daily Trojan Horse virus - help!!

paulad_4

Can anyone help?
I'm running Windows XP Home edition and whilst surfing the Internet I picked up the Win32:Trojano-803[Trj] virus which was detected and (I thought!) successfully deleted by my antivirus software (system has both Avast and AVG home editions running). However, every day since then at approx 1.45pm I get a virus alert from Avast that the following virus is present on my computer (C:\Temp\NCasePackage.exe) and every day I have supposedly deleted it from Avast's Virus Chest, only for it to appear at exactly the same time the following day! When the alert sounds and I try to delete the virus or move it into the chest I get the following message: "The system cannot find the file specified. Cannot process". However, when I check the Virus Chest I find several instances of the virus in there, which I then delete. Everything then seems to be OK until 1.45 pm the next day, when the whole thing starts over again!

Any advice would be greatly appreciated.

???

LincsLad_3

Firstly, its not a good idea to have more than one AV package active on your PC at any one time, as they can often cause clashes. By all means have two INSTALLED on your system, but try to ensure that only ONE runs at a time.

you probably need to run something like adaware to find the root cause of the problem. See the thread on 'Computer Security and Viruses' at the top of this forum for a link.

And check out this link ofr a thread on the Avast boards about trojano 803.

Good luck.

rich_jtg

It's highly likely that the virus is lurking in one of your system restore points. Turn this off, clear existing points and get rid of the virus (!), and then switch back on.

paulad_4

I disabled system restore, ran spybot which showed up & got rid of a few things (not sure what!), then I ran a 2nd scan with avast which appeared to be clear, before rebooting the system. Is this what you meant by "clear existing points and get rid of the virus"? I guess I'll find out if it's gone at 1.45!

Is it safe to make online purchases with credit card while this virus is on the system? I have read about security threats. I am pretty sure my system has a firewall installed but how do you check?

thks for help

Toxteth_OGrady

If you have upgraded to SP2 you can go into Control Panel and open either Security Center or Windows Firewall. That will tell you the status of the integrated firewall.

Disabling System Restore will remove all previous restore points - just remember to re-enable it once you've cleaned your system.

Instructions here

8)

TOG

trace-j

Spyware is probably the source of it. Install Giant or the free microsoft thing https://www.microsoft.com/athome/security/spyware/software/default.mspx boot up in safe mode and do a full scan (deep file and registry) should take out the problem.