Computing.Net > Forums > Security and Virus > need virus help!! for a dell

need virus help!! for a dell

Reply to Message Icon

Original Message
Name: fowlplay4
Date: July 4, 2004 at 10:11:43 Pacific
Subject: need virus help!! for a dell
OS: xp home
CPU/Ram: pentium 4/256mb
Comment:

Some how I got a really bad virus and I dont want to pay to take it in and get it fixed. The pc is extremly slow! All kinds of error messages apear when I turn it on. I rarely can pull up the desktop, and when I do I cant open any programs. It always says that the Vitural Memory is low. I try opening control panal to change the memory but I cant even open that. It wont even turn off by its self I have to manually shut it down. Screen freezes a lot. If anyone has help or ideas please respond, thanks


Report Offensive Message For Removal


Response Number 1
Name: JohnO
Date: July 4, 2004 at 13:25:45 Pacific
Reply: (edit)

First off-- Why do you suspect a virus, has your AV program alerted you? If so, what is the name of the virus it's reporting? Post some of the error messages (verbatim) that you are receiving. Just looking at your post, I'd suspect some computer/OS problems.


Report Offensive Follow Up For Removal

Response Number 2
Name: fowlplay4
Date: July 4, 2004 at 13:45:08 Pacific
Reply: (edit)

yeah, I dont know for sure If it is in fact a virus, I called dell support and they basically said it was by the stuff I told them. The error messages are blank, and they vary in screen sizes. They pop up with an "X" on it and I also have recieved messages that say my virtual memory is too low. This pc is brand new too!! its 2 months old and was fine a week ago.oh yeah, the error messaes that appear, when i click the OK button it signs me off as if it was saying something that it couldn't load my desktop or something.


Report Offensive Follow Up For Removal

Response Number 3
Name: Thresher
Date: July 4, 2004 at 21:06:15 Pacific
Reply: (edit)

Just to simplify things:

What were you doing just before all these symptoms started?

Downloading anything? Have you been to any of these sites: Kazaa, Kazaa Lite, porno, unsecured buying sites, music download sites? Anything like that?

Can you get into Safe Mode? If so, download Adaware and Spybot S&D.

Spybot:

http://s89223352.onlinehome.us/mirror/spybot/index1.php

Download it, Unzip the program, and immediately CHECK FOR UPDATES, install the updates and then do the scan, But run it from Safe Mode.
Let it fix everything marked in red. Reboot but not with restart, shut it down for two full minutes. You’ve got two measely minutes and it’s worth it, and let Spybot run if it indicates on reboot.

To add an item to your ‘Ignore List” click on the little ‘+’ sign next to the item and left click it to highlight it, then right click it and a menu appears, select the function you want.

When you are done reboot again same way.

Also, go to the update page. Notice 3 icons across the top. Between "Search For Updates" and "Download Updates" there is an icon for the download mirror location. After you click on ‘search for updates,’ the one in the middle will change. If it doesn't say "Spybot.US by Rootboxen.net USA" click on the dropbox arrows and click on Rootboxen, and use only that one. If you got a "checksum error" trying to download --that's why.

Ad-Aware:

Download AdAware from http://www.lavasoft.de/

check for updates at "webupdate".

I use these settings (green check)

From main window click "Start" then make sure " Activate in-depth scan" has a green check next to it.

Put a black dot nest to "Use custom scanning options” and click Customize" next to it, then green check these options:
"Scan within archives" ,"Scan active processes", "Scan registry",
"Deep scan registry" ,"Scan my IE Favorites for banned URL"
"Scan my host-files"

At the top of the “STATUS” page notice the Tweak (gear) icon. Click on it.

The first setting is “Scanning Engine.” Click on the little plus sign next to it, and in the drop-down green check "Unload recognized processes during scanning", and “include basic Ad-Aware settings in log file”. Next click on the ‘+’ next to "Cleaning Engine" and in the drop-down green check "Let windows remove files in use at next reboot" and Delete quarantine objects after restoring”

Click "proceed", that will save those settings.

Click "Scan"

When the scan finishes, mark everything for removal and delete it. Right-click the window and choose "select all" from the drop down menu, press ‘next’ and then ‘yes’ to the prompt: “remove all these entries”.

However, if you have certain programs running that will give a false indicator of a browser hijack attempt, such as Script Sentry, which places a monitoring function in the registry and looks like a browser hijacker but is not, then you may want to add that to the ignore list because you want to keep it there to do it’s job. To add an item to the ignore list, put the a cursor on the file it reveals and left click it to highlight it, then right click it and a menu appears. Click on ‘ignore list.’

Shut down, two minute shut down is best, and let Adaware run on reboot if it indicates.

Run them both from Safe Mode and your AV from Safe Mode, just as a diagnosis. if yu get soemthing fine, we'll deal with that. If not, let us know, there are other thigns to do. I take it you did not buy a service plan for this new pc?

Thresher



Report Offensive Follow Up For Removal

Response Number 4
Name: fowlplay4
Date: July 5, 2004 at 08:33:49 Pacific
Reply: (edit)

yes I have aol Instant messenger, and ive heard u can get some bad stuff from that and i also have kazaa. I did buy a few things from some web sites but im positive they were secure because they were brand name websites.


Report Offensive Follow Up For Removal

Response Number 5
Name: fowlplay4
Date: July 5, 2004 at 08:39:46 Pacific
Reply: (edit)

I tried safe mode and this popped up:

Windows could not start because the following file is missing or corrupt:
<windows root>\system32\ntoskrn1.exe.
Please re-install a copy of the above file.

So it wouldn't let me into safe mode. what does this message mean and how can i fix it?


Report Offensive Follow Up For Removal


Response Number 6
Name: Thresher
Date: July 5, 2004 at 20:56:20 Pacific
Reply: (edit)

Ok, you need to dump Kazaa, please, FP, no arguments, just dump it. Please read these, and use the tool:

Kazaa Lite:

Discussion

http://www.pcguide.com/vb/showthread.php?s=&threadid=27737&highlight=Kazaa+Lite

Kazaa begone:

http://www.spywareinfo.com/~merijn/index.html


for my money you can dump ANYTHING with AOL also.

Get rid of Kazaa, and let's see what's left.

Thresher



Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: need virus help!! for a dell

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes Today.
Discuss in The Lounge