Win32:Adan-001

:-[ Avast cannot access the file adstatkeep.exe to remove, what do i do?

  • What OS are you using? is it up to date?
  • What avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
  • Where was it found example (C:\windows\system32\infected-filename.xxx)?

The file name: c:\program files\adstatus service\adstatkeep.exe

Malware name: Win32:Adan-001[Adw]

VPS version: 0508-4, 02/27/2005

I get the message: Access is denied
Cannot process “c:\program files\adstatus service\adstatleep.exe”
everytime I open up avast i get the warning that memory is infected.

Prior to getting this message i had run an update of avast and had run a complete virus check, including all files. Now i can’t “move to chest” the affected file.

I tried to delete file at the next system start, to no avail.

I am using avast v.4.6 home edition

What can I do??

My VPS file version is: 0508-4, compilation date: 02/27/2005

Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Access denied means, generally, that the file is in use by another process (program) and cannot be repaired/cleaned/moved/handled by avast!

I have windows 98

I will try the boot-time scan

Linda

The reason I asked what OS, are you using is, if you have XP you can schedule a boot-time scan from within avast. Now you have let us know you have win98, boot-time scan is not available on win98.

A google search for adstatleep.exe indicates that this is likely to be spyware, if you haven’t got this software, get it install it and run it (freeware).

  1. Ad-Aware
  2. Spybot Search and Destroy
  3. Spywareblaster
  4. Download HijackThis.zip

You can´t as it’s not a Windows 98 feature, only XP… :-
You can try to boot into safe mode (pressing F8 while booting) and trying to scan/remove the virus there.

:smiley:
I ran avast from safe mode, did a through scan,
avast still would not move to chest,
but it did let me delete the file.

the file was: C;\Windows\TEMP_avast4_\unp251899839

will removing this file affect avast? the screen appears in black and white now, but seems to be functioning

the infection was: WIN32:Adan-001[Adw]

after deleteling I rebooted, i opened avast, and my computer is now clean Is there anything else i need to do?

I do have ad-aware installed, and i run it weekly

anyway, hopefully my computer is safe, again

thanks for your help!!!

Linda

No. It’s safe to be deleted, it’s a temporary file.

Set your sensitivity to High (on the Standard Shield provider settings). :wink:
Keep your avast installation updated and run regular (weekly based) scannings :slight_smile: