I have avast! 4.8 professional edition installed. I’ve recently noticed my machine has been much slower than usual especially in regards to internet usage. I am running Windows XP and my machine is up to date with all of the latest updates. I installed Spybot and it detected over 32 spyware/malware problems which I had Spybot deal with. After running Spybot, I had Avast run a thorough scan of my entire computer. Avast did detect one virus which was listed as a Win32:Trogan-gen {Other}. I moved the infected file to the Virus Chest and then deleted it. I then had Avast run another thorough scan of my entire computer. Here is the scan report from avast!.
- avast! Report
- This file is generated automatically
- Task ‘Simple user interface’ used
- Started on Sunday, April 05, 2009 11:18:36 AM
- VPS: 090405-0, 04/05/2009
C:\WINDOWS\Temp\Perflib_Perfdata_5e0.dat [E] The process cannot access the file because it is being used by another process (32)
C:\WINDOWS\Temp\Perflib_Perfdata_d94.dat [E] The process cannot access the file because it is being used by another process (32)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\CmnIds.vbs [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\arrow_right.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\btn_signup_52x20.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\more_info.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\sidetable_bottom.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\sidetable_bottom_red.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\sidetable_top.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\sidetable_top_red.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\transpix.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\images\watermark_mys_150x130.gif [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\oemcfg.vbs [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\OEMIds.vbs [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\valert.htm [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\valert_old.htm [E] Archive is password protected. (42056)
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\CTI3GDA3\valert[1].ui\hs~valert.htm [E] Archive is password protected. (42056)
C:\WINDOWS\Temp_avast4_\Webshlock.txt [E] The process cannot access the file because it is being used by another process (32)
Infected files: 0
Total files: 20
Total folders: 12
Total size: 149.3 KB
- Task stopped: Sunday, April 05, 2009 11:18:36 AM
- Run-time was 0 second(s)
When I first ran the scan, I did not have the scan report option turned on, so the above report is from another scan that I ran on my C:\Windows\temp directory only. The original scan report was basically the same.
The item I am concerned about is all of the references to valert[1].ui. Does anyone know if this is a virus that I need to remove? If so, what steps do I take to remove it since Avast is not able to scan the files?
Thanks for your help - Kim