Running Ad Aware shows always (even after deleting the virus)
in Avast the message:
VIRUS FOUND
Virus Name: Win32:Trojan-gen.{UPX!}
Path:C:Program Files\Lavasoft\Ad-aware 6\Cache\awi.exe
VPS versie: 0434-0,16-08-2004
Before running Ad-Aware the folder ‘‘Cache’’ is not even there !!
Is it a serius warning !?
And how to handle
Send the file in a password protected zip file to virus@avast.com include in the text part of the message the password and a link to this thread. This looks like a false positive.
There is now a new ad-aware program, its called Ad-Aware SE Personal edition is the free version.
I would have run a check against my system, but I no longer have the old ad-aware 6.
To ease your mind you could do an on-line scan to confirm or deny the virus, check RejZor’s http://www.security-ops.tk/ site for links.
Me I would uninstall the old ad-aware and install the new program.
David
Me I would uninstall the old ad-aware and install the new program.When you install the new version, you are asked if you want the setup program to delete the old version. The smart choice is YES as you suggested.
Announcing the next build of Ad-Aware SE 1.04 NOW AVAILABLE!
See More Details Below Please:
Announcing the next build of Ad-Aware SE 1.04 NOW AVAILABLE!
This build 1.04 also includes a new definition file (SE1R7 06.09.2004)
1.04 contains some updates, changes and minor corrections.
For more details please see the changelog below.
It is essential that you always use the latest build and definition file.
To download build 1.04 please use the same download location or link you have used to download previous updates.
DETAILS HERE:
Thanks SKYCOMP. Is there a technical reason that the builds cannot be updated the same way the definition file is updated? Is it because of the neccesity of removing the old build? Just wondering.
Gene…
Concerning the latest Ad-Aware build vs 1.04 please
See Here. Might want to read about this. 
Also might want to check out this nice program. Works very well. 
I just ran a full system scan and a smart scan. No problems.
Gene…
Depending on when and where you downloaded 1.04, you might have had problems with it locking up during the registry scan. There’s a “new” one available from the Majorgeeks site as of about 10:30 EDT last night which clears up nearly all the problems everyone was having with 1.04.
Considering there’s no change in the version/build designation, I suspect the original file somehow got corrupted during or after it was uploaded to the servers, and got replaced with a fresh copy.
I downloaded mine from Majorgeeks last night apparently after the problem was straightened out. Lucky me! 8)
Gene…
Glover,
It seems everyone forgot about your original questions.
Please explain to me if you are running an Avast scan or an Adware scan.
The error message indicates that Adaware found and isolated the Trojan in “quarantine”. If you open up Adaware and then the “quarantine chest”, you should be able to delete the virus.
If the error message originated from Avast, then we handle the removal a bit differently.
It is helpful if you post the version of Avast and Adaware that are installed in your system as well on the last update information.
Same kinda problem here. I just downloaded a new driver from 3com
http://www.3com.com/products/en_US/result.jsp?selected=all&sort=fname&sku=3CRWE154G72
3CRWE154G72_Jul_08_04.exe to be exact, and it reports the same virus.
Virusdatabase was just updated a couple of hours earlier.
Now I really doubt 3Com will place infected files on their server, so I guess it’s a false alarm.
But it’s still a bit annoying, since we don’t know when to trust Avast anymore.
My version of Avast:
Program: version 4.1.418
Vps: version 0439-0
Well, untill you get some answers from Alwil team, if you are not 100% sure, you can always check that file through Trend Micro’s Housecall online scanner. Easy and it won’t interfere with avast!
link:
http://housecall.trendmicro.com/housecall/start_corp.asp
Cheers !
You can see RejZor’s page for a lot of on-line scanners too: http://www.security-ops.tk/
Henny - I just downloaded same file as you, and avast! alarmed me that it found a Win32:Trojan-gen {UPX!} inside that file (see attachment). When I checked it at Housecall, nothing was reported. Is it false alarm by avast! or Housecall can’t recognise it ?
Cheers !
It seems to be a false alarm - we will check it.