Hey. I was pointed to a thread on this forum a few weeks ago and bookmarked it for future use. I have a problem which I hope you guys could suggest solutions to.
My OS is Win 2k Pro, I use ZoneAlarm as my firewall, McAfee for anti-virus, and have Spybot installed. In the last week or so I've noticed, twice, that my computer has restarted itself when I wasn't around to see it. I wasn't sure how or why, until it happened until tonight, when I saw a message box claiming that something was wrong with services.exe and a restart would be forced in 60 seconds.
Before this, I've been seeing popups from McAfee claiming to have found trojans and/or worms (can't remember if it was one or the other or both) in various .exe files. Several times these were found simply in C:\, other times they were found in internet cache folders. Some did not have any names at all. These popups usually came 2-5 at a time, then stopped and would appear again later. I've run two full virus scans this week, and both turned up empty.
In addition to this, I've seen two strange .exes try to gain internet access: "symmec" and "netbeans." I denied both of these, of course. And finally, I noticed a process called zlclint.exe (as opposed to zlclient.exe, which seems to be the ZoneAlarm program).
So tonight after the forced restart, I started in safe mode and went searching for all of these strange .exes. Starting with zlclint, I found it in system32 as well as in two different internet cache folders. I found several tiny exes in the C:\, with names such as "m", "U", or "m1s." Then I ran a search on all .exes in my internet cache folders, and found a few more... but my mistake there was to only search my own user's folder. Next, I did a search on the whole "documents and settings" folder, and found several more, including both "symmec" and "netbeans." All of these exes I found were deleted. After this, I did a search for any exes created within the last seven days (a trait they all shared), and found nothing besides what I'd personally downloaded.
I was satisfied with that and restarted in normal mode... so far I've not seen anything out of the ordinary. But I thought I would ask here to see if the users of this forum knew what this oddity is, and if there are any additional steps I should take (I am not going to reformat this drive, though).
Thanks in advance.
My OS is Win 2k Pro, I use ZoneAlarm as my firewall, McAfee for anti-virus, and have Spybot installed. In the last week or so I've noticed, twice, that my computer has restarted itself when I wasn't around to see it. I wasn't sure how or why, until it happened until tonight, when I saw a message box claiming that something was wrong with services.exe and a restart would be forced in 60 seconds.
Before this, I've been seeing popups from McAfee claiming to have found trojans and/or worms (can't remember if it was one or the other or both) in various .exe files. Several times these were found simply in C:\, other times they were found in internet cache folders. Some did not have any names at all. These popups usually came 2-5 at a time, then stopped and would appear again later. I've run two full virus scans this week, and both turned up empty.
In addition to this, I've seen two strange .exes try to gain internet access: "symmec" and "netbeans." I denied both of these, of course. And finally, I noticed a process called zlclint.exe (as opposed to zlclient.exe, which seems to be the ZoneAlarm program).
So tonight after the forced restart, I started in safe mode and went searching for all of these strange .exes. Starting with zlclint, I found it in system32 as well as in two different internet cache folders. I found several tiny exes in the C:\, with names such as "m", "U", or "m1s." Then I ran a search on all .exes in my internet cache folders, and found a few more... but my mistake there was to only search my own user's folder. Next, I did a search on the whole "documents and settings" folder, and found several more, including both "symmec" and "netbeans." All of these exes I found were deleted. After this, I did a search for any exes created within the last seven days (a trait they all shared), and found nothing besides what I'd personally downloaded.
I was satisfied with that and restarted in normal mode... so far I've not seen anything out of the ordinary. But I thought I would ask here to see if the users of this forum knew what this oddity is, and if there are any additional steps I should take (I am not going to reformat this drive, though).
Thanks in advance.