TestbugID1

[Dymphna]

My computer greeted me this morning with:

This problem was caused by a compatibility issue between your computer and TestBugID1. At this time, your computer does not support TestBugID1. To prevent this problem from occurring again, remove TestBugID1 or upgrade your computer hardware to meet the minimum requirements to run TestBugID1.

For more information about the minimum requirements for TestBugID1, go to
the SpiralOrbit website online

Well not being able to find this in the program list, so I could uninstall it, I googled it.

I came up with 469 hits, all saying, " I got this message, how do I get rid of this? And all the responses saying, "I don't know, but when you find out let me know, because I have the same problem."

So, I figured I'd see if I could draw on the wealth of knowledge here. I figure someone here knows about this thing.

[GWguy]

Wow. Lots and lots of traffic on this, but no resolutions, and nothing on the virus vendor's home pages.

[clevalley (Premo)]

Nothing is being reported by CERT (DoD or Navy) as of yet. Reading (and trying to decipher) through some of the VISTA forums it might be a Microsoft problem... but this is PURELY speculation.

Is this a VISTA machine? Also, do a CNTRL | ALT | DELETE and bring up the Task Manager... are there any process running that are related to the names of "TestBug" or "SpiralOrbit"? If so - kill them.

It would be worth a shot to do an Update with Microsoft's Automatic Update as well - get it completely patched (all levels) and see what that does. Maybe MS came out with a fix and it quited the community. Last chatter on this was on June of this year...

[Dymphna]

Originally Posted by clevalley

Nothing is being reported by CERT (DoD or Navy) as of yet. Reading (and trying to decipher) through some of the VISTA forums it might be a Microsoft problem... but this is PURELY speculation.

Is this a VISTA machine? Also, do a CNTRL | ALT | DELETE and bring up the Task Manager... are there any process running that are related to the names of "TestBug" or "SpiralOrbit"? If so - kill them.

It would be worth a shot to do an Update with Microsoft's Automatic Update as well - get it completely patched (all levels) and see what that does. Maybe MS came out with a fix and it quited the community. Last chatter on this was on June of this year...

The different forums I came up with when I first googled it speculated that it might be a Vista thing and one of the people on that forum made the same suggestion you did of looking at the task manager. The responder in that forum couldn't find anything in their task manager that seemed to be the issue.

There is nothing showing in mine either, but that may also have to do with the fact that when I first started running the virus program this morning, I got the dreaded "blue screen" and had to restart. When it restarted the testbug message didn't come back up.

As I said, this message greeted me this morning. It was there when I got up. As it happens, the computer looks for automatic updates about 3:00 every morning. Sometimes the computer restarts then, and sometimes it doesn't. I happened to be awake and I heard it restart this morning, so there must have been an update. That is probably what triggered the message in the first place.

It also happens that I don't have any sound on my computer now, so I wonder if that could be related to the update too.

[dn0121]

Thats a good one, I've have never seen that error message.

[2ndAmendment (Premo)]

Do not go to the web site!!!!!!!!!!!

This is a virus. I found this.

No, you are far from alone - this is a nasty critter, and MS would do well to
stomp this out quickly. It created file handles by the thousands, and left to
run, grinds the HD to filling. I caught it once with 800k + handles, and
worst at 1.7m (yes, million) handles. Nasty, nasty critter.

It apparently targets Vista and is spread through Yahoo Messenger.

[GWguy]

Originally Posted by GWguy

Wow. Lots and lots of traffic on this, but no resolutions, and nothing on the virus vendor's home pages.

To clarify, I meant Symantec, AVG, Mcaffe, etc.... not the home page of the suspected virus...

[clevalley (Premo)]

Our Active Directory / VISTA guru has heard of this but we have not witnessed it.

He did say he read a thread somewhere on NotebookForum.com where a user turned off his wireless adapter and the error went away... but that makes no sense to us.

He also heard of the Yahoo Messenger spread as well (2A reference) - he said to kill Yahoo Messenger and see what happens if you get the error continuous.

We have our eyes peeled though.

[Dymphna]

Originally Posted by clevalley

Our Active Directory / VISTA guru has heard of this but we have not witnessed it.

He did say he read a thread somewhere on NotebookForum.com where a user turned off his wireless adapter and the error went away... but that makes no sense to us.

He also heard of the Yahoo Messenger spread as well (2A reference) - he said to kill Yahoo Messenger and see what happens if you get the error continuous.

We have our eyes peeled though.

This is on a desktop, not a lap top. There is a wireless router so S can use his laptop at home, so I don't know if that is relevant.

The error message went away when I restarted the computer and has not returned, even though YM is logged in and open. I only use YM for two people, Huntr, who doesn't have Vista on either of the other computers he uses and a friend, who I YM about once every 6 months. I have gotten 3-4 SPAMs through YM in the last week, which I immediately marked as SPAM, as a matter of fact, there was one on my computer this morning, along with the testbug.

[clevalley (Premo)]

Originally Posted by Dymphna

This is on a desktop, not a lap top. There is a wireless router so S can use his laptop at home, so I don't know if that is relevant.

The error message went away when I restarted the computer and has not returned, even though YM is logged in and open. I only use YM for two people, Huntr, who doesn't have Vista on either of the other computers he uses and a friend, who I YM about once every 6 months. I have gotten 3-4 SPAMs through YM in the last week, which I immediately marked as SPAM, as a matter of fact, there was one on my computer this morning, along with the testbug.

2A's find is holding water...

It has to be some type of Malware.

Short of searching through the registry for instances of "TestBugID1" and/or "SpiralOrbit" and deleting them you are going to have to wait for a fix...

We do have our radar tuned for this though.