strange computer behaviour!

whizzkid_3

can someone help please?
i opened outlook express this morning and found that all my emails had disappeared except the overnight ones-ran a firewall test,checked outlook express again and found my old emails back but the new ones have disappeared!any ideas ?
also the computer keeps coming back on after you click on the turn off computer symbol!
and my favourites have gone into alphabetical order without me organising them !!!

ghosties at work??

thanks

whizzkid ally

robnye

dont know about the outlook problem,

the pc rebooting rather than shutting down, could be due to have 'restart' selected, rather than 'shutdown'

T4i

Virus?

Strange P.C behavour is usualy down to a virus.....

Hop over to http://housecall.trendmicro.com/ and click the scan now. Its free!

When the pop-ups appear click yes, its a secure site with no dodgy material. Make sure you scan ALL drives, and let it do its thing.

If it does find anything that shouldnt be there, make sure you write them down exactly as reported. Report back and I will see what I can do to help further.

What operating system are you using?

whizzkid_3

i am on windows xp and the virus scan picked up html coolweb.a and java bytever.a -does that mean anything to anyone?
thanks
ally

scheming_gypsy

outlook sounds like it was using a different store folder. if you do a search for *.dbx you'll be able to see if you have another inbox / sent items etc.

T4i

Aaaah. JAVA_BYTEVER.A is Trends Number 1 at the mo..

Solution Below!!!

Resetting Internet Explorer Homepage and Search Page

This procedure restores the Internet Explorer home page and search page to the default settings.

Close all Internet Explorer windows.
Open Control Panel. Click Start>Settings>Control Panel
Double-click the Internet Options icon.
In the Internet Properties window, click the Programs tab.
Click the “Reset Web Settings…” button.
Select “Also reset my home page.” Click Yes.
Click OK.
Changing the Signature of Microsoft Outlook Express

This procedure restores the signature of Microsoft Outlook Express.

Open Microsoft Outlook Express.
Click on Tools>Options. Click on the Signature Tab.
If the file chosen in the File text box below is equal to “s.htm” or some other undesired file, delete the entry in the textbox.
Click OK.
Additional Windows ME/XP Cleaning Instructions

Users running Windows ME and XP must disable System Restore to allow full scanning of infected systems.

Users running other Windows versions can proceed with the succeeding procedure sets.

Running Trend Micro Antivirus

Scan your system with Trend Micro antivirus and delete all files detected as JAVA_BYTEVER.A, JAVA_JJBLACK.C, and JS_FORTNIGHT.B. To do this, Trend Micro customers must download the latest pattern file and scan their system. Other Internet users can use HouseCall, Trend Micro's free online virus scanner.

Recommendations

This malware exploits known vulnerabilities in Microsoft Virtual Machine. Trend Micro recommends that you install build 3810 and later of the Microsoft VM at Microsoft Windows Update Center.

For information and patches regarding this vulnerability, please go here.

---

I think the html coolweb.a is just malware.....Download these:-

http://kujoe.com/freeware/spybotsd13.exe - Install and run a live update straight away to update defanition files. Run the scan.

http://www.download.com/Ad-Aware-SE-Personal-Edition/3000-8022_4-10045910.html?part=dl-ad-aware&subj=dl&tag=top5 - Install and run a live update and run the scan.
http://www.microsoft.com/downloads/details.aspx?FamilyId=321CD7A2-6A57-4C57-A8BD-DBF62EDA9671&displaylang=en - Install and run live update. Scan.

T4i

JAVA_BYTEVER.C

Solution:


Important Windows ME/XP Cleaning Instructions

Users running Windows ME and XP must disable System Restore to allow full scanning of infected systems.

Users running other Windows versions can proceed with the succeeding procedure sets.

Running Trend Micro Antivirus

Systems infected with this malware can be cleaned by simply scanning for and deleting files detected as JAVA_BYTEVER.C. To do this, Trend Micro customers must download the latest pattern file and scan their system. Other Internet users can use HouseCall, Trend Micro’s free online virus scanner.

T4i

....Also, just for good measures...

You will need to clear your Java cache:

1. Click "Tools" from the Internet Explorer menubar
2. Click "Internet Options..."
3. Click the "General" Tab
4. Click the "Delete Files" button in the "Temporary Internet files" section
5. If you still have a problem, repeat the steps above and restart the computer.

Search for the Virus names using :-

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. You may turn it back on and create a new restore point.

If you disabled System Restore, make sure to enable it now.

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial (http://www.greyknight17.com/spyware.htm#prevent) and use the tools provided.

whizzkid_3

thanks everyone!
lots to try here-i may be some time........

whizzkid_3

HELP!
my first two removal attempts have not worked -first time it said that the virus was attached to a file currently in use so couldnt delete and the second time it said it could only delete whole files not infected files!
hope this makes sense to someone

any suggestions?i am on windows xp

thanks

Browntoa

you need to boot your xp machine into "safe mode" and run it, hit the F8 key when you boot up the machine and choose the option without network support.then when you run the program again it will delete the file (or worse case make a note of the location of the file and go off and delete it manually)

when you have finished reboot and start up like normal and make sure the pc is clean.

worse case , install Windows Anti spyware software, go back and reboot into safe mode and run that AND the virus software again

if you are using the online trend software to scan the PC then download AVG from www.grisoft.com and run that as you cannot connect to the internet in safe mode