Try to scan with www.pandasoftware.com active scan
Look for changes on system32\dirvers\etc on hosts and the other
Look on registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run for a
Considere a hard failure
Tech Services Terapies.org
From: Lee Sharp [mailto:leesharp at hal dash pc dot org]
Sent: Wednesday, August 02, 2006 9:38 PM
Subject: Re: [m0n0wall] OT Strange Virus?
From: "Lee Sharp" <leesharp at hal dash pc dot org>
> Sorry to go way off topic again, but if there is a better group of
> computer people around, I don't know it. I have an odd problem that I
> am truly stuck on. A Windows XP Pro system that slowly looses jpegs.
> Seriously. A directory full of mixed files, and over time the jpegs,
> and only the jpegs, will go missing. Only html, giffs, and movies
> Spybot, AVG, Ad Aware, and Rootkit Revealer all show nothing.
> Scanning under safe mode still shows nothing. In desperation I
> scanned (With an older virus list) with UBCD 4 Win, and still nothing.
> I have already lost money on this job, but I want to KNOW what is doing
this... Any thoughts?
Updates to all the suggestions. First, giffs are not immune, just killed
last. :-) A folder that lost all the jpeg, and had nothing but html and
giffs now only has html. Only 2 people use this system, and both do not
want to loose files. AVG is already installed, and has been for 2 years.
When I booted the UBCD 4 Win, I ran a few other anti-virus, and nothing. I
have used the sysinternals Root Kit Revealer to no effect. I looked at file
mon, but this is very slow. Happens over days, not hours. Can happen
anywhere on the hard drive, but when it does, it will "finish" a directory
tree before moving on. No pictures have vanished from the desktop, for
example, but they have from folders on the desktop. I have some "bait"
folders, but there are lots of folders and images on this system. I will
need a lot of bait... Now I am off to keep cursing. :-)
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch