Need advice--framer virus

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Got a problem.

I ran AVG and it says:

virus found HTML/Framer

It's located in:
C:\Documents and Settings\My name\Local Settings\Temporary Internet
Files\Content.IE5\Y7XJ94FG\all[1].html

It says it can't heal it.

Any advice on what to do now? I am using XP HOME.

I googled it and I'm not really getting answers on what to try.



BTW, when I go to Windows Explorer, I can't even get to Content.IE5. It
stops at Temporary Internet Files. How do I get there (it is set to show
hidden files)?

UPDATE:

I was able to get there by going into command prompt. (The DIR command did
not show the folders, but I was able to use the old DOS CD commands to keep
going)

I was then able to delete the file. Does this mean it is truly GONE?

I  re-ran AVG for the Temporary Internet Files and it seems to be okay; no
threat found.

I'm going to reboot and at least run AVG again for Temporary Internet Files.

Any reason why I can't get to the aforementioned area via Windows Explorer?

Mel



Re: Need advice--framer virus

says...
Quoted text here. Click to load it

Clear the IE temp files, from IE's Tools->Internet Options->General->Temporary
Internet Files, and
it's gone.

--
Snob? Were I a snob, I wouldn't be talking to you.

Re: Need advice--framer virus


| Got a problem.
|
| I ran AVG and it says:
|
| virus found HTML/Framer
|
| It's located in:
| C:\Documents and Settings\My name\Local Settings\Temporary Internet
| Files\Content.IE5\Y7XJ94FG\all[1].html
|
| It says it can't heal it.
|
| Any advice on what to do now? I am using XP HOME.
|
| I googled it and I'm not really getting answers on what to try.
|
| BTW, when I go to Windows Explorer, I can't even get to Content.IE5. It
| stops at Temporary Internet Files. How do I get there (it is set to show
| hidden files)?
|
| UPDATE:
|
| I was able to get there by going into command prompt. (The DIR command did
| not show the folders, but I was able to use the old DOS CD commands to keep
| going)
|
| I was then able to delete the file. Does this mean it is truly GONE?
|
| I  re-ran AVG for the Temporary Internet Files and it seems to be okay; no
| threat found.
|
| I'm going to reboot and at least run AVG again for Temporary Internet Files.
|
| Any reason why I can't get to the aforementioned area via Windows Explorer?
|
| Mel
|

Mel:

This is not a virus and not a Trojan.  It is an IFrame Exploet code in the HTML
and it was
blocked from writing and thus doesn't exist on your PC.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Need advice--framer virus

Huh?

Can you explain what you mean by blocked from writing?

Mel
Quoted text here. Click to load it



Re: Need advice--framer virus


| Huh?
|
| Can you explain what you mean by blocked from writing?
|
| Mel

Simple...

Anti virus utilities such as AVG perform "On Access" scanning.  As files are
written and/or
read from media the files are scanned for viral/malware signatures.  If they are
determined
to be malicious the software will flag the file, note the activity to the user
and block
said file from ever be written.

In this case we are talking about IFrame Exploit code which was identified, you
were
notified, and the application AVG prevented the file from performing it
nefarious action and
from existing on your PC.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Need advice--framer virus

would you mind to provide me the link where you got this alert..


Quoted text here. Click to load it



Re: Need advice--framer virus

No  link

I did a scan and got the error.

It didn't pop up when I was on any site

Mel
Quoted text here. Click to load it



Re: Need advice--framer virus


| No  link
|
| I did a scan and got the error.
|
| It didn't pop up when I was on any site
|

If AVG found this file upon a "On Demand" scan there are two possibilities.

1.    New signature were used to find Exploit code that was not previously
recognized.

2.    AVG already had signatures and failed to perform its proper "On access"
function.

I suspect #1 is the likely reason.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Site Timeline