system
1
can someone please tell me how to get rid of this virus. No matter how many times i run avast or try and delete it it always comes back. Any help would be greatly appreciated.
DavidR
2
Hi, welcome to the forums.
Please Help us to Help you In order to help fully we need more information…
- What OS are you using? is it up to date?
- What avast! version and VPS file (virus database) number, e.g. 0436-4 (see about avast!)
- What was the filename, where was it found
example (C:\windows\system32\infected-filename.xxx)?
- What actions have you taken to try and resolve the problem?
Also see Advice & Tools for virus/trojan/malware Removal & Prevention and Eddy’s Website click the “HiJackThis Section” and also the “Malware removal instructions and applications” section, and follow the directions there and get back to us if you need more help…
system
3
I am running windows xp pro . I am using avast 4.5 home edition with virus file version 0506-0. the virus always shows up in two directories. First is C:documents and settings\local settings\temporary internet files\content.Ie5\AlGNYRGR\Main[1]exe.
The other is C:Windows\4na580rfa.exe. I have tried to fix these with both avast and trying to delete the file manually but they always come back. Thanks for the help it is greatly appreciated.
Eddy
4
Click on the link in my signature and follow the instructions in the malware removal section, as David already advised you to do.
system
5
I followed the instructions as you said in the malware removal section and i still have the same problem. Any other ideas?
system
6
What exact instructions/applications did you try?
Can you post a hijackthis log here (see Eddy’s signature) for analysis please.
–lee
system
7
Hi T_freak,
I had the same problem a few weeks ago and this is how I got rid of it cause basicaly nothing else works. Run a file search for these two files:
Main.exe
Winini.exe (not to be mistaken for win.ini)
They are both found in the C:\Windows directory. Make sure that’s where they are. Once you find them delete them.
Run hijackthis and look for this line:
O4 - HKLM..\Run: [FX] C:\WINDOWS\winini.exe
If and when you find it select and fix it.
Reboot your computer when you’re done.
And that should solve your problem.
If you want you can still post your hijackthis logfile so someone else can analyse it for you to see if there is anything else you can get rid of.
system
8
:)Had this problem a few months ago,had almost all the kreper viruses.what i did was,i ran a virus scan with avast,moved to chest what it picked up,and then i ran my ad_aware se prog,and it picked up something like 22 malware items in registry,and got rid of it for me completely,never had the kreper come up since.Oh by the way empty your cachealso.I just ran a scan and picked up the trogan_ge virus moved it to chest any suggesttions?