Author Topic: Infected with Malware Win32: Vibpack (Wrm)  (Read 15150 times)

0 Members and 1 Guest are viewing this topic.

mikeyewz

  • Guest
Infected with Malware Win32: Vibpack (Wrm)
« on: July 06, 2005, 03:37:48 PM »
Hi, When I run Ad-aware I get a message from my Avast Antivirus telling me I have "Malware Win32: Vibpack (Wrm)". It tells me to "Move to Chest" (quarantine), but no sooner I do this then another one pops up. I can't stop them without cancelling Ad-aware. When I do a complete scan using Avast, it does not pick them up.
I have also run S&D and Hijackthis, but I cannot see anything untoward.
Any ideas?
Thanks for your time.
Mike.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31205
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #1 on: July 06, 2005, 03:48:23 PM »
It can be a false positive in a temporary ad-aware file.
Please let us know what exact file (and its location) is detected as being infected.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67235
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #2 on: July 06, 2005, 03:56:58 PM »
Submit the file to Jotti and let us know the results, i.e., if it is or not a false positive.  :)
The best things in life are free.

mikeyewz

  • Guest
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #3 on: July 06, 2005, 04:00:03 PM »
Hi, This is the file name as provided by Avast warning:
name: Setup.exe C:\Documents and Settings\MikeHughes\LocalSettings\Temp\AAWTMP\C5057782.
I hope this helps.
Mike.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11818
    • AVAST Software
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #4 on: July 06, 2005, 04:28:50 PM »
It seems like a conflict between Ad-aware and avast! to me - Adaware extracts or opens a file and avast! detects the file at the moment. I don't know, however, whether the detected file is internal Adaware data file or some file found on your disk.
I'd suggest to temporarily stop avast! Standard Shield before running Ad-aware.

mikeyewz

  • Guest
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #5 on: July 06, 2005, 04:55:46 PM »
I tried disabling Avast then running Ad-aware, and it ran OK, with no viruses detected. I then re-enabled Avast, ran Ad-aware again and I still have the same problem.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11818
    • AVAST Software
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #6 on: July 06, 2005, 04:58:10 PM »
Well, maybe it's just a file that Adaware temporarily extracts into TEMP folder when it starts a scan (a file containing unencrypted malware signatures?)

mikeyewz

  • Guest
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #7 on: July 06, 2005, 05:07:45 PM »
Hi, any idea where I go from here to try and get rid of it?
Cheers.
Mike.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31205
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #8 on: July 06, 2005, 07:04:55 PM »
Already contact the people from ad-aware?
It seem that ad-aware creates a temp file which causes Avast to detect it.
As Igor said, this is likely the case.
So it is not likely a fault by avast, but by ad-aware.

ps: You still havent told us the exaxt file, only thing you did was telling us a folder

mikeyewz

  • Guest
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #9 on: July 06, 2005, 07:13:34 PM »
Hi, I have been in touch with Ad-aware and was told:
During a scan, Ad-Aware will temporarily decompress files to scan their contents without activating the content, but in doing so, the file is noticed by the antivirus' resident scanner. Also, some antivirus applications include an option to quarantine infected files, and when Ad-Aware decompresses these quarantined files, the antivirus background scanner detects the virus moving outside the quarantine area.
So I don't think there is anything to worry about.
Thanks for your help.
Mike.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31205
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #10 on: July 06, 2005, 07:25:37 PM »
Indeed, there is nothing to worry about since it is very clear that it is a temporary ad-aware file where the malware is detected. But still (and this is just my opinion) I think that ad-aware should change the way their application scans to prevent false positives like this.

Offline polonus

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 33533
  • malware fighter
Re: Infected with Malware Win32: Vibpack (Wrm)
« Reply #11 on: July 07, 2005, 12:00:25 AM »
Hi Eddy,

Sometimes the one scanner scans the things the other has taken off, so you think that it has come back. This with adware too.
By the way your log analyzer is a super tool,

greets,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!