Hope someone can help me

Viruses and worms
1

I have avast 4.6 Home edition, and I am currently using Win 98 SE. (I know a freak accident caused my other computer XP to stop working, so I am stuck with Win 98.)

My question is, when avast starts up and is running its memory test, it says it detected a Trojan. It recommends me to Move it to chest, which I do. but then the same message shows up everytime I run or even start Avast. when I went to memory chest, I ran a scan on the files in it, and a voice started warning me, telling me this computer has a virus. There is an option of deleting it, but I am not sure if thats the right thing to do. Any help would be more then appreciated. Thank you in advance. :cry:

Name: INQFEP.EXE
Original Location: C:\WINDOWS
Virus: Win32:NcaseSpy[Trj]

Name:OFOPOR.EXE
Original Location: C:\WINDOWS
Virus: Win32:NcaseSpy[Trj]

Name:qlcrazib.exe
Original Location: C:\WINDOWS
Virus: Win32:NcaseSpy[Trj]

Name:ujkxmtkt.exe
Original Location: C:\WINDOWS
Virus: Win32:NcaseSpy[Trj]

Name:URIFCZUH.EXE
Original Location: C:\WINDOWS
Virus: Win32:NcaseSpy[Trj]

2

Hi,

  • try running an avast complete/thorough/archive scan in SafeMode (F8-Boot); move findings to chest

  • scan & clean with Ad-Aware & SPYBOT in SafeMode several times; reboot normally, if problem persists, please post a hijackthis-Log here for diagnosis

-also secure your browser & system better, or best switch to a more secure browser

→ Links & Info via “VirusRemoval” below in my sig

3

ok thank you.

I installed both Adware and Spybot, and scanned my computer, But I am afraid the computer still has the virus, so I did the only thing I can think of I deleted the virus. I just hope that was good.

-thank you again.

4

Why?
Did you run a full scanning with avast? (archive scanning checked)

5

Check out this forum thread - http://forum.avast.com/index.php?topic=7154.msg56464#msg56464

6

NCase NCasePackage NCasePackage.exe (in case anyone is searching for this)

Here’s what I did; I had the Avast Popup finding the trojan in this file. as soon as I told it to delete it, it would pop up again.

Try this, not only for this particular one, but others as well: I’ve used this technique on others and it has worked.

Find the exact file and location; in this case e:\temp\NcasePackage.exe
(I have a triple boot pc, and XP is on E:)

Go offline, delete the bad file or have the anti-virus delete it.
Then go into the same directory and create a dummy file (can be a text file)
with the same name, use same case of letters as original name.
Then set attribule to read-only. I didn’t get the alert anymore.
Apparently it thinks it’s there and doesn’t try to put it on my system anymore.

I’ve done this also when a program creates a folder. I just create an empty
folder (same as directory) and set it as read-only. I didn’t have any problems
after that.

Let me know if it works for you.

Ken