Found Win32:Malware-gen in C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Shared_Assets\locales\en_us\ADB2.EXE|>[UPX]
so I moved it to Chest, and Avast then told me to run a boot-time scan. So I did, and it found:
File C:\System Volume Information_restore{3BEEC17C-D923-47C4-8980-270374C47ECD}\RP906\A0337894.EXE|>[UPX] is infected by Win32:Malware-gen, Repair: Error 42060 {The file was not repaired.}, Moved to chest
File C:\WINDOWS\Downloaded Installations{8379D168-79F6-4394-81A2-BB1944E8F892}\Adobe Photoshop Album 3 SE.msi|>Data1.cab|>ADB2.EXE|>[UPX] is infected by Win32:Malware-gen, Repair: Error 42060 {The file was not repaired.}, Move to chest: Error 42111 {The operation is not supported for this type of archive.}
So, as this shows, the _restore file was Moved to chest (couldn’t repair), but can’t seem to do the same for the Adobe file (and can’t seem to repair or delete it via Avast).
I’m running Windows XP. Avast 6.0.1203 with Virus Definitions 111014-1. No idea how malware would have gotten on my computer. And I never (ever) use the Adobe Photoshop Album Starter.
My research on this so far has determined that this is (1) a false positive, (2) an incredibly dangerous Trojan that will lead to my computer being hijacked and my financial information stolen, or (3) something else.
Can someone please help me determine if this is actually a problem and, if so, what to do about it?
Here’s what virustotal had to say about the Adobe file:
0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name:
Adobe Photoshop Album 3 SE.msi
Submission date:
2011-10-15 12:27:00 (UTC)
Current status:
finished
Result:
1/ 43 (2.3%)
Can I just delete/Uninstall Adobe Photoshop Album Starter? Will that take care of this problem (assuming it is a problem)? I never use it, so no loss to me to delete it.
And how do I find the affected restore point? I can’t find any folder called system volume information. Happy to just delete that too, but can’t even find it…
Can I just delete/Uninstall Adobe Photoshop Album Starter? Will that take care of this problem (assuming it is a problem)? I never use it, so no loss to me to delete it.
possible....an if you dont use it it is no loss
And how do I find the affected restore point? I can't find any folder called system volume information. Happy to just delete that too, but can't even find it...
you can delet all restore points....see how to here
Well that isn’t the Adobe Photoshop Album starter, but the installation file. If you have Adobe Photoshop Album 3 installed that file is effectively redundant. So there should be no need to uninstall adobe photoshop.
You won’t find the affected restore point, you already moved it to the chest ?
That is the whole point of system restore, if you move or delete certain files in certain locations, it makes a backup copy (a restore point), should you have made an error and needed to restore it.