Avast Pro 4.6.652 finds virus: Win32:Adan-062 [Adw]

Viruses and worms
1

I just did a routine Boot-time virus and Avast Pro found the following virus.

Avast Pro 4.6.652 File version: 0521-0

Scan message:
05/23/2005 21:45
Scan of C:
File C:\Program Files\FlashGet\fgiebar.dll is infected by Win32:Adan-062 [Adw]

No system peculiarity is appearing yet. I have FlashGet 1.65 running regularly. I use only Firefox and dont use IE.

System configuration details:
Windows XP Pro SP2 with all patchs applied
Browser: Firefox 1.01 and Mozilla 1.7.3
Avast Pro 4.6.652 File version: 0521-0

I understand some anti-spyware programs consider some parts of Flashget ads or spyware. Should “Win32:Adan-062” as indicated in the above Avast scan message be a concern? If so, what would be the best way to rectify this situation?

Thanks for advising.

2

Try to send it to virus@avast.com in pasword protected archive. Also I want to add that the latest version of avast is 4,6,665

3

I will do that shortly. Thanks for the headsup. :slight_smile:

4

You could also check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive.

5

Most probably a false positive (another one in the last VPS :P).

6

I got the same warning some minutes ago, I suppose it’s a false positive because I don’t eveb use the adware version of flashget ::).

Sure this will be fixed in the next VPS update.

Cheers.

7

Please update your programs:
avast! Pro: 4.6.665
Firefox: 1.0.4
Mozilla: 1.7.8

8

No, it’s not corrected yet:
File Name: fgiebar.dll
FileID: 152
Virus Description: Win32:Adan-062 [Adw] :-[ :stuck_out_tongue:

9

Hi.
I’m still getting this problem, but only on IE not MYIE/Maxthon.
Any idea’s ???

Thanks
Dave.

10

i found tis virus at c://system volume restore
can i delete it??
if not wat can i do??
will it destoy other file??or window??

11

This isn’t a valid location, do you mean c:\system volume information that is the location where system restore creates restore points?

If so then the only option is to disable system restore (because this location is protected by windows), reboot, scan again and if clear, enable system restore and reboot.

12

by using avast antivius i found tis virus located in system volume information_restore…and i already chested it…
can i deleted it using avast??thank…

13

the only effective removal from system restore files is to temporarily stop monitoring . This dumps the infected restore points and leaves you with a clean system. You should then turn monitoring back on after rebooting if you want.

14

It is a windows protected location, so no.

the only option is to disable system restore (because this location is protected by windows), reboot, scan again and if clear, enable system restore and reboot.
15

I’m in the same boat, although mine is chested and I am looking for some help please. As I am sure that we all would like. What is your suggestion and what do we have to watch out for. powering down or out a possibilty. Sorry, that slipped out after I thought about it. Any suggestions? In advance thank you

16

Are you sure this is exactly the same (I think not), if so following the same advice/instructions previously given should help ?

If not you should start a clean thread but do so after a search of these forums for Win32:Adan will no doubt return many hits as this topic has been previously discussed a number of times.

We will also need the same information about your system and the virus, see the original post for an example, otherwise we are guessing and this doesn’t help you.