Virus or not?

[Kolin Tregaskes]

Hello,

I'm having some odd problems and not sure if it's a virus, Windows or a hard
drive problem.

It started at the beginning of this week after I had to reinstall Windows
completely (which might be related). After reinstalling, I put on Norton
Anti-virus Pro 2003 (plus Norton Systemworks Pro 2003 and Norton Internet
Security Pro 2003) and ZoneAlarm Pro (which I have been using for ages now),
but have since decided to move over to Agnitum Outpost Firewall Pro 2 and
McAfee VirusScan Professional (which both seem slightly better than Norton
and ZA).

The current problems I have are:-

1. I cannot install the Security Update for Windows XP (KB810217) from the
Windows Update web site (I've been able to install every other update).
When I install this and reboot I get a blue crash screen just before it
normally goes into Windows, with the error "IRQL_NOT_LESS_OR_EQUAL" with the
code at the bottom below:

STOP: 0x0000000A (0xFFFFFFE, 0x00000002, 0x00000001, 0x80515DF1)

I've look for the IRQL.. and the codes on MS' support pages, but couldn't
find anything related. Does anyone know what this means and/or how to fix
it?

2. I have 2 hard drives, one 40Gb (C:) the other nearly 200Gb, the second
some seems to have a few problems. Some of the folders and files throw up
the following example error when I try to move/delete/copy/rename them:

"Cannot rename: Multimedia [name of the folder]: Access is denied. Make
sure the disk is not full or write-protected and that the file is not
currently in use".

The folders are not read-only, I can't see any related file in use in Task
Manager and the drive is not full. Access is denied in DOS as well. When I
check the attributes in DOS, it comes up with no attributes, which is OK?

3. I've not looked in all the folders on the big drive, but one that has
some AVI and MPEG videos is causing me to worry. The folder view is set to
show thumbnails of the videos, but when I go into the folder, it starts
loading the thumbnails and eventually pops up with the following error:

"Microsoft Visual C++ Runtime Library: Runtime Error! Program
C:\WINDOWS\Explorer.EXE. The application has requested the Runtime to
terminate it in an unusual way. Please contact the application's support
team for more info."

When I had Norton Anti-virus/Internet Security installed, IS came up with
some message about "NetSpy". I know this is a Trojan, but I did a full scan
then with Norton and I've done a full scan with McAfee and have not found
NetSpy on my system. Norton didn't find anything at all, by the way, but
McAfee has found a few unwanted programs and one Trojan - the problem is
that the Trojan is in a folder (or is a file) that I cannot edit and so I
cannot delete the Trojan (this could be the cause of all my problems, but
how can I fix my folders so that I can delete them again?)

4. I've had little odd things happen along the way, such as my Groove
database becoming corrupt, though I'm not sure it's related at all.

I had to reinstall my computer as Windows was running, very, very slowly and
I couldn't see why. I searched for ages for the cause, but in the end
decided to reinstall Windows (I use WindowsXP Pro). Upon reinstalling I got
lots of errors on the drives, I think only the 200Gb one, and I was left
with lots of files and folders in a LOSTFILE folder and FOUND.000/.001
folders (which I couldn't see in Windows). Does anyone think this is
related to current problems I am having?

Sorry for the long message, but thought it would be best to put everything
in the e-mail.

Hope someone can help please?

Kol.
-----------

After a number of decimal places, nobody gives a damn.

[DL]

Firstly runing or even installing two different AV apps is not a good idea.
Just trying to install two can give rise to probs.
Likewise running two seperate Firewall Apps
I would perhaps suggest uninstalling both AV apps and Firewalls.
Ensure XP firewall is on, then checking yr WinXp.install

Adaware or SpyBot Search & Destroy are both OK at detecting 'spyware'
You can run an online virus checker on both the Symantec and McAfee sites

You appear to have both WinXp files curruption and possibly problems caused
by Multiple installs of McAfee & Symantec. It may be that there are probs
with the HD but untill you correct one its difficult to diagnose the other.
David

"Kolin Tregaskes" > wrote in message
...
> Hello,
>
> I'm having some odd problems and not sure if it's a virus, Windows or a
hard
> drive problem.
>
> It started at the beginning of this week after I had to reinstall Windows
> completely (which might be related). After reinstalling, I put on Norton
> Anti-virus Pro 2003 (plus Norton Systemworks Pro 2003 and Norton Internet
> Security Pro 2003) and ZoneAlarm Pro (which I have been using for ages
now),
> but have since decided to move over to Agnitum Outpost Firewall Pro 2 and
> McAfee VirusScan Professional (which both seem slightly better than Norton
> and ZA).
>
> The current problems I have are:-
>
> 1. I cannot install the Security Update for Windows XP (KB810217) from the
> Windows Update web site (I've been able to install every other update).
> When I install this and reboot I get a blue crash screen just before it
> normally goes into Windows, with the error "IRQL_NOT_LESS_OR_EQUAL" with
the
> code at the bottom below:
>
> STOP: 0x0000000A (0xFFFFFFE, 0x00000002, 0x00000001, 0x80515DF1)
>
> I've look for the IRQL.. and the codes on MS' support pages, but couldn't
> find anything related. Does anyone know what this means and/or how to fix
> it?
>
> 2. I have 2 hard drives, one 40Gb (C:) the other nearly 200Gb, the second
> some seems to have a few problems. Some of the folders and files throw up
> the following example error when I try to move/delete/copy/rename them:
>
> "Cannot rename: Multimedia [name of the folder]: Access is denied. Make
> sure the disk is not full or write-protected and that the file is not
> currently in use".
>
> The folders are not read-only, I can't see any related file in use in Task
> Manager and the drive is not full. Access is denied in DOS as well. When
I
> check the attributes in DOS, it comes up with no attributes, which is OK?
>
> 3. I've not looked in all the folders on the big drive, but one that has
> some AVI and MPEG videos is causing me to worry. The folder view is set
to
> show thumbnails of the videos, but when I go into the folder, it starts
> loading the thumbnails and eventually pops up with the following error:
>
> "Microsoft Visual C++ Runtime Library: Runtime Error! Program
> C:\WINDOWS\Explorer.EXE. The application has requested the Runtime to
> terminate it in an unusual way. Please contact the application's support
> team for more info."
>
> When I had Norton Anti-virus/Internet Security installed, IS came up with
> some message about "NetSpy". I know this is a Trojan, but I did a full
scan
> then with Norton and I've done a full scan with McAfee and have not found
> NetSpy on my system. Norton didn't find anything at all, by the way, but
> McAfee has found a few unwanted programs and one Trojan - the problem is
> that the Trojan is in a folder (or is a file) that I cannot edit and so I
> cannot delete the Trojan (this could be the cause of all my problems, but
> how can I fix my folders so that I can delete them again?)
>
> 4. I've had little odd things happen along the way, such as my Groove
> database becoming corrupt, though I'm not sure it's related at all.
>
> I had to reinstall my computer as Windows was running, very, very slowly
and
> I couldn't see why. I searched for ages for the cause, but in the end
> decided to reinstall Windows (I use WindowsXP Pro). Upon reinstalling I
got
> lots of errors on the drives, I think only the 200Gb one, and I was left
> with lots of files and folders in a LOSTFILE folder and FOUND.000/.001
> folders (which I couldn't see in Windows). Does anyone think this is
> related to current problems I am having?
>
> Sorry for the long message, but thought it would be best to put everything
> in the e-mail.
>
> Hope someone can help please?
>
> Kol.
> -----------
>
> After a number of decimal places, nobody gives a damn.
>
>

[Kolin Tregaskes]

Hi there,

I didn't have them on at the same time. I uninstalled all Norton stuff and
ZA THEN put Outpost and McAfee on.

Kol.
-----------

"Real Programmers always confuse Christmas and Halloween because Oct31 ==
Dec25 !" - Andrew Rutherford.


"DL" > wrote in message
...
> Firstly runing or even installing two different AV apps is not a good
idea.
> Just trying to install two can give rise to probs.
> Likewise running two seperate Firewall Apps
> I would perhaps suggest uninstalling both AV apps and Firewalls.
> Ensure XP firewall is on, then checking yr WinXp.install
>
> Adaware or SpyBot Search & Destroy are both OK at detecting 'spyware'
> You can run an online virus checker on both the Symantec and McAfee sites
>
> You appear to have both WinXp files curruption and possibly problems
caused
> by Multiple installs of McAfee & Symantec. It may be that there are probs
> with the HD but untill you correct one its difficult to diagnose the
other.
> David
>
> "Kolin Tregaskes" > wrote in message
> ...
> > Hello,
> >
> > I'm having some odd problems and not sure if it's a virus, Windows or a
> hard
> > drive problem.
> >
> > It started at the beginning of this week after I had to reinstall
Windows
> > completely (which might be related). After reinstalling, I put on
Norton
> > Anti-virus Pro 2003 (plus Norton Systemworks Pro 2003 and Norton
Internet
> > Security Pro 2003) and ZoneAlarm Pro (which I have been using for ages
> now),
> > but have since decided to move over to Agnitum Outpost Firewall Pro 2
and
> > McAfee VirusScan Professional (which both seem slightly better than
Norton
> > and ZA).
> >
> > The current problems I have are:-
> >
> > 1. I cannot install the Security Update for Windows XP (KB810217) from
the
> > Windows Update web site (I've been able to install every other update).
> > When I install this and reboot I get a blue crash screen just before it
> > normally goes into Windows, with the error "IRQL_NOT_LESS_OR_EQUAL" with
> the
> > code at the bottom below:
> >
> > STOP: 0x0000000A (0xFFFFFFE, 0x00000002, 0x00000001, 0x80515DF1)
> >
> > I've look for the IRQL.. and the codes on MS' support pages, but
couldn't
> > find anything related. Does anyone know what this means and/or how to
fix
> > it?
> >
> > 2. I have 2 hard drives, one 40Gb (C:) the other nearly 200Gb, the
second
> > some seems to have a few problems. Some of the folders and files throw
up
> > the following example error when I try to move/delete/copy/rename them:
> >
> > "Cannot rename: Multimedia [name of the folder]: Access is denied. Make
> > sure the disk is not full or write-protected and that the file is not
> > currently in use".
> >
> > The folders are not read-only, I can't see any related file in use in
Task
> > Manager and the drive is not full. Access is denied in DOS as well.
When
> I
> > check the attributes in DOS, it comes up with no attributes, which is
OK?
> >
> > 3. I've not looked in all the folders on the big drive, but one that has
> > some AVI and MPEG videos is causing me to worry. The folder view is set
> to
> > show thumbnails of the videos, but when I go into the folder, it starts
> > loading the thumbnails and eventually pops up with the following error:
> >
> > "Microsoft Visual C++ Runtime Library: Runtime Error! Program
> > C:\WINDOWS\Explorer.EXE. The application has requested the Runtime to
> > terminate it in an unusual way. Please contact the application's
support
> > team for more info."
> >
> > When I had Norton Anti-virus/Internet Security installed, IS came up
with
> > some message about "NetSpy". I know this is a Trojan, but I did a full
> scan
> > then with Norton and I've done a full scan with McAfee and have not
found
> > NetSpy on my system. Norton didn't find anything at all, by the way,
but
> > McAfee has found a few unwanted programs and one Trojan - the problem is
> > that the Trojan is in a folder (or is a file) that I cannot edit and so
I
> > cannot delete the Trojan (this could be the cause of all my problems,
but
> > how can I fix my folders so that I can delete them again?)
> >
> > 4. I've had little odd things happen along the way, such as my Groove
> > database becoming corrupt, though I'm not sure it's related at all.
> >
> > I had to reinstall my computer as Windows was running, very, very slowly
> and
> > I couldn't see why. I searched for ages for the cause, but in the end
> > decided to reinstall Windows (I use WindowsXP Pro). Upon reinstalling I
> got
> > lots of errors on the drives, I think only the 200Gb one, and I was left
> > with lots of files and folders in a LOSTFILE folder and FOUND.000/.001
> > folders (which I couldn't see in Windows). Does anyone think this is
> > related to current problems I am having?
> >
> > Sorry for the long message, but thought it would be best to put
everything
> > in the e-mail.
> >
> > Hope someone can help please?
> >
> > Kol.
> > -----------
> >
> > After a number of decimal places, nobody gives a damn.
> >
> >
>
>

[Kolin Tregaskes]

I've sorted out the files and folders that I could not delete, rename, etc.
In the end it was changing the permissions to Full Control. I have now been
able to delete the viruses, but the rest of the problems remain. :-(

Any advice would be gratefully received?

Kol.
-----------

The glory of friendship is not the outstretched hand, nor the kindly smile,
nor the joy of companionship; it is the spiritual inspiration that comes to
one when he discovers that someone else believes in him and is willing to
trust him with his friendship. - Ralph Waldo Emerson


"Kolin Tregaskes" > wrote in message
...
> Hi there,
>
> I didn't have them on at the same time. I uninstalled all Norton stuff
and
> ZA THEN put Outpost and McAfee on.
>
> Kol.
> -----------
>
> "Real Programmers always confuse Christmas and Halloween because Oct31 ==
> Dec25 !" - Andrew Rutherford.
>
>
> "DL" > wrote in message
> ...
> > Firstly runing or even installing two different AV apps is not a good
> idea.
> > Just trying to install two can give rise to probs.
> > Likewise running two seperate Firewall Apps
> > I would perhaps suggest uninstalling both AV apps and Firewalls.
> > Ensure XP firewall is on, then checking yr WinXp.install
> >
> > Adaware or SpyBot Search & Destroy are both OK at detecting 'spyware'
> > You can run an online virus checker on both the Symantec and McAfee
sites
> >
> > You appear to have both WinXp files curruption and possibly problems
> caused
> > by Multiple installs of McAfee & Symantec. It may be that there are
probs
> > with the HD but untill you correct one its difficult to diagnose the
> other.
> > David
> >
> > "Kolin Tregaskes" > wrote in message
> > ...
> > > Hello,
> > >
> > > I'm having some odd problems and not sure if it's a virus, Windows or
a
> > hard
> > > drive problem.
> > >
> > > It started at the beginning of this week after I had to reinstall
> Windows
> > > completely (which might be related). After reinstalling, I put on
> Norton
> > > Anti-virus Pro 2003 (plus Norton Systemworks Pro 2003 and Norton
> Internet
> > > Security Pro 2003) and ZoneAlarm Pro (which I have been using for ages
> > now),
> > > but have since decided to move over to Agnitum Outpost Firewall Pro 2
> and
> > > McAfee VirusScan Professional (which both seem slightly better than
> Norton
> > > and ZA).
> > >
> > > The current problems I have are:-
> > >
> > > 1. I cannot install the Security Update for Windows XP (KB810217) from
> the
> > > Windows Update web site (I've been able to install every other
update).
> > > When I install this and reboot I get a blue crash screen just before
it
> > > normally goes into Windows, with the error "IRQL_NOT_LESS_OR_EQUAL"
with
> > the
> > > code at the bottom below:
> > >
> > > STOP: 0x0000000A (0xFFFFFFE, 0x00000002, 0x00000001, 0x80515DF1)
> > >
> > > I've look for the IRQL.. and the codes on MS' support pages, but
> couldn't
> > > find anything related. Does anyone know what this means and/or how to
> fix
> > > it?
> > >
> > > 2. I have 2 hard drives, one 40Gb (C:) the other nearly 200Gb, the
> second
> > > some seems to have a few problems. Some of the folders and files
throw
> up
> > > the following example error when I try to move/delete/copy/rename
them:
> > >
> > > "Cannot rename: Multimedia [name of the folder]: Access is denied.
Make
> > > sure the disk is not full or write-protected and that the file is not
> > > currently in use".
> > >
> > > The folders are not read-only, I can't see any related file in use in
> Task
> > > Manager and the drive is not full. Access is denied in DOS as well.
> When
> > I
> > > check the attributes in DOS, it comes up with no attributes, which is
> OK?
> > >
> > > 3. I've not looked in all the folders on the big drive, but one that
has
> > > some AVI and MPEG videos is causing me to worry. The folder view is
set
> > to
> > > show thumbnails of the videos, but when I go into the folder, it
starts
> > > loading the thumbnails and eventually pops up with the following
error:
> > >
> > > "Microsoft Visual C++ Runtime Library: Runtime Error! Program
> > > C:\WINDOWS\Explorer.EXE. The application has requested the Runtime to
> > > terminate it in an unusual way. Please contact the application's
> support
> > > team for more info."
> > >
> > > When I had Norton Anti-virus/Internet Security installed, IS came up
> with
> > > some message about "NetSpy". I know this is a Trojan, but I did a
full
> > scan
> > > then with Norton and I've done a full scan with McAfee and have not
> found
> > > NetSpy on my system. Norton didn't find anything at all, by the way,
> but
> > > McAfee has found a few unwanted programs and one Trojan - the problem
is
> > > that the Trojan is in a folder (or is a file) that I cannot edit and
so
> I
> > > cannot delete the Trojan (this could be the cause of all my problems,
> but
> > > how can I fix my folders so that I can delete them again?)
> > >
> > > 4. I've had little odd things happen along the way, such as my Groove
> > > database becoming corrupt, though I'm not sure it's related at all.
> > >
> > > I had to reinstall my computer as Windows was running, very, very
slowly
> > and
> > > I couldn't see why. I searched for ages for the cause, but in the end
> > > decided to reinstall Windows (I use WindowsXP Pro). Upon reinstalling
I
> > got
> > > lots of errors on the drives, I think only the 200Gb one, and I was
left
> > > with lots of files and folders in a LOSTFILE folder and FOUND.000/.001
> > > folders (which I couldn't see in Windows). Does anyone think this is
> > > related to current problems I am having?
> > >
> > > Sorry for the long message, but thought it would be best to put
> everything
> > > in the e-mail.
> > >
> > > Hope someone can help please?
> > >
> > > Kol.
> > > -----------
> > >
> > > After a number of decimal places, nobody gives a damn.
> > >
> > >
> >
> >
>
>