Need advice--framer virus

Need advice--framer virus

Secure Home | Search | About
 Anti-Virus Software    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Need advice--framer virus MZB 02-15-2008
Posted by MZB on February 15, 2008, 2:10 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Got a problem.

I ran AVG and it says:

virus found HTML/Framer

It's located in:
C:\Documents and Settings\My name\Local Settings\Temporary Internet
Files\Content.IE5\Y7XJ94FG\all[1].html

It says it can't heal it.

Any advice on what to do now? I am using XP HOME.

I googled it and I'm not really getting answers on what to try.



BTW, when I go to Windows Explorer, I can't even get to Content.IE5. It
stops at Temporary Internet Files. How do I get there (it is set to show
hidden files)?

UPDATE:

I was able to get there by going into command prompt. (The DIR command did
not show the folders, but I was able to use the old DOS CD commands to keep
going)

I was then able to delete the file. Does this mean it is truly GONE?

I re-ran AVG for the Temporary Internet Files and it seems to be okay; no
threat found.

I'm going to reboot and at least run AVG again for Temporary Internet Files.

Any reason why I can't get to the aforementioned area via Windows Explorer?

Mel



Posted by foghollow on February 15, 2008, 3:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options
says...
> Got a problem.
>
> I ran AVG and it says:
>
> virus found HTML/Framer
>
> It's located in:
> C:\Documents and Settings\My name\Local Settings\Temporary Internet
> Files\Content.IE5\Y7XJ94FG\all[1].html

Clear the IE temp files, from IE's Tools->Internet Options->General->Temporary
Internet Files, and
it's gone.

--
Snob? Were I a snob, I wouldn't be talking to you.

Posted by David H. Lipman on February 15, 2008, 7:36 am
If you were  Registered and logged in, you could reply and use other advanced thread options

| Got a problem.
|
| I ran AVG and it says:
|
| virus found HTML/Framer
|
| It's located in:
| C:\Documents and Settings\My name\Local Settings\Temporary Internet
| Files\Content.IE5\Y7XJ94FG\all[1].html
|
| It says it can't heal it.
|
| Any advice on what to do now? I am using XP HOME.
|
| I googled it and I'm not really getting answers on what to try.
|
| BTW, when I go to Windows Explorer, I can't even get to Content.IE5. It
| stops at Temporary Internet Files. How do I get there (it is set to show
| hidden files)?
|
| UPDATE:
|
| I was able to get there by going into command prompt. (The DIR command did
| not show the folders, but I was able to use the old DOS CD commands to keep
| going)
|
| I was then able to delete the file. Does this mean it is truly GONE?
|
| I re-ran AVG for the Temporary Internet Files and it seems to be okay; no
| threat found.
|
| I'm going to reboot and at least run AVG again for Temporary Internet Files.
|
| Any reason why I can't get to the aforementioned area via Windows Explorer?
|
| Mel
|

Mel:

This is not a virus and not a Trojan. It is an IFrame Exploet code in the HTML
and it was
blocked from writing and thus doesn't exist on your PC.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Posted by MZB on February 15, 2008, 9:33 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Huh?

Can you explain what you mean by blocked from writing?

Mel
>
> | Got a problem.
> |
> | I ran AVG and it says:
> |
> | virus found HTML/Framer
> |
> | It's located in:
> | C:\Documents and Settings\My name\Local Settings\Temporary Internet
> | Files\Content.IE5\Y7XJ94FG\all[1].html
> |
> | It says it can't heal it.
> |
> | Any advice on what to do now? I am using XP HOME.
> |
> | I googled it and I'm not really getting answers on what to try.
> |
> | BTW, when I go to Windows Explorer, I can't even get to Content.IE5. It
> | stops at Temporary Internet Files. How do I get there (it is set to show
> | hidden files)?
> |
> | UPDATE:
> |
> | I was able to get there by going into command prompt. (The DIR command
> did
> | not show the folders, but I was able to use the old DOS CD commands to
> keep
> | going)
> |
> | I was then able to delete the file. Does this mean it is truly GONE?
> |
> | I re-ran AVG for the Temporary Internet Files and it seems to be okay;
> no
> | threat found.
> |
> | I'm going to reboot and at least run AVG again for Temporary Internet
> Files.
> |
> | Any reason why I can't get to the aforementioned area via Windows
> Explorer?
> |
> | Mel
> |
>
> Mel:
>
> This is not a virus and not a Trojan. It is an IFrame Exploet code in the
> HTML and it was
> blocked from writing and thus doesn't exist on your PC.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
>
>



Posted by David H. Lipman on February 15, 2008, 5:51 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Huh?
|
| Can you explain what you mean by blocked from writing?
|
| Mel

Simple...

Anti virus utilities such as AVG perform "On Access" scanning. As files are
written and/or
read from media the files are scanned for viral/malware signatures. If they are
determined
to be malicious the software will flag the file, note the activity to the user
and block
said file from ever be written.

In this case we are talking about IFrame Exploit code which was identified, you
were
notified, and the application AVG prevented the file from performing it
nefarious action and
from existing on your PC.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Similar ThreadsPosted
New virus (price.cpl - Bagle varient) and current Virus-Total results September 12, 2005, 10:47 pm
Weird problem on Flash Drive seems like a virus but no virus detected August 28, 2007, 12:04 pm
Why the PC Virus cannot attack my XP? I am the administrator, I run ActiveX, No Firewall, No Virus Scanner..... January 14, 2008, 4:45 pm
List of the Virus makers's IP, there is one Virus maker in Bend Oregon with multiple IPs, scanning people computers for information. December 28, 2007, 6:36 am
KAV message "riskware not-a-virus:PSWTool.Win32.RAS.a", not a virus ? September 28, 2005, 10:52 am
How to create a simulated virus with a virus signature June 14, 2005, 1:14 am
Virus that closes anti-virus softwares January 11, 2007, 6:35 am
Mail Anti-Virus,alt.comp.virus January 16, 2008, 4:33 am
A virus that "AntiVir(tm) dosen`t want to delete..(in Mozilla.)/Ein Virus das Anti-Vir(tm) nicht löschen will..(unter Mozilla.) July 22, 2005, 12:03 pm
Re: Virus that reverts virus defs. March 11, 2007, 1:16 am

The site map in XML format XML site map

Contact Us | Privacy Policy