Results 1 to 6 of 6

Thread: Panda finds 3 viruses in my niece computer help!

  1. #1
    Member
    Join Date
    Sep 2006
    Location
    Miami
    Posts
    26

    Default Panda finds 3 viruses in my niece computer help!

    Hello guys,

    i ran a bunch of programs in my niece computer including SSD, adaware, bit defender, trend micro online, etc. But when i ran Panda online it still finds 3 hacking tools. Any suggestions? Here is the report. Thanks for the help.


    Incident Status Location

    Adware:adware/cydoor Not disinfected C:\WINDOWS\system32\cd_clint.dll
    Potentially unwanted tool:application/myway Not disinfected c:\program files\MyWay
    Adware:adware/sidesearch Not disinfected C:\Documents and Settings\YG\Application Data\Lycos
    Adware:adware/wintools Not disinfected Windows Registry
    Adware:adware/quickbrowser Not disinfected Windows Registry
    Adware:adware/dyfuca Not disinfected Windows Registry
    Adware:adware/twain-tech Not disinfected Windows Registry
    Adware:adware/ieplugin Not disinfected Windows Registry
    Adware:adware/blazefind Not disinfected Windows Registry
    Adware:adware/navhelper Not disinfected Windows Registry
    Adware:adware/adtomi Not disinfected Windows Registry
    Adware:adware/favoriteman Not disinfected Windows Registry
    Adware:adware/keenvalue Not disinfected Windows Registry
    Spyware:spyware/clearsearch Not disinfected Windows Registry
    Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Back Off!!!!\Cookies\back off!!!!@atwola[2].txt
    Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\YG\Application Data\Mozilla\Profiles\Default User\4296kr56.slt\cookies.txt[.atwola.com/]
    Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\YG\Desktop\SmitfraudFix\Process.exe
    Adware:Adware/Adtomi Not disinfected C:\WINDOWS\system32\moneya1l.exe
    Potentially unwanted tool:Application/Processor Not disinfected C:\WINDOWS\system32\Process.exe

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,492

    Default

    Hello.

    Is this the same computer as the one here: http://forums.spybot.info/showthread.php?t=9491

    In order to receive assistance, please follow our forum procedure as posted in this sticky topic: "BEFORE you POST" -Preliminary Steps

    Then a helper will assist you as soon as available to do so.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Member
    Join Date
    Sep 2006
    Location
    Miami
    Posts
    26

    Default

    No Tashi. That was my own personal computer wich now appears to be totally clean. This is the computer of one of my nieces that she got infected and I've being trying to clean it out. I have followed all the setps on the stickies before posting. I ran most of the fixes including smitfraud, combofix and Vundo fix. Also ran a few antiviruses since not one finds everything but then when I ran Panda it finds some hacking tools things in there. I looked at the report and saw it mentions smitfraud and "Myway" folders. I am not sure if Panda is seing the fixes or those are disguised viruses. I will try deleting the suspected files, and see what happens. Thanks

  4. #4
    Member
    Join Date
    Sep 2006
    Location
    Miami
    Posts
    26

    Default

    Hello guys,

    I deleted the suspected files and ran the Panda scan again. it appears that that was the solution. the smitfraud fix was one of the culprits. This thread can be close now. thanks for the help guys.

  5. #5
    Security Expert-Emeritus
    Join Date
    Oct 2005
    Posts
    5,025

    Default

    Hi

    All is well now ?

    by the way these were false positives
    Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\YG\Desktop\SmitfraudFix\Process.exe
    Potentially unwanted tool:Application/Processor Not disinfected C:\WINDOWS\system32\Process.exe

    =========
    You delete these correct ?
    C:\WINDOWS\system32\moneya1l.exe
    C:\WINDOWS\system32\cd_clint.dll
    c:\program files\MyWay
    C:\Documents and Settings\YG\Application Data\Lycos
    ~~~~~~~~~~~~~~~~~~~~~~~
    Microsoft MVP Windows-Security 2006

  6. #6
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,492

    Default

    This topic has been archived.

    If you need it re-opened please send me a private message (pm) and provide a link to the thread. Applies only to the original topic starter.

    Happy New Year.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •