Heard of "msdc.log"?????

[Guest]

Some type of malicious code causes files named msdc.log, containing what look like numerous e-mail addresses, to be written to numerous folders on HD. Files actually update while you watch and continue to grow. Upon deletion the files replicate themselves elsewhere on HD. Mostly found in "documents and settings" folder. Anyone else experienced this? Truly strange.

 

[H Leboeuf]

Is this process running on your computer?

msdc32.exe
Runs a HTML tutorial on the Zebus web-site

If not then:

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html

--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Some type of malicious code causes files named msdc.log, containing what

look like numerous e-mail addresses, to be written to numerous folders on
HD. Files actually update while you watch and continue to grow. Upon
deletion the files replicate themselves elsewhere on HD. Mostly found in
"documents and settings" folder. Anyone else experienced this? Truly
strange.

 

[jedichef]

No, the process you are refering to is for the virus
Trojan.Kalshi. My av tables were right up to date, and
that is an old virus from one or two years ago. I solved
the problem by restoring to a previous back-up. I had not
even thought of Hijackthis to get an idea of what was
contained in the registry. Sadly, I'm now obsessed with
figuring out what this is, either something new or a
variation of older malware. Google searches turn up a few
hits only , which is why I think it is something new. I
would really like to find out how it got there.

-----Original Message-----
Is this process running on your computer?

msdc32.exe
Runs a HTML tutorial on the Zebus web-site

If not then:

Go to http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip

If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hi jackthis.zip

Unzip, double-click "HijackThis.exe" and Press "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")

Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")

Next, go to the below location:
http://www.spywareinfo.com/forums/

Sign in, then copy and paste both files in your message.

HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/

The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html

--

Henri Leboeuf
Web page: http://www.colba.net/~hlebo49/index.htm
===

Some type of malicious code causes files named

msdc.log, containing what
look like numerous e-mail addresses, to be written to numerous folders on
HD. Files actually update while you watch and continue to grow. Upon
deletion the files replicate themselves elsewhere on HD. Mostly found in
"documents and settings" folder. Anyone else experienced this? Truly
strange.

.