Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

some "enter network password" dialog box pops up randomly


  • Please log in to reply
16 replies to this topic

#1 Alduin's Khajiit

Alduin's Khajiit

  • Banned
  • 167 posts
  • OFFLINE
  •  
  • Local time:09:30 AM

Posted 13 September 2014 - 09:09 AM

9evONZK.png
 
 
screenshot above. I could be doing whatever, and at seemingly random times, I get interrupted with this dialog box just popping up on its own. I have no idea what this is and I was wondering why this keeps popping up on its own at random times in Windows Explorer

Edited by Queen-Evie, 13 September 2014 - 04:12 PM.
moved from Windows 7 to Am I Infected as requested by SleepyDude


BC AdBot (Login to Remove)

 


m

#2 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,937 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:01:30 PM

Posted 13 September 2014 - 11:05 AM

Hi,

 

Do you have a computer in your network named RESHIRAMXJUSTIN? Did you accessed some folder, printer, etc. shared on this computer recently?


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#3 Alduin's Khajiit

Alduin's Khajiit
  • Topic Starter

  • Banned
  • 167 posts
  • OFFLINE
  •  
  • Local time:09:30 AM

Posted 13 September 2014 - 01:12 PM

that's my Gateway's computer name. I've never accessed any folder or printer or anything shared from the computer with the problem. all file transfers / remote access I do is through TeamViewer across 5 computers



#4 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,937 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:01:30 PM

Posted 13 September 2014 - 01:39 PM

Hi,

 

that's my Gateway's computer name. I've never accessed any folder or printer or anything shared from the computer with the problem. all file transfers / remote access I do is through TeamViewer across 5 computers

 

Just to clarify RESHIRAMXJUSTIN it's a computer or your router (gateway)?

 

About the sharing I mean if the RESHIRAMXJUSTIN "device" is sharing something on the network (it could be files, folder, video, etc.) and not the computer where you get the password prompt.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#5 Alduin's Khajiit

Alduin's Khajiit
  • Topic Starter

  • Banned
  • 167 posts
  • OFFLINE
  •  
  • Local time:09:30 AM

Posted 13 September 2014 - 01:54 PM

no "Gateway" as in Computer Manufacturer



#6 Alduin's Khajiit

Alduin's Khajiit
  • Topic Starter

  • Banned
  • 167 posts
  • OFFLINE
  •  
  • Local time:09:30 AM

Posted 13 September 2014 - 01:55 PM

Hi,

 

that's my Gateway's computer name. I've never accessed any folder or printer or anything shared from the computer with the problem. all file transfers / remote access I do is through TeamViewer across 5 computers

 

Just to clarify RESHIRAMXJUSTIN it's a computer or your router (gateway)?

 

About the sharing I mean if the RESHIRAMXJUSTIN "device" is sharing something on the network (it could be files, folder, video, etc.) and not the computer where you get the password prompt.

nope nothing. I haven't shared anything on that computer & don't use it much. it sits idle most of the time



#7 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Staff Emeritus
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:08:30 AM

Posted 13 September 2014 - 02:20 PM

Is the computer this topic is about the same one as this one in your Malware Removal Logs topic?  http://www.bleepingcomputer.com/forums/t/547060/my-desktop-is-on-its-last-leg-is-this-some-kind-of-infection/


Edited by Queen-Evie, 13 September 2014 - 02:24 PM.


#8 Alduin's Khajiit

Alduin's Khajiit
  • Topic Starter

  • Banned
  • 167 posts
  • OFFLINE
  •  
  • Local time:09:30 AM

Posted 13 September 2014 - 02:38 PM

nope. that computer isn't even on and that is Windows XP if you would have READ the logs



#9 Queen-Evie

Queen-Evie

    Official Bleepin' G.R.I.T.S. (and proud of it)


  • Staff Emeritus
  • 16,485 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:My own little corner of the universe (somewhere in Alabama). It's OK, they know me here
  • Local time:08:30 AM

Posted 13 September 2014 - 02:41 PM

I tend not to read those logs since I am not a malware removal expert. 



#10 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,937 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:01:30 PM

Posted 13 September 2014 - 03:36 PM

nope nothing. I haven't shared anything on that computer & don't use it much. it sits idle most of the time

 

According with this I see no reason for the computer start asking for credentials to connect to the Gateway computer and I would consider the possibility of malware!

 

Maybe Queen-Evie can move the topic to the Am I infected? What do I do? section? Thanks.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#11 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,937 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:01:30 PM

Posted 14 September 2014 - 08:31 AM

Hi,

 

Please download Rkill by Grinler and save it to your desktop.

  • Link 1
  • Link 2
  • Link 3
    • Double-click on the Rkill desktop icon to run the tool.
    • If using Vista, right-click on it and Run As Administrator.
    • A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
    • If not, delete the file, then download and use the one provided in Link 2.
    • If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
    • If the tool does not run from any of the links provided, please let me know.
  • Do not reboot the computer, you will need to run the application again.
  • Please post the log generated by the tool.

 

 

Tell me if after running Rkill the credentials prompt stop and also which Security Programs you have on the computer?


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#12 Alduin's Khajiit

Alduin's Khajiit
  • Topic Starter

  • Banned
  • 167 posts
  • OFFLINE
  •  
  • Local time:09:30 AM

Posted 14 September 2014 - 01:13 PM

do you want me to run that on the "ReshiramxJustin" computer or on the computer with the popping up dialog



#13 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,937 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:01:30 PM

Posted 14 September 2014 - 03:44 PM

do you want me to run that on the "ReshiramxJustin" computer or on the computer with the popping up dialog

 

On the computer with the popup.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#14 Alduin's Khajiit

Alduin's Khajiit
  • Topic Starter

  • Banned
  • 167 posts
  • OFFLINE
  •  
  • Local time:09:30 AM

Posted 14 September 2014 - 03:57 PM

Rkill 2.6.8 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 09/14/2014 04:53:41 PM in x86 mode.
Windows Version: Windows 7 Ultimate Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * Windows Firewall Disabled

   [HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
   "EnableFirewall" = dword:00000000

Checking Windows Service Integrity:

 * WMPNetworkSvc [Missing Service]

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * No issues found.

Program finished at: 09/14/2014 04:55:41 PM
Execution time: 0 hours(s), 1 minute(s), and 59 seconds(s)
 



#15 Alduin's Khajiit

Alduin's Khajiit
  • Topic Starter

  • Banned
  • 167 posts
  • OFFLINE
  •  
  • Local time:09:30 AM

Posted 14 September 2014 - 08:09 PM

where did you disappear to? that dialog box popped up again at random






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users