Should I be worried?
 

Wello i keep getting this message telling me to run AVG because of a trojan, but i keep doing this and it keepsa getting rid of it (apparently) but it seems to keep coming back?? Should i be worried?? :(

See attachment for the error/alert message i get

Re: Should I be worried?
 

You could try the free on-line trend housecall antivirus and see if that gets rid of it...

Or try to delete all system restore points.... AFTER you have cleaned it.

Just a couple of ideas.

Re: Should I be worried?
 

Try running an online scanner. :shrug:

Re: Should I be worried?
 

Links....?

Re: Should I be worried?
 

It's in a file which has been saved by a system restore.

You need to disable system restore, then try running AV

Re: Should I be worried?
 

It is coming from a web page that you have visited (bet I can guess which one) all you have to do is clear temp internet files when you get it and it is gone.
In your case you have created a restore point when it was on your machine, so you need to clear your restore point to get rid of it.
I get this regularly :rolleyes:


edit: forgot to read properly first time :D

Re: Should I be worried?
 

err... i perosnally havent visited any "different" sites...??? Its the first time ive got it!? :(

Re: Should I be worried?
 

Re: Should I be worried?
 

It is on a few mp3 sites.

Re: Should I be worried?
 

Re: Should I be worried?
 

Follow the instructions for XP system restore here mate

http://service1.symantec.com/SUPPORT...01111912274039

Re: Should I be worried?
 

Right i am trying this all out witb turning system restore, ill tell you if it seems to have worked, hopefully it does!

Thanks for all the replies! :)

Re: Should I be worried?
 

Hmm well i turned off system restore and ran avg, didnt seem to do much, just wat it did before telling me there were 2 virus' so not sure if it worked, now trying the online one.... nothing picked up so far..

EDIT - now that housecall online didnt find any virus' :shrug:

Re: Should I be worried?
 

try NAV

http://security.symantec.com/sscv6/h...RVWHFHMFNZMBBX

Re: Should I be worried?
 

type trojan removal into google and download on of those progs m8, they usually work for me. Trojan remover free trial is good.

Re: Should I be worried?
 

Could I just ask one question, do you have any other Anti-Virus software installed?

I have found that with AVG and others like Norton, AVG picks up Norton as a virus.

Re: Should I be worried?
 

Have you tried turning system restore back on and deleting the restore points?

Re: Should I be worried?
 

That should get done automatically as part of turning off system restore removes the existing files which then gets replaced with a fresh "clean" restore point soon as it is turned back on.

Key is not to turn it back on until after a Clean AV scan.

Re: Should I be worried?
 

Well i ran all the online tests and nothing, which is good! I did turn system restore off ( deleltingf all other restore points) then ran avg, then turned it back on and so far no otehr error message! :D

And no i only have avg on here! :)

Re: Should I be worried?
 

Should be sorted then.
Have you always had AVG installed?
You need to check your configuration as this virus somehow got through.

Re: Should I be worried?
 

From what Jarandco has posted, I don't think it has "got through". It looks like AVG has nailed it as soon as it appeared on the drive, but it has been copied by System Restore when it was deleted.

I personally do not let my anti-virus check the System Volume Information folders. Yes, I know if there's something in there it may get back on if I do a system restore, but if I have something serious, I disable System Restore before deleting it.

I'd be more concerned about how the file got on in the first place. Worth monitoring I think.

If it does keep re-appearing, then....
Search HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run , HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Services, and HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run keys in the registry for anything strange. Look in your Start\All Programs\Startup folder for shortcuts which shouldn't be there.

Search your drive for DLL files which are tucked out of the way, with strange names. They may be innocent, but then again could be an indiciation of something installed (into IE for example).

Good Luck ;)

NOTE: I've edited this response 3 times now.......I'm having a bad morning after the night before! :eek:

Re: Should I be worried?
 

Welkl as a sort of update i havent had the message come up anymore so i believe that all is fine, i did a lot of scanning over the net and with avg aswell as creating a new system restore, after the virus had been deleted so hopefully all is well, thanks for all your help! :)

Re: Should I be worried?
 

is it detecting the quarantined files maybe?