cancel
Showing results for 
Search instead for 
Did you mean: 

Have these viruses gone or not ?

gleneagles
Aspiring Legend
Posts: 11,105
Thanks: 2,459
Fixes: 17
Registered: ‎02-08-2007

Have these viruses gone or not ?

Avast identified 6 viruses/trojans on my computer so I posted the following on Avast forums
Can someone give me a bit more information about the following,
Scan name: Full system scan
* Started on: Saturday, May 29, 2010 7:35:08 PM
* VPS: 100530-0, 30/05/2010
*
C:\System Volume Information\_restore{77D00644-4C26-4B96-B9FF-9CCC5F1956FC}\RP13\A0007935.exe Win32:Renos-LL [Trj] (0)
C:\System Volume Information\_restore{77D00644-4C26-4B96-B9FF-9CCC5F1956FC}\RP13\A0007944.exe Win32:Renos-LL [Trj] (0)
C:\System Volume Information\_restore{77D00644-4C26-4B96-B9FF-9CCC5F1956FC}\RP6\A0006308.exe Win32:Renos-LL [Trj] (0)
C:\System Volume Information\_restore{77D00644-4C26-4B96-B9FF-9CCC5F1956FC}\RP6\A0006309.exe Win32:Renos-LL [Trj] (0)
C:\System Volume Information\_restore{77D00644-4C26-4B96-B9FF-9CCC5F1956FC}\RP7\A0006379.exe Win32:Trojan-gen (0)
C:\System Volume Information\_restore{77D00644-4C26-4B96-B9FF-9CCC5F1956FC}\RP8\A0006408.exe Win32:Trojan-gen (0)
Infected files: 6
Total files: 154661
Total folders: 14043
Total size: 94.6 GB
I Have tried to delete these files but Avast simply says Error the system cannot find the file specified.
I Have deleted ALL my restore points and rescanned but the above still shows what should I do now
The main advice was to run Malwarebytes which I did and this found and deleted these files.
Ran Malwarebytes again and it returned 0 files affected but this is the strange bit I then ran Avast again and it found the above 6 files but continues to report Error cannot find the specified files.
So are these viruses/trojans still there or have they been deleted.
Computer (windows 7) runs fine and all the usual  windows updates have found nothing but I am still puzzled why Avast is still showing these files.... I can't move these files to the chest, delete or repair them because it can't find them so I am more puzzled than worried but would welcome any opinions
We are born into history and history is born into us.
9 REPLIES 9
artificer
Grafter
Posts: 1,850
Registered: ‎11-08-2007

Re: Have these viruses gone or not ?

take the names of the files (put in notepad) then search with something other than avast.  delete with something other than avast if you can find them.  this could be nonsense.  i haven't used windows in years.
Oldjim
Resting Legend
Posts: 38,460
Thanks: 787
Fixes: 63
Registered: ‎15-06-2007

Re: Have these viruses gone or not ?

The files are in the system restore volume and as such just aren't accessible.
One way out of it is to turn off System Restore then reduce the permitted space to a minimum. This will get rid of the files.
It may need a reboot
After that set the system restore space again (mine is set to 5%) and re-enable system restore and create a restore point
http://www.sevenforums.com/tutorials/330-system-protection-turn-off.html
ReedRichards
Seasoned Pro
Posts: 4,927
Thanks: 145
Fixes: 25
Registered: ‎14-07-2009

Re: Have these viruses gone or not ?

A lot of antivirus programs set out to scare you by failing to distinguish between viruses that are actively running on your computer and files infected with a virus but which would only cause harm if you happened to run the files.  All the files that Avast was finding would only possibly cause harm if you ran a System Restore and chose a restore point containing these viruses - and even then there is no knowing if they would have been active.
Edit:  Which means that you should follow Oldjim's advice but there was never much to worry about.       
pierre_pierre
Grafter
Posts: 19,757
Thanks: 3
Registered: ‎30-07-2007

Re: Have these viruses gone or not ?

well to the informed this would say do what jim said, i.e. get rid of the restore files, then set it up again, then you cant restore an infected file - Avast did a good job
gleneagles
Aspiring Legend
Posts: 11,105
Thanks: 2,459
Fixes: 17
Registered: ‎02-08-2007

Re: Have these viruses gone or not ?

Thanks for that and the link to change system restore !
Followed your advice and everything is sorted.... just don't know where this lot came from in the first place !
We are born into history and history is born into us.
ReedRichards
Seasoned Pro
Posts: 4,927
Thanks: 145
Fixes: 25
Registered: ‎14-07-2009

Re: Have these viruses gone or not ?

Check that every web-enabled program you have is up to date:
Internet Explorer (v8), Firefox 3.6.3, Chrome 5.0.375.55 (Help - About will tell you the version number)
Java 6.20, Adobe Flash Player 10 (latest version),
Adobe Reader 9.3.2
Qucktime  7.6.6, Real Player SP
etc
pierre_pierre
Grafter
Posts: 19,757
Thanks: 3
Registered: ‎30-07-2007

Re: Have these viruses gone or not ?

my security check program says the Flash 10.3 is not secure, Googling it agrees, but there is not an update
ReedRichards
Seasoned Pro
Posts: 4,927
Thanks: 145
Fixes: 25
Registered: ‎14-07-2009

Re: Have these viruses gone or not ?

The latest Flash Player plugin, 10.0.45.2 ,  is not reported as insecure by my Kaspersky Vulnerability Scan.  I don't know what Flash 10.3 is.
But the point is that at any one time any one (or more) of these programs could be insecure but it's a very safe bet that the latest version is more secure than its predecessors.
pierre_pierre
Grafter
Posts: 19,757
Thanks: 3
Registered: ‎30-07-2007

Re: Have these viruses gone or not ?

just checked mine again, it was two files in the Win/System32/macromedia that had the problem  10b.ocx and 10d.ocx,  deleted them, but not tried flash again