AOL Active Virus Shield, first time scan?

  • Thread starter Thread starter Bloke
  • Start date Start date
B

Bloke

I've always had good experience with the Kaspersky online scan,
so I decided to install the AOL Active Virus Shield. The scan found quite a
few things in drive HP RECOVERY (D:)

detected: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP09894\App09894.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
not found: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009179.exe
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009179.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0010176.exe
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0010177.exe
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab.

I have also scanned drive D with a-squared,SuperAntispyware,Ewidow
antispyware,Bitdefender online scan and Computer Assicates online scan,
nothing was found. Also the Kapersky online scan found nothing, strange as
AOL Active Virus Shield wich is basickly Kapersky Anti Virus.

I've got the feeling the Active Virus Shield scan threw up false positives
 
I've always had good experience with the Kaspersky online scan,
so I decided to install the AOL Active Virus Shield. The scan found quite a
few things in drive HP RECOVERY (D:)

detected: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP09894\App09894.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
not found: virus Worm.Win32.Viking.cj File:
D:\I386\apps\APP28703\App28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009179.exe
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009179.exe/hp/tmp/src/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab/F808_awhost32.exe.A418232E_9306_48E3_BE31_5C8804796777
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAHost.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
not found: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0009180.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0010176.exe
detected: virus Worm.Win32.Viking.cj File: D:\System Volume
Information\_restore{D3B0980A-A7B3-456A-A4BD-8F74FA72BA53}\RP20\A0010177.exe
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcACoreMain.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAWindowsAuthentication.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereAuthentication.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAFileTransfer.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcApcAnywhereManager.cab
detected: virus Worm.Win32.Viking.cj File:
d:\i386\apps\app28703\app28703.exe/hp/bin/firewallnorton/SUPPORT/PCA_HOST/PCA_HOST.MSI/pcAAboutBox.cab.

I have also scanned drive D with a-squared,SuperAntispyware,Ewidow
antispyware,Bitdefender online scan and Computer Assicates online scan,
nothing was found. Also the Kapersky online scan found nothing, strange as
AOL Active Virus Shield wich is basickly Kapersky Anti Virus.

I've got the feeling the Active Virus Shield scan threw up false positives
Click to expand...

Detection by AVS should be the same as with KAV 6, providing the scan
setting options are set the same. It may not be easy to sort out just
what's going on here since the detections seem to be on files buried
in installation and archive compressed files, as well as files in your
System Restore.

One possibilty is a "transient" false postive which is already fixed
by Kaspersky. On that score, you might try scanning some of the
folders after doing a update.

If the apparent false positives persist after updating, you should
try submitting one or two of the files to Kaspersky for analysis.

One other thing you might try. There is a KAVDOSNT program
you can download from my web site. It uses the DOS version
of Kaspersky av (KAVDOS32). It would be interesting to see
what KAVDOS32 comes up with after it's updated.

Art
http://home.epix.net/~artnpeg
 
Art said:
Detection by AVS should be the same as with KAV 6, providing the scan
setting options are set the same. It may not be easy to sort out just
what's going on here since the detections seem to be on files buried
in installation and archive compressed files, as well as files in your
System Restore.

One possibilty is a "transient" false postive which is already fixed
by Kaspersky. On that score, you might try scanning some of the
folders after doing a update.

If the apparent false positives persist after updating, you should
try submitting one or two of the files to Kaspersky for analysis.

One other thing you might try. There is a KAVDOSNT program
you can download from my web site. It uses the DOS version
of Kaspersky av (KAVDOS32). It would be interesting to see
what KAVDOS32 comes up with after it's updated.
Click to expand...
OK, after two updates in two days and another scan
all seems well, no suspicious files found. Cheers.
 
Back
Top