Hi people hope somebody can help me a bit with this cause i feel a bit lost about it.
Probably i’m posting something other people already posted and i apologize for this but i’m not doing it out of laziness but because at the time i’m in egypt and the connection here is as reliable as a taxi driver (if you ever been here you know what i mean) ;)…
For this reason i rather have one post to look into so can keep reloading the page just on one topic…
Anyway my current problem is that i’m infected with two viruses that get detected only during boottime scan (normal scan don’t get anything) and whatever I do they can’t be healed-deleted or moved but just ignored ???
below i report all the data i believe can help you to better identify the problem and hopefully get me a solution…
OS: windows vista with all the update released up to yesterday
ANTIVIRUS SW: Avast 4.8 Home // Build: Feb2009(4.8.1335) // Extreme toolkit Ver1.9.4.0 // VPS file 08/02/2009 file 090208-1
Viruses Names: WIN32VB-KWC [trJ] and WINSPY-FE [trJ]
Infected files: it depends, every time you do a bootime scan the infection is on a different file
Other sign:
seems to create problems also on .RAR and .ZIP files.
i tryed to delete some of the file during the boottime scan (i knew i can safely delete this file) but i couldn't do that so afterward i tryed to delete it manually but couldn't find it at all.
tryed to open the cleaner page but i didn't work...load a blank page...
Belw the last two boot scan with Avast:
02/09/2009 10:45
Scan of all local drives
File C:\Users\rapidu\AppData\Local\Adobe\Updater5\Install\reader8rdr-en_US\AdbeRdr813_en_US.msi\Data1.cab\SVGCore.DLL Error 42127 {CAB archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Adobe\Updater5\Install\reader8rdr-en_US\AdbeRdr813_en_US.msi\Data1.cab Error 42145 {OLE archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Adobe\Updater5\Install\reader8rdr-en_US\AdbeRdr813_en_US.msi\01_StringPool Error 42145 {OLE archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\FPM47BZF\ATI%20VGA%20driver%208.31.100.3c[1].zip\ATI VGA driver 8.31.100.3c\Packages\Apps\excalibur\Data1.cab\_3C4A2824722F4AC399F2FB2880007B44 Error 42127 {CAB archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\FPM47BZF\ATI%20VGA%20driver%208.31.100.3c[1].zip\ATI VGA driver 8.31.100.3c\Packages\Apps\excalibur\Data1.cab Error 42125 {ZIP archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SD5EG1D9\swflash[1].cab\FP_AX_CAB_INSTALLER.exe Error 42127 {CAB archive is corrupted.}
File C:\Users\rapidu\Desktop\driver update\VGA_ATI_v8.362.zip\8.362-070405a-047117C-Acer\Packages\Apps\CCC\Help\ru\ccc-help-ru.msi\Data1.cab\helpru.enc Error 42127 {CAB archive is corrupted.}
File C:\Users\rapidu\Desktop\driver update\VGA_ATI_v8.362.zip\8.362-070405a-047117C-Acer\Packages\Apps\CCC\Help\ru\ccc-help-ru.msi\Data1.cab Error 42145 {OLE archive is corrupted.}
File C:\Users\rapidu\Desktop\driver update\VGA_ATI_v8.362.zip\8.362-070405a-047117C-Acer\Packages\Apps\CCC\Help\ru\ccc-help-ru.msi\01_StringPool Error 42145 {OLE archive is corrupted.}
File C:\Users\rapidu\Desktop\driver update\VGA_ATI_v8.362.zip\8.362-070405a-047117C-Acer\Packages\Apps\CCC\Help\ru\ccc-help-ru.msi Error 42125 {ZIP archive is corrupted.}
File C:\Windows\SoftwareDistribution\Download\420115ca15b39c27551365826a34983b\BIT6126.tmp\104 Error 42127 {CAB archive is corrupted.}
File D:\Games\Heroes of Might and Magic 3\games\AUTOSAVE.CGM\{gzip} Error 42129 {GZIP archive is corrupted.}
[i]File D:\keep\download\starwars.zip\starwars1.exe Error 42125 {ZIP archive is corrupted.}
File D:\keep\download\starwars.zip\starwars1.exe\$R5\services.exe is infected by Win32:VB-KWC [trj], Move to chest: Error 42111 {The operation is not supported for this type of archive.}, Delete: Error 42111 {The operation is not supported for this type of archive.}, Repair: Error 42060 {The file was not repaired.}, Delete: Error 42111 {The operation is not supported for this type of archive.}, Move: Error 42111 {The operation is not supported for this type of archive.}, Delete: Error 42111 {The operation is not supported for this type of archive.}, Move to chest: Error 42111 {The operation is not supported for this type of archive.}, Repair: Error 42060 {The file was not repaired.}
File D:\keep\download\starwars.zip\starwars1.exe\$R5\winsyst32.exe\[Embedded_R#29c68] is infected by Win32:WinSpy-FE [trj], Move to chest: Error 42111 {The operation is not supported for this type of archive.}, Delete: Error 42111 {The operation is not supported for this type of archive.}
File D:\keep\download\starwars.zip\starwars1.exe\$R5\winsyst32.exe is infected by Win32:WinSpy-FE [trj], Move to chest: Error 42111 {The operation is not supported for this type of archive.}[/i]
Number of searched folders: 13006
Number of tested files: 167397
Number of infected files: 3
----------------------------------------
02/09/2009 12:59
Scan of all local drives
File C:\Program Files\Alwil Software\Avast4\DATA\moved\services.exe.vir\$R5\services.exe is infected by Win32:VB-KWC [trj], Repair: Error 42060 {The file was not repaired.}, Deleted
File C:\Program Files\Alwil Software\Avast4\DATA\moved\services.exe.vir\$R5\winsyst32.exe\[Embedded_R#29c68] is infected by Win32:WinSpy-FE [trj], Repair: Error 42060 {The file was not repaired.}, Delete: Error 0xC0000034 {Object Name not found.}, Repair: Error 42060 {The file was not repaired.}, Delete: Error 0xC0000034 {Object Name not found.}
File C:\Program Files\Alwil Software\Avast4\DATA\moved\services.exe.vir\$R5\winsyst32.exe is infected by Win32:WinSpy-FE [trj], Repair: Error 42060 {The file was not repaired.}, Move to chest: Error 0xC0000034 {Object Name not found.}
File C:\Users\rapidu\AppData\Local\Adobe\Updater5\Install\reader8rdr-en_US\AdbeRdr813_en_US.msi\Data1.cab\SVGCore.DLL Error 42127 {CAB archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Adobe\Updater5\Install\reader8rdr-en_US\AdbeRdr813_en_US.msi\Data1.cab Error 42145 {OLE archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Adobe\Updater5\Install\reader8rdr-en_US\AdbeRdr813_en_US.msi\01_StringPool Error 42145 {OLE archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\FPM47BZF\ATI%20VGA%20driver%208.31.100.3c[1].zip\ATI VGA driver 8.31.100.3c\Packages\Apps\excalibur\Data1.cab\_3C4A2824722F4AC399F2FB2880007B44 Error 42127 {CAB archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\FPM47BZF\ATI%20VGA%20driver%208.31.100.3c[1].zip\ATI VGA driver 8.31.100.3c\Packages\Apps\excalibur\Data1.cab Error 42125 {ZIP archive is corrupted.}
File C:\Users\rapidu\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SD5EG1D9\swflash[1].cab\FP_AX_CAB_INSTALLER.exe Error 42127 {CAB archive is corrupted.}
File D:\Games\Heroes of Might and Magic 3\games\AUTOSAVE.CGM\{gzip} Error 42129 {GZIP archive is corrupted.}
File D:\keep\download\starwars.zip\starwars1.exe Error 42125 {ZIP archive is corrupted.}
File D:\keep\download\starwars.zip\starwars1.exe\$R5\services.exe is infected by Win32:VB-KWC [trj], Move to chest: Error 42111 {The operation is not supported for this type of archive.}
Scanning aborted
Number of searched folders: 12583
Number of tested files: 153946
Number of infected files: 4
Thanks in advance to the kind souls who will give help on this topic!
Cheers
CLaudio