S
stewbop
I posted this subject earlier today, but 9 hours later, it hasn't shown
up in the group. I'll try again.
I have a relative who is having problems with a computer. The antivirus
software detected two problems; HackTool.Win32.Cain.a and
TrojanDownloader.Win32.Keenval.e
I found what appeared to be helpful instructions at the Pest Patrol
site. I copied them down and we attempted it last night, but couldn'tget
through the first step. It said (for each pest) to Kill certain files
using Task Manager. Well, we got into Task Manager and Processes fine,
but didn't see the files they listed.
From other research, it appears that the filenames themselves won't be
listed, and you have to shut down whatever process the pest is using.
But how do we find that out? Is there something in the AV report that
would tip us off? It said the Cain pest was found in Documents and
Settings\[username]\MyDocuments\cain25b56.exe/WISE0023.BIN and Keenval
was found in web/wallpaper/APImages/[imagename]/incredfind.exe/data0003
and data0004 (some slashes in the Keenval address might be reversed).
In both cases, the AV said it couldn't disinfect the pest because it was
in an area that was closed off.
When I was there, it also found TrojanDownlaoder.Win32.IstBar.gen in
\Content.IE5\80SBC4WF\0006_regular[1].cab/istactivex.dll but it didn't
show up in the later scan which found Keenval.
Also, will we have similar trouble finding the files in the "Remove"
step of the Pest Patrol instructions?
He has Windows XP Home (I think), and has a cable connection. One other
note on this subject: while poking around last night, with the cable
modem shut off (and not in IE), I was able to find a file named cain in
the folder listed above, rightclick on it, and delete it. It wasn't
there the next time we checked. Did we get lucky and accidently remove
it? I'd still like the information on dealing with it, along with the
other pests.
The other problem he's been having is with restarts. Sometimes, when he
shuts down the computer, it will restart before it finishes. When it
does shut down, it seems to stick on the "shutting down windows/ saving
settings" (or whatever it is) screen for a bit before finishing. When it
doesn't shut down, it will often skip the windows screen entirely, going
to monitor shutdown, then restarting. I did notice when we ran AdAware
just before shutdown, it seemed to work, albeit slowly as described
above. He also reported an occasional slowdown or temporary freeze while
online.
Also, when looking through the help files (and not connected to the
net), we had problems trying to do a couple of things. A search wouldn't
work, saying a file it needed to run was missing. Coupled with the above
problems, is it a good guess that the operating system is corrupted?
What would be the best way to correct it? System restore?
Reinstall/repair from boot disk? Reformat hard drive and reinstall
altogether? And on the subject of reformatting, is it hard to do? I
thought I saw another topic where someone said you could do it from the
boot disk?
Sorry if some of these questions seem basic, but the computer owner is a
novice who has difficuty understanding some technical things, and I
don't own a computer, and rarely get access to one, so we're both in the
dark on most things until we encounter them and get a solution
somewhere. Thanks in advance for any help. I hope my message gets posted
this time, as things are getting a bit desperate. (I was hoping to be
reading solutions by now.) It's impossible for anyone to answer
questions they don't see.
Brian
up in the group. I'll try again.
I have a relative who is having problems with a computer. The antivirus
software detected two problems; HackTool.Win32.Cain.a and
TrojanDownloader.Win32.Keenval.e
I found what appeared to be helpful instructions at the Pest Patrol
site. I copied them down and we attempted it last night, but couldn'tget
through the first step. It said (for each pest) to Kill certain files
using Task Manager. Well, we got into Task Manager and Processes fine,
but didn't see the files they listed.
From other research, it appears that the filenames themselves won't be
listed, and you have to shut down whatever process the pest is using.
But how do we find that out? Is there something in the AV report that
would tip us off? It said the Cain pest was found in Documents and
Settings\[username]\MyDocuments\cain25b56.exe/WISE0023.BIN and Keenval
was found in web/wallpaper/APImages/[imagename]/incredfind.exe/data0003
and data0004 (some slashes in the Keenval address might be reversed).
In both cases, the AV said it couldn't disinfect the pest because it was
in an area that was closed off.
When I was there, it also found TrojanDownlaoder.Win32.IstBar.gen in
\Content.IE5\80SBC4WF\0006_regular[1].cab/istactivex.dll but it didn't
show up in the later scan which found Keenval.
Also, will we have similar trouble finding the files in the "Remove"
step of the Pest Patrol instructions?
He has Windows XP Home (I think), and has a cable connection. One other
note on this subject: while poking around last night, with the cable
modem shut off (and not in IE), I was able to find a file named cain in
the folder listed above, rightclick on it, and delete it. It wasn't
there the next time we checked. Did we get lucky and accidently remove
it? I'd still like the information on dealing with it, along with the
other pests.
The other problem he's been having is with restarts. Sometimes, when he
shuts down the computer, it will restart before it finishes. When it
does shut down, it seems to stick on the "shutting down windows/ saving
settings" (or whatever it is) screen for a bit before finishing. When it
doesn't shut down, it will often skip the windows screen entirely, going
to monitor shutdown, then restarting. I did notice when we ran AdAware
just before shutdown, it seemed to work, albeit slowly as described
above. He also reported an occasional slowdown or temporary freeze while
online.
Also, when looking through the help files (and not connected to the
net), we had problems trying to do a couple of things. A search wouldn't
work, saying a file it needed to run was missing. Coupled with the above
problems, is it a good guess that the operating system is corrupted?
What would be the best way to correct it? System restore?
Reinstall/repair from boot disk? Reformat hard drive and reinstall
altogether? And on the subject of reformatting, is it hard to do? I
thought I saw another topic where someone said you could do it from the
boot disk?
Sorry if some of these questions seem basic, but the computer owner is a
novice who has difficuty understanding some technical things, and I
don't own a computer, and rarely get access to one, so we're both in the
dark on most things until we encounter them and get a solution
somewhere. Thanks in advance for any help. I hope my message gets posted
this time, as things are getting a bit desperate. (I was hoping to be
reading solutions by now.) It's impossible for anyone to answer
questions they don't see.
Brian