Trojan & adware in Chest

Avast Free Antivirus / Premium Security
1

I just did a scan and my Avast came up with a trojan and a few adware. They are currently sitting in my Chest. They are:

Win32:Vapsup-CR[Adw]
Win32:Vapsup-EB[Adw]
Win32:Agent-UDD[trj]
Win32:Vapsup-DH[Adw]
Win32:Vapsup-CJ[Adw]
Win32:Vapsup-CA[Adw]

They were all sitting in my Temp folder.
I know it should be safe to leave them in my Chest folder, but for how long. Or can I delete them?

2

Deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest and investigate. Leave them in the chest (they can’t do any harm there) for a week or two so as to ensure that there are no harmful effects from them having been moved there (incorrect detection, etc.).

3

They are still sitting in my chest file and my computer seems to be going fine. Then I had 2 programs that wanted access to the internet. I have never seen them before, so I blocked them with my firewall. I’ve tried to seach on the net for them with no success. They are:

bgjpcha.exe
pcvmxyru.exe

I ran Spybot Search & Destroy and it didn’t pick them up as a threat, neither does Avast. I can’t delete them as it says ‘access is denied’. So they’ll just sit the dormant for the time being.
If anyone has any ideas how or what these 2 .exe files are, please let me know!

4

The random file naming could mean a vundo infection.
There are zero hits on a google search for the file names, which in itself is suspicious.

You don’t say what your OS is ?

If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode and report the findings (it should product a log file).

  1. If using winXP or Vista SUPERantispyware On-Demand only in free version. Or Spyware Terminator Resident scanner (if you use this don’t install the toolbar or crawler or the anti-virus module). Or a-Squared free On-Demand only with free version(if using win98/ME).

I would suggest SAS if your system is compatible, once downloaded, installed and updated, open the Preferences, Scanning Control tab and tick all the Scanner Options before running your first scan from safe mode (should hopefully combat the access denied error.

5

Sorry, Im running XP Home SP2.
Thanks all for that info, but I started my computer in safe mode. Located the 2 files in question and deleted them. Deleting these 2 files has done no harm to my computer.

6

Deletion as has been said isn’t a good idea for a number of reasons.

  1. if avast hasn’t detected it, sending a sample to avast will improve detections for ‘all’ avast users.

  2. if it happens to have been a good file (unlikely in this case) it could have serious ramifications for your system and you would only find that out ‘after’ deletion.

  3. once deleted a file is gone (not completely may be able to recover with tools) so you can’t easily recover from that deletion.

You can add the file to the User Files (File, Add) section of the avast chest, where they can do no harm whilst you investigate, and send sample to avast, etc.