Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mwav Question?


  • Please log in to reply
1 reply to this topic

#1 Susan528

Susan528

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:09:09 AM

Posted 20 January 2006 - 06:41 AM

Example from an MWAV (MicroWorld Anti-Virus) scan.
File C:\DOCUME~1\Margo\LOCALS~1\Temp\lf_570.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\Margo\LOCALS~1\Temp\lf_9E4.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\Margo\LOCALS~1\Temp\lf_A18.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\Margo\LOCALS~1\Temp\lf_A44.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\Margo\LOCALS~1\Temp\lf_A54.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\Margo\LOCALS~1\Temp\lf_A78.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\Margo\LOCALS~1\Temp\lf_A84.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\Margo\LOCALS~1\Temp\lf_AB4.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
There is a gap here filled with invalid object entries
File C:\Documents and Settings\Margo\Local Settings\Temp\lf_570.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Margo\Local Settings\Temp\lf_9E4.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Margo\Local Settings\Temp\lf_A18.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Margo\Local Settings\Temp\lf_A44.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Margo\Local Settings\Temp\lf_A54.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Margo\Local Settings\Temp\lf_A78.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Margo\Local Settings\Temp\lf_A84.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Margo\Local Settings\Temp\lf_AB4.tmp infected by "Trojan-Downloader.Win32.Dluca.ci" Virus! Action Taken: No Action Taken.

I assumed that an anti-virus application would scan the drive sequentially? once. I would not expect the same file to show up in one log twice. But the log above has files that show the DOS name with the DOCUME~1\Margo\LOCALS~1\ and the regular Windows name. Aren't these files the same and why would these files show up twice in same one log? Is this normal?

BC AdBot (Login to Remove)

 


#2 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:02:09 PM

Posted 21 January 2006 - 11:49 AM

Hi Susan528

I don't really understand what might cause this, but i'm sure that there is nothing to worry about. MWAV is so thorough, and often picks things up twice :thumbsup:

Hope this helps
David :flowers:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users