AVG-not remove Trojan Small.8.D

[Donald]

Hi From Texas!
I am so mad. This , so-called. mighty AVG I have had for years, WON'T remove " Trojan Horse Dropper.Small.8.D ! It shows up everytime I do a (updated) Virus check. It won't heal, it want erase, it won't take it to the vault. I thought it was a great Anti-virus software, but I just don't know. Even though I am living off Social Security, I might have to save up, month by month, money to buy a new Anti-virus program..------------------Don

P.S.: I am running ME- with 512 RAM--- HP Pavilion--- 20 gig (4 year old computer)---I think 665 MHz

[Rick Hall]

If the trojan is located in an archived file (such as .zip or .rar) AVG will not remove it. You will have to remove the file manually. This is intentional by AVG so that you do not lose information in archives.

[Lobos]

does AVG give a loacation of the file that it says is infected

If it does can you provide it

[ltmccaul]

Try this

Restart the computer in Safe mode or VGA mode.
Disable System Restore (Windows Me/XP).
Update the virus definitions.
Run a full system scan and delete all the files detected as Trojan.Dropper.


To turn off Windows XP System Restore
Click Start > Programs > Accessories > Windows Explorer
Right-click My Computer, and then click Properties.
Click the System Restore tab.
Check the "Turn off System Restore" or "Turn off System Restore on all drives" check box as shown in this illustration:

[Donald]

Hi To All ,
It is a busy Mother's Day weekend.I will try to find the files that are infected. My weak point in learning computers is files and folders. You know, all that .exe .pdf , stuff like that. What does all that mean is what I don't know.I am a surfer of the internet, mainly for information. I will have to be away from the computer and be with Mother and family. Thanks for all posts.------------Don

[Lobos]

when AVG alerts you of the virus Trojan Horse Dropper.Small.8.D file copy down the path and the file name

for these two extensions this is what they stand for

.PDF = Portable Document Format
.exe = executable file

Lobos

[Donald]

HI Lobos,
Time6:50 PM Monday afternoon. I just now updated my AVG. There are two files it is #1. counter.cab #2. counter.exe------Is all it says on path C:\counter.exe it says C:\counter.cab. . In other words , both paths are C:\counter.cab. No C:\counter.exe path. Since I have the free edition , it doesn't give much more then this. The icon to the left of file C:\counter.cab shows a clamp , I guess it is the file as best as I can see that is clamped. Maybe I can go to the registry, or maybe a run command to rid this. I always make a restore point before taking such action if need be. I now must let Dad use the computer, it will be way late tonight before I am back. 1:30 AM. I love being on the computer late at night and sleep half the day.---Thanks---Don

[kev7555]

No restore points.

Trojans are often located in system restore files. TURN OFF system restore and run AVG from safe mode.

If AVG detects the file but cannot remove it, write down the path and navigate to that location to maually remove.

Update all AV and Antispyware programs and run from safe mode.

If all of this fails, download Hijack this and post a log.


-Kev

[Lobos]

ok cant' find much on them except that it is a dialer

First, create a folder for HijackThis in the root folder of your hard drive so it can make proper backups

example

C:/HJT/
C:/hijackthis/

next


Click here to download Hijack This. 1.99.1 Save it to the folder you have just created

Close all open windows and open HIJACK THIS. Click “Scan” . When the scan is finished (it only takes a second), the scan button will change to“Save Log”. Click on“Save Log” and save it to NotePad. Copy the entire log and paste it here.

DO NOT FIX ANYTHING YET , most items that appear in the log are harmless or even needed. Wait for someone to analyze the scan and advise.

we can see a little better whats going on with your computer

[glc]

Boot into safe mode and delete c:\counter.cab

[Donald]

Hi GLC!
I was going to try the easy one first.Boot into safe mode and delete c:\counter.cab. Like I said , I am very weak in folders and files and how to find them. Where do I go to bring up C:\counter.cab. Do I bring up 'RUN' and type it in.-----------Don
P.S.: I will get rid of this trying ALL of the good guys suggestions. Start with GLC

[glc]

NO! Open My Computer, open the C drive, look for counter.cab and delete it.