Archived from groups: microsoft.public.windowsxp.general (
More info?)
You're not being a pest. I'm as curious as you are in finding out what
that specific message is and why. The reason I asked about running
SymNRT is that I've seen Users who have run it and then experienced
issues doing Windows Updates.
I'd bet dollars to doughnuts that the message is stemming from NIS.
Tried search Symantec's KB but did not know the v. of NIS that you had
installed. Will take a look and *hope* that there is a mention of the
message that you've been seeing.
Nope. Nothing returns for that message nor for the Hardware Wizard
appearing on startup.
Perhaps you could contact them via email and ask if they are aware of
this behavior in conjunction with NIS 2005.
In your case, the worst thing would be that the Trojan has lingering
remnants that are causing this behavior and that it *could* reinfest the
system.
This link goes to a web page that details the removal of Troj.Vundo.b:
http://www.bleepingcomputer.com/forums/How_to_remove_the_TrojanVundoB_Search42com_MSevents-t18610.html
Take a look at it and check your system for any of the files listed in
the " Symptoms in a HijackThis Log " heading.
MowGreen [MVP 2003-2005]
===============
*-343-* FDNY
Never Forgotten
===============
Confused wrote:
> Hello again - sorry to be such a pest!!!
>
> 1.0 Did you use Symantec's Trojan.Vundo.B Removal Tool ?
>
> YES At the time there didn't appear to be any problems
>
> 2.0 Did you have to uninstall NAV 2003 prior to "upgrading" to NIS ?
>
> To be honest, I can't really remember. I only know that it has been removed
> from the list of programs (Start>All programs). Does this make any
> difference - the fact that I am not certain?
>
> 3.0 If yes to the latter, did you have to use SymNRT to completely uninstall
> NAV 2003 ?
>
> As above, it does not appear in Start> All Programs
>
> 4.0 Is the version of NIS installed 2005 Antispyware Edition or just 2005 ?
>
> I now use Norton Internet Security 2005
>
> Hope this is helpful to you - thanks again!!!
>
> Confused
> "MowGreen [MVP]" wrote:
>
>
>>1. You meant Trojan Vundo.b ?
>>http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.b.html
>>
>>2. NIS/NAV are "viral-like" in their behavior.
>>
>>Did you use Symantec's Trojan.Vundo.B Removal Tool ?
>>Did you have to uninstall NAV 2003 prior to "upgrading" to NIS ?
>>If yes to the latter, did you have to use SymNRT to completely uninstall
>>NAV 2003 ?
>>Is the version of NIS installed 2005 Antispyware Edition or just 2005 ?
>>
>>The more information that you can provide the faster someone may
>>actually be able to assist you.
>>
>>MowGreen [MVP 2003-2005]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>
>>
>>Confused wrote:
>>
>>
>>>Hello again
>>>
>>>I did two things recently
>>>
>>>1.0 Removed a Trojan.wundob virus
>>>2.0 Upgraded from Norton Antivirus 2003 to install Norton Internet Security
>>>
>>>Could either of these be the reason?
>>>
>>>Thanks
>>>
>>>Confused
>>>
>>>"MowGreen [MVP]" wrote:
>>>
>>>
>>>
>>>>Confused,
>>>>
>>>>If Network DDE Client is not listed then that specific worm is not
>>>>present. As to the DDE shares ... if there are none in the window than
>>>>none are present. There are no Properties to view. Cabiche ?
>>>>Did you install any software or hardware prior to the error message's
>>>>first appearance ?
>>>>Have you scanned the system for malware IF you didn't install anything ?
>>>>
>>>>I'm not familiar with what this error message signifies, as you can
>>>>tell. Just want to make sure that it's not stemming from a " potentially
>>>>unwanted program ".
>>>>
>>>>MG
>>>>
>>>>
>>>>Confused wrote:
>>>>
>>>>
>>>>
>>>>>Hi there
>>>>>
>>>>>The Network DDE (It does not say Client) is listed as disabled
>>>>>
>>>>>When running ddeshare I get the following:
>>>>>
>>>>>ERROR MESSAGE
>>>>>
>>>>>(Heading) Probing for number of shares
>>>>>
>>>>>Can't bind to DSDM Service
>>>>>
>>>>>When clicking proporties:
>>>>>
>>>>>No share selected
>>>>>Need to select a DDE share to view it's properties
>>>>>
>>>>>Does this help? And does it mean I still need to run the anti virus? I had
>>>>>a look at the link but couldn't quite understand if it related to this or
>>>>>not!!!
>>>>>
>>>>>Many thanks again
>>>>>Confused
>>>>>
>>>>>"MowGreen [MVP]" wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Confused,
>>>>>>
>>>>>>If you haven't added any hardware, then have a look here :
>>>>>>http://www.sophos.com/virusinfo/analyses/w32codbotm.html
>>>>>>Click the Advanced tab . Does that description fit ?
>>>>>>Check the services by going to Start, Run, and type in
>>>>>>services.msc
>>>>>>Click OK. Look for the malicious service, " Network DDE Client " .
>>>>>>NOTE: Network DDE and Network DDE DSDM are legit services but should be
>>>>>>set to Disabled.
>>>>>>If " Network DDE Client " is listed double click it . In the Startup
>>>>>>type window set it to Disabled.
>>>>>>
>>>>>>Just for the heck of it, open DDE Share by going to Start, and then
>>>>>>click Run. In the Open box, type
>>>>>>ddeshare
>>>>>>Click OK.
>>>>>>On the Menu Bar click Shares, then DDE Shares.
>>>>>>Did you get an error message ?
>>>>>>Is anything listed in the window ?
>>>>>>If so, click Properties and post back with what they are.
>>>>>>
>>>>>>Then I strongly suggest you download, install, and update a trial
>>>>>>version of Kapersky Antivirus : Kaspersky Anti-Virus Personal 5.0
>>>>>>http://www.kaspersky.com/trials
>>>>>>An illustrated guide to installing Kapersky can be found here :
>>>>>>http://castlecops.com/t106277-Bube_d_aka_Win32_Beavis_Removal_isrvs.html
>>>>>>Scroll down to " Go here to download the free KAV Personal 5.0 Trial "
>>>>>>for the relevant info.
>>>>>>
>>>>>>IF the " Network DDE Client " service is not listed, all bets are
>>>>>>off
>>>>>>
>>>>>>
>>>>>>MowGreen [MVP 2003-2005]
>>>>>>===============
>>>>>>*-343-* FDNY
>>>>>>Never Forgotten
>>>>>>===============
>>>>>>
>>>>>>
>>>>>>Confused wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>When I start my PC I get a found new hardware wizard which states that it
>>>>>>>helps you install new software for Network DDE. It states IF the hardware
>>>>>>>came with an installation CD, insert it now (it didn't so I can't)
>>>>>>>
>>>>>>>After running install the software authomatically (Recomeended)............I
>>>>>>>get the following message:
>>>>>>>
>>>>>>>Cannot Install this Hardware
>>>>>>>
>>>>>>>The hardware was not installed because the wizard cannot find the necessary
>>>>>>>software.
>>>>>>>
>>>>>>>Click back if you have an installation media such as CD-ROM or if you know
>>>>>>>the location of the software.
>>>>>>>
>>>>>>>A problem occurred during hardware installation. Your new hardware may not
>>>>>>>work properly.
>>>>>>>
>>>>>>>Just wondering what I should do?
>>>>>>>
>>>>>>>Loads of thanks
>>>>>>>Confused
>>>>>>>
>>>>>>>Windows XP Home Edition
>>>>>>>
>>>>>>
Facebook
Twitter
Instagram