gromozon

system · 2006-10-27T18:22:35.000Z

Hi, i’ve had many problems with my computer because a virus infected my computer.
The name’s gromozon, and i don’t know why avast didn’t stopped it.
The gromozon auto installed a trojan and an adware.
Avast just block the infection of the trojan too late because the trojan infected the notepad and i must delete notepad.exe
Someone know if are some fixes for this "virus"javascript:replaceText(’ ???', document.postmodify.message);
Huh or updates???

Lisandro · 2006-10-27T18:34:31.000Z

There where some false positives on Notepad.exe file some days ago.
You shouldn’t delete the file but putting it into Chest (Quarentine).

Are you using Windows XP?
If you run a boot time scanning with avast, will it detect anything?
Start avast! > Right click the skin > Schedule a boot-time scanning.
Select for scanning archives.
Boot.

FreewheelinFrank · 2006-10-27T18:39:31.000Z

Just in case, here’s the lowdown on the real Gromozon:

http://pcalsicuro.phpsoft.it/gromozon.pdf

and a removal tool:

http://www.prevx.com/gromozon.asp

system · 2006-10-28T10:45:06.000Z

I put the notepad in quarantine, but i don’t know if i have to delete it or not.
I have win XP and i tried to do a boot-scan but the only thing avast finds is the “win32:agent” somekind of trojan that gromozon installed.
Anyway thanks to FreewheelinFrank for the link, i just removed gromozon.

Lisandro · 2006-10-28T11:35:05.000Z

dekc post:4:

I put the notepad in quarantine, but i don’t know if i have to delete it or not.

No, don’t delete it. Let it there, right click the file and choose scan again.
If the file appears clean, most probably it was a false positive.
Then you can restore the file to the original place.
If not, if it is indeed infected, it won’t harm staying in Chest (it’s safe), you can wait some days to repeat the process above to check if indeed it’s not a false positive.

It won’t harm if:

Disable System Restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;[LN];310405
Then after step four, enable it again.
Clean your temporary files.
Use a-squared, Free AVG Antispyware, SUPERantispyware or Spyware Terminator (trojan removers).

Announcements