Please see my logs and tell me if there's a problem - Page 2

forhockey · 12-09-2007, 12:24 AM

You can try their website. Here is the link to their product finder for their hard drives on the left side.

http://www.seagate.com/www/en-us/pro...roduct_finder/

I'm afraid I have to move this thread to the resolved. This form is strictly for malware removal. Hope you will find your answers to your questions.

Take care.

Panzer16 · 12-09-2007, 08:35 PM

F:\Program Files\DAP\Offers\VA21_DAPSO.exe/WISE0009.BIN Infected: not-a-virus:AdTool.Win32.MyWebSearch.bk skipped
F:\Program Files\DAP\Offers\VA21_DAPSO.exe WiseSFX: infected - 1 skipped
F:\Program Files\DAP\Offers\VA21_DAPSO.exe WiseSFXDropper: infected - 1 skipped
F:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped
F:\Program Files\mIRC\mirc.exe.BAK Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped
F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\logs\sw_ae-20071207-063142.log Object is locked skipped
F:\System Volume Information\_restore{E37F9644-1753-4965-855F-5099629F6208}\RP1\change.log Object is locked skipped
G:\System Volume Information\_restore{E37F9644-1753-4965-855F-5099629F6208}\RP1\change.log Object is locked skipped
H:\System Volume Information\_restore{E37F9644-1753-4965-855F-5099629F6208}\RP1\change.log Object is locked skipped
H:\mirc631.exe/stream/data0001/stream/data0014 Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped
H:\mirc631.exe/stream/data0001/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped
H:\mirc631.exe/stream/data0001 Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped
H:\mirc631.exe/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped
H:\mirc631.exe NSIS: infected - 4 skipped

Please see the infections I have and tell me how can I remove them? I have tried AVG, Panda and some other free scans but these infections are still there. And if I delete MIRC.exe and the whole software and install it again even in another drive the same virus or whatever it is comes back in the exe file of MIRC.

forhockey · 12-09-2007, 08:56 PM

Hi Panzer16,

It was all dealt with in my closing reply... I instructed you to delete the first file, so that shouldn't be there.

http://www.techsupportforum.com/secu...ml#post1202956

The Mirc entries are just false positives, which are nothing to worry about. You do have the Mirc program installed on your computer.

Lastly, the System Volume Entries points are normal. They are your System Restore cache folders.

Panzer16 · 12-09-2007, 10:31 PM

F:\Program Files\DAP\Offers\VA21_DAPSO.exe WiseSFX: infected - 1 skipped
F:\Program Files\DAP\Offers\VA21_DAPSO.exe WiseSFXDropper: infected - 1 skipped

You mean to say that I have cured these to positives by deleting the entry you told me to?

H:\mirc631.exe NSIS: infected - 4 skipped and may I know what is this for? Can you please tell me the exact meaning of NSIS -4?

forhockey · 12-10-2007, 08:38 AM

Yes by deleting that you've gotten rid of it.

Visit the below link for more details on NSIS

http://en.wikipedia.org/wiki/Nullsof...Install_System

12-09-2007, 12:24 AM	#21 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,945 OS: Windows 7 Ultimate	Re: Please see my logs and tell me if there's a problem You can try their website. Here is the link to their product finder for their hard drives on the left side. http://www.seagate.com/www/en-us/pro...roduct_finder/ I'm afraid I have to move this thread to the resolved. This form is strictly for malware removal. Hope you will find your answers to your questions. Take care. __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum

12-09-2007, 08:35 PM	#22 (permalink)
Panzer16 Registered User Join Date: Dec 2007 Posts: 33 OS: XP-Service pack two or above	Got NSIS: infected - 4. Want to remove it F:\Program Files\DAP\Offers\VA21_DAPSO.exe/WISE0009.BIN Infected: not-a-virus:AdTool.Win32.MyWebSearch.bk skipped F:\Program Files\DAP\Offers\VA21_DAPSO.exe WiseSFX: infected - 1 skipped F:\Program Files\DAP\Offers\VA21_DAPSO.exe WiseSFXDropper: infected - 1 skipped F:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped F:\Program Files\mIRC\mirc.exe.BAK Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped F:\Program Files\Alcohol Soft\Alcohol 120\StarWind\logs\sw_ae-20071207-063142.log Object is locked skipped F:\System Volume Information\_restore{E37F9644-1753-4965-855F-5099629F6208}\RP1\change.log Object is locked skipped G:\System Volume Information\_restore{E37F9644-1753-4965-855F-5099629F6208}\RP1\change.log Object is locked skipped H:\System Volume Information\_restore{E37F9644-1753-4965-855F-5099629F6208}\RP1\change.log Object is locked skipped H:\mirc631.exe/stream/data0001/stream/data0014 Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped H:\mirc631.exe/stream/data0001/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped H:\mirc631.exe/stream/data0001 Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped H:\mirc631.exe/stream Infected: not-a-virus:Client-IRC.Win32.mIRC.631 skipped H:\mirc631.exe NSIS: infected - 4 skipped Please see the infections I have and tell me how can I remove them? I have tried AVG, Panda and some other free scans but these infections are still there. And if I delete MIRC.exe and the whole software and install it again even in another drive the same virus or whatever it is comes back in the exe file of MIRC.

12-09-2007, 08:56 PM	#23 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,945 OS: Windows 7 Ultimate	Re: Got NSIS: infected - 4. Want to remove it Hi Panzer16, It was all dealt with in my closing reply... I instructed you to delete the first file, so that shouldn't be there. http://www.techsupportforum.com/secu...ml#post1202956 The Mirc entries are just false positives, which are nothing to worry about. You do have the Mirc program installed on your computer. Lastly, the System Volume Entries points are normal. They are your System Restore cache folders. __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum

12-09-2007, 10:31 PM	#24 (permalink)
Panzer16 Registered User Join Date: Dec 2007 Posts: 33 OS: XP-Service pack two or above	Re: Got NSIS: infected - 4. Want to remove it F:\Program Files\DAP\Offers\VA21_DAPSO.exe WiseSFX: infected - 1 skipped F:\Program Files\DAP\Offers\VA21_DAPSO.exe WiseSFXDropper: infected - 1 skipped You mean to say that I have cured these to positives by deleting the entry you told me to? H:\mirc631.exe NSIS: infected - 4 skipped and may I know what is this for? Can you please tell me the exact meaning of NSIS -4?

12-10-2007, 08:38 AM	#25 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,945 OS: Windows 7 Ultimate	Re: Got NSIS: infected - 4. Want to remove it Yes by deleting that you've gotten rid of it. Visit the below link for more details on NSIS http://en.wikipedia.org/wiki/Nullsof...Install_System __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum Last edited by forhockey; 12-10-2007 at 08:40 AM.