Forum Home
Press F1
 
Thread ID: 53866 2005-01-29 20:47:00 How to clean infected files with AVG7 Greg (193) Press F1
Post ID Timestamp Content User
319156 2005-01-29 20:47:00 I picked up a nasty yesterday for the first time ever, by visiting a site that auto -downloaded a small trojan. AVG7 picked it up instantly, so I disconnected, shut everything down and did a scan. The trojan (2 identical copies) were found, but no matter where I looked I couldn't find how to clean/kill them with AVG. It did point me to the location where they sat, and because they hadn't been installed I was able to simply delete them, and a subsequent scan showed all clear.

I'm running the free version of AVG - does it not have the ability to disinfect/kill the nasties it finds?

Thx.
Greg (193)
319157 2005-01-29 21:13:00 Well, using the eicar.com simulated virus test file, the AVG Resident Shield window opens with a Virus Detected message, and it has buttons with the options to Heal, Delete file, or Move to Vault.

So I wonder why you didnt get that with the trojan.

The eicar test file can be made by typing the following line into an ACII text editor as one line with no spaces, and saving it as a .com file, like EICAR.COM

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
Terry Porritt (14)
319158 2005-01-29 21:15:00 hAVE A LOOK AT THIS PAGE FROM avg on how to clean up if it finds a virus.
forum.grisoft.cz
hth
johnboy (217)
319159 2005-01-29 21:32:00 I picked up a nasty yesterday for the first time ever, by visiting a site that auto -downloaded a small trojan.I thought this auto-downloading of files was preventable with SP2 for XP or a security patch for IE6? Jen (38)
319160 2005-01-29 23:09:00 I thought this auto-downloading of files was preventable with SP2 for XP or a security patch for IE6?

Could be, but I use neither SP2 nor IE
Greg (193)
319161 2005-01-29 23:25:00 greg...

what OS and what browser where you useing?

if its auto downloaded with a non-IE browser the odds are you need to update java.
tweak'e (69)
319162 2005-01-29 23:32:00 what OS and what browser where you useing?
XP Pro SP1, Nerscape 7.2


if its auto downloaded with a non-IE browser the odds are you need to update java.
Thx I'll do that, although it isn't an issue I'm worried about.
Greg (193)
319163 2005-01-29 23:35:00 Windows XP SP1 (or just XP) and Netscape . . . am I right? :p

I am also picking you got the Java/ByteVerify trojan . . . . correct?

AVG can't fix that one, you have to do it manually but fortunately it is one of the easiest ones to fix .

You need to update Sun Java to the latest version for better protection and also ensure that the Sun Java is enabled rather than the Windows flavour .
FoxyMX (5)
319164 2005-01-30 00:45:00 Here's a bit more general info. Foxy is correct in AVGs limitations of trojan detecting, I found a trojan simulator here:

www.softpedia.com

and installed it. There is a simulated trojan file and a registry entry. AVG could not detect it.

I downloaded and ran the trial version of Trojan Remover from here:

www.simplysup.com

and the trojan simulator registry entry was quickly detected, followed soon by the trojan file. Trojan Remover removed the simulated Trojan.
Terry Porritt (14)
319165 2005-01-30 01:22:00 Of course, if I was selling a trojan remover, and I knew there was a "trojan simulator" around, I would make very sure that my product could remove it. Wouldn't you?

Equally, if I was making trojans, I would test my product against AVG, Norton, and everything else. Wouldn't you? ;)
Graham L (2)
1 2