Help Trojan !!!!

Hi
I have picked up a trojan and cant seem to get rid of it. Avast on-access scanner picked it up. I downloaded the virus removal tool, turned off system restore, and turned off scanner. Ran the removal tool and it said that there was nothing there. I have done a complete scan and that says that there is nothing there. But the on-access scanner keeps on picking it up. HELP. the trojan is called

win 32:Trojen-gen (UPX)

Thanks

What is the exact path (filename) where the trojan is detected?

What is your OS?

  1. The removal tool only deals with a limited number of viruses.

Here is file names

:\DOCUME~1\Cliftonz\LOCALS~1\Temp\gaBrWJ.exe

:\DOCUME~1\Cliftonz\LOCALS~1\Temp\ybaK8U.exe

I am using win xp with sp1

thanks

Clear your Temporary documents folder and schedule a boot-time scan from within avast menu.

http://img.photobucket.com/albums/v325/for-dwr/boottime.jpg

Hi David R

I have just cleared my temporary internet files and ran a boot time scan. I had turned off system restore. Started up the comp. again and within the first few minutes on-access scanner found the virus again . Within ten minutes I have already put 10 warnings in the virus chest.

within the first few minutes on-access scanner found the virus again . Within ten minutes I have already put 10 warnings in the virus chest.

Where same place, temp, give the full path? What were you doing at the time?

It sounds like there is some form of exploit that is allowing or generating them. There could well be more going on than that.

Download HijackThis.zip and run it. For an on-line scan of your Hijackthis log file try here http://hijackthis.de/index.php or post your HTJ log here.

I have just downloaded hijack this and sent of my log file.

The virus always comes in temp files and it usually comes after I start the computer

I have just downloaded hijack this and sent of my log file.
Where did you send it?

You can paste the contents of your log on to that second link I gave you and it gives an instant analysis when you click analyse!

The virus always comes in temp files and it usually comes after I start the computer
Are you permanently connected to the Internet?