Slightly Concerned

superscaper

You tried superantispyware? There's no such thing as antimalware that catches everything.

trickyseven

Hope this helps? I'm no techie but after getting same message after downloading update for ActiveX (from bbc site), spent ages trying to get rid yesterday by downloading mal/spyware removal tools from M.Soft, running full scan etc, nothing seemed to work. Eventually,by running System Restore and setting the restore point to before the PREVIOUS download date (about 10 days ago when i received Automatic Security Updatesfrom M.Soft), it seemed to do the trick. When i previously restored to just before the AcitiveX download it didn't get rid of it. Who knows? I don't know if all computers have this facillity but i found mine in the start menu on the desktop toolbar under "Help and Support" then click on "System Restore". I've run several scans since including this morning and it seems to have solved the problem, spyware scans by pcGuard are not finding anything and no flashing message!
Good Luck!!!

superscaper

Is everyone who's detected it using PC Guard? If that's the case then you shouldn't worry because it's most likely a false positive. Especially if people think it's MSE or the BBC that are the source of the infection. Submit the file to PC Guard, there should be an option if it's decent software (although by some accounts it isn't). They can confirm whether it's a false positive and account for that in the next update.

Can anyone confirm whether it's been detected by anything else at all? Sybot S&D, Ad Aware, Superantispyware, AVG AS, AVG AV, Avast, Antivir.....?

mrmarky

Just thought I would let you guys know

Its a virus and currently only listed on

http://www.ca.com/us/securityadvisor/virusinfo/signaturefiles/recentdetail.aspx?CID=69706

Its mid way down, these guys are the only ones with latest deffs to delete virus

http://shop.ca.com/STContent/Resources/Resources.aspx

I'm sure other vender's will catch up eventually.

daveyjp

Also getting it until this morning when I restored the machine and it went. Machine has been used during the afternoon/evening and it has been OK. Came back to this site just now and warning is back.

superscaper

daveyjp wrote: »

Also getting it until this morning when I restored the machine and it went. Machine has been used during the afternoon/evening and it has been OK. Came back to this site just now and warning is back.

What security are you using?

Edit: Just did another google search and there's now a question on Yahoo but it appears one of the answers is someone quoting me from this thread. Talk about running in circles. :rotfl:

daveyjp

NTL Netguard - first time I've had a problem with it.

Also googled and found same thread.

Downloaded software from Mrmarky thread and they wanted paying to remove threats!

superscaper

daveyjp wrote: »

NTL Netguard - first time I've had a problem with it.

Also googled and found same thread.

Downloaded software from Mrmarky thread and they wanted paying to remove threats!

Go through the malware removal guide sticky. If nothing is found using the software mentioned there then as far as I'm concerned it must be a false positive from a recent AV update. Try some of the online scanners as well.

So far I've not seen any mention of anyone with the top dog/accurate software say they've found it. Such as Eset or Antivir or Kaspersky....

vyseyboy

I'm going to go out on a limb and say this whole thread is an elaborate piece of marketing for C.A's anti-virus solution. Mr. Marky's first post certainly isn't a very typical one.

I'm half-joking. The intitial post seemed genuine. But it's been hijacked...

dwb_3

I had the same problem pigeon.amxl which pcguard complained about endlessley (started on Wednesday 20th Feb). I tried numerous anti-spwyware software and with the help of techy colleagues poked around in the registery. All to no avail.

I then downloaded Virgin PCGuard (I was running a rather old version it seem) and ran their anti-spyware. It immediately found and quaranteened the offending bird and I had pleasure in deleteing it.