Results 1 to 4 of 4
  1. #1
    5 Star Lounger
    Join Date
    May 2003
    Location
    Sterling Heights, Michigan, USA
    Posts
    633
    Thanks
    0
    Thanked 1 Time in 1 Post

    Remove Malware Leftover How?

    Cleaned up a PC running XP Home. Last thing MalwareBytes removed was a Trojan. PC seems OK now, except I occasionally get an Internet Explorer window showing the following address, and a 404 error:

    http://127.0.0.1:9003/FILEPATH=1322648590;/G4/WorkstationPrompt.html


    Anyone got a clue what might be causing this, and how to get rid of it?
    Last edited by jscher2000; 2011-12-01 at 11:19. Reason: Removed unnecessary table tags. Not able to fix the URL.

  2. #2
    Gold Lounger
    Join Date
    Oct 2007
    Location
    Johnson City, Tennessee, USA
    Posts
    3,202
    Thanks
    37
    Thanked 215 Times in 202 Posts
    Quote Originally Posted by JJDetroit View Post
    Anyone got a clue what might be causing this, and how to get rid of it?
    JJ,
    Hello... checked out the "IP" and found this .... maybe it will be helpful... Regards Fred
    Attached Images Attached Images
    PlainFred

    None are so hopelessly enslaved as those who falsely believe they are free (J. W. Von Goethe)

  3. #3
    Super Moderator RetiredGeek's Avatar
    Join Date
    Mar 2004
    Location
    Manning, South Carolina
    Posts
    9,435
    Thanks
    372
    Thanked 1,457 Times in 1,326 Posts
    Fred,

    I'm curious where you got the IP address your Map points to? The one supplied by the OP is the Loopback address with a port address attached.
    May the Forces of good computing be with you!

    RG

    PowerShell & VBA Rule!

    My Systems: Desktop Specs
    Laptop Specs

  4. #4
    5 Star Lounger
    Join Date
    May 2003
    Location
    Sterling Heights, Michigan, USA
    Posts
    633
    Thanks
    0
    Thanked 1 Time in 1 Post
    >>The one supplied by the OP is the Loopback address with a port address attached.

    Turned out not to be malware-related. The PC had been the "host" machine for an automotive work order system. I installed a new host machine Monday, then went to work getting the PC ready to be a workstation. I had uninstalled the work order software, per the software company's instruction, and fixed a disabled Windows Update problem. The work order software apparently included something called Tivoli Continuous Data Protection. And the uninstall of the work order software failed to completely remove the Tivoli software! I fired up Revo Uninstaller, and removed the dregs of Tivoli and the work order software. No more problem. Now I can take the machine back to the garage and put it back on their network as a workstation.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •