Hello
I keep getting an Avast warning that the Win32: Trojano-191 (Tri) virus is in File Name C:\WINDOWS\mhelv.dll. when I try to enter an Internet site I delete it using Avast then the same virus is identified twice more in different files. I then delete them and everything is ok until I search a new internet site.
I’m using XP fully up to date
I would be grateful if anyone had any ideas on how to sort this out and I’ve attached a screen print of the initial Avast warning
Maurice
I belive this is the trojan you had, http://www.pestpatrol.com/pestinfo/a/aol_password_stealing_trojan_191.asp . If it is then i suggest you use a spyware scanner such was “spy sweeper” which you can get from http://www.webroot.com/wb/downloads/index.php , or “ad-ware” from http://www.lavasoftusa.com/.
Hope this was of some help.
–lee
The easiest way you can try before looking for other solutions to solve this problem is that using boot-time scan (Windows 2000/XP only) then avast will scan and get rid of malware (if it can) at the next Windows start.
This has proved to me several times that this boot-time scan works great. You don’t need to boot in safe mode to scan, I’ve never seen this option in other antivirus I’ve tried.
I had that same trojan last night, will run Spybot right away - thanks for that info! By the way I moved all three files that came up as infected to the Virus Chest - they were .html files that I had saved and were in a folder in My Documents - then deleted from there and AVast has now run two full clean scans.
Just updated and run Spybot, we’re OK 
Thank you everyone so far.
The Boot up scan suggested by F4 (Thank you) identified a lot of files infected by Trojan-191 (and I think later variants). Unfortunately, getting rid of them seems to be a little difficult, most of them were in System and System32.
Consequently, I’m a little wary of deleting them and they won’t repair.
Any thoughts on just deleting them all, as they’re id’ and downloading clean replacements as they crop up as errors?
I’m going to get these little beasties!
Maurice
I want to know about this too. I have already deleted the following files yesterday and would like to replace them if they need to be.
Hewlit-Packard\Digital Imaging\hp psc 2170 series\TO ur\enu\newupdatehtml.exe
C:System Volume Information_restore{6A543CB3-1263-4A81-9673-A42A5EC9EAB5}RP57\A0012404.exe
fhurst
Look in your Recycle Bin at least one of the files might be in there. I highly doubt that the _restore info will be there though.
I think the best thing to do now is contact HP and see what they recomend. Those files no longer exist and I’m not sure what they were for, since the programs that they relate to work fine so far without them.
Thanks for your help and patience,
fhurst
fhurst
I can tell you that the _restore file is from your Sytem Restore function. Since you say that everything is working fine, be sure to make a new restore point. The other file is related to your computer manufacturer and as you said, you should be able to get help from them. Good luck.
If you have any other questions, just post to let some one know.
We have lots of patience. What we really need is a doctor. ;D
Thanks again!
You may not be doctors but you’re fine nurses. ;D
fhurst
Thanks for the compliment. Guess I’d better change my outfit.