Repost-copy/paste of logs
Hello,
I was trying Mediacoder ver 0.6.1 build 4048 and one day later avg(free edition) gave me a message that its uninstaller is infected with a virus which I healed. But now I am unable to uninstall the Mediacoder from my PC. I try to download it again from the site to try to reinstall it so that i can uninstall it properly but at the end of the download AVG is detecting a virus in it (which it did not do the first time I downloaded) and now I cannot uninstall it. I tried revouinstaller but was unsuccessfull. I should be grateful if you could help me please.
I believe the program purposely did that, may I have ur opinion also.
Thanking you in advance
Please see attached 7-zip file
I could not paste all log file at one go as its too long but its in the attached file.
Thank you very much and sorry for the misunderstanding.
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, February 09, 2008 8:24:57 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 8/02/2008
Kaspersky Anti-Virus database records: 555684
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
Scan Statistics:
Total number of scanned objects: 190172
Number of viruses found: 16
Number of infected objects: 59
Number of suspicious objects: 0
Duration of the scan process: 08:57:27
Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\AVG7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf6a4b743eca729a7b999cea417f0e89_23733626-bdf9-4b77-a0ff-ca7f1c8d9074 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ebda68a45f0a1bdec0aa79c628e25539_23733626-bdf9-4b77-a0ff-ca7f1c8d9074 Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Propriétaire\Application Data\Sun\Java\Deployment\cache\6.0\30\16a3329e-50dc6f6c/BlackBox.class Infected: Trojan.Java.ClassLoader.a skipped
C:\Documents and Settings\Propriétaire\Application Data\Sun\Java\Deployment\cache\6.0\30\16a3329e-50dc6f6c/VerifierBug.class Infected: Trojan.Java.ClassLoader.u skipped
C:\Documents and Settings\Propriétaire\Application Data\Sun\Java\Deployment\cache\6.0\30\16a3329e-50dc6f6c/Dummy.class Infected: Trojan.Java.Nocheat skipped
C:\Documents and Settings\Propriétaire\Application Data\Sun\Java\Deployment\cache\6.0\30\16a3329e-50dc6f6c ZIP: infected - 3 skipped
C:\Documents and Settings\Propriétaire\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Propriétaire\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Propriétaire\Local Settings\Historique\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Propriétaire\Mes documents\Mes fichiers reçus\album3n72.zip/album372.JPeG-zaffreen@hotmail.com Infected: Trojan-Downloader.Win32.Banload.gxs skipped
C:\Documents and Settings\Propriétaire\Mes documents\Mes fichiers reçus\album3n72.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Propriétaire\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Propriétaire\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Azureus_old\Shared\Fanaa 2006-MP3-VBR-320Kbps[DJLUV]\00 Fanaa front.jpg Object is locked skipped
C:\Program Files\Azureus_old\Shared\Fanaa 2006-MP3-VBR-320Kbps[DJLUV]\01 - Shaan & Kailash Kher - Chand Sifarish [DJLUV].mp3 Object is locked skipped
C:\Program Files\Azureus_old\Shared\Fanaa 2006-MP3-VBR-320Kbps[DJLUV]\02 - Sonu Nigam, Sunidhi Chauhan, Aamir Khan, Kajol - Mere Haath Mein [DJLUV].mp3 Object is locked skipped
C:\Program Files\Azureus_old\Shared\Fanaa 2006-MP3-VBR-320Kbps[DJLUV]\03 - Mahalaxmi Iyer - Des Rangila [DJLUV].mp3 Object is locked skipped
C:\Program Files\Azureus_old\Shared\Fanaa 2006-MP3-VBR-320Kbps[DJLUV]\04 - Sonu Nigam, Sunidhi Chauhan - Dekho Na [DJLUV].mp3 Object is locked skipped
C:\Program Files\Azureus_old\Shared\Fanaa 2006-MP3-VBR-320Kbps[DJLUV]\05 - Babul Supriyo, Mahalaxmi Iyer, Master Akshay Bhagwat, Aamir Khan, Kajol - Chanda Chamke [DJLUV].mp3 Object is locked skipped
C:\Program Files\Azureus_old\Shared\Fanaa 2006-MP3-VBR-320Kbps[DJLUV]\06 - Instrumental - Destroyed In Love [Lounge Mix][DJLUV].mp3 Object is locked skipped
C:\Program Files\Azureus_old\Shared\Fanaa 2006-MP3-VBR-320Kbps[DJLUV]\07 - DJ Aqeel - Fanaa For You [Chand Sifarish Club Mix][DJLUV].mp3 Object is locked skipped
C:\Program Files\RAR Password Cracker\rpc.exe Infected: not-a-virus

SWTool.Win32.RARPassCrack.a skipped
C:\System Volume Information\_restore{1635FFAD-B2E5-4B29-B461-ECA7F325BEB0}\RP181\A0023873.exe Object is locked skipped
C:\System Volume Information\_restore{1635FFAD-B2E5-4B29-B461-ECA7F325BEB0}\RP181\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{AB553F3A-BE44-45AA-82A4-5916C704A6E4}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\For_PC\CloneCDV4\To_be_used\cr-c4319.exe Object is locked skipped
D:\For_PC\Overnet\overnet0.52.exe/data0014/unknown2.bin Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
D:\For_PC\Overnet\overnet0.52.exe/data0014 Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
D:\For_PC\Overnet\overnet0.52.exe NSIS: infected - 2 skipped
D:\For_PC\Overnet\P2P - eDonkey Overnet v052 + Crack + Config ADSL.zip/Overnet_v052 (Setup).exe/data0014/unknown2.bin Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
D:\For_PC\Overnet\P2P - eDonkey Overnet v052 + Crack + Config ADSL.zip/Overnet_v052 (Setup).exe/data0014 Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
D:\For_PC\Overnet\P2P - eDonkey Overnet v052 + Crack + Config ADSL.zip/Overnet_v052 (Setup).exe Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
D:\For_PC\Overnet\P2P - eDonkey Overnet v052 + Crack + Config ADSL.zip ZIP: infected - 3 skipped
D:\For_PC\RAR_password_crackerV412\23.09 RARPasswordCr.rar/rpc.exe Infected: not-a-virus

SWTool.Win32.RARPassCrack.a skipped
D:\For_PC\RAR_password_crackerV412\23.09 RARPasswordCr.rar RAR: infected - 1 skipped
D:\For_PC\Scansoft\Scansoft PDF Converter 1.0 multilanguage + activationprog\crack\SHKPC10.EXE Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
E:\For_PC\Accent_office_passwd_rec_word_excel_access_v2p10\Maybenot4it\Advanced Password Recovery - (Ace, Excel, Pdf, Zip, Icq, Rar, Access, Office, Outlook).rar/AdvPassw/Advanced Rar Password Recovery v1.11/DISTINCT.RAR/setup.exe/WISE0039.BIN Infected: not-a-virus

SWTool.Win32.OEPass.b skipped
E:\For_PC\Accent_office_passwd_rec_word_excel_access_v2p10\Maybenot4it\Advanced Password Recovery - (Ace, Excel, Pdf, Zip, Icq, Rar, Access, Office, Outlook).rar/AdvPassw/Advanced Rar Password Recovery v1.11/DISTINCT.RAR/setup.exe Infected: not-a-virus

SWTool.Win32.OEPass.b skipped
E:\For_PC\Accent_office_passwd_rec_word_excel_access_v2p10\Maybenot4it\Advanced Password Recovery - (Ace, Excel, Pdf, Zip, Icq, Rar, Access, Office, Outlook).rar/AdvPassw/Advanced Rar Password Recovery v1.11/DISTINCT.RAR Infected: not-a-virus

SWTool.Win32.OEPass.b skipped
E:\For_PC\Accent_office_passwd_rec_word_excel_access_v2p10\Maybenot4it\Advanced Password Recovery - (Ace, Excel, Pdf, Zip, Icq, Rar, Access, Office, Outlook).rar RAR: infected - 3 skipped
E:\For_PC\Advanced_Rar_password_recovery\Advance winrar password recovery 1.11+serial\Advanced Winrar password recovery 1.11+serial.zip/Advance winrar password recovery 1.11+serial/setup.exe/WISE0039.BIN Infected: not-a-virus

SWTool.Win32.OEPass.b skipped
E:\For_PC\Advanced_Rar_password_recovery\Advance winrar password recovery 1.11+serial\Advanced Winrar password recovery 1.11+serial.zip/Advance winrar password recovery 1.11+serial/setup.exe Infected: not-a-virus

SWTool.Win32.OEPass.b skipped
E:\For_PC\Advanced_Rar_password_recovery\Advance winrar password recovery 1.11+serial\Advanced Winrar password recovery 1.11+serial.zip ZIP: infected - 2 skipped
E:\For_PC\Antivirus\avast! antivirus v4.5 pro + keygen\avast! antivirus v4.5 pro keygen.exe Object is locked skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe/data0002/NHInstall.exe Infected: not-a-virus:AdWare.Win32.NavExcel skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe/data0002/v2.0.2.cab/NHUninstaller.exe Infected: not-a-virus:AdWare.Win32.NavExcel skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe/data0002/v2.0.2.cab/NHUpdater.exe Infected: not-a-virus:AdWare.Win32.NavExcel skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe/data0002/v2.0.2.cab/NHelper.dll Infected: not-a-virus:AdWare.Win32.NavExcel skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe/data0002/v2.0.2.cab Infected: not-a-virus:AdWare.Win32.NavExcel skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe/data0002 Infected: not-a-virus:AdWare.Win32.NavExcel skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe/data0003/data0139 Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe/data0003 Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
E:\For_PC\AUDIO_Extractor_v5p6p1\ossae.exe Inno: infected - 8 skipped
E:\For_PC\CloneCDV4\To_be_used_old_ver\cr-c4319.exe Object is locked skipped
E:\For_PC\editors\install.exe/data0001.bin/file79 Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
E:\For_PC\editors\install.exe/data0001.bin Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
E:\For_PC\editors\install.exe EmbeddedEXE: infected - 2 skipped
E:\For_PC\Exeem_from_supernov\eXeem0.20.exe/Stream/data0076/stream/data0006 Infected: not-a-virus:AdWare.Win32.SearchIt.p skipped
E:\For_PC\Exeem_from_supernov\eXeem0.20.exe/Stream/data0076/stream Infected: not-a-virus:AdWare.Win32.SearchIt.p skipped
E:\For_PC\Exeem_from_supernov\eXeem0.20.exe/Stream/data0076 Infected: not-a-virus:AdWare.Win32.SearchIt.p skipped
E:\For_PC\Exeem_from_supernov\eXeem0.20.exe/Stream Infected: not-a-virus:AdWare.Win32.SearchIt.p skipped
E:\For_PC\Exeem_from_supernov\eXeem0.20.exe Inno: infected - 4 skipped
E:\For_PC\Overnet\overnet0.52.exe/data0014/unknown2.bin Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
E:\For_PC\Overnet\overnet0.52.exe/data0014 Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
E:\For_PC\Overnet\overnet0.52.exe NSIS: infected - 2 skipped
E:\For_PC\Overnet\P2P - eDonkey Overnet v052 + Crack + Config ADSL.zip/Overnet_v052 (Setup).exe/data0014/unknown2.bin Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
E:\For_PC\Overnet\P2P - eDonkey Overnet v052 + Crack + Config ADSL.zip/Overnet_v052 (Setup).exe/data0014 Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
E:\For_PC\Overnet\P2P - eDonkey Overnet v052 + Crack + Config ADSL.zip/Overnet_v052 (Setup).exe Infected: not-a-virus:AdWare.Win32.Ucmore.e skipped
E:\For_PC\Overnet\P2P - eDonkey Overnet v052 + Crack + Config ADSL.zip ZIP: infected - 3 skipped
E:\For_PC\RAR_password_crackerV412\23.09 RARPasswordCr.rar/rpc.exe Infected: not-a-virus

SWTool.Win32.RARPassCrack.a skipped
E:\For_PC\RAR_password_crackerV412\23.09 RARPasswordCr.rar RAR: infected - 1 skipped
E:\For_PC\RealOne\Realplus8_shareaza\ALLPLAYERANDCODECS.rar/--ALL !! PLAYER !! AND CODECS--you need this time ----ZOOM,BS, CORE, GDIVX,REAL8--OGG, DIVX, Xvid, Nimo5_Build_8, Smr, Vcd, Svcd, AVI_released_byC.H.B._GHG_07_2003/GDiVX 1.9.1.exe/data0007/SaveNow.exe Infected: not-a-virus:AdWare.Win32.SaveNow.w skipped
E:\For_PC\RealOne\Realplus8_shareaza\ALLPLAYERANDCODECS.rar/--ALL !! PLAYER !! AND CODECS--you need this time ----ZOOM,BS, CORE, GDIVX,REAL8--OGG, DIVX, Xvid, Nimo5_Build_8, Smr, Vcd, Svcd, AVI_released_byC.H.B._GHG_07_2003/GDiVX 1.9.1.exe/data0007/Uninst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
E:\For_PC\RealOne\Realplus8_shareaza\ALLPLAYERANDCODECS.rar/--ALL !! PLAYER !! AND CODECS--you need this time ----ZOOM,BS, CORE, GDIVX,REAL8--OGG, DIVX, Xvid, Nimo5_Build_8, Smr, Vcd, Svcd, AVI_released_byC.H.B._GHG_07_2003/GDiVX 1.9.1.exe/data0007 Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
E:\For_PC\RealOne\Realplus8_shareaza\ALLPLAYERANDCODECS.rar/--ALL !! PLAYER !! AND CODECS--you need this time ----ZOOM,BS, CORE, GDIVX,REAL8--OGG, DIVX, Xvid, Nimo5_Build_8, Smr, Vcd, Svcd, AVI_released_byC.H.B._GHG_07_2003/GDiVX 1.9.1.exe Infected: not-a-virus:AdWare.Win32.SaveNow.au skipped
E:\For_PC\RealOne\Realplus8_shareaza\ALLPLAYERANDCODECS.rar RAR: infected - 4 skipped
E:\For_PC\Scansoft\Scansoft PDF Converter 1.0 multilanguage + activationprog\crack\SHKPC10.EXE Object is locked skipped
E:\For_PC\Spyware_Adware_related\Spyware_remover_spyblocs_free_scan_only\SpywareVanisher.exe/FreeScanner.exe Infected: not-a-virus:FraudTool.Win32.SpywareVanish.a skipped
E:\For_PC\Spyware_Adware_related\Spyware_remover_spyblocs_free_scan_only\SpywareVanisher.exe SetupFactory: infected - 1 skipped
E:\Mohammad\privaria.exe/data0272 Infected: not-a-virus:RemoteAdmin.Win32.NetCat skipped
E:\Mohammad\privaria.exe/data0310 Infected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b skipped
E:\Mohammad\privaria.exe Inno: infected - 2 skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
E:\System Volume Information\_restore{1635FFAD-B2E5-4B29-B461-ECA7F325BEB0}\RP181\A0023874.exe Object is locked skipped
E:\System Volume Information\_restore{1635FFAD-B2E5-4B29-B461-ECA7F325BEB0}\RP181\change.log Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
Scan process completed.