Are these really infected? [SOLVED by db1333]

[mikeules]

I'm not sure that I'm doing this right, but I've attached a password protected Zip file. Please check these for me.

Thank you. -Mike.

IObit Security 360 Report.zip

[hxin]

I'm not sure that I'm doing this right, but I've attached a password protected Zip file. Please check these for me.

Thank you. -Mike.

 

Hello mikeules

Thanks for your feedback.

you can upload or send us your suspicious file, and then we can further investigate it. At the same time, you can upload your suspicious file to http://www.virustotal.com for analyzing, and post your analysis report.

 

We are looking forward to your reply.

[Melvin_Deal]

HI mikeules.

 

Would help if you would not lock the file!:|

 

-Mel

[Melvin_Deal]

Thanks mikeules!

 

I appreciate your dilligence! It is refreshing to say the least!!! I have been guided back to post number one of this thread.:oops:THXWOZ:-D

 

-Mel

[wozofoz]

New Definitions update

 

I'm not sure that I'm doing this right, but I've attached a password protected Zip file. Please check these for me.

Thank you. -Mike.

 

Welcome to the forum mikeules :smile:

 

Firstly, I moved your post to it's own thread so it will get noticed easier.

 

The IObit Security 360 Definitions Version has just recently been updated to 1331

This version should fix a lot of false Positives (it fixed mine :smile: ) so please make sure you have this latest version (see image) then run a new scan.

 

http://forums.iobit.com/attachment.php?attachmentid=4377&d=1267169830

 

Also, the ZIP file you sent contains the IObit Security 360 Scan results.

The scan results can be copied from Notepad and safely pasted into a post here at the forum.

Here is a copy of your Scan result (my Bold and Color)

 

IObit Security 360

 

OS:Windows Vista

Version:1.4.0.11

Define Version:1330

Time Elapsed:00:19:18

Objects Scanned:64889

Threats Found:14

 

|Name|Type|Description|ID|

Trojan.Agent, File, C:\Windows\winsxs\x86_netfx-cvtres_for_vc_and_vb_b03f5f7f11d50a3a_6.0.6002.18005_none_e59ba05e346044a2\cvtres.exe, 12-912

Trojan.Agent, File, C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe, 12-912

Trojan.Agent, File, C:\Windows\winsxs\x86_prnhp001.inf_31bf3856ad364e35_6.0.6001.18000_none_d2d06b9620b04c9a\I386\HPBMIAPI.DLL, 12-912

Trojan.Olmarik, File, C:\Program Files\PCPitstop\Exterminate3\win\x86\icule34.dll, 12-1760

Trojan.SdBot, File, C:\Program Files\Google\Chrome Frame\Application\5.0.317.0\Locales\ko.dll, 12-1697

Trojan.Redosdru, File, C:\Windows\System32\DriverStore\FileRepository\prnep001.inf_f0a9a372\I386\EP0LVR1C.DLL, 12-777

Trojan.Redosdru, File, C:\Windows\System32\DriverStore\FileRepository\prnep001.inf_f0a9a372\I386\EP0LVR1D.DLL, 12-777

Trojan.Redosdru, File, C:\Windows\System32\DriverStore\FileRepository\prnep001.inf_f0a9a372\I386\EP0LVR1E.DLL, 12-777

Trojan.Redosdru, File, C:\Windows\System32\DriverStore\FileRepository\prnep001.inf_f0a9a372\I386\EP0LVR1M.DLL, 12-777

Trojan.Redosdru, File, C:\Windows\System32\DriverStore\FileRepository\prnep001.inf_f0a9a372\I386\EP0LVR1N.DLL, 12-777

Trojan.Redosdru, File, C:\Windows\System32\DriverStore\FileRepository\prnep001.inf_f0a9a372\I386\EP0LVR1O.DLL, 12-777

Trojan.Agent, File, C:\Windows\System32\DriverStore\FileRepository\prnhp001.inf_2ade4966\I386\HPBMIAPI.DLL, 12-912

Trojan.Agent, File, C:\Windows\System32\DriverStore\FileRepository\prnhp001.inf_5641fa75\I386\HPBMIAPI.DLL, 12-912

Trojan.SdBot, File, D:\Program Files\Ashampoo\Ashampoo Burning Studio 6 FREE\ash_spti.dll, 12-1697

 

What IObit wants you to send in a password protected ZIP is a copy of the actual file.

Here is an example of how you would get this copy is by following this path I have taken from your Scan results

C:\Program Files\PCPitstop\Exterminate3\win\x86\icule34.dll

You would right click on icule34.dll and ZIP it the add the password infected

 

Again, please update first and run a new scan, there may be no need to send a report after that :smile:

 

All the best, woz of oz

[hxin]

I'm not sure that I'm doing this right, but I've attached a password protected Zip file. Please check these for me.

Thank you. -Mike.

 

Hello mikeules

This question have solved in version 1333. Update please.