"difftime" error?

[KC]

Xp Pro, and I keep getting a popup very small dialog box
with the above meesage. The only button with it is "OK."

Cannot locate any info on cause, remedy, etc.

Any thoughts?

Thanks, KC

[Malke]

KC wrote:

> Xp Pro, and I keep getting a popup very small dialog box
> with the above meesage. The only button with it is "OK."
>
> Cannot locate any info on cause, remedy, etc.
>
> Any thoughts?
>
> Thanks, KC

What does a scan with a current antivirus program (meaning a version not
earlier than 2002 and using updated virus definitions) show? Also,
remove spyware with Spybot Search & Destroy from www.security.kolla.de
and Ad-aware from www.lavasoftusa.com. Be sure to update these programs
before running them. It is best to run antivirus and spyware removal
tools in Safe Mode.

Malke
--
MS MVP - Windows Shell/User
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"

[Richard]

Malke > wrote in message >...
> KC wrote:
>
> > Xp Pro, and I keep getting a popup very small dialog box
> > with the above meesage. The only button with it is "OK."
> >
> > Cannot locate any info on cause, remedy, etc.
> >
> > Any thoughts?
> >
> > Thanks, KC
>
> What does a scan with a current antivirus program (meaning a version not
> earlier than 2002 and using updated virus definitions) show? Also,
> remove spyware with Spybot Search & Destroy from www.security.kolla.de
> and Ad-aware from www.lavasoftusa.com. Be sure to update these programs
> before running them. It is best to run antivirus and spyware removal
> tools in Safe Mode.
>
> Malke

I have it too on my system. I've noticed that crcss.exe is also
running sometimes. I searched for this file on my system but couldn't
find the file.
The only reference I found was for SQL Server in MS Knolwedge Base
#281345
crcss.exe shows up in the Registry under Internet Explorer -> Explorer
Bars

[Richard]

Malke > wrote in message >...
> KC wrote:
>
> > Xp Pro, and I keep getting a popup very small dialog box
> > with the above meesage. The only button with it is "OK."
> >
> > Cannot locate any info on cause, remedy, etc.
> >
> > Any thoughts?
> >
> > Thanks, KC
>
> What does a scan with a current antivirus program (meaning a version not
> earlier than 2002 and using updated virus definitions) show? Also,
> remove spyware with Spybot Search & Destroy from www.security.kolla.de
> and Ad-aware from www.lavasoftusa.com. Be sure to update these programs
> before running them. It is best to run antivirus and spyware removal
> tools in Safe Mode.
>
> Malke

I have it too on my system. I've noticed that crcss.exe is also
running sometimes. I searched for this file on my system but couldn't
find the file.
The only reference I found was for SQL Server in MS Knolwedge Base
#281345
crcss.exe shows up in the Registry under Internet Explorer -> Explorer
Bars

[Parish]

Richard wrote:

> Malke > wrote in message >...
>> KC wrote:
>>
>> > Xp Pro, and I keep getting a popup very small dialog box
>> > with the above meesage. The only button with it is "OK."
>> >
>> > Cannot locate any info on cause, remedy, etc.
>> >
>> > Any thoughts?
>> >
>> > Thanks, KC
>>
>> What does a scan with a current antivirus program (meaning a version not
>> earlier than 2002 and using updated virus definitions) show? Also,
>> remove spyware with Spybot Search & Destroy from www.security.kolla.de
>> and Ad-aware from www.lavasoftusa.com. Be sure to update these programs
>> before running them. It is best to run antivirus and spyware removal
>> tools in Safe Mode.
>>
>> Malke
>
> I have it too on my system. I've noticed that crcss.exe is also
> running sometimes. I searched for this file on my system but couldn't
> find the file.

CSRSS == Client/Server Runtime SubSystem

Resides in %systemroot%\system32

http://www.jsiinc.com/subi/tip4000/rh4079.htm

First item in More Information.

HTH

Regards,

Parish

> The only reference I found was for SQL Server in MS Knolwedge Base
> #281345
> crcss.exe shows up in the Registry under Internet Explorer -> Explorer
> Bars

[CalKeith]

Malke, I found this in google. I also received an "ecard
notification." Grisoft AV has vaulted all virus, but "difftime"
continues to show error every 30 seconds if closed. See below.

Norton pegged the trojan as it was downloaded but was not able to fix
it. The difftime error started immediately after.

A subsequent check with Mcaffee found something which it identified
the
VBS/psyme trojan and deleted it, however I would guess that it was
some
variant of the virus as it really didn't fit the profile for this
particular bug.

difftime is a visual basic command. Apparently the trojan dropped some
VB nasties on the computer which are trying to run but contain an
error... hence the difftime error window.

Mcafee has a new virus listed on their site which sounds like it might
be it VBS/Lucave however I haven't been able to find the VBS payloads
on the machine. I have also not had time to update the mcafee DAT
files
and rescan to see if it will find it. I'll let you know if it works...
although I don't have a lot of confidence.

Basically I haven't found the problem files on the machine and haven't
gotten any virus software to pick them up either. I'm on the verge of
wiping the machine and reinstalling... as the gateway tech support
recommended after giving the issue all of 10 seconds consideration...
but obviously I would really rather fix the damn problem.

If anyone is able to find the mystery VB file, or otherwise fix this
problem please let me know. I would greatly appreciate some help.















Malke > wrote in message >...
> KC wrote:
>
> > Xp Pro, and I keep getting a popup very small dialog box
> > with the above meesage. The only button with it is "OK."
> >
> > Cannot locate any info on cause, remedy, etc.
> >
> > Any thoughts?
> >
> > Thanks, KC
>
> What does a scan with a current antivirus program (meaning a version not
> earlier than 2002 and using updated virus definitions) show? Also,
> remove spyware with Spybot Search & Destroy from www.security.kolla.de
> and Ad-aware from www.lavasoftusa.com. Be sure to update these programs
> before running them. It is best to run antivirus and spyware removal
> tools in Safe Mode.
>
> Malke

[Daniel Merchant]

I am also getting this error but on Win2000. A suspect file was
opened on the PC but I have run every scan under the sun to get rid of
it to no avail.

If anyone finds out what is causing this I would love to know. It is
driving me mad.

Daniel Merchant

[Daniel Merchant]

I am also getting this error but on Win2000. A suspect file was
opened on the PC but I have run every scan under the sun to get rid of
it to no avail.

If anyone finds out what is causing this I would love to know. It is
driving me mad.

Daniel Merchant

[Daniel Merchant]

I am also getting this error but on Win2000. A suspect file was
opened on the PC but I have run every scan under the sun to get rid of
it to no avail.

If anyone finds out what is causing this I would love to know. It is
driving me mad.

Daniel Merchant

[Richard]

(Daniel Merchant) wrote in message >...
> I am also getting this error but on Win2000. A suspect file was
> opened on the PC but I have run every scan under the sun to get rid of
> it to no avail.
>
> If anyone finds out what is causing this I would love to know. It is
> driving me mad.
>
> Daniel Merchant

I think I found the problem app.

I believe it is called: ra32.exe
I found it in Documents and Settings\<user>\Application Data\Microsoft

[CalKeith]

Following fixxed for me on XP:

Go to: http://www.trendmicro.com

Run their free "HOUSE CALL" scan. Delete process "ra32.exe" after end
task that item. Ditto for a file called "janman.dll"

All other virus findings for me were in compressed vault "Sys Vol"
files placed by Grisoft AV.

FYI, YMMV. However, HTH,--KC







(Richard) wrote in message >...
> (Daniel Merchant) wrote in message >...
> > I am also getting this error but on Win2000. A suspect file was
> > opened on the PC but I have run every scan under the sun to get rid of
> > it to no avail.
> >
> > If anyone finds out what is causing this I would love to know. It is
> > driving me mad.
> >
> > Daniel Merchant
>
> I think I found the problem app.
>
> I believe it is called: ra32.exe
> I found it in Documents and Settings\<user>\Application Data\Microsoft