iobit security 360 scan

Hi There,
When i do the scan with iobit 360 this is the report i get:

IObit Security 360

OS:Windows XP
Version:1.4.5.67
Define Version:1722
Time Elapsed:00:03:06
Objects Scanned:48216
Threats Found:8

|Name|Type|Description|ID|
Backdoor.Trojan, Registry Value, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Value=Taskman, 4-24908
Trojan.Backdoor, File, C:\Documents and Settings\master\Local Settings\Temporary Internet Files\Content.IE5\6NNGNZZN\cfekiojk[1].exe, 11-7702
Injector.ABN, File, C:\Documents and Settings\master\Start Menu\Programs\Startup\2faa6mm.exe, 11-8649
Injector.ABN, File, C:\Documents and Settings\master\Start Menu\Programs\Startup\66m86y8.exe, 11-8649
Injector.ABN, File, C:\Documents and Settings\master\Start Menu\Programs\Startup\70jfaa6.exe, 11-8649
Injector.ABN, File, C:\Documents and Settings\master\Start Menu\Programs\Startup\9w1sooj.exe, 11-8649
Injector.ABN, File, C:\Documents and Settings\master\Start Menu\Programs\Startup\c60op0a1wc.exe, 11-8649
Injector.ABN, File, C:\Documents and Settings\master\Start Menu\Programs\Startup\m81tupv6.exe, 11-8649

In my start up:

C:\Documents and Settings\master\Start Menu\Programs\Startup
i get all this files:
oaavmmh.exe,oeezqll.exe,onyozvq.exe,owwriid.exe,2hc600.exe,2jeuk1l.exe,3efagmm.exe,6aa6mm6.exe and another around 50 same files.
Cant do the screen shot but you might get an idea.

Can you shed some light on it?
Thanks

I am sorry mate I don't quite understand your question. :dunce:

It seems to think that it has found malware...........are they false positives?

I would suggest scanning with Malwarebytes, Spybot S& D and A-Squared.

At least confirm the suspicions?

Cheers :)

And it was scanned with some chinese crapware that probably came with a box of cereal, at that.
Heh thats cute...

Quote:

---

Originally Posted by The-Spec

And it was scanned with some chinese crapware that probably came with a box of cereal, at that.
Heh thats cute...

---

Hmmm, I guess "Cerial Killer" really DID do more than make a funny movie about typing random yet funny keys into a screen saver. :)

I knew there was something about that guy! He played in SLC Punk Too!

gore - That is your second 'Hackers' reference in about a week. I am starting to get worried. :-P

Please don't ask us to teach you to hack. :D

You don't have to teach me, I have all kinds of bladed tools :)

I need to try and make a Horror Geek movie... "Hacked up for Barbecue" or something... Lol. "He breaks into your computer, and then your skull!"..... Oh yea, I can see tht working out lol.

Heh. Can I pre-order a copy?

LOL if you pre-order enough, I might have funding to start it ;)

Do a scan with Trend Micros' housecall: housecall.trendmicro.com

Since i've seen trend miss quite a few of new malware you can also do a scan at safety.live.com (its by microsoft).

I would advise you to quit on the AV that you have and get a free copy of microsoft's security essentials. It's free if you have a genuine copy of windows. I wouldnt waste money on any AV if my OS was not genuine. I hope you get the point.

Quote:

---

And it was scanned with some chinese crapware that probably came with a box of cereal, at that.
Heh thats cute...

---

IObit is an Australian outfit............remember them?.........they fought alongside you in VietNam........................the Chinese..............they supplied the Kong :rolleyes: And IOBit is free for private use so you don't need to buy a box of cereal :p

The "problem" with IOBit is it uses some pretty fancy heuristics and stuff, so it might come up with false positives.

That is why I suggested trying other products. You might also submit your suspicious files to VirusTotal and have them scanned by the top twenty or so anti-malware products.

http://www.virustotal.com/

EDIT:

Quote:

---

I would advise you to quit on the AV that you have and get a free copy of microsoft's security essentials.

---

I would not.................you don't know if the Microsoft product will detect what IOBit already claims to have?

What I would suggest is getting Secunia PSI and the File Hippo Update Scanner................keep everything up to date? I have seen plenty of false positives from old apps I should have deleted ages before. They don't match more recent versions so your anti-malware is quite rightly suspicious?

@ unvi$ible:

Get the latest "Hijack This" and run it. Then submit the log here:

http://www.hijackthis.de/

:)

I would whole heartedly agree with nihil on this one. MalwareBytes AntiMalware is incredible.

Spybot S&D is pretty good too. I love the immunize feature. Though that goes back to the blacklist vs whitelist issue.

I don't have much experience with A-Squared, but I have heard good things about it.

Usually, I will run a MalwareBytes quick scan in safemode, then boot into normal mode and do a full scan with it. If items are still found on the full scan, I will reboot, and do a full scan again. If malicious items are still found, I usually start thinking about backing up, and reloading the OS.

I have gotten to the point with my systems, where if I have an infection, it is easier to reload than to fight it. I have backups of just about everything I would need in that event. If I am bored, and just want to see what these things are doing, I will grab a copy of SecCheck [http://www.mynetwatchman.com/tools/sc/], and Mandiant Highlighter [http://www.mandiant.com/products/fre.../highlighter/], and try to figure out which files/processes etc are causing the problem. It can make a dull evening pretty interesting. I have a couple of VMs that I use just for checking out infections.

http://www.siteadvisor.com/sites/iobit.com

Probably isn't false positives. More like iobit's own software and toolbars are being detected as malware.

Quote:

---

Probably isn't false positives. More like iobit's own software and toolbars are being detected as malware

---

And maybe you have a dog turd for a brain?.

:D

Iobit was and still is a chinese outfit. IObit gets its money installing toolbars without permission. And in turn these advertising agencies write false reviews and trolls siteadvisor in attempt to keep them from being flagged in the red.

But the actual controversy stems from them stealing signatures from Malwarebytes. And malwarebytes in turn created fake signatures for legit programs.

Do you really want these people hooking global libraries and "scanning" your documents and files? Get rid of these programs and setup a policy people...