Re: Suspicious Files

From: Kayman (Kayman_at_discussions.microsoft.com)
Date: 08/18/05


Date: Thu, 18 Aug 2005 01:40:04 -0700

Hi Dave:
I removed C:\AV-CLS already. Anyway, I again started from scratch and
downloaded C:\AV-CLS, after opening/closing zip and disabling firewall,
started downloading McAfee first, followed by Trend And Sophos.

McAfee, Wget ftp.nai.speedera.........Length 7,353,456 took about 28 mins
to download at 3.42 - 3.44Ks

Trend, Wget www.trendmicro.com/ftp/products/tsc/sysclean.......Length
3,423,308 took about 20 mins to download at 3.00 - 3.30Ks
Trend, Wget www.trendmicro.com/ftp/products/pattern\lpt.......Length
7,643,028 took about 35 mins to download at 3.60 - 3.65Ks

Sophos, Wget www.sophos.com/tools/sav32sfx.exe Length 7,486,008 took about
33 mins to download at 3.60 - 3.71Ks
Sophos, Wget www.sophos.com/downloads/idi/web_ides.exe.......Length 274,597
took about 3 mins to download ar 3.59Ks
Sophos, Wget www.sophos.com/tools/esdz.exe.......Length 7,369,105 took about
32 mins at 3.65Ks.

Performed clean boot and rebooted in normal mode.
McAfee:
c:\AV-CLS\McAfee\update.ini not opened for READ, error code [1]

Trend:
c:\AV-CLS\Trend\pattern.text not opened for READ, error code [0]

Sophos:
Working/Scanning (hooray), found a virus fragment 'w95/Sledge-A in file
c:\WINDOWS\system32\ActiveScan\pskavs.dll Removal successful.

Performed clean boot and rebooted in F8 safe mode.
McAfee: Same error message.

Trend: Same error message.

Sophos:
Sophos scan files were not found. The computer shuts down so you can obtain
files in normal mode.

Am I the only one having these kind if problems with AV-CSL?
Please help me!

As this is is a non-virus related issue please advise also if should visit
another newsgroup/forum.

"David H. Lipman" wrote:

> From: "Kayman" <Kayman@discussions.microsoft.com>
>
> | Okay David, I am going to remove/delete the entire AV-CLS folder and
> | re-download with the firewall disabled.
> | The "Pattern File not Found" message also popped up when I hit the key for
> | accessing Sophos.
> | Would you please recommend a newsgroup which advises on non-virus related
> | issues such as I am experiencing? (McAfee v4.40.0 is such an efficient tool!).
> | Please note that I never had a problem with the "stand-alone" version which
> | I already deleted since the virus data file can not be updated anymore.
>
> Viruses:
> alt.comp.virus
> alt.comp.anti-virus
> microsoft.public.security.virus
>
> Non-viral malware
> alt.privacy.spyware
>
> You don't have to remove C:\AV-CLS Just run the latest version (v2.26) of Multi_AV.exe
> which will overwrite the files with their respective new versions.
>
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>



Relevant Pages

  • Re: SPR/Madtol.C program
    ... TREND: ... SOPHOS: ... error code " idicates that the FTP.EXE program was ... unable to access the McAfee FTP site and downnload the needed files. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unknown Virus
    ... We initially had problems getting McAfee, Sophos or Trend ... | Eventually we were able to get the McAfee one to download and ran it. ...
    (microsoft.public.security.virus)
  • Re: HELP!!! explorer.exe taking all memory
    ... FireWall to allow it to download the needed AV vendor related files. ... This will bring up the initial menu of choices and should be executed in Normal Mode. ... Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: TR/Dldr.SecondTh.HA, more questions
    ... Kaspersky Safe Mode Found 0 Problems. ... A Rerun of Trend online said No threats Found. ... "David H. Lipman" wrote: ... > FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.security.virus)
  • Re: Cant update AdAWare,SpyBot,AVG
    ... I disabled the Windows Firewall, ... When I went to Safe Mode, ... Sophos, and I had to D/L again in Normal Mode. ... > FireWall to allow it to download the needed AV vendor related files. ...
    (microsoft.public.windowsxp.security_admin)