Tech

If (Windows Lockup due to Antivirus scan - more on that later) you have not followed this series from day one start here: DAY ONE

My First Virus Alert

And now on to the reason for the title to this post. Last night, just before starting to play scrabble with the family, I decided to install some kind of Adblocking software for IE.

Off I go to the microsoft ieaddons.com to get a download from MS.

ieaddons.com is a portal that allows you to get a stack of addons for Internet Explorer, but beware - tharr be trojans about!

I downloaded Adscleaner, and the moment I clicked “Yes” to install Bitdefender manfully stood up and protected me from being infected. By three files.

• The first Infected File: Adware.Generic.9560
• The second Infected File: Trojan.Generic.677070
• The third Infected File: another copy of Trojan.Generic.677070

Adscleaner comes in two parts, and the first part had two infected files included, and the second part had one.

And it is a “Trial Version”

Nice.

Addblock pro for Firefox is FREE and where Adscleaner was 3.something MB for the installer and who knows how much more MB’s that the installer downloaded - Addblock weighs in at under a meg for FF.

Also Adscleaner is now an installed program instead of just an IE addon.

About This Mornings Windows Lockup

This one I do not blame on Win7. This is Bitdefender doing it’s best to protect me from Viruses by doing a system scan every morning at 2am, but because I suspend my machine it needs to start/continue whenever I log in.

Yesterday was fine, but today it caused me to need to put down my laptop and wait fifteen minutes before I could use my mouse again.

I wonder if it is a combination of my laptop coming out out of sleep and BD running that has caused this? Probably.

The last time I had a lockup like this was in Linux while I installed Win7 in Virtualbox.

Maybe I should start logging lost productivity time due to things like this…

Those IE problems

Right, a friendly user pointed me to skype as a possible culprit for my constant IE lockup problems (fifty two yesterday) but the only addon I had until then wasBitDefender.

I will investigate this further today.

07:56

The BitDefender Scan finished, and again those two trojans showed up. Here is an excerpt from my scan log:

Overall scan summary

Scanned items : 65173
Infected items : 4
Suspicious items : 0
Resolved items : 4
Unresolved items : 8
Password-protected items : 8
Individual viruses found : 3
Scanned directories : 29700
Scanned boot sectors : 11
Scanned archives : 3
Input-output errors : 93
Scan time : 08:34:47
Files per second : 2

Object Name	Threat Name	Final Status
[System]=]C:\Users\Quintin\AppData\Roaming\Microsoft\Windows\Cookies\quintin@afrigator[1].txt	Cookie.Gator	Deleted
[System]=]C:\Users\Quintin\AppData\Roaming\Microsoft\Windows\Cookies\quintin@statcounter[1].txt	Cookie.Statcounter	Deleted
C:\Windows\SysWOW64\ci0-SiKernel.dll	Trojan.Generic.677070	Deleted
C:\Windows\SysWOW64\SiKernel.dll	Trojan.Generic.677070	Deleted

Faulting application name: iexplore.exe, version: 8.0.7600.16385, time stamp: 0×4a5bca42

Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0×4a5be02b

Exception code: 0xc0000374

Fault offset: 0×00000000000c6cd2

Faulting process id: 0×82c

Faulting application start time: 0×01ca44cbf7217a0f

Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe

Faulting module path: C:\Windows\SYSTEM32\ntdll.dll

Report Id: 85a53bdf-b0bf-11de-9e06-001377e3a18f

 

And

Faulting application name: iexplore.exe, version: 8.0.7600.16385, time stamp: 0×4a5bca42

Faulting module name: BTCommon.dll, version: 12.0.11.29, time stamp: 0×49146a48

Exception code: 0xc0000005

Fault offset: 0×0000000000006f2f

Faulting process id: 0×82c

Faulting application start time: 0×01ca44cbf7217a0f

Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe

Faulting module path: C:\Program Files\BitDefender\BitDefender 2009\BTCommon.dll

Report Id: 856fac26-b0bf-11de-9e06-001377e3a18f

 

 

 

If I take the report from the second error it seems that BitDefender is the culprit here. Hmm…

Tooling through the system logs I find that BitDefender has caused severral problems. Kudos to those of you who suggested BD could be the issue! How to fix it? I could uninstall BD, but that would leave me without AV etc, so I will first look to update it. More on how that went later.

So I started planting flowers in the garden with my daughter and did not blog again for today. Reag on for DAY FIVE

This entry was posted on Sunday, October 4th, 2009 at 7:32 am and is filed under GoingClosedSource, Software, Tech, Windows.You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.