• Hail Guest!
    We're looking for Community Content Contribuitors to Stratics. If you would like to write articles, fan fiction, do guild or shard event recaps, it's simple. Find out how in this thread: Community Contributions
  • Greetings Guest, Having Login Issues? Check this thread!
  • Hail Guest!,
    Please take a moment to read this post reminding you all of the importance of Account Security.
  • Hail Guest!
    Please read the new announcement concerning the upcoming addition to Stratics. You can find the announcement Here!

I need some help with my CPU * Thanks all of you who tried to help*

G

Guest

Guest
I ended up just wiping my cpu clean and starting over... So hopefully after hours of downloading I will be back in game soon...
 

Spree

Babbling Loonie
Stratics Veteran
Stratics Legend
Go to run in start button type cmd then type something geeky and that will fix it.
 
G

Guest

Guest
Tried that as well , the option is there but It is almost like it is not on my computer anymore.
 
G

Guest

Guest
Windows XP , Rebooted several times it worked fine yesterday but it almost like it is not even on my cpu anymore ... I can right click my task bar and see it in there I then click it and nothing happens
 
G

Guest

Guest
Thank you Kat I am still working on it, when I enter that it tells me

Another program is Currently using this file
 
K

Kat SP

Guest
You're welcome. Have you run msconfig and disabled any start-up items lately? If so, you might consider going back there and enabling some of the items you turned off. Beyond these suggestions, that's all I can think of atm.
 
G

Guest

Guest
is regedit working for you right now?

if your answer is no, you have a virus


or try looking here
 
G

Guest

Guest
regedit is not working for me when I attempt to run it

I get this message - Another program is currently using this file.

I tried running spybot, CCleaner and I guess they were not able to find whatever may be on my cpu.

Do you have Ideas?
 

Lord_Puffy

Crazed Zealot
Stratics Veteran
Stratics Legend
<blockquote><hr>

I assume you've rebooted?

Have you run a virus scan?

[/ QUOTE ]

i roooted ur box!
 
G

Guest

Guest
i know that for things that can disable your taskbar access is usally a sign you got something pretty bad on your system. I seriously hope you can figure it out.
 
G

Guest

Guest
Well great looks like cpu repair shop time lol... I may be taking a vacation for a few days...
 
G

Guest

Guest
<blockquote><hr>

regedit is not working for me when I attempt to run it

I get this message - Another program is currently using this file.

I tried running spybot, CCleaner and I guess they were not able to find whatever may be on my cpu.

Do you have Ideas?

[/ QUOTE ]

Your Task Manager and msconfig being disabled point at some sort of a virus. Try a virus scan with less known and less vulnerable virus scanner like the online scan from www.trendmicro.com or F-Prot for Windows trial from www.f-prot.com.

Also, run anti-spyware utilities that are actually capable of removing something - Ad-Aware and Spybot. Hijackthis is nice, but it is no real help to a novice.

if you have anything like KaZaa or other P2P programs you might want to get rid of it.


You can try booting to Safe Mode, run msconfig and see if it will open there(many times it will) then try disabling all startup items not required by Windows, also turn off system restore, then try to identify and remove the virus. After that, turn system restore back on if you use it and set the items you want in startup again.

If you can't do that or you don't have the knowledge then go here: http://www.webroot.com/services/spyaudit_03.htm
It will D/L a spy-sweeper program. Save it to disk, then double-click it to run. Let your firewall pass it. If they don't find anything, you have a bigger problem.


one other thing I came up with was a trojan by the name of: Backdoor.LaLa it Uses mmtask.exe

http://securityresponse.symantec.com...or.lala.c.html this might help if the others fail


and one last thing to do is click Start/Run and type in: sfc /scannow
It will tell you which system-files are missing and/or need to be replaced.
 
G

Guest

Guest
I dunno. I had similar issues and decided to do a system wipe and started over. *sighs* I still need to tweak my mage macros. It did fix the problem, even if it was overkill.
 
G

Guest

Guest
depending on the sophistication of the virus/worm that may be your only option. I'm working on a nasty worm that hides in the bios so every time the computer starts it replicates itself the only way to remove it would be to flash the bios.

uh... Purely for informational purposes of course.

But I think its pretty ingenious
 
G

Guest

Guest
<blockquote><hr>

http://www.bitdefender.com/scan8/ie.html

Run it in Internet Explorer. It uses an ActiveX control.

[/ QUOTE ]


<blockquote><hr>

Severity:
High (Remote Code Execution)

Vendor:
BitDefender / SOFTWIN

Overview:
eEye Digital Security has discovered a critical remote code execution condition within OScan8.ocx and Oscan81.ocx included by default in BitDefender Online Anti-Virus Scanner 8.0 released on May 24th 2006. OScan.ocx is the main ActiveX component for BitDefender’s Anti-Virus Scanner and is initialized by Internet Explorer or any other ActiveX compatible products. After this file is initialized, it generates the GUI for the scanner and manages all User-issued commands. Oscan.ocx has also an internal website verification system to prevent the ActiveX control from being initialized outside of an authorized domain. Unfortunately due to a lack of data-sanitization, OScan.ocx can be forced to be initialized in an unsafe domain and it can be manipulated to corrupt arbitrary memory locations with user supplied values. This could allow a memory corruption scenario that would lead to arbitrary code execution or denial of service conditions.

Technical Details:
A remote vulnerability lies within a malformed request sent to BitDefender’s Online Anti-Virus Scanner ActiveX Controller, OScan.ocx. OScan.ocx’s vulnerable function, InitX, is the only function that accepts user-supplied data and is required to initialize the control for its use. The function InitX takes a string argument value of bstrLocation and is used to verify the calling domain. The IDL for InitX resembles the following:


Function InitX
{
ByVal bstrLocation as String
} As Boolean


This feature is used to safeguard the ActiveX control and prevent it from being initialized outside of authorized domains. Users may submit requests to host this control on their site and they are given an initialization key. Referencing the BitDefender website you can see that their domain is being processed with the following hex-value key:


AvxUI.InitX('000000408E45E3394593BF66F0C93C6CF90AF0F0
AB417E17657D7F328A2312ACBE0B139EF3EBFB69
939B1C3B24D8BC392D752B8408EAACCD809B94D3
8B8F9B5E97B1C1A6')



After this domain key is processed and verified the control would initialize and accept user commands and begin scanning files. However a double-decoding vulnerability is present when processing Unicode values passed to the vulnerable function as a domain key. This vulnerability is triggered prior to the domain validation by prepending two “%” (0x25) characters to domain key value. This causes OScan.ocx to double-encode the parameter from Unicode and allocate arbitrary memory. By combining this method with an overly long string, a heap-based memory corruption scenario will result. This heap-overflow allows arbitrary values from the user-supplied malformed string to overwrite memory within Internet Explorer or the host ActiveX process. Although the attacker does not control the location of where the memory overwrite occurs, the vulnerability has a tendency to overwrite pointers that are later called by Internet Explorer or the host ActiveX process and thus arbitrary code execution is possible.

Protection:
Retina Network Security Scanner has been updated to identify this vulnerability.
Blink Endpoint Vulnerability Prevention preemptively protects from this vulnerability.

Vendor Status:
BitDefender has released an update mitigating this vulnerability in the form of Oscan82.ocx. Users can download the updated Online BitDefender Scanner Here:
http://www.bitdefender.com/scan8/ie.html

Although the vulnerable ActiveX controls will still remain on a workstation after revisiting the site, they are no longer referenceable.

Credit:
Greg Linares


[/ QUOTE ]
 
G

Guest

Guest
<blockquote><hr>

depending on the sophistication of the virus/worm that may be your only option. I'm working on a nasty worm that hides in the bios so every time the computer starts it replicates itself the only way to remove it would be to flash the bios.

uh... Purely for informational purposes of course.

But I think its pretty ingenious


[/ QUOTE ]

i have no clue how to handle this since you dont have any write permissions to the BIOS flash on your operating system. so you should first have to write it in boot sector of your harddisk and than make it install its self to the BIOS while your computer is booting.. the only problem is, that most of the mainboards do have a boot sector virus scan procedure...
 
G

Guest

Guest
<blockquote><hr>

<blockquote><hr>

depending on the sophistication of the virus/worm that may be your only option. I'm working on a nasty worm that hides in the bios so every time the computer starts it replicates itself the only way to remove it would be to flash the bios.

uh... Purely for informational purposes of course.

But I think its pretty ingenious


[/ QUOTE ]

i have no clue how to handle this since you dont have any write permissions to the BIOS flash on your operating system. so you should first have to write it in boot sector of your harddisk and than make it install its self to the BIOS while your computer is booting.. the only problem is, that most of the mainboards do have a boot sector virus scan procedure...

[/ QUOTE ]

packaged on a free utilities disk, reboot the computer, bypass motherboard security(easier that you think), flash CMOS, hide worm. communication with the hard disk and size restrictions are the hard part.
 
G

Guest

Guest
savin important data and completely reinstall is in 99% of the cases much quicker than trying to fix things.
 
G

Guest

Guest
<blockquote><hr>

savin important data and completely reinstall is in 99% of the cases much quicker than trying to fix things.

[/ QUOTE ]

not in a enterprise environment
 
G

Guest

Guest
with a good setup it would be. but then again you shouldnt be downloading porn and playin games there anyways, so 99% of the problems shouldnt happen xD
 
M

majorwoo

Guest
shak's right, in the corp world you get 10-15 minutes. If I have no idea at that point I'll reimage it for you - saves me more time then spending hours on your desktop.
 
I

imported_Spiritless

Guest
Err, what exactly was the purpose of pasting that vulnerability affecting the online scanner I linked to? It was reported in October 2007 and has been patched now for almost 6 months....

There are currently no advisories regarding BitDefender's Online Scanner. It's a very effective utility.
 
G

Guest

Guest
<blockquote><hr>

shak's right, in the corp world you get 10-15 minutes. If I have no idea at that point I'll reimage it for you - saves me more time then spending hours on your desktop.

[/ QUOTE ]

rofl.. i'd like to see ya in a +500 employe corp reinstalling a 1,5 million IBM server because of a failure


so the 99% is NOT right..
 
S

Sir Ha-ward

Guest
<blockquote><hr>

I still need to tweak my mage macros

[/ QUOTE ]


When did you guys get a mage ?
 
S

Sir Ha-ward

Guest
<blockquote><hr>

with a good setup it would be. but then again you shouldnt be downloading porn and playin games there anyways, so 99% of the problems shouldnt happen xD

[/ QUOTE ]


Funny you should say that, ill be formatting mine soon as well
 
A

Azural Kane

Guest
<blockquote><hr>

<blockquote><hr>

shak's right, in the corp world you get 10-15 minutes. If I have no idea at that point I'll reimage it for you - saves me more time then spending hours on your desktop.

[/ QUOTE ]

rofl.. i'd like to see ya in a +500 employe corp reinstalling a 1,5 million IBM server because of a failure


so the 99% is NOT right..

[/ QUOTE ]

Eh, for a server, you might be right, but once something is virused it's pretty much infected. I rarely if ever trust that a virus is fully removed with security programs, it just doesn't happen.

In a desktop end-user enviroment, re-imaging is usually the fastest method of getting back up and running with the littlest amount of headaches possible.
 
G

Guest

Guest
<blockquote><hr>

<blockquote><hr>

shak's right, in the corp world you get 10-15 minutes. If I have no idea at that point I'll reimage it for you - saves me more time then spending hours on your desktop.

[/ QUOTE ]

rofl.. i'd like to see ya in a +500 employe corp reinstalling a 1,5 million IBM server because of a failure


so the 99% is NOT right..

[/ QUOTE ]

aye, because most people use 1,5 million ibm servers and those are horribly maintained xD

i bet you those servers are far away from 1%. and not on the higher side.
 
G

Guest

Guest
<blockquote><hr>

I ended up just wiping my cpu clean and starting over... So hopefully after hours of downloading I will be back in game soon...

[/ QUOTE ]

probably the easiest way anyway. I hope you got everything backed up.
 
M

majorwoo

Guest
<blockquote><hr>

<blockquote><hr>

shak's right, in the corp world you get 10-15 minutes. If I have no idea at that point I'll reimage it for you - saves me more time then spending hours on your desktop.

[/ QUOTE ]

rofl.. i'd like to see ya in a +500 employe corp reinstalling a 1,5 million IBM server because of a failure


so the 99% is NOT right..

[/ QUOTE ]

desktop vs server man... not even worth comparing the two.
 
G

Guest

Guest
<blockquote><hr>

<blockquote><hr>

I ended up just wiping my cpu clean and starting over... So hopefully after hours of downloading I will be back in game soon...

[/ QUOTE ]

probably the easiest way anyway. I hope you got everything backed up.

[/ QUOTE ]

I backed up the important stuff... like mm Uo Macros... Vent &amp; Map info etc.
 
Top