Help, Cant Move Or Disinfect!
Hi, i did a virus scan and cannot disinfect or move several viruses..what do i do!
heres the report
[X] Scan email
File mask
[ ] Programs
[X] All files
[ ] User defined extensions:
[ ] Exclude extensions: ;
Action
Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Move to quarantine
[ ] Prompt user
Second action
[ ] Ignore
[ ] Delete
[X] Move to quarantine
[ ] Prompt user
Virus scan options
[X] Enable warnings
[X] Enable heuristics
[ ] Show all files in log
[X] Report file: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\deep_scan\1191031758.log
Spyware scan options
[X] Scan for riskware
[ ] Skip dial and applications from scan
[X] Registry keys
[X] Cookies
Summary:
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>readme.txt Detected: Spyware.Webhancer.Y
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>readme.txt Disinfection failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>readme.txt Move failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whAgent.exe Detected: Spyware.Webhancer.AE
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whAgent.exe Disinfection failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whAgent.exe Move failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whInstaller.exe Detected: Adware.Webhancer.BI
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whInstaller.exe Disinfection failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whInstaller.exe Move failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>webhdll.dll Detected: Adware.Webhancer.BI
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>webhdll.dll Disinfection failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>webhdll.dll Move failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whiehlpr.dll Detected: Adware.Webhancer.Y
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whiehlpr.dll Disinfection failed
C:\Documents and Settings\john\Local Settings\Temp\BundleDownloader\32.ex_=>(RAR Sfx o)=>whiehlpr.dll Move failed
Comments
-
The detected files are inside an archive so they can't be deleted from there, you have to delete it manually. First disable the real-time antivirus protection because it might block access to the files and you won't be able to delete them. Then open My Computer and go to C:\Documents and Settings\john\Local Settings\Temp, there delete the BundleDownloader folder. If you can't find that location, click on the Tools menu and go to Folder Options, there go to View and select Show hidden files and folders. Click OK, and locate the BundleDownloader folder. After you delete it, empty your recycle bin. You should also purge your System Restore because it could keep a copy of the infected files. Right click on My Computer and go to Properties. Click on System Restore. Click Turn off, click apply. Then uncheck Turn off and click OK. Run another scan just to be sure.
0