trojan horse need help

my notebook crashed yesterday and started trying to dump the memory. i got it to stop and start in safe mode and run avast it found win32 agent-WOT [trj] in the windows\MEMORY.DMP but cant remove it to chest says not enough space on disk. help please what do i do the notebook is only 2months old

Try a boot time scan with avast! Right click the scanner screen, select ‘schedule a boot time scan’ and reboot when requested. (Or open the tab at the top left of the scanner screen and select the boot time option from there.)

MEMORY.DMP is a memory dump (duh!) so probably one or two GB. Select the option to delete for this file. Any other malware detected, send to the Chest (quarantine).

When you have finished, scan for out-of-date and insecure software using Secunia Online Software Inspector (OSI) and update any vulnerable software: this will help to prevent future infections.

i did try the boot scan sorry :frowning: i should of mentioned it, it didnt find anything also ran asquared, spy bot and windows defender. none of them found anything.

  • The memory.dmp file is created when your system crashes it contains what is in memory at the time of the crash, which could have contained malware. It could be as large as your memory so may not be allowed to send to the chest without changing the settings.

If you have the tools and experience you can examine this file to help discover why the crash happened, if you don’t have this experience and tools, it is worthless to you. The older the file is the less worth it is also.

If windows were to crash again then it would create a new memory.dmp file if one wasn’t present or replace any existing one. So there really is no downside to deleting this memory.dmp file.

so what do i do? just delete the file? im new to this and dont wanna mess up my computer completely.

Yes, that is by far the easiest option and no downside in this case.

Under normal circumstances deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest and investigate.

So, you have gone through that process, you tried to send to the chest but couldn’t, you have investigated on the forums and having found there is no downside you can delete this file.

ok thank you very much for your help. :slight_smile: