Virus Chest Is Not Running

Viruses and worms
1

This is my first time on this board, which I suppose is a testament to how great Avast! has been for me the past few years and how strong some other spyware and malware programs have gotten in fighting these various computing ills.

Short Summary: Out of the blue, I come home from work and find my PC is obviously afflicted with some problem. The monitor has these pinstripes running across the screen and my mouse pointer has inexplicably changed from the default pointer to a leaf pointer, and the icon for the Recycling Bin has also been changed. When the PC boots up it alerts me there is a problem, and the text on the screen is not entirely legible, but I can make out the options. It will only boot up on Safe Mode.

I’m running Windows XP SP2 (I can not DL SP3 properly) and my first act was to run a scan with avast Home 4.8 edition. The first alert I got during the thorough scan was as follows:

FILE: C:\Documents and Settings\Home\Application Data\Sun\Java\Deployment\cache\6.0\23\1d19b497-3ba20796

NAME: Java:ClassLoader [Trj]

TYPE: Trojan Horse

I tried to move the item to the chest as recommended, however when I attempted this, I got the following message:

VIRUS CHEST SERVER IS NOT RUNNING. RPC COMMUNICATION FAILED.

The file could not be repaired so I continued the scan to find another similar item:

C:\Documents and Settings\Home\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-7ba8ab78-789e0f82.zip
Java:ClassLoader [Trj]
Trojan Horse

I also had alerts for the following files:
FILE: C:\WINDOWS\system32\spool\prtprocs\w32x86\4CC.tmp
NAME: Win32:Alureon-DR [Rtk]
TYPE: Rookit

FILE: C:\WINDOWS\Temp\4CD.tmp
NAME: Win32:Alureon-EI [Rtk
TYPE: Rookit

The results from http://virusscan.jotti.org/ for the previous two files are as follows:
http://virusscan.jotti.org/en/scanresult/eb664be90a65485bb119d630833f0172a6ce4257
http://virusscan.jotti.org/en/scanresult/3be62e69c0e15f8bc1ee8daa1db4fdd5bfd44a48

I regularly scan with Spybot, Adaware, and Malwarebytes. I am at a complete loss as to what to do from here. The virus chest is not running, and my understanding is that if the RPC Communication Failed, something is wrong. Is there anybody that can help fix this or direct me in a direction that would help solve this? I am attaching a HJT log if that is of any help.

If there is more information that is needed or if this post if not formatted correctly please let me know. Thank you.

2

I am having this same problem.

Can anyone address this problem?

3

Welcome to the forums, hunter371 & sadie13. :slight_smile:

The error RPC often happens as a result of more than one av program running or interference from the remains of an old av program.

What anti-virus program did each of you use before avast and, if it was removed, how was it removed?

4

And what could also cause this error is the malware indicated.
I’d try MBAM, download, install it, update it, run a quick scan, have it remove everything it finds. If it prompts for a restart to complete removal, do so promptly.
Post the scan report.

Applies to the OP.
Sadie13 you haven’t provided enough info, unless it is exactly the same problem and with similar malware detections.

5

I had the exact same problem and ran the MBAM as you suggested. It found lots and lots of trojans, and after removing them it´s finally working! Thanks!

6

Det kommer ordna sej
det gör det alltid
jo det löser sej
så brukar allt bli
det kommer fixa sej tillslut… ;D