Exploit.win32.ms04-028.gen

I have Windows Vista. When I go to certain folders whilst viewing JPG files in Windows Photo Gallery, I get a warning from Bitdefender stating the above virus has been detected and blocked on about 20 photos. Yet when I scan the folder with Bitdefender, it states there are no virus's.

The file names which are apparently infected show a '.tmp' file extension which doesn't seem to exist as a file name.

Can someone give me some guidance. I don't want to get rid of these photos but it would be obviously the lesser of the two evils if there were infected by a virus.

Rob

Find more posts tagged with

Comments

lcristian

Please send us the images that BitDefender detects as viruses to see what is the problem.

Fallstar

I just got the same alert from BD. I'm on Vista Home Premium (32bit) and took a screenshot using the Snipping Tool that's included in Vista. I saved it as jpg, and got a pop up from BD telling me it detected the above named virus, and that my computer was not infected. I have used the snipping tool previously (recently) and did not encounter this.

Also, I'm trying to find a log file that shows that alert, but can't seem to find it. Where do I need to look for the log files?

Fallstar

Sorry for double-posting (no edit button) <_<

I was able to replicate the alert several times by using the Snipping tool. It appears, after you take the screen capture, snipping tool opens the image in a window, to let you annotate and/or save the image. That first opened image must be the .tmp image, although I'm not sure where the tmp file is placed.

Robbo3066

Fallstar

Thank you for the information.

I shall have to do some experimenting.

Rob

ric9887

I got this while trying to save something out from the MS Snippling Tool on Vista. It reported that it had blocked the .tmp file, although the actual file I was trying to save did get saved.

Any progress on your investigation ?

Regards

Rich

Sal Khan

Wondering if any luck has been had with this that I may have missed?

I just purchased a new 2GB MicroSD card for my Samsung SCH-i760 and whenever I put the card in my card reader, open an image (jpg) file, try to rotate the picture and save it, I get this Virus alert just like many of you. Kinda of a PITA.

Edit: In case it goes unknown, opening the JPG in Paint and doing a Save As with a different name seems to work. I'm thinking a program that can do a mass batch convert can work too, but I hadn't tried that yet.

rootkit

Post here a HijackThis log !

Instructions: http://forum.bitdefender.com/index.php?showtopic=5668

Pack a photo in a zip or rar archive with password infected and attach it here please !