Author Topic: C:\Avenger.... what is this?  (Read 6447 times)

Offline timmy1991

  • Member
  • ***
  • Gender: Male
  • Back on the forums
    • Firesquare Private World of Warcraft Server
C:\Avenger.... what is this?
« on: Monday September 07, 2009, 01:59:45 AM »
I ran malwarebytes on my PC earlier today, and it said I had to reboot in order to remove one of the infected files. When I restarted my PC there was a folder in C:\ called Avenger... could this harm my PC?
AVG did not detect any virus in the folder.
It contains the file secedit.exe

Offline kamuikurou

  • Member
  • ***
  • Gender: Male
  • woof! ^^
Re: C:\Avenger.... what is this?
« Reply #1 on: Monday September 07, 2009, 02:15:08 AM »
Umm... I'm not sure but viruses or ad/mal/spywares usually hides themselves. And they can't be deleted/renamed/moved easily.

Anyway, try googling the secedit.exe and avanger keyword, it has some interesting results.

Offline timmy1991

  • Member
  • ***
  • Gender: Male
  • Back on the forums
    • Firesquare Private World of Warcraft Server
Re: C:\Avenger.... what is this?
« Reply #2 on: Monday September 07, 2009, 05:54:07 AM »
hmm... the search came up with everything from it being a virus to a log created by malwarebytes... still not sure what to do about it

Offline kamuikurou

  • Member
  • ***
  • Gender: Male
  • woof! ^^
Re: C:\Avenger.... what is this?
« Reply #3 on: Monday September 07, 2009, 05:57:33 AM »
Can you actually delete/rename/move it? Does it recreate itself? :-\

Offline timmy1991

  • Member
  • ***
  • Gender: Male
  • Back on the forums
    • Firesquare Private World of Warcraft Server
Re: C:\Avenger.... what is this?
« Reply #4 on: Monday September 07, 2009, 06:02:01 AM »
ok I think I have found the answer... I looked on the malwarebytes forums, and they said that it is just a leftover file that was supposed to be deleted when I rebooted, and I can safely delete the folder

Offline Yoshi2889

  • Member
  • ***
Re: C:\Avenger.... what is this?
« Reply #5 on: Sunday October 04, 2009, 01:35:17 PM »
try for if you not sure AVG-free, it will detect real virusses and dont make them... www.download.com

Offline timmy1991

  • Member
  • ***
  • Gender: Male
  • Back on the forums
    • Firesquare Private World of Warcraft Server
Re: C:\Avenger.... what is this?
« Reply #6 on: Sunday October 04, 2009, 01:41:17 PM »
AVG never said this was a threat, but I have it solved now

Offline Yoshi2889

  • Member
  • ***
Re: C:\Avenger.... what is this?
« Reply #7 on: Sunday October 04, 2009, 01:59:08 PM »
maybe youre right... mine version is saying something: but its in dutch. it appears everytime when my computer is long time no use...

Offline timmy1991

  • Member
  • ***
  • Gender: Male
  • Back on the forums
    • Firesquare Private World of Warcraft Server
Re: C:\Avenger.... what is this?
« Reply #8 on: Sunday October 04, 2009, 06:31:18 PM »
hmmm.. I don't know...I don't speak dutch either, the only error message I get after no using it for a while is a virtual memory shortage for some reason...

Offline Yoshi2889

  • Member
  • ***
Re: C:\\Avenger.... what is this?
« Reply #9 on: Sunday October 04, 2009, 06:35:49 PM »
i can translate... only this i cant translate: Trojaans Paard PSW.VB.ATL as i said: its in the sys. directory...

Post Merge: Sunday October 04, 2009, 06:38:38 PM
and, wait... you can get into your c/ drive?! my computer crashes anytime if i want that...
« Last Edit: Sunday October 04, 2009, 06:38:39 PM by yoshi2889 »

Offline timmy1991

  • Member
  • ***
  • Gender: Male
  • Back on the forums
    • Firesquare Private World of Warcraft Server
Re: C:\Avenger.... what is this?
« Reply #10 on: Sunday October 04, 2009, 06:42:45 PM »
you can get into your c/ drive?! my computer crashes anytime if i want that...
must be just your computer... I do maintenance on peoples computers a lot, and that's the place I always go first.... never had one crash on me because I opened C:/

Offline Yoshi2889

  • Member
  • ***
Re: C:\Avenger.... what is this?
« Reply #11 on: Sunday October 04, 2009, 06:57:38 PM »
maybe that 'trojaans paard' thingy... i heard that it is some virus... hope it doesn`t infect my whole c:/ drive...

Offline timmy1991

  • Member
  • ***
  • Gender: Male
  • Back on the forums
    • Firesquare Private World of Warcraft Server
Re: C:\Avenger.... what is this?
« Reply #12 on: Sunday October 04, 2009, 07:30:57 PM »
actually, now that I think about it... it has happened on one of my older computers before

Offline Mikiie

  • Member
  • ***
  • Gender: Male
Re: C:\Avenger.... what is this?
« Reply #13 on: Monday October 05, 2009, 02:01:12 AM »
and, wait... you can get into your c/ drive?! my computer crashes anytime if i want that...
I lol'ed

Offline timmy1991

  • Member
  • ***
  • Gender: Male
  • Back on the forums
    • Firesquare Private World of Warcraft Server
Re: C:\Avenger.... what is this?
« Reply #14 on: Monday October 05, 2009, 02:37:52 AM »
I looked up your trojaans paard PSW.VB.ATL, it means Trojan Horse PSW.VB.ATL...
PSW.VB.ATL is a password capturer, I highly recommend that you have your computer looked at and possibly re-install windows to prevent being hacked...
it's spyware, so first download a spyware removal tool, and see if your problem is fixed, if not, you might want to go for the professional help, or a clean install of windows

Offline Yoshi2889

  • Member
  • ***
Re: C:\Avenger.... what is this?
« Reply #15 on: Monday October 05, 2009, 01:57:49 PM »
yeah... thats what i have...

Offline masterDS64

  • Member
  • ***
  • psn-nintendo64X
    • my youtube channel
Re: C:\Avenger.... what is this?
« Reply #16 on: Monday October 05, 2009, 02:06:37 PM »

Offline PuffyChain

  • Member
  • ***
  • Gender: Male
    • facebook.com/puffychain
Re: C:\Avenger.... what is this?
« Reply #17 on: Thursday December 03, 2009, 05:22:48 AM »
try scan with kaspersky...

Offline Hardline Fascist

  • Member
  • ***
  • Gender: Male
Re: C:\Avenger.... what is this?
« Reply #18 on: Thursday December 03, 2009, 09:48:59 AM »
Prevention is better than the cure.Get a good AV and the resident shield should stop these things from accessing your PC.

As for paying a professional-Id rather buy a new hard drive and a copy of Windows7 than waste money with them.

Offline Yoshi2889

  • Member
  • ***
Re: C:\\\\Avenger.... what is this?
« Reply #19 on: Friday December 11, 2009, 05:26:05 PM »
« Last Edit: Friday December 11, 2009, 05:33:03 PM by YoshiFlip »

Offline Loonylion

  • Administrator
  • *****
  • Gender: Male
Re: C:\Avenger.... what is this?
« Reply #20 on: Friday December 11, 2009, 05:33:59 PM »
it was hacked then, probably through a password stolen off your computer.

Offline Yoshi2889

  • Member
  • ***
Re: C:\\Avenger.... what is this?
« Reply #21 on: Friday December 11, 2009, 05:38:32 PM »
hmmm.. I don't know...I don't speak dutch either, the only error message I get after no using it for a while is a virtual memory shortage for some reason...
??? That happened one time to my father... *Thinks* Well, my father had a virus, from a well-known site: RomUlation. Not that RomUlation is the soucre, but AVG says that it was got from:
http://www.romulation.net/GameCube/Super_Mario_Sunshine_(U)(RARE).rar.html/ its weird, I even didn't download it. When restarting (we got a error), we had only 245 GB left, from the 260 GB.

Post Merge: Friday December 11, 2009, 05:39:21 PM
it was hacked then, probably through a password stolen off your computer.
Aha... Well, it doesn't matter much (changed it back), but I do not want it happen that my whole system is hacked :)