Infected PC: please help

Forums › Desktop computing › Infected PC: please help

1 | 2 | 3

2802 posts

Uber Geek

#652026 6-Jul-2012 18:00

Click the Start button.
Type %APPDATA% into the box and press enter.

See if there are any .exe files in that folder with wierd names.

Then, click the start button again, type msconfig in and press enter. Go to the Startup tab, if there is something in the list with a reference to the same .exe file, disable it, then reboot.

If so, that's probably the culprit. That seems to be where most of those "I'm an antivirus program!" apps seem to end up.

Without seeing it, i'm not gonna guarantee that doing this won't stuff something else, best to take it to someone who knows what they're doing.

Alternatively, you can try installing "Spybot: Search & Destroy", that'll find most malware and try and get rid of it.

Also: CNET ftl, FileHippo ftw.

@KnightNZ

alvin

207 posts

Master Geek

#652069 6-Jul-2012 19:56

thanks for your replies and suggestions.

I updated S&D and did a scan. It found 80 entries of fraud.facebook.com and deleted it. but my PC is still popping up Search Results windows and a DOS window. please see screen grab..

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#652071 6-Jul-2012 20:01

So you have Norton installed. You didn't tell us. Have you installed ANY other Antivirus while Norton was running?

You didn't tell us there was an error message, we can see that in the screenshot. Was that message appearing all the time or just now?

Check here for a KB on how to fix this problem. Or perhaps you'd be better off unintalling Norton, rebooting, and then running the antivirus I linked to before.

KevinL

656 posts

Ultimate Geek

Trusted

#652072 6-Jul-2012 20:02

alvin: thanks for your replies and suggestions.

I updated S&D and did a scan. It found 80 entries of fraud.facebook.com and deleted it. but my PC is still popping up Search Results windows and a DOS window. please see screen grab..

Can't quite make out the text - would be fairly useful in trying to work out what the problem is. Also a list of running processes.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#652079 6-Jul-2012 20:04

The text says "c:\PROGRA~1\Symantec\S32EVNT1.DLL. An installable Virtual Device Driver failed DLL initialization. Choose 'Close' to terminate the application".

KevinL

656 posts

Ultimate Geek

Trusted

#652081 6-Jul-2012 20:06

freitasm: The text says "c:\PROGRA~1\Symantec\S32EVNT1.DLL. An installable Virtual Device Driver failed DLL initialization. Choose 'Close' to terminate the application".

You clearly have better eyesight than me, or is there a way of viewing the full resolution image that I can't see? Can you make out what the command window is trying to launch?

alvin

207 posts

Master Geek

#652082 6-Jul-2012 20:08

freitasm: So you have Norton installed. You didn't tell us. Have you installed ANY other Antivirus while Norton was running?

You didn't tell us there was an error message, we can see that in the screenshot. Was that message appearing all the time or just now?

Check here for a KB on how to fix this problem. Or perhaps you'd be better off unintalling Norton, rebooting, and then running the antivirus I linked to before.

the symantec message just appeared now, after S&D cleaned the fraud.facebook.com trojan. I've been using EsetNod32 AV.

That's the Search results windows that kept on popping up but not as much as when i first posted the problem.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#652083 6-Jul-2012 20:08

The image used is the imagesubs/blog... version. The imagesubs/... version is the original resolution ;)

alvin

207 posts

Master Geek

#652086 6-Jul-2012 20:11

KevinL:
freitasm: The text says "c:\PROGRA~1\Symantec\S32EVNT1.DLL. An installable Virtual Device Driver failed DLL initialization. Choose 'Close' to terminate the application".

You clearly have better eyesight than me, or is there a way of viewing the full resolution image that I can't see? Can you make out what the command window is trying to launch?

here's the link of the uploaded image:

https://cdn.geekzone.co.nz/imagessubs/5fefee4f6de13a47265fab6777e24d81.jpg

stevenz

2802 posts

Uber Geek

#652087 6-Jul-2012 20:11

Norton is a case of the cure being little better than the disease. Microsoft's free tools as per Mauricio's suggestion ftw.

@KnightNZ

alvin

207 posts

Master Geek

#652088 6-Jul-2012 20:15

freitasm: Microsoft Safety Scanner.

Microsoft Malicious Software Removal Tool.

Never, ever, download anything from CNET.

stevenz: Norton is a case of the cure being little better than the disease. Microsoft's free tools as per Mauricio's suggestion ftw.

I'll try those two..

thanks again guys!

techmeister

310 posts

Ultimate Geek

#652136 6-Jul-2012 23:06

Looks to me like you got Norton partially installed or something, that bugger can be hard to get rid of.
I would download a program called ccleaner (it's free) and do a reg clean.

In fact have a look at this link, might solve your problem.
http://www.symantec.com/business/support/index?page=content&id=TECH100470&locale=en_US

Might have had some sort of Symantec imaging software on your computer.

mattwnz

20141 posts

Uber Geek

#652139 6-Jul-2012 23:12

techmeister: Looks to me like you got Norton partially installed or something, that bugger can be hard to get rid of.
I would download a program called ccleaner (it's free) and do a reg clean.

In fact have a look at this link, might solve your problem.
http://www.symantec.com/business/support/index?page=content&id=TECH100470&locale=en_US

Might have had some sort of Symantec imaging software on your computer.

Sounds like it is as difficult to remove as divx software, which I have never been able of get rid of. The only antivirus I would pay for is nod32, otherwise I would just use the free ones.

b0untypure1

1426 posts

Uber Geek

#652147 6-Jul-2012 23:42

hey man, figured since you have norton, this help article should see you right. (registry editing ftw)

http://www.symantec.com/business/support/index?page=content&id=TECH100470

and for those who dislike clicking random links

contents:

Problem
When you start the computer, you see an error message similar to "<Path> \ S32evnt1.dll. An installable Virtual Device Driver failed DLL initialization."

Solution
To fix the problem, edit the registry and restart the computer. Then update the Symevent files and restart the computer again.

Follow the directions for your version of Windows:

To edit the Windows XP registry

On the Windows taskbar, click Start > Run.
In the Run dialog box, type regedit
Click OK.
Go to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\VirtualDeviceDrivers
In the right pane, delete the VDD value.
In the left pane, right-click the VirtualDeviceDrivers key, and then click New > Multi-String Value.
Type VDD for the name of the new value.
Exit the Registry Editor.
Restart the computer.

Azzura

603 posts

Ultimate Geek

ID Verified

#652179 7-Jul-2012 09:09

I am curious.

What were you doing on the computer (or just got done doing) before this issue started to happen?

If it was my system infected. I would be using a virus boot scan cd/dvd.

Hopefully one of these will work for you (if you feel like trying one) - http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

1 | 2 | 3