* Home Help Search Calendar Login Register  

Welcome, Guest. Please login or register.
July 25, 2008, 07:45:40 PM

Login with username, password and session length

177085 Posts
20940 Topics
50767 Members
Latest Member: Jero

more news...
Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Anti-Viruspyware (CAVS)
| | |-+  Virus/Malware Removal Assistance
| | | |-+  Executable help?		 « previous next »
Pages: 1 2 [3] Go Down Print
Author Topic: Executable help?  (Read 4740 times)
Info-Sec
Computer Security Testing Group
Comodo's Hero
*****
Offline Offline

Posts: 513
« Reply #30 on: April 01, 2008, 07:42:58 PM »
Quote from: martin11ph on April 01, 2008, 07:21:24 PM
Its not related to the flash drive? Coz I scanned the drive before we attached and it was clean. Only afterwards did were those rootkits found.

No what those detections are is the rootkit present in your system restore points.

For example i download virus LOL, create a restore point, my antivirus picks up LOL, but LOL is still present in my restore point, hence it will be detected there.  Your computer is safe.
Logged
*Vista *CFP V3 *Avira * Avast *Spyware Doctor
*XP *Zone Alarm PRO *NOD32 V2.7 *Spysweeper
martin11ph
Comodo Family Member
***
Offline Offline

Posts: 92
« Reply #31 on: April 02, 2008, 01:00:30 AM »
Quote from: Info-Sec on April 01, 2008, 07:42:58 PM
No what those detections are is the rootkit present in your system restore points.

For example i download virus LOL, create a restore point, my antivirus picks up LOL, but LOL is still present in my restore point, hence it will be detected there.  Your computer is safe.

Okay. I am just uneasy that the virus in the flash drive was not detected by the AVs I have here. However, nothing seems to have changed. 110 Percent
Logged
If you have time, pls go to this site and view each egg.
http://dragcave.ath.cx/user/52469
Thanks.
Info-Sec
Computer Security Testing Group
Comodo's Hero
*****
Offline Offline

Posts: 513
« Reply #32 on: April 02, 2008, 01:39:04 PM »
Quote from: martin11ph on April 02, 2008, 01:00:30 AM
Okay. I am just uneasy that the virus in the flash drive was not detected by the AVs I have here. However, nothing seems to have changed. 110 Percent
Good.  After all seems good for a while if you haven't done so already use disk cleaner to delete your system restore files.
Logged
*Vista *CFP V3 *Avira * Avast *Spyware Doctor
*XP *Zone Alarm PRO *NOD32 V2.7 *Spysweeper
martin11ph
Comodo Family Member
***
Offline Offline

Posts: 92
« Reply #33 on: April 04, 2008, 08:15:39 PM »
It seems my problems don't have an end. Cry
Here is a screenshot of my recent scan for rootkits. An error occurred with the scanner.

http://i307.photobucket.com/albums/nn296/martin11ph/error.jpg

I am wondering why drwatson is in my Defense+ events:
Application: C:\Windows\system32\drwtsn32.exe
Action: Access Memory
Target: C:\Program Files\COMODO\Firewall\cmdagent.exe

Also, I cannot scan anymore with AdAware. The computer hangs. Should I reinstall it?
« Last Edit: April 04, 2008, 09:01:19 PM by martin11ph » Logged
If you have time, pls go to this site and view each egg.
http://dragcave.ath.cx/user/52469
Thanks.
Goose18
Comodo's Hero
*****
Offline Offline

Posts: 997
« Reply #34 on: April 04, 2008, 10:40:45 PM »
If you are using Avast 4.8 just scan with Avast 4.8 it has built in anti rootkit. And if it hands too. Something must be wrong...
Logged
Avast! 4.8, BOClean, CFP3 and did i mention Avast! 4.8 Grin  OH guess what!!! Avast! 4.8 Grin
Info-Sec
Computer Security Testing Group
Comodo's Hero
*****
Offline Offline

Posts: 513
« Reply #35 on: April 05, 2008, 07:52:25 PM »
Quote from: martin11ph on April 04, 2008, 08:15:39 PM
It seems my problems don't have an end. Cry
Here is a screenshot of my recent scan for rootkits. An error occurred with the scanner.

http://i307.photobucket.com/albums/nn296/martin11ph/error.jpg

I am wondering why drwatson is in my Defense+ events:
Application: C:\Windows\system32\drwtsn32.exe
Action: Access Memory
Target: C:\Program Files\COMODO\Firewall\cmdagent.exe

Also, I cannot scan anymore with AdAware. The computer hangs. Should I reinstall it?

Drwtsn, automatically spawns when a crash is detected.  Try reinstalling ad aware.
Logged
*Vista *CFP V3 *Avira * Avast *Spyware Doctor
*XP *Zone Alarm PRO *NOD32 V2.7 *Spysweeper
martin11ph
Comodo Family Member
***
Offline Offline

Posts: 92
« Reply #36 on: April 07, 2008, 01:38:57 PM »
The avast anti rootkit worked again before reinstalling. However, I still couldn't scan with ad aware. I reinstalled it. Have yet to run a scan. Maybe later. Tongue
Logged
If you have time, pls go to this site and view each egg.
http://dragcave.ath.cx/user/52469
Thanks.
Goose18
Comodo's Hero
*****
Offline Offline

Posts: 997
« Reply #37 on: April 07, 2008, 08:38:47 PM »
Honestly if i were you i'd get rid of ad-aware and just get Spybot Search & Destroy along with superantispyware. im sure those two work much better then Ad-Aware  Wink
Logged
Avast! 4.8, BOClean, CFP3 and did i mention Avast! 4.8 Grin  OH guess what!!! Avast! 4.8 Grin
martin11ph
Comodo Family Member
***
Offline Offline

Posts: 92
« Reply #38 on: April 07, 2008, 09:02:14 PM »
Really? Maybe I'll give it a try. I will download those 2. What's your opinion Info-Sec? It seems its only the two of you posting here in my topic. Smiley
Logged
If you have time, pls go to this site and view each egg.
http://dragcave.ath.cx/user/52469
Thanks.
Info-Sec
Computer Security Testing Group
Comodo's Hero
*****
Offline Offline

Posts: 513
« Reply #39 on: April 08, 2008, 07:37:58 PM »
Quote from: martin11ph on April 07, 2008, 09:02:14 PM
Really? Maybe I'll give it a try. I will download those 2. What's your opinion Info-Sec? It seems its only the two of you posting here in my topic. Smiley

Haha.  Well I'd reccomend spybot, but get the spyware doctor starter edition from the google pack.  I think it has MUCH better detection ratings then SAS.  OR you can get SAS free and get SD starter, and no spybot, either way.
Logged
*Vista *CFP V3 *Avira * Avast *Spyware Doctor
*XP *Zone Alarm PRO *NOD32 V2.7 *Spysweeper
martin11ph
Comodo Family Member
***
Offline Offline

Posts: 92
« Reply #40 on: April 13, 2008, 09:58:32 PM »
I'm just wondering why I can't install programs. There seems to be errors with the dlls. I noticed 3 files in the Avast! treasure chest. kernel32.dll, winsock.dll, wsock32.dll. I currently have Avast!, Spyware Doctor, Spybot, Eset, CCleaner, and CFP installed on my pc.

BTW, I'm sorry if this is already far from the main topic of this thread.
« Last Edit: April 14, 2008, 11:25:31 AM by martin11ph » Logged
If you have time, pls go to this site and view each egg.
http://dragcave.ath.cx/user/52469
Thanks.
Info-Sec
Computer Security Testing Group
Comodo's Hero
*****
Offline Offline

Posts: 513
« Reply #41 on: April 14, 2008, 01:31:54 PM »
Quote from: martin11ph on April 13, 2008, 09:58:32 PM
I'm just wondering why I can't install programs. There seems to be errors with the dlls. I noticed 3 files in the Avast! treasure chest. kernel32.dll, winsock.dll, wsock32.dll. I currently have Avast!, Spyware Doctor, Spybot, Eset, CCleaner, and CFP installed on my pc.

BTW, I'm sorry if this is already far from the main topic of this thread.

That is odd.  I recommend a reformat at this point : /
Logged
*Vista *CFP V3 *Avira * Avast *Spyware Doctor
*XP *Zone Alarm PRO *NOD32 V2.7 *Spysweeper
martin11ph
Comodo Family Member
***
Offline Offline

Posts: 92
« Reply #42 on: April 15, 2008, 02:14:14 AM »
Well, atm I don't need any new programs. I'll just create backups of my hd already in case I need to reformat. Thanks. Laugh
Logged
If you have time, pls go to this site and view each egg.
http://dragcave.ath.cx/user/52469
Thanks.
3xist
Guest
« Reply #43 on: May 31, 2008, 11:49:43 PM »
Topic Locked.

Reason: Out-Dated post.

Josh
Logged
Tags:
Pages: 1 2 [3] Go Up Print 
« previous next »
Jump to:  

SSL Firewall
Page created in 0.104 seconds with 20 queries.
Powered by SMF 1.1.5 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks 		Design by 7dana.com