Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

C:\windows\msnavpklog.txt - What Is This File?


  • Please log in to reply
4 replies to this topic

#1 PackerFan

PackerFan

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:02 AM

Posted 05 March 2006 - 09:54 PM

Hi -
Does anyone know what the file msnavpklog.txt is for and how/if I can get rid of it? It is located at C:\WINDOWS\msnavpklog.txt on my pc and is updated every minute. It is 4 GB right now. I have run Spy Sweeper, TrendMicro, Panda Active Scan and Ewido. I am currently running Online Trojan Scan. I'm guessing, because this is just a txt file, I can just delete it...but I want to find out what is creating this file as I'm sure if I delete it, it will just be recreated and continue to update.
Thanks.

BC AdBot (Login to Remove)

 


#2 jgweed

jgweed

  • Members
  • 28,473 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Chicago, Il.
  • Local time:05:02 AM

Posted 05 March 2006 - 10:36 PM

I suggest you post a HJT log, since it would appear to be part of a malware program and not as innocent as it appears from what I am seeing on the Internet.
Here are the instructions:

http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

Regards,
John
Whereof one cannot speak, thereof one should be silent.

#3 PackerFan

PackerFan
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:02 AM

Posted 06 March 2006 - 04:49 PM

I was able to delete the msnavpklog.txt file that was 4GB, but it was recreated and started over. This is the text that is in the log:
-------------------- advpack.dll is loaded or Attached ------------------------------
Date: 03/06/2006 (mm/dd/yyyy) Time: 14:43:03 (hh:mm:ss)
-------------------- advpack.dll is unloaded or Detached ----------------------------
-------------------- advpack.dll is loaded or Attached ------------------------------
Date: 03/06/2006 (mm/dd/yyyy) Time: 14:43:04 (hh:mm:ss)
-------------------- advpack.dll is unloaded or Detached ----------------------------
-------------------- advpack.dll is loaded or Attached ------------------------------
Date: 03/06/2006 (mm/dd/yyyy) Time: 14:43:05 (hh:mm:ss)
-------------------- advpack.dll is unloaded or Detached ----------------------------
-------------------- advpack.dll is loaded or Attached ------------------------------
Date: 03/06/2006 (mm/dd/yyyy) Time: 14:43:06 (hh:mm:ss)
-------------------- advpack.dll is unloaded or Detached ----------------------------
-------------------- advpack.dll is loaded or Attached ------------------------------
Date: 03/06/2006 (mm/dd/yyyy) Time: 14:43:07 (hh:mm:ss)
-------------------- advpack.dll is unloaded or Detached ----------------------------
-------------------- advpack.dll is loaded or Attached ------------------------------
Date: 03/06/2006 (mm/dd/yyyy) Time: 14:43:08 (hh:mm:ss)
-------------------- advpack.dll is unloaded or Detached ----------------------------
-------------------- advpack.dll is loaded or Attached ------------------------------
Date: 03/06/2006 (mm/dd/yyyy) Time: 14:43:09 (hh:mm:ss)
-------------------- advpack.dll is unloaded or Detached ----------------------------

Any idea how to correct this problem? I will be running HiJackThis soon. Thanks

#4 -David-

-David-

  • Members
  • 10,603 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London
  • Local time:11:02 AM

Posted 06 March 2006 - 04:53 PM

I think that posting a HijackThis is your best option - i guess that you will you get a few scans run that should hopefully get rid of it. I see that ewido appears to be removing it:

C:\WINDOWS\msnavpklog.txt -> TrojanDownloader.Agent.bq : Cleaned with backup

David

#5 PackerFan

PackerFan
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:02 AM

Posted 06 March 2006 - 07:53 PM

Hi. Here is my Hijack This log file. Thanks

Edited by PackerFan, 07 March 2006 - 12:46 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users