Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 950
  • Last Modified:

The file "Bancorms_Unknown.txt" is inserted into many of my folders. How do I stop this?

Many times I get the file Bancorms_unknown.txt inserted into my various folder that I am working within.  The file contains the following log when opened using notepad:

--------------- 2008 10 07 - 18.15 ----------------

15 19 447 - BancorMS.dll ver. 2.0.7.4

15 19 447 - C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE

15 19 463 - - err - No device

15 19 463 - - err - No device

15 19 463 - - err - No device

15 19 463 - - err - No device

15 19 463 - - err - No device

15 19 463 - - err - No device

15 19 463 - - err - No device

15 19 463 - - err - No device

15 19 463 - - err - No device

15 19 463 - C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE

15 19 463 - ========================================

This file seems to show up in many of my folders, most of which contain Microsoft Office 2007 documents and also Adobe Acrobat documents.

I have seen a few postings on this issue on the web, but no one seems to have an answer for what it is or how to stop it!  Thanks for your help.

BANCORMS-unknown.log
0
Techservice
Asked:
Techservice
  • 4
  • 3
1 Solution
 
ScottGranadoCommented:
hmm..

I'm not sure what the file is, but you can use Process Monitor to monitor your files and folders.  Therefore you can keep this running, come back, stop it and then search for this file in the logs to see what process is creating these files.  This will help you narrow it down:
http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx
0
 
ScottGranadoCommented:
Go to live.sysinternals.com  download procexp.exe and launch it and at the top click on find and type in BancorMS.dll  see if you can find what does this dll belongs to
0
 
TechserviceAuthor Commented:
OK, I did that (procexp.exe).  I forced the event to happen which is not hard -- simply save a document attached to an Outlook email and bingo, the "bancorms_unknown" text file appears in the folder I saved the email attachment to.  I then did a find on bancorms.dll (which is the referenced dll file within the "bancorms_unknown" error log)  but procexp.exe found nothing.  I then did a find on "banorms" and it found two "handle's" -- the two processes being Outlook.exe and explorer.exe.

I am also attaching a word file with a screen shot of the how the event looked in process monitor.

Thanks for you help.
Screen-clipping-bancorms-issue.doc
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
ScottGranadoCommented:
well one thing i'm worried about is whats above the BANCORMS in your screenshot.  The file "CSSCANA6.DLL" seems to be associated with a virus/spyware.  this may be the root of your problems as its called right before this file is made.
http://www.google.com/search?q=CSSCANA6.DLL&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a

It may also be a good idea just to do a repair installation on office by going to add/remove programs and choosing change/remote on office our outlook
0
 
TechserviceAuthor Commented:
OK, I did a search for the csscanas.dll file and the only place I found it was in a temp folder; it has been deleted.  A full virus scan has revealed no issues.  Finally, I did the suggested Office repair.  So far I cannot replicate the issue, so I am going to give it a several day test period to see if this solves the problem.  Will let you know later this week, keeping my fingers crossed!
0
 
TechserviceAuthor Commented:
The repair installation of Office 2007 seems to have correted his issue.
0
 
ScottGranadoCommented:
great!  good to hear the news!  i'm glad this is resolved
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now