4 Replies Latest reply: Nov 4, 2009 3:08 PM by jcarson RSS

    VirusScan not finding virus??

      When I run a full scan, I start seeing files listed as being scanned (at about the 96% point) that start with:

      HKU\S-1-5-21-2425956563 and then have names like Casino king.com, Your mom has ***.com, adult-***-***, hardcorepartying, hot youth, asia teens....you get the idea.

      The file names are too long for the screen, so there's .......in the middle of them. There are a bunch of them :(

      VirusScan is not picking these up as viruses. Malwarebytes has been run and didn't recognize them as problems.

      Any idea what is going on here and what I can do about it?

      Thanks!
      Kelly
        • 1. RE: VirusScan not finding virus??
          What you are describing are not virusus. If you want to get rid of that stuff, run your browser cleaner.
          • 2. RE: VirusScan not finding virus??
            I do delete the browsing history before I close the computer every time. Are you saying that these are pages that have been browsed? Because this is on my business computer and I'm the only one with access to it, so I know that's not a possibility. The only thought I had was could it be a list of blocked or forbidden sites? Not sure how those would be listed during a scan??
            Thanks for your response!
            Kelly
            • 3. Re: RE: VirusScan not finding virus??
              jcarson

              It sounds like you're seeing keys scanned in the registry...

               

              for example:

               

              * REGKEY:HKU\S-1-5-21-1202660629-1425521274-682003330-1003\software\microsoft\windows\currentversion\ext\stats\{d27cdb6e-ae6d-11cf-96b8-44 4553540000}
              REGKEY:HKU\.DEFAULT\software\microsoft\windows\currentversion\internet settings\zonemap\domains\media-motor.net
              REGKEY:HKU\S-1-5-19\software\microsoft\windows\currentversion\internet settings\zonemap\domains\media-motor.net
              REGKEY:HKU\S-1-5-20\software\microsoft\windows\currentversion\internet settings\zonemap\domains\media-motor.net
              REGKEY:HKU\S-1-5-21-1202660629-1425521274-682003330-1003\software\microsoft\wind ows\currentversion\internet settings\zonemap\domains\media-motor.net

               

              Those entries you see going by with the "less-than-PC" names are located inside keys in your system's registry and could have been there from any users prior to you if your work machine wasn't re-imaged before you got it.

               

              I would not advise editting your registry (even with a registry cleaning application) unless you are an expert user AND have completely backed up your machine before you do ANYTHING inside the registry.

               

              You should contact your company's help desk to see if their tech's can clean your machine's registry (after you back your files up)

               

              -jc

               

               

              Message was edited by: jcarson on 11/4/09 2:08 PM
              • 4. Re: VirusScan not finding virus??
                tromine

                If you have McAfee Internet Security or McAfee Total Protection, you'll see a link on the Security Center called 'Maintain Computer'.  There you will find a McAfee app called 'QuickClean'.  Run that and it will clean up your registry files, history and more.  This might help.