Wind32:QQHelper-x Trojan

horse just found.
suggestion was to send it to chest. Tried that, said not enough space on disk.
Now what should I do, how do I increase space or whatever ? I just stopped the whole scanning process and did not get any further info.

Thanks if you can help !

Hello Birdlover,

Can you provide us with the full filename and path please?

You could try this:

right click avast icon–>settings–>chest–>type in a value to increase the size of the chest to fit the file.

then re-scan the file and try to send it to the chest

Hope this helps,

-Scott-

Hi Scott,

Sorry, did not get all that info. I stopped the scan without getting all that, only after 1 minute into it did it find this trojan and I update religiously !!

The chest info. says :
" max. size of chest" is 256 MB
"max size of file to be sent to chest " is : 1024 kb

What should I " Up" it to ?
In the meantime, I’m downloading Dr. web cure it :wink:

I would increase the file size,1MB (1024KB) isn’t very large try 2048KB but you should base that size on the size of the file you are trying to send.

Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe

  • Or check the source file using notepad C:\Program Files\Alwil Software\Avast4\DATA\log\Warning.log

Sorry but you lost me after " detections". IE: "C:\Program Files\Alwil Software\Avast4\ashLogV.exe

  • Or check the source file using notepad C:\Program Files\Alwil Software\Avast4\DATA\log\Warning.log

    Wasn’t sure how to do what you’re saying there, simply because I am computer challenged for the most part.

Ok, in any event, I ran DrWEb CureIT and it found nothing via the express or complete scans. Am I safe here, could this trojan be a false positive ?

What DavidR was saying was that the log file at that location shows the warnings that avast displays and the filenames etc. of those related

You can find that file in that location, or do as was said just above it:

They would both show the same things, just in a different format.

This way, after you increase the chest limit, you can know where to find the file that avast alerted you on and re-scan it to give you the option of putting it in the chest.

-Scott-

avast detected an infected file, unless you know exactly what that was and its location, then you need to find out what the file was and its location (that information is in the avast log viewer or the log file).

Once you know that then you can check what its file size is and set the “max size of file to be sent” so it is large enough for the offending file to be sent to the chest. Then you can scan it again.

ok, the avast log viewer had the date, time, my name then under applicaton it had 1148 .
Then under description it had " sign of " Win32QQHelper-X [Trj] has been found in C:.…

that’s all I know for now

Thanks guys !

That is why I gave you the path to the log file as the … means that there is more information outside the columns width e.g. the “check the source file using notepad C:\Program Files\Alwil Software\Avast4\DATA\log\Warning.log”

David and all,
I sincerely appreciate all your help but
as dumb as it sounds, I don’t know exactly how to start down that path .
Anyway, I upped to file space to 2048 and tried again, again it happened.
This time I paid more attention. Under
“not enough space on disk " it said : cannot process " C:\Documents & settings\my name\Local Setting\Temp\WER 1888.dir 00 SuperAntiSpyware.exe.hdmp” file

huhhh??!

Using windows explorer, navigate to the avast4\DATA\Log folder and find the warning log.

However, that is a moot point now as I would simply say clear your Temporary files folder as this is a temporary file and effectively redundant. It is also alerting on an SAS temporary file, possibly its signature updates, so although it is a good detection, it isn’t on a real virus but a signature of one. Or at the least allow avast detect it again and this time just to delete it.