Help! Virus - avgnt.exe is infected!

aliEnRIK

delete this folder -
c:\programdata\aAbIaOn06311

....................................................

Download HostsXpert
http://www.funkytoad.com/download/HostsXpert.zip
and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by pressing the SHIFT key and RIGHT CLICKING on the exe file and selecting RUN AS (Admin)
* click the Make Writeable? button.
* click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program

.........................................................



Download CCLEANER
http://www.piriform.com/ccleaner/download/standard
Run the CLEANER scan (UNTICK 'cookies')
Then run the REGISTRY scan (Backup the registry when it asks)

.................................................

Give it one (hopefully) last scan


Download and run the FREE version of DR WEB
http://www.freedrweb.com/download+cureit/gr/
Turn your anti virus OFF
Click CANCEL to its first question (Unless your happy to lock windows until its run)
Click NO to opening the purchase page
Click START
click YES
It will auto QUICK scan
Pess the STOP button on the right (Unless your happy to quick scan first)
After that set to COMPLETE SCAN the computer and press the 'play' icon
This will more than likely take hours (12 is average!), so leave running overnight or whatever

***DO NOT UPGRADE TO FULL VERSION***

reset the HOSTS file if it asks you

HUFCsteve

Thanks - have deleted the folder you've suggested.

Tried running the HostsXpert file but got a 'Cannot create file' error message. But I think I restored the Host file as part of the guide on beeping computer.

Can I do anything else on the laptop when DR WEB is running or not?

aliEnRIK

Make sure you definitely did restore the hosts file

Not much else to do really no

HUFCsteve

Have tried running it but got an Application Error. The instruction at 0x7714dfc4 referenced memory at 0x00a2ffff. The memory could not be read. Click on OK to terminate the program.

Any ideas?!?

aliEnRIK

I assume your referring to Dr Web?

HUFCsteve

Yes Dr.Web - on clicking OK it's telling me that Viruses have been detected during the scanning (RC=3221225477)

aliEnRIK

Im a little confused with your explanation

Please clarify exactly whats happening

Is dr web running and its found something nasty in RAM (Its checking whats in memory)

HUFCsteve

I basically ran Dr.Web and after a few seconds an Application Error (75cf6_xp.exe) came up.

The only option is for me to click on OK to terminate the program.

If I click on OK it stops the scan and returns the following message:

The Quarantine location is C:\Users\Steve\DoctorWeb\Quarantine\
The Log file location is C:\Users\Steve\DoctorWeb\CureIt.log

It is strongly recommended to perform a Complete scan of your system if it hasn’t been performed during scanning.
You can customize the response of Dr.Web CureIt! To detection of viruses in the scanner window (Settings - > Change settings).

In future for ultimate AV-protection use a fully-functional version of Dr.Web Anti-Viruse for Windows.

You can find answers to the most frequent questions at our web-site.
Open the FAQ page now?

aliEnRIK

Go into safe mode with networking and try a fresh download

HUFCsteve

I don't quite know what was going on there but have rebooted the laptop and it has now allowed me to start Dr.Web.