Author Topic: Win32:VB-BLQ [trj]  (Read 3819 times)

0 Members and 1 Guest are viewing this topic.

gate4exec

  • Guest
Win32:VB-BLQ [trj]
« on: April 02, 2009, 10:53:50 PM »
Hi,
I keep running scans and it finds a malware problem.

The Trojan it finds is named "Win32:VB-BLQ [trj]"
The file infected is: C:\ProgramFiles\AlwilSoftware\Avast4\DATA\log\aswAr1.log

When I look for that file, it doesn't appear.
"Show all hidden files and folders" is activated in my file preferences.

I've run the scan in normal mode as well as safe mode and it keeps finding the bug. Is this a false positive or a legit concern?

Thx

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: Win32:VB-BLQ [trj]
« Reply #1 on: April 02, 2009, 11:12:53 PM »
Hello gate4exec,

Boot into safe mode. (when the PC boots up (after you press the power button) press F8 (you can press it repeatedly). A menu should pop up, there select "Safe mode". Once in safe mode perform a full scan of the PC, avast should be able to delete that Trojan now,

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Win32:VB-BLQ [trj]
« Reply #2 on: April 03, 2009, 02:51:11 PM »
Strange... that file is the antirootkit log ::)
Are you sure that is the infected file not the log?
The best things in life are free.

gate4exec

  • Guest
Re: Win32:VB-BLQ [trj]
« Reply #3 on: April 04, 2009, 09:14:10 AM »
Hello gate4exec,

Boot into safe mode. Once in safe mode perform a full scan of the PC, avast should be able to delete that Trojan now,

polonus


Ran it safe mode. Deleted it.
Rebooted and ran it normally and it's still there. WTF!

Strange... that file is the antirootkit log ::)
Are you sure that is the infected file not the log?
I'm sure.

Anyone else have thoughts or comments?

gate4exec

  • Guest
Re: Win32:VB-BLQ [trj]
« Reply #4 on: April 21, 2009, 07:05:41 PM »
I hate to bump my own thread, but too many days have gone by without any help.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33913
  • malware fighter
Re: Win32:VB-BLQ [trj]
« Reply #5 on: April 21, 2009, 07:55:57 PM »
Hi gate4exec,

Download this tool here: http://siri.geekstogo.com/SmitfraudFix.php
and run...


pol
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!