Is this really a Worm?

[Walter R.]

Suddenly I found a new program in my Program Files : "Complus Applications".
According to Google, this is related to the win32/lablan.a worm.

My AVG Virus Checker shows no viruses. Spybot also reports a clean slate.

My computer seems to be working OK.

However, if I try to read a .txt file, Win XP tells me that it cannot find
Notepad.exe. A "search" indicates that Notepad.exe is in c:\windows and also
in c:\windows\system32\dllcache.

Are these two problems related? What can I do?

 

[David H. Lipman]

It sounds as if you are indeed infected and you should know that there are anti virus News
Groups specifically for this type of discussion.

microsoft.public.scripting.virus.discussion
microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

Please go to one or more of the below online scanners and perform a scan of your platform
then report back your results.

Trend:
http://housecall.antivirus.com
http://housecall.trendmicro.com

F-Secure:
http://support.f-secure.com/enu/home/ols.shtml

McAfee:
http://www.mcafee.com/myapps/mfs/default.asp

Panda:
http://www.pandasoftware.com/activescan/

Kaspersky:
http://www.kaspersky.com/de/scanforvirus

Symantec:
http://security.symantec.com/

BitDefender
http://www.bitdefender.com/scan/license.php

Dave






| Suddenly I found a new program in my Program Files : "Complus Applications".
| According to Google, this is related to the win32/lablan.a worm.
|
| My AVG Virus Checker shows no viruses. Spybot also reports a clean slate.
|
| My computer seems to be working OK.
|
| However, if I try to read a .txt file, Win XP tells me that it cannot find
| Notepad.exe. A "search" indicates that Notepad.exe is in c:\windows and also
| in c:\windows\system32\dllcache.
|
| Are these two problems related? What can I do?
|
| --
|
| Walter
| The Happy Iconoclast www.rationality.net
| -
|
|

 

[Dick Kistler]

Suddenly I found a new program in my Program Files : "Complus
Applications".
According to Google, this is related to the win32/lablan.a worm.

My AVG Virus Checker shows no viruses. Spybot also reports a clean slate.

My computer seems to be working OK.

However, if I try to read a .txt file, Win XP tells me that it cannot find
Notepad.exe. A "search" indicates that Notepad.exe is in c:\windows and
also
in c:\windows\system32\dllcache.

Are these two problems related? What can I do?

--

Walter
The Happy Iconoclast www.rationality.net
-

http://www.google.com/search?hl=en&ie=UTF-8&q=win32/lablan.a+worm.

Dick Kistler

 

[Stephen Harris]

Suddenly I found a new program in my Program Files : "Complus
Applications".
According to Google, this is related to the win32/lablan.a worm.

I wonder why, when I did a search on Google using complus
applications and win32/lablan.a, that no results were generated?!

 

[Walter R.]

If I put complus applications into Google I get this:

http://ve.nod32.ch/worms/lablana.php

 

[Walter R.]

Thank you, David

I put the free virus checkers in my Favorites. I tried Trend, McAfee and
Panda. They all gave me a clean bill of health. The Program File Complus
Applications is empty. Maybe this is merely a leftover from a virus that was
"cleaned" some time ago by AVG.

I think I will just delete all files and registry entries that refer to
Complus Applications.

 

[Walter R.]

Hi Dale

Thanks for your input. As I suggested in my reply to Stephen Harris, these
may be left-over files from a virus that AVG had previously cleaned. My
Folder in Program Files is empty, too.

 

[billy]

use add/remove and remove windows component notepad (then
either reg edit and remove value) or then reinstall notepad
and see if it works ...and then get a firewall to be sure
no trojan is on your system
zonelabs.com fro zonealarm free it is yes .

 

[David H. Lipman]

CAUTION: Don't delete the files nor modify the Registry !

AVG just may have given you a False Positive declaration.

Dave





| Thank you, David
|
| I put the free virus checkers in my Favorites. I tried Trend, McAfee and
| Panda. They all gave me a clean bill of health. The Program File Complus
| Applications is empty. Maybe this is merely a leftover from a virus that was
| "cleaned" some time ago by AVG.
|
| I think I will just delete all files and registry entries that refer to
| Complus Applications.
|
| --
|
| Walter
| The Happy Iconoclast www.rationality.net
| -
|
| | > It sounds as if you are indeed infected and you should know that there are
| anti virus News
| > Groups specifically for this type of discussion.
| >
| > microsoft.public.scripting.virus.discussion
| > microsoft.public.security.virus
| > alt.comp.virus
| > alt.comp.anti-virus
| >
| > Please go to one or more of the below online scanners and perform a scan
| of your platform
| > then report back your results.
| >
| > Trend:
| > http://housecall.antivirus.com
| > http://housecall.trendmicro.com
| >
| > F-Secure:
| > http://support.f-secure.com/enu/home/ols.shtml
| >
| > McAfee:
| > http://www.mcafee.com/myapps/mfs/default.asp
| >
| > Panda:
| > http://www.pandasoftware.com/activescan/
| >
| > Kaspersky:
| > http://www.kaspersky.com/de/scanforvirus
| >
| > Symantec:
| > http://security.symantec.com/
| >
| > BitDefender
| > http://www.bitdefender.com/scan/license.php
| >
| > Dave
| >
| >
| >
| >
| >
| >
| > | > | Suddenly I found a new program in my Program Files : "Complus
| Applications".
| > | According to Google, this is related to the win32/lablan.a worm.
| > |
| > | My AVG Virus Checker shows no viruses. Spybot also reports a clean
| slate.
| > |
| > | My computer seems to be working OK.
| > |
| > | However, if I try to read a .txt file, Win XP tells me that it cannot
| find
| > | Notepad.exe. A "search" indicates that Notepad.exe is in c:\windows and
| also
| > | in c:\windows\system32\dllcache.
| > |
| > | Are these two problems related? What can I do?
| > |
| > | --
| > |
| > | Walter
| > | The Happy Iconoclast www.rationality.net
| > | -
| > |
| > |
| >
| >
|
|

 

[Murray]

As is mine. And I have none of the keys described in the linked page.
Furthermore, this computer has never seen any AV activity.

 

[Dale Richards]

Suddenly I found a new program in my Program Files : "Complus
Applications". According to Google, this is related to the
win32/lablan.a worm.

My AVG Virus Checker shows no viruses. Spybot also reports a clean
slate.

My computer seems to be working OK.

I've always had a folder called ComPlus Applications in Program Files, and I
know I'm definitely not infected. The folder is currently empty, however.

However, if I try to read a .txt file, Win XP tells me that it cannot
find Notepad.exe. A "search" indicates that Notepad.exe is in
c:\windows and also in c:\windows\system32\dllcache.

Are these two problems related? What can I do?

This sounds like a different problem. I'm afraid I can't help you with that.

 

[Frank]

Suddenly I found a new program in my Program Files : "Complus
Applications".
According to Google, this is related to the win32/lablan.a worm.

My AVG Virus Checker shows no viruses. Spybot also reports a clean
slate.

My computer seems to be working OK.

However, if I try to read a .txt file, Win XP tells me that it
cannot find
Notepad.exe. A "search" indicates that Notepad.exe is in c:\windows
and also
in c:\windows\system32\dllcache.

Are these two problems related? What can I do?

Read the following page.

<http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=complus+applications>

 

[Alex Nichol]

However, if I try to read a .txt file, Win XP tells me that it cannot find
Notepad.exe. A "search" indicates that Notepad.exe is in c:\windows and also
in c:\windows\system32\dllcache.

Are these two problems related? What can I do?

Notepad.exe should also be in windows\system32 - the start menu
shortcut uses one place; the file association for .txt the other. This
has probably been caused by it being infected and the file deleted;
whether that was the trojan you refer to, I don't know

So copy from dllcache to system32; check it is working; do a new AVG
scan making sure you have up to date signatures