Cleaning Trojans

Can someone please tell me how to get rid of

Win32:Tibs-AEE[Trj]

Hi Lennon,

Have you tried a boot time scan with avast!? Right click the scanner screen, select ‘schedule a boot time scan’ and reboot when requested.

scan the computer completly…

Sorry the canned answer, but you can follow the general cleaning procedures:

  1. Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again.

  2. Clean your temporary files. You can use [ur=http://www.stevengould.org/downloads/cleanup/]CleanUp[/url] or the Windows Advanced Care features for that.

  3. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).

  4. It will be good if you download, install, update and run other trojan remover tools: a-squared and/or Free AVG Antispyware (trojan removers). Some users recommend SUPERantispyware or Spyware Terminator.

  5. Use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.

What detected it ?
If avast, what action did you choose and what were the results ?
What is the infected file name, where was it found e.g.

(C:\windows\system32\infected-file-name.xxx) ?
Check the avast! Log Viewer (right click the avast icon), Warning section, this contains information on all avast detections.

It is possible to schedule a boot-time scan and also select a location, see image.

Hi Guys,

This virus was detected by Avast. Here is the necessary information.

Name of File
C:\Documents and Settings\D G\Local Settings\Application Data\Microsoft Outlook\Outlook.pst\Personal Folder\Top of Personal Folder\Inbox[avast! - INFECTED] Happy 2007!\Greeting Card.exe

Result
Infection: Win32:Tibs-AEE[Trj]

Operation
Error occurred during file deleting: The process cannot access the file because it is being used by another process

I have tried a boot-time scan but it does not detect or clean the virus.

I have scanned with spyware terminator but it does not detect this virus.

Any help would be appreciated.

Thanks,

Lennon

The problem is it is in your Inbox (outlook.pst file) and avast can’t extract/delete it from that location without possibly corrupting the or deleting the .pst file with the loss of all emails, not what you want and that is why avast is backing out of it rather than do what many AVs do delete the .pst file.

You will need to manually find and delete the infected email in the Inbox, you are looking for the Subject [avast! - INFECTED] Happy 2007! and it will have an attachment Greeting Card.exe. Once found delete it and then empty the deleted emails folder and compact your email folders, that truly gets rid of it.

Sorry I can’t be of more practical help I don’t use MS Outlook, so you will have to translate what I said about into Outlook(ese).

Avast is able to “unpack” pst/ost files (i.e. scan individual messages stored in these files). However, it can’t really REMOVE the viruses from these files (if any). So: scanning is available, removal isn’t.
If you weren’t able to delete that email manually, as David said, try carefully, disable avast, delete the email, clean your mail recycle bin, enable avast. Do NOT run or execute, or double-click, that email attachment while avast is disabled or you’ll get infected.

q: How can I use avast personal to scan my outlook pst file for virus mails and only delete those mails which contain viruses, and not the complete pst file? Avast currently only seems to check incoming or outgoing mail for virii, but not what is already there.

a: The on-demand scan should be able to check the .pst files, but unfortunatelly, it won’t be able to delete the infected messages (the PST unpacker doesn’t support actions).

In the corresponding resident providers (Outlook/Exchange), however, you can check the option “Scan archives messages on open” - in which case avast! will not only scan the incoming/outgoing messages, but also older messages when you open them.


Once you have recovered from this problem, you might want to consider using web-based email instead of downloading email (and such possible infections) onto your computer.


Thanks all especially Divid. My computer is clean now.

No problem, glad we could help.

A belated welcome to the forums.

Stick around and browse the forums, especially the sticky topics at the top of each of the forums, not to mention the avast help file. They provide a wealth of information to help you get the best from avast.