Avast has started flashing up a warning every time I log on to the net or retrieve emails.
“File Http://internet.wpvgm.com/2.htm”
contains VBS maleware-gen
type virus worm.
avast has stopped the malware before it could enter2 click abort connection.
this is great it’s doing it’s job, but I am getting this every time I log on and fire up my browser (firefox).
any advice or explanation please.
regards
brian
Hi :
"Worms" are best dealt with by antiSPYWARE/antiTROJAN program(s); do
you have of these "types" of prgrams on your computer ? If NOT, I
recommend the FREE Version of "SUPERAntiSpyware", available from
www.superantispyware.com .
I think this may be a false positive as the DrWeb link checker doesn’t find anything on that page.
Funny, I see obfuscated vbs script, with references to some executables, Adodb, shellexecute etc. Highly suspicious, I think this should be proven legal first before removing. And no visible content on wpvgm.com site, which would talk about it, except for AV discussions.
It seems to be a real detection: the question is why your browser is being diverted to that page.
I’d try a boot time scan with avast!, then some online scans, anti-spyware scanners etc.
Antivirus Version Last Update Result
AhnLab-V3 2008.1.31.10 2008.01.30 -
AntiVir 7.6.0.59 2008.01.30 HEUR/Exploit.HTML
Authentium 4.93.8 2008.01.30 -
Avast 4.7.1098.0 2008.01.30 VBS:Malware-gen
AVG 7.5.0.516 2008.01.30 JS/Downloader.Agent
BitDefender 7.2 2008.01.30 -
CAT-QuickHeal 9.00 2008.01.30 -
ClamAV 0.91.2 2008.01.30 -
DrWeb 4.44.0.09170 2008.01.30 -
eSafe 7.0.15.0 2008.01.28 -
eTrust-Vet 31.3.5497 2008.01.30 -
Ewido 4.0 2008.01.30 Downloader.Agent.il
FileAdvisor 1 2008.01.30 -
Fortinet 3.14.0.0 2008.01.30 -
F-Prot 4.4.2.54 2008.01.29 -
Ikarus T3.1.1.20 2008.01.30 -
Kaspersky 7.0.0.125 2008.01.30 Trojan-Downloader.VBS.Psyme.mi
McAfee 5219 2008.01.30 -
Microsoft 1.3109 2008.01.28 -
NOD32v2 2836 2008.01.30 -
Norman 5.80.02 2008.01.29 -
Panda 9.0.0.4 2008.01.30 -
Prevx1 V2 2008.01.30 -
Rising 20.29.22.00 2008.01.30 Trojan.DL.Script.JS.Agent.mdd
Sophos 4.25.0 2008.01.30 Mal/Psyme-A
Sunbelt 2.2.907.0 2008.01.30 -
Symantec 10 2008.01.30 Downloader
TheHacker 6.2.9.203 2008.01.30 -
VBA32 3.12.2.6 2008.01.29 -
VirusBuster 4.3.26:9 2008.01.30 -
Webwasher-Gateway 6.6.2 2008.01.30 Heuristic.Exploit.HTML
(Disable avast! while scanning.)
AVG Anti-Spyware Free (Requires Win2k/XP)
Download, install and update the programs. Disconnect from the internet (pull the plug) before running scans in Safe Mode if possible.
Always select the option to quarantine any malware found rather than delete it, then you will be able to restore files or registry entries wrongly identified as malware- a rare but not unknown event for any malware scanner.
Hi FwF,
As it is VBS that is running there, I am curious what Script Sentry would find on it:
http://www.jasons-toolbox.com/programs.asp?Program=Script%20Sentry
polonus
Which file did you upload Frank ?
Edit: Cancel, I see it was 2.htm now. I have also downloaded the internet.exe linked to on that page and so far no hits on VirusTotal, still scanning VT a bit slow. Finished, 0/32 hits on internet.exe.
Thanks for replies.
This is not an infection as such what it is, is a warning that keeps annoyingly appearing each time I go online and fire up my browser or email client.
Quote.
" A virus was found"
Avast has stopped the malware before it could enter your computer,when you click on the “Abort connection” button the download of the dangerous file will be cancelled.
file name… http:// internet.WPVGM.com/2.htm.
were is this coming from how do I sort out this constant warning message. I have run a full system scan, a boot time scan, superantispyware scan (free), avg antispyware, adaware, Advanced windows care,
It appears from the avast message it has stopped this download this surely indicates there is not an infection just a possible infection if this file was downloaded,!!!
Help,
regards
You may have a BHO, or some other hidden malware, that is doing this. It might be helpful if you post a HijackThis log.
Thanks for that, I was starting to think the same.