Solved Error message when starting PC

Gigabyte / M61pme-s2p
August 28, 2012 at 01:55:57
Specs: Microsoft Windows XP Professional, 2.712 GHz / 2047 MB
After starting my PC when I start my internet connection I get 2 error messages :

C:\DOCUME~1\user\LOCALS~1\Temp\rvspps.exe
The NTVDM CPU has encountered an illegal instruction.
CS:054a IP:01c2 OP:63 65 20 7c 20 Choose 'Close' to terminate the application.


C:\DOCUME~1\user\LOCALS~1\Temp\tblvmp.exe
The NTVDM CPU has encountered an illegal instruction.
CS:054a IP:01c2 OP:63 65 20 7c 20 Choose 'Close' to terminate the application.

I don't know why I am getting these error messages & want to know how to rectify this problem.

Can anyone help me on this?

Thanks.


See More: Error message when starting PC

Report •


✔ Best Answer
August 28, 2012 at 05:41:52
Dear harspad,
I am inclined to agree with the replies above it sound like you have been attacked by some malware, I have helped a lot of people over remote desktop recently who have been victims of malware, personally I suggest trying the 30 day trial version of Emsisoft it far supersedes Avast in my experience as one user of Avast recently found 1500 PUP's on their machine alone here is a link to the program http://www.emsisoft.com

Also if you ever find any suspicious files on your PC may I suggest you scan them with Virus Total it is an online tool that uses all the best Antivirus tools in one complete scan here is the link for this: https://www.virustotal.com/

Let me know if this helps ?

All the best Michelle xxx



#1
August 28, 2012 at 02:19:11
They are almost certainly the remnants of a malware attack. The fact that they are in your TEMP folder means they are suspect anyway as .exe files should not normally be in there, and a Google of both filenames indicates they are related to malware in the first instance, and the second one has no results.

Scan your computer with a decent antivirus, along with Malwarebytes. Also, check in your startup files, either by using MSCONFIG, or install CCleaner and use the Tools/Startup section to remove any mention of the files.

"I've always been mad, I know I've been mad, like the most of us..." Pink Floyd


Report •

#2
August 28, 2012 at 03:31:52
Thanks for the reply.

I use Quick Heal Total Security & did a scan of that folder but it did not detect anything. Also I used CCleaner but I found nothing.

I found to applications in the TEMP folder next to the .exe files - rpsrun & tbsnm. Is this the cause of the error? Will deleting this solve the problem?


Report •

#3
August 28, 2012 at 03:42:33
Never heard any of the regulars here recommend Quick Heal, and CCleaner is not an antivirus.

I use and recommend Avast ( free ) antivirus and also suggest you get and run malwarebytes anti-malware

Goin' Fishin' (Some day)


Report •

Related Solutions

#4
August 28, 2012 at 03:43:15
As a general rule you can delete just about anything in the TEMP folder, and CCleaner should do this as part of its cleaning process. At a guess I would say that the .exe files that you have there are being produced by another piece of malware on your system that is hiding itself behind these random filenames, again a Google search for them brings up nothing so they are definitely suspicious. You may still get error messages if there is something in your startup that is trying to find the (now deleted) files.

I've never use Quickheal so I can't comment on how good it is at its job (I can't find any trustworthy independant reviews of it either, so I'm a bit suspect that it may not be doing a good job). I can vouch for Malwarebytes which you can download and install for free from a number of places - don't bother with the free trial offer you get when installing it, and remove anything it finds.

You can run CCleaner beforehand, just to reduce the number of files you need to scan unless you want it to scan the temp files as well, just out of interest.

Incidentally, Malware bytes can install & scan whilst you still have your other security suite installed. If you decide to try a different antivirus, like Avast, you will need to uninstall your old security program first.

"I've always been mad, I know I've been mad, like the most of us..." Pink Floyd


Report •

#5
August 28, 2012 at 05:41:52
✔ Best Answer
Dear harspad,
I am inclined to agree with the replies above it sound like you have been attacked by some malware, I have helped a lot of people over remote desktop recently who have been victims of malware, personally I suggest trying the 30 day trial version of Emsisoft it far supersedes Avast in my experience as one user of Avast recently found 1500 PUP's on their machine alone here is a link to the program http://www.emsisoft.com

Also if you ever find any suspicious files on your PC may I suggest you scan them with Virus Total it is an online tool that uses all the best Antivirus tools in one complete scan here is the link for this: https://www.virustotal.com/

Let me know if this helps ?

All the best Michelle xxx


Report •

#6
August 30, 2012 at 02:20:58
I used virustotal.com to scan the files which I though were suspicious : rpsrun & tbsnm. It detected these files as malware, so I deleted them & now I do not get the error message.

Thank You all for your help.


Report •

Ask Question