Display virus issue

I was attacked by an Adware program today which displays an html file in front of my desktop and behind my program icons. Avast has cleaned the adware virus but the file is still displaying upon reboot. ??

The file is C:\WINDOWS/wamhp.html

I’ve deleted the html file - now a white html page displays.

Any thoughts on how to remove this?

Thanks!

Did avast detect the adware or not?
Can you schedule a boot time scanning of avast?
Did you run other antispyware scannings? Like Ad-aware, SpyBot, Ewido and a-squared?
Are you using Windows XP?

Avast seemed to find the adware but this one symptom remains. I’ve run a thorough scan and my hd seems to be clean.

I’ll try other programs.

Am using XP.

I’ll respond later this morning… thanks.

Removing the file has only resulted in a failed call to open the html file hence the blank window you have to find and delete the call to the wamhp.html file.

Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis OR HiJackThis Log file - On-line Analysis 2
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.

How do I find the call to delete it?

Thanks.

By using hijackthis and looking for any reference to the file in the HJT log.

It might also be a startup entru, check Start, Run, type msconfig and look for any reference to the file in the Startup Tab.

Thanks for your help. Spybot found it. I ran scans with Avast, then hijackthis, then Spybot. Must have been a new adware program the others hadn’t found yet.

Glad we could help, welcome to the forums.