PDA

View Full Version : footprints


FukenFooser 007.5
November 25th, 2003, 01:01 AM
:)
Hello to all that help the less informed.

I was wondering if the "on-line" scaners leave behind a foot print of a virus that they were scaning for??

used "trend" and later " Antivir XP" showed " TR/NoClose.E"

also "ALL_LAUNCH_Reg(.).HTML"

and "VBS/Newlove.A"

not to forget "W32/Kenston-1895.X"

this was in last three days and I was thinking that they are just foot prints so to speak.??????



Any feed back would be helpful

all were in temp files

Pieter_Arntz
November 25th, 2003, 09:59 AM
Hi FukenFooser 007.5,

There is no malware in your log, but I spotted two firewalls and two AV's?

Not sure about signatures being left behind during online scans, but I do know some of these scans do leave a lot more behind then some people realize.

Regards,

Pieter

FukenFooser 007.5
November 26th, 2003, 10:21 AM
HI............Pieter!!!

Thanks for the reply.
yes multi av's & firewalls, the ones I'm using seem to work together without problem. Many hours trying differant ones to find compatable ones.
And I just ran a trend again with av's running and again a footprint of "Newlove" in temp found by Antivir XP.

Did you see the "broken link" in my log and should I try to fix? could you please send advice and instructions.

Again "NewLove"..........???

Pieter_Arntz
November 26th, 2003, 10:40 AM
Hi FukenFooser 007.5,

You meant this one:
O10 - Broken Internet access because of LSP provider 'imon.dll' missing

That should not be fixed. At least not if you are using NOD32.
It's just a minor misunderstanding between NOD32 and HijackThis.
The file is there, but HijackThis can't find it. Windows can and that's what matters. ;)

Regards,

Pieter

FukenFooser 007.5
November 28th, 2003, 05:18 PM
:)
Thanks for the reply. I won't fix that then.
And again, using "trend" with antiV on, "NewLove" showed again???
Is it just the on-line scaner looking for it or is it actually there?

It's got me all ???, and :-[, but as you know I am still learning.

Have a great weekend.

FukenFooser 007.5
November 30th, 2003, 01:20 PM
??? ??? ??? ???
Hello all.

This file is in my recycle bin and can't be removed?
I was wondering if anybody could tell what it is?
"S-1-5-21 73586283-152049171-839522115-1003"
when I try to delete, it states a program is using and can't be done?
just a curious mind
Thanks
Have a GREAT DAY!
A new question- Any idea on updating a "toshiba DVD-Rom" mine will not play DVD's or even auto start up when I put a disc in?
yes I know it's a check mark somewhere but I'm not sure where

Thanks
Have a GREAT DAY!

Comp01
November 30th, 2003, 01:42 PM
Try booting to safe mode and deleting it, Its probably a temp file, I've had it happen to me before, I usally had to restart, or go to safe mode.

FukenFooser 007.5
November 30th, 2003, 02:35 PM
;D

Thanks, I will try that another time
8)