ipstack.exe

  • Thread starter Thread starter Jon
  • Start date Start date
J

Jon

I have encountered a problem with the following symptoms:

1)ipstack.exe consumed the majority of my processor
2)Norton shuts down after a couple of seconds

It appears to be a virus although Norton runs clean in
Safe mode. I found 1 web site via google search indicating
the possibility of a new virus. Any info?
 
u havent described what is ur OS, irrelevant information
does not give u any resolutions. anyhow do this, go to
msconfig, or system configuration utility and disable all
startup items, select the selective startup option, delete
all the files in temp folder, temp internet folder, which
is located in windows\temp if win 98.

it is located in documents&
settings\username\localsettings\temp.

mostly its hidden, so u need to go to the folder options
and enable system and hidden files view.

and update ur anti virus

zulfi
 
This is on XP and I have updated Norton.
-----Original Message-----

u havent described what is ur OS, irrelevant information
does not give u any resolutions. anyhow do this, go to
msconfig, or system configuration utility and disable all
startup items, select the selective startup option, delete
all the files in temp folder, temp internet folder, which
is located in windows\temp if win 98.

it is located in documents&
settings\username\localsettings\temp.

mostly its hidden, so u need to go to the folder options
and enable system and hidden files view.

and update ur anti virus

zulfi



.
Click to expand...
 
Jon said:
This is on XP and I have updated Norton.
Click to expand...
I've seen it on Win2000 (without any SP) yesterday,
infected 17.01.2004, and Norton still doesn't know...

More to that at
http://www.pcreview.co.uk/printthread-4164.php

I fixed it myself like this:
1. Go to services and disable "IP Stack" service.
2. Move C:\WINNT\system32\ipstack.exe to another folder.
3. Restart Windows.
4. Clean
Since I deleted the file as fast as possible, I forgot
to forward a copy to symantec, but it seems there is
no risk to do that.

The worm is so kind not to close explorer.exe windows.
But it really likes to close windows :)) For example,
it's not possible to use regedit.
Norton Users who like updating their definitions manually
will have some problems...

/greetings
 
Back
Top