Forum     

Go Back   Digit Technology Discussion Forum > Software > Software Q&A
Register FAQ Calendar Mark Forums Read

Software Q&A Having trouble with software? Find solutions here


Closed Thread
 
LinkBack Thread Tools Display Modes
Old 26-09-2005, 10:40 AM   #1 (permalink)
Right Off the Assembly Line
 
ri12ku2002's Avatar
 
Join Date: Sep 2005
Location: Dehradun
Posts: 10
Default Virus found in spool.sys any expert here


Found Strain of trojanrootkitAgent.ae in C:\WINNT\SYSTEM32\SPOOLV.SYS
i CHOOSE OPTION REPAIR OR DELETE, BUT THE MESSAGE IS FILE IN USE
WHAT CAN I DO PLEASE GIVE ME SUGGESTION MY INTERNET GOING VERY SLOW
I AM USING WINDOW 2000 AND MY ANTIVIRUS IS qUICK hEAL
__________________
http://iconsystem.info/google.html
ri12ku2002 is offline  
Advertisements. Register and be a member of the community to get rid of them.
Advertisement

Old 26-09-2005, 11:19 AM   #2 (permalink)
Jai Suresh
 
lywyre's Avatar
 
Join Date: Aug 2004
Location: Vellore, TN
Posts: 580
Default

check the filename again ! Is it SPOOLV.SYS or SPOOLSV.sys

If it is SPOOLV.sys you can safely delete it or if it is SPOOLSV.sys it is the printer service, and you rather not delete it.
Instead try system restore, that will be a safer decision and also empty your temp folder (Type "%TEMP%" in the address bar, without quotes).

Also download "Autoruns.exe" from www.sysinternals.com and remove the entry for spoolv.exe in the startup.
Autoruns is a program to check what programs are running while Windows boots up. More:http://www.sysinternals.com/utilities/autoruns.html
lywyre is offline  
Old 26-09-2005, 01:42 PM   #3 (permalink)
Right Off the Assembly Line
 
ri12ku2002's Avatar
 
Join Date: Sep 2005
Location: Dehradun
Posts: 10
Default Its work

Ya my typing mistake its SPOOLSV.SYS
thx its work
but another problem is .................
http://217.170.4.137/_vti_bin/index.html THIS ADDRESS ALSO OPEN AUTOMATICALLY IN BROWSER
HOW CAN I STOP THIS
__________________
http://iconsystem.info/google.html
ri12ku2002 is offline  
Old 26-09-2005, 02:00 PM   #4 (permalink)
Human Spambot
 
Join Date: May 2004
Location: off to "never ever" land
Posts: 2,912
Default

use spybot and see if it removes it
else downlaod hijackthis run it .. an dpost log file here
__________________
No Mercy, No Limits.
Oobertech.net - Keeping Knowledge Free
theraven is offline  
Old 26-09-2005, 03:13 PM   #5 (permalink)
Rebooting
 
Choto Cheeta's Avatar
 
Join Date: Aug 2004
Location: 220.225.82.33
Posts: 6,266
Default

Quote:
but another problem is .................
http://217.170.4.137/_vti_bin/index.html THIS ADDRESS ALSO OPEN AUTOMATICALLY IN BROWSER
HOW CAN I STOP THIS
make sure that the Start page/Home Page is asigned Blank...
__________________
rebooting
ChotoCheeta.com
Choto Cheeta is offline  
Old 26-09-2005, 04:09 PM   #6 (permalink)
Human Spambot
 
expertno.1's Avatar
 
Join Date: May 2005
Location: Expert Planet
Posts: 2,480
Default

Quote:
http://217.170.4.137/_vti_bin/index.html THIS ADDRESS ALSO OPEN AUTOMATICALLY IN BROWSER
HOW CAN I STOP THIS
This is the sure sign of spyware if inspite of making the home page as blank it opens

So get spy bot

and pleaase post a hijackthis log here

Thanks
REgards..
Expertno.1
__________________
Off From Digit Forum for some months.....busy
expertno.1 is offline  
Old 26-09-2005, 05:17 PM   #7 (permalink)
Right Off the Assembly Line
 
ri12ku2002's Avatar
 
Join Date: Sep 2005
Location: Dehradun
Posts: 10
Default problem still remain

thx for ur value post
but the problem still remaining
the home page address is blank
during surfing that address automatically come then a security message come "you want to search bar .................................."
then i close direct from task manager after that my internet not working after reboot net is working but after some time that link come again and internet stop

"Subha sai paresaan huan resart kar kar ke thak gaya huan"

i use the microsft Antispyware but nothing be found

please tell me brief about the log file i am new in computer
__________________
http://iconsystem.info/google.html
ri12ku2002 is offline  
Closed Thread

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


 
Latest Threads
- by chris
- by icebags

Advertisement




All times are GMT +5.5. The time now is 02:31 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.

Search Engine Optimization by vBSEO 3.3.2