I followed the instructuctions for the "check if your AV software really works" thread and this is what happend
I downloaded the virus file. I unzipped to desktop. I scanned for viruses. AVG found 3 of the 5 that made it through the extraction. I was left with 2 viruses. I Shift Deleted last 2 viruses. I shift Deleted zip file.
Point is those are the steps I took. Now AVG says I have 5 infected files that can not be removed??? How did they end up on my computer! Is AVG f?ing with me or is there really 5 infected files? I didn?t mess with any of the files after extracted. How do I get rid of them now? Is this guy trying to help out or infect computers?
Results of Complete Test, date and time 2/17/2004 14:28:26 :
Testing C:\ serial 58C8-1B09
C:\Documents and Settings\All Users\Application Data\Microsoft\NETWORK\Downloader\QMGR0.DAT Cannot open; not checked!
C:\Documents and Settings\All Users\Application Data\Microsoft\NETWORK\Downloader\QMGR1.DAT Cannot open; not checked!
C:\Documents and Settings\ERIC\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\ERIC\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\ERIC\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\ERIC\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\Win32.To.exe Virus identified I-Worm/Torvil.B
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\Backdoor.exe Trojan horse BackDoor.Iroffer.F
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\Backdoor.exe Trojan horse BackDoor.Amitis.AC
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\BAT.Kife.bat Could be infected BAT/HitOut
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\Trojan.D.exe Trojan horse Dropper.Kifer.A
C:\Documents and Settings\LocalService\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\LocalService\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!
C:\Documents and Settings\NetworkService\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Cannot open; not checked!
Test finished, duration 00:09:23.9 s
19356 objects tested, 5 found infected
I downloaded the virus file. I unzipped to desktop. I scanned for viruses. AVG found 3 of the 5 that made it through the extraction. I was left with 2 viruses. I Shift Deleted last 2 viruses. I shift Deleted zip file.
Point is those are the steps I took. Now AVG says I have 5 infected files that can not be removed??? How did they end up on my computer! Is AVG f?ing with me or is there really 5 infected files? I didn?t mess with any of the files after extracted. How do I get rid of them now? Is this guy trying to help out or infect computers?
Results of Complete Test, date and time 2/17/2004 14:28:26 :
Testing C:\ serial 58C8-1B09
C:\Documents and Settings\All Users\Application Data\Microsoft\NETWORK\Downloader\QMGR0.DAT Cannot open; not checked!
C:\Documents and Settings\All Users\Application Data\Microsoft\NETWORK\Downloader\QMGR1.DAT Cannot open; not checked!
C:\Documents and Settings\ERIC\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\ERIC\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\ERIC\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\ERIC\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\Win32.To.exe Virus identified I-Worm/Torvil.B
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\Backdoor.exe Trojan horse BackDoor.Iroffer.F
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\Backdoor.exe Trojan horse BackDoor.Amitis.AC
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\BAT.Kife.bat Could be infected BAT/HitOut
C:\Documents and Settings\ERIC\Local Settings\Temporary Internet Files\CONTENT.IE5\WX27AJ0L\virii[1].zip:\Trojan.D.exe Trojan horse Dropper.Kifer.A
C:\Documents and Settings\LocalService\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\LocalService\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!
C:\Documents and Settings\NetworkService\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Cannot open; not checked!
Test finished, duration 00:09:23.9 s
19356 objects tested, 5 found infected