samtso

Hi Cristie, Don't thanks me, I did nothing, I'm just an ordinary user:oops: Cheers!

Hi hxin, Many thanks for your update, they're all fixed, but when I scan using the latest ver. 1502, I find following: ------------------------------------------ IObit Security 360 OS:Windows XP Version:1.4.1.11 Define Version:1502 Time Elapsed:00:11:49 Objects Scanned:61226 Threats Found:11 |Name|Type|Description|ID| Trojan.Backdoor, File, C:\WINDOWS\$NtServicePackUninstall$\dmusic.dll, 12-1082 Trojan.Backdoor, File, C:\WINDOWS\system32\dmusic.dll, 12-1082 Trojan.Spyware, File, C:\WINDOWS\system32\fxscfgwz.dll, 12-1086 Trojan.Spyware, File, C:\Program Files\Common Files\LightScribe\LSSProxy.dll, 12-1086 Trojan.Backdoor, File, C:\WINDOWS\ServicePackFiles\i386\dmusic.dll, 12-1082 Trojan.Spyware, File, C:\WINDOWS\system32\dllcache\fxscfgwz.dll, 12-1086 Trojan.Backdoor, File, C:\WINDOWS\system32\dllcache\guitrn_a.dll, 12-1082 Trojan.Backdoor, File, C:\WINDOWS\system32\usmt\guitrn_a.dll, 12-1082 Trojan.Dropper, File, C:\Program Files\Common Files\Microsoft Shared\Web Folders\MSOWS404.DLL, 12-1087 Trojan.Agent, File, C:\Program Files\Common Files\System\Mapi\1028\EMSUI32.DLL, 12-1114 Trojan.Backdoor, File, C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\WapRes.1045.dll, 12-1082 ------------------------------------------------------ I just test 2 suspect files on VirusTotal (links below) and found nothing, may be these are FP as well, please kindly check. http://www.virustotal.com/analisis/1e9e60e168d98bf0b87c2aab7ac1282864e1d65103599968c0c27eab87200e9b-1274763134 http://www.virustotal.com/analisis/c9348cb67b42306feaf68c0144bff696d0f43a867a70eac39255d02cab035763-1274763678 Thanks a lot!

Hi enoskype, Well noted with thanks! Best regards.

mydocs.dll (12-856) and cookies (7-59) Hi hxin, I think the 12-856 is also a FP, see my scan report attached, and the VirusTotal link below. -------------------------------------- IObit Security 360 OS:Windows XP Version:1.4.1.11 Define Version:1500 Time Elapsed:00:07:53 Objects Scanned:61259 Threats Found:10 |Name|Type|Description|ID| Tracking Cookies, Cookies, Cookie:samtso@netpass.netvigator.com/, 7-59 Tracking Cookies, Cookies, Cookie:samtso@imspmbc05.netvigator.com/, 7-59 Tracking Cookies, Cookies, Cookie:samtso@netvigator.com/, 7-59 Trojan.Agent, File, C:\WINDOWS\$NtServicePackUninstall$\mydocs.dll, 12-856 Trojan.Agent, File, C:\WINDOWS\system32\msvcrt.dll, 12-1163 Trojan.Agent, File, C:\WINDOWS\system32\mydocs.dll, 12-856 Trojan.Agent, File, C:\WINDOWS\ServicePackFiles\i386\msvcrt.dll, 12-1163 Trojan.Agent, File, C:\WINDOWS\ServicePackFiles\i386\mydocs.dll, 12-856 Trojan.Agent, File, C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll, 12-1163 Trojan.Agent, File, C:\Program Files\IObit\Advanced SystemCare 3\Backup\Drivers\Canon MP780\msvcrt.dll, 12-1163 ---------------------------------------------------------------------- http://www.virustotal.com/analisis/f8c0fb10a3736a8dcf3d31a114181237f2aae89827c227fc824e0326c359270f-1274413606 http://www.virustotal.com/analisis/e3c47584bac6839bb667a1f0a8a951b5a0aff7b372966fbce478f32576e4f09b-1274413541 By the way, those cookies in the scan report are service that I use, will you remove them from the threat list? or I have to move them to ignore list? Thank you for your kindly help. samtso

false positive [sOLVED] Dear IObit, I think the 12-323 may be a false positive, please take a look to this report: IObit Security 360 OS:Windows XP Version:1.3.0.10 Define Version:1311 Time Elapsed:00:14:07 Objects Scanned:57751 Threats Found:5 |Name|Type|Description|ID| Tracking Cookies - Removed, Cookies, Cookie:samueltso@www.googleadservices.com/pagead/conversion/1034747469/, 7-1856 Tracking Cookies - Removed, Cookies, Cookie:samueltso@bs.serving-sys.com/, 7-1516 Tracking Cookies - Removed, Cookies, Cookie:samueltso@imrworldwide.com/cgi-bin, 7-1508 Tracking Cookies - Removed, Cookies, Cookie:samueltso@serving-sys.com/, 7-1516 Trojan.Injector, File, D:\ForSetup\ACT2000\ACT\EarthLnk\SETUP.EXE, 12-323 and here's the result from VirusTotal: http://www.virustotal.com/analisis/9428d5353130b9ef6b9cbf2d1067b20cc253e20c6a2d26e607c42db99158f951-1263982270 Thanks for your kind attention.

Hi cicely, Yes, I think so! Just finish a full scan with version 1309, the threat is gone!:grin: Thanks a lot!

Another False Positive? [sOLVED] Hi Cicely, No new update can be found. But it's quite strange, I just do another scan and here's the report: IObit Security 360 OS:Windows XP Version:1.4.0.11 Define Version:1308 Time Elapsed:00:11:00 Objects Scanned:59095 Threats Found:1 |Name|Type|Description|ID| Trojan.Dialer, File, C:\Program Files\EASEUS\EASEUS Partition Master 4.1.1 Home Edition\bin\AutoUpdate.dll, 12-710 I noted the define version is still 1308, but no sight of the 12-629, instead it shows another threat, the 12-710. Below is the link to the VirusTotal result: http://www.virustotal.com/analisis/bc0d9e4a67203f6b0a73674b672a936a39f11cab39e33e70a6df5ea5cc3b013d-1263374455 Thanks for your kind attention.

Possible Fales Positives [sOLVED] Dear IObit, Here's the scan report: IObit Security 360 OS:Windows XP Version:1.4.0.11 Define Version:1308 Time Elapsed:00:11:22 Objects Scanned:58982 Threats Found:1 |Name|Type|Description|ID| Agent.AKHH, File, C:\Program Files\Apple Software Update\SoftwareUpdate.Resources\it.lproj\SoftwareUpdateLocalized.dll, 12-629 and here's the result from VirusTotal: http://www.virustotal.com/analisis/e5e623c629fad49da000493a8dfc11807c575fab4c02eb899e0e9c633528486b-1263311658 Thanks for your kind attention!

False Positive Hi IObit, here's the scan report: IObit Security 360 OS:Windows XP Version:1.3.0.10 Define Version:1295 Time Elapsed:00:09:57 Objects Scanned:58832 Threats Found:1 |Name|Type|Description|ID| Acez.SiteError, File, C:\Program Files\Yahoo!\Yahoo! Widget Engine\UNWISE.EXE, 10-357 and here's the result from Virustotal: http://www.virustotal.com/analisis/7128574752f0a7da1284d589c195aafe25c29f825d7028cebdb21a7ecc44dc00-1261278860 Thanks for your kind attention.

Hi itobe, I just do another scan with the latest update, but still found this: IObit Security 360 OS:Windows XP Version:1.0.1.30 Define Version:1213 Time Elapsed:00:12:09 Objects Scanned:2308 Threats Found:1 |Name|Type|Description|ID| Adware.ADON, File, F:\Programs\Multimedia\Exact Audio Copy\eac-0.99pb4.exe, 10-9585 Any suggestion for me? Thanks and regards, Sam

Thank you to your quick response too:-D

Hi enoskype, Here's the result link of "eac-0.99pb4.exe" from VirusTotal http://www.virustotal.com/analisis/e21aa275fe363db8720288c47fca06713572d4fc01bc9ea8980434a9850f9c1a-1254441649 and "eac-0.99pb5.exe" http://www.virustotal.com/analisis/b22044645a71bfcabf808f321fe03c423f89eb59c4351ab361255415ac8b45ef-1254402528 Thanks, Sam

false positive - exact audio copy IObit Security 360 OS:Windows XP Version:1.0.0.60 Define Version:1210 Time Elapsed:00:24:50 Objects Scanned:70920 Threats Found:6 |Name|Type|Description|ID| Tracking Cookies, Cookies, Cookie:samtso@www-origin.intel.com/, 7-1906 Tracking Cookies, Cookies, Cookie:samtso@intel.com/, 7-1906 Tracking Cookies, Cookies, Cookie:samtso@www.intel.com/, 7-1906 Tracking Cookies, Cookies, Cookie:samtso@downloadcenter.intel.com/, 7-1906 Adware.ADON, File, F:\Programs\Multimedia\Exact Audio Copy\eac-0.99pb4.exe, 10-9108 Adware.ADON, File, F:\Programs\Multimedia\Exact Audio Copy\eac-0.99pb5.exe, 10-6486 I think this is a false positive for exact audio copy, please let me know if you need file sample. Regards, Sam