Avast Web Shield blocked a virus on a website that my wife was accessing this morning. Just out of curiosity, I’d wanted to see what the virus was but I don’t see it in the logs. Does Web Shield not log viruses that it blocked?
Hmm… the problem may be worse than I imagined. My wife says that she had just logged into the computer (Windows XP Home with her and me as users) and she hadn’t opened up a browser or anything, yet an Avast alert popped up advising her to abort the connection.
That makes me think that something has somehow sneaked onto my computer. Hm… time to go do some detective work.
Well, I haven’t found anything so far. I’ve run Ad-Aware and Spybot S&D, as well as multiple scans including a boot-time scan and I didn’t find anything that interesting.
Besides, the alert my wife got happened before she opened any application. My guess is this: I have several applications that phone home once in a while, and one of those probably tried to reach its home site but that site was infected and Avast blocked it. Now I just have to figure out what application that is.
It’s quite likely that something redirected the browser home page to a site with malicious contents. There are zillion tricks to do this in IE (I don’t know which browser you’re using). You said you ren Spybot and it didn’t find anything? Strange… :-\
Anyway, the corresponding log entries can be found in the file \data\report\resident protection.txt
Thanks
Vlk
Vlk, my wife hadn’t even opened a browser yet. This alert happened after she logged in but before she did anything else at all. I’ll look at that log to see what shows up.
Thanks!
Hmm…the most recent non-startup event in the log was me purposefully downloading eicar.com a week ago. Does avast not log viruses if they’re successfully aborted via web shield?