Bug Hunter Query

[Chrome Boy]

This is a copy of a letter sent on the 10th of December.
Still waiting a reply.
No help on the FAQ page.
I have been directed to this group from two other groups.
The problem still persists.
Can any one help me please.
Thank You
John

Hello
Last night I ran bughunter after reading about it on a Microsoft newsgroup.
It found one file which I left alone as I know what it is (its from my canon
scanner).
Today when I started up I now have two notepad popups both saying the same
thing.
I also have 3 desktop icons on my start menu and also a desktop startup in
my startup menu.
How can I get rid of the 4 icons and stop it from starting when I boot up.
Deleting do's not work as they come back when I boot up.
System restore did not work either.
Can you help me please.
John

Notepad Popup
[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell 32.dll,-21787

Log File
BugHunter v1.9.4 using pattern date/time 12-07-2006|20:32:11
Using configuration file: BUGHUNT.INI
Log file created: 19:42:35 - 12-09-2006

=> Nfo: Recursive scanning is enabled.
=> Nfo: BugHunter is only logging found malware...
Action taken, and result.

C:\DOCUME~1\JOHN\NTUSER~1.LOG - Denied Read Access!
C:\DOCUME~1\LOCALS~1\NTUSER~1.LOG - Denied Read Access!
C:\DOCUME~1\NETWOR~1\NTUSER~1.LOG - Denied Read Access!
C:\WINDOWS\SYSTEM32\ZPORT4AS.DLL - Full Match! - Scanning Only
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG - Denied Read Access!
C:\WINDOWS\SYSTEM32\CONFIG\SAM - Denied Read Access!
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG - Denied Read Access!
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY - Denied Read Access!
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG - Denied Read Access!
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG - Denied Read Access!
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG - Denied Read Access!
C:\DOCUME~1\JOHN\LOCALS~1\APPLIC~1\MICROS~1\WINDOW S\USRCLASS.DAT - Denied
Read Access!
C:\DOCUME~1\JOHN\LOCALS~1\APPLIC~1\MICROS~1\WINDOW S\USRCLA~1.LOG - Denied
Read Access!
C:\DOCUME~1\LOCALS~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLASS.DAT -
Denied Read Access!
C:\DOCUME~1\LOCALS~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLA~1.LOG -
Denied Read Access!
C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLASS.DAT -
Denied Read Access!
C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLA~1.LOG -
Denied Read Access!
================================================== =============
Finished Scanning...52,532 Files

1 known MalWare files were found.
None were successfully renamed.
None were successfully deleted.
BugHunter took approximately 9 minutes and 20 seconds to scan the folders.
================================================== =============
Log file closed.: 19:51:49 - 12-09-2006

[Dustin Cook]

Sigh... And these are the replies that I did send you. One on the 11,
and the other on the 16th. You should check your email settings to
ensure gmail.com isn't being blocked...

Hi John,

http://support.microsoft.com/kb/330132

This url should help you with the notepad issue. I have seen this
issue before on various programs we use here at the shop. I will look
into the possibility that BugHunter is causing it.

If it would be possible, could you rename and attach the file
BugHunter picks up? I'd like to remove it from the next pattern
release.

If I can be of any further help, please let me know.


The followup email:

Hi John,

I haven't heard back from you regarding BugHunter and notepad. Have
you gotten the issue resolved? My sincere apologies for this issue, I
have not been able to reproduce it reliably as yet. Windows seems to
change the file attributes on desktop.ini (which causes notepad to
open it for you on startup).... when certain applications are run.
Occasionally BugHunter is apparently included in a small list of
programs that cause this.

I have added your issue to the list of things to check, I will
hopefully be able to determine under what conditions this issue occurs
in the first place and let you know.

Thanks again for your interest in the BugHunter program.


Please check your email settings so that unneccessary posts like this
can be avoided in the future. I am not in the habit of ignoring emails
regarding Bughunter.

--
Regards,
Dustin Cook
Author of BugHunter - MalWare Removal Tool

Chrome Boy wrote:
> This is a copy of a letter sent on the 10th of December.
> Still waiting a reply.
> No help on the FAQ page.
> I have been directed to this group from two other groups.
> The problem still persists.
> Can any one help me please.
> Thank You
> John
>
> Hello
> Last night I ran bughunter after reading about it on a Microsoft newsgroup.
> It found one file which I left alone as I know what it is (its from my canon
> scanner).
> Today when I started up I now have two notepad popups both saying the same
> thing.
> I also have 3 desktop icons on my start menu and also a desktop startup in
> my startup menu.
> How can I get rid of the 4 icons and stop it from starting when I boot up.
> Deleting do's not work as they come back when I boot up.
> System restore did not work either.
> Can you help me please.
> John
>
> Notepad Popup
> [.ShellClassInfo]
> LocalizedResourceName=@%SystemRoot%\system32\shell 32.dll,-21787
>
> Log File
> BugHunter v1.9.4 using pattern date/time 12-07-2006|20:32:11
> Using configuration file: BUGHUNT.INI
> Log file created: 19:42:35 - 12-09-2006
>
> => Nfo: Recursive scanning is enabled.
> => Nfo: BugHunter is only logging found malware...
> Action taken, and result.
>
> C:\DOCUME~1\JOHN\NTUSER~1.LOG - Denied Read Access!
> C:\DOCUME~1\LOCALS~1\NTUSER~1.LOG - Denied Read Access!
> C:\DOCUME~1\NETWOR~1\NTUSER~1.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\ZPORT4AS.DLL - Full Match! - Scanning Only
> C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SAM - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SECURITY - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG - Denied Read Access!
> C:\DOCUME~1\JOHN\LOCALS~1\APPLIC~1\MICROS~1\WINDOW S\USRCLASS.DAT - Denied
> Read Access!
> C:\DOCUME~1\JOHN\LOCALS~1\APPLIC~1\MICROS~1\WINDOW S\USRCLA~1.LOG - Denied
> Read Access!
> C:\DOCUME~1\LOCALS~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLASS.DAT -
> Denied Read Access!
> C:\DOCUME~1\LOCALS~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLA~1.LOG -
> Denied Read Access!
> C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLASS.DAT -
> Denied Read Access!
> C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLA~1.LOG -
> Denied Read Access!
> ================================================== =============
> Finished Scanning...52,532 Files
>
> 1 known MalWare files were found.
> None were successfully renamed.
> None were successfully deleted.
> BugHunter took approximately 9 minutes and 20 seconds to scan the folders.
> ================================================== =============
> Log file closed.: 19:51:49 - 12-09-2006

[Chrome Boy]

Sigh...
I am not on GMAIL.........

"Dustin Cook" <bughunter.dustin@gmail.com> wrote in message
news:1166799996.829677.151140@79g2000cws.googlegro ups.com...
Sigh... And these are the replies that I did send you. One on the 11,
and the other on the 16th. You should check your email settings to
ensure gmail.com isn't being blocked...

Hi John,

http://support.microsoft.com/kb/330132

This url should help you with the notepad issue. I have seen this
issue before on various programs we use here at the shop. I will look
into the possibility that BugHunter is causing it.

If it would be possible, could you rename and attach the file
BugHunter picks up? I'd like to remove it from the next pattern
release.

If I can be of any further help, please let me know.


The followup email:

Hi John,

I haven't heard back from you regarding BugHunter and notepad. Have
you gotten the issue resolved? My sincere apologies for this issue, I
have not been able to reproduce it reliably as yet. Windows seems to
change the file attributes on desktop.ini (which causes notepad to
open it for you on startup).... when certain applications are run.
Occasionally BugHunter is apparently included in a small list of
programs that cause this.

I have added your issue to the list of things to check, I will
hopefully be able to determine under what conditions this issue occurs
in the first place and let you know.

Thanks again for your interest in the BugHunter program.


Please check your email settings so that unneccessary posts like this
can be avoided in the future. I am not in the habit of ignoring emails
regarding Bughunter.

--
Regards,
Dustin Cook
Author of BugHunter - MalWare Removal Tool

Chrome Boy wrote:
> This is a copy of a letter sent on the 10th of December.
> Still waiting a reply.
> No help on the FAQ page.
> I have been directed to this group from two other groups.
> The problem still persists.
> Can any one help me please.
> Thank You
> John
>
> Hello
> Last night I ran bughunter after reading about it on a Microsoft
> newsgroup.
> It found one file which I left alone as I know what it is (its from my
> canon
> scanner).
> Today when I started up I now have two notepad popups both saying the same
> thing.
> I also have 3 desktop icons on my start menu and also a desktop startup in
> my startup menu.
> How can I get rid of the 4 icons and stop it from starting when I boot up.
> Deleting do's not work as they come back when I boot up.
> System restore did not work either.
> Can you help me please.
> John
>
> Notepad Popup
> [.ShellClassInfo]
> LocalizedResourceName=@%SystemRoot%\system32\shell 32.dll,-21787
>
> Log File
> BugHunter v1.9.4 using pattern date/time 12-07-2006|20:32:11
> Using configuration file: BUGHUNT.INI
> Log file created: 19:42:35 - 12-09-2006
>
> => Nfo: Recursive scanning is enabled.
> => Nfo: BugHunter is only logging found malware...
> Action taken, and result.
>
> C:\DOCUME~1\JOHN\NTUSER~1.LOG - Denied Read Access!
> C:\DOCUME~1\LOCALS~1\NTUSER~1.LOG - Denied Read Access!
> C:\DOCUME~1\NETWOR~1\NTUSER~1.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\ZPORT4AS.DLL - Full Match! - Scanning Only
> C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SAM - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SECURITY - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG - Denied Read Access!
> C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG - Denied Read Access!
> C:\DOCUME~1\JOHN\LOCALS~1\APPLIC~1\MICROS~1\WINDOW S\USRCLASS.DAT - Denied
> Read Access!
> C:\DOCUME~1\JOHN\LOCALS~1\APPLIC~1\MICROS~1\WINDOW S\USRCLA~1.LOG - Denied
> Read Access!
> C:\DOCUME~1\LOCALS~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLASS.DAT -
> Denied Read Access!
> C:\DOCUME~1\LOCALS~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLA~1.LOG -
> Denied Read Access!
> C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLASS.DAT -
> Denied Read Access!
> C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\WI NDOWS\USRCLA~1.LOG -
> Denied Read Access!
> ================================================== =============
> Finished Scanning...52,532 Files
>
> 1 known MalWare files were found.
> None were successfully renamed.
> None were successfully deleted.
> BugHunter took approximately 9 minutes and 20 seconds to scan the folders.
> ================================================== =============
> Log file closed.: 19:51:49 - 12-09-2006

[David H. Lipman]

From: "Chrome Boy" <AccroxR@hotmail.com>

| Sigh...
| I am not on GMAIL.........
|

Oy vay....

But Dustin is.
Dustin is inferring that maybe you did not receive his two emails because YOUR email system
may have a block or spam filter on Gmail generated email. Thus blocking Dustin's two emails
from being received by you.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

[Chrome Boy]

I have no blocks or spam filters on my e-mail system.

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:6TZih.46$4e.42@trnddc04...
From: "Chrome Boy" <AccroxR@hotmail.com>

| Sigh...
| I am not on GMAIL.........
|

Oy vay....

But Dustin is.
Dustin is inferring that maybe you did not receive his two emails because
YOUR email system
may have a block or spam filter on Gmail generated email. Thus blocking
Dustin's two emails
from being received by you.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm