How to copy and paste and post part of a text document.
there is one date I don’t understand in what i have copy all by hand i have check and rechecked. I thing I have right but , I was trying it one way at the top but couldn’t figured out how to make each line under the other. so i tried a different way and it is what you see after that is next. i found out if you double click each one it 's break up some thing
a bit different.
I don’t understand one date it there it said 2006 for the year and i have only had the computer around a year.can you tell me why that is?
the one that is about. Exterminate i think is a rogue when i 1st started here i had download more then one rogue. that could not be from back then and i have been trying to think and can’t thing of what i did that could have put it on the computer. i am not sure what to do next can some one please help me.i will be back not sure when, but will be on before bed time thanks Sharon
in the chest-I had to hand copy.
i took my time and went over it few times.
Infected files
1st line
Name…Original location…last changed…Transfers time…Virus…Comment
2nd line
Scan.log…C:\Program Files\Exterminate It 6/18\2009 5:45…
3rd line
WLXPhotoAcquireW…C:\Program Files\Windows Live\Pho…2\6]2009 11:01…7\18\2009 Win32:Trojan
then I click User Files and nothing was there. then I click System files witch contain 4
names on all of are 1. kernel32.dill
2.kernel32.dill
3.winsock.dill
4.wsock32.dill
Orginal location
1-4 all are C:\Windows\system32
Last changed
- 02/13/2009 1:49…
- 04/10/2009 11:2…
- 11/02/2006 12:1… question here
- 01/20/2008 07/:23…
Transfer time
1.5/6/2009 6:41:22…
2.5/27/2009 8:24…
3.5/6/2009 6:41…
All chest files
name
1.kernel32.dill
2.kernel132dill
3.scan.log
4.winsock.dill
5.WLXPhotoAcquireW…
wsock32.dill
orginal location
1.C:Windows\system32
2.C:Windows\system32
3.C:Program Files\Exterminate It!
4.winsock.dill C:Windows\system32
5.Program Files\Windows Live\Pho…
6.C:Windows\system32
Last changed
1.2/13/2009 1:49…
2. 4/10/2009 11:2…
3. 6/18/2009 1:45
4. 11/2 2006 12:1…
5.2/6/200911:01…
6. 1/20/2008 7:23…
Transfer time
- 5/6/2009 6:41.2
2.5/27/2009 8:24… - 6/18/2009 5:45…
- 5/6/2009 6:41.2…
5.7/18/2009 2:52…still 5.Win32:trojan… - 5/6/2009 6:41.2
The only section of the chest to look at is the “infected files” section.
The “user files” wouldn’t have anything, unless you had deliberately added something to it.
The system files section is a protected area where Avast can store some information about some of the legitimate files on your computer, in case a repair is required. (It’s not always possible, and only works for some files, not all).
So only look at the “infected” section. Certainly don’t modify or delete anything from the “system” section.
The “exterminate” program, as I mentioned earlier, appears to be a rogue, and you would not want to restore it. In addition, you might want to search your program files and application data folders, and remove anything relating to it. A scan with MBAM would be a good idea.
The other one I was curious about, I think may be a FP. Can’t tell. It’s the one that starts with “WLXPhotoAcquireW” .
If you expand the chest to full size, (maximise) and then move the column headers left/right as needed, you should be able to read the full name/file path.
Post just that one.
Then we will maybe see. More investigation needed.
Hi all,
It seems that that file (WLX…) is a FP
http://forum.avast.com/index.php?topic=46916.0
sorry, I’ve only just noticed they are the same :
-Scott-
It does seem to be a FP.
Sharon, mouse over the file in the chest, right click on it, and from the menu, select “scan”, and if it comes up clean, you can restore it.
Was doubtful of this file initially, because you appear to have made a typo when first reporting it as “…~wizerd…” rather than “…~wizard”.
Wasn’t sure if it was a typo or not, but I’m now thinking it was. Rescanning it will confirm.
this is what came up when i did the scan. i have a lot of things wrote down on paper and i need to organize. when i get like it should be will send.
Scanning of selected files
Program will try to scan 1 selected file(s) in the Chest
Move files to temporary folder: C:\Users\hamm\AppData\Local\Temp_avast4_\unp187165993.tmp
FileID: 0000000006 Original file name: C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe New folder: C:\Users\hamm\AppData\Local\Temp_avast4_\unp187165993.tmp\6.exe
Scan files in the temporary folder: C:\Users\hamm\AppData\Local\Temp_avast4_\unp187165993.tmp
C:\Users\hamm\AppData\Local\Temp_avast4_\unp187165993.tmp\6.exe – no virus –
Action was completed successfull
thanks
i promise to take more time reading and understanding before i post. i will have to go back to writing it on paper 1st it is harder that way but i do it better that way i get lost if i have more the one notepad at a time i copy paste it to the wrong post. now only computer talk.
when the computer came home it took a while to get help because there is a difference between last letter of the model number. mine is the letter N and the other is a M. now the reason is the letter M is for English and the letter N is for Spanish. a teg from Cnet did some research and found that out for me. for a while HP could not fine me till they thought i said the letter M. if i wanted to renew by warranty in order to get help. i need to get the sail slip and prove i got it from walmart. what the sail person said was they had 2 computer and i had to give the time and date how much it cost CNF8161SSZ no not sure if i if the product no can be given or if you need it.
i think some of the trouble of coarse was the bug it had. then the weird screen witch look like a plane looking type of basic different colored. pattern. then there were 2 different black screen. one had words comming up no chance to write any of it down because it went dead. i think all of that would be called cashing. is there some i can do fix that?
some of you might say spend time with a fiend that knows computer and let them show you how. the only ones i know is people here on the nets and other forum that know computer. the ones off line don't even own a computer.
this means i will continua if any ones out there will still help me. i will try my best to keep the subject we talk about witch means computer. i will try to keep all needed programs up to dated. i LL read till i understand more before i post no matter how many post i have... even if there are post i want to answer quick or fill i need to.
i well write post on paper 1st then will type on note pad to check for error’s. i said no long post . i thing this is done right
thanks Sharon
i did fore get this. i scan and restore that one file that tarq said to do. thanks to every that has help and well help me again. Sharon
just adding this on. maybe by in the morning i will have a reply or 2. i am surprized i dd not even get one reply yet that was saying either i did better or not. i wrote every thing in the chest down and like to know if i could or could not delete the rest?
would like to know what you thing of my last post and any commets you may have... i have herd differently how offen the virus scanner is used. how many times the malware. superantispyware and spyblaster gets updated or how many times you use them?