I recently downloaded photos taken with a konica-minolta digital camera from the camera directly to my computer. In the middle of the download, Avast popped up to warn me of a virus.
The virus (win32:aris–which I’ve found is a Trojan) was attached to picture number 39 of 60. None of the other pictures were affected.
The camera has been connected with one computer other than mine. However, I have taken and downloaded pictures since that time with no problems. Other than this incident, my computer has been virus free.
I’m not worried about the picture itself; it was in the middle of a series of shots and isn’t important. What I am worried about is how a virus got attached to this picture and what is the likelyhood of it happening again–and if it does happen again, what can I do to fix this problem (other than just deleting picture after picture)? Is it possible for the camera to hold a virus?? If so, what do I do?? ???
What was the file name, where was it found example (C:\windows\system32\infected-file-name.xxx) ?
What actions have you taken to try and resolve the problem ?
I would suggest confirming the file is in fact a virus, you could check the offending/suspect file at: Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. You can’t do this with the file in the chest, you will need to move it out.
Or VirusTotal - Multi engine on-line virus scanner
If it is indeed a false positive, add it to the exclusions lists (Standard Shield, Customize, Advanced and Program Settings, Exclusions) and check scan it periodically using the ashQuick scan (right click scan), when it is no longer detected then remove it from the exclusions.
Also see (Mini Sticky) False Positives
thank you for those web sites. I visited both of them, and they both indicated that it was indeed a false positive. I took the steps recommended on the false positives sticky.
I really appreciate the help! ;D
No problem, that is why the best action is to send a virus to the chest, deletion is never a good first option. I assume that you sent the false positive detection to virus @ avast as this will allow for correction of the VPS signatures.
Welcome to the forums.