Author Topic: Malware that Avast cannot detect or remove, even with latest patch  (Read 3557 times)

0 Members and 1 Guest are viewing this topic.

CenturionsofRome

  • Guest
ScorpionSaver and ScorpionSaver Services are malware that Avast free cannot detect, even with both a full scan and a direct file scan. ScorpionSaver cannot be uninstalled via control panel or diretly deleted either due to having a process constantly running, which can be seen via taskmanager but will immedately restart if process is killed, prevening the malware from being manually deleted. I think I've managed to remove it by right clicking on the process, selecting properties, selecting security, and denying the program all access, then killing its proccess tree, which alowed me to delete the program files, which must be manually found by searching "ScorpionSaver" on the hardrive (The file has backups spread throughout the system, primarily located in internet browser caches) and then deleting it from my recycle bin.
I dont know wher this virus came from, or how this program managed to slip past Avast, but it did and is invisible to Avast once downloaded. I hope Avast fixes this before that malware comes back!
Edit: I cant find any trace of the malware with a search of the hardrive or taskmanager, but it is still showing up in the control panel's list of programs, and when I try to uninstall it from there, the program tries to update itself! Good news is that it appears to be non-functional at this time.
« Last Edit: January 03, 2014, 05:21:07 AM by CenturionsofRome »

jwoods301

  • Guest
Re: Malware that Avast cannot detect or remove, even with latest patch
« Reply #1 on: January 03, 2014, 05:42:24 AM »
Actually, you might consider running a Full Scan using Malwarebytes Anti-Malware.

It has been successful in removing ScorpionSaver...

https://forums.malwarebytes.org/index.php?s=1c0272b481f5ff7f0d214e7a477e8dec&showtopic=139297&hl=

CenturionsofRome

  • Guest
Re: Malware that Avast cannot detect or remove, even with latest patch
« Reply #2 on: January 04, 2014, 01:09:30 AM »
Will it conflict with Avast?

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33927
  • malware fighter
Re: Malware that Avast cannot detect or remove, even with latest patch
« Reply #3 on: January 04, 2014, 01:13:39 AM »
The non-residential use of MBAM won't. Removal instructions: http://www.bleepingcomputer.com/virus-removal/remove-scorpion-saver
But you might seek assistance from one of our qualified removers. This PUP does not harm the computer and is no virus just an unwanted program and you might like it uninstalled.

polonus
« Last Edit: January 04, 2014, 01:16:08 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37603
  • Not a avast user
Re: Malware that Avast cannot detect or remove, even with latest patch
« Reply #4 on: January 04, 2014, 01:17:23 AM »
Will it conflict with Avast?
NO

scorpionsaver is not a virus but a browser hijacker / adware and classed as PUP.....crap that comes bundled with other programs you download
PUP = not virus / Possible Unwanted Program

PUP scan is default off in all avast scan exept boot scan ....so if you want avast to detect and remove PUP you must turn it on
however i recomend using Malwarebytes for PUP removal

Malwarebytes will detect it as PUP.Optional.ScorpionSaver
install MBAM, update it .... run quick scan, make sure evrything detected is marked for removal and click remove selected button
https://helpdesk.malwarebytes.org/entries/23482988-What-are-the-PUP-detections-are-they-threats-and-should-they-be-deleted-

you may download it from here  http://forum.avast.com/index.php?topic=53253.0

clearing your browsers for additional crap i recomend AdwCleaner  http://www.bleepingcomputer.com/download/adwcleaner/





« Last Edit: January 04, 2014, 01:31:37 AM by Pondus »