cancel
Showing results for 
Search instead for 
Did you mean: 
kellym
Level 7
Report Inappropriate Content
Message 1 of 5

VirusScan not finding virus??

When I run a full scan, I start seeing files listed as being scanned (at about the 96% point) that start with:

HKU\S-1-5-21-2425956563 and then have names like Casino king.com, Your mom has ***.com, adult-***-***, hardcorepartying, hot youth, asia teens....you get the idea.

The file names are too long for the screen, so there's .......in the middle of them. There are a bunch of them Smiley Sad

VirusScan is not picking these up as viruses. Malwarebytes has been run and didn't recognize them as problems.

Any idea what is going on here and what I can do about it?

Thanks!
Kelly
4 Replies

RE: VirusScan not finding virus??

What you are describing are not virusus. If you want to get rid of that stuff, run your browser cleaner.
kellym
Level 7
Report Inappropriate Content
Message 3 of 5

RE: VirusScan not finding virus??

I do delete the browsing history before I close the computer every time. Are you saying that these are pages that have been browsed? Because this is on my business computer and I'm the only one with access to it, so I know that's not a possibility. The only thought I had was could it be a list of blocked or forbidden sites? Not sure how those would be listed during a scan??
Thanks for your response!
Kelly

Re: RE: VirusScan not finding virus??

It sounds like you're seeing keys scanned in the registry...

for example:

* REGKEY:HKU\S-1-5-21-1202660629-1425521274-682003330-1003\software\microsoft\windows\currentversion\ext\stats\{d27cdb6e-ae6d-11cf-96b8-444553540000}
REGKEY:HKU\.DEFAULT\software\microsoft\windows\currentversion\internet settings\zonemap\domains\media-motor.net
REGKEY:HKU\S-1-5-19\software\microsoft\windows\currentversion\internet settings\zonemap\domains\media-motor.net
REGKEY:HKU\S-1-5-20\software\microsoft\windows\currentversion\internet settings\zonemap\domains\media-motor.net
REGKEY:HKU\S-1-5-21-1202660629-1425521274-682003330-1003\software\microsoft\windows\currentversion\internet settings\zonemap\domains\media-motor.net

Those entries you see going by with the "less-than-PC" names are located inside keys in your system's registry and could have been there from any users prior to you if your work machine wasn't re-imaged before you got it.

I would not advise editting your registry (even with a registry cleaning application) unless you are an expert user AND have completely backed up your machine before you do ANYTHING inside the registry.

You should contact your company's help desk to see if their tech's can clean your machine's registry (after you back your files up)

-jc

Message was edited by: jcarson on 11/4/09 2:08 PM
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 5

Re: VirusScan not finding virus??

If you have McAfee Internet Security or McAfee Total Protection, you'll see a link on the Security Center called 'Maintain Computer'.  There you will find a McAfee app called 'QuickClean'.  Run that and it will clean up your registry files, history and more.  This might help.

Product Manager, McAfee Consumer Software