Help with virus needed

Viruses and worms
1

I recently downloaded avast home and when I ran the program 2 viruses came up win32:Trojan-gen and VBS:malware I don’t know how to fix the problem I am new to all of this stuff and help would be greatly appreciated.

2

Provide more info please.

  • What OS? (incl. service packs)
  • What file(s) are detected as infected?
  • What is/are the location(s) of the file(s)?
3

I’m sorry like I said I’m new to all of this

I have windows XP home version 2002 service pack 2

when I did a scan it says I have virus Win32:Trojan-gen
and its in c:\program files\myway\mybar\1.bin\mybar.dll

also came up with VBS:malware I dont know what that is

the trojan-gen has come up a few more times when i start up my system and avast scans it. i click on fix and it says it cant and recomended that i put it in the chest so i did that for now
your help is greatly appreciated.

4

Don’t feel sorry just because you are new to this. We all had to start somewhere :wink:

mybar is indeed malware (discription of malware)

I suggest you run a boottime scan and let Avast handle it.
(start Avast > Menu > Schedule boot scan)

After that let us know if the problem is solved.

5

ok for starters how do I set up a boottime scan. And secondly the last time it scanned when I started up my system when I chose the option of fixing it wouldn’t would it be ok to just delete the file even the one the trojan-gen file is in?

6

From Ronget:

I'm sorry to bother you I did a boottime scan before and it gives the option to fix or delete and all that when I chose to fix it says it doesn't should i just click to delete it? will deleting the file that has the trojen-gen virus affect my computer badly in anyway?

Delete it. Only true viruses can be repaired, other malware must (almost) always be deleted. This is how they work (technically).

Malware is causing ‘damage’ to your system, removing it will only make your system healty again so deleting it never harms a system. :smiley:

7

ok I ran the boot time scan and I deleted the files that the trojan-gen and malware was showing up in except for 2 one is c:\windows\Temp\trz5.tmp
the other scrolled off the screen and I didn’t get a chance to write it down but it was also in the windows file.
When I tried to delete them I got a warning because it was a windows file. What do you suggest I do, will deleting it cause any problems? If so how else can I delete it?

8

the second file that is infected is

c:\WINDOWS\system32\mostat.exe

Thank you again for your help.

9

GOOGLE is your friend:
http://www.answersthatwork.com/Tasklist_pages/tasklist_m.htm
→ search for MOSTAT there, and read the info…

==> Install & update SPYBOT (from www.lurkhere.com → nicefiles), then scan & fix with it severall times. reboot, and scan with avast again…

And exercise more caution when installing filesharing (or any other disreputable) programs in the future
:wink: :wink:

10
I got a warning because it was a windows file.
That is a false warning. It is NOT a windows file. You will get to see this if the file is in the \windows folder or in the \windows\system32 folder. But not all files there are Windows files.

Example: You donload my HijackThis Log Analyzer and during install you choose to install it in the windows folder. Although it is in the windows folder it is definatly not a windows file :wink:

11

I see thanks for all of your help. Also I have sybot s-n-d but it didnt pick up any of the viruses that avast said I had.
I’ll schedule a boot time scan and let you know how it goes after I delete everything.

Thanks again :-*