revop and bi-spy (trj)

Viruses and worms
1

Please help :frowning:
I have been trying for days now to delete these Trj,s and nothing seems to delete them. I tryed to put the revop in my chest file to delete from there but i get a message saying The process cannot access the file because it is being used by another process. So please tell me what that means and please help me try and get this out of my computor. Iā€™m new to the comp and really donā€™t know what iā€™m doing so i would really appeicate the help. thank you very much burgandyrose49

2

We need more info to help you fully like

  1. What is your OS i.e windows 98 ect.

  2. what version of avast! have you got

  3. what is the trojans/virus full name

  4. where is it (full path)

All i can say is that the reason you canā€™t just deleat it is because the computer is using it and you canā€™t deleat something in use by your computer. Most trojans do this.
And you will have to stop it from being used before you an deleat it.

ā€“lee

3

Iā€™m sry Lee i forgot to put in the info :-[
ok here they are, Win32: revop(trj)
c:\windows\system32\in10b6s.dill\upx
vps version:0430-1
and Win32 Bispy(trj)
c:\windows\prelns TT.exe
c:\system Volume information
restore {CD 45504F-D983-486E-9
i use windows Xp and i am currently using avast
i hope this is all the info you needed if not let me know
burgandyrose49

4

Click on the link in my signature and follow the steps on that page. That will do it.

5

ok i went to your signature and to be honset with you i know nothing about what to do. I am really computor dumb. I guess what iā€™m saying is i really need to go through this step by step. :-[
I have no idea what any of that means
burgandyrose49

6

Hi,

here youā€™ll find info & removal instructions for this malwareā€¦ :
VGREP
(most helpful are usually the links to Trendmicro, symantec & mcafee)

If you canā€™t resolve the problem on your own, then please read this:
http://forum.avast.com/index.php?board=4;action=display;threadid=5373
& come back here with more infoā€¦ :wink:

e.g. run ad-aware & Spybot
and post a hijackthis-Log

:wink:

7

Well i finilly got into safe mode and now how do i do the troubleshooting steps to get the virus out. I have no idea where to go once iā€™m in safe mode. I had to go through my system configuration utility method to go into safe mode, so please tell me what my next step is. iā€™m so sry iā€™m being such a pest with all this stuff.
burgandyrose49

8

:wink:

Before, just run a thorough scan with avast (archive scanning enabled), and move the infected files to the chestā€¦
or delete them manually with WindowsExplorer
:wink:

9

I tryed to move the virus to my chest and it still wonā€™t delete it, so iā€™m trying to delete it by going into safe mode but once iā€™m in safe mode i have no idea what to do next. I donā€™t know where to go or how to go about it. Like i said iā€™m very new to the computor and i really need the help.
burgandyrose49 ???

10

a) Read this:
how to get to SafeMode

in safeMode go start ā†’ programs ā†’ avast and start your avast scanner doing a full system scan; scan/move the files with it

or go to ā€œMy Computerā€ and go to the folder/files where the infected files areā€¦
See Windows Help on how to open a folder (e.g. doubleclicking it) and how to delete a file
if you canā€™t do this, maybe you should get a friedn/collegue/someone with a bit more experienceā€¦

or run AD-AWARE, SPYBOT & CWSHREDDERE either in SAFEMODE or normallyā€¦

:wink: