Re: Constantly get error message refering to "chkdbb.exe"
- From: "ScudRunr" <ScudRunr@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 22 Oct 2005 14:16:13 -0700
I purchased and installed spysweeper and it found "trojan-backdoor-ngvera" in
my system. This is a trojan used through irc servers on port 5190 (I do a
lot of irc stuff). Spy Sweeper removed the trojan and everything is fine so
far. Wonder why my BRAND NEW version of Norton Antivirus 2006 missed it?
Also Spybot S & D missed it. Normally I get the error message within a
minute of reboot. So far I've been back online at least 20 minutes and no
message so far. Thanks for your help though.
"Gerry Cornell" wrote:
> Did you do the last bit?
>
> Finally run HijackThis and post the HijackThis log to the HijackThis
> forum here:
> http://aumha.net/
>
> You will need to register with Aumha to be able to post.
>
> That is where you will eliminate malware as a potential cause of your
> problem!
>
> --
>
>
> Hope this helps.
>
> Gerry
> ~~~~~~~~~~~~~~~~~~~~~~~~
> FCA
>
> Using invalid email address
>
> Stourport, Worcs, England
> Enquire, plan and execute.
> ~~~~~~~~~~~~~~~~~~~~~~~~
> Please tell the newsgroup how any
> suggested solution worked for you.
>
> http://dts-l.org/goodpost.htm
>
> ~~~~~~~~~~~~~~~~~~~~~~~~
>
> "ScudRunr" <ScudRunr@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:815F7385-4262-409F-BA4B-E3A8042E8DAC@xxxxxxxxxxxxxxxx
> > Tried everything exactly as suggested......NO JOY. Problem still
> > exists.
> > Any further advice? Anyone? Thanks
> >
> > "ScudRunr" wrote:
> >
> >> WOW, sounds like a lot of work. I'll get started and let you know
> >> how it
> >> works out. Thanks!!!
> >>
> >> "Gerry Cornell" wrote:
> >>
> >> > Have you checked for spyware?
> >> >
> >> > When dealing with a persistent virus / trojan you need to delete
> >> > system
> >> > restore points and not use them as they will contain the virus and
> >> > put
> >> > it
> >> > back into your system. Turn off System Restore until cleaning is
> >> > finished. Also run your anti-virus with updated definitions in safe
> >> > mode. Sometimes you need to run an anti-virus from a floppy and
> >> > Trend
> >> > offer one that can be used.
> >> >
> >> > Create a new folder named Sysclean (e.g., C:\Program
> >> > files\Sysclean, or
> >> > just a desktop folder).
> >> > Download Sysclean.com (http://www.trendmicro.com/download/dcs.asp)
> >> > and
> >> > place it in this folder.
> >> >
> >> > Download the latest Controlled Pattern Release zip
> >> > (http://www.trendmicro.com/download/pattern.asp, e.g., lpt123.zip)
> >> > and
> >> > extract its contents to the same folder. See the Readme text file
> >> > for
> >> > additional instructions.
> >> >
> >> > Delete Temporary Internet Files (IE Tools>Internet Options>General)
> >> > accepting the option to delete all offline content. Reboot and
> >> > delete
> >> > contents of all TEMP folders and then your Recycle Bin.
> >> >
> >> > Close all running programs including your anti-virus application,
> >> > go
> >> > offline, and run Sysclean. For best results, do nothing with the
> >> > machine
> >> > until the scan completes.
> >> >
> >> > If the scan shows any infections in System Restore files and you're
> >> > running WinXP, create a new Restore Point
> >> > (Start>Programs>Accessories>System Tools>System Restore), then
> >> > delete
> >> > all but the most recent Restore Point
> >> > (Start>Programs>Accessories>System
> >> > Tools>Disk Cleanup>More options).
> >> >
> >> > Work through the spyware removal programmes etc in turn in safe
> >> > mode
> >> > until you get no results.
> >> >
> >> > Afterwards, update your own anti-virus application and perform
> >> > another
> >> > full system scan.
> >> >
> >> > Finally run HijackThis and post the HijackThis log to the
> >> > HijackThis
> >> > forum here:
> >> > http://aumha.net/
> >> >
> >> > You will need to register with Aumha to be able to post.
> >> >
> >> > --
> >> >
> >> >
> >> > Hope this helps.
> >> >
> >> > Gerry
> >> > ~~~~~~~~~~~~~~~~~~~~~~~~
> >> > FCA
> >> >
> >> > Using invalid email address
> >> >
> >> > Stourport, Worcs, England
> >> > Enquire, plan and execute.
> >> > ~~~~~~~~~~~~~~~~~~~~~~~~
> >> > Please tell the newsgroup how any
> >> > suggested solution worked for you.
> >> >
> >> > http://dts-l.org/goodpost.htm
> >> >
> >> > ~~~~~~~~~~~~~~~~~~~~~~~~
> >> >
> >> > "ScudRunr" <ScudRunr@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >> > news:DD715AC2-2E6F-4CC6-A114-547038D7A759@xxxxxxxxxxxxxxxx
> >> > >I am constantly getting a warning that says "chkdbb.exe has
> >> > >encountered
> >> > >a
> >> > > problem and needs to close". What is chkdbb.exe and with what
> >> > > program
> >> > > is it
> >> > > associated. A file search of my pc showed this file
> >> > > "C:\windows\prefetch\CHKDBB.EXE-337A0459.pf". It seemed to start
> >> > > ABOUT the
> >> > > time I installed Norton Antivirus 2006 but I'm not sure of that.
> >> > > Thanks for
> >> > > your help.
> >> >
> >> >
>
>
.
- Prev by Date: invalid BOOT.INI file
- Next by Date: Re: WindowsXP File Protecion (Side by Side ID 36)
- Previous by thread: invalid BOOT.INI file
- Next by thread: Re: Error Message
- Index(es):
Relevant Pages
|
