|
MicroBell, Thanks again for the quick responses!
The registry had no instances of random directories or "Aprop". I searched the registry in normal mode and in safe mode.
RootKitRevealer doesn't seem to run under Win98SE. I get the following messages:
Error starting program
PSAPI.DLL file is linked to missing export NTDLL.DLL:NtCreateProfile
Then
C:\RootKitRevealer\RootkitRevealer.exe
System is not functioning
RootKitRevealer is cool technology, is there a way to get it to run under Win98SE? Also, I have the ability to remove the hard drive and/or create an alternate boot partition. Wouldn't it be better to scan the drive when there's nothing executing on it? I understand why you asked me to run the DOS scan - would it be better to boot from a CD or floppy and run the DOS scanners?
Here are the log files...
====
File: TV_ENG32.DLL
Status:
OK
MD5 795cd4315d99c6bbb8a9f3fd778f7c6c
Packers detected:
-
Scanner results
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
UNA
Found nothing
VBA32
Found nothing
====
File: imscan.dll
Status:
POSSIBLY INFECTED/MALWARE (Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.)
MD5 a4ad1144cbf87cfcc4c2f811b87fd44c
Packers detected:
UPX
Scanner results
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found Win32:CTX
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
UNA
Found nothing
VBA32
Found nothing
|