Scan stops on tcpip.sys file

Document Sample
scope of work template
							Scan stops on tcpip.sys file


         Windcaller 14 posts since
Oct 5, 2007 Hi,

This just started yesterday. When I run a scan, it hangs and just sits there on the file ending in tcpip.sys. It is in the
Windows/system32 folder. Can someone please help me with why it is doing this? Is it a virus?

I have Windows XP Home, Security Center V 7.2, Virus Scan V 11.2

Thanks


         paullotion 2,002 posts since
Apr 13, 2006 1. RE: Scan stops on tcpip.sys file Oct 6, 2007 1:29 PM
Windcaller

Do you use P2P programs?

Go to this website http://www.virustotal.com/ and upload tcpip.sys.

When finished copy the log and paste into your next reply.

Do not delete tcpip.sys
The Black Bear

*Important News for BT/TalkTalk customers*

BT/TalkTalk dump Phorm spyware, for more information see this article          Here     , also visit the   NODPI
website for much more information relating to DPI.


         Windcaller 14 posts since
Oct 5, 2007 2. RE: Scan stops on tcpip.sys file Oct 6, 2007 4:54 PM

   in response to: paullotion Yes,

Thanks for your reply, here is the result for the file that was hanging McAfee

Antivirus Version Last Update Result
AhnLab-V3 2007.10.6.0 2007.10.05 -
AntiVir 7.6.0.20 2007.10.05 -
Authentium 4.93.8 2007.10.05 -
Avast 4.7.1051.0 2007.10.06 -
AVG 7.5.0.488 2007.10.06 -
BitDefender 7.2 2007.10.06 -




Generated by Jive SBS on 2010-05-01-06:00
                                                                                                                             1
Scan stops on tcpip.sys file


CAT-QuickHeal 9.00 2007.10.06 -
ClamAV 0.91.2 2007.10.06 -
DrWeb 4.44.0.09170 2007.10.06 -
eSafe 7.0.15.0 2007.10.04 -
eTrust-Vet 31.2.5190 2007.10.06 -
Ewido 4.0 2007.10.06 -
FileAdvisor 1 2007.10.06 No threat detected, but known vulnerabilities exist
Fortinet 3.11.0.0 2007.10.06 -
F-Prot 4.3.2.48 2007.10.05 -
F-Secure 6.70.13030.0 2007.10.06 -
Ikarus T3.1.1.12 2007.10.06 -
Kaspersky 7.0.0.125 2007.10.06 -
McAfee 5135 2007.10.05 -
Microsoft 1.2908 2007.10.06 -
NOD32v2 2575 2007.10.06 -
Norman 5.80.02 2007.10.05 -
Panda 9.0.0.4 2007.10.06 -
Prevx1 V2 2007.10.06 -
Rising 19.43.50.00 2007.10.06 -
Sophos 4.22.0 2007.10.06 -
Sunbelt 2.2.907.0 2007.10.06 -
Symantec 10 2007.10.06 -
TheHacker 6.2.6.078 2007.10.06 -
VBA32 3.12.2.4 2007.10.05 -
VirusBuster 4.3.26:9 2007.10.06 -
Webwasher-Gateway 6.0.1 2007.10.05 -
Additional information
File size: 359040 bytes
MD5: 9f4b36614a0fc234525ba224957de55c
SHA1: c4f3d44361a2afbc309db6993ee0ecf12b6666d1
Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=9f4b36614a0fc234525ba224957de55c


         paullotion 2,002 posts since
Apr 13, 2006 3. RE: Scan stops on tcpip.sys file Oct 7, 2007 8:41 AM

   in response to: Windcaller Nothing malicious showing,you could run sfc /scannow to check your files.
Note:There is a space between c and /

Have your Windows XP CD handy,if you have a Dell or HP the XP CD will be built-in to the OS.




Generated by Jive SBS on 2010-05-01-06:00
                                                                                                          2
Scan stops on tcpip.sys file


Have you used P2P programs as they can alter the tcpip.sys. file which can lead to problems.

Other than that you may want to try this forum:
http://www.windowsbbs.com/
The Black Bear

*Important News for BT/TalkTalk customers*

BT/TalkTalk dump Phorm spyware, for more information see this article      Here     , also visit the   NODPI
website for much more information relating to DPI.


         Windcaller 14 posts since
Oct 5, 2007 4. RE: Scan stops on tcpip.sys file Oct 7, 2007 9:49 AM

   in response to: paullotion Thanks for your reply,

I've ran the sfc /scannow as you suggested. I am now running another scan from McAfee. If I am still having issues, I
will post back. And I will check out the forum you have suggested.

Thank you

*Addition to previous post - I have been running the scan and it is still hagning on that same file. Does anyone else
have any suggestions?


         Windcaller 14 posts since
Oct 5, 2007 5. Scan stops on tcpip.sys file Oct 18, 2007 5:12 PM
I need some help please. My scan stops on this file and will not conitnue. I have used Virus Total to scan and these
are the results -

File tcpip.sys received on 10.19.2007 00:04:56 (CET)

Antivirus Version Last Update Result
AhnLab-V3 2007.10.19.0 2007.10.18 -
AntiVir 7.6.0.27 2007.10.18 -
Authentium 4.93.8 2007.10.18 -
Avast 4.7.1051.0 2007.10.18 -
AVG 7.5.0.488 2007.10.18 -
BitDefender 7.2 2007.10.18 -
CAT-QuickHeal 9.00 2007.10.18 -
ClamAV 0.91.2 2007.10.17 -
DrWeb 4.44.0.09170 2007.10.18 -
eSafe 7.0.15.0 2007.10.15 -
eTrust-Vet 31.2.5220 2007.10.18 -
Ewido 4.0 2007.10.18 -




Generated by Jive SBS on 2010-05-01-06:00
                                                                                                                        3
Scan stops on tcpip.sys file


FileAdvisor 1 2007.10.19 No threat detected, but known vulnerabilities exist
Fortinet 3.11.0.0 2007.10.18 -
F-Prot 4.3.2.48 2007.10.18 -
F-Secure 6.70.13030.0 2007.10.18 -
Ikarus T3.1.1.12 2007.10.18 -
Kaspersky 7.0.0.125 2007.10.18 -
McAfee 5144 2007.10.18 -
Microsoft 1.2908 2007.10.18 -
NOD32v2 2601 2007.10.18 -
Norman 5.80.02 2007.10.18 -
Panda 9.0.0.4 2007.10.18 -
Prevx1 V2 2007.10.19 -
Rising 19.45.32.00 2007.10.18 -
Sophos 4.22.0 2007.10.18 -
Sunbelt 2.2.907.0 2007.10.18 -
Symantec 10 2007.10.18 -
TheHacker 6.2.9.097 2007.10.18 -
VBA32 3.12.2.4 2007.10.17 -
VirusBuster 4.3.26:9 2007.10.18 -
Webwasher-Gateway 6.6.1 2007.10.18 -
Additional information
File size: 359040 bytes
MD5: 9f4b36614a0fc234525ba224957de55c
SHA1: c4f3d44361a2afbc309db6993ee0ecf12b6666d1


         Ex_Brit 18,503 posts since
May 6, 2004 6. RE: Scan stops on tcpip.sys file Oct 18, 2007 6:02 PM

    in response to: Windcaller Windcaller I merged your new thread with the original one and I am sure that Paullotion
will have some ideas for you.




Toronto • Canada

Volunteer Moderator • Consumer Products
Vista Ultimate SP2 x64 • Windows 7 Ultimate x64
No Unsolicited Private Messages .. Please!




Generated by Jive SBS on 2010-05-01-06:00
                                                                                                                     4
Scan stops on tcpip.sys file




Consumer Security • 2009



         Windcaller 14 posts since
Oct 5, 2007 7. RE: Scan stops on tcpip.sys file Oct 18, 2007 6:11 PM

   in response to: Ex_Brit Thanks Peter...much appreciated!


         paullotion 2,002 posts since
Apr 13, 2006 8. RE: Scan stops on tcpip.sys file Oct 19, 2007 9:11 AM

   in response to: Windcaller What is the path/location to the tcpip.sys file.Locate the file and right click>scroll to
properties>click on version tab>>does it belong to Microsoft>how many bytes are there.
The Black Bear

*Important News for BT/TalkTalk customers*

BT/TalkTalk dump Phorm spyware, for more information see this article         Here      , also visit the   NODPI
website for much more information relating to DPI.


         Windcaller 14 posts since
Oct 5, 2007 9. RE: Scan stops on tcpip.sys file Oct 19, 2007 4:11 PM

   in response to: paullotion Thank you for your replyl

It's located in the C:\windows\$hf_mig$\KB917953$\SP2QFE folder

it is Microsoft and it is 352 KB.


         paullotion 2,002 posts since
Apr 13, 2006 10. RE: Scan stops on tcpip.sys file Oct 19, 2007 4:38 PM

   in response to: Windcaller You might want to have a look here> http://support.microsoft.com/kb/917953 and Here
.Also visit Microsoft update page>click start>all programs>windows update.

Remember Microsoft releases security updates every second Tuesday of the month.
The Black Bear

*Important News for BT/TalkTalk customers*

BT/TalkTalk dump Phorm spyware, for more information see this article         Here      , also visit the   NODPI
website for much more information relating to DPI.


          Windcaller 14 posts since




Generated by Jive SBS on 2010-05-01-06:00
                                                                                                                          5
Scan stops on tcpip.sys file


Oct 5, 2007 11. RE: Scan stops on tcpip.sys file Oct 19, 2007 4:54 PM

  in response to: paullotion Thank you again Paul, I will run the windows updates, install that patch if mcafee
continues to stall and post back with the results.:)


         Windcaller 14 posts since
Oct 5, 2007 12. RE: Scan stops on tcpip.sys file Oct 20, 2007 3:10 PM

   in response to: Windcaller

I've ran windows update and it continues to stall on that file. Since it is stalling, does that mean the scan is not
removing anything it finds? Is there a way to get it to skip that file and continue? I've tried several times pressing
"skip" but it does not.

Thanks


         paullotion 2,002 posts since
Apr 13, 2006 13. RE: Scan stops on tcpip.sys file Oct 21, 2007 8:43 AM

   in response to: Windcaller You could send this file C:\windows\$hf_mig$\KB917953$\SP2QFE folder\tcpip.sys
include a brief description of what the problem is.
http://vil.nai.com/vil/submit-sample.aspx

As this is a Microsoft file you may want to check with this website http://www.windowsbbs.com/ ,they`ll be able to tell
you if there is a problem with this file.
The Black Bear

*Important News for BT/TalkTalk customers*

BT/TalkTalk dump Phorm spyware, for more information see this article         Here     , also visit the   NODPI
website for much more information relating to DPI.


         paullotion 2,002 posts since
Apr 13, 2006 14. RE: Scan stops on tcpip.sys file Nov 15, 2007 5:34 PM

   in response to: paullotion Since this user has not replied since 20th October,this thread is closed.
The Black Bear

*Important News for BT/TalkTalk customers*

BT/TalkTalk dump Phorm spyware, for more information see this article         Here     , also visit the   NODPI
website for much more information relating to DPI.




Generated by Jive SBS on 2010-05-01-06:00
                                                                                                                         6

						
Related docs
Other docs by vkf46332
J2EE Design Patterns Applied
Views: 65  |  Downloads: 3
ORACLE CONTAINERS FOR J2EE FEATURE OVERVIEW
Views: 5  |  Downloads: 1
J2EE-Spezialistin J2EE-Spezialist
Views: 12  |  Downloads: 0
Deploying CF in a Cluster and J2EE
Views: 2  |  Downloads: 0
Exposing J2EE Urban Myths
Views: 2  |  Downloads: 0
Developing Full Scale J2EE Applications
Views: 17  |  Downloads: 1
Lecture Notes 8 J2EE
Views: 29  |  Downloads: 1