Re: Puzzling log file contents

Re: Puzzling log file contents
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Re: Puzzling log file contents Ann 11-23-2005
Posted by =?Utf-8?B?QW5u?= on November 23, 2005, 11:35 am
If you were  Registered and logged in, you could reply and use other advanced thread options


I suddenly can't save files except to my removable drive. I'll be looking at
a website and jump to another without even touching the mouse. I'm not
talking about pop-up ads. I jump to other websites, sometimes in rapid
succession. Programs (Office and Windows Accessories) freeze. The screen
freezes. Emails don't arrive at their destination, both to me and from me. If
I leave the computer on, it'll connect to the Net. (I have Automatic Updates
turned off, so it's not that.) Sometimes I have to log out twice or log on
twice, like someone is on the computer with me but not in exact synch. It's
like someone is networked to my computer, but I have LAN turned off. I have
RegProtect, which every time I use my computer reports that someone is trying
to alter networking permissions. Etc., etc., etc. When I do reformat, they
seem to get right back on immediately. That is, the abovementioned problems
occur.


> DO NOT REFORMAT !
>
> That would be a knee jerk reaction to what is sofar a non-event !
>
> That's a total misinterpretation of the log. It means the File Handles of the
respective
> files are held open by the OS thus the files can't be scanned. Other cases it
could be a
> situation that are protected by the OS. In any case, this looks like a normal
Trend Micro
> scan log to me and I have viewed many generated by the Trend Micro's Sysclean
utility. I
> have also replied to this question numerous times. If you were to reformat
the hard disk, a
> new report would look extremely similar to the log you posted.
>
> You stated "My computer behaves like it has a Trojan"
> What makes you come to that conclusion. You didn't post anything to
substantiate that
> claim.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Posted by David H. Lipman on November 23, 2005, 11:43 am
If you were  Registered and logged in, you could reply and use other advanced thread options

|
| I suddenly can't save files except to my removable drive. I'll be looking at
| a website and jump to another without even touching the mouse. I'm not
| talking about pop-up ads. I jump to other websites, sometimes in rapid
| succession. Programs (Office and Windows Accessories) freeze. The screen
| freezes. Emails don't arrive at their destination, both to me and from me. If
| I leave the computer on, it'll connect to the Net. (I have Automatic Updates
| turned off, so it's not that.) Sometimes I have to log out twice or log on
| twice, like someone is on the computer with me but not in exact synch. It's
| like someone is networked to my computer, but I have LAN turned off. I have
| RegProtect, which every time I use my computer reports that someone is trying
| to alter networking permissions. Etc., etc., etc. When I do reformat, they
| seem to get right back on immediately. That is, the abovementioned problems
| occur.
|


For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

* SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser
Helper Objects
that may be on the PC.

* BHODemon
http://www.definitivesolutions.com/bhodemon.htm

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal
Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the
PC.

You can choose to go to each menu item and just download the needed files or you
can
download the files and perform a scan in Normal Mode. Once you have downloaded
the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode
[F8 key
during boot] and re-run the menu again and choose which scanner you want to run
in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive
PDF help
file.


* * * Please report back your results * * *




--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by karl levinson, mvp on November 24, 2005, 8:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options
None of that sounds like a virus to me.

If by reformat you mean also reinstalling Windows, I suspect you may be
reformatting way too often.

>
>
> I suddenly can't save files except to my removable drive. I'll be looking
> at
> a website and jump to another without even touching the mouse. I'm not
> talking about pop-up ads. I jump to other websites, sometimes in rapid
> succession. Programs (Office and Windows Accessories) freeze. The screen
> freezes. Emails don't arrive at their destination, both to me and from me.
> If
> I leave the computer on, it'll connect to the Net. (I have Automatic
> Updates
> turned off, so it's not that.) Sometimes I have to log out twice or log on
> twice, like someone is on the computer with me but not in exact synch.
> It's
> like someone is networked to my computer, but I have LAN turned off. I
> have
> RegProtect, which every time I use my computer reports that someone is
> trying
> to alter networking permissions. Etc., etc., etc. When I do reformat, they
> seem to get right back on immediately. That is, the abovementioned
> problems
> occur.



Similar ThreadsPosted
Re: Puzzling log file contents November 24, 2005, 11:21 am
Re: Puzzling log file contents November 24, 2005, 8:25 am
Puzzling log file contents November 23, 2005, 12:48 am
HOSTS File FAQ - Testing the HOSTS File November 4, 2005, 11:21 pm
Zip File Virus *HELP* June 28, 2006, 1:05 pm
File disappeared May 21, 2007, 6:01 pm
unknown file... April 12, 2008, 7:15 pm
cannot delete trojan file July 6, 2005, 5:08 pm
hosts file "missing" February 21, 2006, 3:48 pm
Possible Hosts File Hijack June 2, 2006, 8:37 pm

The site map in XML format XML site map

Contact Us | Privacy Policy