TR/Crypt.xpack.gen

Scam

Scam

Scam

Soldato
Joined
20 Oct 2002
Posts
19,046
Location
London
Hello all,

Two of our machines at work have been infected with this. Avira found them in:
C:\Program Files\Avid\Avid Media Composer
Click to expand...
and I quarantined them. The file that was infected was DAE.dll. Problem is I guess that hasn't actually got rid of it, and it's also fubar'd our Avid software -- which now won't load. Slight problem!

I've just tried SDFix on one of the the systems but it didn't find anything, do I need to maybe un-quarantine the file first, so that it will find it?

Are there any other tools out there to get rid of this particular virus? :confused:

Thanks for any help or pointers!
 
You sure it's not a false positive?

Scan the file with a load of other scanners, it's probably just some compression algorithm that Avira doesn't like, it's not unusual for false positives to slip through the net whilst testing, especially for 3rd party software
 
Hmn.. is a false positive likely on a setup that hasn't changed for a while? Their both high-end editing machines and we rarely change anything on them (in an ideal world they wouldn't even be connected to the internet to be fair!). There hasn't been anything new installed on them for a good few months. :confused:
 
Scam said:
Hmn.. is a false positive likely on a setup that hasn't changed for a while? Their both high-end editing machines and we rarely change anything on them (in an ideal world they wouldn't even be connected to the internet to be fair!). There hasn't been anything new installed on them for a good few months. :confused:
Click to expand...

If the virus definitions are updated regularly then of course it's possible for a bug in the defs to flag a legit file as a virus. Your best bet would be to submit the file to Avira and see what they say.
 
I've never used or heard of Avid, but if a required dll has been quarantined, then of course it would stop it..
 
Right thanks for the input guys. I've sent the file off to Avira. Is there anywhere else I can submit it maybe?

I'm downloading all the usual tools, as well as a triasl of Nod32, maybe Kaspersky or something. Would these scans/AVs actually pick up the file if it's quarantined by Avira? :confused:
 
You must log in or register to reply here.
Back
Top Bottom