Forum Home
Press F1
 
Thread ID: 46174 2004-06-15 11:33:00 DOS box promethius (1998) Press F1
Post ID Timestamp Content User
244877 2004-06-15 11:33:00 For the last couple of weeks, I have had a DOS box coming up and dissapearing. It completes some task, very quickly and dissapears. I can't seem to press print screen in time!

It says something about the boot sector. Should I be worried?
promethius (1998)
244878 2004-06-15 11:40:00 It sounds like it could be to do with the Bios anti-virus which protects the MBR mikebartnz (21)
244879 2004-06-15 11:41:00 Is this happening when windows starts, what OS? Changed anything lately, windows update being messing with your comp, are you up to date (yeah I see the irony).

If win 2k or XP go to the Control Panel > Administrative Tasks > Event Viewer. Double click likely suspects (by time & event) check out what they say. I'm not sure whether this could be attributed to a virus but, you can't be too carefull.

Cheers Murray P
Murray P (44)
244880 2004-06-15 12:48:00 > It sounds like it could be to do with the Bios anti-virus which protects the MBR

Sounds likley, except it did it 4 or 5 times tonight?

> Is this happening when windows starts,

It seems to happen randomly .

> what OS?

Sorry, should have said, XP Home .

> Changed anything lately, windows update being messing with your comp, are you up to date (yeah I see the irony) .

Did a windows update yesterday, installed a game today .

> If win 2k or XP go to the Control Panel > Administrative Tasks > Event Viewer . Double click likely suspects (by time & event) check out what they say .

Couldn't find anything likley .

> I'm not sure whether this could be attributed to a virus but, you can't be too carefull .

Did a full virus scan today (AVG) .

Thanks for your help guys, much appreciated .
promethius (1998)
244881 2004-06-15 13:58:00 Check out your start ups and running processes . Anything scheduled to run, you might have to check your app's settings one by one . Got a 9x or DOS app trying to run on XP?

Is Messenger service turned of in Control Panel > System Management or is it Manage Computer better still check out Black Viper XP Services ( . blackviper . com/WinXP/servicecfg . htm" target="_blank">www . blackviper . com) .

Pull the plug on your internet connection for a while and to see if it goes away . Are you networked?

Give Spybot and Hijack This a run .

Cheers Murray P
Murray P (44)
244882 2004-06-17 04:15:00 > Check out your start ups and running processes .

Here is a list of running processes (that I don't recognise)

qttask . exe 1272k
svchost . exe 2196k
persfw . exe 1448k
nvsvc32 . exe 1380k
4x svchost . exe at varying kb's .
MSOHELP . EXE 632k
lsass . exe 1476k
csrss . exe 2528k
smss . exe 44k
agentsvr . exe 1236k

Nothing unusual on startup .

> Anything scheduled to run,

Nope .

> you might have to check your app's settings one by one .

Sorry, but could you explain this?

> Got a 9x or DOS app trying to run on XP?

Nope .

> Is Messenger service turned of in Control Panel > System Management or is it Manage Computer better still check out Black Viper XP Services .

I turned messenger service off a long time ago :D

> Pull the plug on your internet connection for a while and to see if it goes away .

Now that I think of it, it seems to come up when I am online . . . I have a firewall running (Tiny Personal Firewall) .

> Are you networked?

Nope .

Give Spybot and Hijack This a run .

Downloaded and ran Hijack This, found 2 things to get rid of . Ran spybot, found 3 things to fix .

Murray - Thanks for your help dude . This one doesn't seem to be a quick fix!
promethius (1998)
244883 2004-06-17 05:45:00 If you had searched on Google for those processes running you would have found that none of them are illegitimate .

The only one I would be suspect about in this case is the MSOHELP . EXE - that is to do with Microsoft Office Help which might possibly indicate that there is a problem with Office . Are you running Office at the time of the box popping up? Can't see how it would have anything to do with boot sector though . . . .
Susan B (19)
244884 2004-06-18 01:02:00 >If you had searched on Google for those processes running you would have found that none of them are illegitimate .

Sorry, should have done this myself, didn't think of it at the time .

>The only one I would be suspect about in this case is the MSOHELP . EXE - that is to do with Microsoft Office Help which might possibly indicate that there is a problem with Office . Are you running Office at the time of the box popping up?

I was at that time, but it seems to do it when office isn't open as well .

Does anyone know of any software that can take screenshots at regular intervals? Could possibly 'catch' it in a screenshot .
promethius (1998)
244885 2004-06-18 01:12:00 There are programs that can record your desktop as an avi file,the one i tried had a free trial period and i used it to make a tutorial.

Can't remember the name offhand but they are out there,
metla (154)
244886 2004-06-18 01:35:00 > > you might have to check your app's settings one by one.

> Sorry, but could you explain this?

If there is a app running at start up (or whatever) or being run by something else ifor a brief period, you would be lucky to catch it in your processes list. You could try cheaking, and ticking off one by one the settings, preferences, options, etc, of your app's starting with the most likely first, could be some software around to do this like Xsetup bur if it misses one....... MS Indexing service or Find Fast hanging about BTW?

> > Is Messenger service turned of in Control Panel > System Management or is it Manage Computer better still check out Black Viper XP Services.

> I turned messenger service off a long time ago

Not reinstalled with a patch? checked it?

Have you cleaned out the registry after the malaware checks. Might be something lingering as it does seem to be that sort of suss activity.

Cheers Murray P
Murray P (44)
1 2