Oh whats going on with computer??!!

rome1067

Total session statistics
=============================================================================
Scanned: 724775
Infected: 16
Modifications: 0
Suspicious: 0
Adware: 0
Dialers: 0
Jokes: 0
Riskware: 0
Hacktools: 0
Cured: 2
Deleted: 3
Renamed: 0
Moved: 11
Ignored: 0
Scan speed: 151 Kb/s
Scan time: 7:18:59
==========================================

My security essentials is now showing green again, it was amber before. Should I be taking this off and putting different security on or is it ok?

aliEnRIK

can you please post details of what was cured and removed ~
Cured: 2
Deleted: 3

rome1067

Knew this would happen. I closed Drweb down when it was finished and I had found the log.

Will it show me this info on the log? I'm scrolling down pages looking for them but there are 100's of pages!! Would it be shown in one area of the log?

aliEnRIK

usually right at the bottom near what youve already posted

The_Grandmaster

Sorry for the misinformation. I hope you find the log.

rome1067

Can't find anything listing them all together I'm going through the log now. I've found one deleted I'll post all together when I find them.

rome1067

C:\System Volume Information\_restore{4B5A32F4-26C8-48CC-B82F-5CE6BC897AB4}\RP889\A0145111.sys infected with BackDoor.Tdss.2459 – cured
C:\Qoobox\Quarantine\C\WINDOWS\system32\Drivers\kbdclass.sys.vir infected with BackDoor.Tdss.2459 – cured

C:\Program Files\Disney Interactive\Disney Princess Royal Horse Show\Xtras\Win\Disney Interactive\spellcheck.X32 infected with Trojan.MulDrop1.4967 – deleted



C:\System Volume Information\_restore{4B5A32F4-26C8-48CC-B82F-5CE6BC897AB4}\RP887\A0139852.exe infected with Trojan.Fakealert.15788 – deleted


C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4KRSTIAE\SetupSE2010[1].exe infected with Trojan.Fakealert.15788 – deleted


Saw a couple like the one I've copied in red, why has it not done anything with it?

>C:\System Volume Information\_restore{4B5A32F4-26C8-48CC-B82F-5CE6BC897AB4}\RP890\A0145711.exe/Launch.exe infected with Trojan.Click.1383

rome1067

Am I all ok now for internet banking etc?

The_Grandmaster

I'd wait until I get a yes from alienRIK -but you say you still see messages saying X is infected etcetera? I think those have been moved (to quarantine?) but better to be safe than sorry!

rome1067

I'm not doing anything till alienRIK says its ok:)

The one I posted in red is on the Drweb log, on other ones is says"moved" but some don't, I just wondered why it was doing that.