Virus help please

elektra

Avast has found Win32:Agent-LE(Tri) in file c:\gobackio.bin

This is only picked up in a thorough scan (seems I've only been doing standard scans before). It says to move to chest, but when I try it says 'not enough space'.
So I looked at chest settings - they were: size of chest 256MB, max size of file to be sent 1024KB. I've increased the first to 512 MB, but sill cant move to chest.

What sizes should I be using ?

Laz123

I use Avast but have never seen this before. Use a specific removal tool http://www.spywareremove.com/removeWin32Agent.html

CHR15

TBH I would get rid of the whole of Nortons GoBack. You have Windows restore anyway, and as you have found, it is not the "all wonderous answer" to problems.

Dump it completely. Uninstall Nortons Goback, the .bin file should go too.

http://service1.symantec.com/SUPPORT/goback.nsf/docid/2001080616114607?Open&src=hot&docid=2004052117144958&nsf=goback.nsf&view=docid&dtype=&prod=Norton%20GoBack&ver=3.6&osv=&osv_lvl=&seg=hho

Dump all that and try a Hijackthis to see what's wrong.

elektra

Thanks, I wasn't aware it was part of Norton. Wasn't aware goback was on here, never used it.

I thought I had removed Norton completely. As you say I have Windows restore and I also use Acronis for full backup.

elektra

CHR15 wrote: »

TBH I would get rid of the whole of Nortons GoBack. You have Windows restore anyway, and as you have found, it is not the "all wonderous answer" to problems.

Dump it completely. Uninstall Nortons Goback, the .bin file should go too.

http://service1.symantec.com/SUPPORT/goback.nsf/docid/2001080616114607?Open&src=hot&docid=2004052117144958&nsf=goback.nsf&view=docid&dtype=&prod=Norton%20GoBack&ver=3.6&osv=&osv_lvl=&seg=hho

Dump all that and try a Hijackthis to see what's wrong.

Had a look at that link and list of my programs and I don't have anything called 'Norton' or 'Go back' so can't uninstall via that route.

CHR15

Maybe it's a remnant from an old install.

Can you simply delete c:/gobackio.bin (you may need to have "show all files" enabled)

kwikbreaks

According to http://www.velocityreviews.com/forums/t203243-gobackiobin.html it is some sort of history file which wasn't deleted when you removed Norton. Than person said his is 300MB+ so it isn't surprising to can't move it to your vault as the settings you mention limi the size of an individual file to 1MB.

Why not just delete it?

elektra

Thanks everyone - file now deleted.