Doctor avast says i have worms! Win32:VB-IE [Wrm]

Viruses and worms
1

OK First off, (Scream)AAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAA!!!

i have a worm!!

Win32:VB-IE [Wrm]

I use avast to delete it, and it reappears, under a different name, [C:/documents and settings/owner/ local settings/ temp . Can someone help me!?
The different names are

  • 1728_dump_zip.exe
    and
    -2428_dump_zip.exe

Any Ideas?

P.S.
Hi everyone! I’m new to this forum, if Ive done something wrong please inform me, i will try not to do it next time, thanks! ;D

2

Hello and welcome to the forums ;D

If you have NT based OS try doing a boot-time scan :wink:

3

I have XP, i dont know if it is NT based, however, i will try it next time the virus pops up.

I have been reading other posts, and I think it may be a ‘False positive’???
Someone else who had Win32:VB-II (i have IE), said they think theirs is a false pos.

Thanks Guys, and to my surprise, you responded rather quickly!

4

:slight_smile: Hi Caybo :

 When posting a request for help, ALWAYS mention your
 Operating System .
 Assuming you have Win XP, best to use the good & FREE
"Ewido" available at www.ewido.net/en . There's a tutorial
 at www.greyknight17.com/spy/Tutorials/ewidoQuickGuide.pdf .

 This program "specializes" in removing worms & trojans .
5

Welcome to the forums, Caybo. :slight_smile:

Yes, XP is based on NT. You do not need to wait until the next time the virus pops up to do a boot time scan.

To do the boot-time scan X:M:A:S suggested, right click the “a” ball in the Task tray and then select “Start avast! antivirus…” Once the user interface has opened, right click on the interface (or on Menu) and select “Schedule Boot-Time Scan…” Follow the directions and let avast restart your computer.

6

Hi Caybo,

Have you tried a boot time scan as .:x:M:A:S:. suggested?

You need to right click anywhere on the avast! scanner screen and select ‘Schedule a boot time scan.’

(This doesn’t work in Win 98: if you have this OS, boot into safe mode before scanning- hit F8 while booting.)

If that doesn’t work, here are some free scanners you can try:

Ewido (XP’Win2000 only)

http://www.ewido.net/en/

 and/or a-Squared [url]http://www.emsisoft.com/en/[/url]

Good luck!

[Damn! Everybody beat me to it!

Double checking with Ewido will confirm if it is a false positive.]

7 
  Boot time scan didnt find any, or at least i dont think so i left it there, while my sister came to visit. The http://www.ewido.net/en/ worked to remove 15 i didnt know i had on me.

Thanks guys.

8

We are glad to be of help when we can.

Please come back often, learn more, and maybe help others. :slight_smile:

9

Do you use Google Desktop Search (GDS) ? That is what causes all VB-IE warnings on my system.

Google Desktop Search creates index files and somehow Avast thinks that these are viruses/worms.

I’d like to get rid of these warnings, but how to do this ? Can I instruct Avast to not warn me about this specific type of worm ?

GDS could perhaps stop creating these files, but in the first place Avast should not think that these files are VB-IE viruses (because these files are no viruses).

10

Are you sure? Can you post the name of the file (and full path) and the name of the virus/worm detected?

No, you can’t exclude specific virus type. You need to exclude the file to be scanned. Use the Exclusion lists of avast:

For the Standard Shield provider (on-access scanning):
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize.
Go to Advanced tab and click on Add button…

For the other providers (on-demmand scanning):
Right click the ‘a’ blue icon, click Program Settings.
Go to Exclusions tab and click on Add button…

You can use wildcards like * and ?.
But be carefull, you should ‘exclude’ that many files that let your system in danger.