Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

3 win32:cycbot-KI infections detected by avast


  • Please log in to reply
8 replies to this topic

#1 idoc

idoc

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:06:50 AM

Posted 25 September 2011 - 02:43 AM

Attached File  ScreenClip.png   24.69KB   10 downloadsHello,
On an avast scan it is detected 3 different win32:cycbot-KI infections. Two of the infections are in the sys\wow64\kernel32.dll (emul) and the third is in the sys\winsxs folder. I am unable to get avast to quarantine them and receive the message "error: virus chest server is not running" whenever I try to quarantine. I tried doing a boot scan but it was very slow and I received hundreds of error 0x80000006 (no more files) messages which I either quarantined or ignored (it prompted me for each one). I'm not sure that the boot scan did anything because after I ran it I still saw the 3 cycbot infections. I also ran mbam but it did not detect any problem. Any help would be appreciated. I am appending a screen clip:

BC AdBot (Login to Remove)

 


#2 The Dirty Birch

The Dirty Birch

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:50 AM

Posted 25 September 2011 - 09:53 AM

I have the same exact scenario going on starting on yesterday morning, September 24, 2011. Help! Please!

#3 Winterland

Winterland

  • Members
  • 995 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Land of Enchantment
  • Local time:08:50 AM

Posted 25 September 2011 - 10:21 AM

There seems to be something amiss here and there also seems to be a couple of relevant and very recent posts regarding this issue on the Avast! forums.

Perhaps this will get the both of you a little closer to a resolve:

http://forum.avast.com/index.php?topic=85399.0

http://forum.avast.com/index.php?topic=85403.0


Good luck and please let us know how this gets solved.

Guess I'll go run a scan...

Winterland

Photobucket removed my cool flag - idiots!

 

Every calculation based on experience elsewhere fails in New Mexico.


#4 Winterland

Winterland

  • Members
  • 995 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Land of Enchantment
  • Local time:08:50 AM

Posted 27 September 2011 - 05:08 AM

idoc / The Dirty Birch, did either one of you find a resolve for this?

I wanted to let you know that I right-clicked on a couple of similar warnings I received from Avast! and selected 'scan' (after making sure my definitions were up to date) and they (the files) were no longer considered a threat.

Update?


Thanks,

Winterland

Photobucket removed my cool flag - idiots!

 

Every calculation based on experience elsewhere fails in New Mexico.


#5 The Dirty Birch

The Dirty Birch

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:50 AM

Posted 27 September 2011 - 05:16 AM

I'm not sure what fixed it but avast is not reporting any problems after a scan now. I'm beginning to think this whole thing was an avast problem??? I was having to load a restore point each morning over the weekend just to be able to get my laptop back in working order. It's been good the last two mornings after overnight scans.

#6 Jacee

Jacee

    Bleeping around


  • Malware Response Team
  • 3,716 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:07:50 AM

Posted 27 September 2011 - 11:52 AM

It was an Avast problem.

MS_MVP.gif
MS MVP Windows-Security 2006-2016
Member of UNITE, the Unified Network of Instructors and Trusted Eliminators

Admin PC Pitstop


#7 The Dirty Birch

The Dirty Birch

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:50 AM

Posted 27 September 2011 - 02:33 PM

Wow! That leaves me a bit unsure about using Avasta. Maybe I should go back to AVG???

#8 Layback Bear

Layback Bear

  • Members
  • 1,880 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Northern Ohio
  • Local time:09:50 AM

Posted 28 September 2011 - 03:34 AM

Give this a try, it works for many.
http://www.microsoft.com/security/pc-security/mse.aspx

#9 varunit

varunit

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:20 PM

Posted 28 September 2011 - 10:21 AM

I am using Avira premium security suite.. :)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users