Vista Forums
Vista Forums Home Join Vista Forums Donate Vista Tutorials Tags

Welcome to Vista Forums we are your forum to discuss Windows Vista x64 and x86 systems. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums

Go Back   Vista Forums > Windows Live > Live OneCare > OneCare AntiVirus

Virus or trojaners on a website are a little bit annoying...

Reply
 
Thread Tools Display Modes
Old 05-05-2008   #1
Peter Flindt
Guest
 
Posts: n/a

Virus or trojaners on a website are a little bit annoying...

Hello,
today I click a little bit arround in the www and open a website where
OneCare thought there is a virus Virus:JS/Decdec.A, fine.

BUT:
1) I get the messagebox that OneCare found this virus, no more. I get
no infos that this virus are on a website.

2) In the windows eventlog I found:
....
http://go.microsoft.com/fwlink/?link...tid=2147592807
file:\\?\C:\Users\USERNAME\AppData\Local\Temporäre
Internetdateien\Temporäre
Internetdateien\Low\Content.IE5\9QEP1ACJ\index3[1].htm
.....
with the additional text that there is an error 0x80508017 and the file
is on a write protect path.

3) I get an error message box, that it's impossible for OneCare to
remove this file and it's better to make a full system scan.

I guess the reason for 2 and 3 was that I push the "Delete" button in
step 1.

-Why I get the message in the eventlog for an already deleted file and
why Onecare sysy "impossible to delete" for an already delet file?

-If I get a Virus on a website, is it really necessary to make a full
system scan?

Peter
-


  Reply With Quote

Old 05-05-2008   #2
StephenB
Guest
 
Posts: n/a

Re: Virus or trojaners on a website are a little bit annoying...

Peter Flindt <newsgroups@xxxxxx> wrote:
Quote:

>Hello,
>today I click a little bit arround in the www and open a website where
>OneCare thought there is a virus Virus:JS/Decdec.A, fine.
>
>BUT:
>1) I get the messagebox that OneCare found this virus, no more. I get
>no infos that this virus are on a website.
>
>2) In the windows eventlog I found:
>...
>http://go.microsoft.com/fwlink/?link...tid=2147592807
> file:\\?\C:\Users\USERNAME\AppData\Local\Temporäre
>Internetdateien\Temporäre
>Internetdateien\Low\Content.IE5\9QEP1ACJ\index3[1].htm
>....
>with the additional text that there is an error 0x80508017 and the file
>is on a write protect path.
>
>3) I get an error message box, that it's impossible for OneCare to
>remove this file and it's better to make a full system scan.
>
>I guess the reason for 2 and 3 was that I push the "Delete" button in
>step 1.
>
>-Why I get the message in the eventlog for an already deleted file and
>why Onecare sysy "impossible to delete" for an already delet file?
>
>-If I get a Virus on a website, is it really necessary to make a full
>system scan?
>
>Peter
>-
>
Hi, Peter.
The virus was downloaded to your temporary Internet files and detected as it
saved. Hence the warning. I can't say why OneCare can't delete the file, but you
can delete the Temporary Internet Files and be done with it.
A full scan is a security precaution after any detection in case the threat
managed to deliver another payload before OneCare took action to block it. It's
up to you about doing the full scan. My feeling is that it is probably not
needed if you know where the virus was found and how it was received.
-steve
--
Stephen Boots sboots@xxxxxx
Microsoft MVP - Windows Live
Windows Live OneCare Forum Moderator
http://forums.microsoft.com/windowso....aspx?siteid=2
  Reply With Quote
Old 05-05-2008   #3
Peter Flindt
Guest
 
Posts: n/a

Re: Virus or trojaners on a website are a little bit annoying...

StephenB wrote :
Quote:

> Peter Flindt <newsgroups@xxxxxx> wrote:
Quote:
Quote:

>> Hello,
>> today I click a little bit arround in the www and open a website where
>> OneCare thought there is a virus Virus:JS/Decdec.A, fine.
>>
>> BUT:
>> 1) I get the messagebox that OneCare found this virus, no more. I get
>> no infos that this virus are on a website.
>>
>> 2) In the windows eventlog I found:
>> ...
>> http://go.microsoft.com/fwlink/?link...tid=2147592807
>> file:\\?\C:\Users\USERNAME\AppData\Local\Temporäre
>> Internetdateien\Temporäre
>> Internetdateien\Low\Content.IE5\9QEP1ACJ\index3[1].htm
>> ....
>> with the additional text that there is an error 0x80508017 and the file
>> is on a write protect path.
>>
>> 3) I get an error message box, that it's impossible for OneCare to
>> remove this file and it's better to make a full system scan.
>>
>> I guess the reason for 2 and 3 was that I push the "Delete" button in
>> step 1.
>>
>> -Why I get the message in the eventlog for an already deleted file and
>> why Onecare sysy "impossible to delete" for an already delet file?
>>
>> -If I get a Virus on a website, is it really necessary to make a full
>> system scan?
>>
>> Peter
>> -
>>
> Hi, Peter.
> The virus was downloaded to your temporary Internet files and detected as it
> saved. Hence the warning. I can't say why OneCare can't delete the file, but
> you can delete the Temporary Internet Files and be done with it.
I guess there is somewhere a bug in on care. First messagebox ttell the
users, "Virus ABC found!", a link to more info, a button "Delete" and
another button. (Sorry I forget which on, "Cancel"?)
OK, but it seems to me that OneCare not regonize that the user push
"Delete". It seems to me that OneCare try to do something with the
already deleted file.

Peter

Quote:

> ...

  Reply With Quote
Old 05-06-2008   #4
StephenB
Guest
 
Posts: n/a

Re: Virus or trojaners on a website are a little bit annoying...

Peter Flindt <newsgroups@xxxxxx> wrote:
Quote:

>StephenB wrote :
Quote:

>> Peter Flindt <newsgroups@xxxxxx> wrote:
>
Quote:
Quote:

>>> Hello,
>>> today I click a little bit arround in the www and open a website where
>>> OneCare thought there is a virus Virus:JS/Decdec.A, fine.
>>>
>>> BUT:
>>> 1) I get the messagebox that OneCare found this virus, no more. I get
>>> no infos that this virus are on a website.
>>>
>>> 2) In the windows eventlog I found:
>>> ...
>>> http://go.microsoft.com/fwlink/?link...tid=2147592807
>>> file:\\?\C:\Users\USERNAME\AppData\Local\Temporäre
>>> Internetdateien\Temporäre
>>> Internetdateien\Low\Content.IE5\9QEP1ACJ\index3[1].htm
>>> ....
>>> with the additional text that there is an error 0x80508017 and the file
>>> is on a write protect path.
>>>
>>> 3) I get an error message box, that it's impossible for OneCare to
>>> remove this file and it's better to make a full system scan.
>>>
>>> I guess the reason for 2 and 3 was that I push the "Delete" button in
>>> step 1.
>>>
>>> -Why I get the message in the eventlog for an already deleted file and
>>> why Onecare sysy "impossible to delete" for an already delet file?
>>>
>>> -If I get a Virus on a website, is it really necessary to make a full
>>> system scan?
>>>
>>> Peter
>>> -
>>>
>> Hi, Peter.
>> The virus was downloaded to your temporary Internet files and detected as it
>> saved. Hence the warning. I can't say why OneCare can't delete the file, but
>> you can delete the Temporary Internet Files and be done with it.
>
>I guess there is somewhere a bug in on care. First messagebox ttell the
>users, "Virus ABC found!", a link to more info, a button "Delete" and
>another button. (Sorry I forget which on, "Cancel"?)
>OK, but it seems to me that OneCare not regonize that the user push
>"Delete". It seems to me that OneCare try to do something with the
>already deleted file.
>
>Peter
You, know, that sounds possible, Peter. It does seem odd - if you press delete,
there would be nothing to clean - especially if the file was deleted
permanently.
-steve
--
Stephen Boots sboots@xxxxxx
Microsoft MVP - Windows Live
Windows Live OneCare Forum Moderator
http://forums.microsoft.com/windowso....aspx?siteid=2
  Reply With Quote
 
Reply

Thread Tools
Display Modes









Vistax64.com is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48