View Single Post
Old 05-05-2008   #3 (permalink)
Peter Flindt
Guest


 

Re: Virus or trojaners on a website are a little bit annoying...

StephenB wrote :
Quote:

> Peter Flindt <newsgroups@xxxxxx> wrote:
Quote:
Quote:

>> Hello,
>> today I click a little bit arround in the www and open a website where
>> OneCare thought there is a virus Virus:JS/Decdec.A, fine.
>>
>> BUT:
>> 1) I get the messagebox that OneCare found this virus, no more. I get
>> no infos that this virus are on a website.
>>
>> 2) In the windows eventlog I found:
>> ...
>> http://go.microsoft.com/fwlink/?link...tid=2147592807
>> file:\\?\C:\Users\USERNAME\AppData\Local\Temporäre
>> Internetdateien\Temporäre
>> Internetdateien\Low\Content.IE5\9QEP1ACJ\index3[1].htm
>> ....
>> with the additional text that there is an error 0x80508017 and the file
>> is on a write protect path.
>>
>> 3) I get an error message box, that it's impossible for OneCare to
>> remove this file and it's better to make a full system scan.
>>
>> I guess the reason for 2 and 3 was that I push the "Delete" button in
>> step 1.
>>
>> -Why I get the message in the eventlog for an already deleted file and
>> why Onecare sysy "impossible to delete" for an already delet file?
>>
>> -If I get a Virus on a website, is it really necessary to make a full
>> system scan?
>>
>> Peter
>> -
>>
> Hi, Peter.
> The virus was downloaded to your temporary Internet files and detected as it
> saved. Hence the warning. I can't say why OneCare can't delete the file, but
> you can delete the Temporary Internet Files and be done with it.
I guess there is somewhere a bug in on care. First messagebox ttell the
users, "Virus ABC found!", a link to more info, a button "Delete" and
another button. (Sorry I forget which on, "Cancel"?)
OK, but it seems to me that OneCare not regonize that the user push
"Delete". It seems to me that OneCare try to do something with the
already deleted file.

Peter

Quote:

> ...