Author Topic: Worm and trojan alert confusion- please help :(  (Read 3534 times)

0 Members and 1 Guest are viewing this topic.

Msr22

  • Guest
Worm and trojan alert confusion- please help :(
« on: October 20, 2011, 10:39:20 PM »
I have pretty basic knowledge when it comes to computers so whenever I don't know what something is I always look for topics about it on google. I recently ran my avast scan and it says I have 3 threats on it:

WIN32:Renosa-I [Wrm]  (this one shows up twice)
WIN32:FraudLoad-P [Trj]

When searching for info on these I've seen a variety of responses ranging from it being a false positive and to leave it alone, deleting them can cause problems, links other software to delete it, ect. Like I said i'm have limited knowledge with computers so I would appreciate any help someone can give. If these are real which option do I pick? delete? repair? chest? do nothing?

Thanks,
Msr :)

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37534
  • Not a avast user
Re: Worm and trojan alert confusion- please help :(
« Reply #1 on: October 20, 2011, 10:43:37 PM »
how was they detected....did you run a scan...if so what type?

what is the location of the files detetced...post full path

Msr22

  • Guest
Re: Worm and trojan alert confusion- please help :(
« Reply #2 on: October 20, 2011, 10:47:12 PM »
I did the full scan option. When you say the location or path do you mean the c:\ user... things posted by the warning?
« Last Edit: October 20, 2011, 10:51:00 PM by Msr22 »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37534
  • Not a avast user
Re: Worm and trojan alert confusion- please help :(
« Reply #3 on: October 20, 2011, 10:52:58 PM »
Eksample: it should say something like C\programfile\malware.exe  is detected as Trojan FakeAV


can you post/attach a screenshot of the scan result ?


Quote
If these are real which option do I pick? delete? repair? chest? do nothing?
Clean, Quarantine, or Delete?
http://antivirus.about.com/b/2007/03/11/clean-quarantine-or-delete.htm

Msr22

  • Guest
Re: Worm and trojan alert confusion- please help :(
« Reply #4 on: October 20, 2011, 11:08:14 PM »
I have no way to post a screen shot but it looks like this:

File Name                                                   Severity         Status
C:\Users\Melissa\AppData\Local\Temp\Low\gjg.exe               High        WIN32:Renosa-I [Wrm]
C:\Users\Melissa\AppData\LocalLow\Sun\Java\Deployment\
  cache\6.0\46\6f204aae-2439c2b3                              High        WIN32:Renosa-I [Wrm]
C:\Windows\ERDNT\Hiv-backup\SOFTWARE                          High        WIN32:FraudLoad [Trj]


At the end of each of these is the options to delete, ignore, ect. Not sure if this helps you or is what you are asking for but that's all it says. Also thanks so much for trying to help me and the quick reply :)

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37534
  • Not a avast user
Re: Worm and trojan alert confusion- please help :(
« Reply #5 on: October 20, 2011, 11:12:38 PM »
are the files in chest now ?....you see if you open the chest

Msr22

  • Guest
Re: Worm and trojan alert confusion- please help :(
« Reply #6 on: October 20, 2011, 11:16:54 PM »
It won't let me do anything on avast til I choose an option for these. Should I go ahead and put them in the chest for now?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37534
  • Not a avast user
Re: Worm and trojan alert confusion- please help :(
« Reply #7 on: October 20, 2011, 11:39:03 PM »
If you have not sendt them to chest yet then you can test the files at VirusTotal first



upload suspicious file(s) to www.virustotal.com and test with 43 malware scanners
when you have the result, copy the url in the address bar and post it here for us to see


alternative
Jotti     http://virusscan.jotti.org/en
VirSCAN   http://virscan.org/
Metascan   http://www.metascan-online.com/






Msr22

  • Guest
Re: Worm and trojan alert confusion- please help :(
« Reply #8 on: October 21, 2011, 12:07:37 AM »
Page wouldn't load for virustotal.com. Decided to try the other options. Tried looking for the first file listed and it doesn't even show up or exsist apparently. Can open all the way to the low part but it's now showing the gjg.exe part. The results for the 2nd one's link is http://r.virscan.org/cbb88d5bf66248a14206247ab94a0322 The 3rd file was to big for that site so went to metascan for the 3rd. It's taking a while but will let you know when I get the results

Msr22

  • Guest
Re: Worm and trojan alert confusion- please help :(
« Reply #9 on: October 21, 2011, 12:11:46 AM »