Author Topic: Infection Blocked! pop up keeps showing even after full scan and cleared cache  (Read 3658 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Two popups keep showing even after a full scan. I cleared the DROPBOX cache but it's still showing up. How do I remove the infected Trj files and get this popup to STOP??

I'm running MacOS 10.11.4

Infection blocked!
Avast Filesystem shield has blocked a threat and moved it to the Chest.

Infectin: PDF:UrlMal-inf [Trj]
User:      javajudi
Process:  /Applications/Dropbox.app/Contents/MacOS/Dropbox
File:        /Users/javajudi/Dropbox/.dropbox.cache/~2caddcf4.tmp

same info but different file name for second popup
File:        /Users/javajudi/Dropbox/.dropbox.cache/~4db546df.tmp


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
PDF:UrlMal-inf [Trj] means a pdf.doc that containe a clickable link to a blacklisted URL

Quote
I cleared the DROPBOX cache but it's still showing up
Did you reboot after?

« Last Edit: May 03, 2016, 01:18:00 PM by Pondus »

Offline tumic

  • Avast team
  • Advanced Poster
  • *
  • Posts: 723
The file in the Dropbox cache is "generated" from some file in your Dropbox cloud storage. According to the infection, it will be some PDF file. Deleteing the file from Dropbox will solve your problem.

REDACTED

  • Guest
Yes I did reboot after clearing the cache. Dropbox recreated the folders and the warning pop ups came back.

I have thousands of PDFs in my dropbox. How can I determine which files are the ones causing the problem?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Scan them and see if avast flags one.

REDACTED

  • Guest
the path on the alert suggests its a temp file located in the cache. There's no actual file by that name.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
As Tumic sais, the temp file is created using one of the existing files.

REDACTED

  • Guest
I scanned the DROPBOX files and no viruses were detected. The pop ups are still showing. I emptied the cache again. restarted, ran the scan again. same problem. temp files reappear even after trashing them. Urggghhhhhh!!!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37529
  • Not a avast user
Try uninstall dropbox, reboot and install again ... any change?