My Pending files [RESOLVED]

Help for v3
1

  1. How can I take a copy of “My Pending files” list please.

  2. My list shows a file called lanmanwrk.exe in the system32 folder but no such file is present in that folder even when all files and folders are shown. Is this a false positive?

Thank you anticipation

Joe.

2

UNDESIRABLE PROGRAM!!! This is a dangerous program and hides itself on your computer.

This is an undesirable program.

This file has been identified as a program that is undesirable to have running on your computer. This consists of programs that are misleading, harmful, or undesirable.

If the description states that it is a piece of malware, you should immediately run an antivirus and antispyware program. If that does not help, feel free to ask us for assistance in the forums.
Click here to Run a scan for related errors
Name: lanmanwrk.exe
Filename: lanmanwrk.exe
Fix lanmanwrk.exe errors: Try a Registry Scan
Command: C:\WINDOWS\System32\lanmanwrk.exe
Description: Added by the Trojan.LanMan/Rootkit.Process Trojan. This infection uses the lanmandrv.sys rootkit to hide itself.
File Location: %System%
Startup Type: This startup entry is started automatically from a Run, RunOnce, RunServices, or RunServicesOnce entry in the registry.
HijackThis Category: O4 Entry
Note: %System% is a variable that refers to the Windows System folder. By default this is C:\Windows\System for Windows 95/98/ME, C:\Winnt\System32 for Windows NT/2000, or C:\Windows\System32 for Windows XP and Vista.
Removal Instructions: How to remove a Trojan, Virus, Worm, or other Malware

This entry has been requested 2478 times.

  • Not sure how you export your pending files list.

Eric

3

Greetings!

Seems like you’re infected with a rootkit. Here’s some utilities to remove/find rootkits:
IceSword
AVG Anti-Rootkit
RootkitRevealer
It might be worth to post a log from HijackThis.

For exporting My Pending Files, I’m not sure, but I think the right thing to do is to copy PendingList.exe in [b]\Documents and Settings\All Users\Application Data\Comodo\common\Pending[/b].

Cheers,
Ragwing

4

http://www.freedrweb.com/ may also do the trick :slight_smile:

5

Thanks guys for the quick response. Sorry if I didn’t make myself clear before, my problem isn’t that I have a rootkit because no such file exists on my hard drive but it is present in the Comodo pending list. I’ve already run some rootkit revealers and there is nothing there. So my question really is why is it in the pending list and what exactly is the pending list? How can I copy the entire list to a text file. I’ve tried to copy it from the folder by opening it in Notepad but it just appears in gobbledygook. I can open the list from within Comodo but then can’t save it or copy it at all.

Joe.

6

Click Purge and it should be removed from the list if it doesn’t exist any more.

The pending list is a list of new and modified files. If a file is there, it’s because it was either added to the system, or modified.

Try to copy the text file itself instead of opening it and copying the content of the file.

Cheers,
Ragwing

7

Thank you both or your time and help, I’ve purged the file.

Joe.

8

Great news that we have resolved your issue. I’ll close this topic now. PM an online moderator with a link to this topic if you should need it opened again.

Cheers,
Eric