I dont know where the files are, so I cant delete them :S
 ???
whats to do ?

Jose_Lisbon

  • Guest
Re: need help, i got infected with loads of trojan
« Reply #1 on: June 28, 2011, 02:35:21 PM »
What I see in your snapshot are legitim processes that belong to: Spybot, Comodo, Lavasoft, Malwarebytes. Do you have (or had) this programs installed?
« Last Edit: June 28, 2011, 02:37:38 PM by Jose_Lisbon »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: need help, i got infected with loads of trojan
« Reply #2 on: June 28, 2011, 02:42:08 PM »
- Detections in Memory -
My guess is that you are doing a Custom scan in which you have elected to scan Memory and that all these detections are in memory. Since they aren't physical files they can't be moved to the chest, deleted, etc. so there is no action that can be taken, hence the Apply button being greyed out.

The detections in memory are frequently other security applications loading unencrypted virus signatures into memory. Having set off a scan of memory by an antivirus application looking for virus signatures, don't be too surprised if it finds some in memory.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

blast000

  • Guest
Re: need help, i got infected with loads of trojan
« Reply #3 on: June 28, 2011, 02:48:35 PM »
Alright, thank you. I got freaked out for a second  :P

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: need help, i got infected with loads of trojan
« Reply #4 on: June 28, 2011, 03:42:17 PM »
You're welcome, the memory scan really is a bit redundant and can cause unexpected results.

As to the need for a Custom scan, that is another issue:
- With a resident on-access antivirus like avast, the need for frequent on-demand scans is much depreciated. For the most part the on-demand scan is going to be scanning files that would be otherwise be dormant or inert. If they were active files then the on-access file system shield would be scanning them before being created, modified, opened or executed.

I have avast set to do a scheduled weekly Quick scan, set at a time and day that I know the computer will be on. If for some reason my system wasn't on, no big deal I will catch up on the next scheduled scan.

So now we really get to the question, why do you feel the need to do a custom scan ?
That is likely to engage even more dormant/inert files, more so if you elect to scan archives. Unless of course you are using it to limit the files that are scanned.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

blast000

  • Guest
Re: need help, i got infected with loads of trojan
« Reply #5 on: June 28, 2011, 04:31:00 PM »
I used the custom scan to add a full rootkit scan and ticked "scan all files" . I used it to scan some old folders just in case their was anything.  :)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: need help, i got infected with loads of trojan
« Reply #6 on: June 28, 2011, 04:44:57 PM »
Well the rootkit scan happens automatically 8 minutes after boot, so I would say that would give a good indication of the presence of any possible rootkit.

The scan all files is (IMHO) overkill, why scan text files, etc. they aren't a malware target, they don't present an immediate risk (not executable), they are as I mentioned before dormant and inert. But it is your system and your choice.

The most important things to scan are active files and that is covered by the on-access, File System Shield scanner; inert and dormant don't present an immediate threat. Whilst it is a good idea to do this after you have installed avast (and this is offered as an option at the end of the installation) to confirm your system start state. After that it is a bit redundant.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security