xp MCE 2005 include SP2, Outpost 2.5 Pro, Avast4 free latest version,

Hello.

today I´ve got the message about a virus. I put it (it´s a trojaner, isn´t it?) into the quarantine. Now i´ve got three questions:

[Virus name: MediaBuilder.exe]

  1. Was it right?
  2. Can it be in the True Image 8.0 folder, and belongs the MediaBuilder to True Image, needs True Image this “virus” ?
  3. It´s in the quarantine, what shall I do now and what can I do to stop those things?

Regards
pocahontas

<?xml version="1.0" encoding="UTF-8" ?>
  • 00000005 5160784
  • 00000001 1092160800 kernel32.dll C:\WINDOWS\system32 System 1104614973 1057280
  • 00000002 1092160800 winsock.dll C:\WINDOWS\system32 System 1104614973 2864
  • 00000003 1092160800 wsock32.dll C:\WINDOWS\system32 System 1104614974 24576
  • 00000004 1104582648 MediaBuilder.exe C:\Programme\Acronis\TrueImage\MediaBuilder.exe Win32:Trojano-916 [Trj] Vir yes 1106135995 4076064

It’s probably a false alarm.
Just open the virus chest (when you start the Simple User Interface, click on the “Chest” image, or select it from the menu). Now, rightclick on the Media Builder.exe file in the Chest and select Email to ALWIL Software.

Thank you very much and how do I put MediaBuilder.exe to it come from?

Where can I find the chest? In the “C:\Programme\Alwil Software\Avast4\DATA\chest” is no image and only one xml file and four files (from 00000001 till 00000004) of the Typ “datei” (means: file)

What I have to do now?
Please help!
pocahontas

By “opening the Chest” I mean starting the corresponding avast! program - as I described above. No need to work directly with the files…

thanks a lot again! My personal computer - the unknown machine or how stupid is the person between cher and screen :wink:

Have a nice day and thanks a lot.

Bye
pocahontas

The file is back on its place, but and its normal, the next scan gave me the next allert. Is there an allert every time or would it be fixed by the next update?

There is every likelyhood that it will be resolved soon in an iAVS update. In the meantime you could ad the file to the exclusions list for normal scans.

http://img.photobucket.com/albums/v325/for-dwr/exclusions.jpg

Yes, and this is a normel step to do. I´m sleeping…

Thank you to all!

Best regards
pocahontas