Virus or not?

[Kolin Tregaskes]

Hello,

I'm having some odd problems and not sure if it's a virus, Windows or a hard
drive problem.

It started at the beginning of this week after I had to reinstall Windows
completely (which might be related). After reinstalling, I put on Norton
Anti-virus Pro 2003 (plus Norton Systemworks Pro 2003 and Norton Internet
Security Pro 2003) and ZoneAlarm Pro (which I have been using for ages now),
but have since decided to move over to Agnitum Outpost Firewall Pro 2 and
McAfee VirusScan Professional (which both seem slightly better than Norton
and ZA).

The current problems I have are:-

1. I cannot install the Security Update for Windows XP (KB810217) from the
Windows Update web site (I've been able to install every other update).
When I install this and reboot I get a blue crash screen just before it
normally goes into Windows, with the error "IRQL_NOT_LESS_OR_EQUAL" with the
code at the bottom below:

STOP: 0x0000000A (0xFFFFFFE, 0x00000002, 0x00000001, 0x80515DF1)

I've look for the IRQL.. and the codes on MS' support pages, but couldn't
find anything related. Does anyone know what this means and/or how to fix
it?

2. I have 2 hard drives, one 40Gb (C the other nearly 200Gb, the second
some seems to have a few problems. Some of the folders and files throw up
the following example error when I try to move/delete/copy/rename them:

"Cannot rename: Multimedia [name of the folder]: Access is denied. Make
sure the disk is not full or write-protected and that the file is not
currently in use".

The folders are not read-only, I can't see any related file in use in Task
Manager and the drive is not full. Access is denied in DOS as well. When I
check the attributes in DOS, it comes up with no attributes, which is OK?

3. I've not looked in all the folders on the big drive, but one that has
some AVI and MPEG videos is causing me to worry. The folder view is set to
show thumbnails of the videos, but when I go into the folder, it starts
loading the thumbnails and eventually pops up with the following error:

"Microsoft Visual C++ Runtime Library: Runtime Error! Program
C:\WINDOWS\Explorer.EXE. The application has requested the Runtime to
terminate it in an unusual way. Please contact the application's support
team for more info."

When I had Norton Anti-virus/Internet Security installed, IS came up with
some message about "NetSpy". I know this is a Trojan, but I did a full scan
then with Norton and I've done a full scan with McAfee and have not found
NetSpy on my system. Norton didn't find anything at all, by the way, but
McAfee has found a few unwanted programs and one Trojan - the problem is
that the Trojan is in a folder (or is a file) that I cannot edit and so I
cannot delete the Trojan (this could be the cause of all my problems, but
how can I fix my folders so that I can delete them again?)

4. I've had little odd things happen along the way, such as my Groove
database becoming corrupt, though I'm not sure it's related at all.

I had to reinstall my computer as Windows was running, very, very slowly and
I couldn't see why. I searched for ages for the cause, but in the end
decided to reinstall Windows (I use WindowsXP Pro). Upon reinstalling I got
lots of errors on the drives, I think only the 200Gb one, and I was left
with lots of files and folders in a LOSTFILE folder and FOUND.000/.001
folders (which I couldn't see in Windows). Does anyone think this is
related to current problems I am having?

Sorry for the long message, but thought it would be best to put everything
in the e-mail.

Hope someone can help please?

Kol.

 

[DL]

Firstly runing or even installing two different AV apps is not a good idea.
Just trying to install two can give rise to probs.
Likewise running two seperate Firewall Apps
I would perhaps suggest uninstalling both AV apps and Firewalls.
Ensure XP firewall is on, then checking yr WinXp.install

Adaware or SpyBot Search & Destroy are both OK at detecting 'spyware'
You can run an online virus checker on both the Symantec and McAfee sites

You appear to have both WinXp files curruption and possibly problems caused
by Multiple installs of McAfee & Symantec. It may be that there are probs
with the HD but untill you correct one its difficult to diagnose the other.
David

Hello,

I'm having some odd problems and not sure if it's a virus, Windows or a hard
drive problem.

It started at the beginning of this week after I had to reinstall Windows
completely (which might be related). After reinstalling, I put on Norton
Anti-virus Pro 2003 (plus Norton Systemworks Pro 2003 and Norton Internet
Security Pro 2003) and ZoneAlarm Pro (which I have been using for ages now),
but have since decided to move over to Agnitum Outpost Firewall Pro 2 and
McAfee VirusScan Professional (which both seem slightly better than Norton
and ZA).

The current problems I have are:-

1. I cannot install the Security Update for Windows XP (KB810217) from the
Windows Update web site (I've been able to install every other update).
When I install this and reboot I get a blue crash screen just before it
normally goes into Windows, with the error "IRQL_NOT_LESS_OR_EQUAL" with the
code at the bottom below:

STOP: 0x0000000A (0xFFFFFFE, 0x00000002, 0x00000001, 0x80515DF1)

I've look for the IRQL.. and the codes on MS' support pages, but couldn't
find anything related. Does anyone know what this means and/or how to fix
it?

2. I have 2 hard drives, one 40Gb (C the other nearly 200Gb, the second
some seems to have a few problems. Some of the folders and files throw up
the following example error when I try to move/delete/copy/rename them:

"Cannot rename: Multimedia [name of the folder]: Access is denied. Make
sure the disk is not full or write-protected and that the file is not
currently in use".

The folders are not read-only, I can't see any related file in use in Task
Manager and the drive is not full. Access is denied in DOS as well. When I
check the attributes in DOS, it comes up with no attributes, which is OK?

3. I've not looked in all the folders on the big drive, but one that has
some AVI and MPEG videos is causing me to worry. The folder view is set to
show thumbnails of the videos, but when I go into the folder, it starts
loading the thumbnails and eventually pops up with the following error:

"Microsoft Visual C++ Runtime Library: Runtime Error! Program
C:\WINDOWS\Explorer.EXE. The application has requested the Runtime to
terminate it in an unusual way. Please contact the application's support
team for more info."

When I had Norton Anti-virus/Internet Security installed, IS came up with
some message about "NetSpy". I know this is a Trojan, but I did a full scan
then with Norton and I've done a full scan with McAfee and have not found
NetSpy on my system. Norton didn't find anything at all, by the way, but
McAfee has found a few unwanted programs and one Trojan - the problem is
that the Trojan is in a folder (or is a file) that I cannot edit and so I
cannot delete the Trojan (this could be the cause of all my problems, but
how can I fix my folders so that I can delete them again?)

4. I've had little odd things happen along the way, such as my Groove
database becoming corrupt, though I'm not sure it's related at all.

I had to reinstall my computer as Windows was running, very, very slowly and
I couldn't see why. I searched for ages for the cause, but in the end
decided to reinstall Windows (I use WindowsXP Pro). Upon reinstalling I got
lots of errors on the drives, I think only the 200Gb one, and I was left
with lots of files and folders in a LOSTFILE folder and FOUND.000/.001
folders (which I couldn't see in Windows). Does anyone think this is
related to current problems I am having?

Sorry for the long message, but thought it would be best to put everything
in the e-mail.

Hope someone can help please?

Kol.

 

[Kolin Tregaskes]

Hi there,

I didn't have them on at the same time. I uninstalled all Norton stuff and
ZA THEN put Outpost and McAfee on.

Kol.
-----------

"Real Programmers always confuse Christmas and Halloween because Oct31 ==
Dec25 !" - Andrew Rutherford.

Firstly runing or even installing two different AV apps is not a good idea.
Just trying to install two can give rise to probs.
Likewise running two seperate Firewall Apps
I would perhaps suggest uninstalling both AV apps and Firewalls.
Ensure XP firewall is on, then checking yr WinXp.install

Adaware or SpyBot Search & Destroy are both OK at detecting 'spyware'
You can run an online virus checker on both the Symantec and McAfee sites

You appear to have both WinXp files curruption and possibly problems caused
by Multiple installs of McAfee & Symantec. It may be that there are probs
with the HD but untill you correct one its difficult to diagnose the other.
David

Hello,

I'm having some odd problems and not sure if it's a virus, Windows or a hard
drive problem.

It started at the beginning of this week after I had to reinstall Windows
completely (which might be related). After reinstalling, I put on Norton
Anti-virus Pro 2003 (plus Norton Systemworks Pro 2003 and Norton Internet
Security Pro 2003) and ZoneAlarm Pro (which I have been using for ages now),
but have since decided to move over to Agnitum Outpost Firewall Pro 2 and
McAfee VirusScan Professional (which both seem slightly better than Norton
and ZA).

The current problems I have are:-

1. I cannot install the Security Update for Windows XP (KB810217) from the
Windows Update web site (I've been able to install every other update).
When I install this and reboot I get a blue crash screen just before it
normally goes into Windows, with the error "IRQL_NOT_LESS_OR_EQUAL" with the
code at the bottom below:

STOP: 0x0000000A (0xFFFFFFE, 0x00000002, 0x00000001, 0x80515DF1)

I've look for the IRQL.. and the codes on MS' support pages, but couldn't
find anything related. Does anyone know what this means and/or how to fix
it?

2. I have 2 hard drives, one 40Gb (C the other nearly 200Gb, the second
some seems to have a few problems. Some of the folders and files throw up
the following example error when I try to move/delete/copy/rename them:

"Cannot rename: Multimedia [name of the folder]: Access is denied. Make
sure the disk is not full or write-protected and that the file is not
currently in use".

The folders are not read-only, I can't see any related file in use in Task
Manager and the drive is not full. Access is denied in DOS as well.

When

I
check the attributes in DOS, it comes up with no attributes, which is OK?

3. I've not looked in all the folders on the big drive, but one that has
some AVI and MPEG videos is causing me to worry. The folder view is set to
show thumbnails of the videos, but when I go into the folder, it starts
loading the thumbnails and eventually pops up with the following error:

"Microsoft Visual C++ Runtime Library: Runtime Error! Program
C:\WINDOWS\Explorer.EXE. The application has requested the Runtime to
terminate it in an unusual way. Please contact the application's support
team for more info."

When I had Norton Anti-virus/Internet Security installed, IS came up with
some message about "NetSpy". I know this is a Trojan, but I did a full scan
then with Norton and I've done a full scan with McAfee and have not found
NetSpy on my system. Norton didn't find anything at all, by the way, but
McAfee has found a few unwanted programs and one Trojan - the problem is
that the Trojan is in a folder (or is a file) that I cannot edit and so I
cannot delete the Trojan (this could be the cause of all my problems, but
how can I fix my folders so that I can delete them again?)

4. I've had little odd things happen along the way, such as my Groove
database becoming corrupt, though I'm not sure it's related at all.

I had to reinstall my computer as Windows was running, very, very slowly and
I couldn't see why. I searched for ages for the cause, but in the end
decided to reinstall Windows (I use WindowsXP Pro). Upon reinstalling I got
lots of errors on the drives, I think only the 200Gb one, and I was left
with lots of files and folders in a LOSTFILE folder and FOUND.000/.001
folders (which I couldn't see in Windows). Does anyone think this is
related to current problems I am having?

Sorry for the long message, but thought it would be best to put everything
in the e-mail.

Hope someone can help please?

Kol.

 

[Kolin Tregaskes]

I've sorted out the files and folders that I could not delete, rename, etc.
In the end it was changing the permissions to Full Control. I have now been
able to delete the viruses, but the rest of the problems remain. :-(

Any advice would be gratefully received?

Kol.
-----------

The glory of friendship is not the outstretched hand, nor the kindly smile,
nor the joy of companionship; it is the spiritual inspiration that comes to
one when he discovers that someone else believes in him and is willing to
trust him with his friendship. - Ralph Waldo Emerson

Hi there,

I didn't have them on at the same time. I uninstalled all Norton stuff and
ZA THEN put Outpost and McAfee on.

Kol.
-----------

"Real Programmers always confuse Christmas and Halloween because Oct31 ==
Dec25 !" - Andrew Rutherford.

Firstly runing or even installing two different AV apps is not a good idea.
Just trying to install two can give rise to probs.
Likewise running two seperate Firewall Apps
I would perhaps suggest uninstalling both AV apps and Firewalls.
Ensure XP firewall is on, then checking yr WinXp.install

Adaware or SpyBot Search & Destroy are both OK at detecting 'spyware'
You can run an online virus checker on both the Symantec and McAfee sites

You appear to have both WinXp files curruption and possibly problems caused
by Multiple installs of McAfee & Symantec. It may be that there are probs
with the HD but untill you correct one its difficult to diagnose the other.
David

a
hard with
the

throw

up

the following example error when I try to move/delete/copy/rename them:

"Cannot rename: Multimedia [name of the folder]: Access is denied. Make
sure the disk is not full or write-protected and that the file is not
currently in use".

The folders are not read-only, I can't see any related file in use in Task
Manager and the drive is not full. Access is denied in DOS as well.

When

I
check the attributes in DOS, it comes up with no attributes, which is OK?

3. I've not looked in all the folders on the big drive, but one that has
some AVI and MPEG videos is causing me to worry. The folder view is

set
to

show thumbnails of the videos, but when I go into the folder, it starts
loading the thumbnails and eventually pops up with the following error:

"Microsoft Visual C++ Runtime Library: Runtime Error! Program
C:\WINDOWS\Explorer.EXE. The application has requested the Runtime to
terminate it in an unusual way. Please contact the application's support
team for more info."

When I had Norton Anti-virus/Internet Security installed, IS came up with
some message about "NetSpy". I know this is a Trojan, but I did a

full
scan

then with Norton and I've done a full scan with McAfee and have not found
NetSpy on my system. Norton didn't find anything at all, by the way, but
McAfee has found a few unwanted programs and one Trojan - the problem is
that the Trojan is in a folder (or is a file) that I cannot edit and

so

I slowly
and I
got