Drweb query

Discussion in 'other anti-virus software' started by C.S.J, Jan 28, 2008.

Thread Status:
Not open for further replies.
  1. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    yo yo,

    29-01-2008 01:15:27 [CL] C:\Invision\Invision\Stdio.dll - infected with IRC.Flood
    29-01-2008 01:15:33 [CL] C:\Invision\Invision\Stdio.dll - moved as 'Stdio.dll.17FEE392'
    29-01-2008 01:15:46 [CL] C:\Invision\System\Remotes\ictcp.mrc - infected with modification of IRC.Generic.116
    29-01-2008 01:15:47 [CL] C:\Invision\System\Remotes\ictcp.mrc - moved as 'ictcp.mrc.4F11EC54'

    these havnt been moved to the infected!!! folder,

    so im just wondering where they have been moved too?
    anyone know?

    im sure the logs used to say moved to quarentine or moved to infected!!! or something like that, now it says the above and there are no files in my infected!!! folder.
     
  2. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,526
    Location:
    Arkham Asylum

    Looks like a bad translation or error in the message. The files look like they were renamed, according to the log. I mean what files have a .17FEE392 extension?
     
  3. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    hmm, i clicked move.

    i will speak with Serge.


    -----
    if Vista search wasnt crap, i could find it that way....... but it shows nothing.
     
  4. computer geek

    computer geek Registered Member

    Joined:
    Oct 6, 2007
    Posts:
    776
    if your that worried, try some free online scan n disinfect like f-secure
     
  5. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    I ain't worried computer geek,

    Plus, if it has been renamed mistakenly, there no longer is a threat, so online scans would be useless, time I just dont have at the moment. ;)
     
  6. computer geek

    computer geek Registered Member

    Joined:
    Oct 6, 2007
    Posts:
    776
    however, unless it is a bug with drweb or u accindentely clicked the wrong buttons, i find it hard to believe it was renamed. I would strongly reccommend running the online scanner, this happened to me and m:D c:D a:D fe:D e:D once, same situation and online scanner picked it up again and deleted.
    If you don't have the time, why don't you just leave your computer on and go to work?
    just a suggestion :D
    tim
     
  7. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    i never leave my computer on, its on... only when i use it.

    if its not been moved or renamed, a full system scan with my very own drweb will find it, i see no need for online scanners, but some people like them as a 2nd opinion.
     
  8. computer geek

    computer geek Registered Member

    Joined:
    Oct 6, 2007
    Posts:
    776
    Well, lets all go green! :D
    But i can't help mentioning again that mine detected it and then didn't, strange... but online scanner found it...
     
  9. C.S.J

    C.S.J Massive Poster

    Joined:
    Oct 16, 2006
    Posts:
    5,029
    Location:
    this forum is biased!
    the contents of the 'infected!!!' folder are hidden by default now, never used to be like this.

    or maybe its just a vista thing, anyway.. i changed it to show hidden files and i can now see the files there. :thumb:
     
  10. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,526
    Location:
    Arkham Asylum
    Thanks for the update. :D
     
Thread Status:
Not open for further replies.