Exploit.Win32.WMF-PFV

Exploit.Win32.WMF-PFV
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Exploit.Win32.WMF-PFV Amit 02-22-2006
Posted by =?Utf-8?B?QW1pdA==?= on February 22, 2006, 9:35 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi guys,

Re: Exploit.Win32.WMF-PFV

All of a sudden out of nowhere my Bitdefender Software says that is had
detected and blocked this "virus" in "documents and settings\ IE5 content".
However, whenever i try to run cache cleaner or to clear my temp internet
files etc through internet options in the control panel it brings up the same
alert. Each time saying that Bitdefender had blocked it and that my computer
has not been infected.

a-Squared scan also detected it as malicious and supposedly deleted it, but
it still shows up on the next scan.

Am i being worried over nothing? or is there something wrong?

Any help would be much appreciated on how to remove/fix this problem once
and for all. I'm running Windows XP with service pack 2.

Thanks ,

Amit

Posted by Malke on February 22, 2006, 10:33 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Amit wrote:

> Hi guys,
>
> Re: Exploit.Win32.WMF-PFV
>
> All of a sudden out of nowhere my Bitdefender Software says that is
> had detected and blocked this "virus" in "documents and settings\ IE5
> content". However, whenever i try to run cache cleaner or to clear my
> temp internet files etc through internet options in the control panel
> it brings up the same alert. Each time saying that Bitdefender had
> blocked it and that my computer has not been infected.
>
> a-Squared scan also detected it as malicious and supposedly deleted
> it, but it still shows up on the next scan.
>
> Am i being worried over nothing? or is there something wrong?
>
> Any help would be much appreciated on how to remove/fix this problem
> once and for all. I'm running Windows XP with service pack 2.

Go through these malware removal steps in Safe Mode:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by Donna Buenaventura [MVP] on February 22, 2006, 10:39 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi Amit,

Let your antivirus (BitDefender) delete the detected file by running a full
system scan. See:
http://www.bitdefender.com/VIRUS-173651-en--Exploit.Win32.WMF-PFV.html
If BitDefender will only block instead of delete, kindly review the settings
in your BitDefender on how it will handle infected files then make sure that
it is set to automatically delete infected file or prompt you on what to do
when an infection is found.
If BitDefender will not delete the file, disable the other real-time
security tools that is maybe stopping BitDefender to touch the infected file
by deleting it. Or you can try using online scanner by Microsoft to see if
it will detect and delete the said infection.
Live Safety by Microsoft is at http://safety.live.com/site/en-US/default.htm
Note: TrendMicro will detect that as TROJ_NASCENE.K. See
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ%5FNASCENE%2EK
You may also try TrendMicro's Housecall to detect/delete the said infection
by using the online scanner:
http://uk.trendmicro-europe.com/enterprise/products/housecall_launch.php

Regards,
Donna


> Hi guys,
>
> Re: Exploit.Win32.WMF-PFV
>
> All of a sudden out of nowhere my Bitdefender Software says that is had
> detected and blocked this "virus" in "documents and settings\ IE5
> content".
> However, whenever i try to run cache cleaner or to clear my temp internet
> files etc through internet options in the control panel it brings up the
> same
> alert. Each time saying that Bitdefender had blocked it and that my
> computer
> has not been infected.
>
> a-Squared scan also detected it as malicious and supposedly deleted it,
> but
> it still shows up on the next scan.
>
> Am i being worried over nothing? or is there something wrong?
>
> Any help would be much appreciated on how to remove/fix this problem once
> and for all. I'm running Windows XP with service pack 2.
>
> Thanks ,
>
> Amit



Posted by =?Utf-8?B?QW1pdA==?= on February 22, 2006, 12:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thank you both so much. I eventually managed to delete the 2 infected files
manually after running a full system scan. Turns out that Bitdefender wasn't
configured to automatically delete infected files so I changed that setting
also for future scans.

Once again thank you very much for your help.

Amit :o)


"Amit" wrote:

> Hi guys,
>
> Re: Exploit.Win32.WMF-PFV
>
> All of a sudden out of nowhere my Bitdefender Software says that is had
> detected and blocked this "virus" in "documents and settings\ IE5 content".
> However, whenever i try to run cache cleaner or to clear my temp internet
> files etc through internet options in the control panel it brings up the same
> alert. Each time saying that Bitdefender had blocked it and that my computer
> has not been infected.
>
> a-Squared scan also detected it as malicious and supposedly deleted it, but
> it still shows up on the next scan.
>
> Am i being worried over nothing? or is there something wrong?
>
> Any help would be much appreciated on how to remove/fix this problem once
> and for all. I'm running Windows XP with service pack 2.
>
> Thanks ,
>
> Amit

Posted by Malke on February 22, 2006, 12:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Amit wrote:

> Thank you both so much. I eventually managed to delete the 2 infected
> files manually after running a full system scan. Turns out that
> Bitdefender wasn't configured to automatically delete infected files
> so I changed that setting also for future scans.
>
> Once again thank you very much for your help.

I'm so glad you got everything sorted. Thanks for taking the time to let
us know.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Similar ThreadsPosted
Possible New Exploit??? August 15, 2005, 3:45 pm
MSO..?..exploit / Well REALLY !! February 12, 2006, 2:36 pm
Help ANI exploit April 23, 2007, 7:56 pm
XML RPC Exploit Attack December 20, 2005, 3:41 pm
Re: WMF Exploit question January 5, 2006, 3:31 pm
Re: WMF Exploit question January 5, 2006, 4:33 pm
VML exploit still unpatched in XP SP2 and IE6/7 December 6, 2006, 11:34 am
Java/ByteVerify!Exploit May 29, 2006, 8:15 pm
MS05-002!exploit on Windows XP Pro SP2 June 11, 2006, 11:23 pm
Trojan Exploit.yim.CYFT August 28, 2008, 9:35 am

The site map in XML format XML site map

Contact Us | Privacy Policy