DAME found in library.dat file.

Viruses and worms
1

I have been getting a virus warning as following:

Sign of “DAME (Dark Angel M.E.)” has been found in “D:\Program Files\WinMX\library.dat” file.

I have moved the file to the chest, but it seems to be recreating itself. This didn’t show up before yesterday, only recently. Should I exclude this from scanning or take some other action?

Thanks

2

Hi bowan,

DAME isn’t an actual virus, rather a file encryptor for in this case .COM files.
You have to boot in safe MS-DOS mode from a secure boot-medium. DAME has been around since 1992, you have been targeted by an “oldie”.

polonus

3

It seems a strange detection location, so I would confirm the detection.

You could check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner Or Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can’t do this with the file in the chest, you will need to move it out.

If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and periodically check it (scan it in the chest), there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected then you can also remove it from the Standard Shield and Program Settings, exclusions.
Also see (Mini Sticky) False Positives, how to report it to avast! and what to do to exclude them until the problem is corrected.