Author Topic: win32:VB-JOC {Trj} infection  (Read 3207 times)

0 Members and 1 Guest are viewing this topic.

Mugged

  • Guest
win32:VB-JOC {Trj} infection
« on: September 09, 2010, 12:43:07 AM »
I am running window xp and Avast detected a WIN32:VB-JOC treat,  my c:\program files\common files\wise installation wizard\...\txpupd.exec has been infected as well as 2 system vol information\restore\...
It is however unable to delete, fix, or put it in the virus vault. I am getting error: the operation is not supported for this type of archive (42111) when I try to move it to virus vault.
What can I do to get rid of this problem please?


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: win32:VB-JOC {Trj} infection
« Reply #1 on: September 09, 2010, 12:48:05 AM »
Try running this

Malwarebytes Anti-Malware 1.46 http://filehippo.com/download_malwarebytes_anti_malware/
always run update before you scan so you have the latest database
click the remove selected button to quarantine anything found
you may post the scan log here

Mugged

  • Guest
Re: win32:VB-JOC {Trj} infection
« Reply #2 on: September 09, 2010, 01:12:38 PM »


Ran malwarebyte again this morning and it found nothing.
Another forum suggest it may be a false alert.

"I think you'll find the executable Avast is detecting is compressed inside a cab file that is part of a wise installer package (which is why it can't be moved to the Virus Chest). Wise Installer software is now part of Symantec (Norton)

I think it's a false positive on Avasts behalf. "

Just notice another poster here has another problem removing a suspected virus and has updated his Avast a couple of days ago. I upgraded mine yesterday and Avast ask me to restart my computer. First time it ask me to restart. It may have something to do with the update.