My Avast soft didn’t works. When I reinstall Avast soft, I saw than some exe files do not exist. The most important was ashAvast.exe.
Instad of then I find files ash1.tmp to ash9.tmp.
I’ve try to find virus by online scaners- but there was no results.
Can you halp me?
This might be the Bagle Rootkit variant, as the symptoms seem the same, check out these topics.
See http://forum.avast.com/index.php?topic=26554.0
http://forum.avast.com/index.php?topic=25941.0
Download and run the two programs if the above topics match your symptoms.
http://research.pandasoftware.com/blogs/research/archive/2006/12/14/Rootkit-cleaner.aspx
http://www.f-secure.com/blacklight/try_blacklight.html
If this resolves the problem, try a repair of avast. Add Remove programs, select ‘avast! Anti-Virus,’ click the Change/Remove button and scroll down to Repair, click next and follow. You need to be on-line to do this.
If that doesn’t work try, uninstall, reboot, install, reboot.
It would probably be best to first download the latest version of avast http://www.avast.com/eng/programs.html and save it to your HDD, somewhere you can find it again. Use that when you reinstall.
It was Bagle Rootkit. Now I can try to remove it.
Thanks a lot.
No problem, welcome to the forums.
Let us know how you get on, but the applications above have been successful in the past at removing the rootkit element. If not check out this link for more tools, anti-rootkit, detection, removal & protection http://www.antirootkit.com/software/index.htm.
Once you have removed the rootkit element schedule an avast boot time scan.
If you have XP or Win2k, you could enable a boot time scan. Right click the avast icon, select Start avast! Antivirus, Menu, ‘Schedule boot-time scan…’ Or see http://www.digitalred.com/avast-boot-time.php
If you still detecting any strange behavior or even you’re sure you’re not clean, maybe it will be good to test your machine with anti-rootkit applications. I suggest AVG, Panda and/or F-Secure BlackLight.