Help.... a different long duration of scan!!

[r3f3r3e]

the below is the items i have inside my C:\Documents and Settings\Neo Hui Xiang...

Incase u cant see (quite small)... i listed the items below...

1).housecall6.6 (folder)
2)Bluetooth Software (folder)
3)Cookies (folder)
4)Desktop (folder)
5)Favorites (icon)
6)My Documents (folder)
7)Start Menu (folder)
8)UserData (folder)
9)NTUSER (unknown icon)
10)ntuser.dat.rmbak (unknown icon)
11)taskmgr (icon)
12) dxva_sig (notepad)

and error stop when i copy and paste the taskmgr from the windows to this folder.... is there a way to stop it from popping out everytime the window just starts?

Any procedures?

[r3f3r3e]

and further update... i saw this in system startup under tools in spybot.... below shows 2 picx.... is this related to the autostartup of task manager i have?? and should i delete the 2 entry??

[r3f3r3e]

[spybotsandra]

Hello,

Did you already check the autostart menu in your windows control panel (if the taskmanager is activated here)?

I guess it is just a false setting - no infection.

The items you have mentioned:
Ctfmon.exe is part of Microsoft Office XP. It monitors the active windows and provides text input service support for speech recognition,
handwriting recognition, keyboard, translation, and other alternative user input technologies. It should be located here:

* C:\Windows\System32

If not it can be virus, spyware, trojan or worm! Examples:
PWSteal.Raidys
http://securityresponse.symantec.com...al.raidys.html
http://securityresponse.symantec.com...al.raidys.html
Trojan.Satiloler
http://securityresponse.symantec.com...satiloler.html
http://securityresponse.symantec.com...satiloler.html
Spyware.FamilyKeylog
http://securityresponse.symantec.com...ilykeylog.html
http://securityresponse.symantec.com...ilykeylog.html
Further you can see it on the filesize. The legal version is something like 10 to 15 KB.

The information from Paul Collins' Startup list is static information to help you decide the validity of the entry.
There is no scan involved to actually determine if your particular entry is good or bad.

You can find Paul Collins' Startup list here:
Startup Applications List
http://www.sysinfo.org/startuplist.php

Best regards
Sandra
Team Spybot

[r3f3r3e]

oO..... maybe its too much of my imagination i guess... but where do u find the autostart thing in control panel?

i only saw scheduled task though... clicked it and nothing inside it....

any procedures to disabled the autostartup task manager? Sorry for the trouble as i pretty much a computer newbie though... mind explaining the procedures? Many thanks

[spybotsandra]

Hello,

A report might be the easiest way.
There we can see where the taskmanger.exe is being loaded.
Probably it is loaded in a winlogon or a service.

Please send us a complete bug report. In order to do so, please run Spybot - Search & Destroy and switch to Advanced Mode via the menu item Mode, let it scan, try to fix the problems (!) and then go to "Tools" --> "View Report". Tick all the 10 checkboxes (leave "Do not report disabled or known legitimate items" unchecked) you can find there and click on "View Report". Now choose "Export" and save the file to your desktop. Please attach this file to your email and send it again to detections(at)spybot.info.

Please mark it to this post:
http://forums.spybot.info/showthread.php?t=17605&page=2

Best regards
Sandra
Team Spybot