HouseCall phenomenon

Preamble: XP SP3, IE8, one HD C, one backup HD D, one USB drive . CRT monitor.

I had a problem of breach of security that wiped out my hard drive, my backup drive and my USB drive. I started feeling the effect of this problem about three weeks ago. I was limited literally to only three websites. Another phenomenon occurred, the monitor luminous intensity decreases sometimes to complete darkness. I had to turn off the monitor and wait at least one minute and turn it on again. This phenomenon happens when I am online. It happened rarely when I turn off the modem.

I tried to run Trend Micro HouseCall using the Java option (of course before the disks were wiped out). Here’s what I got:

I updated the script, or I thought I did. Then I clicked on scan now, this is what I got:

If I try to update the script again, I get the message:

“Verifying Java Version
Congratulations!
You have the recommended Java installed (Version 6 Update 13).”

If I continue, Trand Micro freezes at the point where it downloads the update files. At that point I was unable to go to the internet or run an antivirus.

My Zone Alarm is on but the strange thing about it is that it started to allow applications to go to the internet unchecked, e.g. windows explorer, control panel, acrobat distiller, word, excel, power point, and every other application that has no business whatsoever to go online. The nasty thing about it is that if I block one application from going online, the next time I check Zone Alarm it gets back online.

Another thing happened is that most of the folders were blocked and I could not open them, e.g. when I click to open the folder My Documents I get the message Access denied, you have no permission to open this folder. I am the only one who uses this computer and I have all administrator priviliges.

The same thing happens if I use the browser option.

At that point I decided to reformat the disk and reinstall fresh copy of windows. Mine is OEM SP2 from Dell. That did not cure the problem. Now I have a fully updated freshly installed windows and the stanza of Trend Micro java and freezing at the download updates is the same.

I do not know if this observation could be helpful to solve the problem. When I formatted the disk, I had two partitions, one is labeled C and the other one is about 8 GB without name. I could not delete the last one separately, I could not format it separately. Its trace disappears upon deleting partition C but it comes back upon setting up a new partition that was labeled automatically C. Could it be the case that the unnamed partition be the host of a nasty software that controls what I can do with my computer?

Any suggestion as how I could run HouseCall?

If you run zonealarm and trend micro together your asking for trouble to start .
You have not indicated of the computer is a Dell as well.
The 8 gig partition may be the restore partition.
Ifr you are sure it isnt and in doubt about whats on that partiition.
You can use Wipe or Zap and remove everything from the harddrive and start
with a new partition and a clean load of windows

I haven't thought about zap or wipe. I will do that. I did run HouseCall all the times with ZoneAlarm running. I never had a problem. As a matter of fact, I run HouseCall after I reinstalled windows and before I installed ZoneAlarm. The same stanza.

Quote:

---

Originally Posted by Votan

I had two partitions, one is labeled C and the other one is about 8 GB without name. I could not delete the last one separately, I could not format it separately. Its trace disappears upon deleting partition C but it comes back upon setting up a new partition that was labeled automatically C.

---

Are you sure its size is 8GB? If it's 8MB, it will be the unallocated space Windows leaves when a drive is partitioned, to allow for future conversion to a Dynamic Disk.

Quote:

---

Originally Posted by Platypus

Are you sure its size is 8GB? If it's 8MB, it will be the unallocated space Windows leaves when a drive is partitioned, to allow for future conversion to a Dynamic Disk.

---

Yes 8 MB. The question now, could anyone spawn a malicious sofware in that space of the disk and could not be detected?

I don't think so, it's unallocated space. The drive clusters can contain data, but nothing can run from there (or even access that data I would think, short of using absolute address block reads through the BIOS or drive controller). And every drive partitioned under DD-capable Windows versions will have that unallocated space, I've never heard of it being used for any malicious purpose. If the drive is wiped using the utilities already mentioned, or DBAN, Eraser etc, any data that was there will also be removed.

Anybody can help me understand why I cannot run HouseCall on my computer? It keeps complaining about java and it freezes there.

Another issue, the monitor dims only when I go online.

Help please

My XP is Dell SP2, updated to SP3.

go here and check you have the right java.

Quote:

---

Important Notes about HouseCall 6.5
HouseCall 6.5 has two independent Core Engines to choose from:

1.The ActiveX Core Engine: to use this engine, please adjust here the IE browser’s Security level to Medium at least and be sure that signed ActiveX objects are enabled.

2.The Java VM Core Engine- to use this engine, please install the Java VM from www.java.com

---

Does the activex version work?

Yes I have the correct Java. Here's what I got:

Verifying Java Version
Congratulations!
You have the recommended Java installed (Version 6 Update 13).

still not luck.

Does the activex version work?

There is no activex in housecall folder, house call is not downloading it. this is a screenshot where it freezes. Notice the page is truncated and there is not vertical sliding bar. With or without zone alarm the same stanza.

The Java icon does not last for long in the tray.

I tried to restore windows. It does not restor. This is a new fresh installation of XP2 using Dell CD and updated with SP3 download from microsoft.

Which browser are you using? Have you tried another?

I have ie8. I had ie6. the same stanza. It is really a puzzle.

Try it in firefox.

Running Housecall 6.5 you should see an option to run a java scan or an Active X scan when you use the online scan. If you are using a version of Housecall installed on your computer, you need to be aware that your version contains security flaws that make it a potential backdoor for hackers. It's possible you might have a damaged download as well. Currently, TrendMicro only offers v. 7 of Housecall, not the older versions

If you want to run Housecall, you should go to their site and use the v. 7 Beta. Alternatively, you could run Eset's online scan or, even better, download and run a trial of NOD32.

http://cyberinsecure.com/trend-micro...tivex-control/

Quote:

---

Originally Posted by NooNoo

Try it in firefox.

---

I installed Firefox and ran HouseCall using Firefox. It did run without a problem. One glitch though, when I launch Firefox, I get this message:

"There was a problem sending the command to the program"

That message comes out every time I launch Firefox. It remains in the background. I see it after I close the browser or I minimize it.

If you are running zone alarm, it is likely that is the cause. Experiment by turning off ZA and trying it. If it goes away, you have a configuration problem with ZA.

As for IE, I suggest you reset internet explorer settings in Tools, Internet Options, Advanced Tab.

Quote:

---

Originally Posted by NooNoo

If you are running zone alarm, it is likely that is the cause. Experiment by turning off ZA and trying it. If it goes away, you have a configuration problem with ZA.

As for IE, I suggest you reset internet explorer settings in Tools, Internet Options, Advanced Tab.

---

With and without ZA, the same stanza.

I have the same problem with ie6 at work as well. Firefox runs well, ie6 does not. It is exactly the same problem at work as at home. I am using the default options in the advanced tab of internet options.

Internet explorer gives two options, one using java based scan, and another one a browser based scan. Neither works. Firefox gives only the java option.

I used to run housecall every week before I got my disk wiped out at home. But now I have the same problem at work too.

So, Votan, are you using the new v. 7, or are you still using the old, insecure Housecall?

And frankly after seeing all this. I cant understand why you wouldnt use a standard antivirus?
Seems like running housecall is a lot of problems versus say installing NAV 2009

Why would you run housecall at work? Are you the IT guy at work?

Quote:

---

Originally Posted by NooNoo

Why would you run housecall at work? Are you the IT guy at work?

---

No I am not the IT guy at work. I only have full administrator privilege on my desktop. It was my curiosity to see whether I could run housecall from work, because it is still not working with ie but it works with Firefox at home and at work.

Quote:

---

Originally Posted by Ferrit

And frankly after seeing all this. I cant understand why you wouldnt use a standard antivirus?
Seems like running housecall is a lot of problems versus say installing NAV 2009

---

The issue is not whether or not I have antivirus installed on my computer, it is why suddenly it stopped working with ie and not it works well with Firefox.

Quote:

---

Originally Posted by slgrieb

So, Votan, are you using the new v. 7, or are you still using the old, insecure Housecall?

---

I am using http://housecall65.trendmicro.com, this is the default URL when I go to trendmicro.com website and I choose run housecall.

Quote:

---

Originally Posted by Votan

No I am not the IT guy at work. I only have full administrator privilege on my desktop. It was my curiosity to see whether I could run housecall from work, because it is still not working with ie but it works with Firefox at home and at work.

---

Quote:

---

Originally Posted by Votan

The issue is not whether or not I have antivirus installed on my computer, it is why suddenly it stopped working with ie and not it works well with Firefox.

---

At work you may be local admin, but policies are still boing pushed from the server, one of which may disallow running java applets or activex controls.

At home your may simply be blocked by your own firewall.

Quote:

---

Originally Posted by NooNoo

At home your may simply be blocked by your own firewall.

---

NooNoo my dear NooNoo, with and without firewall at home, no firewall whatsoever, the same as with firewall: housecall does not run with ie, Firefox runs with firewall running at home and at work.

Then you have incorrect activex and java settings.... or a bho attached to IE that is preventing it working.

Quote:

---

Originally Posted by NooNoo

Then you have incorrect activex and java settings.... or a bho attached to IE that is preventing it working.

---

I downloaded BHODemon but apparently it does not run. It is no longer maintained. Malwarebyte and housecall (using firefox) apparently are unable to detect a bho. Is there a sure fire bho removal utility somewhere?

yep...hijackthis... you want version 2.02.

I downloaded hijackthis 2.0.2 and ran it at work and at home. At work it worked fine and I could run houscall with ie8 using the browser option but the java option is still not working.

At home, neither options worked. It is still complaining it could not download the update files. I removed zonalarm. All of the same. I ran malwarebyte and housecall using firefox. nothing was detected.

Another thing I noticed. I could not restore to any of the highlighted dated. Any hint what I could do next?

my opinion is that there isn't any malware on the system and that there is a possibility of an actual virus on both systems that is affecting the housecall and not picked up by malware/spyware scanners. Which is why I rather rely on a good installed virus scan than some web based one. My suggestion is to get a command based viral scanner and run it off a dos boot disk or at least run it in command prompt in safe mode.

Tried a repair install? If your restore points are corrupt, you should uncheck the box for system restore so that the old points are deleted and then reboot and redo the check box so you have the ability to create new restore points.

Niclo, at work the system has an antivirus software running.

'wiped out my hard drive, my backup drive and my USB drive'

Just for confirmation, but you did reformat ALL those drives including any flash drives you have been using?

Did you at any time transport files via the USB (external) or flash drive from home to work?

"Just for confirmation, but you did reformat ALL those drives including any flash drives you have been using?
"
I reformated the hard drive and the flash drive. I haven't formatted the backup drive. I disconnected it. I have a lot of files that I am still strugling to recover.

"Did you at any time transport files via the USB (external) or flash drive from home to work? "

Yes. Perhaps there I should feel guilty?

Keep in mind that no new bho is detected by hijackthis.

Also, firefox runs fine, downloading update files from trendmicro was not and is not a problem. The only thing though is that ie8 gives two options: using java or using browser. neither is working; firefox gives only one option but it works without a complaint.

Housecall 6.5 does not want to work in IE8 for me either.... Housecall 7 works just fine though... I suggest you use the version 7 offered in the red link...

Quote:

---

Originally Posted by NooNoo

Housecall 6.5 does not want to work in IE8 for me either.... Housecall 7 works just fine though... I suggest you use the version 7 offered in the red link...

---

I downloaded Housecall 7. It scans only windows folder and subfolders. Am I missing something?

I discussed the issue with trandmicro on the telephone. I had hard time to explain the problem to the respondent. He didn't seem to know what he was answering. Finally he gave me the esupport link. Let's see what I'll get from them.

I should say that now neither ie8 nor firefox do run housecall65, at home and at work; I had firefox running on both machines though. I scanned my PC at work with the antivirus. Negative.

Right, so where are you with fixing your computer?

Nowhere so far.

I contacted esupport.trandmicro. They don't service housecall65 because it is free. I am preparing to reinstall windows from scratch at home.

I'll keep you posted. It is really puzzling.

Are you sure you have a virus? What other checkers have you used? Eset? Panda?