hi, i have a problem with a virus, i scan my PC whit the latest version of virus database for avast home edition 4.8, it found a virus and y disable system restore, and reboot my PC, avast scan the local disk after windows start, it found and remove this virus apparently, however, i have a ghost that create a files in my folder (C:\documents and settings\diego) and i don’t know what do whit this, can you help me?, i attach one of this files, i change the extention .exe to .jpg.
thanks
PD the file was remove
well, yes, it’s virus and scan result by all the antivirus engines are attached in this post.
just please do these:
use Avira Rescue System to do a full scan and let it remove everything that it find.
The Avira AntiVir Rescue System a linux-based application that allows accessing computers that cannot be booted anymore. Thus it is possible to repair a damaged system, to rescue data or to scan the system for virus infections. Just double-click on the rescue system package to burn it to a CD/DVD. You can then use this CD/DVD to boot your computer. The Avira AntiVir Rescue System is updated several times a day so that the most recent security updates are always available. You can download it from here.
After burn it to disc, use it to boot your computer and do a full scan and remove anything that it find.
then, boot in normal mode into windows.
Download, install and update these programs:
Malwarebytes Antimalware: http://www.malwarebytes.org/mbam.php
SUPERAntiSpyware: http://www.superantispyware.com/
SpyBot S&D: http://www.spybot.info/
scan your computer using them, also try to immunize your windows using SpyBot S&D. During installation of SpyBot S&D disable all residents.
Please modify your post and remove the attachment, do not attach suspect or infected files to the forums as that exposes other to accidental infection. It is against forum policy to post malware on the forums.
Not to mention avast could also alert in the topic (as and when it is able to detect the sample), which would defeat the purpose of posting requesting help.
You can use something like a file sharing site, however by far the best method id is to upload the suspect file to virustotal as Omid Farhang has.
Send the sample to virus@avast.com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn’t already there) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.