KAV message

KAV message "riskware not-a-virus:PSWTool.Win32.RAS.a", not a virus ?

Secure Home | Search | About
 Anti-Virus Software    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
KAV message "riskware not-a-virus:PSWTool.Win32.RAS.a", not a virus ? Thierry 09-28-2005
Posted by Thierry on September 28, 2005, 10:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

Running KAV 6 beta at startup, I note that it detected some event,
displaying this strange message :
"deleted:riskware not-a-virus:PSWTool.Win32.RAS.a" in my external usb drive
(it is only used to save documents and file to install), a kind of archive.
These threats have been treated
It looks like a virus as it spread into 5 ther files and has been created in
a subs-subdirectory named "rockxp.exe" where some files were copied and that
I didn't know

The message is not display in red as for all other infections but in green,
so as if they were not armful.

Does someone knows if KAV did a mistake in removing them (I don't think as
it the the 2d time that it found them) ?
Then why does it reappear again as it was deleted, my SP2 firexwall is ON as
well all otpions and proactive defense under KAV and I also run bitdefender
and PCtools spyware for a crosscheck ?

In all cases I will also check on various virus database. The first time I
thought it was a mistake due to the message "not-a-virus" but I think that
it is a real virus !

Thanks
Thierrry




Posted by Thierry on September 28, 2005, 12:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> Hi,
>
> Running KAV 6 beta at startup, I note that it detected some event,
> displaying this strange message :
> "deleted:riskware not-a-virus:PSWTool.Win32.RAS.a" in my external usb
> drive

It was indeed a virus. There is no many info in encyclopedia, but there is
any doubt it is one more.

Thierry

> (it is only used to save documents and file to install), a kind of
> archive. These threats have been treated
> It looks like a virus as it spread into 5 ther files and has been created
> in a subs-subdirectory named "rockxp.exe" where some files were copied and
> that I didn't know
>
> The message is not display in red as for all other infections but in
> green, so as if they were not armful.
>
> Does someone knows if KAV did a mistake in removing them (I don't think as
> it the the 2d time that it found them) ?
> Then why does it reappear again as it was deleted, my SP2 firexwall is ON
> as well all otpions and proactive defense under KAV and I also run
> bitdefender and PCtools spyware for a crosscheck ?
>
> In all cases I will also check on various virus database. The first time I
> thought it was a mistake due to the message "not-a-virus" but I think that
> it is a real virus !
>
> Thanks
> Thierrry
>
>
>




Posted by Art on September 28, 2005, 11:25 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Wed, 28 Sep 2005 12:07:11 +0200, "Thierry" <-> wrote:

>> Running KAV 6 beta at startup, I note that it detected some event,
>> displaying this strange message :
>> "deleted:riskware not-a-virus:PSWTool.Win32.RAS.a" in my external usb
>> drive
>
>It was indeed a virus. There is no many info in encyclopedia, but there is
>any doubt it is one more.

The particular alert you got with the PSW in the name suggests that
what was detected has something to do with passwords. Usually the
PSW type malware are password stealers. But it wasn't a virus. Viruses
are replicative code. Most malware nowdays aren't viruses. Also, the
fact that it classified the code as "riskware" suggests that whatever
it is ... it may or may not present a threat to the user. Look at it
as a warning message.

Art

http://home.epix.net/~artnpeg


Similar ThreadsPosted
How to get rid of win32/gael.3666.A virus? March 3, 2006, 12:07 pm
can't info on this virus win32/duiskbot.af December 15, 2006, 3:05 pm
Win32-API function WritePrivateProfileString gets blocked due to a anti-virus program? March 8, 2006, 11:21 am
win32/i-worm/stration - E-mail-worm.win32.warezov or? October 13, 2007, 10:41 am
AVAST Message Bar August 1, 2005, 11:12 pm
Thank-you for reading my message August 2, 2005, 8:52 am
I get the message: Your Computer may be infected June 19, 2005, 12:52 am
spybot warning message June 29, 2005, 7:07 pm
Avast - error message August 29, 2005, 7:15 pm
AVG Free Edition message October 10, 2005, 12:08 am

The site map in XML format XML site map

Contact Us | Privacy Policy