Hey everyone,
I’m new to avast forum. I’m using avast 4 home edition and always updates iAVS. My computer is connected to the network. Most of the computers are running mcAfee security center antivirus. My problem is, A virus infected my PC. the virus is w32.lovgate-Y[wrm] which creates a copy of my .exe files. even if i delete it, still it comes back. Ive used removal tool from symantec but it says no virus found!why then avast detects it but it cannot remove it?i scheduled a boot-time scan it detects and deletes all those .exe files but still it comes back again and again. can you help me fix this?my PC is always on the network can you help me how avast will block all this virus and remove it permanently on my PC?thanks very much!
What OS?
What file is detected as being infected?
What is the location of that file?
My OS is windows xp sp2. the files that are detected are client.exe,media player.exe, rar.exe all programs that i have installed on my PC, the virus creates a duplicate of that files but if you execute it, it doesnt do anything.It jst floods my folders with .exe files that looks like a small window…you know files that are unknown types?like that…it looks like a window with the filename e.g. client.exe, media player.exe, rar.exe etc…hope you can help…
Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.
I already did a boot time scan and force to delete those files. It has no harm and resides in my d:\Downloads folder.the only problem is everytime i open my downloads folder I can see them there like 4-5 files appear client.exe, docs.pif, documents and settings.txt.exe, etc…now I downloaded STINGER from mcAfee.com and it scans all the files. I hope this will work. by the way my PC is connected to the LAN and I share a printer in my office and the virus i think came from my co-employee that prints to my printer because it came from the c:\windows\system\printers\spool folder. and thanks alot!
Just click on the link in my signature and follow the instructions in the malware removal section. That will take care of your problem.