HTC
Spyware, viruses, & security : Virus - Cannot Access Virus Scans/Rundll32 Issues
Virus - Cannot Access Virus Scans/Rundll32 Issues
by fyreaire - 10/17/09 12:13 PMMy stepdaughters computer has some issues.
I am unable to run any virus software, I receive an error stating there is not enough memory.
When I try to download any new programs, I am automatically redirected to BS websites.
When I try to access any tools on the Control Panel I am greeted with the following "C:\Windows\system32\rundll32.exe The parameter is incorrect."
Booting up in Safe mode has not made any difference in accessing the virus scan software (webroot Antivirus). I am running a Dell Inspiron 6400 with Windows XP. I am unsure of the SP.
Any advice/help would be greatly appreciated. If I have not given adequate information, I apologize, I'm an accountant and not great with diagnosing and fixing computer issues.
Thank you in advance for any assistance.
Fred
Dell Inspiron 6400
by Bugbatter - 10/17/09 5:43 PM In reply to: Virus - Cannot Access Virus Scans/Rundll32 Issues by fyreaireIt might be good to post at Dell so they can have you run some diagnostic tools to find out why you are unable to run virus scans.
http://en.community.dell.com/forums/3521.aspx
Can you run a browser to scan the PC?
by Donna Buenaventura
- 10/18/09 2:22 AM
In reply to: Virus - Cannot Access Virus Scans/Rundll32 Issues by fyreaire
Hi Fred,
If antivirus program or any Windows console will not open, does your browser works? If yes, try running any online scan using your browser:
ESET Online Scanner: http://www.eset.com/onlinescan/
A-squared Web Malware Scanner: http://www.emsisoft.com/en/software/ax/
SUPERAntiSpyware Online Scanner: http://www.superantispyware.com/onlinescan.html
Trend Micro Housecall: http://housecall.trendmicro.com/
F-Secure Online Scan: http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/online-scanner/index.html
Let us know how it goes.
Browser Scan
by fyreaire - 10/18/09 11:58 AM In reply to: Can you run a browser to scan the PC? by Donna Buenaventura
Donna,
Thanks for the links, I can, and am in the process of running the eset scan.
Should I run all of the online scanner links that you have provided? Or is there a better selection among the choices?
Again, I am in the process of running the eset scan and I will update as to the success of the scan.
Thanks,
Fred
Glad to hear this Fred!
by Donna Buenaventura - 10/19/09 3:40 AM
In reply to: Browser Scan by fyreaire
Good to hear that you can run online scanners. Not required to use them all but if you want to try, go ahead. No single scanner and malware will detect/remove all types so it's OK to run online scan regularly. If there is option to quarantine (example: a-squared malware scanner have this option), please quarantine.
ESET Scan Complete
by fyreaire - 10/18/09 2:15 PM In reply to: Can you run a browser to scan the PC? by Donna Buenaventura
Donna,
The scan completed and found and cleaned 40-something files, with one exception:
C:\WINDOWS\system32\drivers\beep.sys - a variant of Win32/UltimateDefender.A trojan.
Other than that, the scan worked. I am going to run another one of the scans that you provided to see if that will clean the problem.
Thanks,
Fred
Good luck, Fred
by Donna Buenaventura - 10/19/09 3:41 AM
In reply to: ESET Scan Complete by fyreaire
Hope the other scanners will be able to remove that threat. And I hope after the removal of the malware, you can access your antivirus or any on-demand scanner especially any Windows console.
Keep it up and let us know how it goes.
Don't Forget....
by Bugbatter - 10/20/09 6:59 PM In reply to: Good luck, Fred by Donna Buenaventura
That infected copy of C:\WINDOWS\system32\drivers\beep.sys will need to be replaced with a clean copy. Vulnerabilities on the system will need to be addressed as well.
That is why posting at Dell where someone can walk you through a through disinfection and review to be sure everything is in order was suggested.
Or posting in any HJT forums, Linda
by Donna Buenaventura - 10/21/09 1:02 PM
In reply to: Don't Forget.... by Bugbatter
not only in Dell malware removal forums 
The thing here is CNET forums can also try to help but the member need to post back about the current situation (e.g. if the PC is OK now, if the system is looking for any file that is gone, or if any applications that triggers the sys file but nothing is found).
That is the time we can suggest to run SFC, if the scanner failed to clean it but deleted it or other way to fix whatever is laid by the member to us.
As you can see, we send people to HJT forums too but that is last resort or if scanner or any tools can't handle them. We don't stop people in going to HJT forums, Linda.
Yes
by Bugbatter - 10/21/09 6:17 PM In reply to: Or posting in any HJT forums, Linda by Donna Buenaventura
I agree. CNET is at a disadvantage by not having users post diagnostic logs and follow-ups. It is less time consuming and easier for the user to run a tool that will not only remove the malware, but will search for and replace the infected file during the same scan. CNET helpers do not use those tools.
It doesn't really matter which malware removal forum is used except that for Dell problems the helpers over there are more familiar with where to find information specific to Dell systems. I would think the same would be true for the HP forums, and other manufacturer forums.
Thanks for agreeing...
by Donna Buenaventura - 10/21/09 9:03 PM
In reply to: Yes by Bugbatter
that we try to help here also and the help we provide is base not only on experience but also with the help of the provided info.
I see no point though to send the member to Dell Malware Removal forum if they will be sent to another non-Dell Malware Removal forum. That is also time consuming.
What we are doing this is I think fine since we've seen people's problem get solved too. We got our own way also to help without a need of log or we ask for log when we want one
And I'm sure you know well that different HJT forums has their own way of helping too. And over here, it does not matter which PC vendor is used by the OP since the issue is not hardware related... we will try to handle/help her then send to HJT forum only when needed.
The member is aware that there's no HJT log being attended here (it's on our stickies) so they provide other info that allow everyone to understand the problem and provide help. If they want their log to be analyzed, they can go to HJT forum and/or we send them there.
Thanks for cooperating and/or understanding, Linda.
Donna...
by Bugbatter - 10/21/09 10:18 PM In reply to: Thanks for agreeing... by Donna Buenaventura
"I see no point though to send the member to Dell Malware Removal forum if they will be sent to another non-Dell Malware Removal forum. That is also time consuming."
It appears that you do not have access to information as to why that is done in certain cases at Dell. Please do not generalize.
Nope
by Donna Buenaventura - 10/22/09 12:57 AM
In reply to: Donna... by Bugbatter
No access there because I'm not a helper at Dell forums like you do but please and kindly understand that different forums has different way in attending on things.
It's similar to any other issues: e.g. MS updates or other product related, we don't tell people to go to "their forum for help at once", but we try to help here and exchange ideas that will help one another.
If you think there is such cases at Dell forums to decide sending people to another forum, I supposed you understand too that we have our way how to handle things? That we also send to other forums (especially HJT or vendors forum) when necessary or if we think it's about time.
Let's not hijack this thread, please. Thanks!
Makes Sense to Me
by Bugbatter - 10/28/09 10:21 AM In reply to: Nope by Donna Buenaventura
Thanks, Donna. Perhaps Dell should try CNET's routine as a way to work around Dell Community's current forum software bugs.
| Forum legend: | |
 |
Locked thread |
 |
Moderator |
 |
CNET staff |
 |
Samsung staff |
 |
Norton Authorized Support team |
 |
AVG staff |
 |
Windows Outreach team |
 |
Dell staff |
 |
Intel staff |
