Virus Help

BleepingComputer.com: Virus Help

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Virus Help AVG ID'd viruses, but can get rid of them

#1 Schony

Member

Group: Members
Posts: 33
Joined: 05-April 04

Posted 21 January 2006 - 08:30 AM

AVG has identified 3 viruses - Java/ByteVerify - in all of its scans in the last few weeks. The status of 2 of them are "Infected, Embedded object" and the other one is "Infected, Archive". Do I need to worry about these? Thanks.

#2 jgweed

Forum Addict

Group: Global Moderator
Posts: 27,609
Joined: 11-April 04
Gender:Male
Location:Chicago, Il.

Posted 21 January 2006 - 11:08 AM

Yes, these are trojans/exploits.

1. If you have the SunJava Console (Java Runtime Environment) follow these steps:

-Go to your control panel
-Open Java Plug-in
-Click on the Cache tab
-Click clear
(To stop this from happening again uncheck the enable cache-ing)
Run AVG again.
Make sure you have the LATEST version of JRE from Sun (1.5.0_05). If not, download this and then uninstall any older version before installing the latest:

http://www.tucows.com/preview/194327

2. Embedded file:

Quote

AVG 7 Free now detects infections in areas that it was unable to before. The most notable are ones embedded inside of archives. Since AVG can't determine if you created the archive or if it was a parasite that created it, they leave these alone so you may have a chance to recover uninfected files from the archive and then you simply delete the archive when done. Infections that are inside of an archive aren't a direct threat to your system unless the file gets extracted to allow it to run. Grisoft has chose this method because it is safer for your data that the archive may contain.

Removal instructions are found here, around the quotation above:
http://forum.grisoft.cz/freeforum/read.php?4,27725,backpage=

Hope this helps.
John

This post has been edited by jgweed: 21 January 2006 - 11:09 AM

Whereof one cannot speak, thereof one should be silent.