Author Topic: Avast threat pop-up: aspnet_compiler.exe  (Read 4239 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast threat pop-up: aspnet_compiler.exe
« on: January 21, 2018, 10:11:13 PM »
Hello,

I just got an Avast threat pop-up informing me threats had been detected and moved to the chest:

1:
Threat Name: Win32:Malware-gen   Infected file: aspnet_compiler.exe
Original location: C:\Windows\SoftwareDistribution\Download\3bbe913523b063ccd6f178f733c3e742\amd64_Microsoft-Windows-NetFx3-OnDemand-Package~~AMD64~~10.0.16299.15\x86\_aspnet_compiler_b03f5f7f11d50a3a_10.0.16299.15_none_33dac4e0b5d00f53

2:
Threat Name: Win32:Malware-gen   Infected file: aspnet_compiler.exe
Original location: C:\$WINDOWS.~BT\NewOS\Windows\Microsoft.NET\Framework\v2.0.50727

I'm not very IT savvy, so I hoped someone would be able to help me in figuring out a) do I need to worry about these? b) if so, what should I do?

Thanks!

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2293
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #1 on: January 22, 2018, 08:24:27 AM »
Hello,
send us the detected files using https://www.avast.com/false-positive-file-form.php
Files should be in the avast's virus chest if you are using default settings.

Milos

REDACTED

  • Guest
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #2 on: January 22, 2018, 03:43:08 PM »
Any update on this? Over the weekend 6 dozen PC's for multiple customer's had...

Quote
Object Name:   C:\Windows\SoftwareDistribution\Download\4621457ada0167559a83d8fa537a53ad\x86_Microsoft-Windows-NetFx3-OnDemand-Package~~X86~~10.0.16299.15\x86_aspnet_compiler_b03f5f7f11d50a3a_10.0.16299.15_none_33dac4e0b5d00f53\aspnet_compiler.exe

...and...

Quote
Object Name:   C:\$WINDOWS.~BT\NewOS\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe

...flagged as viruses.

Offline Wayne23

  • Newbie
  • *
  • Posts: 3
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #3 on: January 22, 2018, 05:59:40 PM »
Any update on this? Over the weekend 6 dozen PC's for multiple customer's had...

Quote
Object Name:   C:\Windows\SoftwareDistribution\Download\4621457ada0167559a83d8fa537a53ad\x86_Microsoft-Windows-NetFx3-OnDemand-Package~~X86~~10.0.16299.15\x86_aspnet_compiler_b03f5f7f11d50a3a_10.0.16299.15_none_33dac4e0b5d00f53\aspnet_compiler.exe

...and...

Quote
Object Name:   C:\$WINDOWS.~BT\NewOS\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe

...flagged as viruses.

Same here, I have about 7 machines on my network with the same alert. False positive??

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #4 on: January 22, 2018, 06:48:58 PM »
Have anyone sendt file (s) to avast lab?  ... see post from Milos above


Offline guillermo220

  • Sr. Member
  • ****
  • Posts: 219
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #5 on: January 22, 2018, 10:28:32 PM »
Hi,

Same here. And I ´m upgrading as we speak win 10...


REDACTED

  • Guest
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #6 on: January 22, 2018, 11:15:22 PM »
« Last Edit: January 22, 2018, 11:23:08 PM by ChaseAtSolara »

REDACTED

  • Guest
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #7 on: January 22, 2018, 11:59:21 PM »
Well I've fallen at the first hurdle, because I can't work out the location of the chest in order to upload those files to that form....


I'm also more confused now though....because the reply said to send this as a false positive, however the link in the other reply about aspnet_compiler.exe says it's very harmful malware.....how can I tell which it is?!
« Last Edit: January 23, 2018, 12:01:03 AM by cbminstrel »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #8 on: January 23, 2018, 12:31:53 AM »
Quote
  Well I've fallen at the first hurdle, because I can't work out the location of the chest in order to upload those files to that form....   
https://forum.avast.com/index.php?topic=14433.msg1289438#msg1289438



REDACTED

  • Guest
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #9 on: January 23, 2018, 09:12:08 AM »
Hey guys, had these two pop up as well today.

One happened without a scan, the other happened in a scan.

Any idea if this is a real threat or a FP?


Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2293
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #10 on: January 23, 2018, 10:45:49 AM »
Submitted aspnet_compiler.exe to the form link Milos provided.

https://www.virustotal.com/#/file/2720106d61861b3c91575fa92309f6c677da04c48e70ecf0675ffeb9e90253e7/
Thank you. This is a False positive and should be fixed now.

Milos

REDACTED

  • Guest
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #11 on: January 24, 2018, 04:24:07 PM »
Hello,

So, I finally managed to do a full system scan rather than the smart one (it took 3 hours...is that normal or do I just have a lot of junk on my laptop?! LOL). It found a third item with the same aspnet_compiler.exe:

Threat Name: Win32:Malware-gen   Infected file: aspnet_compiler.exe
Original location: C:\$WINDOWS.~BT\NewOS\Windows\WinSxS\x86_aspnet_compiler_b03f5f7f11d50a3a_10.0.16299.15_none_33dac4e0b5d00f53

I still can't figure out how to use that submit false positive form, I can't find the files in the file browser (the only folder named 'chest' I navigate to is empty). So instead I've submitted them as a false positive using the feature in the Avast interface, however it says that there won't be a response, so I'm unsure how to proceed from here?

Thanks!

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #12 on: January 24, 2018, 04:33:55 PM »
Quote
I still can't figure out how to use that submit false positive form, I can't find the files in the file browser (the only folder named 'chest' I navigate to is empty). So instead I've submitted them as a false positive using the feature in the Avast interface, however it says that there won't be a response, so I'm unsure how to proceed from here?   
You can't browse to the chest/quarantine, it is a protected area.
You have to restore (to orginal location, avast may detect again) or extract (to a new folder)  the file before you can use the form

-Create a new folder on your desktop and name it .... false positive  ( you can name it anything)
-exlude that folder from avast scan
-extract file to that folder

« Last Edit: January 24, 2018, 04:39:36 PM by Pondus »

REDACTED

  • Guest
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #13 on: January 24, 2018, 04:51:44 PM »
Hi Pondus,

Sorry, still struggling!

If I right click on the file/files in the chest (like the walkthrough says), nothing happens, it doesn't give me any options.

The only things I can do with the files in the chest in the Avast interface are 'delete' 'restore' or 'send for analysis' (which I've already done).

My Avast updated last month, maybe the extraction option was changed or removed?

I appreciate your help.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Avast threat pop-up: aspnet_compiler.exe
« Reply #14 on: January 24, 2018, 06:48:27 PM »
Quote
My Avast updated last month, maybe the extraction option was changed or removed?   
Hmmm ... maybe, I don't use it anymore so don't know