Today Avast! found malware in C:\Documents and Settings\Myuser\Local Settings\Temporary Internet Files\Content.IE5\ICOWHAWD\C:.…\PID_1045344_vw_Golf_Scrappage_300.
I am happy Avast! caught this and sent me a warning, but the problem is, I wasn’t able to put this into Virus Chest because Avast! said another program was using it, so I picked the delete option instead.
But I am worried because it wasn’t quarantined in Virus chest, that this file is still running somewhere on my computer!!!
Can anyone tell me if the delete option is ok, and got rid of this malware for me? And is this malware a dangerous one.
Many thanks in advance for any advice!
Hello Catwoman999
welcome to the forum
answer:
were you using any browser or any application which was accessing the internet when avast detected it? (soln’s may change according to this).
if you are worried then do a avast boot time scan.
Yes, I was using IE8 and on the reading STV news page when the Malware alarm went off.
I have done a thorough Avast! scan after Malware alert, because I was worried the delete function wasn’t enough to rid myself of this file. And no infected files were found… But when I click on a icon the infected fill is showing in Standard shield in infected count… So its still there!!!
I am not very computer savvy, just a basic user lol.
Thank you for the welcome, just joined forum today, due to this worrying Malware warning.
Boot time Avast Antivirus Scanning
avast tray icon?..
if yes then,
the infected count remains to show if the file is there or not. its just the count and the last infected file is displayed.
if you want to make sure whether the file was deleted or not then right click the tray icon > avast! log viewer > warning > see whether the file was deleted or not.
if you want to make sure nothing is on your computer, you can download malwarebytes anitmalware(mbam) from here : malwarebytes.org (download free version) install and perform full scan. it should detect nothing if there’s nothing on your computer. post the log here.
Yeah, the Avast! icon in the System Tray, sorry not got the terminology right lol
Ok looked in log viewer and then warning and today at 14.10.28 it says Sign of “SWF:CVE-2007-0071{Expl}” has been found in"
And it ends there…
Does this mean the malware was not deleted?
Thanks nmb
well the malware is a adobe flash player exploit. make sure your computer is upto date.
get the secunia psi
http://secunia.com/PSISetup.exe
and do a scan for the updates for all the softwares installed.
you are welcome.
Sorry to pester you nmb, but what is a adobe flash player exploit? And I always keep up to date with all my updates, but never used the item in your link before…
What does that link update?
no annoyances here.
the software is used to check for updates for all the softwares installed on your computer. and also give a link for downloading the update if your computer is not up to date. this would be very helpful to you if you are a novice.
well i couldnt get any links to explain the adobe flash player exploit to a novice. someone who gets the link or explain will probably post here. dont worry.
consider : do not browse malicious sites. use firefox with the wot addon.
Thank you for your help nmb… ;D
I was only browsing the Scottish news channel site , when this Malware Warning happened! I am VERY careful about what sites I access, hence why in over two years this is my first Malware warning from Avast!. I gather a ‘Warning’ is not as bad as a ‘Emergency’ or ‘Critical’ message from Avast! ???
I will look into malwarebytes and secunia… Though always scared to downloads these things onto me computer.
Thank you again, and will google the adobe flash player exploit, to know what I am dealing with, and whether I am worrying over nothing!
You are always welcome.
try those two products and you’ll be safer.
come back if you have any problems.
OK nmb, went to Adobe site, and it indicated that my SWF:CVE-2007-0071 is a known day zero bug, and an update of my adobe player may help… But no fix for this until 30th of July 2009 update…
I am learning fast!!! I need to make sure my adobe is kept updated (which it wasn’t!!!), its the only thing I neglect to update, cos I never got any notifications to do so!!!
you will never get notifications for some applications so i say - use secunia psi.
Yes, I will use secunia psi from now on… Thank you…
But, what is the best course of action in the meantime? Is there anyway I can remove this exploit, and what is this malware doing?
now you cant remove the malware. i can say this:
there is a loop hole in the flash player, that some people (malware writers) use it to inject the malwares in to the system. so the loop hole has to be fixed. and it can be done by adobe. so they’ll do it. not to worry.
make sure you keep the softwares up to date.
edit : now you cant remove the malware in the sense the exploit of the flash player but dont worry avast has detected the malware which was injected and removed it from the system.
Just would like to thank you nmb…
I have installed Secunia and Malwarebytes onto my laptop.
The advanced section of PSI has showed my Java was out of date, which left my system vunerable also. Which I would never have known. So, thank you very much for your advise and help…
ps. patch has been released for Adobe Flash active x, but still shows as security issue. But will hang fire, as been advised Secunia would need to update their system to see new patch as safe!!!
I ran a thorough scan of my computer with Malwarebytes and no malware was found!!! ;D
you are welcome catwoman999,
great that you have patched your system. do a scan of mbam and avast every week(but update avast daily) to make sure your computer is clean and safe.
should you have any problems, please come back.