Author Topic: [RESOLVED] What's Your Take?  (Read 4249 times)

0 Members and 1 Guest are viewing this topic.

Ivon

  • Guest
[RESOLVED] What's Your Take?
« on: September 15, 2010, 08:06:15 AM »
Got this after 5 reboots (overclocking tests)

Malware says I'm fine...so...false positive?
« Last Edit: September 18, 2010, 12:15:46 PM by Ivon »

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: What's Your Take?
« Reply #1 on: September 15, 2010, 08:32:07 AM »
What's bothering me is the lack of a filename. We certainly have to wait for avast! guys to come around and explain what happened here or how to furher diagnose it.
Visit my webpage Angry Sheep Blog

SafeSurf

  • Guest
Re: What's Your Take?
« Reply #2 on: September 15, 2010, 08:48:10 AM »
I believe when you click on "Advanced" it gives you the option to send it to Avast during the next definitions update.  But you are correct in that it does not show the file name perhaps because it is hidden. 

@ Ivon, the next time you get this, right click your Avast orange tool bar at the bottom of your monitor to "Show last pop up message" and see if it gives you any more information.  But you need to do this prior to turning your machine off.

Have you tried a boot-time scan if you have a 32-bit machine? 

Ivon

  • Guest
Re: What's Your Take?
« Reply #3 on: September 15, 2010, 02:22:04 PM »
Cripe...Windows required a restart for updates. SafeSurf came 15min to late :(

I wonder if the alert would show up in one of Avast's many logs...

BTW: Win 7 [64bit]. And at the time of the first (and only alert so far) was during the time I had E-LEET TUNING UTILITY (EVGA's OC Program) running....which is located in "C:\Program Files\EVGA\ELeetTune.exe". None of the Task Man's running processes looked suspicious, Network Meter didn't show 'odd' out-bound traffic (keyloggers, etc). And the computer's been running now for about 2hrs now to allow the thermal paste to settle and no new message popups

SafeSurf

  • Guest
Re: What's Your Take?
« Reply #4 on: September 16, 2010, 10:45:00 AM »
Cripe...Windows required a restart for updates. SafeSurf came 15min to late :(
By the time I finished my post, you had signed off...sorry, but it happens a lot around here.  You're probably OK, but let's check more to play it safe.

Here's what I suggest: 

1. Make sure your settings for Avast Real-Time Shield actions are set to default so that anything that comes up goes to the Virus Chest (do NOT delete them...leave things there).
2. Make sure your Avast definitions are up to date (UTD) and run a FULL scan. 
3. Since you have a 64-bit machine, you can't run a boot-scan (you will with v.5.1), so I'm going to have you run an MBAM (Malwarebytes’ Anti-Malware) scan instead:

·   Download free http://www.malwarebytes.org/ for an on-demand scanner.
·   Double Click mbam-setup.exe to install the application.
·   After install, click update so you have latest database before scanning.
·   Under Settings:
o   General: Automatically Save File After Scan Completes is checked off
o   Scanner SettingsCheck all boxes
o   Updater: Download and install update if available is checked off
·   Once the program has loaded, select "Perform FULL Scan", then click Scan.
·   The scan may take some time to finish, so please be patient.
·   When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
·   Click the “remove selected” button to quarantine anything found.  You will find the infection details under the Quarantine tab.
·   The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
·   Copy & Paste the entire report in your next reply.

Let me know if you have any questions.  Thank you.  :)

Ivon

  • Guest
Re: What's Your Take?
« Reply #5 on: September 17, 2010, 05:13:20 PM »
So far...

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4629

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

9/16/2010 17:29:31
mbam-log-2010-09-16 (17-29-31).txt

Scan type: Full scan (C:\|D:\|G:\|)
Objects scanned: 648301
Time elapsed: 3 hour(s), 17 minute(s), 47 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

SafeSurf

  • Guest
Re: What's Your Take?
« Reply #6 on: September 18, 2010, 01:14:28 AM »
You're MBAM log is clean.  Did your Avast scan also come out clean?

Let me know if you have any other concerns or questions.  Thank you.

Ivon

  • Guest
Re: What's Your Take?
« Reply #7 on: September 18, 2010, 06:00:11 AM »
You're MBAM log is clean.  Did your Avast scan also come out clean?

Let me know if you have any other concerns or questions.  Thank you.

Indeed, it did.

SafeSurf

  • Guest
[RESOLVED] Re: What's Your Take?
« Reply #8 on: September 18, 2010, 08:03:52 AM »
I think you're all set unless you have any other concerns.  Should problems return, you can always post back in this thread.

If you feel that your issue is now resolved/fixed, please go back to the first open post in this topic, click the modify button in that Post and change the title/subject, add [Resolved] to the beginning of the title so this thread can be closed. 

Feel free to come back any time you need help, to learn something new, or just to ask questions.  We are here 24/7 for your convenience.  Thank you for allowing me to assist you.  :)