Virus found

Avast is coming up with finding these viruses ALOT on my PC…wondering what could be causing it. Most of the filenames are like 3.tmp, 40.tmp…etc. but the virus is usually this: win32:winadcli-4[trj].
Is this common? I’ve been putting it to the Chest as Avast cannot repair. Any assistance would be appreciated.
Thanks

lmw28if
Welcome to the forum. ;D
Please help us help you.
What version of Avast! are you using
What vps version?
What OS?
What exactly is the error message? (If you are getting one.)
Please include the full path and name.
etc. etc.
The more info. you supply, the easier it is to help.

The “virus” you mentioned is not actually a virus, but a trojan which has nested itself into your Temporary directory.

Open up the Avast Virus Chest and see if the files are listed. If they are, then you will need to clean out your Temporary Directory.
If the files are not listed, then Avast did not move them successfully. Avast is telling you that it cannot repair the files which usually requires a manual deletion.

Follow the path/s given by Avast to the files and delete them manually.

Then, reboot the computer.

Download and install A2-Trojan Scanner (freeware) and run a scan.
Get it here: http://www.emsisoft.com/en/

Remove any trojans detected.

Rerun Avast set to Thorough scan with archives.

Let me know the results.

:slight_smile:

I’m running winxp sp2. attached is a screenshot of the warning. I’ve been getting these types of warnings alot lately. any ideas?
Thanks,

lmw28if
Follow Techie101’s advice.

Also, I would recommend cleaning out the temporary folder.

Use the instructions found here:

http://support.microsoft.com/default.aspx?scid=kb;en-us;260897

Good luck.
:wink:

After doing a complete scan I had a list of files where some of them said archive is password protected. Does that have anything to do with, being XP, there are several different users that are pw protected on my pc? Also, when I’m signed in and within IE I delete cookies and temp files, is that only removing MY temp files not other users’ temp files?
Thanks,

Also, when I'm signed in and within IE I delete cookies and temp files, is that only removing MY temp files not other users' temp files?
If you mean temp files in IE, that are only the cached files from IE, not temp files created by other applicactions.

The temp files you delete should have no effect on system or other users performance. These files are usually left over from program installations and such.

You will often get “Password Protected” after a scan. If you examine the files listed, you will notice that most of them are system files. Windows PPs the files to prevent unauthorized and accidental tampering.

You may also see files with paths to the System Restore which Avast will not scan. To do these, you will need to disable the System Restore, but be aware that when you disable the SR, all restore points are lost.

Food for thought! :wink:

Why all of a sudden is Avast finding these ‘viruses’. Is it due to a newer VRDB? Can I delete these immediately when they come in? What’s weird is that I can leave my pc for hours with nothing up and running and I’ll come back with a warning page that it found one of these viruses.
Thanks,

Actually, this is not uncommon. To us, the computer is not doing anything, but it is ALWAYS doing a task or two.

Some of the trojans, viri and malware are self replicating which means they make little “baby” ones.

Once you clean out the Temp files, Cache, Cookies and such, then run a good antispyware program, you should be ok.

As for the VPS database…
the new detections could be the result of the updated signature files, but most likely you still have leftover junk that you need to clean out.

Regularly running a full AV scan, AntiSpyware scan and a good Anti-Trojan scanner like A-Squared (A-2) will keep most troublesome “invaders” out of your system.

There is no magic answer here. It will take some time and effort to get your system “bug” free, but it can…and will be done.

Talk to you when you have accomplished the tasks outlined here.

Good luck.

Thank you for all of your help. And if, after I’ve run a full AV scan, bootscan, run AdAware, a2, Yahoo Anti Spy and Spybot S&D I still get this stuff is this just supm I’ll have to live with? And am I safe just deleting these right away vs. sending them to the chest?
Thanks again

Chest is always safe.
Send file to it, wait some days (maybe one week) and after that you can delete the file from the Chest :wink:

I seem to get this virus warning…the win32 trojan with the filename a.tmp…or 48.tmp…etc…everytime I boot my maching. What could this be…anything I can do to stop this or is my system doing what it should be doing…finding it…just wondering what’s doing it and if I could stop it from coming…
Thanks,

Which is your operational system?
Did you schedule a boot time scanning?

I’m on WIN XP sp2…I have run a boot time scan, a thorough scan, Adaware, spybot s&d, a2, and the Avast virus and worm cleaner…still get these warnings.
thanks,

lmw28if
Please post the full path and name of the file(s) in question.
Thanks

Here’s a screenshot of a few of the files in the chest…hope this helps.

Please, clean your temporary files.
In ‘Links’ on my signature there are a lot of suggestions of applications to do that automatically, my favorite is BeClean.

I hate to beat this to death…but I have cleaned out my temp files…it seems as though these .tmp files keep coming in. Not sure what’s doing it. Is it just supm that has to be dealt with? It just seems to be happening alot lately…