Random pop-ups......anti-vir constantly blocking somthing..

[level18barbarian]

sorry....i cant figure out how to get an antivir log to post....

heres the Kaspersky log:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Sunday, March 14, 2010
Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Wednesday, February 24, 2010 05:19:28
Records in database: 3638750
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan statistics:
Objects scanned: 382094
Threats found: 1
Infected objects found: 1
Suspicious objects found: 0
Scan duration: 11:23:38


File name / Threat / Threats count
C:\Backup_011106\d_drive\Microsoft Games\Age of Empires\age_of_empires_no_cd_10.rar Infected: Trojan.Win32.Agent.disa 1

Selected area has been scanned.

[deltalima]

Hi level18barbarian,

i cant figure out how to get an antivir log to post

Could you manually type a few lines of the log into your next post please?

I need to know what is being blocked.

[level18barbarian]

Avira AntiVir Premium
Report file date: Wednesday, February 24, 2010 15:21

Scanning for 1789987 virus strains and unwanted programs.

Licensed to: chris manley
Serial number: 2200105408-PEPWE-0001
Platform: Windows XP
Windows version: (Service Pack 3) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: MINE

Version information:
BUILD.DAT : 8.2.0.385 21404 Bytes 10/23/2009 13:36:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 11/25/2008 12:01:21
AVSCAN.DLL : 8.1.4.0 40705 Bytes 5/26/2008 16:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 6/12/2008 21:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 5/26/2008 16:58:52
ANTIVIR0.VDF : 7.10.0.0 19875328 Bytes 11/6/2009 12:03:02
ANTIVIR1.VDF : 7.10.3.84 5532016 Bytes 1/26/2010 12:00:58
ANTIVIR2.VDF : 7.10.4.132 1265568 Bytes 2/23/2010 03:07:07
ANTIVIR3.VDF : 7.10.4.140 79360 Bytes 2/24/2010 23:20:33
Engineversion : 8.2.1.172
AEVDF.DLL : 8.1.1.3 106868 Bytes 1/23/2010 12:00:39
AESCRIPT.DLL : 8.1.3.16 827771 Bytes 3/10/2010 12:00:43
AESCN.DLL : 8.1.4.0 127348 Bytes 1/28/2010 12:00:43
AESBX.DLL : 8.1.1.1 246132 Bytes 11/20/2009 12:03:20
AERDL.DLL : 8.1.4.2 479602 Bytes 3/5/2010 12:00:37
AEPACK.DLL : 8.2.0.8 426357 Bytes 3/5/2010 12:00:35
AEOFFICE.DLL : 8.1.0.39 196987 Bytes 3/10/2010 12:00:40
AEHEUR.DLL : 8.1.1.7 2326902 Bytes 3/10/2010 12:00:39
AEHELP.DLL : 8.1.10.0 237942 Bytes 1/14/2010 12:00:36
AEGEN.DLL : 8.1.1.87 369013 Bytes 3/10/2010 12:00:34
AEEMU.DLL : 8.1.1.0 393587 Bytes 10/3/2009 11:00:34
AECORE.DLL : 8.1.11.1 184694 Bytes 2/20/2010 12:00:36
AEBB.DLL : 8.1.0.3 53618 Bytes 10/15/2008 11:00:37
AVWINLL.DLL : 1.0.0.12 15105 Bytes 7/9/2008 17:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 5/16/2008 18:28:01
AVREP.DLL : 8.0.0.7 159784 Bytes 3/7/2010 12:00:35
AVREG.DLL : 8.0.0.1 33537 Bytes 5/9/2008 20:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 2/12/2008 17:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 6/12/2008 21:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 1/23/2008 02:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 6/12/2008 21:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 1/25/2008 21:05:10
RCIMAGE.DLL : 8.0.0.51 2564353 Bytes 6/12/2008 22:29:30
RCTEXT.DLL : 8.0.51.0 86273 Bytes 6/27/2008 20:00:56

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: H:\Program Files\Avira\AntiVir PersonalEdition Premium\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, H:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: Wednesday, February 24, 2010 15:21

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'ScanningProcess.exe' - '1' Module(s) have been scanned
Scan process 'jucheck.exe' - '1' Module(s) have been scanned
Scan process 'java.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'dllhost.exe' - '1' Module(s) have been scanned
Scan process 'ehmsas.exe' - '1' Module(s) have been scanned
Scan process 'iPodService.exe' - '1' Module(s) have been scanned
Scan process 'avwebgrd.exe' - '1' Module(s) have been scanned
Scan process 'avmailc.exe' - '1' Module(s) have been scanned
Scan process 'MsPMSPSv.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'jqs.exe' - '1' Module(s) have been scanned
Scan process 'ehSched.exe' - '1' Module(s) have been scanned
Scan process 'ehRecvr.exe' - '1' Module(s) have been scanned
Scan process 'CTSVCCDA.EXE' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'avesvc.exe' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'MEDIADET.EXE' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'CTNOTIFY.EXE' - '1' Module(s) have been scanned
Scan process 'ehtray.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'GoogleCrashHandler.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
48 processes with 48 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Master boot sector HD2
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Master boot sector HD3
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Master boot sector HD4
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.
Master boot sector HD5
[INFO] No virus was found!
[WARNING] System error [21]: The device is not ready.

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'H:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '56' files ).


Starting the file scan:

Begin scan in 'C:\' <Dak>
Begin scan in 'H:\'
H:\pagefile.sys
[WARNING] The file could not be opened!


End of the scan: Wednesday, February 24, 2010 17:31
Used time: 2:09:58 Hour(s)

The scan has been done completely.

19186 Scanning directories
930063 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
930062 Files not concerned
2968 Archives were scanned
5 Warnings
0 Notes

[deltalima]

Hi level18barbarian,

antivir still blocking like crazy

It's what antivir is blocking that I need to know.

Please give a couple of examples of the message that you see when antivir blocks something.

[level18barbarian]

heres a couple of examples.....i've been on all day and it only blocked once.....maybe i'm ok, and these are just a few rogues...

EXP/Pidief.czz
TR/PWS.Sinowal.Gen

[deltalima]

Hi level18barbarian,

heres a couple of examples.....i've been on all day and it only blocked once.....maybe i'm ok, and these are just a few rogues...

EXP/Pidief.czz
TR/PWS.Sinowal.Gen

And does it give any more information, such as file name and location? I really need as much information as you can provide.

[Katana]

Due to lack of response, this topic is now closed.

If you still require help, please open a new thread in the Infected? Virus, malware, adware, ransomware, oh my! forum, include a fresh FRST log, and wait for a new helper.