mommalina
10-05-2006, 02:12 PM
Last night for some reason we synchronized our clocks at 12:29 AM and kept talking and typing. I forgot to make a note of when we closed--probably about 1 AM? We tied for third and fourth place in computer rooms last night--not bad for a once-a-week session! :clap2:
WHO WAS THERE
KH Members - Lina, Lawrence, Vivvienne, Photolady (still has computer problems, could not use new microphone Elliot graciously sent her), Elliot, rbob (kern), Dan, N3, Fred, Vince C (Spawn), Al Dom (he popped in and out, too much going on, he could not get in a word edgewise :frown: ), Pi rules (our working student arrived late), Rob Cohan, Rich M.
Visitors Who Stayed Long Enough to Chime In - Pleasureusilly (this gentleman's handle did not match his demeanor), NSETK (typed that he or she "loved" one our guys and persisted, our guy did not feel the same way, we threw him/her out of the room), smartd (friend's computer had a virus), Bayou Jazz Baby (Paltalk/music problem).
COMPUTER TOPICS DISCUSSED
*LINA'S COMPUTER HAS VIRUS (?)
- A BitDefender full scan showed: C:\Program Files\QUICKENW\QWDELUXE\DISK24\DATA24.CAB=>(IShield Module 147) Infected: Generic.XPL.Codebase.41C2DB21
- Lina has never used Quicken (personal, not business program). The "virus" Generic.XPL.Codebase.41C2DB21 did not show up on earlier Ewido scan and does not appear on BitDefender web site,
www.bitdefender.com.au/site/VirusInfo/realTimeReporting/
- Trendo-Micro, Adaware scans suggested. Postponed so Lina could concentrate on taking chatroom notes.
- Lawrence suggested:
Change the name of folder C:\Program Files\QUICKENW\QWDELUXE\DISK24\DATA24.CAB=>(IShield Module 147) by changing the suffix. This will isolate the "virus," or ,
Since Lina doesn't use Quicken, delete the program and pull the plug (yes, out of the wall, "illegal" shutdown!), so it does not go into memory.
Email or call BitDefender about discrepancy between their scan report and their web site lists.
- Other Input:
ebase.41C2DB21: it is a cam module - of course if you do a google on xpl codebase you end up at a webcam porn site. Sounds more like a spyware infection.
Virus or spyware. Generic detection for the exploits who can take advantage of the vulnerability Zero-Day detected in Microsoft Internet Explorer, which allows the execution of code.
- Rich joined us later and deduced that Generic.XPL.Codebase.41C2DB21 was a false positive, should be ignored. Good antivirus always identify java cache as virus...and financial software uses java big time. Renaming folder another way, but just ignore it.
- Lina will ignore it. But will do Ewido, Adaware, and Trend Micro scans when time permits.
*VIRUS ON FRIEND'S COMPUTER
- Visitor smartd sought advice to remove virus from friend's computer (it had an expired AV). Rich advised him to use online scanner at
www.bitdefender.com to clean out system and then install free AVG, http://free.grisoft.com/doc/2/lng/us/tpl/v5.
- We owe this visitor an apology! He wanted to help
his friend "remotely," and we failed to answer address that. It went unnoticed because too many of us were using the same color/size fonts in the text box. :nono:
*DELL 4550 HARD DRIVE ACTIVITY ALERT - on the tower's manual shutoff button, two lights, the one on the right indicates hard-drive activity. Lawrence: It just means that there is read write activity on the HD. (Lina's cataracts still trying to figure out that one.)
*HOW LONG TO KEEP A HARD DRIVE - Rich would pitch it after three years. Maxtor drive, three minutes, pitch it!
*LAPTOP VS DESKTOP - Laptop more convenient, but susceptible to heat; problem generating enough power; components not or not as easily accessible. Desktop easier to trouble-shoot. AMD and Intel do better job handling heat.
*MSN EMAIL LOCKOUT (visitor pleasureusilly) - Thinks he was hacked while in Yahoo chatroom. Advised to contact MSN, reset password.
*N3'S REFORMAT PLANS - Still a plan. N3 thinks Lawrence's suggestion, Madboot, too controversial: http://www.madboot.com/
*AVG FIREWALL WITH ANTISPYWARE - Rich likes it.
*RUNNING AV SCANNER IN SAFE MODE, BETTER?
- Rich: Not unless it won't work properly in Windows.
- Rob Cohan: Much more likely to see desired targets.
*TURNING OFF SYSTEM RESTORE - turn off after removal of infection, also kill prefetch folder.
Edit No. 1 - According to Super Moderator Kern (rbob) this should read:
**TURNING OFF SYSTEM RESTORE -
turn off system restore, and empty contents of "prefetch" folder (C:\Windows\prefetch), before removal of infection.
Edit No. 2 - Some disagree with both my and Kern's comments. Before attempting this, check further posts in this thread as well as other posts in this forum about System Restore and the prefetch folder
*MAC AND PALTALK
- N3 wants to know if there is a free download to put Paltalk on a MAC.
- Virtual PC, install window program inside the MAC?
*WEB SITES OF INTEREST?
- Storage Review (Fred)
http://www.storagereview.com/guide2000/ref/hdd/geom/errorRead.html
- Stinger (AV,Lawrence) http://www.tradebit.com/filedetail.php/31884
*DISCUSSIONS ABOVE MY HEAD - Many long, technical discussions, audio and typed, which I just could not follow. Again, the lack of different color/size fonts in text box did not help.
NON-COMPUTER DISCUSSIONS - None! Or too little to comment on. It was a busy session with some intense technical and problem-solving discussions.
Until next week, take care,:grouphug:
Lina
WHO WAS THERE
KH Members - Lina, Lawrence, Vivvienne, Photolady (still has computer problems, could not use new microphone Elliot graciously sent her), Elliot, rbob (kern), Dan, N3, Fred, Vince C (Spawn), Al Dom (he popped in and out, too much going on, he could not get in a word edgewise :frown: ), Pi rules (our working student arrived late), Rob Cohan, Rich M.
Visitors Who Stayed Long Enough to Chime In - Pleasureusilly (this gentleman's handle did not match his demeanor), NSETK (typed that he or she "loved" one our guys and persisted, our guy did not feel the same way, we threw him/her out of the room), smartd (friend's computer had a virus), Bayou Jazz Baby (Paltalk/music problem).
COMPUTER TOPICS DISCUSSED
*LINA'S COMPUTER HAS VIRUS (?)
- A BitDefender full scan showed: C:\Program Files\QUICKENW\QWDELUXE\DISK24\DATA24.CAB=>(IShield Module 147) Infected: Generic.XPL.Codebase.41C2DB21
- Lina has never used Quicken (personal, not business program). The "virus" Generic.XPL.Codebase.41C2DB21 did not show up on earlier Ewido scan and does not appear on BitDefender web site,
www.bitdefender.com.au/site/VirusInfo/realTimeReporting/
- Trendo-Micro, Adaware scans suggested. Postponed so Lina could concentrate on taking chatroom notes.
- Lawrence suggested:
Change the name of folder C:\Program Files\QUICKENW\QWDELUXE\DISK24\DATA24.CAB=>(IShield Module 147) by changing the suffix. This will isolate the "virus," or ,
Since Lina doesn't use Quicken, delete the program and pull the plug (yes, out of the wall, "illegal" shutdown!), so it does not go into memory.
Email or call BitDefender about discrepancy between their scan report and their web site lists.
- Other Input:
ebase.41C2DB21: it is a cam module - of course if you do a google on xpl codebase you end up at a webcam porn site. Sounds more like a spyware infection.
Virus or spyware. Generic detection for the exploits who can take advantage of the vulnerability Zero-Day detected in Microsoft Internet Explorer, which allows the execution of code.
- Rich joined us later and deduced that Generic.XPL.Codebase.41C2DB21 was a false positive, should be ignored. Good antivirus always identify java cache as virus...and financial software uses java big time. Renaming folder another way, but just ignore it.
- Lina will ignore it. But will do Ewido, Adaware, and Trend Micro scans when time permits.
*VIRUS ON FRIEND'S COMPUTER
- Visitor smartd sought advice to remove virus from friend's computer (it had an expired AV). Rich advised him to use online scanner at
www.bitdefender.com to clean out system and then install free AVG, http://free.grisoft.com/doc/2/lng/us/tpl/v5.
- We owe this visitor an apology! He wanted to help
his friend "remotely," and we failed to answer address that. It went unnoticed because too many of us were using the same color/size fonts in the text box. :nono:
*DELL 4550 HARD DRIVE ACTIVITY ALERT - on the tower's manual shutoff button, two lights, the one on the right indicates hard-drive activity. Lawrence: It just means that there is read write activity on the HD. (Lina's cataracts still trying to figure out that one.)
*HOW LONG TO KEEP A HARD DRIVE - Rich would pitch it after three years. Maxtor drive, three minutes, pitch it!
*LAPTOP VS DESKTOP - Laptop more convenient, but susceptible to heat; problem generating enough power; components not or not as easily accessible. Desktop easier to trouble-shoot. AMD and Intel do better job handling heat.
*MSN EMAIL LOCKOUT (visitor pleasureusilly) - Thinks he was hacked while in Yahoo chatroom. Advised to contact MSN, reset password.
*N3'S REFORMAT PLANS - Still a plan. N3 thinks Lawrence's suggestion, Madboot, too controversial: http://www.madboot.com/
*AVG FIREWALL WITH ANTISPYWARE - Rich likes it.
*RUNNING AV SCANNER IN SAFE MODE, BETTER?
- Rich: Not unless it won't work properly in Windows.
- Rob Cohan: Much more likely to see desired targets.
*TURNING OFF SYSTEM RESTORE - turn off after removal of infection, also kill prefetch folder.
Edit No. 1 - According to Super Moderator Kern (rbob) this should read:
**TURNING OFF SYSTEM RESTORE -
turn off system restore, and empty contents of "prefetch" folder (C:\Windows\prefetch), before removal of infection.
Edit No. 2 - Some disagree with both my and Kern's comments. Before attempting this, check further posts in this thread as well as other posts in this forum about System Restore and the prefetch folder
*MAC AND PALTALK
- N3 wants to know if there is a free download to put Paltalk on a MAC.
- Virtual PC, install window program inside the MAC?
*WEB SITES OF INTEREST?
- Storage Review (Fred)
http://www.storagereview.com/guide2000/ref/hdd/geom/errorRead.html
- Stinger (AV,Lawrence) http://www.tradebit.com/filedetail.php/31884
*DISCUSSIONS ABOVE MY HEAD - Many long, technical discussions, audio and typed, which I just could not follow. Again, the lack of different color/size fonts in text box did not help.
NON-COMPUTER DISCUSSIONS - None! Or too little to comment on. It was a busy session with some intense technical and problem-solving discussions.
Until next week, take care,:grouphug:
Lina