Avast Home Edition has recently discovered an infection in my windows32 folder with the name of wr59063.dll. However, I am unable to successfully move this to the chest. I click on Move to chest, the scan continues, but on the next scan, the infected file is again where it was before. I am also running Spybot Tea Timer and as I understand, this particular file is identified as a Browser Helper Object. I am getting notified of this by Tea Timer but the option to deny it is grayed out.
welcome to the forums.
What is avast detecting it as?
this is possibly a worm. remove spybot because it can conflict with avast. then do a boot time scan. if you have the problem again then do a full scan using malwarebtytes antimalware(mbam) you can get it here: malwarebytes.org. post log of mbam here.
Why can’t it move to the chest, what errors are displayed ?
If you have XP, vista32bit or Win2k, you could enable a boot time scan. Right click the avast icon, select Start avast! Antivirus, a memory scan will take place followed by the opening of the Simple User Interface, Menu, ‘Schedule boot-time scan…’ Or see http://www.digitalred.com/avast-boot-time.php.
Contrary with what ‘nmb’ said, Spybot doesn’t conflict with avast as it isn’t an anti-virus application. The tea-timer has in the past killed the avast ‘a’ icon, which is a user startup item and it protects against new startup entries. However it should notify users before doing this, but many users don’t have the notify option to display.
I would say remove spybot S&D because there are better applications out there and for that alone.
If you haven’t already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).
MalwareBytes Anti-Malware, On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. - 2. SUPERantispyware On-Demand only in free version.
Don’t worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
Thank you all, especially DavidR -
There are no error messages displayed in Avast when I try to put the file in the chest, presuming that it then puts it away successfully - until reboot or next scan when the file is again at its previous location. I will try the boot scan and report the results.
I am somewhat reluctant to get rid of Spybot as it has served me remarkably well over the past several years. Is there a way to keep it and install the software you suggested (Malware Bytes and SuperAntispyware), providing there are no known conflicts?
If not, does any of these two programs provide features Spybot does (immunisation and Tea Timer-like add-on)?
Obviously, if there is no other way to deal with this issue, I will install those programs.
I haven’t used Spybot S&D in a couple of years because I have MBAM realtime protection and WinPatrol that provides equal or better Tea-Timer protection.
You’re welcome, the boot-time scan is unique to avast and is very powerful in dealing with files otherwise in use or unable to be dealt with when windows is running.
There is the possibility that there are other elements hidden/undetected that are restoring the file or downloading it again and that is the reason for suggesting the other tools. What is your firewall ?
Spybot won’t conflict with the others but as YoKenny mentions it hasn’t kept pace with developments in malware and there are better tools. But if you want to keep it that is your choice, but it really has been a passenger in this car crash.
Haha, I won’t.
I’ve been using ZA for my XP for some time now. Normally it’s PC Firewall Plus for Vista.
Any suggestions for firewalls? (anything but Windows native firewall or Norton)
I’ve just downloaded your recommended programs and am about to give them a go.
PC Plus firewall is fine:
Many forum users are using these:
PC Tools Firewall seems to have the least user headaches as it doesn’t seem to be constantly asking the user questions about this and that.
Online Armor for the most parts fine but it has caused some users grief after avast program updates and that is something you have to watch out for.
Comodo is now a suite and you have to do a custom install so as not to install the antivirus element (or use the add remove programs to remove the AV element if already installed), of all the firewalls listed this seems to be the noisiest in asking questions, depending on settings and elements used, so it could be daunting for those not to familiar with firewalls or their systems.
I like firewalls that pop up with a question whether to allow access to internet or trusted zone for programs or Windows components I have installed. Do all of these have this feature?
Most are trying to go in the other direction and keep pop-ups to a dull roar as most users haven’t the slightest idea how to answer the pop-up notification, as they don’t know enough about what is being asked.
That then would be the default setting but most are configurable enough to change the level of notification.