Win32:Patched-KY [trj] and Wind32:pakes-bib [trj] was found during boot scan. Dose anyone knew anything about these viruses? Also, avast found 43 viruses from this computer I found, and it had avg free, and avg said nothing! :o
win32:fasec [trj] is in a windows folder. What should I do?
Malware names in isolation aren’t that helpful without the associated files and the location they were detected.
Check the boot-time log using notepad, C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\report\aswBoot.txt.
What action did you select ?
Original folder name: UAC3bca.tmp
Original folder: C:/Documents and Settings/Cody/Local Setting/Temp
Virus description: Win32:Patched-KY [Trj]
Original folder name: ImT00 iPod Computer Transfer v2.0.86 (Build 0201).exe
Original folder: C:/RECYCLER/S-1-5-21-1426590395-3766738458-2225589205-1005/Dc298
Virus description: Win32:Pakes-BIB [trj]
Original folder name: UACbemsxiglrhdekkvwk.dll
Original folder: C:/WINDOWS/system32
Virus description: Win32:Fasec [Trj]
Original folder name: UACbemsxiglrhdekkvwk.dll
Original folder: C:/WINDOWS/system32
Virus description: Win32:Fasec [Trj]
Original folder name: UACnpupjxytlauvpptqo.sys
Original folder: C:/WINDOWS.system32/drivers
Virus description: Win32:Alureon-BX [Rtk]
Original folder name: UACraldnyjtlemrvlmxt.dll
Original folder: C:/WINDOWS/system32
Virus description: Win32:Fasec [Trj]
Original folder name: UACtilxxlmcdbejepkgy.dll
Original folder: C:/WINDOWS/system32
Virus description: Win32:Fasec [Trj]
Original folder name: UACvdovngsykdqsykdqltabrn.dll
Original folder: C:/WINDOWS/system32
Virus description: Win32:Fasec [Trj]
Original folder name: UACwkgiridmyqpcblrew.dll
Original folder: C:/WINDOWS/system32
Virus description: Win32:Fasec [Trj]
I put them all in the virus chest, and there are also 40 more, but these are the only ones found during boot time scan.
Well the one in temp is a no brainer as anything in temp is by its location non-essential, so could be got rid of and it does seem related to the others.
These others certainly based on the name alone appear to be good detections, that appear to be trying to make you think they are system files (possible related to UAC) followed by a random list of characters, always suspect when in a system folder. This is pretty much confirmed if you do a google search on the file name and find zero hits, which for a file in the system folder/s is highly suspect.
So if these other files detected on a normal scan if they are in system folders and follow the same pattern of file naming (google the name), then they too should be sent to the chest. It may be advisable to run some other scans, see below. Looks like AVG let you down badly on these detections.
If you haven't already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).
- 1. MalwareBytes Anti-Malware (MBAM), On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. - 2. [url=http://www.superantispyware.com][b]SUPERantispyware[/b][/url] (SAS). On-Demand only in free version.
Don't worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.
Also available a portable version of SAS, http://www.superantispyware.com/portablescanner.html, no installation required.The UAC files are part of the TDSS rootkit and are good detections ;D
Thanks, that is what I thought.
Ok, so would it be ok if I delete them ALL?
Whilst I generally say no to early deletion of anything, leave in the chest for a few weeks, scan within the chest and if still infected then delete from the chest. This is always the safest policy and a good habit to get into, but in this case I would say that these ones that you have shown can be removed (I even hate saying deleted ;D).
Ok, I deleted them all, and I noticed that the computer was going faster! ;D Nothing bad happened, and I did a few full scans, found nothing, did another boot scan, nothing, so I think I’m good! Thanks!
You’re welcome.