WormGibeF

Avast Free Antivirus / Premium Security
1

This worm was found in my docs.and settings by a standalone AV scanner called Clamwin. It found 3 instances as per report:

C:\Documents and Settings\Ann1\Application Data\Thunderbird\Profiles\qw6nbw37.default\Mail\pop.homechoice.co.uk\Inbox: Worm.Gibe.F FOUND

C:\Documents and Settings\Ann1\Application Data\Thunderbird\Profiles\qw6nbw37.default\Mail\pop.homechoice.co.uk\Junk: Worm.Gibe.F FOUND

C:\Documents and Settings\Ann1\Application Data\Thunderbird\Profiles\qw6nbw37.default\Mail\pop.homechoice.co.uk\Trash: Worm.Gibe.F FOUND

I ran an Avast scan over my Docs. and Settings…nothing found.

Clamwin did not remove the problems it found…Avast did not find evidence of the worm…Does Avast detect worms?

If not has anyone any idea of how to get rid of it?

Please help.

2

try doing a real long scan on avast.

3

Wow. That’s a relatively nasty worm. It concerns me that avast didn’t catch on a normal scan. As suggested, set your on-demand scanner settings to thorough and search those folders.

Does anyone have any ideas why that worm wasn’t caught?

John

4

Hmm…I hate to follow up my own post but it appears that only Gibe-A is in the Avast VPS, so perhaps that’s why Gibe-F was not caught. Or, are they similar enough that the Gibe-A signature should have allowed Avast to catch the other variants?

5

contact a admin who makes avast and ask them to add it there might ::slight_smile:

6

If you believe this is an undetected virus, then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces).

Give a brief outline of the problem, the fact that you believe it to be a new virus and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.