Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
I'm visiting my parents and I found that they have at least three antivirus programs running... AVG, Bullguard, Trend Micro and maybe more... I ran AVG and I got the following report of viruses... I HAVE NO IDEA WHAT TO DO... PLEASE HELP!!!!
Results of Complete Test, date and time 3/2/2004 13:14:13 :
Testing C:\ serial A4DA-C217
C:\Documents and Settings\TcComputers\NTUSER.DAT Cannot open; not checked!
C:\Documents and Settings\TcComputers\ntuser.dat.LOG Cannot open; not checked!
C:\Documents and Settings\TcComputers\Local Settings\Application Data\Microsoft\WINDOWS\USRCLASS.DAT Cannot open; not checked!
C:\Documents and Settings\TcComputers\Local Settings\Application Data\Microsoft\WINDOWS\UsrClass.dat.LOG Cannot open; not checked!
C:\Documents and Settings\TcComputers\Local Settings\TEMP\ACR99.TMP Cannot open; not checked!
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\dll32.hlp Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\dll32NT.hlp Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\gg.bat Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\httpsear.ini Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\mdm.exe Trojan horse HideWindow
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\NT32.ini Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\OCXDLL.EXE:\xvpll.hlp Trojan horse IRC/BackDoor.Flood
C:\Program Files\BullGuard\INFECTED\VSC0.TMP Cannot open; not checked!
C:\Program Files\BullGuard\INFECTED\VSC7.TMP Cannot open; not checked!
C:\WINNT\SMDAT32A.SYS Cannot open; not checked!
C:\WINNT\SYSTEM32\OCXDLL.EXE:\dll32.hlp Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\dll32NT.hlp Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\gg.bat Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\httpsear.ini Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\mdm.exe Trojan horse HideWindow
C:\WINNT\SYSTEM32\OCXDLL.EXE:\NT32.ini Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\OCXDLL.EXE:\xvpll.hlp Trojan horse IRC/BackDoor.Flood
C:\WINNT\SYSTEM32\P2P Networking\CACHE\DATABASE\INDEX256.DBB Cannot open; not checked!
C:\WINNT\TEMP\TMP1 repairedTest finished, duration 00:20:41.2 s
13309 objects tested, 15 found infected

First of all, it's not a good idea to run more than one anti-virus program on a machine.
The machine is infected with BackDoor.IRC.flood
Removal instructions for that here:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irc.flood.html
There may be other virii that aren't being detected because of the number of antivirus programs installed.
Symantec has a free 15-day trial that you can download and install.
It would also be a good idea to run the Security check from the Symantec site, AND if your parents aren't using the IRC software (probably mIRC) uninstall that as well.
Good luck...

Thanx so much... now one more question... why do different antivirus programs detect different viruses and how come it isn't of value to run more than one program?? Can it harm the system??

1) Some programs detect different viruses for multiple reasons:
--a) Some are rarely updated
--b) Some simply weren't built wellTrust something well-known that is updated frequently like Norton or McAffe.
2) I don't think running more than one anti-virus will harm the system, but it might cause minor errors. Remember anti-virus programs are complex and use odd parts of the system. An anti-virus might think another anti-virus is actually a virus itself, especially if it trys to connect to the internet for an update.
I suggest to download Norton as Jen said--Log off the Inet--Uninstall all your anti-virus programs--Install norton and have it clean everything.
Good luck silver,
~~GianSpi

![]() |
![]() |
![]() |

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |