Log Scan shows Win32;FakeAV-BBX [Trj]

Then under result is a red dot with an X and says Error: The system cannot find the file specified (2) I cannot delete move to chest or do anything with it. Does that mean Avast took care of the problem or do I still have it. It will not let me apply anything… What should I do? I have 2 of these on on the 26 DEC and on the 27 DEC Thanks

It is pretty hard to say without knowing the file name/s and location/s ?

Since the 27th have you had any more alerts on your scans ?

Sorry David, With the time change I had gone to bed when you replied. No, I have not had anymore with the avast scans after this trojan was found. It is in C;\Windows\Temp_avast5_\unp104286928.tmp and it shows serevity High. I am not familiar with this and can’t find anything in Google. My concern it is still in my computer and is hidden but still active. All full scans on Dec 29,30,31 and Jan 1 show no virus. Sorry, any help would be appreciated.

Well what you found, really shouldn’t have been found. The avast5 folder is where avast unpacks or sends files that it is going to scan, on successful completion of the scan that folder should be emptied of files not in use.

So there shouldn’t have been anything in it, the most common reason for these unpacked files (unp9999999.tmp) is having other resident anti-virus/spyware software present. Files sent there by avast for scanning are locked by another security application and prevents avast scanning and removing them.

So what other resident (on-access) security software do you have installed ?

Sorry David, I will have to contact my brother, he is the one that loaded my computer with everything…

OK, given what I said about the location and why they shouldn’t be there they aren’t really an issue.

  1. They might have come from an external location (the web) or a compressed archive file, in which case it is inert unless extracted and run and the file system shield would scan it before then.

  2. In that avast5 location they don’t present a risk as the file name has been changed (unp99999.tmp), this is a randomly generated file name, so even if any malware new it was there it wouldn’t know the randomly generated file name so it couldn’t run it.

The main thing is to try and find out why it remained in that temp avast5 folder.

Hi David, I ran Malwarebytes free and it showed no infections or malicious items and scanned 253,406 items, I hated to go outside of Avast am very pleased with it. I just don’t understand why it won’t let me put in chest or delete unless Avast took care of it. I was surfing and a bunch of windows started popping up so I shut down the computer manually at the button. So maybe it didn’t get a full hold on my computer. If you have anything to add please let me know. Do you think the problem was solved already? I want to thank you very much for your time, I really appreciate it. Have a great 2011, maybe will look for you again, with no problems…Sue

There is nothing wrong with MBAM as you will see from my signature I have the free version as a back-up on-demand scanner to avast. The main thing is if yours is the paid option (resident) then you would need to exclude the avast5 folder in MBAM.

Whilst browsing, that is where avast’s web shield scans the http content before it is transferred to your browser cache and displayed or run on your computer. So the web shield effectively blocks that stuff from getting on your computer and the only option in the alert is Abort Connection (it drops that item, not the complete internet connection).

So you should be OK, if you have scanned your system with avast and MBAM and found nothing else.

Hi David, No this is the free version of MBAM, so sounds like I’m OK right?? Nothing is showing now…Thanks again, Sue

No problem, glad I could help.

Welcome to the forums.