Infected PC: please help

Forums › Desktop computing › Infected PC: please help

1 | 2 | 3

2802 posts

Uber Geek
+1 received by user: 125

#652026 6-Jul-2012 18:00

Click the Start button.
Type %APPDATA% into the box and press enter.

See if there are any .exe files in that folder with wierd names.

Then, click the start button again, type msconfig in and press enter. Go to the Startup tab, if there is something in the list with a reference to the same .exe file, disable it, then reboot.

If so, that's probably the culprit. That seems to be where most of those "I'm an antivirus program!" apps seem to end up.

Without seeing it, i'm not gonna guarantee that doing this won't stuff something else, best to take it to someone who knows what they're doing.

Alternatively, you can try installing "Spybot: Search & Destroy", that'll find most malware and try and get rid of it.

Also: CNET ftl, FileHippo ftw.

@KnightNZ

alvin

207 posts

Master Geek
+1 received by user: 2

#652069 6-Jul-2012 19:56

thanks for your replies and suggestions.

I updated S&D and did a scan. It found 80 entries of fraud.facebook.com and deleted it. but my PC is still popping up Search Results windows and a DOS window. please see screen grab..

freitasm

BDFL - Memuneh
80655 posts

Uber Geek
+1 received by user: 41053

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#652071 6-Jul-2012 20:01

So you have Norton installed. You didn't tell us. Have you installed ANY other Antivirus while Norton was running?

You didn't tell us there was an error message, we can see that in the screenshot. Was that message appearing all the time or just now?

Check here for a KB on how to fix this problem. Or perhaps you'd be better off unintalling Norton, rebooting, and then running the antivirus I linked to before.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

KevinL

656 posts

Ultimate Geek
+1 received by user: 20

Trusted

#652072 6-Jul-2012 20:02

alvin: thanks for your replies and suggestions.

I updated S&D and did a scan. It found 80 entries of fraud.facebook.com and deleted it. but my PC is still popping up Search Results windows and a DOS window. please see screen grab..

Can't quite make out the text - would be fairly useful in trying to work out what the problem is. Also a list of running processes.

freitasm

BDFL - Memuneh
80655 posts

Uber Geek
+1 received by user: 41053

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#652079 6-Jul-2012 20:04

The text says "c:\PROGRA~1\Symantec\S32EVNT1.DLL. An installable Virtual Device Driver failed DLL initialization. Choose 'Close' to terminate the application".

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

KevinL

656 posts

Ultimate Geek
+1 received by user: 20

Trusted

#652081 6-Jul-2012 20:06

freitasm: The text says "c:\PROGRA~1\Symantec\S32EVNT1.DLL. An installable Virtual Device Driver failed DLL initialization. Choose 'Close' to terminate the application".

You clearly have better eyesight than me, or is there a way of viewing the full resolution image that I can't see? Can you make out what the command window is trying to launch?

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

alvin

207 posts

Master Geek
+1 received by user: 2

#652082 6-Jul-2012 20:08

freitasm: So you have Norton installed. You didn't tell us. Have you installed ANY other Antivirus while Norton was running?

You didn't tell us there was an error message, we can see that in the screenshot. Was that message appearing all the time or just now?

Check here for a KB on how to fix this problem. Or perhaps you'd be better off unintalling Norton, rebooting, and then running the antivirus I linked to before.

the symantec message just appeared now, after S&D cleaned the fraud.facebook.com trojan. I've been using EsetNod32 AV.

That's the Search results windows that kept on popping up but not as much as when i first posted the problem.

freitasm

BDFL - Memuneh
80655 posts

Uber Geek
+1 received by user: 41053

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#652083 6-Jul-2012 20:08

The image used is the imagesubs/blog... version. The imagesubs/... version is the original resolution ;)

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

alvin

207 posts

Master Geek
+1 received by user: 2

#652086 6-Jul-2012 20:11

KevinL:
freitasm: The text says "c:\PROGRA~1\Symantec\S32EVNT1.DLL. An installable Virtual Device Driver failed DLL initialization. Choose 'Close' to terminate the application".

You clearly have better eyesight than me, or is there a way of viewing the full resolution image that I can't see? Can you make out what the command window is trying to launch?

here's the link of the uploaded image:

https://cdn.geekzone.co.nz/imagessubs/5fefee4f6de13a47265fab6777e24d81.jpg

stevenz

2802 posts

Uber Geek
+1 received by user: 125

#652087 6-Jul-2012 20:11

Norton is a case of the cure being little better than the disease. Microsoft's free tools as per Mauricio's suggestion ftw.

@KnightNZ

alvin

207 posts

Master Geek
+1 received by user: 2

#652088 6-Jul-2012 20:15

freitasm: Microsoft Safety Scanner.

Microsoft Malicious Software Removal Tool.

Never, ever, download anything from CNET.

stevenz: Norton is a case of the cure being little better than the disease. Microsoft's free tools as per Mauricio's suggestion ftw.

I'll try those two..

thanks again guys!

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

techmeister

310 posts

Ultimate Geek
+1 received by user: 22

#652136 6-Jul-2012 23:06

Looks to me like you got Norton partially installed or something, that bugger can be hard to get rid of.
I would download a program called ccleaner (it's free) and do a reg clean.

In fact have a look at this link, might solve your problem.
http://www.symantec.com/business/support/index?page=content&id=TECH100470&locale=en_US

Might have had some sort of Symantec imaging software on your computer.

mattwnz

20515 posts

Uber Geek
+1 received by user: 4796

#652139 6-Jul-2012 23:12

techmeister: Looks to me like you got Norton partially installed or something, that bugger can be hard to get rid of.
I would download a program called ccleaner (it's free) and do a reg clean.

In fact have a look at this link, might solve your problem.
http://www.symantec.com/business/support/index?page=content&id=TECH100470&locale=en_US

Might have had some sort of Symantec imaging software on your computer.

Sounds like it is as difficult to remove as divx software, which I have never been able of get rid of. The only antivirus I would pay for is nod32, otherwise I would just use the free ones.

b0untypure1

1427 posts

Uber Geek
+1 received by user: 18

#652147 6-Jul-2012 23:42

hey man, figured since you have norton, this help article should see you right. (registry editing ftw)

http://www.symantec.com/business/support/index?page=content&id=TECH100470

and for those who dislike clicking random links

contents:

Problem
When you start the computer, you see an error message similar to "<Path> \ S32evnt1.dll. An installable Virtual Device Driver failed DLL initialization."

Solution
To fix the problem, edit the registry and restart the computer. Then update the Symevent files and restart the computer again.

Follow the directions for your version of Windows:

To edit the Windows XP registry

On the Windows taskbar, click Start > Run.
In the Run dialog box, type regedit
Click OK.
Go to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\VirtualDeviceDrivers
In the right pane, delete the VDD value.
In the left pane, right-click the VirtualDeviceDrivers key, and then click New > Multi-String Value.
Type VDD for the name of the new value.
Exit the Registry Editor.
Restart the computer.

Azzura

609 posts

Ultimate Geek
+1 received by user: 224

ID Verified

#652179 7-Jul-2012 09:09

I am curious.

What were you doing on the computer (or just got done doing) before this issue started to happen?

If it was my system infected. I would be using a virus boot scan cd/dvd.

Hopefully one of these will work for you (if you feel like trying one) - http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

1 | 2 | 3