Re: SPR/Madtol.C program
From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 07/15/05
- Next message: Johnny Hawk: "RE: Windows xp machine password"
- Previous message: Jack: "Windows xp machine password"
- In reply to: Kayman: "Re: SPR/Madtol.C program"
- Next in thread: Kayman: "Re: SPR/Madtol.C program"
- Reply: Kayman: "Re: SPR/Madtol.C program"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 15 Jul 2005 11:52:00 -0400
From: "Kayman" <Kayman@discussions.microsoft.com>
< snip >
| During downloading operation An Error Message appeared: "SDStbRes.dll: The
| specified module could not be found". This message however disappeared after
| 10 seconds or so.
| After completion of download operation a small McAfee Command Line Scanner
| window appeared: "Do you want to run a scan now"? "Yes" "No".
| I clicked Yes. The scan did not run but the NT based OS AV Command Line
| Scanners Menu appeared instead. Well, I pressed the #3 key on my keyboard (#3
| is to run McAfee, #2 is to run Trend and #1 is to run Sophos).
| Nothing happened.
| I rebooted the computer, accessed the appropriate folder and after the NT
| Based OS AV Command Line Scanners Menu appeared I hit #3 again.
| The following error message was displayed:
| c:\AV-CSL\McAfee\update.ini not opened for READ, error code [0]
|
| I run another RootKitRevealer Scan which found one (1) discrepancy:
| Path: C:\Document and Settings\Pattaya2005\LocalSettings\Temp\~DFEE6C.tmp
| Time Stamp 7/15/2005, 12:17PM, Size: 32KB
| Description: Visible in Windows API but not in MFT or directory index.
|
| Well David, I hope all this helps to come up with a solution, Thanks!!
|
Kayman:
That is indicative that disabling both FireWalls was key to allowing FTP.EXE to download the
needed files. On my McAfee VirusScan Enterprise v7.1 the file "SDStbRes.dll" was not found.
Are you using the retail version McAfee VirusScan v6 ? My scripts and McAfee have NO
dependency upon "SDStbRes.dll" which leads me to believe you do ahve this version of
software.
In any case, *IF* you do, disable McAfee v6.0 and the FireWalls and proceed to download.
You may have to reboot prior to doing so asd the PC was have been less stable by said error.
However, you ran Trend and Sophos OK and neither found anything. Yoy may want to just run
them again as it has been a few days and there are NEW signatures since the initial run and
ignore the McAfee section.
Then I would also suggest getting back to the ROOT of the problem as to what software
declared SPR/Madtol.C and in what file (fully quallified name and path).
-- Dave http://www.claymania.com/removal-trojan-adware.html http://www.ik-cs.com/got-a-virus.htm
- Next message: Johnny Hawk: "RE: Windows xp machine password"
- Previous message: Jack: "Windows xp machine password"
- In reply to: Kayman: "Re: SPR/Madtol.C program"
- Next in thread: Kayman: "Re: SPR/Madtol.C program"
- Reply: Kayman: "Re: SPR/Madtol.C program"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
