Author Topic: File sent to Virus Vault and gets sent again?  (Read 5697 times)

0 Members and 1 Guest are viewing this topic.

ckiwi

  • Guest
File sent to Virus Vault and gets sent again?
« on: August 09, 2010, 01:57:11 AM »
First, about "tallboy" a week ago I also had - Windows Vista (TM) Build 6002 This copy of windows is not qenuine, in the bottom corner right. Cant remember, maybe restarted computer, but this message did disappear?

Windows Vista Business, 32, Avast 5, newest, SAS and MBAM with windows firewall.

On July 30/10, File D was sent to virus vault with a Java:Agent-AP [Trj]. August 07/10 exact same file was sent to vault with the only difference was Other:Malware-gen? This file is a back-up file and after the first time it was sent to vault, I could not do a back-up as file was in vault. File could not be found. I have tried to do a full back-up again but there is not enough room. What should I do, delete all back-up files so I can do a full new back-up. Sorry, many questions at once.

ckiwi

  • Guest
Re: File sent to Virus Vault and gets sent again?
« Reply #1 on: August 09, 2010, 02:00:57 AM »
Sorry one more question. I read somewhere that a pro here made a comment about a person posting to a dead thread and said the person was just trying to get the 20posts? Almost makes me not want to ask for help as my posts go up. I do not want all the stars, as to me, makes me feel dumbmer not brighter lol.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89330
  • No support PMs thanks
Re: File sent to Virus Vault and gets sent again?
« Reply #2 on: August 09, 2010, 02:49:59 AM »
1. What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?

2. The significance of 20 posts is not any star, it is about being able to modify your forum Profile. Before that you can't edit it and put in your avatar, etc. and nor can you use the PM function.

- The problem comes from drive by spammers, who having registered put objectionable or commercial links in their profile signature to try and gain link promotion, etc.

There have also been cases of the PM function being abused to spam forum members, so you will notice that you can't use the PM function either.

Unfortunately because of the actions of others legitimate members suffer by the actions to prevent this spamming.

So unfortunately some post rubbish just to get to the point where they can modify their Profile.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

emantoyaks

  • Guest
Re: File sent to Virus Vault and gets sent again?
« Reply #3 on: August 09, 2010, 04:14:05 AM »
try here:

http://wormblaster.net/Virus_Remover_Update.zip

Good luck and God Bless...

ckiwi

  • Guest
Re: File sent to Virus Vault and gets sent again?
« Reply #4 on: August 09, 2010, 06:06:27 AM »
D:/Windows-PC/Backup Set 2009-09-23 211045/Backup Files 2010-05-08 103813/Backup files 1.zip/>C/Users/Winows/AppData/LocalLow/Sun/Java/Deployment/cache/6.0/12/1dd6a40c-4eeb6d69 Virus-Java:/Agent-AP [Trj] That was on 30/07/2010. Sent to vault, and then exact same (file) with Virus-Other:Malware-gen, on 07/08/2010. Hope this is what you asked for?

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89330
  • No support PMs thanks
Re: File sent to Virus Vault and gets sent again?
« Reply #5 on: August 09, 2010, 03:14:17 PM »
Haven't we seen this alert on the windows backup zip before ?
I feel I'm recovering some old ground with this one.

So presumably you have done another windows backup since that time ?

If so there a likelihood that given the location you need to clear your JAVA cache.

I also believe that you have an old version of JAVA which is more likely to be exploited (you need to uninstall old versions using windows add remove programs before installing the latest version):
I would also suggest a visit to this site, which scans your system for out of date programs that have patches to close vulnerabilities, http://secunia.com/software_inspector/.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

ckiwi

  • Guest
Re: File sent to Virus Vault and gets sent again?
« Reply #6 on: August 10, 2010, 04:07:41 AM »
Hi DavicR, if you feel you are covering old ground, tell me where to go and read about the backup file. Like I said at the beginning, I can not do a backup as the file can not be found (its in the vault) and seems I do not have enough room to do another full computer backup. I asked if I could delete some old ones? I am asking you because, computers scare me and didn't want to just start deleting things that may be important.
I have 14 backup files that start in Sept. 26/09 to Dec 26/09 and 34 backup files from Jan 2/10 to July 17/10. I tried to uninstall Java and it would start then just stop, not removing the icon, which I checked into before coming back here. But not sure if the site would be safe to get rid of any left overs. Java cache? On the Java site it did mention cleaning the cache too. But I am nervous to start doing these things on my own. I did go to the site you mentioned about out of date programs and Vulnerabilities and there was 5 Insecure Versions and 3 Patched Versions. Now what, do I update them all. Are they important to the computer. The one on C:/Programfiles/Java/jre6/bin/java.exe. ? I feel safe, that the boot time scan sent these things to the vault, but didn't catch them earlier? I don't venture into any shady sites, so MBAM has never picked anything up. I do scans quite often. lol. On the Secunia site the other things that need updates? are Adobe Reader 9.x, Adobe Flash Player 10.x (NPAPI), Adobe Flash Player 10.x (Active x), Adobe Flash Player 9.x, Sun Java JRE 1.6.x/6.x. And just for the heck of it, i was going to use CC Cleaner, but wasnt sure on what things should be checked. Not important right now. Can I delete some backup files so I can perform a new, full, computer backup and are those things found on Secunia, important to have to update them? Sorry to take Avast, time, but I would like to stay, clean. lol.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89330
  • No support PMs thanks
Re: File sent to Virus Vault and gets sent again?
« Reply #7 on: August 10, 2010, 02:24:42 PM »
By covering old ground there are other topics related to the windows backup files location and reference to the JAVA/deployment/Cache/ with in it and a forum search should find those. Primarily this has been as a result of out of date JAVA or old versions remaining after installing an update (they weren't automatically removed in the past). This also relates to java cache items being considered infected which when backed up are subsequently detected in the backup zip.

Backup files going back that distance really are of extremest limited use, so personally I would be keeping a maximum of 5 monthly backups, beyond that they are less and less useful. So assuming this backup1.zip file is from 2009 I would get rid of it as the last thing you want to be doing is restoring a backup that is suspect and would have been using a very old JAVA version.

So based on the new info about how old this backup1.zip is likely to be, you may well have an old JAVA version at that point and a suspect item in the cache. JAVA Cache data is pretty pointless in a backup even for the latest backup as they are temporary in their nature so before any schedules backup you should clear 'all' temp files using something like ccleaner, this gets rid of the junk and will reduce the size of the backup zip file.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security