Win32:Warezov-ASQ - Worm that I cannot kill

Viruses and worms
1

Cannot shift this worm from an Outlook file in the guise of …postcard/postcard.zip/postcard.exe

Avaast picks it up but has error when deleting or putting in chest…

Please can anyone help… ???

2

Is this MS Outlook (not express) ?
If so you can choose to put it in an email folder in Outlook, like Junk or Suspect and delete it from there.

What type of scan are you doing (on-demand, I assume not inbound on-access scan) ?

3

avast cannot delete the file inside an archive file (zip). Can you delete it manually? The virus won’t be executed as it is inside of the archive (zip) file.

4

See here for the name of the trojan http://blogs.securiteam.com/index.php/archives/775

It has various aliases. I would suggest doing the following

Download and then run SuperAntispyware

[*]On the first page select Check for Updates
[*]On completion select SCAN YOUR COMPUTER
[*]On the next page select COMPLETE SCAN and tick ALL your drives
[*]The next stage will take a while as your entire drive(s), memory and registry are scanned
[*]When it has completed click NEXT
[*]The next screen shows the problems found click OK
[*]On the next screen place a tick against all items and select NEXT
[*]Now to get the log Go to the PREFERENCES button on the right bottom
[*]Select the STATISTICS/LOG tab
[*]Highlight the scan just completed and click VIEW LOG
[*]This will open a notepad text file copy and paste this to your next reply

THEN

Please run the F-Secure Online Scanner

Note: This Scanner is for Internet Explorer Only!
[*]Follow the Instruction Here for installation.
[*]Accept the License Agreement.
[*]Once the ActiveX installs,Click Full System Scan
[*]Once the download completes,the scan will begin automatically.
[*]The scan will take some time to finish,so please be patient.
[*]When the scan completes, click the Automatic cleaning (recommended) button.
[*]Click the Show Report button and Copy&Paste the entire report in your next reply.

That should hopefully clear the problem. DO NOT RUN the postcard.exe file

5

Caution
If as Geezor mentioned this is in an MS Outlook or OE .pst or .dbx file will either of these scans be able to extract and infected email from with an email archive file without destroying the complete file with the loss of all emails in that archive file ?

This isn’t an infection located on the HDD in regular files and folders but in an email archive file.