Author Topic: Infected with DOS virus?  (Read 2180 times)

0 Members and 1 Guest are viewing this topic.

Zagor

  • Guest
Infected with DOS virus?
« on: December 10, 2005, 05:04:25 AM »
Hi all,
I ran on demand scan of the memory and listen to this:

Process 3672, memory block 0x00B5B000, block size 589824 [L] Saturday 14th-669 (0)
During the file repair, error occurred: The system cannot find the file specified
Infected files: 1
Now, I’ve had that result couple of times (as you can see at one of my previous posts
http://forum.avast.com/index.php?topic=17773.msg151146#msg151146).

Should I ignore it?
Do you have any ideas?

Thanks
« Last Edit: December 10, 2005, 05:25:39 AM by Zagor »

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Infected with DOS virus?
« Reply #1 on: December 10, 2005, 10:41:59 AM »
Well, as Igor said, full memory scanning is always sort of prone to false positives. I think you can safely ignore this one.

Which process is it, btw? (use the process id and look it up the Task Manager)
If at first you don't succeed, then skydiving's not for you.

Zagor

  • Guest
Re: Infected with DOS virus?
« Reply #2 on: December 10, 2005, 05:13:48 PM »
It's ok, it's Bit Defender Free Edition's Scan Server. I should have looked there before. Listen what happened just now:

Immediately after the Web Shield detected:
Sign of "JS:Classloader-6" has been found in
http://    some page   /loaderadv416.jar\Counter.class file.

I did a memory scan (ignoring bit defender’s process) and this happens:
Sign of "JS:ClassLoader-5" has been found in "*PROCESS\5a4\1279000\8000" file,
Sign of "JS:ClassLoader-5" has been found in "*PROCESS\5a4\20f1000\3d8000" file,
After I boot scanned all disks and found nothing, memory scan said it was all clean.

Note that after that bit defender found Trojan in some archive. But I don’t see how could he become active?
Another false alarm?
« Last Edit: December 10, 2005, 08:22:46 PM by Zagor »