Author Topic: Viruses and Screen Saver problems...  (Read 44041 times)

0 Members and 1 Guest are viewing this topic.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Viruses and Screen Saver problems...
« Reply #75 on: September 11, 2008, 11:58:02 PM »
First, I'll tell you I was very disappointed by your answers!
Sorry.
The best things in life are free.

REDACTED

  • Guest
Re: Viruses and Screen Saver problems...
« Reply #76 on: September 12, 2008, 12:04:42 AM »
First, I'll tell you I was very disappointed by your answers!
Sorry.
Have you read all my post??
You are not happy for me??  ???

I was disappointed BECAUSE I tought I had found it
and wouldn't beleive I was to continue searching again and again...
It was NOTHING against you!! :-\

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Viruses and Screen Saver problems...
« Reply #77 on: September 12, 2008, 12:08:45 AM »
I see.
JEAN*, this thread has 6 pages right now and I've tried to help before unsuccessfully...
What is *exactly* your trouble right now?
The best things in life are free.

REDACTED

  • Guest
Re: Viruses and Screen Saver problems...
« Reply #78 on: September 12, 2008, 12:13:19 AM »
I see.
JEAN*, this thread has 6 pages right now and I've tried to help before unsuccessfully...
What is *exactly* your trouble right now?
Just forget it ! :)

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Viruses and Screen Saver problems...
« Reply #79 on: September 12, 2008, 12:15:40 AM »
Just forget it ! :)
Why? If you need help, we're here trying to help ;)
The best things in life are free.

REDACTED

  • Guest
Re: Viruses and Screen Saver problems...
« Reply #80 on: September 12, 2008, 12:24:41 AM »
Just forget it ! :)
Why? If you need help, we're here trying to help ;)
I really don't know what to say!
I can't understand the only answer you have for my post
« Reply #74 on: Today at 05:53 PM » is SORRY! :o

PLEASE read the post:
« Reply #74 on: Today at 05:53 PM »

When I wrote "my post" I meant NOT THE 6 PAGES,
just my LAST POST, not postS, post (one post!)

« Reply #74 on: Today at 05:53 PM »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Viruses and Screen Saver problems...
« Reply #81 on: September 12, 2008, 12:36:06 AM »
Hi,
First, I'll tell you I was very disappointed by your answers!
I was so sure I had found the reason of the problem! :P
I was ABSOLUTLY sure you would have me correct the SCRFILE entry!

To me it was so obvious that my problem
was right there in front of me, laughing at me!  ;D ;D

And I WAS DAMN RIGHT!!
I just changed %* by /S
  ..... AND IT WORKED!
How good am I !   :D :D :D

I FOUND IT !!   I FOUND IT !!

Any reactions??
8)
This is your last post. I've read it... I still do not understand which is the problem *exactly*...
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89343
  • No support PMs thanks
Re: Viruses and Screen Saver problems...
« Reply #82 on: September 12, 2008, 01:21:29 AM »
Right Tech, I will try and clarify for you.

JEAN* was disappointed in my answer, in thinking that with MBAM finding what it though was a problem relating to scrfile (screen saver files) in the registry, that he though would resolve his problem with screen savers.

My response two posts before the one you quoted, said that this entry was the same as the one in my registry and also detected by MBAM, but I chose to Ignore it as a) I hadn't changed that from the default settings and b) I didn't think it was malicious.

JEAN* chose to allow MBAM to change it and now his screen saver works.

That one you have shown from the last MBAM scan I have it Ignored from when it was detected on my system.

Looking at it it looks more like it is complaining about the syntax of the string "%1" %* which it classes as Bad (though I for the life of me can't see why, which is why I chose to Ignore it) and "%1" /S which it considers Good. Again I don't know why as this relatively new system hasn't been amended since it was purchased in regard to screen saver files.

I don't know if the /S switch after the "%1" is safer than the %* in the event a malicious screen saver attempting to be installed. But, it doesn't mean you have something malicious on your system.

So why changing this worked fore JEAN* I have no idea as my screen saver works with the original settings "%1" %* the ones MBAM considered bad. So in theory those settings should also have worked for JEAN*

The main thing is that JEAN*'s problem is resolved.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.5.6116 (build 24.5.9153.762) UI 1.0.808/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: Viruses and Screen Saver problems...
« Reply #83 on: September 12, 2008, 05:14:25 AM »
Quote
Right Tech, I will try and clarify for you.
Merci DavidR!!   ;)




Quote
So why changing this worked fore JEAN* I have no idea
as my screen saver works with the original settings "%1" %*
the ones MBAM considered bad. So in theory those settings
should also have worked for JEAN*
But, can you start a screen saver just by a double click?
Probably not, you have to INSTALL it...
As for me, it was the only way of running it...


At first, I made searches in REGEDIT...
With "screen saver", or "screensaver"...
But I never taught of trying SCR, which is the extension of a SS FILE!
I was near all the time!   ehehehhehehheeh

Anyway, many thanks to all.
We did great!

FINALLY:
According to Google search, these ar not new virus...
Why AVAST did not stop them is still a mistery to me...
J*

wyrmrider

  • Guest
Re: Viruses and Screen Saver problems...
« Reply #84 on: September 12, 2008, 05:41:36 AM »
hi jean*

"But I don't have the disc installation. (Win XP Pro)  "
this would be very handy to have- will they give you a back up copy of YOUR software?
You could also install the recovery console

that the six others didn't find?
It has done so in several recent threads (not to say next week one of the others would find something- this area is changing so fast)

yes not new
any Idea the path of infection?

Here are again a picture (Proof !! Grin) of SECUNIA and the HJT Log:
This does not prove all old java is gone- it OLD java IS a very serious security concern

HKEY_CLASSES_ROOT\scrfile\shell\open\command\ . . . etc.

GOOD EYE JEAN*

(Adware.Hotbar)  If you install a HOSTS file like HP HOSTS or MVPHOSTS these will go away
Spybot Immunize also gets the more malicious ones

I can't tell who found what but who cares
I was ABSOLUTLY sure you would have me correct the SCRFILE entry!
No Windows Screensavers experts here at least not me

And I WAS DAMN RIGHT!!
I just changed %* by /S
  ..... AND IT WORKED!

COngrats
I had to read the next several posts

next time there is a screen saver problem I"m going to call French Canada






REDACTED

  • Guest
Re: Viruses and Screen Saver problems...
« Reply #85 on: September 12, 2008, 06:46:26 AM »
You are very kind WyrmRider,

I was very happy to work with you.
And I hope my "finding" will be usefull to some other.
I just felt I couldn't keep it to myself!! ;)



Quote
next time there is a screen saver problem I"m going to call French Canada
How nice!
I'll be able to practice my english again.__ ;D
But make it soon, I'm already 70!  mouhajhjajajahahaj

Till next time...
JEAN*

wyrmrider

  • Guest
Re: Viruses and Screen Saver problems...
« Reply #86 on: September 12, 2008, 06:47:41 PM »
for future protection
a Hosts file
Spyware blaster
update spybot every Wednasday and re-immunize
you could use Windows Defender for some FREE real time anti spyware protection
(or purchase MBAM or SAS)
If you have Spybot T-timer ON
AND
decide on one of the above real time things then turn T-timer off

cheers

REDACTED

  • Guest
Re: Viruses and Screen Saver problems...
« Reply #87 on: September 13, 2008, 09:51:30 PM »
for future protection
a Hosts file
Spyware blaster
update spybot every Wednasday and re-immunize
you could use Windows Defender for some FREE real time anti spyware protection
(or purchase MBAM or SAS)
If you have Spybot T-timer ON
AND
decide on one of the above real time things then turn T-timer off

cheers


Hi WyrmRider,

Thanks again, and all your advices are well noted!

I wish you well
J*