[DaveBurnett]

I would be tempted to say that a BIOS update might help???

[witty4ca]

After frequently cleaning up some INFOSTEALER.GAMPASS virus in \windows\system32.

The virus always take the format such as:

k11194767362.exe

k11194748721.exe

k11194748786.exe

...................

.................

Bunch of them, kept popping up each in size of 7kb, could easily be deleted in SYSTEM32.

Then, I found my system clock was 2 years earlier than the current date. Not sure if they are interrelated.

I tried the option to synchronize the time at the control panel, but failed.

[Stew88]

I'm having the exact same problem as you witty4ca. I'm on XP SP2 and had to clean out/delete the same files you mentioned in the system 32 folder using AVG. After this I noticed everytime I rebooted/shutdown that my clock would go back 2 years. Still not sorted it.

[c2z4s9]

I would also like to report that I am having the same problem with a Windows 2000 machine. However, I seriously doubt that it is a CMOS / battery issue. If I boot up in safe mode the year is correct (2007). You guys should give this a try and see if your time comes up correctly. This feels more like a virus problem to me, maybe it's something new.

What I mean is change the time in the CMOS and boot up in Safe mode. The time should remain 2007. Reboot into normal windows and the time is now reset to 2005.

[dtownjbrown]

Did anyone find out something definitive on this issue? My computer has been doing the same thing for about 3 weeks now. I'm a programming novice so I've been doing internet searches on my problem. About a week ago I found a website that gave step-by-step instructions on how to check BIOS settings....which I was surprised to find had the incorrect date as well. So, I changed it - but the windows date is still showing 2 year difference. I've checked to makes sure the BIOS thing still has the correct year and it does, but everytime I turn the computer back on windows is still wrong (even after I've changed it in control panel).......any suggestions? Thanks, jb

[c2z4s9]

I think some software is resetting the time once windows has come up. I can't figure out what it is though.

[Byteman]

Hi, Guess it's time to check for a few things...please do the following, just mez_90 please, if others post these logs it will be confusing for all of us!

The type of program that can prevent changes from being made, are Registry protectors, there are quite a few...RegProt is one. I suspect that you guys with this specific problem may be running some type of software that is not allowing the changes to appear in Windows....

go to Click here to download HJTsetup.exe

• Scroll down the page a bit...to see the File Repository area
• Save HJTsetup.exe to your desktop.
• Double click on the HJTsetup.exe icon on your desktop.
• By default it will install to C:\Program Files\Hijack This.
• Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
• Put a check by Create a desktop icon then click Next again.
• Continue to follow the rest of the prompts from there.
• At the final dialogue box click Finish and it will launch Hijack This.
• Click on the Do a system scan and save a log file button. It will scan and then save the log and then the log will open in Notepad.
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Paste the log in your next reply.
• DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

Please also do this:
Open Hijack This and click on the "Open the Misc Tools section" button. Click on the "Open Uninstall Manager" button. Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad. Copy and paste that list here.

[c2z4s9]

Well, I have waited for mez_90 to post his logfile but he has not so I will post the results that I got to see if we can't figure out this problem. Don't yell at me too loudly. I don't see anything clearly obvious here.

[f-16]

I too have this same problem. I CAN confirm that the BIOS setup date IS correct (2007). It is only the windows date that re-sets to 2005.

I have looked at my latest HJT log and don't see anything out of the ordinary. Should I post the log here so you can take a look?

There seems to be something that is messing with the windows date on start-up. Does anyone know if there is a new Trojan that is doing this?

Scott

[Byteman]

Hi, I posted my advice, and TSG's position on mingling HJT logs in threads...and you still decided to ignore what I asked you not to do.

There's nothing in the log posted by c2z4s9 that would help me at least, figure out anything about your date being 2 years off. It's probably being caused by a recent Windows Update rather than a virus or anything.

To see if anything like malware might be the cause, I would ask that you both or all 3, do this online scan no matter what you have used, and how much...I need visual proof, a log from this:

Kaspersky online full scan

• Please go HERE and click Kaspersky Online Scanner
• Read and Accept the Agreement
• You will be promted to install an ActiveX component from Kaspersky, Click Yes.
• If you see a Windows dialog asking if you want to install this software, click the Install button.
• The program will launch and then begin downloading the latest definition files,
• When the "Update progress" line changes to "Ready" and the "NEXT ->" button becomes available, please click on it.
• Click on the Scan Settings button, and in the next window select the Extended database, and click Ok.
• Under "Please select a target to scan:", click My Computer to start the scan.
• When the scan is finished, click the "Save as Text" button, and save the file as kavscan.txt to your Desktop, close the Kaspersky On-line Scanner window.
• Copy and Paste the contents of the on line scanner results into a Reply here .

[c2z4s9]

So be it. I ripped out my log.
Should I start a new post where I can get help and post my own information?

[ozrom1e]

Yes.

[ozrom1e]

It appears to me that since BIOS has the correct time and date and this only changes when Windows loads that this must be a problem with Windows 2000, I think it is in the registry and would suggest doing a repair-installation of Windows 2000. First I would suggest backing up all of the important data on the hard drive(s) to another media like CD-R's, DVD or thumb drive just to keep the data safe and sound.

For doing the repair-install take a look at this site:

http://www.windows2000.windowsreinstall.com/

Loads of information on this site please to take the time to read you'll enjoy it.

[c2z4s9]

ok, will do. Thank you much.

[f-16]

I think I solved the problem on my machine.. by accident..

Last night I went into safe mode. I checked the time and it was correct. No problems in safe mode. I then did a FULL scan of my system with every scanner I had (NAV, HJT,SPY WARE DOCTOR and even SPY BOT). The scans came out clean. (I was hoping something would have been found). Then I shut down the system for the night.

When turned on the system this morning (normal boot) the time is correct! (NOT 2005)
I can't really explain what happened on my system. Perhaps booting it is safe mode did something? (Perhaps a certain file was not loaded that was causing the problem?)

What I suggest is that you try and boot in safe mode first and do a complete system scan to see if anything is found. Maybe this will help. No guarantees.

Scott