Welcome, Guest. Please login or register.
Did you miss your activation email?
May 22, 2013, 11:26:01 PM

Login with username, password and session length

663638 Posts
70567 Topics
145225 Members

Latest Member: KentonMcs

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Security Products & Services
| |-+  Comodo Internet Security - CIS
| | |-+  Help - CIS
| | | |-+  AntiVirus Help - CIS
| | | | |-+  reformatted and now I'm infected??
« previous next »
Pages: [1] Go Down Print
Author Topic: reformatted and now I'm infected??  (Read 1301 times)
littleames
Newbie
*
Offline Offline

Posts: 1


« on: February 21, 2012, 12:24:10 PM »

I re installed windows xp yesterday and I ran a scan with Comodo last night. I just looked at the results and apparently I have quite a few infections? Are they just false positives?

I have an hp pavilion home edition with sp3

Suspicious[at]#3blt9lopoti50 C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP11\A0004889.rbf

Malware[at]#1mu7dfhxtw9hs C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP12\A0005838.exe

Malware[at]#1mu7dfhxtw9hs C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP12\A0005910.exe

Malware[at]#1mu7dfhxtw9hs C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP12\A0005922.exe

Malware[at]#1mu7dfhxtw9hs C:\System Volume Information\_restore{F2681A7D-91E5-401A-AC8B-015335799DC0}\RP3\A0003636.exe

Suspicious[at]#2y62nhe9bhv37 C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdns_01.exe

Suspicious[at]#3qpqom36f6gsa C:\Program Files\Online Services\MSN80\Extras\addons\McAfee\shared\agent.cab|mcagent.exe

Suspicious[at]#33wgize8y6bvt C:\Program Files\Online Services\MSN80\Extras\addons\McAfee\shared\agent.cab|mcupdate.exe

Malware[at]#1mu7dfhxtw9hs C:\hp\bin\AUTOTKIT.EXE

Malware[at]#2xckft07bo8xv C:\hp\bin\Terminator.exe

Malware[at]#1mu7dfhxtw9hs C:\hp\EXPLOREBAR\AUTOTKIT.EXE

Malware[at]#1mu7dfhxtw9hs C:\Documents and Settings\Default User\Start Menu\Programs\Startup\AutoTBar.exe

Suspicious[at]#2izxnb4aa8zst D:\I386\apps\APP06334\App06334.exe|Unsfx|hp/tmp/src/Setup.exe|Unsfx|mm20ex.EXE
Logged
Ronny
Product Translator
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 13182


Volunteer Moderator


« Reply #1 on: February 22, 2012, 03:25:07 PM »

It looks like False Positives to me, but to be on the safe-side you could try a 3rd party scanner to re-evaluate these detections.

e.g. Malwarebytes/HitmanPro/Emsisoft Emergency kit
Logged

Volunteer Moderator
Any concerns? Please send me a PM or review the Forum Policy -  update Jan 3rd 2013!
Chiron
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5578



« Reply #2 on: February 22, 2012, 07:32:32 PM »

Also, and this will also be relatively quick, please report all of the detections, that aren't in system restore (since it's difficult to access it) to Comodo for analysis. Report them through this link. They will manually check the files and let you know by email whether they are malicious or not.

Thanks.
Logged

Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.043 seconds with 22 queries.
Powered by SMF 1.1.18 | SMF © 2006, Simple Machines Design by 7dana.com