Hi. Any assistance greatly appreciated. Unable to delete/move infected files (i.e., “An error has occurred during the processing of results”): “Win32:Trojan-gen{other}”. (3 of them.) And “Win32:Trojan-gen{UPX!}”. (1 of them.) Location:
C:_RESTORE\ARCHIVE\FS32.CAB\A0003495.CPY…
FS42.CAB\A0006943.CPY…
FS14.CAB\A0000506.CPY…
FS14.CAB\A0000510.CPY.
Windows Me operating system. Persistent pop-up: http:out.true-counter.com. Periodically changes homepage to: http:global-finder.com/656387. (To be safe don’t attempt to access these web addresses.)
Possibly has also affected writing messages on webpages - typing this message the letters appear long after I type them.
“Disable System Restore” was already disabled.
Thank you!
Um…
ME can be funny about the System Restore, but disabling the Restore is the only way that Avast can get at the files.
I would try Enabling Restore and restarting the machine, then Disabling it and running Avast again.
This worked for me when I had the same trouble you have now.
Good luck
Thank you for the info, techie. I just tried that (enabled/disabled Restore, ran Avast), yet now there are no Restore archives to be read. Seems to be a bit faster, although I still have the popup. Does Avast scan Internet Explorer? Thanks!
You still have the popup? You mean the virus warning? On what file, exactly? The whole System Restore folder should be gone after following the techies’ procedure.
Anyway, I believe it’s possible to access the System Restore folder from Windows Safe Mode so it was really not necessary to nuke it in its entirety.
Never mind. 
Take care,
Vlk
Just a note: I’m running Windows Xp Pro (2600.xpsp2.030516-0318) and I’ve seen similar problems. But then, this is an a-typical system (that is, I threw out all the useless junk Microsft packaged with it, stealthed and hardened the ports, shut down un-nessesary services, etc.) so it’s not surprising that this configuration wasn’t tested during the Beta cycles.
That is all.
Thanks Vlk, Sarge and techie. I think you’re right, Vlk… While I still have the Restore folder, there are no items in any of its sub-folders. Just glad to get rid of the trojans! ;D I still have the small pop-up though: http:out.true-counter.com - again, don’t try to access this. Any thoughts on how to delete it? (It appears to be adult site related - “search for your favourite porn”.)
The popup obviously isn’t related to a virus issue - so avast won’t help here. I’d suggest getting some ad blocking software such as AdAware that will (quite reliably) save you from these annoyances.
Vlk
Sounds good. Thanks again!
Um… AdAware doesn’t block ads. It removes Spyware/Adware/Malware from your system, and THAT get’s rid of the stealth-installed app that’s streaming ads into your system. If you wanna block ads, get a No-Gif or a No-Java or a Pop-Up Killer.
Matter of fact, get AdAdware AND AnalogX CookieWall AND NoAds AND SPFP. And then pray (can’t hurt) to whatever gods you think will help.
Ad-aware 6.0 appears to have taken care of my browsing problems. Very cool! Free copy available at tucows.com ;D
Fuck TuCows. Get it direct from Lavasoft.Nu
You twit.