Author Topic: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked  (Read 23620 times)

0 Members and 1 Guest are viewing this topic.

anglophile1

  • Guest
Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« on: December 06, 2013, 04:44:46 PM »
Hello,

I was wondering if this file is actually harmful?  It seems to be linked to google updater and I keep getting a popup saying this has been blocked: Win32:Fareit-LM [Trj]
Every few minutes.  I did a search on it, and people are talking about it here too: http://forums.moneysavingexpert.com/showthread.php?p=63995744
Is it dangerous or are they right, is it a false positive? My information is the same as theirs.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #1 on: December 06, 2013, 04:55:39 PM »
Could you attach a screenshot of the Avast alert please

clizlee

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #2 on: December 06, 2013, 05:33:49 PM »
I am getting the same thing on my computer. Won't stop popping up. It pops up every minute or so sometimes more. Attached is a screen shot of the alert (at least I think I attached it).

Fuego

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #3 on: December 06, 2013, 05:52:14 PM »
I'm receiving the very same alert - two in a row every couple of minutes.  A full AVAST scan does not find anything, nor does a competitor's product.

clizlee

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #4 on: December 06, 2013, 06:07:49 PM »
Mine seems to have finally stopped alerting me. Maybe it is a false positive?

PhilR

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #5 on: December 06, 2013, 06:10:06 PM »
Me too.

Please fix this false positive!

melissasu

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #6 on: December 06, 2013, 06:12:15 PM »
I'm also receiving these alerts - every few minutes. Just started today. I can't attach a screenshot, but here is what the Avast popup says:

avast! Web Shield has blocked a harmful webpage or file.
Object: http://.../GoogleUpdateSetup.exe
Infection: Win32:Fareit-LM (Trj)
Process: C:\\Windows\system32\svchost.exe

clizlee

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #7 on: December 06, 2013, 06:27:40 PM »
Found this link from another forum post. It looks like Avast is aware of it: https://twitter.com/avast_antivirus/status/408997111896608768

mfaris

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #8 on: December 06, 2013, 07:29:49 PM »
I am having this same issue, it is going off every few minutes.  There is a pop up that a threat has been detected Win32:Fareit-LM [Trj]
Help! How do I stop this?!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #9 on: December 06, 2013, 07:52:42 PM »
Could you update Avast and see if the FP has been fixed

tlwright21

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #10 on: December 06, 2013, 09:04:27 PM »
I started getting this popup repeatedly today

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #11 on: December 06, 2013, 09:14:15 PM »
I started getting this popup repeatedly today

You can send  virus@avast.com , please.
put "False positive" to email subject

use http://www.avast.com/contact-form.php

add here the url to the exclusion list

« Last Edit: December 06, 2013, 09:23:15 PM by jefferson santiag »

mbourne

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #12 on: December 06, 2013, 09:32:05 PM »
How do you find the full URL to exclude?

The popup only shows "http://.../GoogleUpdateSetup.exe", and the "More details..." button still only shows as much as "http://r5---sn-aigeznl6.c.pack.google.com/edgedl/upd..."!

Offline jefferson sant

  • Starting Graphoman
  • *
  • Posts: 6677
  • volunteer
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #13 on: December 06, 2013, 09:37:23 PM »
Open the avast >Statistics> place the mouse pointer on the url in last scanned items

or elseth the logs C:\ProgramData\AVAST Software\Avast\report\WebShield.txt 
« Last Edit: December 06, 2013, 09:44:18 PM by jefferson santiag »

mbourne

  • Guest
Re: Win32:Fareit-LM [Trj] repeated pop up saying it's been blocked
« Reply #14 on: December 06, 2013, 09:46:04 PM »
Thanks. Logs are in <C:\ProgramData\Alwil Software\Avast5\report\> for me - maybe it depends on whether Avast! was installed fresh or upgraded from a previous version.