Sent T.Horse to chest and took my Inbox Toolbar with it

Viruses and worms
1

Below is the file information AV said was a T.Horse

12/2/2009 10:10:02 PM SYSTEM 1484 Sign of “Win32:Delf-MZG [Trj]” has been found in “C:\PROGRA~1\Inbox\ctbr.dll” file.

I have used Inbox toolbar for four or five years now and never had any trouble with it. Anyway, how can I restore this file? I can’t find the virus chest and I need it restored so I can get some information I stored in the tool bar back.

Sincerely,

Thea Molette

2

Hi thea67, welcome to the forum :slight_smile:

The Win32:Delf-MZG[Trj] issue was related to the bad update that was released the other day.

What you need to do, is make sure you are updated, open the chest, re-scan the file, and if clean, restore it.

Insturctions for all of those steps, can be found here:
avast! Support article: Restoring a false positive file from the Virus Chest

It is worth noting that a copy will still remain in the chest. Check that the restore has worked, by finding the file in the location it should be, and then if wanted you can delete the file from the chest.

-Scott-

3

The file is not in the chest, but my tool bar is still gone. I tried reinstalling it and it didn’t show up.

Thea67

4

Hi thea67,

I honestly don’t know anything about this that may help…

The only thing that I could suggest is uninstalling it via the control panel, and then re-installing it again (if that is not already what you have done…)

Personally I despise toolbars, but that is another thing altogether for another thread…

-Scott-

5

If it isn’t in the chest, then you didn’t choose Move to Chest upon detection.
avast doesn’t take anonymous action, you have to tell it what action to take in the Home version. In the pro version, you can set automatic actions, but again you must set them.

What of the other choices did you choose (see image example of alert window with options) ?
If you deleted it then avast does as instructed and deletes it, so you would need to use a file recovery tool, something like:
Recuva Deleted File Recovery application - http://www.recuva.com/, also see Builds, http://www.recuva.com/download/builds as the Portable version would help as it doesn’t have to be installed and the slim version if you don’t like toolbars (ironic I know).

The longer you leave it the greater the possibility that the files location will have been overwritten.