Avast WEBforum

Other => Viruses and worms => Topic started by: Mugged on September 09, 2010, 12:43:07 AM

Title: win32:VB-JOC {Trj} infection
Post by: Mugged on September 09, 2010, 12:43:07 AM
I am running window xp and Avast detected a WIN32:VB-JOC treat,  my c:\program files\common files\wise installation wizard\...\txpupd.exec has been infected as well as 2 system vol information\restore\...
It is however unable to delete, fix, or put it in the virus vault. I am getting error: the operation is not supported for this type of archive (42111) when I try to move it to virus vault.
What can I do to get rid of this problem please?

Title: Re: win32:VB-JOC {Trj} infection
Post by: Pondus on September 09, 2010, 12:48:05 AM
Try running this

Malwarebytes Anti-Malware 1.46 http://filehippo.com/download_malwarebytes_anti_malware/
always run update before you scan so you have the latest database
click the remove selected button to quarantine anything found
you may post the scan log here
Title: Re: win32:VB-JOC {Trj} infection
Post by: Mugged on September 09, 2010, 01:12:38 PM


Ran malwarebyte again this morning and it found nothing.
Another forum suggest it may be a false alert.

"I think you'll find the executable Avast is detecting is compressed inside a cab file that is part of a wise installer package (which is why it can't be moved to the Virus Chest). Wise Installer software is now part of Symantec (Norton)

I think it's a false positive on Avasts behalf. "

Just notice another poster here has another problem removing a suspected virus and has updated his Avast a couple of days ago. I upgraded mine yesterday and Avast ask me to restart my computer. First time it ask me to restart. It may have something to do with the update.