[LordOpie]

"Connection timed out (Error #10060)" in a window called "APP_BK_038" and generates a new pop-up window every minute.

I know that's a relatively standard timeout error, but it'll generate when nothing's seemingly going on on my PC, which is used as a server for the two Macs in my office thru PC Maclan software.

Any ideas on a fix?

I did a thorough google search and tried somethings, like looking for a virus named "sobig" or "gatedrp" and found nothing.

 

[Tenchiro]

Do you have any kind of firewall software installed? Is it configured correctly?

 

[LordOpie]

Originally posted by Tenchiro
Do you have any kind of firewall software installed? Is it configured correctly?

no firewall. And not running any email software, like Eudora.

 

[Tenchiro]

What version of Windows?

 

[LordOpie]

Originally posted by Tenchiro
What version of Windows?

XP


STEPS TAKEN so far:
-- removed unnecessary programs
-- downloaded the latest Windows XP upgrades and patches
-- deleted cookies and all temp files from IE.
-- searched PC for a few known related virus

 

[Tenchiro]

It definately sounds like sobig, especially if you aren't running anything.

Did you do a search for;

C:\WINDOWS\System32\cgtask.exe

and/or

C:\WINDOWS\System32\mmtask.exe

 

[LordOpie]

Originally posted by Tenchiro
It definately sounds like sobig, especially if you aren't running anything.

Did you do a search for;

C:\WINDOWS\System32\cgtask.exe

and/or

C:\WINDOWS\System32\mmtask.exe

I didn't and they are both there.

Should I remove them?

 

[Tenchiro]

Originally posted by LordOpie
I didn't and they are both there.

Should I remove them?

Run this, it is Symantec's SoBig removal tool.

http://securityresponse.symantec.com/avcenter/FixSbigF.exe

 

[Tenchiro]

Both tohse files are part of backdoor.lala which SoBig will download and install.

EDIT -- Here are Symantecs removal instructions;

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lala.b.html

 

[LordOpie]

Thanks man! I'll try those links.

 

[Tenchiro]

The first link was for the b variant, here is for the other. I don't know how they differ.

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.lala.html

 

[Tenchiro]

Did that ever fix it?