ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
ClamWin Free Antivirus Forum Index » Virus Scanner
Reply to topic
Trojan.Agent-17870 Found By Scan - Now What???
thall89553


Joined: 22 Jul 2006
Posts: 0
Post Posted: Sun Apr 20, 2008 3:10 pm Reply with quote
This morning i was alerted to a virus being found during a scan. Can someone tell me who to properly take care of this? Here is my report.



Scan Started Sun Apr 20 01:30:00 2008
-------------------------------------------------------------------------------

*** Scanning Programs in Computer Memory ***


*** Scanned 37 processes - 424 modules ***
*** Computer Memory Scan Completed ***

C:\I386\MSRDP.CAB: Trojan.Agent-17870 FOUND
C:\I386\SASETUP.MSI: Trojan.Agent-17870 FOUND
C:\Program Files\SWsoft\Plesk\admin\htdocs\msrdp.cab: Trojan.Agent-17870 FOUND
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1052C01907094EE29DED3AD19C686D29.MAI: Email.Faketube FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1052C01907094EE29DED3AD19C686D29.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1D904F62D7DB4507A17266669052B0D7.MAI: Email.Faketube FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1D904F62D7DB4507A17266669052B0D7.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\204454A4074744F8ABA0EB1ED5B21BAB.MAI: Email.Faketube FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\204454A4074744F8ABA0EB1ED5B21BAB.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\2194E7B9EE944720AF890B9BDA7D3297.MAI: Email.Faketube FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\2194E7B9EE944720AF890B9BDA7D3297.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\2D2E854CC4AA488C920F47AC08E4A34A.MAI: Email.FreeGame-1 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\2D2E854CC4AA488C920F47AC08E4A34A.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\3B0CDA1E852E48AF93996512D8C91DFA.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\3B0CDA1E852E48AF93996512D8C91DFA.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\4683F5FB9C4C40AD97A49BEB0580500B.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\4683F5FB9C4C40AD97A49BEB0580500B.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\4EAE6F1352634E5BBD704C5EB7802EC7.MAI: Email.Foolball-3 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\4EAE6F1352634E5BBD704C5EB7802EC7.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\702B682D0F7C45D9B6AC7B3BB60F434C.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\702B682D0F7C45D9B6AC7B3BB60F434C.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\7172E3CAF77F46C99FE34293497FB2A0.MAI: Email.Foolball-3 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\7172E3CAF77F46C99FE34293497FB2A0.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\AE40F1BEB41B418C9F27C2AB6874B383.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\AE40F1BEB41B418C9F27C2AB6874B383.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\C68E11E9F4484FD4A198AECF2B20DAFF.MAI: Email.FreeGame-1 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\C68E11E9F4484FD4A198AECF2B20DAFF.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\DAE419D71806417292A0D2896AEF34AD.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\DAE419D71806417292A0D2896AEF34AD.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\DF61E3B24A944ADFAAB0D5875C896AB9.MAI: Email.Foolball FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\DF61E3B24A944ADFAAB0D5875C896AB9.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\E89D63875E44402D867AE15BC9254224.MAI: Email.Faketube FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\E89D63875E44402D867AE15BC9254224.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\EA7E6853B0BE4FE282C2B4BFD1637492.MAI: Email.Faketube FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\EA7E6853B0BE4FE282C2B4BFD1637492.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\F264DE555A914056ADD05C9D7A3C5AC7.MAI: Email.Foolball FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\F264DE555A914056ADD05C9D7A3C5AC7.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\FAF7768EDDBB490E9B0CCFC81440513A.MAI: Email.Foolball FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Postoffices\trans-king.com\MAILROOT\hr\Inbox\FAF7768EDDBB490E9B0CCFC81440513A.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\0C0821D46383431E9FBB80F272A0E9D6.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\0C0821D46383431E9FBB80F272A0E9D6.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\400B47C2240B4FB4922EEEFEBEFFBFF1.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\400B47C2240B4FB4922EEEFEBEFFBFF1.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\5C44B4362857482BA23112F9602D7222.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\5C44B4362857482BA23112F9602D7222.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\858EF413B8844EE5AB4982F56171DD40.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\858EF413B8844EE5AB4982F56171DD40.MAI: Not deleting/moving mailbox
C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\A8E395559F9C4A8DB139BD5C1F8940F2.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\Program Files\SWsoft\Plesk\Mail Servers\Mail Enable\Queues\SMTP\Outgoing\Messages\A8E395559F9C4A8DB139BD5C1F8940F2.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\brad\Inbox\00D604533D3648A1827C52F55A02CA7E.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\brad\Inbox\00D604533D3648A1827C52F55A02CA7E.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\brad\Inbox\C4238642CDE24ED89EDAAC90C826C918.MAI: Email.Ecard-36 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\brad\Inbox\C4238642CDE24ED89EDAAC90C826C918.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\steve\Inbox\356E6D1A82FA47BB88D6082A7B7CE162.MAI: Email.Ecard-36 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\steve\Inbox\356E6D1A82FA47BB88D6082A7B7CE162.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\steve\Inbox\4FD52B6503BD48AC8B737174963F302A.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\steve\Inbox\4FD52B6503BD48AC8B737174963F302A.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\steve\Inbox\F46BDE3C02E64745A0DD9629B258F1AD.MAI: Email.Ecard-36 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\srhydramatic.com\MAILROOT\steve\Inbox\F46BDE3C02E64745A0DD9629B258F1AD.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\el\Inbox\2B87CC0E15414D4CA63C93C0969E9C10.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\el\Inbox\2B87CC0E15414D4CA63C93C0969E9C10.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1052C01907094EE29DED3AD19C686D29.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1052C01907094EE29DED3AD19C686D29.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1D904F62D7DB4507A17266669052B0D7.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1D904F62D7DB4507A17266669052B0D7.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\204454A4074744F8ABA0EB1ED5B21BAB.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\204454A4074744F8ABA0EB1ED5B21BAB.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\E89D63875E44402D867AE15BC9254224.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\E89D63875E44402D867AE15BC9254224.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\EA7E6853B0BE4FE282C2B4BFD1637492.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\EA7E6853B0BE4FE282C2B4BFD1637492.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\0C0821D46383431E9FBB80F272A0E9D6.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\0C0821D46383431E9FBB80F272A0E9D6.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\400B47C2240B4FB4922EEEFEBEFFBFF1.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\400B47C2240B4FB4922EEEFEBEFFBFF1.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\5C44B4362857482BA23112F9602D7222.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\5C44B4362857482BA23112F9602D7222.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\858EF413B8844EE5AB4982F56171DD40.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\858EF413B8844EE5AB4982F56171DD40.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\A8E395559F9C4A8DB139BD5C1F8940F2.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc73568\Store\Queues\SMTP\Outgoing\Messages\A8E395559F9C4A8DB139BD5C1F8940F2.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1052C01907094EE29DED3AD19C686D29.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1052C01907094EE29DED3AD19C686D29.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1D904F62D7DB4507A17266669052B0D7.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\1D904F62D7DB4507A17266669052B0D7.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\204454A4074744F8ABA0EB1ED5B21BAB.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\204454A4074744F8ABA0EB1ED5B21BAB.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\2194E7B9EE944720AF890B9BDA7D3297.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\2194E7B9EE944720AF890B9BDA7D3297.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\2D2E854CC4AA488C920F47AC08E4A34A.MAI: Email.FreeGame-1 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\2D2E854CC4AA488C920F47AC08E4A34A.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\3B0CDA1E852E48AF93996512D8C91DFA.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\3B0CDA1E852E48AF93996512D8C91DFA.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\4683F5FB9C4C40AD97A49BEB0580500B.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\4683F5FB9C4C40AD97A49BEB0580500B.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\4EAE6F1352634E5BBD704C5EB7802EC7.MAI: Email.Foolball-3 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\4EAE6F1352634E5BBD704C5EB7802EC7.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\702B682D0F7C45D9B6AC7B3BB60F434C.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\702B682D0F7C45D9B6AC7B3BB60F434C.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\7172E3CAF77F46C99FE34293497FB2A0.MAI: Email.Foolball-3 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\7172E3CAF77F46C99FE34293497FB2A0.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\AE40F1BEB41B418C9F27C2AB6874B383.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\AE40F1BEB41B418C9F27C2AB6874B383.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\C68E11E9F4484FD4A198AECF2B20DAFF.MAI: Email.FreeGame-1 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\C68E11E9F4484FD4A198AECF2B20DAFF.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\DAE419D71806417292A0D2896AEF34AD.MAI: Email.FreeGame-2 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\DAE419D71806417292A0D2896AEF34AD.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\DF61E3B24A944ADFAAB0D5875C896AB9.MAI: Email.Foolball FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\DF61E3B24A944ADFAAB0D5875C896AB9.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\E89D63875E44402D867AE15BC9254224.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\E89D63875E44402D867AE15BC9254224.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\EA7E6853B0BE4FE282C2B4BFD1637492.MAI: Email.Faketube FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\EA7E6853B0BE4FE282C2B4BFD1637492.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\F264DE555A914056ADD05C9D7A3C5AC7.MAI: Email.Foolball FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\F264DE555A914056ADD05C9D7A3C5AC7.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\FAF7768EDDBB490E9B0CCFC81440513A.MAI: Email.Foolball FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Postoffices\trans-king.com\MAILROOT\hr\Inbox\FAF7768EDDBB490E9B0CCFC81440513A.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Queues\SMTP\Outgoing\Messages\0C0821D46383431E9FBB80F272A0E9D6.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Queues\SMTP\Outgoing\Messages\0C0821D46383431E9FBB80F272A0E9D6.MAI: Not deleting/moving mailbox
C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Queues\SMTP\Outgoing\Messages\400B47C2240B4FB4922EEEFEBEFFBFF1.MAI: Email.Ecard-27 FOUND
WARNING: \\?\C:\RECYCLER\S-1-5-21-3982061935-461182301-1937001268-1017\Dc75536\Store\Queues\SMTP\Outgoing\Messages\400B47C2240B4FB4922EEEFEBEFFBFF1.MAI: Not deleting/moving mailbox
C:\WINDOWS\$NtServicePackUninstall$\sasetup.msi: Trojan.Agent-17870 FOUND
C:\WINDOWS\ServicePackFiles\i386\sasetup.msi: Trojan.Agent-17870 FOUND
C:\WINDOWS\system32\sasetup.msi: Trojan.Agent-17870 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 261668
Engine version: 0.93
Scanned directories: 44183
Scanned files: 430362
Infected files: 65
Data scanned: 11738.55 MB
Time: 15918.360 sec (265 m 18 s)
View user's profileSend private message
hybris


Joined: 21 Apr 2008
Posts: 0
Post Posted: Mon Apr 21, 2008 4:33 pm Reply with quote
According to ClamWin 0.93 I have the exact same Trojan on my system.

I think this is a false positive. The previous version of ClamWin does not detect it and according to this site (https://www.virustotal.com/) the other anti-virus products do not detect this file as a virus.

I think the latest version of ClamWin has some problems.
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 0
Post Posted: Mon Apr 21, 2008 10:11 pm Reply with quote
this is not caused by the clamwin version but the virus signature database.
please submit the false positive at:
https://cgi.clamav.net/sendvirus.cgi
View user's profileSend private message
Trojan.Agent-17870 Found By Scan - Now What???
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
 		All times are GMT  
Page 1 of 1  
  
  
ClamWin Free Antivirus Forum Index » Virus Scanner
 Reply to topic