Rouge files?

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Are these files real windows files, or rouge files?

tscdev.exe
msr42u.exe
akhvnh.exe

They keep trying to access the net, and aw-ware isn't get shot of them

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

From: "originalturbo" <originalturbo@discussions.microsoft.com>

| Are these files real windows files, or rouge files?
|
| tscdev.exe
| msr42u.exe
| akhvnh.exe
|
| They keep trying to access the net, and aw-ware isn't get shot of them


Dump the contents of the IE Temporary Internet Folder cache (TIF)

start --> settings --> control panel --> internet options --> delete files

1) Download the following three items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Ad-aware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Trend Sysclean Method 1
---------------------------------------
Create a directory.
On drive "C:\"
(e.g., "c:\sysclean")

Download SYSCLEAN.COM and place it in that directory.
Download the signature files (pattern files) by obtaining the ZIP file.
For example; lpt526.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

Trend Sysclean Method 2
---------------------------------------
The utility SYSCLEAN_FE in "Procedure 1" at the following URL
http://www.ik-cs.com/got-a-virus.htm automates the download and execution process of the
Trend Sysclean Package.

2) Update Ad-aware with the latest definitions.
3) Disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode and shutdown as many applications as possible
5) Using both the Trend Sysclean utility and Ad-aware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using both the
Trend Sysclean utility and Adaware
7) Re-enable System Restore and re-apply any System Restore preferences,
(e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) Create a new Restore point

* * Please report back your results ! * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Nope they aren't rouge here. They look noir to me.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:E1CD2D8E-41DA-4023-9E86-66E31627C699@microsoft.com,
originalturbo <originalturbo@discussions.microsoft.com> hunted and
pecked:
> Are these files real windows files, or rouge files?
>
> tscdev.exe
> msr42u.exe
> akhvnh.exe
>
> They keep trying to access the net, and aw-ware isn't get shot of them

 

[Gordon]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Wesley Vogel wrote:
> Nope they aren't rouge here. They look noir to me.
>

;-)

--
Interim Systems and Management Accounting
Gordon Burgess-Parker
Director
www.gbpcomputing.co.uk

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I've manually deleted the files, and their entries in the registry, and now,
I hope, they've gone.

I hate rogue red files. Black only from now on...

"Gordon" wrote:

> Wesley Vogel wrote:
> > Nope they aren't rouge here. They look noir to me.
> >
>
> ;-)
>
> --
> Interim Systems and Management Accounting
> Gordon Burgess-Parker
> Director
> www.gbpcomputing.co.uk
>

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I apologize. But I could not resist.

I'm glad that you saw the humor and got rid of those rouge rogue files.


Or the rogue rouge files...

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:EBEC2618-C240-4731-8546-69AEB1DD9EE3@microsoft.com,
originalturbo <originalturbo@discussions.microsoft.com> hunted and
pecked:
> I've manually deleted the files, and their entries in the registry,
> and now, I hope, they've gone.
>
> I hate rogue red files. Black only from now on...
>
> "Gordon" wrote:
>
>> Wesley Vogel wrote:
>>> Nope they aren't rouge here. They look noir to me.
>>>
>>
>> ;-)
>>
>> --
>> Interim Systems and Management Accounting
>> Gordon Burgess-Parker
>> Director
>> www.gbpcomputing.co.uk