Repeated Infection

Avast Free Antivirus / Premium Security
1

I use the 4.8 home edition which is up to date. My PC is repeatedly infected with the following virus despite removing it to the chest (in bold):

[b]Original File Name A010259.exe

Original Folder: C:\System Volume Information_restore(0D87d742-B243-4FD5-86CE-0CB3298C84F0)-\RP…

Category: Infected Files

Virus Description: Infected Files

Virus Description: Win32:Trojan-gen (Other)[/b]

The above information was taken from file properties in the virus chest. I currently have 20 versions of this virus in the chest the only difference between them is that they have different original file names such as: A0131202.exe; A0145767.exe.

Just one of the of the viruses is shown as having a completely different original file name and original folder name which are shown as:

acscore.exe

C:\Program Files\Common Files\AOL\Backup\ACS\Current\Suite\comps

2

Hi…

Turn off system restore and have it delete the contents. Then try running Avast again and see what the results are.

As a precaution and using Internet Explorer, go here…

http://www.ewido.net/en/onlinescan/

You will need to accept the ActiveX control if it asks you. Delete anything it finds, especially any entry that is marked with a red circle to the left (of the entry.) Please post back with the results and a log.

Hope this helps. :slight_smile:

Best Regards…

3

Hi, here is the the result of the Ewido scan, Thanks:

ewido anti-spyware online scanner
http://www.ewido.net

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Girw\Cookies\girw@adrevolver[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\Girw\Cookies\girw@atdmt[1].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@bs.serving-sys[2].txt
Risk: Medium

Name: TrackingCookie.Adrevolver
Path: C:\Documents and Settings\Girw\Cookies\girw@media.adrevolver[1].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\Girw\Cookies\girw@mediaplex[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Girw\Cookies\girw@overture[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Girw\Cookies\girw@overture[3].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: C:\Documents and Settings\Girw\Cookies\girw@perf.overture[1].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\Girw\Cookies\girw@questionmarket[1].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\Girw\Cookies\girw@questionmarket[2].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[11].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[1].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[2].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[3].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[4].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[5].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[6].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[7].txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: C:\Documents and Settings\Girw\Cookies\girw@serving-sys[9].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\Girw\Local Settings\Temp\Cookies\girw@doubleclick[1].txt
Risk: Medium

4

Tracking cookies… I won’t worry that much. Maybe you can use some file cleaner in your computer from time to time. Like nCleaner, CCleaner, ATF-Cleaner, Wise Disk Cleaner.

5

Hi…

It appears your system is clean now but I would run avast again if you haven’t already. :slight_smile:

Best Regards…

6

Thanks for your help

7

You’re welcome. Feel free to come back any time you need help or just to change experiences 8)