Virus user-EA49943X-activities.exe

Viruses and worms
1

Virus user-EA49943X-activities.zip or Virus user-EA49943X-activities.exe.

I have just had this virus on my machine and internet explorer no longer works.
I got an NT eventlog entry from Avast reporting this as a generic Win32:Trojan Spy.

I moved it to the VirusChest but the infection has happened.
I wonder how I can remove it - ?

2

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  6. Disable System Restore and then reenable it again.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
3

Somone else reported this,but did not get back.
http://forum.avast.com/index.php?topic=38620.msg323772#msg323772

4

:slight_smile: Thanks for your advice. Avast boottime scan picked up a virus “Win32:Adware-Gen [Adw]”. Displayed as testmh.exe (error-repair.exe)

Internet Explorer did not work still but I reset it settings (by Opening "C:\Progam Files\Internet Explorer\SIGNUP\INSTALL.INS and saying o.k.).

Tom

5

Tombay, to be sure you’re clean, take a look in the steps I’ve posted before :wink: