Win32:Adan-003

Okay,

Well foolishly of me i clicked a link whilst talking to a freind on MSN about Hyjacking and such, only because thats what we were talking about and i thought he sent me the link, anyway…

Straight afterwards Avast went mad, along with Microsoft Antispyware, saying i had this virus.

I tried to abort the connection to the site but the damage had been done, i tried to delete it but with no luck. So i scanned again but is still there. (every time i try to talk to someone on MSN it sends them this link, which then gives you the virus)

So i started computer in safe mode and did: Avast, AVG, AD-Aware, Spybot scans and still didn’t delete it.

So i then did a boot scan with Avast but still no luck, any advise anyone could give?

What is the full name and path of the virus?
Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Access denied means, generally, that the file is in use by another process (program) and cannot be repaired/cleaned/moved/handled by avast!

OKay, well i got it sorted, after all those scans i ended up giving in.

Then uninstalled MSN, re-installed and all was (is) fine.

Thanks anyway :slight_smile:

I have the same problem with this virus.

It is in my system restore info as an exe file.

I am able to move it to the chest, but when I do another virus scan it reappears.

I do not have the option of re-formatting as it would take too long to back-up data [too much info].

Can any other program get rid of this file permanently?

You can’t directly get rid of or move files in the System Volume Information or _restore points as it is windows protected storage.

You have to disable system restore, reboot and scan again, if you are clear then you can enable system restore again and reboot.

win me, p4 1.6 gig, 256 mb ram, ie 6, google toolbar
Avast 4.6 vps 0518-3 detects Win32:Adan-022 as adware. Cant repair or move to chest, when deleted can no longer view any webpages. Help!

What was the filename, where was it found
example (C:\windows\system32\infected-filename.xxx)?

There would appear to be something wrong in that statement:

  1. can’t repair is probably correct.
  2. can’t move to chest, if that statement is correct, then it is usually not possible to delete the file for the same reason.

What actions have you taken to try and resolve the problem? e.g. how did you delete it when it couldn’t be moved to the chest.

What errors are you getting when you say “you are no longer able to view any web pages?”