What do these results of a KAV scan mean

  • Thread starter Thread starter coryb
  • Start date Start date
C

coryb

I have a number of these types of "riskware" results showing up when I
scan with Kaspersky AV.

Does anyone know what this means. Can they be deleted or are they
harmless components of some file or other?


C:\Windows\System\Precopy\base4.cab
(Is a riskware not-a-virus:ToolDOS.Restart)

C:\Windows\System\Precopy\base5.cab
(Is a riskware not-a-virus:ToolDOS.Restart)

C:\Windows\System\Precopy\base6.cab
(Is a riskware not-a-virus:ToolDOS.Restart)

C:\Windows\System\Precopy\base3.cab
(Is a riskware not-a-virus:ToolDOS.Restart)

C:\Windows.001\Windows~001\Windows.000\Command\EBD\EBD.CAB\Restart.com
(Is a riskware not-a-virus:ToolDOS.Restart)
 
| I have a number of these types of "riskware" results showing up when I
| scan with Kaspersky AV.
|
| Does anyone know what this means. Can they be deleted or are they
| harmless components of some file or other?
|
|
| C:\Windows\System\Precopy\base4.cab
| (Is a riskware not-a-virus:ToolDOS.Restart)
|
| C:\Windows\System\Precopy\base5.cab
| (Is a riskware not-a-virus:ToolDOS.Restart)
|
| C:\Windows\System\Precopy\base6.cab
| (Is a riskware not-a-virus:ToolDOS.Restart)
|
| C:\Windows\System\Precopy\base3.cab
| (Is a riskware not-a-virus:ToolDOS.Restart)
|
| C:\Windows.001\Windows~001\Windows.000\Command\EBD\EBD.CAB\Restart.com
| (Is a riskware not-a-virus:ToolDOS.Restart)

Sounds like executables that are non-viral and "possibily" could be used for nefarious
reasons.
 
| I have a number of these types of "riskware" results showing up when I
| scan with Kaspersky AV.
|
| Does anyone know what this means. Can they be deleted or are they
| harmless components of some file or other?
|
|
| C:\Windows\System\Precopy\base4.cab
| (Is a riskware not-a-virus:ToolDOS.Restart)
|
| C:\Windows\System\Precopy\base5.cab
| (Is a riskware not-a-virus:ToolDOS.Restart)
|
| C:\Windows\System\Precopy\base6.cab
| (Is a riskware not-a-virus:ToolDOS.Restart)
|
| C:\Windows\System\Precopy\base3.cab
| (Is a riskware not-a-virus:ToolDOS.Restart)
|
| C:\Windows.001\Windows~001\Windows.000\Command\EBD\EBD.CAB\Restart.com
| (Is a riskware not-a-virus:ToolDOS.Restart)

Sounds like executables that are non-viral and "possibily" could be used for nefarious
reasons.
Click to expand...

I can't find but very little about them, and what i did find was very
vague.

I guess my best bet would be to quarantine them at the next scan. That
way, if they do belong to some program or other that I know to be okay,
I can restore them.

This spyware/adware crap is getting to be an intolerable nuisance.

Thanks for answering.
 
I can't find but very little about them, and what i did find was very
vague.

I guess my best bet would be to quarantine them at the next scan. That
way, if they do belong to some program or other that I know to be okay,
I can restore them.

This spyware/adware crap is getting to be an intolerable nuisance.

Thanks for answering.
Click to expand...

Sometimes installation software has to modify files that are in use by
the OS. The installer will set up a method to make those changes during
the startup axis of the next warm boot. Then it will either restart your
system to affect the changes or ask you if you want to restart now or
not. This "restart code" could also be found in certain trojans so the
"risk" is brought to your attention by the AV software. I would not
worry about tgis at all - infact the EBD one is your OS's Emaergency
Boot Disk creation utility cabinet file.
 
Sometimes installation software has to modify files that are in use by
the OS. The installer will set up a method to make those changes during
the startup axis of the next warm boot. Then it will either restart your
system to affect the changes or ask you if you want to restart now or
not. This "restart code" could also be found in certain trojans so the
"risk" is brought to your attention by the AV software. I would not
worry about tgis at all - infact the EBD one is your OS's Emaergency
Boot Disk creation utility cabinet file.
Click to expand...

Good deal! I was hoping it was something complicated but friendly. :)
 
Back
Top