need help removing a virus as it will not remove

Viruses and worms
1

my friend who also has avast has a problem…A virus detected says avast, but avast not removing or solving problem. What can be done? the virus it states says it’s
Win32-NcaseSpy

So why won’t anything on avast clear it out? Please help!!! Avast is good, but this virus just stays and not gone away…

2

Hi,

please enter
NCASE
into the board search above → lots of advice

SPYBOT (see below) might also fix it

**

General advice:

what WIN do you have ? Are all ServicePacks and Windowsupdates applied ?

Where exactly was the infected File found (full path/folder/filename, e.g. c:\Windows\system32\virusfile.exe) ?

Sometimes it’s enough to

  • clear all TEMP-folders (via drive CleanUp AND best also manually)
  • empty Temp.Int.Files folder(s) (via IE->Extras-Internetoptions->Delete files, including OFFLINE files) and
  • empty java-Cache or
  • disable system restore on Win ME/XP ( http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm )
    to get rid of it…

test the file with OnlineScanners e.g. from Trend, RAV & KAV (see below) to get a more specific name
(you need to temporarily pause AV-Resident Shield/Monitor/Guard to be able to scan the file online)

(If they all don’t show it as infected, please send it in a password-protected zip-file to
virus@free-av.de/virus (at) asw (dot) cz
Include the Zip-password and a link to this posting in the mailtext)

if it’s of the “trojan-gen” kind: spybot, ad-aware and cwshredder might also help
see www.lurkhere.com ->nicefiles and www.lavasoft.de

-remove the Virus/Malware and it’s system modifications according to VirusInfos
from Avast, VGREP, TrendMicro, Kaspersky;
you might also try searching for the virus name or filename with google

general removal procedure:

  • disable system restore on Win ME/XP
  • kill respective Backdoor/Trojan process with task manager
  • search for the file/process names in the registry; remove the malware’s startup entries in the registry
  • disinfect or (if disinfection is not possible) delete the file; this may be possible only after a reboot

if you still can’t remove it, you could post a logfile of Hijackthis here

-Secure your system:
change passwords, secure shares, install patches/updates for WIN&IE;
disable ActiveX and Scripting in IE except for know secure sites - and better use a secure browser like Opera or Mozilla

  • scan your whole system with updated avast and maybe a 2nd scanner ,e.g. TrendMicro/RAV to check whether your PC is clean :wink:
  • If needed, reenable system restore on Win ME/XP

Further Details and Links via the board search above

3
4
5

Welcome to the forums, nhnonna. :slight_smile:

Can you tell us why you quoted the post above yours?

Are you having some type of problem?

6

I think this is the problem.

I've been using avast for 3 years, a few months ago upgraded to 4.8. Detected 4 viruses yesterday and cannot deal with any of them.

in System Volume Information and in Windows Installer a virus > embedded#dodgy win 32 trojan and also embedded#Xinstalled win 32 trojan.

Anybody who can give some simple straight forward advice? My expertise is journalism NOT computer tech. ANYONE?

Please start a New Topic of your own rather than this four and a bit year old one it will just confuse the topic and we will try to help.

  • Go to this link, http://forum.avast.com/index.php, scroll down to the Viruses and Worms forum and click it, click the New Topic button at the top of the list and post there.