Author Topic: Virus found  (Read 9319 times)

0 Members and 1 Guest are viewing this topic.

lmw28if

  • Guest
Virus found
« on: October 31, 2004, 12:02:30 AM »
Avast is coming up with finding these viruses ALOT on my PC..wondering what could be causing it.  Most of the filenames are like 3.tmp, 40.tmp..etc. but the virus is usually this:  win32:winadcli-4[trj].
Is this common?  I've been putting it to the Chest as Avast cannot repair.  Any assistance would be appreciated.
Thanks

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48321
  • 63 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Virus found
« Reply #1 on: October 31, 2004, 12:21:57 AM »
lmw28if
Welcome to the forum. ;D
Please help us help you.
What version of Avast! are you using
What vps version?
What OS?
What exactly is the error message? (If you are getting one.)
Please include the full path and name.
etc. etc.
The more info. you supply, the easier it is to help.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

techie101

  • Guest
Re:Virus found
« Reply #2 on: October 31, 2004, 12:51:14 AM »
The "virus" you mentioned is not actually a virus, but a trojan which has nested itself into your Temporary directory.

Open up the Avast Virus Chest and see if the files are listed.  If they are, then you will need to clean out your Temporary Directory.
If the files are not listed, then Avast did not move them successfully.  Avast is telling you that it cannot repair the files which usually requires a manual deletion.

Follow the path/s given by Avast to the files and delete them manually.

Then, reboot the computer.

Download and install A2-Trojan Scanner (freeware) and run a scan.
Get it here:  http://www.emsisoft.com/en/

Remove any trojans detected.

Rerun Avast set to Thorough scan with archives.

Let me know the results.

 :)
« Last Edit: October 31, 2004, 12:51:58 AM by Techie101 »

lmw28if

  • Guest
Re:Virus found
« Reply #3 on: October 31, 2004, 02:25:51 AM »
I'm running winxp sp2.  attached is a screenshot of the warning.  I've been getting these types of warnings alot lately.  any ideas?
Thanks,

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48321
  • 63 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Virus found
« Reply #4 on: October 31, 2004, 02:31:48 AM »
lmw28if
Follow Techie101's advice.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

techie101

  • Guest
Re:Virus found
« Reply #5 on: October 31, 2004, 04:29:43 AM »
Also, I would recommend cleaning out the temporary folder.

Use the instructions found here:

http://support.microsoft.com/default.aspx?scid=kb;en-us;260897

Good luck.
 ;)

lmw28if

  • Guest
Re:Virus found
« Reply #6 on: October 31, 2004, 05:05:23 AM »
After doing a complete scan I had a list of files where some of them said archive is password protected.  Does that have anything to do with, being XP, there are several different users that are pw protected on my pc?  Also, when I'm signed in and within IE I delete cookies and temp files, is that only removing MY temp files not other users' temp files?
Thanks,

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31088
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Virus found
« Reply #7 on: October 31, 2004, 05:10:32 AM »
Quote
Also, when I'm signed in and within IE I delete cookies and temp files, is that only removing MY temp files not other users' temp files?
If you mean temp files in IE, that are only the cached files from IE, not temp files created by other applicactions.

techie101

  • Guest
Re:Virus found
« Reply #8 on: October 31, 2004, 05:37:26 AM »
The temp files you delete should have no effect on system or other users performance.  These files are usually left over from program installations and such.

You will often get "Password Protected" after a scan.  If you examine the files listed, you will notice that most of them are system files.  Windows PPs the files to prevent unauthorized and accidental tampering.

You may also see files with paths to the System Restore which Avast will not scan.  To do these, you will need to disable the System Restore, but be aware that when you disable the SR, all restore points are lost.

Food for thought!   ;)

lmw28if

  • Guest
Re:Virus found
« Reply #9 on: October 31, 2004, 03:18:11 PM »
Why all of a sudden is Avast finding these 'viruses'.  Is it due to a newer VRDB?  Can I delete these immediately when they come in?  What's weird is that I can leave my pc for hours with nothing up and running and I'll come back with a warning page that it found one of these viruses.
Thanks,

techie101

  • Guest
Re:Virus found
« Reply #10 on: October 31, 2004, 03:46:10 PM »
Actually, this is not uncommon.  To us, the computer is not doing anything, but it is ALWAYS doing a task or two.

Some of the trojans, viri and malware are self replicating which means they make little "baby" ones.

Once you clean out the Temp files, Cache, Cookies and such, then run a good antispyware program, you should be ok.

As for the VPS database.....
the new detections could be the result of the updated signature files, but most likely you still have leftover junk that you need to clean out.

Regularly running a full AV scan, AntiSpyware scan and a good Anti-Trojan scanner like A-Squared (A-2) will keep most troublesome "invaders" out of your system.

There is no magic answer here.  It will take some time and effort to get your system "bug" free, but it can....and will be done.

Talk to you when you have accomplished the tasks outlined here.

Good luck.

lmw28if

  • Guest
Re:Virus found
« Reply #11 on: October 31, 2004, 03:59:05 PM »
Thank you for all of your help.  And if, after I've run a full AV scan, bootscan, run AdAware, a2, Yahoo Anti Spy and Spybot S&D I still get this stuff is this just supm I'll have to live with?  And am I safe just deleting these right away vs. sending them to the chest?
Thanks again

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67198
Re:Virus found
« Reply #12 on: October 31, 2004, 04:26:51 PM »
And am I safe just deleting these right away vs. sending them to the chest?

Chest is always safe.
Send file to it, wait some days (maybe one week) and after that you can delete the file from the Chest  ;)
The best things in life are free.

lmw28if

  • Guest
Re:Virus found
« Reply #13 on: November 01, 2004, 12:00:55 AM »
I seem to get this virus warning...the win32 trojan with the filename a.tmp..or 48.tmp..etc....everytime I boot my maching.  What could this be..anything I can do to stop this or is my system doing what it should be doing..finding it...just wondering what's doing it and if I could stop it from coming...
Thanks,

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67198
Re:Virus found
« Reply #14 on: November 01, 2004, 12:30:39 AM »
I seem to get this virus warning...the win32 trojan with the filename a.tmp..or 48.tmp..etc....everytime I boot my maching.  What could this be..anything I can do to stop this or is my system doing what it should be doing..finding it...just wondering what's doing it and if I could stop it from coming...
Thanks,

Which is your operational system?
Did you schedule a boot time scanning?
The best things in life are free.