RCD8BF.EXE

[bonavox]

Hi,
This file continue to report an error at startup. I cannot find it
anywhere on my system or in any startup service. Still, it reports a
failure at startup. Any clue what (and where) this file might be?

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Date: 06.12.2005
Time: 08:22:48
User: N/A
Computer: SS
Description:
Faulting application RCD8BF.EXE, version 0.0.0.0, faulting module
RCD8BF.EXE, version 0.0.0.0, fault address 0x0000db0b.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 52 43 44 ure RCD
0018: 38 42 46 2e 45 58 45 20 8BF.EXE
0020: 30 2e 30 2e 30 2e 30 20 0.0.0.0
0028: 69 6e 20 52 43 44 38 42 in RCD8B
0030: 46 2e 45 58 45 20 30 2e F.EXE 0.
0038: 30 2e 30 2e 30 20 61 74 0.0.0 at
0040: 20 6f 66 66 73 65 74 20 offset
0048: 30 30 30 30 64 62 30 62 0000db0b

 

[Wesley Vogel]

RCD8BF.EXE is probably some sort of malware.

Update your antivirus and anti-spyware applications and run full system
scans.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[bonavox]

Yes, I thought that I would be safe behind my firewalls and antivirus,
but I better begin begin digging

It has changed name:

Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Date: 07.12.2005
Time: 08:23:50
User: N/A
Computer: SS
Description:
Faulting application AD548B.EXE, version 0.0.0.0, faulting module
AD548B.EXE, version 0.0.0.0, fault address 0x0000db0b.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 41 44 35 ure AD5
0018: 34 38 42 2e 45 58 45 20 48B.EXE
0020: 30 2e 30 2e 30 2e 30 20 0.0.0.0
0028: 69 6e 20 41 44 35 34 38 in AD548
0030: 42 2e 45 58 45 20 30 2e B.EXE 0.
0038: 30 2e 30 2e 30 20 61 74 0.0.0 at
0040: 20 6f 66 66 73 65 74 20 offset
0048: 30 30 30 30 64 62 30 62 0000db0b

 

[bonavox]

I tried several approaches...Windows Malicious Software Removal Tool,
Trend Micro Officescan Damage Cleanup Service, Spybot Search & Destroy,
Windows AntiSpyware, Sysinternals Autoruns, Sysinternals
RootkitRevealer reveals nothing unusual.

So the problem is probably in one of the Trend Micro Officescan
processes.

http://groups.google.com/group/alt....8?lnk=st&q=0x0000db0b&rnum=1#547de1350a341f38
(by the way, I'm not running Dell nor Toshibas)

A quick search at Trendmicro's KB at
http://kb.trendmicro.com/solutions/search/main/search/default.asp
reveals nothing.

When I disable the four services owned by Officescan, the failure
disappear and my logon speed boost up considerably (!). I'll try a
reinstall

/Bonavox