Executable help?

[Guest]

[Info-Sec]

Its not related to the flash drive? Coz I scanned the drive before we attached and it was clean. Only afterwards did were those rootkits found.

No what those detections are is the rootkit present in your system restore points.

For example i download virus LOL, create a restore point, my antivirus picks up LOL, but LOL is still present in my restore point, hence it will be detected there.  Your computer is safe.

[martin11ph]

No what those detections are is the rootkit present in your system restore points.

For example i download virus LOL, create a restore point, my antivirus picks up LOL, but LOL is still present in my restore point, hence it will be detected there.  Your computer is safe.

Okay. I am just uneasy that the virus in the flash drive was not detected by the AVs I have here. However, nothing seems to have changed.

[Info-Sec]

Okay. I am just uneasy that the virus in the flash drive was not detected by the AVs I have here. However, nothing seems to have changed.

Good.  After all seems good for a while if you haven't done so already use disk cleaner to delete your system restore files.

[martin11ph]

It seems my problems don't have an end.
Here is a screenshot of my recent scan for rootkits. An error occurred with the scanner.

http://i307.photobucket.com/albums/nn296/martin11ph/error.jpg

I am wondering why drwatson is in my Defense+ events:
Application: C:\Windows\system32\drwtsn32.exe
Action: Access Memory
Target: C:\Program Files\COMODO\Firewall\cmdagent.exe

Also, I cannot scan anymore with AdAware. The computer hangs. Should I reinstall it?

[Goose18]

If you are using Avast 4.8 just scan with Avast 4.8 it has built in anti rootkit. And if it hands too. Something must be wrong...

[Info-Sec]

It seems my problems don't have an end.
Here is a screenshot of my recent scan for rootkits. An error occurred with the scanner.

http://i307.photobucket.com/albums/nn296/martin11ph/error.jpg

I am wondering why drwatson is in my Defense+ events:
Application: C:\Windows\system32\drwtsn32.exe
Action: Access Memory
Target: C:\Program Files\COMODO\Firewall\cmdagent.exe

Also, I cannot scan anymore with AdAware. The computer hangs. Should I reinstall it?

Drwtsn, automatically spawns when a crash is detected.  Try reinstalling ad aware.

[martin11ph]

The avast anti rootkit worked again before reinstalling. However, I still couldn't scan with ad aware. I reinstalled it. Have yet to run a scan. Maybe later.

[Goose18]

Honestly if i were you i'd get rid of ad-aware and just get Spybot Search & Destroy along with superantispyware. im sure those two work much better then Ad-Aware 

[martin11ph]

Really? Maybe I'll give it a try. I will download those 2. What's your opinion Info-Sec? It seems its only the two of you posting here in my topic.

[Info-Sec]

Really? Maybe I'll give it a try. I will download those 2. What's your opinion Info-Sec? It seems its only the two of you posting here in my topic.

Haha.  Well I'd reccomend spybot, but get the spyware doctor starter edition from the google pack.  I think it has MUCH better detection ratings then SAS.  OR you can get SAS free and get SD starter, and no spybot, either way.

[martin11ph]

I'm just wondering why I can't install programs. There seems to be errors with the dlls. I noticed 3 files in the Avast! treasure chest. kernel32.dll, winsock.dll, wsock32.dll. I currently have Avast!, Spyware Doctor, Spybot, Eset, CCleaner, and CFP installed on my pc.

BTW, I'm sorry if this is already far from the main topic of this thread.

[Info-Sec]

I'm just wondering why I can't install programs. There seems to be errors with the dlls. I noticed 3 files in the Avast! treasure chest. kernel32.dll, winsock.dll, wsock32.dll. I currently have Avast!, Spyware Doctor, Spybot, Eset, CCleaner, and CFP installed on my pc.

BTW, I'm sorry if this is already far from the main topic of this thread.

That is odd.  I recommend a reformat at this point : /

[martin11ph]

Well, atm I don't need any new programs. I'll just create backups of my hd already in case I need to reformat. Thanks.

[Tags:]