Avast WEBforum

Other => Viruses and worms => Topic started by: REDACTED on February 22, 2017, 03:01:42 AM

Title: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:01:42 AM
Hi,

I've recently been running routine scans on my computer and it has been bringing up tons of VBS:Malware-gen. I know next to very little about computer security systems, but I've had my macbook air for about five years now and never really had any problems with it. On my last scan it dug up some 80+ VBS:Malware-gen but I still only have about 4 virus' in the Virus Chest. I ran another scan and the virus is still showing up in the scan, what is this stuff and how do I get rid of it?

Thanks for any help you could offer
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:15:22 AM
I'm having the same problem, I just ran a full Avast scan and it found 76 Malware-gen items but I ran Malwarebytes and it found nothing. I think the latest Avast virus definition update seems really messed up.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:21:19 AM
Well it's somewhat comforting to know it's not just me. I'm looking through the report and the path shows the malware popping up in tons of odd places, video game save files, my dictionary, power points from university I downloaded, as well as my cache. Are these the kinds of places the malware is popping up in for you?
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:25:16 AM
Hi people,

Hopefully it makes you feel better knowing that it's happening to others too. As soon as I booted up my PC today I've been getting constant pop ups of VBS:Maleware-Gen detected. Did a full virus scan and Avast found about 90 things infected with VBS:Maleware-Gen, meanwhile Malwarebytes has found nothing. Most likely a bad virus definition update
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:27:03 AM
For me a lot of the places Avast reportedly found Malwaregen are the config folder for PyCharm (which is legitimate programming software) and the folder for the Windows Store app Asphalt Airborne. So its popping up in odd places for me too.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:31:41 AM
Yup. same here, I just powered on my PC an hour ago, kept getting VBS:Malware-gen pop-ups from Avast randomly when browsing with Chrome, then I decided to run a full scan to see what is really going on, then BANG, over 40 VBS:Malware-gen detections showed up , PC is equipped with malwarebytes+cryptoprevent, one of the strongest security combo out there....
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:33:54 AM
Same here. This is very strange.
Title: Re: VBS:Malware-gen
Post by: Lotan on February 22, 2017, 03:34:35 AM
same, i thought it was just the one skype issue i had but it looks like avast may be having issues with its virus definitions
Title: Re: VBS:Malware-gen
Post by: TrueIndian on February 22, 2017, 03:35:00 AM
Guys please make a different topic in this section to get help so we don't hijack someone else's topic .

@passingcommoner can you attach a screenshot of the scan results so we can see what actually is detected?
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:45:29 AM
Sure thing, this is the kind of stuff the scans has been bringing up.

Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:53:14 AM
hey i have a very similar screen shot of what was just posted except I am on a Mac computer. Im also using avast+malwarebytes. Is there any solution or way to remove this virus?
Title: Re: VBS:Malware-gen
Post by: TrueIndian on February 22, 2017, 03:56:16 AM
you guys can submit the files to avast as false positive:
https://www.avast.com/false-positive-file-form.php
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 03:59:46 AM
Whew, well that's a load off my mind. Thanks so much for the help!
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 04:01:05 AM
you guys can submit the files to avast as false positive:
https://www.avast.com/false-positive-file-form.php

So there is no viruses? Our computers are fine we can do things as normal?
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 04:26:39 AM
Well, I've been getting this type of warning about a this address: "htts://af.opera.com/api/query?client=opera"

Started today with this VBS:Malware-gen

Given the type of pages people have been describing i'll bet it has something to do with encrypted communication, that Skype probably uses too.

It's annoying as hell and got me in some sort of panic since this is my banking computer.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 04:53:16 AM
Created an account to say that I'm also experiencing this issue. Malwarebytes is not detecting any malwares from my PC. Hopefully we can get a word from Avast about this issue. The pop up appears whenever I'm browsing the internet.
Title: Re: VBS:Malware-gen
Post by: eloueravoodoo on February 22, 2017, 04:54:45 AM
I've got VBS:Malware-gen apparently. Just out of the blue. Avast said I had 96 infected files and moved around 66 per cent to the Chest eventually (really had to muck about to even get Avast to do that). But I have 23 infected files left and Avast won't move them, delete them, or do anything to them. When I restart the computer Avast isn't automatically picking them up and moving them to the Chest or deleting them. What is going on please? Tuesday 22 Feb 2017
Title: Re: VBS:Malware-gen
Post by: TrueIndian on February 22, 2017, 04:58:16 AM
Most probably a false positive.Submit files to avast as I have mentioned before.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 05:04:41 AM
Similar problem here.  Hope this is just to do with the update.  When will someone from Avast reply here and tell us what's going on?
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 05:14:04 AM
Made an account to post here saying that it's finding threats everywhere out of the blue. just started today.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 05:28:48 AM
This is almost definitely a false positive. Folks should report it and keep an eye for virus definition updates or a post on this thread from a staff member. I'm not sure how many are online / awake but it shouldn't be long  :)

you guys can submit the files to avast as false positive:
https://www.avast.com/false-positive-file-form.php
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 05:32:16 AM
Joined the forum to add to the topic...So checking the status of an order on amazon,I got a threat blocked warning.I changed my amazon password,and ran an avast virus full system scan,as I'd normally do nightly before I go to bed,but with the threat detected.I thought I'll run it earlier,just to make sure it wasn't anything too major.It took three scans,because I thought the scanner had frozen.So after letting it run all evening 3+ hours,I came back to see it finally finished a full system scan. 385 threats same thing all of them VBS:malware-gen.,most on Extremely random files,a bunch of them on really old files. .jpgs (some 5+ yrs old),jpegs,docs files,Cookie files,.idrc files parts of adobe products,.dat files,.png files,.ms files,...

I knew this was a massive false positive,as I've had these problems before,but just not to this scale.Things like this make me feel less safe,because I feel like I can't trust the results.

I'm getting more,and more frustrated with this antivirus software.
Title: Re: VBS:Malware-gen
Post by: TrueIndian on February 22, 2017, 05:35:02 AM
Mistakes like this have happened before and antivirus software is made by humans too so mistakes are natural.Hang tight and they will fix it.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 05:45:38 AM
Mistakes like this have happened before and antivirus software is made by humans too so mistakes are natural.Hang tight and they will fix it.
Is it safe to use my laptop while they fixing it?
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 05:59:05 AM
I really hope they fix this soon. Literally every hour or so I get a notification about this dumb virus even though I am on legit safe sites. Gives me a heart attack every single time
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 06:01:07 AM
I really hope they fix this soon. Literally every hour or so I get a notification about this dumb virus even though I am on legit safe sites. Gives me a heart attack every single time
You use the compter while waiting on fix? BTW I think this is not a virus it's a false alarm
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 06:19:20 AM
... macbook air for about five years now ... VBS:Malware-gen ...

Um, VBS? On a macbook? I assume it runs OS X? VBS runs on windows and so would VBS malware.
Title: Re: VBS:Malware-gen
Post by: thompjs on February 22, 2017, 06:24:58 AM
Since Avast has moved hundreds or thousands of files from C:\Windows\xxx to chest is my machine corrupted beyond repair?
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 06:26:54 AM
I've had two computers in my household report the same issue.

Worse yet, on my fiance's computer, I initially scheduled a boot scan; on reboot, it started deleting literally every file from the Windows language packs on on old drive on his system.

This is either a false positive or there's something very infectious going on; it almost seems like it HAS to be the former. Regardless, I'd advise anyone experiencing the problem from running a boot scan until this is resolved.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 06:32:18 AM
Mistakes like this have happened before and antivirus software is made by humans too so mistakes are natural.Hang tight and they will fix it.

If what was mentioned up-thread is true—that it's quarantining files from actual active Windows installations—then this is a pretty huge mistake.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 07:14:35 AM
Made an account to say that I too have been getting this message over and over again. Also on a Macbook (late 2015 running OS X, have had it for less than a month) and I'm using Chrome. Noticed that sometimes when I click on my quick links from my Google Homepage it would just take me to Google? And then when I was on Amazon, I kept getting "infection blocked!" warnings over and over again and the url seemed like it has a problem with their shopping cart. So then I ran a scan and OH BOY. 11, then 40, and now just 8 every single time I scan no matter how much I quarantine. Malwarebytes detected nothing. Hope they get this fixed soon, I about had a meltdown.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 07:14:45 AM
Hello all, I just found this thread.

I got the same problem on my laptop and I think I made a huge mistake!

When I got the initial pop up regarding the root kit detection it asked me if i wanted to delete, so i assumed I had picked up something legit and clicked yes.

Then it asked me if i wanted to restart and do a boot scan so I said okay.

Then it started deleting a ton of files off my computer! I realized 2/3rds of the way through that something was seriously wrong and found this thread via my iphone.

I cancelled the boot scan and reloaded windows and immediately did a scan with malwarebytes... nothing detected.

So a ton of files were deleted off my computer, is there any way I can restore those or at least see a log file on which files were deleted?

I didn't see any option in avast itself to look at logs and I went to the 'log' directory but couldn't find anything?

So annoyed, it should have at least created a restore point before deleting all those files. :(
Title: Re: VBS:Malware-gen
Post by: Asyn on February 22, 2017, 07:23:16 AM
-> https://forum.avast.com/index.php?topic=197572.0
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 07:27:32 AM
sseth, have you checked the Virus Chest for files? I was able to retrieve all files from chest. However, they never got to the point of deletion.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 07:31:53 AM
I checked the virus chest and it is empty!

It must have permanently deleted those files. :(

Windows is still running even though some system files were deleted but I guess I will have to try out all my applications and look through all my folders to figure out what is missing.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 07:38:02 AM
I'm getting this on Amazon's shopping cart too.
Title: Re: VBS:Malware-gen
Post by: Eddy on February 22, 2017, 07:48:21 AM
These detections are false positives.
It is a bug in the latest detection and it would really surprise me if avast isn't already working on it.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 07:59:11 AM
These detections are false positives.
It is a bug in the latest detection and it would really surprise me if avast isn't already working on it.
This is at least a piece of mind, thank you. Nice bug -_-
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 08:18:03 AM
Same thing has been happening to my friend and I, I just randomly came home from school and discovered this alert. It's appeared right after running Minecraft, and the Java terminal. For me, it says the process is the JavaApplet plugin. I ran a scan and it even detected my swapfiles as VBS:Malware-gen. Yep. It has to be due to the recent virus definitions update.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 08:22:49 AM
Same thing here - it almost gutted my system. Any update when this might be addressed?
Title: Re: VBS:Malware-gen
Post by: TrueIndian on February 22, 2017, 08:32:09 AM
They acknowledge the issue so a update will be rolled out with this detection disabled  :)
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 08:50:20 AM
Well though that is good to hear - I may have lost a significant amount of personal files and I am now checking the integrity of my OS as I know at least 700 files were deleted!
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 08:58:06 AM
Great to know it's a false positive! On a PC running Windows 8 and Chrome, I'm getting it every fifteen minutes or so, on Hotmail and eBay.


Title: Re: VBS:Malware-gen
Post by: Eddy on February 22, 2017, 09:30:43 AM
https://forum.avast.com/index.php?topic=197620.msg1371153#msg1371153
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 05:06:11 PM
Yeah I am saving the problem. It's also detecting threats from I site I use called Twitch.tv and its never done that before. One of my games on my computer had a bunch of its files flagged too. I hope it's just a bad update
Title: Re: VBS:Malware-gen
Post by: TrueIndian on February 22, 2017, 06:05:51 PM
Its already been fixed in the new update.
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 22, 2017, 11:44:49 PM
(http://C:\Users\Debi Whalen\Downloads\Avast error-page-001)

I hope you get this.  Being a newbie, I am not sure this image will work.  Got 6 pages of errors!!!
Title: Re: VBS:Malware-gen
Post by: REDACTED on February 23, 2017, 12:21:36 AM
How about this:
1. How come it occurred on a Macbook.
2. How come it wouldn't restore anything, but felt free to delete them, even though the 'delete' button asks me if I want to 'restore the selected items' ?
3. The step-by-step VBS:Mal... recovery process will not work for OS X.