AV bug

bequick · June 1, 2009, 1:15pm

When I turned on the PC ,virus defence didn’t reported any threats.Now,it’s showiing 1 thread.When i click on it,look what happens->
http://img268.imageshack.us/img268/1888/screenshot61200941215pm.th.png

So,how to understand,is there any threat or not?!?

bequick · June 1, 2009, 1:24pm

Wow!!!I just restarted my PC and look what happend->
http://img268.imageshack.us/img268/9549/screenshot61200942211pm.th.png

Now what?

Citizen_K · June 1, 2009, 9:42pm

Is there anything in the AV logs that may help us further?

bequick · June 2, 2009, 6:17am

Nothing.I have scanned with avira and found nothing at all.For now,everything seems ok,but…

Citizen_K · June 2, 2009, 9:50pm

Try What to do if you’re infected - eXPerience Rev.2.

bequick · June 3, 2009, 5:45am

Thanks.I’ve scanned with lots of software,but found nothing.Still think there is some bug.

gleach · June 3, 2009, 2:13pm

bequick, did you look in quarantined items?

bequick · June 5, 2009, 4:01pm

Ofcourse Just reinstalled my windows 7x86 and the message
http://img268.imageshack.us/img268/9549/screenshot61200942211pm.png
appeared again.

bequick · June 6, 2009, 9:56am

So?Anyone?

alaertsxan · June 6, 2009, 10:03am

Seems like you have a Rogue CIS ;D
Nah, I can’t think of something… perhaps a hijackthis log might help ?

Xan

bequick · June 6, 2009, 12:41pm

OK,here’s the log.Attached.If anyone can help…

[attachment deleted by admin]

alaertsxan · June 6, 2009, 3:31pm

What’s this ?

O17 - HKLM\System\CCS\Services\Tcpip\..\{71A0ADD6-D98E-4F0B-A1A1-2B284AE33438}: NameServer = 91.134.56.1,85.11.160.15
O17 - HKLM\System\CS1\Services\Tcpip\..\{71A0ADD6-D98E-4F0B-A1A1-2B284AE33438}: NameServer = 91.134.56.1,85.11.160.15

Xan

bequick · June 6, 2009, 3:51pm

My dns(and gateway) and alternate dns.

alaertsxan · June 6, 2009, 4:02pm

Well, I don’t understand this. And I really don’t understand the picture… Perhaps you can send a support ticket ?

Xan

bequick · June 6, 2009, 4:05pm

What is ‘‘support ticket’’? ;D

gleach · June 7, 2009, 2:10am

you can ask for professional support here https://support.comodo.com/
in the past have found them to be freindly and reasonably quick, conversation is by email

fOrTy_7 · June 7, 2009, 8:37am

What build of Windows 7 do you use?
What is the source of the ISO file you used for installation?
Did you check the ‘Malware List’ option in this popup window? It could give some clue.

bequick · June 7, 2009, 8:47am

It dissapeard again.Like before.I think,this message appears,when,during scanning or a short time after scan,i force restart.I’m not sure.Gonna check right now and write again.And thanks for your advice ,i’m thinking about that
No,just BSOD appeard ;D