UNSOLVED
Resolution Re: TROJ_GENERIC.ADV
In the HijackThis form and in this form there are several threads regarding a low threat trojan picked up by PC-Cillan. Namely the file ~df394b.tmp triggers a "TROJ_GENERIC.ADV" warning. This can occur repeatedly if certain sound applications are used. The file in question is located in a subdirectory with a name of the form clclean.000*.* of the users local settings (C:\Documents and Settings\{user name here}\Local Settings\Temp). Local Settings is a hidden directory.
This directory is created by some Creative Labs products, apparently as part of some license verification scheme. According to other threads on TROJ_GENERIC.ADV on this forum and the HijackThis form, Trendmicro is working on a fix for PCCillan.
It seems to me that their only conceivable fix is to not identify this file as a trojan, when in fact it may well access the internet without a user's explicit permission. As such, I personally have decided in principal to shut off these products. Here is how to stop the clclean.000* directories from being created. I have noticed no lack of functionality, although I guess I did pay $20 extra for the machine to get this software, which I will no longer use.
Big Picture:
1. Turn off the start-up items: (1) Rundll32 CTMBHA.DLL,MBMon and (2) CTSysVol
2. Turn off the service "Creative Labs Licensing".
After completing this, you may need to go in to the control panels, select the sound settings, and check the box asking for a volume control to be put in the taskbar as the above steps shut off the fancy Creative Labs sound control software. The windows sound control is unaffected.
Details:
1. Log in as an administrator.
2. To turn off the start-up items:
a: click the start button and click "Run"
b: type msconfig and hit return
c: in the system configuration utility that comes up, click on the startup tab
d: uncheck the two start up items.
e: click ok.
f: click 'Exit without Restart' (you'll need to restart for the changes to take effect)
3. To turn off the service item:
a: Click on control panels
b: click on administrative tools (or in the category view, performance and maitenance and then administrative tools)
c: click on services
d: in the window, scroll till you find the service Creative Labs Licensing. Right click on it and select properties.
e: in the properties box, change service startup status to 'Disabled'.
Close things up and reboot.
You may need to add the windows sound icon to the task bar using the sound settings as described above.
I have experienced no trouble with this fix, although I can no longer use most or all of the Creative Labs Sound Blaster Audiology software. Good Riddance in my view. Your mileage may vary.
Message Edited by rleduc on 03-08-2007 09:46 AM
This directory is created by some Creative Labs products, apparently as part of some license verification scheme. According to other threads on TROJ_GENERIC.ADV on this forum and the HijackThis form, Trendmicro is working on a fix for PCCillan.
It seems to me that their only conceivable fix is to not identify this file as a trojan, when in fact it may well access the internet without a user's explicit permission. As such, I personally have decided in principal to shut off these products. Here is how to stop the clclean.000* directories from being created. I have noticed no lack of functionality, although I guess I did pay $20 extra for the machine to get this software, which I will no longer use.
Big Picture:
1. Turn off the start-up items: (1) Rundll32 CTMBHA.DLL,MBMon and (2) CTSysVol
2. Turn off the service "Creative Labs Licensing".
After completing this, you may need to go in to the control panels, select the sound settings, and check the box asking for a volume control to be put in the taskbar as the above steps shut off the fancy Creative Labs sound control software. The windows sound control is unaffected.
Details:
1. Log in as an administrator.
2. To turn off the start-up items:
a: click the start button and click "Run"
b: type msconfig and hit return
c: in the system configuration utility that comes up, click on the startup tab
d: uncheck the two start up items.
e: click ok.
f: click 'Exit without Restart' (you'll need to restart for the changes to take effect)
3. To turn off the service item:
a: Click on control panels
b: click on administrative tools (or in the category view, performance and maitenance and then administrative tools)
c: click on services
d: in the window, scroll till you find the service Creative Labs Licensing. Right click on it and select properties.
e: in the properties box, change service startup status to 'Disabled'.
Close things up and reboot.
You may need to add the windows sound icon to the task bar using the sound settings as described above.
I have experienced no trouble with this fix, although I can no longer use most or all of the Creative Labs Sound Blaster Audiology software. Good Riddance in my view. Your mileage may vary.
Message Edited by rleduc on 03-08-2007 09:46 AM
