I have a very strange looking folder under my C:\WINDOWS folder, which if it
is not a trojan then it must be some kind of device driver install that went
very bad. I would like help identifying what it might be.

The folder is named:

C:\WINDOWS\EFUZEJYDIXC1AZ4D

and it contains copies of many Windows system files. The contents of this
folder are posted here:

http://pages.uschw.com/usenet/EFUZEJ-folder/folder-contents.txt

Of special note is a logfile in that folder whose name and contents are
linked here:

http://pages.uschw.com/usenet/EFUZEJ-folder/sthdae.log

You may want to open that logfile in an editor other than NOTEPAD that can
hand LF only at the end of each line. Word 2003 opened it fine here.

In that logfile I see attempts to add device drivers, that are failing with
various messages about an invalid pin. That almost looks like Bluetooth?

What I find most suspicious about this folder is that it copies over so many
critical Windows system files. Why would any device installation need its
own private copies of those files?

Do You Hate Your Job?
If You Are Like Me And REALLY Hate Your Job, You Can Do What I have Done And
Tell All About Your Company At A Great And CHEAP New Site Called
Dont Work For These . Com

http://www.dontworkforthese.com
This Site Has Chat Rooms,
A Joke Section,
A Great Story Section Where You Can Tell All The Funny Or Stupid Things That
Happen Or Have Happened To You During Your Working Day.
Work Forums For You To Ask And Reply To Questions
And Do Not Forget You Can Tell All About Your Terrible Treatment You Endure
While Trying To Make A Living.
Best Of All They DO NOT Want Your Credit Card Details In Order To Join.
You Pay Through PayPal

...whilst in the middle of writing my Aunty an email, Windows Defender
decided to fire up and do a sweep,
and as soon as it started up, up popped AVG 8.0 "Threat Detected,"

...false positive ?
...should I upload C:\Windows\system32\PCANDIS5.SYS to Virus Total ?
AVG 8.0 has never complained about this file before now !

regards, Richard

I believe I got infected with a trojan virus that is re-directing my Internet
Explorer browser to www.free-virusscan.com.
(www.free-virusscan.com/id/492933/4/1/). I also get a message indicating
that my Microsoft programs may have been corrupted and wont let me access any
program folders. I am, however, allowed to access my Microsoft Word files.
I have conducted the Live One Care scans twice. However, I receive a message
indicating that there are no viruses or spyware on my computer.

Any help?

What is this sort of stuff doing in a tech support forum?
--
Alan

"news@posting.org" wrote:

I've been using AVG for years. I don't like the new 8.0 version. What
other freeware antivirus software does the group recommend. I'm considering
Avira - has anyone used it?

Does anyone have experience with ad-aware pro. I like the idea of real time
spyware blocking but I don't want 2 antivirus programs on my computer.

i hav encountered th abv-captioned virus (worm acc to Norman AV). detected,
quarantined, deleted but it keeps coming back. appreciate if anyone can help.
i am using vista. btw, how do i turn off sys restore? tks!

Win XP home, NOD32 3.0.650.0 antivirus. I got infected with Win32/Alman.NAB
virus. My antivirus show some executable files where infected, aalso when
browse web with Internet Explorer, windows periodically popup error mesages
called RUNDLL:
"Error loading C:\Windows\AppPatch\Jview.dll
The specified module could not be found."
(I use Firefox by default).

After running whole computer scan, NOD32 isolated the infected files in a
Quarantine folder. I removed the Jview.dll
As far I know, Win32/Alman.NAD is infector, downloader and it has got his
own driver. If it sit inside some legit process (IE), then it will add new
registry key again. Then removing will be harder.
Then I run HijackThis utility, and got the following report, I looked
through the logfile, but I'm not sure which processess and keys are
legitimate.

Hi,
Does anyone know where can I download virus ?
I want to test my AV system.

Eldad