Please Help me! Im kinda Shocked! in panic!.

system · March 3, 2009, 5:53pm

Ok, Ive been a Bit dumb. Ive been downloading reFX Nexus Whit Vuze (Avereus) or something.
And when it was at 98.9% The Mighty Hero (AVAST!) Came up with “a Virus has been found”

At the moment its at c:\Documents and Settings\My Account name\My Documes\Azureus DOwnloads.
When i try to Delete it i get an Error “This cannot be Applied to Archived files”
When i try to Move it to The Vault/Chest the same Error appears.

Ive tryd Manual Deletion But It says Something is in Use and i can’t delete it!.

The Virus is a “Win32:Trojan-gen {Other}”

Im in panic! Please help!!!

system · March 3, 2009, 6:19pm

Sorry for Double post. BUT PLEASE!

EDIT:
The Full path is
“C:\Documents and Settings\Account\My Documes\Azureus Downloads\ReFX\Vanguard\ReFX Vanguard - All Presets.7z\ReFX Vanguard - All Presets\Soundbanks.Vanguard.Vsti.dxi.1001.Presets.H2O\h2o.exe[Embedded_I#3d42e]”

FreewheelinFrank · March 3, 2009, 6:27pm

Either use Azureus to delete the file or close Azureus and delete the file manually.

system · March 3, 2009, 6:36pm

I tryd, Its an Backdoor IRCbot. Thats what VirusTotal says

Antivirus Versie Laatst geüpdatet Resultaat
a-squared 4.0.0.101 2009.03.03 -
AhnLab-V3 5.0.0.2 2009.02.27 -
AntiVir 7.9.0.98 2009.03.03 -
Authentium 5.1.0.4 2009.03.03 -
Avast 4.8.1335.0 2009.03.03 Win32:Trojan-gen {Other}
AVG 8.0.0.237 2009.03.03 -
BitDefender 7.2 2009.03.03 Backdoor.IRCBot.ABTG
CAT-QuickHeal 10.00 2009.03.03 -
ClamAV 0.94.1 2009.03.03 -
Comodo 1021 2009.03.03 -
DrWeb 4.44.0.09170 2009.03.03 Win32.HLLW.MyBot
eSafe 7.0.17.0 2009.03.03 -
eTrust-Vet 31.6.6381 2009.03.03 -
F-Prot 4.4.4.56 2009.03.02 -
F-Secure 8.0.14470.0 2009.03.03 Backdoor.Win32.IRCBot.du
Fortinet 3.117.0.0 2009.03.03 -
GData 19 2009.03.03 Backdoor.IRCBot.ABTG
Ikarus T3.1.1.45.0 2009.03.03 -
K7AntiVirus 7.10.656 2009.03.03 -
Kaspersky 7.0.0.125 2009.03.03 Backdoor.Win32.IRCBot.du
McAfee 5541 2009.03.02 -
McAfee+Artemis 5542 2009.03.03 -
Microsoft 1.4306 2009.03.03 -
NOD32 3905 2009.03.03 -
Norman 6.00.06 2009.03.03 -
nProtect 2009.1.8.0 2009.03.03 -
Panda 10.0.0.10 2009.03.03 -
PCTools 4.4.2.0 2009.03.03 -
Prevx1 V2 2009.03.03 -
Rising 21.19.11.00 2009.03.03 -
SecureWeb-Gateway 6.7.6 2009.03.03 -
Sophos 4.39.0 2009.03.03 -
Sunbelt 3.2.1858.2 2009.03.02 -
Symantec 10 2009.03.03 -
TheHacker 6.3.2.6.269 2009.03.02 -
TrendMicro 8.700.0.1004 2009.03.03 -
VBA32 3.12.10.1 2009.03.03 -
ViRobot 2009.3.3.1632 2009.03.03 -
VirusBuster 4.5.11.0 2009.03.03 -

Extra informatie
File size: 13884890 bytes
MD5…: 740cea90026643a78321ecca57e9f109
SHA1…: 55131a623f0b003cc5cdf9f4b1881bfcc139c061
SHA256: 40a210bb1a0f73d2b06366d405bfa4e66c7d5c21ef87c79f6542f70b507445c6
SHA512: e4224f78ebe7473b499fabd2b1c6e931d754bf2e9f936fe6c935cb57918acd68
13e6e26ce0d79c71f13eb3cd751683a86db6af1700823900a675334b7aff75da
ssdeep: 393216:swQ6aT51oX0B2HQeFjmb7LB7Z/oIBA6oZo13OYS2ZE7o:swQ6ajoX0IIb
7FnBA6oZIO2ZE7o

PEiD…: -
TrID…: File type identification
7-Zip compressed archive (100.0%)
PEInfo: -
packers (Kaspersky): UPX

=========================================================================================
What sould i do with the “A virus was föund” Window i got open? still -_-

FreewheelinFrank · March 3, 2009, 6:41pm

Close it and follow my previous advice.

system · March 3, 2009, 6:46pm

ok, Avureus Deleted It, To the Recycle bin. And now i keep getting the “A Virus has been found” Window From the
“C:\RECYCLER\S-1-5-21-507921405-343818398-725345543-1004\Dc23.7z\ReFX Vanguard - All Presets\Soundbanks.Vanguard.Vsti.dxi.1001.Presets.H2O\h2o.exe[Embedded_I#3d42e]”

Now?.

FreewheelinFrank · March 3, 2009, 6:49pm

Empty the recycle bin.

polonus · March 3, 2009, 6:51pm

Hoi EatingChocolate,

Je moet eerst het process stoppen wat misschien nog in Task Manager loopt en dan de file verwijderen,

polonus

system · March 3, 2009, 6:57pm

Ok, So. Ive deleted The File using Azureus. Then i got the Warning. Then i cleared the recycle bin. Then I Clicked “Delete” again From the Avast! popup, Then i clicked the to Close it. Then i found 7 More files in my Recycle bin, I delete them Aswell. So far no errors.

what now?.

Ok, dus. Ik heb de Files gedelete Met Azureus, Toen kreeg ik weer een Waarschuwing, Toen heb ik de Prullenbak Leeg gemaakt, Toen klikte ik ook nog eens Delete in die Popup van Avast en toen geklikt om te sluiten. Toen kwamen er Nog 7 Files in de Prullenbak Die heb ik ook verwijderd. tot nu toe geen Fouten.

Wat nu?.

FreewheelinFrank · March 3, 2009, 7:06pm

You should be OK.

polonus · March 3, 2009, 7:19pm

Hoi EatingChocolate,

OK is een duidelijke afkorting lijkt me.Je kunt nog een keer opstarten en een complete scan doen,
maar het lijkt me dat je 'm kwijt bent. Niet meer schrikken hoor, anders zagen wij beiden nu al groen,
en dank aan FwF voor de juiste instructies. Volgens mij ben je veilig,

polonus (malware fighter)

system · March 3, 2009, 7:51pm

Thank you, Both. FreewheelinFrank and Polonus for helping me out. I was kinda in panic when i found out that it was a Backdoor.IRCbot.
But im running a system scan now.

Thanks for helping.

Bedankt, beide. FreewheelinFrank en Polonus voor het Helpen, Ik was in paniek toen ik uitvond dat het een Backdoor.IRCbot was.
ik heb nu een Systeem scan aan het lopen.

bedankt voor Jullie hulp

Please Help me! Im kinda Shocked! in panic!.

Announcements