win32 adware007 Trj

:frowning: need help this Trj is there every single time i restart my pc! I moved it to the chest i deletet everything successfull and still next start is there again!! :cry:

PLEASE HELP :-*

:-[ sorry = sort of embryo thinking…

OS Windows XP
Alwil Software\Avast4 home edition
Files infected:
Windows\system32\exdl.exe
Windows\system32\exdl0.exe
Windows\system32\mqexdlm.srg

if I do need to give more details please let me know, i don’t have enough experience in fixing computers only using them

:wink:
THANKS!

Sory to say, but basicly you did was: Goin to a doctor and just sayin I have a problem without telling more details. How do you expect the man to help you?

Please tell us:
What OS are you using? (exact version, sp’s etc)
What exact version of Avast?
What file is detected as being infeted?
What is the location of the file?
etc etc…

And if you want to have a “clean” system, click on the link in my signature and do as told/explained in the malware removal section.

Wow… same Virus, different story…

This virus seems to copy itself just before i press delete/Move to chest(have tried both) Avast´s Resident Scanner have found atleast 100 of this virus. it still keeps coming.

I Know that a system boot scan will help(with automated Delete option ON) but my question is: Is it possible for a virus to “copy” itself, and how can i prevent it?

Disable system restore and reboot. That will solve the problem.

Start > Control Panel > System > System restore > Disable
Click Apply
Enable it again
Click Ok :wink:

Yay… thank you Eddy and Technical!

Just ran the System Boot Scan, it found some viruses in mt G:\windows\system32, i deleted them all… fingers crossed that it doesnt crash… hehe… lucky me, i have a backup harddrive… :stuck_out_tongue:

Thank you again for such a fast reply!

excuse me for intruding…but wouldn’t disabling system restore erase everything?..I have no clue.

disabling just erases the restore points and then you must re-enable and create new restore point . ;D

I actually knew the answer to that problem, but you all got in before me :slight_smile:

This is not the ‘best’ way all the times…
Better is send the virus (file, email attachment, etc.) to Chest for further analysis.
Sometimes it could be not a real virus (false positive), sometimes you ‘need’ the file as it is a system one… ::slight_smile: