win32.trojano-803

Viruses and worms
1

can anyone help me get rid off win32.trojano-803, every time avast gets rid of it, it comes back!

2

Where exactly was the infected File found (full path/folder/filename, e.g. like c:\Windows\system32\virusfile.exe) ?

3

I have that same problem. It was found in D:\Temp\NCasePackage.exe
D:\Temp\NCASEP~1.EXE

WIN 2000

4

Using Windows XP and 2000 allow the user to schedule a boot-time scanning:
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Access denied means, generally, that the file is in use by another process (program) and cannot be repaired/cleaned/moved/handled by avast!

Anyway, is better emptying your temporary Internet files:
To do this go to Internet explorer >Tools > Internet options > Delete files > Click delete all offline content (just to be sure) > click ok.
It might take some time to delete them.

5

It is not that problem - Trojano-803 has been removed many times (after boot scanning) and always back ?!

6

Did you disable the System Restore?

7

how can I do it ? in Windows 2000

8

How to disable system restore: http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001111912274039?OpenDocument&src=sec_doc_nam

But should be like this:

  1. Right click on the “My Computer” icon on the Windows desktop.
  2. Click “Properties”.
  3. Click on the “System Restore”.
  4. Place a tick in “Turn off System Restore on all Drives”.
  5. Click OK.
  6. Close and RESTART your system.
9

Hi Technical,
Win2000 doesn’t have System Restore functionality

@Andy:
please post a hijackthis-Log for diagnosis:
→ see “VirusRemoval” below for info; also look there on how to secure your browser better :wink:

10

Wow… learning… I used Windows 2k one year. I suppose that if we had this feature in Millenium and XP, why is is missing on 2k?
Anyway, I can do any other thing than believe you. My fault :-[

11

I have Windows ME (not used) on first partition and Win 2000 od second partition. It does not matter ?

12

So that us W2k-users don’t have to disable it everytime a piece of malware slips in there
;D ;D

W2k has SFC (system File Check), which is for the really important stuff
in XP: this is imho called SFP(rotection)

13

Hi Andy, again:

please post a hijackthis-Log for diagnosis: -> see "VirusRemoval" below for info; also look there on how to secure your browser better ;)

I assume Win-ME is on C-partition and Win2000 on D-partition ?

14

yes I have Win Me on C and Win 2000 on D partition. What can I do ?

15

you can (re-)read what we recommend, and then do this, or leave it (hint hint: hijackthis-Log)

16
  • I removed internet files many times
  • I used Win 2000 file scanning durring booting many times
  • I can`t disable system restore

and I stiill have a problem …

/“please post a hijackthis-Log for diagnosis:
→ see “VirusRemoval” below for info; also look there on how to secure your browser better”/

what is hijackthis-Log ?
where I can see “VirusRemoval” ?

17

try clicking some of the blue words that float around here, e.g. in the stuff we write, or in the signatures, those are called LINKS:

Just for you:

VirusRemoval: ==> http://snipurl.com/7dk6 <==

Hijackthis: ==> http://www.hijackthis.de/en <==

:wink:

18

Oh thanks !!!

now I known what is a Links I`m really gratefull

(…)