really weird situation: have windows explorer stuck as desktop - Page 4 - Computer Technical Help

Two Plus Two Forums Other Topics Computer and Technical Help

really weird situation: have windows explorer stuck as desktop

Post Reply Subscribe

...

Page 4 of 4

1 2 3 4

Page 4 of 4

1 2 3 4

05-18-2008 , 01:40 PM

#76

dkgojackets

DKGOAT

Join Date: May 2006 Posts: 86,123

hmm quick google search showed bn10.tmp is bad news. I went ahead and deleted it.

Quote

05-18-2008 , 04:51 PM

#77

LirvA

banned

Join Date: Sep 2007 Posts: 43,574

thats good news then. Maybe you got the source of the problem.
How did you delete it?

I know with Comodo if you can't delete a file, you can manually quarantine and keep it from executing, but if you were able to delete it for good then thats good.

Comodo is pretty pop up heavy, pretty alert heavy, but it's very thorough. If you can get past the amount of alerts, it's easy to appreciate.

Quote

05-18-2008 , 05:23 PM

#78

dkgojackets

DKGOAT

Join Date: May 2006 Posts: 86,123

i just went through my computer to the folder it was in and straight deleted then emptied recycle bin.

Quote

05-18-2008 , 06:34 PM

#79

LirvA

banned

Join Date: Sep 2007 Posts: 43,574

have you tried rebooting to see if you still get the alert from Comodo about it modifying files?

Do you still have the .dll?

Quote

05-18-2008 , 07:20 PM

#80

dkgojackets

DKGOAT

Join Date: May 2006 Posts: 86,123

my last reboot i got the same stuff, except it was bn20.tmp instead of bn10

the winctrl32.dll is still there

Quote

05-18-2008 , 07:57 PM

#81

LirvA

banned

Join Date: Sep 2007 Posts: 43,574

hmm.

Ok, lets see if you can quarantine those files.

Open Comodo - Defense + - My quarantined files (common tasks) - Add - Browse for the files and quarantine. Try to quarantine the .dll and the .tmp

Also, open Comodo - Defense + - View active process list - look through it, if you find the port21fs.exe, click it to highlight it, right click - terminate and quarantine.

Edit - if you find that port21fs.exe in the active process list, go ahead and click it to highlight - right click - show full path before you terminate and quarantine, to see if we can locate where it is on your computer.

... have you tried deleting the .tmp in safe mode?

Last edited by LirvA; 05-18-2008 at 08:12 PM.

Quote

05-18-2008 , 08:17 PM

#82

LirvA

banned

Join Date: Sep 2007 Posts: 43,574

Also, let's see if any unknowns are connecting to the internet.

Open Comodo - Firewall - view active connections (common tasks) - if you see that port21fs.exe, show full path then terminate connection, and if you see any that don't look familar, google them to see if you can find out if they are known to be safe, if not, find the full path and terminate connection, then quarantine them through the Denfense + section.

Quote

05-18-2008 , 08:18 PM

#83

dkgojackets

DKGOAT

Join Date: May 2006 Posts: 86,123

i was able to delete the .tmp in regular mode, its gone now

port21fs has been gone for a while now

.dll is quarantined

Quote

05-18-2008 , 08:21 PM

#84

dkgojackets

DKGOAT

Join Date: May 2006 Posts: 86,123

all active connections are things I know. Just firefox, aim, and the windows stuff

Quote

05-18-2008 , 08:22 PM

#85

LirvA

banned

Join Date: Sep 2007 Posts: 43,574

ok, go ahead and reboot to see if you still get the Comodo alerts, let me know, then go ahead and post another HijackThis log here in this thread.

Quote

05-19-2008 , 11:08 PM

#86

LirvA

banned

Join Date: Sep 2007 Posts: 43,574

I believe this issue has been resolved, Mods feel free to lock this thread.

dkgojackets feel free to p.m. me if you have any further troubles.

Quote

05-20-2008 , 02:55 AM

#87

dkgojackets

DKGOAT

Join Date: May 2006 Posts: 86,123

fwiw i dont like having my threads locked

thanks for your help itt, I'll come back if anything bad happens

Quote

05-20-2008 , 03:23 AM

#88

LirvA

banned

Join Date: Sep 2007 Posts: 43,574

"fwiw i dont like having my threads locked"

All apologies, I understand.

"thanks for your help itt, I'll come back if anything bad happens"

you're very welcome, glad to help.

Quote

Page 4 of 4

First

1 2 3 4

Last

Post Reply Subscribe

...

Page 4 of 4

First

1 2 3 4

Last