I got spoofed on an .exe that wans’t what I thought it was. When I ran it XP instantly bluescreened with a stop error. When I rebooted Avast kept saying threat detected on a file that’s part of the nVidia nForce drive controller drivers, (nvgts.sys) and an error message kept popping up about unable to access something to do with the drives.
It’s one of those bad ones that deletes its installer as it launches, but I kept a copy in a RAR file. Where do I upload the toxic thing? It gets a 16/42 on virustotal.
Avast (and Spybot) failed to catch it, but Avast was blocking the infection from getting all the way done. I still had to do a clean install to kill it off.
Greetings,
Are these false positives or not; I didn’t know what to think.
While I was scanning using Spybot-Search and Destroy (a spyware preventer/detector), Avast popped up several times with blocking messages.
The details are as follows:
Dropper Blocked
1.
Object: C:\Documents and Settings\MyUserName.\Local…\11860c14.exe
Infection: Win32:Crypt-GIJ[Drp]
Action: Move to chest
Process: C:\Program Files\Spyubot-Search&Destroy\SpybotSD.exe
2.Same as above but
Object: C:\Documents and Settings\MyUserName\Local…\udaw.exe
Same as above except
Object: C:\Documents and Settings\MyUserName.\Local…\ctv117357.exe
Infection: Win32:VB-PDB[Drp]
==============
Some context, in case it matters:
I was hit by a bunch of viruses yesterday. Symantec caught a few, Malwarebytes caught a bunch more, Avast found a bunch more. All rebooting and so forth, all seemed clear.
I started running Spybot-Search And Destroy, and the preceding notifications from Avast popped up.
I don’t know how to determine whether these are bogus, and what should be done about the apparently
offending objects.