|
Posted by Bloke on December 20, 2006, 5:21 pm
If you were Registered and logged in, you could reply and use other advanced thread options
>
>>I've always had good experience with the Kaspersky online scan,
>>so I decided to install the AOL Active Virus Shield. The scan found quite
>>a
>>few things in drive HP RECOVERY (D:)
>>
>>detected: virus Worm.Win32.Viking.cj File:
>>D:\I386\apps\APP09894\App09894.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
>>detected: virus Worm.Win32.Viking.cj File:
>>D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
>>not found: virus Worm.Win32.Viking.cj File:
>>D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
>>detected: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009179.exe
>>not found: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009179.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
>>detected: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009180.exe
>>not found: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
>>not found: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
>>not found: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
>>not found: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
>>not found: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
>>not found: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
>>not found: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab
>>detected: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0010176.exe
>>detected: virus Worm.Win32.Viking.cj File: D:\System Volume
>>Information\_restore\RP20\A0010177.exe
>>detected: virus Worm.Win32.Viking.cj File:
>>d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
>>detected: virus Worm.Win32.Viking.cj File:
>>d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
>>detected: virus Worm.Win32.Viking.cj File:
>>d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
>>detected: virus Worm.Win32.Viking.cj File:
>>d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
>>detected: virus Worm.Win32.Viking.cj File:
>>d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
>>detected: virus Worm.Win32.Viking.cj File:
>>d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab.
>>
>>I have also scanned drive D with a-squared,SuperAntispyware,Ewidow
>>antispyware,Bitdefender online scan and Computer Assicates online scan,
>>nothing was found. Also the Kapersky online scan found nothing, strange as
>>AOL Active Virus Shield wich is basickly Kapersky Anti Virus.
>>
>>I've got the feeling the Active Virus Shield scan threw up false positives
>
> Detection by AVS should be the same as with KAV 6, providing the scan
> setting options are set the same. It may not be easy to sort out just
> what's going on here since the detections seem to be on files buried
> in installation and archive compressed files, as well as files in your
> System Restore.
>
> One possibilty is a "transient" false postive which is already fixed
> by Kaspersky. On that score, you might try scanning some of the
> folders after doing a update.
>
> If the apparent false positives persist after updating, you should
> try submitting one or two of the files to Kaspersky for analysis.
>
> One other thing you might try. There is a KAVDOSNT program
> you can download from my web site. It uses the DOS version
> of Kaspersky av (KAVDOS32). It would be interesting to see
> what KAVDOS32 comes up with after it's updated.
>
OK, after two updates in two days and another scan
all seems well, no suspicious files found. Cheers.
| 
XML site map