Author Topic: win.ini entries  (Read 24247 times)

0 Members and 1 Guest are viewing this topic.

bbfi

  • Guest
win.ini entries
« on: November 25, 2003, 11:51:12 PM »
I was checking my win.ini today and noticed the following entries.

[Internal]
Device=ȺºËºÌ̾ÌɾºÉÏÇÌÌǺ½
Install=1066515763
[hkjhk]
nnhjhkj15=1067378634

Any ideas what these are?  I searched the web, but didn't find anything like these.   ???

Walker

  • Guest
Re:win.ini entries
« Reply #1 on: November 26, 2003, 12:41:50 AM »
nnhjhkj15=

bbfi,

Don't know if this helps, but you might try searching for the 'pup' virus.

Have a look at this link...

http://www.security-forums.com/forum/viewtopic.php?t=8209

Good luck

bbfi

  • Guest
Re:win.ini entries
« Reply #2 on: November 26, 2003, 01:04:18 AM »
Walker,

That was one of the links I found on the web and I checked my computer for the 'pup' virus in all the locations but nothing showed up.   ???

Walker

  • Guest
Re:win.ini entries
« Reply #3 on: November 26, 2003, 01:14:46 AM »
bbfi,

Where none of the comments in that link relavent to your case?. I noticed one of the posters at least had the same 'nnhjhkj15=' entry as yours.

Not that I know anything of this personally... sorry  :'(


bbfi

  • Guest
Re:win.ini entries
« Reply #4 on: November 26, 2003, 01:40:54 AM »
Walker,

The only thing that was the same was -

[hkjhk]
nnhjhkj15=1066661473

I don't have DDMP*.dll, WinPup.exe files or the following directories C:\Program Files\ddm\0\ or C:\Program Files\Intenet explorer\ADD-INS\.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:win.ini entries
« Reply #5 on: November 26, 2003, 02:10:37 AM »
bbfi, did avast! alert you of anything? Did you perform a full scan?
I suggest you delete that lines immediatly...  ;)
The best things in life are free.

bbfi

  • Guest
Re:win.ini entries
« Reply #6 on: November 26, 2003, 07:34:51 AM »
Technical,

Quote
did avast! alert you of anything? Did you perform a full scan?

I did a check with Avast, eScan Antivirus Toolkit Utility, ANTIDOTE for PC Viruses - SuperLite, eTrust EZ Antivirus, and BitDefender Free Edition.  My system is clean.   :)

Quote
I suggest you delete that lines immediatly...

Did it.   ;)

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:win.ini entries
« Reply #7 on: November 26, 2003, 12:13:17 PM »
Technical,

Quote
did avast! alert you of anything? Did you perform a full scan?

I did a check with Avast, eScan Antivirus Toolkit Utility, ANTIDOTE for PC Viruses - SuperLite, eTrust EZ Antivirus, and BitDefender Free Edition.  My system is clean.   :)

Quote
I suggest you delete that lines immediatly...

Did it.   ;)

I can really bet your system is clean after all  ;D
If you discover something else about this 'strange' virus, let us know...  8)
The best things in life are free.

bbfi

  • Guest
Re:win.ini entries
« Reply #8 on: November 26, 2003, 06:27:14 PM »
Technical,

I also ran a scan with a² Free Malware Scanner and all was clean.   :)  

This scanner can be downloaded at http://forum.a-2.org/viewtopic.php?t=173 with info about it at http://www.a-2.org/en/.   ;)

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:win.ini entries
« Reply #9 on: November 27, 2003, 02:01:06 AM »
Technical,

I also ran a scan with a² Free Malware Scanner and all was clean.   :)  

This scanner can be downloaded at http://forum.a-2.org/viewtopic.php?t=173 with info about it at http://www.a-2.org/en/.   ;)

Do you - or anybody else - nows anything more about a² (a squared) Free Malware Scanner?
Does it has a resident (guard) protection?
Could it be used simultaneously with avast?
How does it update?

I did some research on their forum pages and the features could be;

# Background Guard with IDS
The Background Guard of a² personal has several jobs. Each started program will be scanned and blocked if necessary before it gets active. The IDS (Intrusion Detection System) is always active and protects the operating system. For example, it is able to protect other program-tasks against shutdowns initiated by Trojans. The improper bypassing of desktop firewalls by tunneling through the browser can also be prevented.

# Advanced IDS
The Advanced IDS mode is a component of a² personal which analyses the behavior of all running programs to detect harmful actions. If a program shows a Malware like behavior, the actions will be stopped. You have nearly no configuration work.

# System-Firewall
Expert users can optional choose to use the System-Firewall of a² personal instead of the Advanced IDS mode. This works similar to common desktop firewalls. But the big difference is, that not only connections to the web are monitored. Also operations inside the operating system and the programs are watched. You can define special rights for each program. For example you can deny a specific program to write an autorun entry to the system registry or deny access to a specific part of the harddisk for another program.

I'm afraid that there is something 'wrong' and don't smell so good in all of this... Do avast users can say something...  :o
The best things in life are free.

bbfi

  • Guest
Re:win.ini entries
« Reply #10 on: November 27, 2003, 02:09:35 AM »
Technical,

I'm not 'technical' enough to know about all the extra features.  The free one only does scans for malware.  I do not understand the IDS stuff, etc.   ???

I found another forum (NTFS) talking about it at http://www.ntfs.org/forum/showthread.php?s=d8bc019953a6acee41b00c8cadf39a51&threadid=40945.  Also, Wilders Forum talks about it at http://www.wilderssecurity.com/index.php?board=25;action=display;threadid=16821.  Maybe that would shed some light on the subject.   ::)
« Last Edit: November 27, 2003, 02:15:50 AM by bbfi »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:win.ini entries
« Reply #11 on: November 27, 2003, 02:20:47 AM »
Technical,

I'm not 'technical' enough to know about all the extra features.  The free one only does scans for malware.  I do not understand the IDS stuff, etc.   ???

I found another forum (NTFS) talking about it at http://www.ntfs.org/forum/showthread.php?s=d8bc019953a6acee41b00c8cadf39a51&threadid=40945.  Also, Wilders Forum talks about it at http://www.wilderssecurity.com/index.php?board=25;action=display;threadid=16821.  Maybe that would shed some light on the subject.   ::)

Thanks bbfi, I'll do some more research previously...
Take care, thanks for the links  ;)
The best things in life are free.

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:win.ini entries
« Reply #12 on: November 27, 2003, 05:14:07 PM »
Technical,
a2 is the new name of the free project 'ANTS' by Andreas Haak, I used to be a beta tester of it..
a2 has 2 versions, free and personal. Free version (only the on-demmand scanner, no guard included) is already released on 11/25 (More..).
according to the site, the personal version is expected to be released soon..
I hope this could be helpful  ;D
« Last Edit: November 27, 2003, 05:46:16 PM by minacross »
MW

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:win.ini entries
« Reply #13 on: November 27, 2003, 06:07:28 PM »

bbfi,
how did you write the '2' that small ? ??? ??? ???

thanx in advance  ;D
MW

bbfi

  • Guest
Re:win.ini entries
« Reply #14 on: November 27, 2003, 07:39:13 PM »
minacross,

Quote
how did you write the '2' that small ?   ??? ??? ???

I just copied and pasted it from the a² forum.   ;D

What is your opinion of a² free?   ::)  I know that you get what you pay for  ;) , but there are no other free malware checkers or are there?   ???

Anyone else have any opinions for this a² free or other free malware scanners?   ;)  Thanks in advance.