Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Netscape locked in Safe Mode, .AVG reports mdb:\embedded.doc msgs


  • This topic is locked This topic is locked
3 replies to this topic

#1 Computerman101

Computerman101

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:46 AM

Posted 07 December 2011 - 05:09 PM

Looks like I have been hit by something - Several unrelated things at once:

History: Connected to Telkonet iBridge at hotel - wired access through power outlet. Strange, but it was working.

Symptoms:

NETSCAPE:
* Browser went into Safe Mode last night. Reboot didn't bring it back out. Lost all settings but still working otherwise. Still have bookmarks, address book and browse history

OFFICE DOCUMENTS: AVG SCAN: shows "EMBEDDED.DOC" and Macros reported:
* AVG full scan shows and extra entry in EVERY Access .mdb file in scan history detail. Second entry has
..."filename.mdb" Contains macros
..."filename.mdb:\embedded.doc" Contains macros (<-- never noticed this before)

I have a bunch and they all have macros, including AUTOEXEC that runs when opened. Even files in .zip files have this. .xls files listed as having macros that I did not put any in. .doc Word templates, Also .doc files

MOUSE ACTIVITY:

Started skipping off the screen about the same time. Track wheel appears to be dead some times/some places.

Anyone with advice, please advise!
Thanks;
Computerman101

Attached Files



BC AdBot (Login to Remove)

 


#2 Computerman101

Computerman101
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:01:46 AM

Posted 07 December 2011 - 05:39 PM

CLARIFICATIONS:
* All of my Access databases have AUTOEXEC macro that I put there. They are expected and look normal. It's the embedded.doc that seems new to me.

* Before 4/5 scan there were no macro messages. On that scan there was a threat fixed called "cookies.squite". The next scan and all scans since identified all the macros. It's possible I changed scan settings, as I was not concerned until today. Since there seems to be no damage or problems with the Access databases, it's possible the real issue is just Netscape - Actually it's FIREFOX I'm referring to. Good Grief... :blink: FIREFOX FIREFOX FIREFOX FIREFOX FIREFOX FIREFOX FIREFOX FIREFOX FIREFOX !!!

#3 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:01:46 AM

Posted 08 December 2011 - 01:17 PM

Hi,

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.


NEXT

Please download aswMBR to your desktop.
  • Double click the aswMBR.exe icon to run it
  • When asked if you want to download Avast's virus definitions please select Yes.
  • Click the Scan button to start the scan
  • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015


#4 CatByte

CatByte

    bleepin' tiger


  • Malware Response Team
  • 14,664 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:01:46 AM

Posted 13 December 2011 - 11:28 PM

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.

Microsoft MVP - 2010, 2011, 2012, 2013, 2014, 2015





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users