Jump to content


Photo

Virus Detected - Adaware Deletes but comes back

Virus Detec

  • This topic is locked This topic is locked
7 replies to this topic

#1 ossiestorm

ossiestorm

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 02 December 2012 - 01:57 AM

Hi All,

anyone seen the virus being picked up by Adaware in the following files:

121031200349-M[2].zip
121103031826-l[1].zip

Adaware will delete the file and the virus seems to be gone when I do another scan but comes back. Perhaps it is hidden somewhere else and Adaware is not picking it up?


Do we know what the virus does?

#2 CeciliaB

CeciliaB

    Volunteer

  • Moderator
  • 7428 posts

Posted 02 December 2012 - 04:33 PM

Hi ossiestorm,

Sorry, but it's impossible to know what those two zip files contain.
Do you know in which folders they are located?
Do you find the files if you search for them?
What does Ad-Aware call the threats that are in the files?

#3 pludikar

pludikar

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 02 December 2012 - 11:04 PM

I have the same problem

both found in ....\local settings\application data\adaware\data

Virus is listed as HTML:Fraud-J

#4 CeciliaB

CeciliaB

    Volunteer

  • Moderator
  • 7428 posts

Posted 03 December 2012 - 12:08 AM

Hi pludikar,

Does Ad-Aware find zip files in that folder?
I don't have any zip files in that folder. But anyway, it is probably false positives, since it's unlikely that a malicious program would use an Ad-Aware folder. Please, follow the guide http://www.lavasofts...showtopic=18033 to give Lavasoft all the information they need to be able to investigate if it is a false positive.

#5 CeciliaB

CeciliaB

    Volunteer

  • Moderator
  • 7428 posts

Posted 03 December 2012 - 12:06 PM

Hi again ossiestorm and pludikar,

I have discussed this with my contact person at Lavasoft. It's a false positive and it will be corrected as soon as possible.

#6 istaton

istaton

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 05 December 2012 - 01:38 PM

Same problem here. The zip files (I have two files in this folder) are in
c:\users\####\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 then in 2 separate subfolders.

Every few minutes I get a message saying that a program is trying to access an infected file that is in the Lavasoft Adaware directory.

Strange that the files are reported to be in a subfolder of IE5 when I have never had Internet Explorer v5 on this pc!

#7 CeciliaB

CeciliaB

    Volunteer

  • Moderator
  • 7428 posts

Posted 05 December 2012 - 03:25 PM

Hi istaton,

Yes, it's strange that Microsoft hasn't changed that folder name during all these years. But that folder is used as a cache by Internet Explorer.

Which version of Ad-Aware do you have, Free/Personal/Pro and version number?
What is the "Treat definition version" on the "Update Defnitions" tab?

I have some difficulties to understand. Does Ad-Aware report that you have infected files in an Ad-Aware folder or in Content.IE5 folder?
What file names and in which folder?

#8 CeciliaB

CeciliaB

    Volunteer

  • Moderator
  • 7428 posts

Posted 24 April 2013 - 06:03 PM

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact the staff member who was helping you with your issue.

Everyone else please begin a New Topic.

Thank you !




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users