I have some serious problems with a virus. It appears every time when I log on to my computer. It seems that this virus comes from the system 32 or win 32 folder… Since a few days Avast finds every hour this virus. I don’t know how this virus got on my computer Cos I always scan my computer and scan every mail, download, or anything that is new on my computer…
I’m using Avast (free edition) and I like it very much… It’s just, it finds the virus but it doesn’t get it off my computer. I’ve searched the web several times for a solution but I can’t find good help. I hope you guys can help me out. Please use clear simple language Cos I’m from Belgium ( I try the best I can with my English ) and I’m not such a computer expert… I saw some topics here about this same subject, but the replies are hard to understand. I hope there is a solution without resetting my computer. If not, well that’s bad luck for me… Anyway I want to get rid of this virus and stop wasting my time on deleting viruses and Trojan horses.
What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ? Check the avast! Log Viewer (right click the avast icon), Warning section, this contains information on all avast detections.
What is your firewall ?
You probably have an undetected trojan that is either restoring the file or downloading it again.
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.
Je zou dit removal tooltje kunnen proberen in veilige modus, te downloaden van onderstaande link:
(You could try this removal tool on these viruses in safe mode, download it from here:) http://wirusy.antivirenkit.pl/en/szczepionki/Agent.html
It’s not good enough… Try David’s suggestions. Ad-aware detection is not good anymore…
Please, follow, at least, the general cleaning procedure:
Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again after step 3).
Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).
As advised before, it will be good if you download, install, update and run AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
Also, if you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.
After you’re clean, use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.
Finally, when you’re clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.