Hello,
First things first, this is not my system that I am having issues with, it's my Mum's.
After AVAST reported a virus, it recommended running a boot time scan to remove it fully. Since a full scan had not been run on the system in a while, I ran the boot time scan. Once finished, it has reported 11 infections and had moved them all to the chest/quarantine.
Log pasted below. I'm concerned about the Nectar Toolbar entries (in bold), since she does use the Nectar toolbar regularly to earn Nectar Points (A form of reward points) when she searches the internet. She needs this working properly, and it is a safe program. Nectar Search Toolbar | Collect Points for Searching Online | Nectar
----START OF LOG----
02/18/2013 16:55
Scan of all local drives
File C:\$Recycle.Bin\S-1-5-21-3591956005-4184743662-214731035-1000\$REI4702.zip|>DISK1\ArtWorks.cab|>_A871402A717A40359CD6F22A4B0CA7BF Error 42127 {CAB archive is corrupted.}
File C:\$Recycle.Bin\S-1-5-21-3591956005-4184743662-214731035-1000\$REI4702.zip|>DISK1\ArtWorks.cab Error 42125 {ZIP archive is corrupted.}
File C:\Program Files (x86)\FunWebProducts\Installr\1.bin\F3EZSETP.DLL is infected by Win32:FunWeb [PUP], Moved to chest
File C:\Program Files (x86)\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL is infected by Win32
UP-gen [PUP], Moved to chest
File C:\Program Files (x86)\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL is infected by Win32:FunWeb-K [PUP], Moved to chest
File C:\Program Files (x86)\Nectar Search Toolbar\Toolbar.dll is infected by Win32:BHO-AHO [PUP], Moved to chest
File C:\Users\Claire\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{EF9B5240-77D5-11DF-990B-002564854802}.dat|>_5_KjjaqfajN2c0uzgv1l4qy5nfWe Error 42144 {OLE archive is corrupted.}
File C:\Users\Claire\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\DDI12RCE\setup[1].exe is infected by Win32:Malware-gen, Moved to chest
File C:\Users\Claire\AppData\LocalLow\FCTB000061465\Toolbar\Toolbar.dll is infected by Win32UP-gen [PUP], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\Cid.class is infected by Java:Agent-UD [Expl], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\ClassId.class is infected by Java:Agent-US [Expl], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\ClassType.class is infected by Java:Agent-UE [Expl], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\MapYandex.class is infected by Java:Agent-UF [Expl], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\VirtualTable.class is infected by Java:Agent-UP [Expl], Moved to chest
Number of searched folders: 36966
Number of tested files: 1354242
Number of infected files: 11
----END OF LOG----
Any help or advice would be appreciated.
Thanks,
Stephen
First things first, this is not my system that I am having issues with, it's my Mum's.
After AVAST reported a virus, it recommended running a boot time scan to remove it fully. Since a full scan had not been run on the system in a while, I ran the boot time scan. Once finished, it has reported 11 infections and had moved them all to the chest/quarantine.
Log pasted below. I'm concerned about the Nectar Toolbar entries (in bold), since she does use the Nectar toolbar regularly to earn Nectar Points (A form of reward points) when she searches the internet. She needs this working properly, and it is a safe program. Nectar Search Toolbar | Collect Points for Searching Online | Nectar
----START OF LOG----
02/18/2013 16:55
Scan of all local drives
File C:\$Recycle.Bin\S-1-5-21-3591956005-4184743662-214731035-1000\$REI4702.zip|>DISK1\ArtWorks.cab|>_A871402A717A40359CD6F22A4B0CA7BF Error 42127 {CAB archive is corrupted.}
File C:\$Recycle.Bin\S-1-5-21-3591956005-4184743662-214731035-1000\$REI4702.zip|>DISK1\ArtWorks.cab Error 42125 {ZIP archive is corrupted.}
File C:\Program Files (x86)\FunWebProducts\Installr\1.bin\F3EZSETP.DLL is infected by Win32:FunWeb [PUP], Moved to chest
File C:\Program Files (x86)\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL is infected by Win32
UP-gen [PUP], Moved to chestFile C:\Program Files (x86)\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL is infected by Win32:FunWeb-K [PUP], Moved to chest
File C:\Program Files (x86)\Nectar Search Toolbar\Toolbar.dll is infected by Win32:BHO-AHO [PUP], Moved to chest
File C:\Users\Claire\AppData\Local\Microsoft\Internet Explorer\Recovery\Active\{EF9B5240-77D5-11DF-990B-002564854802}.dat|>_5_KjjaqfajN2c0uzgv1l4qy5nfWe Error 42144 {OLE archive is corrupted.}
File C:\Users\Claire\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\DDI12RCE\setup[1].exe is infected by Win32:Malware-gen, Moved to chest
File C:\Users\Claire\AppData\LocalLow\FCTB000061465\Toolbar\Toolbar.dll is infected by Win32
UP-gen [PUP], Moved to chestFile C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\Cid.class is infected by Java:Agent-UD [Expl], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\ClassId.class is infected by Java:Agent-US [Expl], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\ClassType.class is infected by Java:Agent-UE [Expl], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\MapYandex.class is infected by Java:Agent-UF [Expl], Moved to chest
File C:\Users\Claire\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\1cb50536-38bd1437|>buildService\VirtualTable.class is infected by Java:Agent-UP [Expl], Moved to chest
Number of searched folders: 36966
Number of tested files: 1354242
Number of infected files: 11
----END OF LOG----
Any help or advice would be appreciated.
Thanks,
Stephen
