1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Win32 Trojan

Discussion in 'Malware and Virus Removal Archive' started by bilnrobn, 2008/09/21.

  1. 2008/09/21
    bilnrobn

    bilnrobn Inactive Thread Starter

    Joined:
    2008/09/21
    Messages:
    7
    Likes Received:
    0
    I have previously posted this on the Tech Guy site - see http://forums.techguy.org/malware-r...792-help-needed-win32-trojan.html#post6144618 but so far no useful answers.

    When I booted this morning Avast found this trojan in c:\windows\system32\athcfg. At the same time I got an error message saying TWCU.exe couldn't start. I asked Avast to try to repair it, but apparently it couldn't as the same thing happened when I rebooted. I then had Avast put the faulty file into the chest. I have restored to last Tuesday, but, while Avast doesn't mention a problem, TWCU still fails to start. I am currently on my wife's lappie as with no TWCU I can't reach the internet on my machine.

    Additional information. I have just done a wall to wall virus check and it seems the virus has replicated itself in the restore folder, which would explain why it is still there after two attempts to restore to two separated earlier dates.
    The virus is Win32: Trojan-gen (other)
    The version given is 080919-0, 19/9/2008
    While Avast was doing the wall to wall I moved the one in C:\WINDOWS\system32\ to the recycle bin. The one in c:\System Volume Information\-restore\ I twice moved to the recycle bin and once, renamed with a .vir extension, to C:\program files\Alwin Software\Avast4\DATA\moved\ and it just keeps reproducing itself in the restore folder.
    (All the files I moved are still where I put them.)
    Someone, please HELP!
     
  2. 2008/09/21
    Admin.

    Admin. Administrator Administrator Staff

    Joined:
    2001/12/30
    Messages:
    6,687
    Likes Received:
    107
    Hi,

    Read this post, then post the requested log(s).
     

  3. to hide this advert.

  4. 2008/09/22
    whopper

    whopper Inactive

    Joined:
    2008/09/22
    Messages:
    38
    Likes Received:
    0
    FYI,

    I have the same problem as poster bilnrobn. I cannot access the internet to run the required programs since they are not in my computer,.i.e "hijackthis ".

    I guess i can do the wipe of the drives and just start over. I think that is my only option.

    thanks
     
  5. 2008/09/22
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    @whopper,

    Please start a new topic of your own after reading the post Arie linked to. Someone will be happy to assist you. :)
     
  6. 2008/09/22
    bilnrobn

    bilnrobn Inactive Thread Starter

    Joined:
    2008/09/21
    Messages:
    7
    Likes Received:
    0
    Whopper, if you mean you can't access hijackthis here is a link...
    http://www.whatthetech.com/hijackthis/


    Admin, thanks, I was wondering if you would need a hijackthis report. It was complicated as I couldn't reach the internet from the computer with the problem. I finally realised the problem was not with my access to the internet, but my wireless connection from the computer to the router, (1 metre away). I haven't solved the initial problem but I have got around it by connecting the two by cable.
    (I wanted to mark my thread "Solved" but couldn't work out how to, or if I could, do this.)
     
  7. 2008/09/23
    whopper

    whopper Inactive

    Joined:
    2008/09/22
    Messages:
    38
    Likes Received:
    0
    thanks billnrobn, You are correct, it is a wireless problem. I could just connect my computer directly to the router...thnaks
     
  8. 2008/09/23
    bilnrobn

    bilnrobn Inactive Thread Starter

    Joined:
    2008/09/21
    Messages:
    7
    Likes Received:
    0
    No problem; glad to help.


     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.