Re: Infection messages?

Discussion in 'Virus Information' started by Daave, Nov 23, 2009.

  1. Thanks.

    I asked about Windows Washer (and similar) because that is one program
    that 'cleans up' some of the residual browsing traces by deleting
    certain index.dat files (for privacy zealots). It wouldn't surprise me
    if this were a conflict between two such programs - one that didn't
    forsee the possibility that "not exist" could ever exist.

    The OP could conceivably uninstall and then reinstall them in the
    reverse order and avoid the 'non handled' error (assuming the other
    program is written more smartly).
     
    FromTheRafters, Dec 12, 2009
    #61
    1. Advertisements

  2. No, only what's in IE8 and CCleaner.

    ***
    I'm not too familiar with that (although I use it myself), but do you
    use it in conjunction with a browser add-on (Firefox?).

    I'm just grasping at straws here - try removing ccleaner completely (you
    can reinstall it later) and see if the problem persists.
    ***
     
    FromTheRafters, Dec 13, 2009
    #62
    1. Advertisements

  3. It's hard to say, for a couple of reasons.
    - even when logging on as "administrator" rather than just a member of
    the administrator's group, you can't shut Kaspersky down without
    uninstalling it. A "turn off protection for an hour" does not apply
    through a reboot.
    - sometimes, during normal operation, all of these messages vanish
    anyway.

    Having said that, I managed a cleanish boot with just Kaspersky and
    the loudspeaker symbol showing in the tray, everything else disabled.
    There were no infection messages on reboot. But I re enabled
    everything and have booted several times since then and there are
    still no messages. What this means I don't know.
     
    Robin Bignall, Dec 13, 2009
    #63
  4. No, I just use IE8.
    Ccleaner shouldn't do anything unless it's actually run. I haven't
    run it for a few days, I just rebooted and got about 40 of these
    messages, after having none for a while. Must get to bed now, but
    tomorrow I'll physically disconnect from the Internet and boot a few
    times to see what happens.
     
    Robin Bignall, Dec 13, 2009
    #64
  5. Completely uninstall Kaspersky and any other AV you may be running, reboot a
    few times to see if it returns if it does then we know it is not Kaspersky.


    --
    The Real Truth http://pcbutts1-therealtruth.blogspot.com/
    *WARNING* Do NOT follow any advice given by the people listed below.
    They do NOT have the expertise or knowledge to fix your issue. Do not waste
    your time.
    David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




    It's hard to say, for a couple of reasons.
    - even when logging on as "administrator" rather than just a member of
    the administrator's group, you can't shut Kaspersky down without
    uninstalling it. A "turn off protection for an hour" does not apply
    through a reboot.
    - sometimes, during normal operation, all of these messages vanish
    anyway.

    Having said that, I managed a cleanish boot with just Kaspersky and
    the loudspeaker symbol showing in the tray, everything else disabled.
    There were no infection messages on reboot. But I re enabled
    everything and have booted several times since then and there are
    still no messages. What this means I don't know.
     
    The Real Truth MVP, Dec 13, 2009
    #65
  6. Daave

    Daave Guest

    Alas, intermittent problems are the most difficult to solve! And perhaps
    you unknowingly fixed your problem.
     
    Daave, Dec 14, 2009
    #66
  7. It's hard to say, for a couple of reasons.
    - even when logging on as "administrator" rather than just a member of
    the administrator's group, you can't shut Kaspersky down without
    uninstalling it. A "turn off protection for an hour" does not apply
    through a reboot.
    - sometimes, during normal operation, all of these messages vanish
    anyway.

    Having said that, I managed a cleanish boot with just Kaspersky and
    the loudspeaker symbol showing in the tray, everything else disabled.
    There were no infection messages on reboot. But I re enabled
    everything and have booted several times since then and there are
    still no messages. What this means I don't know.

    ***
    The intermittent nature of the symptoms may be due to a race condition.
    What might be causing it, I haven't a clue.

    Not removing ccleaner, because you don't think it could be the problem,
    is not good troubleshooting. Many is the time that something that
    couldn't be the cause of something - actually was the cause. I'm not
    saying that this is the case here, but why not remove it anyway to see
    what happens? It's not as if it were a needed system file, and you could
    just put it back afterward.

    Sorry I couldn't help you.
    ***
     
    FromTheRafters, Dec 14, 2009
    #67
  8. Unfortunately, no. When I booted this morning I got 30 or 40 of these
    messages. I booted having physically disconnected from the Internet,
    to leave the machine running all day and see what, if anything
    happened. Unfortunately, my helpful wife, seeing the machine running
    and thinking I'd inadvertently left it on, shut it down a few minutes
    later. When I booted tonight, no infection messages. Who knows what
    I'll see tomorrow...
     
    Robin Bignall, Dec 14, 2009
    #68
  9. Daave

    Massimo Guest

    Your wife, most probably.

    Massimo
     
    Massimo, Dec 18, 2009
    #69
  10. Daave

    Buffalo Guest

    Massimo wrote:
    [snip]
    You think?
    Merry Christmas
    Buffalo
     
    Buffalo, Dec 18, 2009
    #70
  11. On the subject of these messages:

    infection:documents and settings\robin bignall\cookies\index.dat could
    not be removed. file is no longer existent.

    appearing before the XP login screen, I have discovered how to stop
    them occurring. That is to turn off the real-time background
    protection in A-squared.

    I have no idea what is happening, but I assume something in A-squared
    is building a table (the number of messages I see seems to be directly
    proportional to the length of time the system is powered up) and then
    some component of XP, or, more likely, Kaspersky 2010, is running
    through this table generating these messages. Either some weird
    interaction or bug in either/both.

    The real-time guard of SAS works perfectly (or, at least, these
    messages do not appear when it's running).

    Merry Christmas or its equivalent to all.
     
    Robin Bignall, Dec 24, 2009
    #71
  12. Daave

    Daave Guest

    Thanks for sharing the cause of the problem.

    You are probably aware that it is not recommended to run two or more
    real-time antispyware (or antivirus) programs simultaneously. I wonder
    if you disabled SAS (or Kaspersky 2010) completely but keep A-Squared
    with its real-time protection on, what the outcome would be.

    Merry Christmas to you, too, Robin!
     
    Daave, Dec 24, 2009
    #72
  13. From: "Robin Bignall" <>

    | On the subject of these messages:

    | infection:documents and settings\robin bignall\cookies\index.dat could
    | not be removed. file is no longer existent.

    | appearing before the XP login screen, I have discovered how to stop
    | them occurring. That is to turn off the real-time background
    | protection in A-squared.

    | I have no idea what is happening, but I assume something in A-squared
    | is building a table (the number of messages I see seems to be directly
    | proportional to the length of time the system is powered up) and then
    | some component of XP, or, more likely, Kaspersky 2010, is running
    | through this table generating these messages. Either some weird
    | interaction or bug in either/both.

    | The real-time guard of SAS works perfectly (or, at least, these
    | messages do not appear when it's running).

    | Merry Christmas or its equivalent to all.
    | --
    | Robin
    | (BrE)
    | Herts, England

    Thanx for the update Robin!
     
    David H. Lipman, Dec 24, 2009
    #73
  14. Daave

    Andy Medina Guest

    This shows the importance of turning off or uninstalling various programs
    REGARDLESS of whether one believes it can not be the culprit.
    Troubleshooting any problem demands it. Reminds me of the times years ago
    (in the DOS and early Windows days) when *mouse drivers* would interfere
    with printing. Many a tech would be caught red-faced because they just could
    not believe a mouse driver would interfere with printing. Yet turn off or
    uninstall the mouse driver and the printing problem would disappear.
    Reinstall or turn the driver back on, and the printing problem would
    resurface. Any tech worth his salt will seek to *prove* a
    program/driver/utility is not the culprit, rather than go with the *belief*
    it can not be the culprit. I have even had people complain about turning off
    screen savers while troubleshooting a problem. Geeeeeez, it's not like I
    want them to turn it off forever, unless it is causing problems. Yes, even
    screen savers have been found to cause problems.
     
    Andy Medina, Dec 24, 2009
    #74
  15. I was aware of the problem running two antivirus programs
    simultaneously, but didn't appreciate that it applied to malware too.
    Having just installed Kaspersky 9.0.0.736 I'm reluctant to uninstall
    it. I'll switch Asquared on again and see if the problem still
    exists. SAS does not seem to affect these messages.
     
    Robin Bignall, Dec 24, 2009
    #75
  16. It could even be affected by the order in which the suspects get loaded
    into memory. It kinda reminds me of the "Two Black Crows" routine about
    the race '...if I get there first, I'll draw a line in the dirt - if you
    get there first, you rub it out..'. Computer programs will actually try
    to do this when told to.
     
    FromTheRafters, Dec 25, 2009
    #76
  17. Daave

    RJK Guest

    Agreed, ...the "bells and whistles" BLOATWARE that always seems to accompany
    new hardware, including mice - is often a recipe for disaster, i.e. it's
    often poorly written application software that accompanies hardware which
    causes problems, or, as you said, the mouse driver itseld. For years I've
    let Windows use it's own driver !
    Unless Winodws can't find a "universal" driver (for want of a better word)
    then I think it best to chuck that CD that came with a piece of hardware -
    into the rubbish bin !!
    Also, too many people blindly install ALL the junk on the CD instead of just
    the driver !! ...then they wonder why their filetype associations have all
    changed !!!!

    regards, Richard
     
    RJK, Dec 25, 2009
    #77
  18. Does a user have any control over that?
    I can confirm that the messages come back when A-squared's background
    guard is activated.
     
    Robin Bignall, Dec 25, 2009
    #78
  19. Not really, that would be a memory management thing. If two programs had
    the task of deleting index.dat, and one of them did it by "delete file"
    and the other by "if file exists, delete file" the first one *first* and
    the second one *second* would not create an error message for display.
    If the sequence were reversed, the later "delete file" would error
    because no check was made for the file's existence beforehand and it
    *had* been deleted already. It creates a race condition of sorts, and
    can account for intermittent symptoms.
    It seems that you have narrowed it down to A-Squared being what is
    responsible for the messages. As to why it is doing so, who knows? I had
    thought maybe some other antispy component was deleting the file
    (perhaps upon exiting the browser?), and that was not expected by the
    programmers of the program (A-Squared?) that subsequently tried
    (numerous times?) to delete the same file.

    Does A-Squared log those events as well as display the messages (the
    wording should be essentially the same)?
     
    FromTheRafters, Dec 25, 2009
    #79
  20. I don't know. I've stopped using A-Squared and have raised this item
    on their web forum.
     
    Robin Bignall, Dec 28, 2009
    #80
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.