VBS:FlufferMiner-D [Trj]

Viruses and worms
1

I’ve been folloving the forum for information about this possible infection, I also had the same problem yesterday; FlufferMiner detected first in the files of ProgramData/Microsoft/Window Defender/Scans and then in Windows/Temp/avast_. I managed to move the files into chest and seemingly purify them and didn’t find any infected files anymore. However, in the scan I did today, the same files where found in exact same folders. I didn’t try to clean them, just moved the into chest. I did the scan again and same infection was found second time for today in Windows/Temp/avast_. I personally was not sure about was it FP or not, so I did search on Google and found these:

http://blog.teesupport.com/how-to-remove-vbsflufferminer-d-trj-virus-manual-removal-guide/

http://blog.mitechmate.com/help-remove-vbsflufferminer-d-trj-virus-permanently-delete-vbsflufferminer-d-trj/

Could this mean that VBS:FlufferMiner-D [Trj] is really an actual troijan? Sorry if this seems doing yet one more topic about this same subject, but I didn’t find any mentions about those sites on topics and wanted to bring them up, since this problem really seems to be a little global.

2

False positive is my assessment… Uploaded to Avast

3

Yes,
detection was fixed.

Milos

4

Sure seems like that. I just personally got nervous after reading about that it actually seemingly was a real threat…

5

I have the exact same two files that Avast 2014.9.0 moved to the Virus Chest. My question is should I right click and delete these? I realize they are quarantined, but I’m not sure what, if any, action to take.
Any help will be appreciated.
Thanks!

6

Just leave them for now…

7

Ok…are you suggesting that I do something with them in the future, as in delete or otherwise? Are they any threat to my system while in the virus chest?
Thanks

8

It’s still detecting it for me… help?

9

Hello,
please, post screenshot of avast alert window.

use the option to restore the file and add the list of exclusions

http://i.imgur.com/S17JCtR.png

10

You can send the file via email to avast lab
virus@avast.com zipper and password, please.
put “False positive” to email subject

use “http://www.avast.com/contact-form.php” for reporting potential FPs.

11

If the detection was fixed, why did FlufferMiner-D just show up for me when I did a boot scan at 4pm pst, 11/15/13? Thanks!

12

do you have latest update?