Avast WEBforum
Other => Viruses and worms => Topic started by: Msr22 on October 20, 2011, 10:39:20 PM
-
I have pretty basic knowledge when it comes to computers so whenever I don't know what something is I always look for topics about it on google. I recently ran my avast scan and it says I have 3 threats on it:
WIN32:Renosa-I [Wrm] (this one shows up twice)
WIN32:FraudLoad-P [Trj]
When searching for info on these I've seen a variety of responses ranging from it being a false positive and to leave it alone, deleting them can cause problems, links other software to delete it, ect. Like I said i'm have limited knowledge with computers so I would appreciate any help someone can give. If these are real which option do I pick? delete? repair? chest? do nothing?
Thanks,
Msr :)
-
how was they detected....did you run a scan...if so what type?
what is the location of the files detetced...post full path
-
I did the full scan option. When you say the location or path do you mean the c:\ user... things posted by the warning?
-
Eksample: it should say something like C\programfile\malware.exe is detected as Trojan FakeAV
can you post/attach a screenshot of the scan result ?
If these are real which option do I pick? delete? repair? chest? do nothing?
Clean, Quarantine, or Delete?
http://antivirus.about.com/b/2007/03/11/clean-quarantine-or-delete.htm
-
I have no way to post a screen shot but it looks like this:
File Name Severity Status
C:\Users\Melissa\AppData\Local\Temp\Low\gjg.exe High WIN32:Renosa-I [Wrm]
C:\Users\Melissa\AppData\LocalLow\Sun\Java\Deployment\
cache\6.0\46\6f204aae-2439c2b3 High WIN32:Renosa-I [Wrm]
C:\Windows\ERDNT\Hiv-backup\SOFTWARE High WIN32:FraudLoad [Trj]
At the end of each of these is the options to delete, ignore, ect. Not sure if this helps you or is what you are asking for but that's all it says. Also thanks so much for trying to help me and the quick reply :)
-
are the files in chest now ?....you see if you open the chest
-
It won't let me do anything on avast til I choose an option for these. Should I go ahead and put them in the chest for now?
-
If you have not sendt them to chest yet then you can test the files at VirusTotal first
upload suspicious file(s) to www.virustotal.com and test with 43 malware scanners
when you have the result, copy the url in the address bar and post it here for us to see
alternative
Jotti http://virusscan.jotti.org/en
VirSCAN http://virscan.org/
Metascan http://www.metascan-online.com/
-
Page wouldn't load for virustotal.com. Decided to try the other options. Tried looking for the first file listed and it doesn't even show up or exsist apparently. Can open all the way to the low part but it's now showing the gjg.exe part. The results for the 2nd one's link is http://r.virscan.org/cbb88d5bf66248a14206247ab94a0322 The 3rd file was to big for that site so went to metascan for the 3rd. It's taking a while but will let you know when I get the results
-
The 3rd's results on metascan link- http://www.metascan-online.com/results.cgi?uid=n3zfqos585kwtsi07lyap0ddg63kke63