Hey frnds, I am novice regarding computers.when i open my laptop,a message comes "Access to suspicious site (site name mentioned) blocked. I have Avast 4.8 pro. Then after some times another window opens with heading “Suspicious File Found!” It tells:- A suspicious file has been detected(using heuristic method).This may be a sign of malware infection.Please allow the site to be submitted to our virus lab for analysis.
File name: C:\tgt.exe
Type: rootkit: hidden process
Please tell me what to do so that all this problem goes away. I will be thankful if u tell me exactly the steps since i dont know much .Thanks,
Sumit
There should be an option to send to avast for analysis (this should be checked automatically) allow it to be sent. The recommendation on the alert window is Allow, which with this heuristic detection is best.safest to be used.
I would say it is suspect too and there are some google hits to confirm that, I would suggest that you check the file out.
It may be worthwhile to try some other tools:
If you haven’t already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).
MalwareBytes Anti-Malware, On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. - 2. SUPERantispyware On-Demand only in free version.
Don’t worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
Tgt.exe (Tgt) is a trojan virus and is classified as a generic trojan virus. Tgt.exe is associated with herss.exe, cvasds0.dll, cvasds1.dll, and cvasds2.dll.
Tgt.exe File Location – C:\Tgt.exe
Threat name
Win32.X aka Worm.Win32.Taterf!IK aka Trojan.PWS.Wsgame.12661 aka a variant of Win32/PSW.OnLineGames.OTI
Filename
%%root%%\tgt.exe
Filesize
Unknown
Last seen
02.19.2010
Status Unsafe
This file can perform following behavior.
File is created as process on the disk.
This process can create, delete or modify files on the disk.
Files Created
%Temp%\herss.exe
%Temp%\cvasds0.dll (0-9)
X:\tgt.exe
X:\autorun.inf
%Temp% = C:\Documents and Settings[UserName]\Local Settings\Temp
X:\ = C:- Z:\