Exploit.win32.ms04-028.gen

Robbo3066
Robbo3066
in Malware talk

I have Windows Vista. When I go to certain folders whilst viewing JPG files in Windows Photo Gallery, I get a warning from Bitdefender stating the above virus has been detected and blocked on about 20 photos. Yet when I scan the folder with Bitdefender, it states there are no virus's.


The file names which are apparently infected show a '.tmp' file extension which doesn't seem to exist as a file name.


Can someone give me some guidance. I don't want to get rid of these photos but it would be obviously the lesser of the two evils if there were infected by a virus.


Rob

Comments

  • lcristian
    lcristian

    Please send us the images that BitDefender detects as viruses to see what is the problem.

  • Fallstar
    Fallstar

    I just got the same alert from BD. I'm on Vista Home Premium (32bit) and took a screenshot using the Snipping Tool that's included in Vista. I saved it as jpg, and got a pop up from BD telling me it detected the above named virus, and that my computer was not infected. I have used the snipping tool previously (recently) and did not encounter this.


    Also, I'm trying to find a log file that shows that alert, but can't seem to find it. Where do I need to look for the log files?

  • Fallstar
    Fallstar

    Sorry for double-posting (no edit button) <_<


    I was able to replicate the alert several times by using the Snipping tool. It appears, after you take the screen capture, snipping tool opens the image in a window, to let you annotate and/or save the image. That first opened image must be the .tmp image, although I'm not sure where the tmp file is placed.

  • Robbo3066
    Robbo3066
    edited February 2008

    Fallstar


    Thank you for the information.


    I shall have to do some experimenting.


    Rob

  • ric9887
    ric9887

    I got this while trying to save something out from the MS Snippling Tool on Vista. It reported that it had blocked the .tmp file, although the actual file I was trying to save did get saved.


    Any progress on your investigation ?


    Regards


    Rich

  • Sal Khan
    Sal Khan
    edited June 2008

    Wondering if any luck has been had with this that I may have missed?


    I just purchased a new 2GB MicroSD card for my Samsung SCH-i760 and whenever I put the card in my card reader, open an image (jpg) file, try to rotate the picture and save it, I get this Virus alert just like many of you. Kinda of a PITA.


    Edit: In case it goes unknown, opening the JPG in Paint and doing a Save As with a different name seems to work. I'm thinking a program that can do a mass batch convert can work too, but I hadn't tried that yet.

  • rootkit
    rootkit ✭✭✭
    edited June 2008

    Post here a HijackThis log !


    Instructions: http://forum.bitdefender.com/index.php?showtopic=5668


    Pack a photo in a zip or rar archive with password infected and attach it here please !

All Time Leaders

Categories

Defenders of the month