New or modified Trojan to Avast scanner

Viruses and worms
1

To The Moderator: igor,

Avast scanner was able to clean a number of viruses and Trojans on the last 24 Hours. Thanks.

Now, How about only one case was not solved? I’ll explain it thoroughly!

  • My Os’s are 2: WinME @ C: & WinXP @ D:

  • Avast installed @ C: to chk D: , and also C:

  • I D/L and installed (with innocence ) a suspicious .exe file using WinXP That Avast could not clean so far.

  • The file name ends with *.exe.exe . I’ll rename it to ?.txt.txt, then compress it as v2avst.zip, then I’ll rename it to v2avst.TXT or to any required file extension (e.g. *.xyz) and I’ll send the file to any protected email.

  • Some results of the virus infections to my WinXP so far are as follows: It constantly prompt: NTSYSMAN.EXE to activate: RASAUTOU.EXE to dialup my ISP.

  • On the first “catch” to this suspicious Trojans was when I found my received bytes (about 7mb) are even less than sent ones. But sent where? I duno!

  • After the dl was completed, this Trojan starts to dial as said above!! But how about if I am on a DSL connection to the internet.? Right now I stopped using my XP.

  • NOW: If this Trojan was really a new “or modified” to Avast, Then how long it may take you to reply me the results? Specially while guessing I may be considered to be an Honorable guest with Avast research team for 1 week period of time.

  • I’ll also inform you about the link of the site that offers this Trojan.

  • Awaiting your inputs. So bye for now.

2

Oh, great! so the readers can write replies and then post it when they press REPLY button. Just Checking!!
:wink:

3

Before you can delete malware, you must make sure that the file(s) are not in use. If they are Windows will not let you remove them.

note: it is Windows preventing you from removing them, not Avast.

Start with running a boottime scan and let us know if that solved it.
(start Avast > Menu > Schedule boot scan)

In addition you may want to have a look at the page in my signature.

4
* I D/L and installed (with innocence ) a suspicious .exe file using WinXP That Avast could not clean so far.
  • The file name ends with *.exe.exe . I’ll rename it to ?.txt.txt, then compress it as v2avst.zip, then I’ll rename it to v2avst.TXT or to any required file extension (e.g. *.xyz) and I’ll send the file to any protected email.

Innocence (not any more), is bliss and dangerous in these times.

There is no need to send the file to anyone if as you stated avast recognised it but was at that time unable to deal with it because of windows protection.

As Eddy said a boot scan is you best option and his site has very useful information, not to mention programs to help.