- This topic is empty.
-
AuthorPosts
-
July 2, 2006 at 1:40 pm #697312
Anonymous
Inactiveis the vault kinda carantaine?
than your ok now
nothing else to doJuly 2, 2006 at 1:43 pm #697313Anonymous
InactiveI am pretty sure avg stopped the virus successfully and you just need to delete the virus, but do nothing yet. I know that greek uses avg and I am sure he will be happy to tell you exactly what course of action you need to take once he sees the post. I recently switched to avg and no nothing about virus software so I am curious to the answer also.
July 2, 2006 at 1:54 pm #697315Anonymous
InactiveIt has quarantined the Virus, now I just winder do I leave it or delete it.
July 2, 2006 at 2:13 pm #697316Anonymous
Inactivedoesnt matter
you can leave it or delete itif you feel safer delete it, than delete it
July 2, 2006 at 2:27 pm #697317Anonymous
Inactivedalster44 wrote:I got infected with some kind of Trojan Virus that AVG picked up.The virus is sitting in the AVG Vault
What do I do? delete it from the vault?
Since its in the vault does that mean my PC is not infected or is there something I have to do?
Thanks,
dalster44
Could you offer more information, perhaps the path the virus is using. Also I would check your msconfig start up menu and make sure its’ not nested in there as well. Must be careful some of these viruses can reboot themselves after you delete them. The more malcious kinds will usually slap in a reg key and nest right in your windows program. greek39
July 2, 2006 at 2:55 pm #697319Anonymous
InactiveI have deleted it.
The path was /documents and settings/temp internet files/ I forget the rest.
I believe the Trojan was something like 32exe or something very similar.
dalster44
July 2, 2006 at 3:08 pm #697320Anonymous
InactiveOkay fair enough, do a spyware scan delete all the spyware. Next go to your IE browser under tools delete all cookies and files clear history as well. Reboot your pc and do a full system scan and see if it pops up again.
I have more than my share of these, some migrate rapidly to other files after all the file is exe (executable file). Its’ better to be over cautious and be sure this virus is gone.
I do run AVG but its a modified version. greek39
July 2, 2006 at 3:46 pm #697332Anonymous
InactiveThanks for all the help and suggestions.
I re-booted and the virus seems to be gone

dalster44
July 2, 2006 at 3:58 pm #697333Anonymous
InactiveThere is a possible chance it may still be on your PC I would be cautious. Trojans can be very nasty viruses. I usually get them on my dumb PC like the one I using right now. I have two running one is Zlob.AZM the other is Zlob.APU both are malicious Malware Trojan browser hijackers.
I plan on giving them back to their propper owners. greek39
July 3, 2006 at 2:53 am #697357Anonymous
InactiveYou go Greek!! Send em back to the hell they came from!
July 3, 2006 at 3:35 pm #697397Anonymous
Inactivegreek39 wrote:There is a possible chance it may still be on your PC I would be cautious. Trojans can be very nasty viruses. I usually get them on my dumb PC like the one I using right now. I have two running one is Zlob.AZM the other is Zlob.APU both are malicious Malware Trojan browser hijackers.I plan on giving them back to their propper owners. greek39
Greek,
The virus IS still there, keeps shutting down my PC.
I ran a scan before it shut down and says this has changed:
C:WINDOWSsystem32shell32.dll
What do I do? Or better yet am I screwed?
More info:
Here is the name of the Trojan from my AVG History folder:
Trojan Horse Downloader.Generic2.DTXAlso, AVG starts up on it own and runs a Shell Extension Test : Then says 0 Files infected.
Thanks,
dalster44July 3, 2006 at 4:11 pm #697401Anonymous
InactiveI figured it would still be there. I don’t think you are screwed, but this virus has to be stomped on a few times. I run several spyware programs, download the free version of spybot search and destroy. Do a scan when finished right click each result and click find object. When it takes you there are any result delete it.Reboot
This virus I suspect will be in four locations. The registry, windows system32, windows executable files, and in your msconfig. So even though you delete it as soon as you restart the virus will load again because it in your startup menu and a reg key has been installed. If you run AVG be sure to scan everything, not just C drive include folders ect…
Or try this do a safe mode virus scan delete the virus, but at the same time do a spyware scan as well. reboot
For the msconfig hit start select run type in msconfig and select start up Take a look for anything suspecious. If you do find something that you totally don’t recongnize uncheck the box. Reboot
Do not login into anything personal like netteller, your cpanel, CAP is fine just change your login details afetr making sure this trojan is gone.
I hope this works, its hard doing these thing remotely. greek39
July 3, 2006 at 4:18 pm #697403Anonymous
InactiveOkay thanks,
I ran msconfig, in the startup I see re-boot checked its a folder in My documents.
Should that be there?
This is driving me nuts
July 3, 2006 at 4:22 pm #697405Anonymous
InactiveNo harm in unchecking that box, but be sure to reboot afterwards. greek39
July 3, 2006 at 4:25 pm #697408Anonymous
InactiveThanks Greek,
I’m running the FULL scan now, I thought I was but I wasn’t scanning the folders I guess.
I do have Spybot S&D, so I’ll run that again also.
We’ll see what happens here I guess :popcorn:
Thank You,
dalster44
-
AuthorPosts