I have downloaded a .exe file with some suspicious name, but anyway executed it.
I have done that because i know that avast! never let me execute viruses. (Well not this time!)
Then this .exe file apparently do nothing (?!). Well this was very strange.
Anyway, from now on from time to time avast detects a trojan horse (Win32:horst-C [Trj]), recommends me to quarantine, i only agree and look as its ok but then this message comes again some time later…
It looks as if something recreates this trojan every time - and i want to destroy this “something” or block it, or delete it or do something about it, but avast cannot detect it, neither other programs, as i tried some.
The trojan is always created in the directory C:\Documents and Settings\User\Local Settings\Temp\34exmodul32.exe (this number 34 its always changing it seems to be random i have seem some and noted:45, 64, 72… - the rest is always the same).
The system apparently do not suffer from major damages, but three little boring things: sometimes the internet seems to be running a little slow, the win xp auto update feature almost everytime turns off, and the message that avast brings to my eyes everytime its causes me some stress.
No AV has a 100% detection rate, so if you download .exe files from dubious sources, you will eventually get burned.
Do not think that the .exe file has done nothing: it has just quietly compromised your system. Your personal details are probably being sent to crooks, your computer may have become part of a botnet and be taking part in criminal activity, and you will very possibly find more and more spyware programs appearing on your computer as the Trojan you have installed downloads more malware from the internet.
Have you got a third-party firewall like Zone Alarm or Kerio/Sunbelt? If used properly, such a firewall will allow you to block connections from your computer, so if you do inadvertently run a Trojan, you still have a chance to stop it from ‘talking to the mother ship.’
That’s the lecture, now let’s find a solution: have you tried a boot time scan with avast!?
Have you tried the excellent anti-Trojan program Ewido?
Also try scans with Panda online scanner and Trend Micro Housecall- disable avast! beforehand or you will get a virus warning from avast! as it detects the virus signatures.
Thanks! I have visited this threads and tried all the solutions and steps, i think that the main things to do is delete nvsvc file and smss.exe and the winlog key in the regedit is the final solution, when you delete this key the trojan does his final attack and install some exmodul files that avast! detects instantly and after quarantine this all was gone!
I want to ask if there is some place where i can post that suspicious file that started it all, so you can study it and implement the complete removal of this virus in the avast! database, so that avast could clean all automatically or else don’t let the user execute this virus package.
You will need to put the file in a password protected zipped file. Use the password ‘virus’ and just make a note of the password and the name of the malware in the body of the email.
Hi Harryboni :