AOL Active Virus Shield, first time scan?

B

Bloke

I've always had good experience with the Kaspersky online scan,
so I decided to install the AOL Active Virus Shield. The scan found quite a
few things in drive HP RECOVERY (D:)

detected: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP09894\App09894.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
not found: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009179.exe
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009179.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0010176.exe
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0010177.exe
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab.

I have also scanned drive D with a-squared,SuperAntispyware,Ewidow
antispyware,Bitdefender online scan and Computer Assicates online scan,
nothing was found. Also the Kapersky online scan found nothing, strange as
AOL Active Virus Shield wich is basickly Kapersky Anti Virus.

I've got the feeling the Active Virus Shield scan threw up false positives
 
A

Art

I've always had good experience with the Kaspersky online scan,
so I decided to install the AOL Active Virus Shield. The scan found quite a
few things in drive HP RECOVERY (D:)

detected: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP09894\App09894.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
not found: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009179.exe
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009179.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0010176.exe
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0010177.exe
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab.

I have also scanned drive D with a-squared,SuperAntispyware,Ewidow
antispyware,Bitdefender online scan and Computer Assicates online scan,
nothing was found. Also the Kapersky online scan found nothing, strange as
AOL Active Virus Shield wich is basickly Kapersky Anti Virus.

I've got the feeling the Active Virus Shield scan threw up false positives

Detection by AVS should be the same as with KAV 6, providing the scan
setting options are set the same. It may not be easy to sort out just
what's going on here since the detections seem to be on files buried
in installation and archive compressed files, as well as files in your
System Restore.

One possibilty is a "transient" false postive which is already fixed
by Kaspersky. On that score, you might try scanning some of the
folders after doing a update.

If the apparent false positives persist after updating, you should
try submitting one or two of the files to Kaspersky for analysis.

One other thing you might try. There is a KAVDOSNT program
you can download from my web site. It uses the DOS version
of Kaspersky av (KAVDOS32). It would be interesting to see
what KAVDOS32 comes up with after it's updated.

Art
http://home.epix.net/~artnpeg
 
B

Bloke

Art said:
Detection by AVS should be the same as with KAV 6, providing the scan
setting options are set the same. It may not be easy to sort out just
what's going on here since the detections seem to be on files buried
in installation and archive compressed files, as well as files in your
System Restore.

One possibilty is a "transient" false postive which is already fixed
by Kaspersky. On that score, you might try scanning some of the
folders after doing a update.

If the apparent false positives persist after updating, you should
try submitting one or two of the files to Kaspersky for analysis.

One other thing you might try. There is a KAVDOSNT program
you can download from my web site. It uses the DOS version
of Kaspersky av (KAVDOS32). It would be interesting to see
what KAVDOS32 comes up with after it's updated.
OK, after two updates in two days and another scan
all seems well, no suspicious files found. Cheers.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top