Avast WEBforum
Other => Viruses and worms => Topic started by: futant on April 06, 2012, 07:18:39 PM
-
Hello there, early this morning I did a full scan after a someone downloaded a 'font' from www.simplythebest.net/fonts onto my computer and it started acting strangely. The results were scary - 36 files infected with trojan Cycbot-LW, avast not giving any options to do anything with the files. No move to chest, repair etc options were available. SO then I did a boot scan which, curiously found nothing then I did another full scan which again, found nothing. Looking in the log files I can't even find the log of the scan that found these results. Now it seems like the thing has disappeared but I know no action was taken so is it making itself invisible or something? Attached is a screenshot of the results, showing that avast files have been infected. Can anyone help me out?
Thanks
-
let me guess.....you did a custom scan and selected "scan memory" ?
-
Why are you scanning memory?
Memory is just that, so you won't be able to remove memory, as it is stored in your computer.
It looks like all of those are false positives. Did anything alert besides memory blocks?
-
That download site seems OK.
Only issue found there is that the server software gives away the full system info,
which is an additional security risk for the webmaster/hoster, and could be repaired via apache server settings.
Only scan with a suspicious result is: http://urlquery.net/report.php?id=39083
but at Zscaler I get a Benign green 9/100, site does not use Java applets, silverlight, flash so secure site,
polonus
-
Thanks, that's very reassuring. Yes I did scan memory, to be honest I don't really know what I'm doing (trying to learn!) and a friend suggested a while ago when a virus showed up to scan the memory as well as everything else. Is there no point scanning the memory then? Why was cycbot diagnosed? The computer was behaving a bit strangely (glitchy, programs not opening etc) but now it seems ok.Sorry if it seems like I'm wasting your time, I find this stuff fascinating but so far pretty bewildering...
-
scanning of memory is already part of the default scan...
dont play with the scan settings if you do not know what happens.....
do not use the scan memory setting as this give some veird results....the forum is full of cases if you search
use the default quick/full scan with default settings
The computer was behaving a bit strangely
can recomend Malwarebytes as an extra scanner alongside avast ;)
-
Thanks Pondus, you've set my mind at rest :) I guess I was being a bit over-eager! Been reading a lot about viruses etc and made myself paranoid...