activesecurity.ocx

Viruses and worms
1

Hello,
I scanned my computer with avast and a virus was detected. The name is activesecurity.ocx and the virus is Win32:VirCollect [Trj]. My question is what is this and is it okay if I delete it? I’ve tried to repair it but it keeps popping up in the scan. Any help would be apperciated.

Thank You,
chicagocel

2

Hey Chiicagocel,
It’s radicalb21. First let me welcome you to the forum. I would also do an online virus scan of your system. I would go to http://tds.diamondcs.com.au/ which is Trend Micro online scanner. the next thing I would do is do a search on google for the name you specified. I would also look at www.viruslist.com . you might also go to http://tds.diamondcs.com.au/ and download TDS-3 using the trial and run a scan of your system. You can also try to avast boot scanner. I hope this helps.

3

I did answer in the other board you posted this in Chiicagocel, but nevermind, its not important, ill just say the same here.

BTW, welcome to the forums.

It would be very helpful if you could profide this info aswell, help us to help you.

What is your OS (Example WINdows XP)
Avast version and VPS
Exsact filname/ path of activesecurity.ocx (where is it on your computer)
What have you already tried.
Any other info you feel could help.

–lee

4

Sorry about that lee. I’m still new at this.
I’m running WinXp with the SP2 installed.
Avast version 4.1 home edition and vps version 0436-4.
Original location: C:\windows\downloaded program files.
I have tried to repair but it just keeps popping up in scans.
Now I have it in my virus chest.
Also when I tried to do a search on google I get this as a search result http://www.spywareguide.com/spydet_403_activesecurity_ocx.html
I think that’s everything.
btw thanks radical on the google tip.

5

Hmm, from the looks of the location it should be fine to deleat.

But just to check its not a false positive please scan it with the link below

http://virusscan.jotti.dhs.org/ Use the Browse button to browse to the “virus” file then click submit, please copy and paste the results here.

Thanks

–lee

6

What I would do is send the sample thats in the virus chest to avast for testing. The next thing I would do is do a boot time scan and try and delete it that way. I would also suggest running both spybot search and destroy and adaware SE to deal with spyware and adware. You can also download Spybot Search & Destroy at this url:

http://www.safer-networking.org/en/download/

and Adaware SE from this url:

http://www.lavasoftusa.com/

Both programs are freeware. But make sure you update them first before doing a scan. If that doesn’t work contact me via my profile or through my website. I hope this helped.

7

I think this is it.
Service load: 0% 100%

File: Downloaded Program Files
Status: OK (Note: this file has been scanned before. Therefore, this file’s scan results will not be stored in the database)
Packers detected: None

AntiVir No viruses found (1.37 seconds taken)
Avast No viruses found (3.19 seconds taken)
BitDefender No viruses found (2.55 seconds taken)
ClamAV No viruses found (7.30 seconds taken)
F-Prot Antivirus No viruses found (0.35 seconds taken)
F-Secure Anti-Virus No viruses found (3.70 seconds taken)
Kaspersky Anti-Virus No viruses found (4.01 seconds taken)
Norman Virus Control No viruses found (1.03 seconds taken)

8

Hmm, it says its clean, first try what radicalb21 suggested.

Then if it still appeares just deleat it.

–lee

9

I think this is related to some kind of POP UP BLOCKER and not a trojan. What are you running ? Is the XP pop up blocker on ?

10

I had also problems with activesecurity.ocx, Bit Defender online scan reports it as infected by VirTools.Win32.Collector.a, Internet seacrh about it was unsuccessful.
None of them, Panda online scan or Ad-Aware and others spyware detection tools detect it,
Finally, I remove it without any problems.
Hope this helps
JuPa

11

hi all…

ok my mother has this same issues except that when i follow the path to delete
C:\WINDOWS\Downloaded Program Files\ActiveSecurity.ocx - Virtool:Win32/Collector.A it isn’t there…
AVG 6 isn’t picking it up either she found it using RAV

can anyone help me???

thanks in advance

Miss

12

ActiveSecurity.ocx in the downlaoded program files is not harmfull. It is placed there temporary by some online scanners. Could be also other applications that are using that file, but that is unknown to me at this time.