Author Topic: New User with multiple viruses that somehow got past Avast...  (Read 28691 times)

0 Members and 1 Guest are viewing this topic.

wyrmrider

  • Guest
Re: New User with multiple viruses that somehow got past Avast...
« Reply #45 on: September 24, 2008, 04:10:51 PM »
have you rebooted since?
you might post at the comodo forum - it's ok
there may be a log somewhere
the comodo virus scan is precautionary and also a way to market their version of CLAM AV

REDACTED

  • Guest
Re: New User with multiple viruses that somehow got past Avast...
« Reply #46 on: September 24, 2008, 05:53:19 PM »
Hello Wyrmrider, Oldman, and other new friends,
I got the computer back up. checked it again and found no new problems, defragged.
How do a set a restore point?
How do I get rid of old infected restore points?
I will install comodo firewall after these steps.
Still can't install java. Install in safemode?

thanks

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89006
  • No support PMs thanks
Re: New User with multiple viruses that somehow got past Avast...
« Reply #47 on: September 24, 2008, 05:58:53 PM »
Disable the system restore on all drives, reboot (that will clear ALL restore points), enable system restore, that will create a new clean restore point.

Windows ME, XP, Vista - How to disable System Restore
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: New User with multiple viruses that somehow got past Avast...
« Reply #48 on: September 25, 2008, 04:41:22 AM »
Maybe a corupted download of java. Delete the java file you downloadedn then click this link to start a download of the offline install. Save it your desktop. Once the download is completed, close all open windows and browsers, double click the file to start the install.

http://javadl.sun.com/webapps/download/AutoDL?BundleId=23111

REDACTED

  • Guest
Re: New User with multiple viruses that somehow got past Avast...
« Reply #49 on: September 25, 2008, 07:12:31 PM »
Hello friends,
Just in case, I am posting HJT log from today. Other scanners show no events.
I installed comodo firewall as suggested
I still cannot install java; tried offline, deactivating avast, comodo, tea time, de-immunizing all and still no luck. went to sun forum,  following all suggestions with no luck.

Thanks for all of your kind help over the past week.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89006
  • No support PMs thanks
Re: New User with multiple viruses that somehow got past Avast...
« Reply #50 on: September 25, 2008, 08:15:47 PM »
Other than these unknown entries, I don't see anything obvious.

Unknown (3 similar entries to this first one)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Plug-in 1.5.0_06) -
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} -
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -

Further investigation, these could be related to Java 6 update 5 plug-in as in the first entry.
Quote
8 Mar 2008 ... CLSID ={CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} is the name of if a new ActiveX Control added with Java Runtime Environment (JRE) 6 Update 5. ...

Now if that is the case a) I don't see JAVA installed on your system so the plug-in probably wouldn't work.

Unknown
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} -

No really helpful google info on this but is also likely ro be a JAVA plug-in.
« Last Edit: September 25, 2008, 08:25:19 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: New User with multiple viruses that somehow got past Avast...
« Reply #51 on: September 25, 2008, 08:17:08 PM »
CHECK and fix them?
Thanks DavidR

wyrmrider

  • Guest
Re: New User with multiple viruses that somehow got past Avast...
« Reply #52 on: September 25, 2008, 08:33:59 PM »
do not FIX anything with hjt till you find out what it is
HJT just disables the start up entry
for example if you nuke new.net with HJT you will loose internet access
so the cure can be worse than the disease

http://download.divx.com/player/DivXBrowserPlugin.cab
may be the 016
google everything and report back

as davidR said these are/ may be for an old version of java so remove them conventionally not with HJT

If it turns out that they are leftovers we can deal with them later

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: New User with multiple viruses that somehow got past Avast...
« Reply #53 on: September 26, 2008, 01:29:06 AM »
The o16 lines are activex downloads. They can be safely removed with HJT. If you visit a sute that requires them, they will be downloaded. This is for active x in general.

The ones that are listed appear to be java related. The first one looks to be version 5 update 6. The others look like they may be failed active x installs.

Question: When you first tried to update your java, did you install or try to install the activex component? This is not required.

I would suggest fixing the lines, then going to add/remove programs and uninstall all versions of java. Reboot and try to install the java from the link I posted earlier.


REDACTED

  • Guest
Re: New User with multiple viruses that somehow got past Avast...
« Reply #54 on: September 26, 2008, 08:47:50 PM »
Wyrmrider, Oldman, and others who were so gracious to take time out of their lives for almost a week to help me with this problem;THANK YOU so much! It seems that I have finally gotten "bug" free and all software updated, including JAVA (it was quite a torturous event in itself).

Just wanted to let you know how much I appreciate your help.

God Bless

Rod Bond
www.rodbond.com

wyrmrider

  • Guest
Re: New User with multiple viruses that somehow got past Avast...
« Reply #55 on: September 26, 2008, 09:00:13 PM »
nice pics
good work

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89006
  • No support PMs thanks
Re: New User with multiple viruses that somehow got past Avast...
« Reply #56 on: September 26, 2008, 11:04:07 PM »
You're welcome, glad we could help.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline oldman

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 4142
  • Some days..... MOS...this bug's for you
Re: New User with multiple viruses that somehow got past Avast...
« Reply #57 on: September 27, 2008, 06:59:25 PM »
You're welcome. How did you resolve the java issue?