trojan or virus in system32. help me please!


Go Back   Computer Help Articles > Windows XP Security Admin
User Name
Password
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 01-05-2006, 05:39 AM
charley_n9
 
Posts: n/a
Default trojan or virus in system32. help me please!

hi, this is my problem,

my p.c. froze a couple of times in 40 mins
i scanned it with ez antivirus, it didn't find anything
there were some files it couldn't scan, so i scanned them manually and still
nothing came up.

i'm pretty sure they're the problem. i don't know what to do.
i can't copy & paste the log so here's a couple of the files it couldn't scan:
chandir.dat
chandir.idx
prs_die.dat
in system32/config: SAM, SAM.LOG, SECURITY,SECURITY.LOG, system,system.LOG

i hope that's enough info,if you wanna know anything else just say, i hope
someone can help. thanks.
Reply With Quote
  #2  
Old 01-05-2006, 05:39 AM
phoenix
 
Posts: n/a
Default Re: trojan or virus in system32. help me please!

On Thu, 29 Dec 2005 02:44:02 -0800, charley_n9 wrote:

> hi, this is my problem,
>
> my p.c. froze a couple of times in 40 mins
> i scanned it with ez antivirus, it didn't find anything
> there were some files it couldn't scan, so i scanned them manually and still
> nothing came up.
>
> i'm pretty sure they're the problem. i don't know what to do.
> i can't copy & paste the log so here's a couple of the files it couldn't scan:
> chandir.dat
> chandir.idx
> prs_die.dat
> in system32/config: SAM, SAM.LOG, SECURITY,SECURITY.LOG, system,system.LOG
>
> i hope that's enough info,if you wanna know anything else just say, i hope
> someone can help. thanks.


It seems like you have some pervasive spyware installed, have a look at the
links here: http://www.google.com/search?q=chandir.dat

regards

Bill
Reply With Quote
  #3  
Old 01-05-2006, 05:39 AM
charley_n9
 
Posts: n/a
Default Re: trojan or virus in system32. help me please!

thanks for your reply Bill, i downloaded SpyHunter v2.0 and it finished
scanning a minute ago, it found a whole load of spyware so i clicked on it to
remove and it says you have to buy the full version to remove!!!!! what a
total waste of time...
i'm gonna try and find another spyware scanner to download, hopefully it'll
work this time. if you or anyone else have any other ideas please let me know.

thanks again

"phoenix" wrote:

> On Thu, 29 Dec 2005 02:44:02 -0800, charley_n9 wrote:
>
> > hi, this is my problem,
> >
> > my p.c. froze a couple of times in 40 mins
> > i scanned it with ez antivirus, it didn't find anything
> > there were some files it couldn't scan, so i scanned them manually and still
> > nothing came up.
> >
> > i'm pretty sure they're the problem. i don't know what to do.
> > i can't copy & paste the log so here's a couple of the files it couldn't scan:
> > chandir.dat
> > chandir.idx
> > prs_die.dat
> > in system32/config: SAM, SAM.LOG, SECURITY,SECURITY.LOG, system,system.LOG
> >
> > i hope that's enough info,if you wanna know anything else just say, i hope
> > someone can help. thanks.

>
> It seems like you have some pervasive spyware installed, have a look at the
> links here: http://www.google.com/search?q=chandir.dat
>
> regards
>
> Bill
>

Reply With Quote
  #4  
Old 01-05-2006, 05:39 AM
Malke
 
Posts: n/a
Default Re: trojan or virus in system32. help me please!

charley_n9 wrote:

> thanks for your reply Bill, i downloaded SpyHunter v2.0 and it
> finished scanning a minute ago, it found a whole load of spyware so i
> clicked on it to remove and it says you have to buy the full version
> to remove!!!!! what a total waste of time...
> i'm gonna try and find another spyware scanner to download, hopefully
> it'll work this time. if you or anyone else have any other ideas
> please let me know.


You have downloaded a rogue antispyware program. No good removal tool
requires you to purchase it before it will remove spyware. Here is a
link to MVP Eric Howes' site which lists rogue antispyware programs:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

To clean up your computer, go through the following removal steps
systematically:

http://www.elephantboycomputers.com/...moving_Malware

All of the antimalware tools used above are free.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
Reply With Quote
  #5  
Old 01-05-2006, 05:39 AM
charley_n9
 
Posts: n/a
Default Re: trojan or virus in system32. help me please!

thanks for your response Malke, i've done 3 scans and none have them have
removed backweb lite, if you can tell me how i'd be very grateful.
thanks

"Malke" wrote:

> charley_n9 wrote:
>
> > thanks for your reply Bill, i downloaded SpyHunter v2.0 and it
> > finished scanning a minute ago, it found a whole load of spyware so i
> > clicked on it to remove and it says you have to buy the full version
> > to remove!!!!! what a total waste of time...
> > i'm gonna try and find another spyware scanner to download, hopefully
> > it'll work this time. if you or anyone else have any other ideas
> > please let me know.

>
> You have downloaded a rogue antispyware program. No good removal tool
> requires you to purchase it before it will remove spyware. Here is a
> link to MVP Eric Howes' site which lists rogue antispyware programs:
>
> http://www.spywarewarrior.com/rogue_anti-spyware.htm
>
> To clean up your computer, go through the following removal steps
> systematically:
>
> http://www.elephantboycomputers.com/...moving_Malware
>
> All of the antimalware tools used above are free.
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

Reply With Quote
  #6  
Old 01-05-2006, 05:39 AM
Malke
 
Posts: n/a
Default Re: trojan or virus in system32. help me please!

charley_n9 wrote:

> thanks for your response Malke, i've done 3 scans and none have them
> have removed backweb lite, if you can tell me how i'd be very
> grateful. thanks


This is the first you've mentioned Backweb Lite which is not normally
considered spyware. Backweb Lite usually comes with HP printer software
or HP update software on their machines. Do a Google for "Backweb Lite"
and you'll get many sites explaining what this is. If you have anything
from HP, you don't need to remove Backweb Lite. If you don't want
background updating going on, use the System Configuration Utility
(msconfig) or options in the program itself to stop that behavior.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
Reply With Quote
  #7  
Old 01-05-2006, 05:39 AM
charley_n9
 
Posts: n/a
Default Re: trojan or virus in system32. help me please!

i didn't know i had it before, i've done some reading on forums and backweb
which comes with hp is apparently different from backweb lite
http://www.xpforum.co.uk/forum/viewtopic.php?p=66693
spybot didn't detect it and i don't want to attempt it manually so i'm kinda
stuck for now.
the link you gave me was helpful though so thanks.

"Malke" wrote:

> charley_n9 wrote:
>
> > thanks for your response Malke, i've done 3 scans and none have them
> > have removed backweb lite, if you can tell me how i'd be very
> > grateful. thanks

>
> This is the first you've mentioned Backweb Lite which is not normally
> considered spyware. Backweb Lite usually comes with HP printer software
> or HP update software on their machines. Do a Google for "Backweb Lite"
> and you'll get many sites explaining what this is. If you have anything
> from HP, you don't need to remove Backweb Lite. If you don't want
> background updating going on, use the System Configuration Utility
> (msconfig) or options in the program itself to stop that behavior.
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
RE: trojan virus PLEASE HELP! Tjmodels Windows Update 0 01-05-2006 05:20 PM
Hijack problem Tom B. Windows XP Security Admin 7 01-05-2006 05:44 AM
trojan virus windows\system32\mllmj.dll qickdraw4350 Windows XP Security Admin 7 01-05-2006 04:40 AM
Withera.exe keeps asking to coonect to the web? Big Dave Windows XP Help and Support 6 01-05-2006 02:44 AM
WORM, VIRUS, TROJAN????????????/ michele weidner Windows XP Basics 6 01-05-2006 02:06 AM


All times are GMT. The time now is 09:40 PM.


Powered by vBulletin Version 3.5.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd. SEO by vBSEO 2.3.2 © 2005, Crawlability, Inc.

trojan or virus in system32. help me please!