Trojan Virus in AVG Vault- What Now??

skintbutsmiling01

Hi everyone and thanks is advance for any advice given to this technophobe!
I opened an email yesterday from my website and it has caused a trojan virus on 2 networked pcs.
I have downloaded avg (free) and it has picked up 2 trojans and they are stored in the vault.
What do I do now, how do I get rid of them? Delete? is it that simple?
The virus is still "attacking" me- its emailing me pretty constantly.

Thanks in advance for any info.

Aliktren

which trojan is it ?

skintbutsmiling01

trojan horse back door generic4. QYG
trojan horse back door generic.TGF

Aliktren

Ok, well, here's myadvice for what it's worth

Disconnect the PCs from the network

Delete the trojans held in the vault

Run AVG again, and do a complete scan of the hardrive

Download Spybot onto both from a CD and run Spybot S&D on both machines, complete scan

If they look clean, reconnect them, and then re-scan

I'd also be sorely tempted to get hold of another AV package and run that as well, to make sure AVG isnt missing something

If you can flatten those PCsand reinstall from Scratch, then personally I'd just to that, it's abit like Aliens, nuke from orbit is the only way to be sure.

skintbutsmiling01

So if i delete them from the vault, does that actually delete them from the pc?

Aliktren

not sure with AVG but I'd be pretty sure it does, yes, doesnt mean the PC is clean then though

skintbutsmiling01

I dont think it does, I have deleted the files from the vault and rebooted and am now rescanning, but the emails are still coming through.
The other pc is apparently clear but still has emails coming through, it is to an email address that we share.
I cant really disconnect the pcs from the network, actually wouldn't know how to, plus they're connected to the phone system....

Aliktren

ok, wait a sec

what are these emails, when you say they're coming through, coming through from where, are they being sent to you or are your PCs sending them out ?

esuhl

Your emails will be stored on an email server. When you connect to it, you will download a *copy* of the trojans. AVG quarantines these local copies, you delete them from your PC, but when you connect to the mail server, the original trojans get downloaded again. At least I *think* this is what must be happening. You just need to delete the emails.

If you're being bombarded with multiple emails, this won't be anything to do with the trojan on your PC (assuming it hasn't executed). It's "just" spam that you need to filter or delete manually.

You might also want to try this online virus scanner once AVG has done it's thing:
http://housecall.trendmicro.com/

Hope this helps...

Aliktren

and block the sender

skintbutsmiling01

They are coming from me, to me! Its a small business with a website, and it sent one saying I needed to update my password, I opened it et voila!
Bombarded with them, to [EMAIL="everynameunderthesun@companyname.com"]everynameunderthesun@companyname.com[/EMAIL].
but they all come to the shared email address.
After I scanned everything again with avg it now has 1 trojan and 1 worm virus in the vault, and I haven't had any more emails since so ....

I know I sound thick, don't have an IT dept as there's only 2 of us, a friend set the system up.