[topcat77]

Anyone know what this means and how can I get rid of it?

[Byteman]

Hi, Can't see the last of the file path that would show the exact name of what was found....

In my FF folder, there is helper.exe, uninstall.update, and uninstall.log files, just 3.

I wouldn't think any of those would trigger a false alarm, but they could have. Or, something has infected a file there on yours.

If you can hover the mouse cursor over that line in your results log, maybe it will show the filename and you can post it.

For now, just leave it alone, it says it was cleaned, so try things.

Try an online scanner that detects all kinds of malware: This one does not clean anything but serves well as a guide to see just what is on the computer.

Kaspersky online full scan

• Please go HERE and click Free Online Scanner
• Read and Accept the Agreement
• You will be promted to install an ActiveX component from Kaspersky, Click Yes.
• If you see a Windows dialog asking if you want to install this software, click the Install button.
• The program will launch and then begin downloading the latest definition files,
• When the "Update progress" line changes to "Ready" and the "NEXT ->" button becomes available, please click on it.
• Click on the Scan Settings button, and in the next window select the Extended database, and click Ok.
• Under "Please select a target to scan:", click My Computer to start the scan.
• When the scan is finished, click the "Save as Text" button, and save the file as kavscan.txt to your Desktop, close the Kaspersky On-line Scanner window.
• Copy and Paste the contents of the on line scanner results into a Reply here in your thread, along with a new HJT log and log from any other scans you run.

[topcat77]

This Firefox installer has been picked up again and also these three problems:





Anyone know if these are serious and how do I remove them?

[Byteman]

Hi,

I have seen that Firefox file picked up and it is nothing to be concerned about.

Technically, the file is detected due to what it does, but there is no cause for concern.

More than one antivirus etc scanner detects it, I don't know why they have not been able to exclude it.

The bottom 3 items of course most likely are malware and should be quarantined and/or deleted.

[topcat77]

Originally Posted by Byteman

The bottom 3 items of course most likely are malware and should be quarantined and/or deleted.

Should I delete these in safe mode on my pc or will they be ok if Kaspersky has neutralized them?

[Byteman]

Hi,

I am not sure actually.... if the files were put into quarantine they are OK.... that is the safest way. Then, you can delete them from quarantine when you are sure things are working OK after a few days.

If you mean the infection was "Cleaned" = neutralized, then that also should be OK, but I would have no way to know with any 100% guarantee, that's the job of the antivirus program and it's maker.

It depends on what settings you have within the antivirus or other program, for what action it takes, or what you clicked when the infection alert popped up during a scan, download, etc.

In Post#1 you have a screenshot, with "Action" but it does not show what one you did for that file... that one was the Mozilla Firefox, and not a real threat so it actually could have been "Ignored"

For the others> If they are in Quarantine, simply remove them from there...you will see a button in Quarantine where those files in the scan results are listed, delete them from there.

I wouldn't bother keeping those files, they are crap.

[topcat77]

The four objects in question only show in the "Detected" section of scan results but not quarantined. I only get the option to delete them from the list and will that remove them from my computer too?

I'm worried I have some nasty trojans lurking around.

[Byteman]

Hi, If that list is results from the Kaspersky online scanner , I already posted this:

Originally Posted by Byteman

Try an online scanner that detects all kinds of malware: This one does not clean anything but serves well as a guide to see just what is on the computer.

Kaspersky online full scan...

Kaspersky online is just a reference type scanner...it does not clean, disinfect, or remove anything.


If you want to check against what Kaspersky found, scan here:

Housecall online scan:
http://www.trendsecure.com/portal/en...security_tools

Or, here:

Bit Defender online
This online scanner is very thorough and can scan inside System Restore Points to delete
bad files-- this will delete anything it finds infected!

• * Go here and do the BitDefender online virus scan.
• Click "I Agree" to agree to the EULA.
• Allow the ActiveX control to install when prompted.
• Click "Click here to scan" to begin the scan.
• Please refrain from using the computer until the scan is finished.
• When the scan is finished, click on "Click here to export the scan results"
• Save the report to your desktop so you can attach it to your next reply to this thread.

_ _ _ _
Please follow the directions carefully, scan the entire computer, and save the logs or reports as it says to post in your reply here. You may find that a log is too long, in that case, attach the log to your reply, or, use two or more replies to post them.

And here:

HERE to run Panda's ActiveScan

• Once you are on the Panda site click the Scan your PC button
• A new window will open...click the Check Now button
• Enter your Country
• Enter your State/Province
• Enter your e-mail address and click send
• Select either Home User or Company
• Click the big Scan Now button
• If it wants to install an ActiveX component allow it
• It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
• When download is complete, click on My Computer to start the scan
• When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report

Also do this:


Let's have you post a log from Hijackthis and maybe we can spot anything out of place:
go to Click here to download HJTsetup.exe

• Click "Download the Hijackthis Installer" link in blue.
• Save HJTsetup.exe to your desktop.
• Double click on the HJTsetup.exe icon on your desktop.
• By default it will install to C:\Program Files\Hijack This.
• Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
• Put a check by Create a desktop icon then click Next again.
• Continue to follow the rest of the prompts from there.
• At the final dialogue box click Finish and it will launch Hijack This.
• Click on the Do a system scan and save a log file button. It will scan and then save the log and then the log will open in Notepad.
• Don't use the Analyse This button, its findings are dangerous if misinterpreted
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Paste the log in your next reply.
• DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

Please also do this:

• Open Hijack This and click on the "Open the Misc Tools section" button.
• Click on the "Open Uninstall Manager" button.
• Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad.
• Copy and paste that list here in your reply