| View previous topic :: View next topic |
| Author |
Message |
beazcat
Cadet
Joined: Feb 18, 2005
Posts: 5
Location: USA
|
 Posted: Fri Feb 18, 2005 5:47 pm Post subject: I Guess I'm Just Stupid |
|
|
In an attempt to fix some problems I was having, a friend suggested I run msconfig on my Win98SE to see what culprits I might have during start up.
I have found some of these culprits and have gotten rid of them as he suggested. My problem tho is this: I ran into a few that I can find absolutely no info on anywhere. Is this normal?
CSCRIPS.EXE
MKCOMPAS.EXE
CLSPACJ.EXE
INFUNISS.EXE
INTERNAS.EXE
|
|
| Back to top |
|
 |
CMNetworx
Cadet
Joined: Feb 18, 2005
Posts: 5
Location: USA
|
| Posted: Fri Feb 18, 2005 6:57 pm Post subject: |
|
|
find the file, and view its properties, RT-Click>Properties, If it has no info under the version or comments tab, it is probably spyware.., you can also arrange icons by date (rt-click, arrange icons>by date), and watch for the newest files (towards bottom most times), they are the most probable, check their properties also..
|
|
| Back to top |
|
|
beazcat
Cadet
Joined: Feb 18, 2005
Posts: 5
Location: USA
|
| Posted: Fri Feb 18, 2005 7:05 pm Post subject: |
|
|
Thanks for the info CMNetworx. I am relatively new to this but in relation to your post, I have run both Adaware and Spybot. I think I have the names correct. They did not show these items I listed as spyware. Should they?
|
|
| Back to top |
|
|
TakeBK
Special Response Team
Premium Member
Joined: Feb 10, 2005
Posts: 1604
|
| Posted: Fri Feb 18, 2005 7:11 pm Post subject: |
|
|
| beazcat wrote: | In an attempt to fix some problems I was having
CSCRIPS.EXE
MKCOMPAS.EXE
CLSPACJ.EXE
INFUNISS.EXE
INTERNAS.EXE |
Did you have a virus/trojan ?It might be they changed randomly the name of a good program
Example CLSPACJ.EXE there is a CLSPACK.EXE
http://www.filename.info/f/clspack.exe.html
Bad thing is I found this from search for CSCRIPS.EXE at the techsupport at The university of dallas
http://www.utdallas.edu/ir/tcs/techsupp/virus_id.txt.html
On that page it says linked to virus W32/Magistr.a@MM
So did symantec search and found this
http://securityresponse.symantec.com/avcenter/venc/data/w32.magistr.24876@mm.html
Dont want to scare you but you might want to run another barrage of scans from different AntiVirus online scanners and not just spybot and adware.From reading this list on the webpage I listed above that name looks like it came from an e-mail that was named CSCRIPS.EXE and it had a virus found in it .
So that is all I could dig up for now see what some of the other folks find or know.
Good luck
_________________
www.bkops2.net Online BHD, JO:E, ARMA, BF2 squad
Did you see that?I know you did, don't lie!!!!!
|
|
| Back to top |
|
|
beazcat
Cadet
Joined: Feb 18, 2005
Posts: 5
Location: USA
|
| Posted: Fri Feb 18, 2005 7:36 pm Post subject: |
|
|
Thanks TakeBK. That link at utdallas also showed
CLSPACK.EXE tied into the same virus. I seem to recall being affected by that virus several years back and Norton caught it and I thought fixed it. Strange that those items remain. I have recently run Avast and Trend Micro scans and neither detected those.
Anyway, thanks for your input.
|
|
| Back to top |
|
|
TakeBK
Special Response Team
Premium Member
Joined: Feb 10, 2005
Posts: 1604
|
| Posted: Fri Feb 18, 2005 7:40 pm Post subject: |
|
|
It might be in archives of Norton in the Quarintine .How did these files come to your attention?
Maybe spybot saw it in a folder where the quaritine was is all.
I would still do some more scanning.Or redo the scan that found it and trace the file location
_________________
www.bkops2.net Online BHD, JO:E, ARMA, BF2 squad
Did you see that?I know you did, don't lie!!!!!
|
|
| Back to top |
|
|
beazcat
Cadet
Joined: Feb 18, 2005
Posts: 5
Location: USA
|
| Posted: Fri Feb 18, 2005 7:44 pm Post subject: |
|
|
| TakeBK wrote: | How did these files come to your attention?
|
When I ran msconfig they showed up under the StartUp.
|
|
| Back to top |
|
|
TakeBK
Special Response Team
Premium Member
Joined: Feb 10, 2005
Posts: 1604
|
| Posted: Fri Feb 18, 2005 7:54 pm Post subject: |
|
|
When you found it way back when did you just let norton or what ever remove it? Or did you follow the directions in the link I gave you and delete/edit all registry keys and win ini files like it said too?
It might still be there.
_________________
www.bkops2.net Online BHD, JO:E, ARMA, BF2 squad
Did you see that?I know you did, don't lie!!!!!
|
|
| Back to top |
|
|
beazcat
Cadet
Joined: Feb 18, 2005
Posts: 5
Location: USA
|
| Posted: Fri Feb 18, 2005 7:57 pm Post subject: |
|
|
No, I just let Norton do it's thing. I am stupid now, but was even stupider back then. I saved that link and will follow the instructs this weekend when the animals are asleep and minus the distractions. Thanks again.
|
|
| Back to top |
|
|
TakeBK
Special Response Team
Premium Member
Joined: Feb 10, 2005
Posts: 1604
|
|
| Back to top |
|
|
Robin
Site Admin
Phishing Squad Team Lead
Joined: Oct 15, 2003
Posts: 8924
|
| Posted: Tue Feb 22, 2005 7:26 pm Post subject: |
|
|
If you need more help on this please post a hijackthis log in the hijackthis forum, and one of the site's volunteer staff will assist you there.
|
|
| Back to top |
|
|
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
