Problems with deleting / disinfecting viruses

stelorone · June 2007

Hi there,

I've recently run the virus scanner and have noticed that the program keeps picking up the same viruses on my system and cannot seem to move or disinfect the files. How exactly do I get rid of these viruses?

The following are the malware listed:

Adware.BHO

Adware.VB

Adware.Beav.Adware.A

trojan.spy.HTML.bankfraud.DQ

When I tried searching for these to look for removal solutions, they are not found.

I will change my setting to disinfect first and delete second, if that fails.

Any additional advice would help!

Cheers.

AndreiASM · June 2007

Hi!

Where are the viruses located? Please attach the scanning log in a new post.

Thanks.

Andrei

Niels · June 2007

Hello

First I would advise that you do not use home banking.

I suggest that you download this:

http://downloads2.superantispyware.com/dow...AntiSpyware.exe Install it perform an update. Reboot your pc into safe mode by just rebooting your pc and press several times on the F8 button and choose safe mode. Start superantispyware and perform a full scan and attach the scan report with the scan report of BitDefender. After that perform a deep scan with BitDefender.

Regards

Niels

vlad · June 2007

If you can identify the infected files from the log, please attach them to your next post. Don't delete the files yet; they may be false positives.

stelorone · June 2007

I was always told that if I have a virus, I should get rid of it. So, I set my "actions" to delete first, disinfect second. The only reason I tried this was because previously I had it set to disinfect first, quarantine second, and I would always get messages such as "could not disinfect... move failed".

Over the years, I've downloaded a ton of stuff - keygens, video, program files, etc. I thought I was being careful by having my virus software scan all files as they enter my system. Apparently, I did not do such a good job of protecting my system. I also run Adaware regularly.

At any rate, I've run Bitdefender numerous times since my original posting and it keeps finding different infected files. Why does this happen like this? Why doesn't it find these infected files in one scan? I'm afraid I just do not understand. I've also noticed that even though it says files are deleted, I keep getting reports on the same files. In other words, it does not appear to have been deleted, even though Bitdefender says it has been in earlier scans - the same files appear in more than one report even after Bitdefender reports they've been deleted. See 2 reports below .

Also, when Bitdefender deletes a file, it attempts an update on that file. What does that refer to? I've noticed that sometimes an update works, and sometimes updates fail.

See below for 2 recent logs:

//-----------------------------------------------------------------

//

// Product: BitDefender 9 Professional Plus

// Version: 9.5

//

// Created on: 20/06/2007 21:55:06

//

//-----------------------------------------------------------------

Virus Statistics

Scan path : C:\

\

Folders : 15785

Files : 983940

Archives : 44368

Packed files : 62466

Identified viruses : 8

Infected files : 11

Warnings : 0

Suspect files : 0

Disinfected files : 0

Deleted files : 11

Copied files : 0

Moved files : 0

Renamed files : 0

I/O errors : 64

Scan time : 02:32:10

Scan speed (files/sec) : 107

Spyware Statistics

Memory processes scanned : 47

Memory processes infected : 0

Registry keys scanned : 1748

Registry keys infected : 0

Cookies scanned : 99

Cookies infected : 0

Spyware files infected : 0

Spyware threats detected : 0

Virus definitions : 572790

Scan plugins : 16

Archive plugins : 41

Unpack plugins : 6

Mail plugins : 6

System plugins : 5

Virus scan options

Detection

[X] Scan boot sectors

[X] Scan archives

[X] Scan packed files

[X] Scan email

File mask

[ ] Programs

[X] All files

[ ] User defined extensions:

[ ] Exclude extensions: ;

Action

Infected objects

[ ] Ignore

[ ] Disinfect

[X] Delete

[ ] Copy to quarantine

[ ] Move to quarantine

[ ] Rename

[ ] Prompt user

Second action

[ ] Ignore

[ ] Delete

[ ] Copy to quarantine

[ ] Move to quarantine

[ ] Rename

[ ] Prompt user

Virus scan options

[X] Enable warnings

[X] Enable heuristics

[ ] Show all files in log

[X] Report file: C:\Program Files\Softwin\BitDefender9\Logs\vscan_1182398106.log

Spyware scan options

[X] Memory Processes

[X] Registry keys

[X] Cookies

Summary:

C:\Documents and Settings\Steve\Application Data\Mozilla\Profiles\default\7jum67tu.slt\Mail\pop.telus.net\Inbox=>(message 214) Infected: Trojan.Spy.HTML.Bankfraud.DQ

C:\Documents and Settings\Steve\Application Data\Mozilla\Profiles\default\7jum67tu.slt\Mail\pop.telus.net\Inbox=>(message 214) Deleted

C:\Documents and Settings\Steve\Application Data\Mozilla\Profiles\default\7jum67tu.slt\Mail\pop.telus.net\Inbox Update

C:\Documents and Settings\Steve\Application Data\Thunderbird\Profiles\brp4zi5x.default\Mail\pop.telus.net\Inbox=>(message 214) Infected: Trojan.Spy.HTML.Bankfraud.DQ

C:\Documents and Settings\Steve\Application Data\Thunderbird\Profiles\brp4zi5x.default\Mail\pop.telus.net\Inbox=>(message 214) Deleted

C:\Documents and Settings\Steve\Application Data\Thunderbird\Profiles\brp4zi5x.default\Mail\pop.telus.net\Inbox Update

C:\Documents and Settings\Steve\Desktop\mixcraft.exe=>(Embedded EXE o)=>wise0289 Detected: Adware.Admoke.CT

C:\Documents and Settings\Steve\Desktop\mixcraft.exe=>(Embedded EXE o)=>wise0289 Deleted

C:\Documents and Settings\Steve\Desktop\mixcraft.exe=>(Embedded EXE o) Update failed

C:\WINDOWS\Installer\85027.msi=>(Embedded EXE) Detected: Adware.Agent.KH

C:\WINDOWS\Installer\85027.msi=>(Embedded EXE) Deleted

C:\WINDOWS\Installer\85027.msi Update failed

C:\WINDOWS\Installer\{5783F2D7-6004-0409-0002-0060B0CE6BBA}\Acad162_icon.exe Detected: Adware.Agent.KH

C:\WINDOWS\Installer\{5783F2D7-6004-0409-0002-0060B0CE6BBA}\Acad162_icon.exe Deleted

C:\WINDOWS\system32\1160873000.exe=>(NSIS o)=>lzma_solid_nsis0002 Detected: Adware.Beav.Adware.A

C:\WINDOWS\system32\1160873000.exe=>(NSIS o)=>lzma_solid_nsis0002 Deleted

C:\WINDOWS\system32\1160873000.exe=>(NSIS o) Update failed

C:\WINDOWS\system32\1160873000.exe=>(NSIS o)=>lzma_solid_nsis0003 Detected: Adware.VB

C:\WINDOWS\system32\1160873000.exe=>(NSIS o)=>lzma_solid_nsis0003 Deleted

C:\WINDOWS\system32\1160873000.exe=>(NSIS o) Update failed

\Steve's Documents\My Downloads\Autodesk Architectural Desktop 2007\ADT2007CD1\zwtadt7a.bin=>Install/ADT.msi=>(Embedded EXE) Detected: Adware.Agent.KH

\Steve's Documents\My Downloads\Autodesk Architectural Desktop 2007\ADT2007CD1\zwtadt7a.bin=>Install/ADT.msi=>(Embedded EXE) Deleted

\Steve's Documents\My Downloads\Autodesk Architectural Desktop 2007\ADT2007CD1\zwtadt7a.bin=>Install/ADT.msi Update failed

\Steve's Documents\My Downloads\Autodesk Architectural Desktop 2007\CD1\Install\ADT.msi=>(Embedded EXE) Detected: Adware.Agent.KH

\Steve's Documents\My Downloads\Autodesk Architectural Desktop 2007\CD1\Install\ADT.msi=>(Embedded EXE) Deleted

\Steve's Documents\My Downloads\Autodesk Architectural Desktop 2007\CD1\Install\ADT.msi Update failed

\Steve's Documents\My Downloads\Mike's Toybox (F)\Programs\Turbo Torrent\turbo.exe=>(NSIS o)=>lzma_solid_nsis0007 Detected: Adware.BHO

\Steve's Documents\My Downloads\Mike's Toybox (F)\Programs\Turbo Torrent\turbo.exe=>(NSIS o)=>lzma_solid_nsis0007 Deleted

\Steve's Documents\My Downloads\Mike's Toybox (F)\Programs\Turbo Torrent\turbo.exe=>(NSIS o) Update failed

\Steve's Documents\My Downloads\Mike's Toybox (F)\Programs\Turbo Torrent\turbo.exe=>(NSIS o)=>lzma_solid_nsis0008 Detected: Adware.VB

\Steve's Documents\My Downloads\Mike's Toybox (F)\Programs\Turbo Torrent\turbo.exe=>(NSIS o)=>lzma_solid_nsis0008 Deleted