[ozrom1e]

Part of th registry that keeps track of the time and date was somehow fixed doing the scans for some reason the scanning programs inadvertently fixed it. I would make a suggestion about NAV when the subscription runs out get rid of it and get AVG Free, it is free and every bit as good and there are no subscriptions to pay for. Oh your computer will run faster also without NAV.

[L3rxst]

Hi guys

This is an interesting thread.
I have had the same issue for a few weeks now. I have tries Adaware, Spybot and I use Kaspersky Internet Security Suite. Problem is I let my signatures lapse for a couple of days (which is unusual for me) my nephew played a few online games and I ended up with a load of Trojan Malware on my PC. I'm running XP Pro SP1 by the way.

Now even Kaspersky Help desk cant sort my clock issue out, although we thenik that the Trojans have been cleared up.

My view on what was happening was that the Malware was inhibiting my antivirus on startup, by resetting the clock in Windows, so that no protection was running, and it could do its dirty work (info colletion I believe). Now I have to reset the clock every time I log in to Windows. I have changed the battery on the motherboard, and the BIOS is most definately correct. This is a Malware problem, but even Kaspersky cant suss it out (yet).

The resetting clock affercs all Windows users on my PC.

l3RXST

[Byteman]

Hi, Though I don't have any new information, anyone with this problem with Windows date being two years wrong is advised to post a Hijackthis log in one of the forums, and best would be in Security... the helpers are a bit busy so do not expect a quick reply. And, if they don't see any obvious malware in the HJT log, they tend not to post anything in the thread. A good idea is to also run an online scanner like Panda or Kaspersky and include the results log from one of those in your original post, and, always create your own New Thread please!

I'm not trying to end this thread, as we would definitely like to find out what is causing this, but as you see now there are several folks posting here, and if we examined HJT logs things tend to get mixed up...so, just start a thread for your HJT or other logs, and ensure that the systems are cleaned up, and post any new information about this issue here as well.

[Lao Tzu]

I've run into this issue serveral times with our office network...
It's an out of sync PC or a domain controller providing a bad date...

From the command prompt type: net time [hit enter]
If it displays the incorrect time there, this is a sync issue with the domain controller you're connected to. You'll need to stop and restart the "Windows Time" service.
From the command promt again type: net stop "windows time" [hit enter]
Then restart the services by typing: net start "windows time" [hit enter]
To verify the time, again type: net time
If still incorrect you can reset by using the "set" switch.
Type: net time /set [hit enter]
From there you can opt to use the server time or re-enter manually.

This will re-sync and resolve the issue.

[c2z4s9]

Actually, I did end up resolving this. I believe it was a virus of some sort. I don't have the notes in front of me at the moment, but I will try to remember to take a look. The system is not on a domain and so doesn't connect to a domain controller. However, this stop / start of the windows time service may still be worth a try for some (perhaps even if you're not on a domain?).

[Byteman]

Hi, Good going- we would still really like to see any scan results, that may show which infection was the problem...are any of the "notes" around that you can post?

[mncpa1]

I have just run acrossed this problem on a home PC and this does not appear to be a battery issue as the cmos time is correct. I am using Windows XP with service pack 2 and the latest updates. The machine is running AVG antispyware and antivirus and is up to date.

The machine will have the wrong time upon bootup, but it doesn't happen all the time only most of the time as of the last two weeks. Even if I set it to get sync the time from an NTP source is will still boot with the wrong time usually 2 years prior. Also have notice that clock will suddenly advance and hour.

I'm interested in the last person who said this was probably malware what his solution was since it was never posted. Can somebody post the solution as obviously this is not a domain time sync issue. There are currently no other symptoms on the PC other than the time and date being wrong. Today it actually went to 2004 not 2005 upon bootup. Any help would be much appreciated.

[mez_90]

Hi. to those of you that have been trying to help out. thanks very much as for posting a log file sorry but as i said i formatted the hard drives right after my last post.

i have have come to the conclusion that my problem was a virus but none of my scans anti virus/spyware mal ware anything came up with a problem

ive been using another pc for the past month and a bit due to some unrelated problems with my hard drive .

as far as the problem with the time and date?... my advise to anyone else who knows how... just backup format and reinstall or backup and restore point. (i havent ever done that so dont know how good it is) i always format ..

since this happened ive found a few good things to look at.
one of them is norton ghost. i now have 2 dvds with a image of my computer with
ONLY xp sp2 and drivers
above with software.
if i ever have a problem just have to back up and format restore using the ghost image and put all the data back. fount it is a time saver,

also back up list. last time i backed up i forgot to back up a few settings files and few folders. now i just use my check list.

[rto]

I reformated my hard drive completely and reinstalled windows xp. after that my problem was ok. until.......... i reconnected another hard drive where I backed up my files (which i had reformated too). it looks like:

1) reformat everything and lose all your files

or

2) find a virus scanner that can find this {edited out your choice of words here.... we do not allow profanity or obvious references to it here at TSG}..........crazy virus
I need option 2 right now...

[~Candy~]

Originally Posted by rto

I reformated my hard drive completely and reinstalled windows xp. after that my problem was ok. until.......... i reconnected another hard drive where I backed up my files (which i had reformated too). it looks like:

1) reformat everything and lose all your files

or

2) find a virus scanner that can find this {edited out your choice of words here.... we do not allow profanity or obvious references to it here at TSG}..........crazy virus
I need option 2 right now...

rto, I wanted to point out to you that your post had to be edited by a moderator for language content, I trust that we won't have to do that again

[rto]

I solved my problem by downloading AVG Antivirus for free http://free.grisoft.com/doc/5390/us/frt/0 . It was definately a virus. Try scanning your computer and let me know if it works. It likes to copy the auto.exe to the root directory of very drive you have (usb, c: d: a: etc...) and modify several windows .DLL files and other system files with every changing file names (evil). This seems like a Trojan virus to attempt to get all my private info (passwords i assume).

[Byteman]

Hi rto,

If that info is correct, not saying it isn't...then you need to definitely scan ALL yours and anyone else's removable drives that run on your computer. The infection will reinstall itself because that is what it is designed to do, the moment you plug in one of the infected ones.

You must have the drive(s) connected of course, when you scan.

Might be a one by one affair, if you use more than one, or have friends that use their drives on your machine.

We have some very skilled people that work on these infections here- just post and let me know if you still have any problems after cleaning, OK?

They use some special tools to locate the infections on removable drives.

[gintyb]

Thanks for the info in the thread on the date resetting to 2005. I experienced this after lending a laptop to someone whose own laptop was in for repair because of this problem!

The free version of AVG Antivirus identified a trojan horse backdoor agent, which it deleted. Norton did not identify this threat. Everything is now working OK.

[Byteman]

Hi gintyb,

Thanks for posting that information, I'm sure it will help someone!

[gintyb]

I should add that I later downloaded and ran free the AVG Anti-sypware. More of the trojan was still lurking in some of the Windows files. I recommend others do the same.