|
|
On Sun, 24 Aug 2008 22:31:29 -0400, David H. Lipman wrote:
> From: "Jim S" <jim@xxxxxxxxxxxxxxx>
>
>| I *stupidly* opened a zipped attachment - I know - I know (but there was a
>| reason I won't go into). It contained win32-trojan.gen{other}
>
>| I have used Avast for years now and always sung its praises, however
>| although Avast did flag the virus and shout at me (as it does), whatever
>| action I took >delete>repair>put-in-vault or whatever, the trojan kept
>| coming back on reboot. The same was true about SpybotS&D.
>
>| In the end I downloaded SuperAntiSpyware free and it removed the trojan in
>| a trice.
>
>| The question is: would AVG have done any better?
>
>| Windows XP SP3
>| --
>| Jim S
>| Tyneside UK
>| www.jimscott.co.uk
>
> You said...
> "the trojan keptcoming back on reboot".
>
> Kept coming back... Where ?
> What is the fully qualified name and path to the file that was deemed
> infected infected
> with this Trojan (not a virus) and what is the fully qualified name and path
> to the file
> that kept coming back ?
It kept coming back at startup as a splash screen telling me I had a virus.
It's gone now, but the splash screen had reference to something like
"Win32/Privacy Remover .............34" and there was a reference to
Documents and Seetings/Me/Local/Temp/ttl.tmp.vbs and
Windows\system32\blphccrj0e3aj.scr
I deleted these last two, but until I ran SAS they came back.
--
Jim S
Tyneside UK
www.jimscott.co.uk
|
|