Computing.Net > Forums > Security and Virus > virus in my ad-aware and...

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

virus in my ad-aware and...

Reply to Message Icon

Name: blender
Date: July 18, 2003 at 23:14:38 Pacific
OS: winxp pro
CPU/Ram: celeron400/256megsdram
Comment:

Hi all
Few days ago run update on ad-aware, when connecting zone alarm popped with "changed program" message for ad-aware..i thought it was from the previous update so I let it go.
got the update and closed prog.
decided to run scan with ad-aware so i started up prog b4 going to work ( yes offline)I get home to find all well with ad-aware's findings but mcafee found virus in adaware. I have ad-aware pro ver 162. The virus was NUKE-NUKEIT-o I cant find that anywhere on any av site...find nukeit.m ..anyway nukeit.m is a hacktool that allows user to perform ddos attacks on whatever puter user is attacking...so I assume nukeit.o is just an upgraded version of .m. well that was deleted by mcafee so good so far..not knowing why I would have virus in ad-aware I decide to run full scan...nothing found...hmmm.I went to RAV's site to run their scan...guess what..more viruses. About 3 months ago I dl java2 runtime from sun microsystems...my brother said it was great...It installed right from the site (i hate those) appeared to run just fine...RAV could not clean or delete the viruses which were located in C:\documents and settings\my name\.jpi-cache\jar\1.0\archive.jar-string of numbers.zip. and another one like it in same location with different set of numbers. virus names...jv/ie start.gen and exploit-byte verify. read about them...not too serious so i decide to unzip the files and see what is in there to try and pick out the viruses themselves...lol. Unzipping them resulted in winzip eror (access denied) and mcafee pops up with virus warning and deletes all 3 files in the zip that was expanded. ok..all is well right? try unzip again and results in same loop of cleaning the viruses.
same results with the second zip file infected.
decided to trash both zip files altogether.
I have mcafee set to scan within zipped files and scan all files.
when trying to scan just the zip file with av it dosnt detect virus but unzipping it ...av does.
I also decided to uninstall the java2 so all is well there..I'm all cleaned out now but I would like to know...(after all this writing) How did I get the hacktool in ad-aware? I have done no downloads in the last 2 weeks other than updates to av. ad-aware, spybot, spyware blaster, windows. That hacktool was not found anywhere else and was not found during sceduled av scan the day b4.
Hope this is not too long ...lol..thanks



Sponsored Link
Ads by Google

Response Number 1
Name: EC
Date: July 20, 2003 at 07:13:55 Pacific
Reply:

Run another full AV scan at www.housecall.antivirus.com
COuld have been a false positive.
Also, can you search the suspicious file name and locate the file/s on your PC and then check its PROPERTIES and at least you'll have a date and time, maybe helping you discover it's origin.
But, if you have those infected files on your PC, I'd be shocked if AD AWARE were responsible, but instead they came from another location, that maybe you have downloaded from and forgotten.


0

Response Number 2
Name: blender
Date: July 21, 2003 at 03:11:09 Pacific
Reply:

EC

Done the scan on housecall....clean
while checking properties of different files in that java2 I found all diferent dates and nothing seemed to make any sense which is why i uninstalled it, I can always go back and dl it again but windows java seems fine.
I highly doubt ad-aware is responsible for any of this but just trying to figure out how it got "infected" nothing was detected till I ran the program. I also done a search for that hacktek.exe file and come up with nothing.
Is there a cache file in the ad-aware folder?
The hacktool was found in C:\prog files\lavasoft\adaware6\cache\complete_set_hacking_tools+manuals\hacking-tools\hacktek.exe
Not only did mcafee delete the file but the whole cache folder.
Also I am the only user on this puter....at least that I know of.....thanks


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More


Stealth Virus? Topsearch on desktop



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: virus in my ad-aware and...

Spyware, Ad-Aware, and Registry... www.computing.net/answers/security/spyware-adaware-and-registry/701.html

virus in my windows volume www.computing.net/answers/security/virus-in-my-windows-volume/16365.html

Ad-Aware automatically runs www.computing.net/answers/security/adaware-automatically-runs/27457.html