Hi, like a fool… always got told SmilieCentral had spyware attached to it, but the curiosity got me. I went to their website, and as soon as it got to the install page… Avast went off and nearly scared me to death. It claims the system was infected with WIN32:trojan-gen {other}. I selected delete, and the box disappeared. But I still was nervous and did a scan of my temp internet files and Avast went off again, this time selecting moving it to the virus chest. I seen other post saying scan the file else where… but how do you once its in the chest. I am hoping its a false positive. I havent used Avast too long so not too familiar with it… how do i reaccess the virus chest, and what should i do with the file in it?
here is a export of my Avast log.
11/4/2004 1:22:25 AM NT AUTHORITY\SYSTEM 1220 Sign of “Win32:Trojan-gen. {Other}” has been found in “C:\Documents and Settings\Emanon\Local Settings\Temporary Internet Files\Content.IE5\KHUZCHM7\SmileyCentralInitialSetup1.0.0.8[1].exe” file.
11/4/2004 1:27:51 AM N-YEY896AOUNOQ8\Emanon 1344 Sign of “Win32:Trojan-gen. {Other}” has been found in “C:\Documents and Settings\Emanon\Local Settings\Temporary Internet Files\Content.IE5\KHUZCHM7\SmileyCentralInitialSetup1.0.0.8[1].exe” file.
Note: I just updated yesterday…
Avast Build : Jun2004 (4.1.501)
VPS file 0445-0 Complied 02.11.2004
Its not the malware/spyware that i am worried about, As I didnt get as far to install SmilieCentral. As soon as I got to the webpage to install… Avast went off warning of a virus… that is the info I need… On the virus… wheather or not it is one or a false positive. Thanks
"That is NOT a false warning since their homepage inmediatly tries to install MyWebSearchToolBar as soon as you open that webpage. "
Ok then I am safe seeing it never executed, Avast stopped it, and was moved to the virus chest. Correct?
I use Ad-aware and Spy-bot all the time… even tho I never really install that much on my PC. I have been spyware clean for 10 years… I am wise on that part.
I just never knew that spyware would be considered a virus.
here is my HiJackThis log…
Seems clean to me…
Logfile of HijackThis v1.98.2
Scan saved at 11:44:47 AM, on 11/4/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
ViewMgr.exe is an advertising program by Viewpoint. This process monitors your browsing habits and distributes the data back to the author’s servers for analysis. This also prompts advertising popups. This program is a registered security risk and should be removed immediately.
Anyone know where I can get some crow? lol guess thats what i am eating for dinner tonight… Thanks for pointing out viewpoint… I install AIM a few days ago and viewpoints directory is the same date and time as AIMS. I did a deep scan in ad-aware and a full system scan in Spy-Bot. And neither one catches it. So I am confuzzled about that. And as far as the SM1BG.exe… It came with Napster…
Process File: SM1BG or SM1BG.EXE
Process Name: Cypress USB Mass Storage Adapter
Description:
SM1bg.exe is a process belonging to the Cypress USB Mass Storage Adapter. It is installed with iTunes, Napster and USB devices. This program is a non-essential system process, but should not be terminated unless suspected to be causing problems.
System Process: No
Background Process: No
Uses Network: No
Hardware Related: Yes
Common Errors: N/A
Security Risk (0-5): N/A
Virus: No
Spyware: No
Trojan: No