Can't Find File Detected by Antivirus Scan

  • Thread starter Thread starter CatBlue
  • Start date Start date
C

CatBlue

Hello all, I hope my note finds you doing well. My PC is running
Windows XP SP3. I have XoftSpy set to scan my computer every day for
viruses. Usually, it whips through the files, but I noticed today that
it hung up on a particular file for a long time before proceeding:

C:\Document and Settings\my name\Start Menu\Programs\secure pc
solutions\1 click spy clean

It did not turn up on the list of items to be removed or quarantined.
I looked it up online and it appears to be safe (it is a adware/
malware removal tool). However, since I did not recall downloading it
in the first place, I decided to remove it. The thing is, when I went
to the Start Menu Programs folder there was nothing there for secure
pc solutions or 1 click spy clean.

I have my views set to see hidden files, so I am quite flummoxed. Any
ideas as to why it would turn up during a scan but I cannot see it? I
look forward to your replies.
 
CatBlue said:
Hello all, I hope my note finds you doing well. My PC is running
Windows XP SP3. I have XoftSpy set to scan my computer every day for
viruses. Usually, it whips through the files, but I noticed today that
it hung up on a particular file for a long time before proceeding:

C:\Document and Settings\my name\Start Menu\Programs\secure pc
solutions\1 click spy clean

It did not turn up on the list of items to be removed or quarantined.
I looked it up online and it appears to be safe (it is a adware/
malware removal tool). However, since I did not recall downloading it
in the first place, I decided to remove it. The thing is, when I went
to the Start Menu Programs folder there was nothing there for secure
pc solutions or 1 click spy clean.

I have my views set to see hidden files, so I am quite flummoxed. Any
ideas as to why it would turn up during a scan but I cannot see it? I
look forward to your replies.
Click to expand...
It might be a hidden system file.
Jim
 
What anti-virus do you have installed? XoftSpy is anti-spyware, not anti-virus.
Avast is a very good AV:

http://www.avast.com/eng/download-avast-home.html

Avast Anti-Virus is XP and Vista compatible (32bit and 64bit Versions),
FREE, auto-updating, and a low resources user of your computer.
And, only have 1(one) Anti-Virus installed / running on your computer at any
one time..
Conflicts may occur if you have more than 1(one).

For Spyware/Malware
Download, install, update and scan your computer with these 2 Programs to
look for problems with Spyware/Malware dodgey programs:

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.
 
Hello Jim and Mad Mike,

Thank you for your replies! Alas, it is not a hidden system file. I
have my file folder options set to view those and it is still not
coming up. Also, when XoftSpy was scanning it gave the location
clearly as being in my Start Menu\Programs folder.

XoftSpy came with the PC when I got it from a previous job. I used to
run Avast, but I found it slowed down my PC a lot. I am currently
running ZoneAlarm and I also have the other two that you mentioned:
Spybot-SD and Malwarebytes. In addition, I have CWshredder, Ad-Aware
and Super AntiSpyware. Of course, I do not run those all the time. I
had downloaded most of them one time I discovered a trojan had
hijacked my browser searches, and then I just kept them.

I am still stymied as to how XoftSpy showed a scan for this folder
"secure pc solutions," but it does not appear to exist. Have you ever
heard of such a thing happening? Do you think if I run HijackThis it
would show?
 
I just ran HijackThis, but the log did not show the folder secure pc
solutions\1 click spy clean. I guess that means if it is on my system
somewhere, it is not running? Very mysterious! I wonder if it was
deleted in the past, but is still showing up somehow. Perhaps this is
an error in XoftSpy? It is an old version.
 
CatBlue said:
I just ran HijackThis, but the log did not show the folder secure pc
solutions\1 click spy clean. I guess that means if it is on my system
somewhere, it is not running? Very mysterious! I wonder if it was
deleted in the past, but is still showing up somehow. Perhaps this is
an error in XoftSpy? It is an old version.
Click to expand...
You might find more opinions about curing your problem if you post to
microsoft.public.security.virus.

Jim
 
Hello all, I hope my note finds you doing well.
My PC is
running Windows XP SP3. I have XoftSpy set to
scan my
computer every day for viruses. Usually, it
whips through
the files, but I noticed today that it hung up
on a
particular file for a long time before
proceeding:

C:\Document and Settings\my name\Start
Menu\Programs\secure pc solutions\1 click spy
clean

It did not turn up on the list of items to be
removed or
quarantined. I looked it up online and it
appears to be
safe (it is a adware/ malware removal tool).
However,
since I did not recall downloading it in the
first place,
I decided to remove it. The thing is, when I
went to the
Start Menu Programs folder there was nothing
there for
secure pc solutions or 1 click spy clean.

I have my views set to see hidden files, so I am
quite
flummoxed. Any ideas as to why it would turn up
during a
scan but I cannot see it? I look forward to your
replies.
Click to expand...

I'm guessing of course, but ...
It could be there, but masquarading as something
else and with different credentials or even
possibly under a different user such as one of the
sevearal other system users XP puts together. If
it's viral, trojan or whatever, it could also have
managed to unset your views of system files,
hidden files or something similar. Assuming it's
malware, which it does sound like, there are any
number of little "tricks" to hiding it out.

You also mentioned the age of the AV scanner which
certainly can be an issue. If you don't have up
to date AV software, complete with up to date
viral signatures, etc., you are likely almost
unprotected in any way. False hits are also
always possible, especially since you seem to be
using something not only old but apparently not
updated, IF it can even be updated.

So in the overall, you have NO idea what you're
chasing and/or what you may have. The first thing
you need to do is get a reliable AV software
installed, updated, and scan the entire system.
Then if you don't already have them, find and
download at least 3 reputable anti-spyware
programs and turn those loose scanning your
system. Most antivirus (AV) software does NOT do
checking for spyware, and if they do, it's minimal
and wouldn't be trustworthy as the ONLY scanner to
find malware.

I suggest that you have an open, probably quite
infected machine there unless/until you have done
the scans with updated programs for viruses,
trojans, worms, etc. etc. etc., using an arsenal
of at least 3 previously mentioned malware
detectors.

If you need advice on what makes for good anti
spyware/malward detectors, either ask here or just
skim back over some old posts; they get posted
anew all the time so there are lots to pick from.

Best of luck,

Twayne
 
Back
Top