AVAST found 4 trojans and 1 virus

Avast Free Antivirus / Premium Security
1

My friend wants to try AVAST :slight_smile: after uninstalling another Antivirus program on his PC and Intalling AVAST if found the following infection:
Win32: Small-AFK(Trj.)
Win32: Trojan-gen (VC)
Win32: Trojano-1126 (Trj.)
Win32: Perfloger-S (Trj.)
Win32: Perfloger (Trj.)
After performing the full scan of the PC and follow recommended action by AVAST Antivirus program to move the above Virus and Trojans to AVAST chest.
It display the following error message:
Error occured during moving file to chest. The operation is not supported for this type of file.

Can anyone has suggestion to remove virus and torjans on the PC?

2

Which one? Are you sure it is fully uninstalled?

Can you post the full path and name of the infected files?

3
After performing the full scan of the PC and follow recommended action by AVAST Antivirus program to move the above Virus and Trojans to AVAST chest. It display the following error message: Error occured during moving file to chest. The operation is not supported for this type of file.

This usually occurs when the infection is inside an archive file and avast can’t extract it and put the archive back together again. If this is the case, although infected the risk is not immediate, but we would need confirmation of the infected file name and location to confirm.

Archive (zip, etc.) files are by their nature are inert, you need to extract the files and then you have to run them to be a threat. Long before that happens avast’s Standard Shield should have scanned them and before an executable is run that is scanned.

We should be able to provide more detailed help when we get more information. Check the avast Log Viewer, Warning section (right click the avast icon) the details we ask for should be there.

4

Uninstalled Norton Antivirus 2006 using Symantec Removal Utility.

Here is the full path of the infected file:
C:\System Volume Information_restore{8B47F73F-02CB-4448-ACD9-0635A43D2544}\RP152\A0055938.exe\bpk.exe

C:\System Volume Information_restore{8B47F73F-02CB-4448-ACD9-0635A43D2544}\RP152\A0055938.exe\bpkun.exe

C:\System Volume Information_restore{8B47F73F-02CB-4448-ACD9-0635A43D2544}\RP152\A0055938.exe\bpkhk.dll

C:\System Volume Information_restore{8B47F73F-02CB-4448-ACD9-0635A43D2544}\RP152\A0055938.exe\bpkwb.dll

C:\System Volume Information_restore{8B47F73F-02CB-4448-ACD9-0635A43D2544}\RP152\A0055938.exe\bpkr.exe

C:\System Volume Information_restore{8B47F73F-02CB-4448-ACD9-0635A43D2544}\RP153\A0056209.exe\bpk.exe

5

Hi makeurday64,

Files found in

C:\System Volume Information_restore

are protected by the system. They are part of the System Restore feature.

The best course of action is to create a new clean restore point and then delete all previous points. You can find out how to do both here:

http://www.bleepingcomputer.com/tutorials/tutorial56.html

6

Thanks for the info, FreewheelinFrank :slight_smile:

This will surely help a lot!.