Hi. My last few scans show 2 trojan horses that haven't been deleted. I tried "remove selected" and "remove unhealed" but nothing happens. Could you please help me? When I click on a link from Google the browser takes me to some c**p website instead of the link I clicked on. Thanks.

Scan "Scheduled scan" completed.
Infections;"3";"1";"2"
Folders selected for scanning:;"Whole computer scan"
Scan started:;"Thursday, February 09, 2012, 8:15:01 PM"
Scan finished:;"Thursday, February 09, 2012, 8:21:57 PM (6 minute(s) 55 second(s))"
Total object scanned:;"1465136"
User who launched the scan:;"SYSTEM"

Infections
;"File";"Infection";"Result"
;"C:\Windows\System32\svchost.exe (1396)";"Trojan horse Crypt.ANZD";"Deleted"
;"C:\Windows\System32\svchost.exe (1396):\memory_018a0000";"Trojan horse Generic25.BCBS";"Infected"
;"C:\Windows\System32\svchost.exe (1396):\memory_00c00000";"Trojan horse Crypt.ANZD";"Infected"

@ Vancouver2012

Memory.. This type of infection can be usually removed by running a scan using updated AVG Rescue CD.

---

AVG Free Volunteer ModeratorAVG Free Forum member since - Nov. 27, 2004My total posts on the Old AVG Free Forum - 27,063
Alan

---

How-To Articles | FAQ | Free Support

Thanks for your response. It seems to me that AVG Rescue is intended for cases where the computer is inoperable and needs to be restored. I have a fully functioning computer.

With this type of infection please follow my previous post #190337.

EDIT.. Post # amended.

---

AVG Free Volunteer ModeratorAVG Free Forum member since - Nov. 27, 2004My total posts on the Old AVG Free Forum - 27,063
Alan

---

How-To Articles | FAQ | Free Support

I tried searching my post number but I got no results. If you have a link that would be much appreciated.

(By the way, I re-posted in the AVG FREE area because I thought I had posted in the wrong place. It's not like I was trying to be sneaky - I said I was re-posting)

@ Vancouver2012

Re my previous post #190337 above.. Have you actually scanned your system with the updated AVG Rescue CD?.

EDIT.. Post # amended.

---

AVG Free Volunteer ModeratorAVG Free Forum member since - Nov. 27, 2004My total posts on the Old AVG Free Forum - 27,063
Alan

---

How-To Articles | FAQ | Free Support

Oh, OK. You meant 190337, not 190377.

No - that is for systems that are inoperable. That's not the situation I have. What I want to know (as per my original post) is why the "remove unhealed" and "remove selected" buttons don't work on AVG Free. I don't even get an error message.

I found the official AVG answer:
http://free.avg.com/ww-en/faq.num-4209

It tells me to run Windows System Restore, but actually that is when the problem started. A few weeks ago I had a malware that AVG didn't pick up so I removed it with other (paid) software. Then I had to run System Restore because my system was messed up (files and drivers were hidden). That fixed one problem but the Trojan horse suddenly appeared.

You've made no mention of "Object is white-listed (critical/system file that should not be removed)" previously in your thread. Just to repeat the previous postings the memory type infection can usually be removed by scanning with the updated AVG Rescue CD without the system being inoperable.

---

AVG Free Volunteer ModeratorAVG Free Forum member since - Nov. 27, 2004My total posts on the Old AVG Free Forum - 27,063
Alan

---

How-To Articles | FAQ | Free Support

Hello Vancouver2012,

Please follow solution offered by BigAl.

Should the infection persists, please provide us with both Gmer scan results Msinfo output and AVG Anti-Virus scan results for further analysis.

Thank you
___________________AVG TeamHow-To articles | FAQ | Free SupportWe Protect Us