3 replies to this topic

[Woody]

Can anyone tell me what these not-a-virus entries are in my Kaspersky scan?

KASPERSKY ONLINE SCANNER REPORT
Wednesday, August 30, 2006 2:15:43 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 30/08/2006
Kaspersky Anti-Virus database records: 219409
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
Scan Statistics
Total number of scanned objects 59805
Number of viruses found 1
Number of infected objects 14 / 0
Number of suspicious objects 0
Duration of the scan process 00:32:20

Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\HP_Owner\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\HP_Owner\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Owner\ntuser.dat Object is locked skipped
C:\Documents and Settings\HP_Owner\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT.LOG Object is locked skipped
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\rawlog.log Object is locked skipped
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\seclog.log Object is locked skipped
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\syslog.log Object is locked skipped
C:\Program Files\Panda Software\Panda Platinum 2005 Internet Security\Firewall\tralog.log Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{D8696F73-2D76-412A-A981-4300C43EF86F}\RP251\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{F52DDC41-9A39-4441-B4F6-87ECD6DD32B9}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\I386\Apps\APP16102\src\da\js\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\de\js\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\en\JS\LUREGWMI.EXE Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\es\JS\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\fi\js\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\fr\JS\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\it\js\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\ko\JS\LUREGWMI.EXE Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\nl\js\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\no\js\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\pt\js\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\sv\js\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\zh\cn\JS\LUREGWMI.EXE Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\I386\Apps\APP16102\src\zh\tw\JS\LURegWMI.exe Infected: not-a-virus:AdWare.Win32.Dm.n skipped
D:\System Volume Information\_restore{D8696F73-2D76-412A-A981-4300C43EF86F}\RP251\change.log Object is locked skipped
Scan process completed.

[cowboy357]

I,m not sure woody but you might look at this. http://www.castlecop...eneric_QEH.html Cowboy

[Eldmannen]

It identified files, and it told you that it was "not-a-virus" and further identified it as Adware. Both virus and adware are malware (malicious software), your antivirus software is inherently designed to detect viruses, but yours did apparently detect adware which it informed you about since it is malware, even though it is not a virus.

You should get rid of those pesky adware.

[Woody]

cowboy357, on Aug 30 2006, 03:01 PM, said:

I,m not sure woody but you might look at this. http://www.castlecop...eneric_QEH.html Cowboy

Thanks for the link Cowboy.

Woody.