Version: 2008
Advanced Search
advertisement
advertisement

Forum display:

Spyware, viruses, & security : Virus - Cannot Access Virus Scans/Rundll32 Issues

by fyreaire - 10/17/09 12:13 PM
advertisement
Post 1 of 14

Virus - Cannot Access Virus Scans/Rundll32 Issues

by fyreaire - 10/17/09 12:13 PM

My stepdaughters computer has some issues.

I am unable to run any virus software, I receive an error stating there is not enough memory.

When I try to download any new programs, I am automatically redirected to BS websites.

When I try to access any tools on the Control Panel I am greeted with the following "C:\Windows\system32\rundll32.exe The parameter is incorrect."

Booting up in Safe mode has not made any difference in accessing the virus scan software (webroot Antivirus). I am running a Dell Inspiron 6400 with Windows XP. I am unsure of the SP.

Any advice/help would be greatly appreciated. If I have not given adequate information, I apologize, I'm an accountant and not great with diagnosing and fixing computer issues.

Thank you in advance for any assistance.

Fred

Post 2 of 14

Dell Inspiron 6400

by Bugbatter - 10/17/09 5:43 PM In reply to: Virus - Cannot Access Virus Scans/Rundll32 Issues by fyreaire

It might be good to post at Dell so they can have you run some diagnostic tools to find out why you are unable to run virus scans.
http://en.community.dell.com/forums/3521.aspx

Post 3 of 14

Can you run a browser to scan the PC?

by Donna Buenaventura Moderator - 10/18/09 2:22 AM In reply to: Virus - Cannot Access Virus Scans/Rundll32 Issues by fyreaire

Hi Fred,

If antivirus program or any Windows console will not open, does your browser works? If yes, try running any online scan using your browser:

ESET Online Scanner: http://www.eset.com/onlinescan/
A-squared Web Malware Scanner: http://www.emsisoft.com/en/software/ax/
SUPERAntiSpyware Online Scanner: http://www.superantispyware.com/onlinescan.html
Trend Micro Housecall: http://housecall.trendmicro.com/
F-Secure Online Scan: http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/online-scanner/index.html

Let us know how it goes.

Post 4 of 14

Browser Scan

by fyreaire - 10/18/09 11:58 AM In reply to: Can you run a browser to scan the PC? by Donna Buenaventura Moderator

Donna,

Thanks for the links, I can, and am in the process of running the eset scan.

Should I run all of the online scanner links that you have provided? Or is there a better selection among the choices?

Again, I am in the process of running the eset scan and I will update as to the success of the scan.

Thanks,

Fred

Post 5 of 14

Glad to hear this Fred!

by Donna Buenaventura Moderator - 10/19/09 3:40 AM In reply to: Browser Scan by fyreaire

Good to hear that you can run online scanners. Not required to use them all but if you want to try, go ahead. No single scanner and malware will detect/remove all types so it's OK to run online scan regularly. If there is option to quarantine (example: a-squared malware scanner have this option), please quarantine.

Post 6 of 14

ESET Scan Complete

by fyreaire - 10/18/09 2:15 PM In reply to: Can you run a browser to scan the PC? by Donna Buenaventura Moderator

Donna,

The scan completed and found and cleaned 40-something files, with one exception:

C:\WINDOWS\system32\drivers\beep.sys - a variant of Win32/UltimateDefender.A trojan.

Other than that, the scan worked. I am going to run another one of the scans that you provided to see if that will clean the problem.

Thanks,

Fred

Post 7 of 14

Good luck, Fred

by Donna Buenaventura Moderator - 10/19/09 3:41 AM In reply to: ESET Scan Complete by fyreaire

Hope the other scanners will be able to remove that threat. And I hope after the removal of the malware, you can access your antivirus or any on-demand scanner especially any Windows console.

Keep it up and let us know how it goes.

Post 8 of 14

Don't Forget....

by Bugbatter - 10/20/09 6:59 PM In reply to: Good luck, Fred by Donna Buenaventura Moderator

That infected copy of C:\WINDOWS\system32\drivers\beep.sys will need to be replaced with a clean copy. Vulnerabilities on the system will need to be addressed as well.
That is why posting at Dell where someone can walk you through a through disinfection and review to be sure everything is in order was suggested.

Post 9 of 14

Or posting in any HJT forums, Linda

by Donna Buenaventura Moderator - 10/21/09 1:02 PM In reply to: Don't Forget.... by Bugbatter

not only in Dell malware removal forums :)

The thing here is CNET forums can also try to help but the member need to post back about the current situation (e.g. if the PC is OK now, if the system is looking for any file that is gone, or if any applications that triggers the sys file but nothing is found).
That is the time we can suggest to run SFC, if the scanner failed to clean it but deleted it or other way to fix whatever is laid by the member to us.

As you can see, we send people to HJT forums too but that is last resort or if scanner or any tools can't handle them. We don't stop people in going to HJT forums, Linda.

Post 10 of 14

Yes

by Bugbatter - 10/21/09 6:17 PM In reply to: Or posting in any HJT forums, Linda by Donna Buenaventura Moderator

I agree. CNET is at a disadvantage by not having users post diagnostic logs and follow-ups. It is less time consuming and easier for the user to run a tool that will not only remove the malware, but will search for and replace the infected file during the same scan. CNET helpers do not use those tools.

It doesn't really matter which malware removal forum is used except that for Dell problems the helpers over there are more familiar with where to find information specific to Dell systems. I would think the same would be true for the HP forums, and other manufacturer forums.

Post 11 of 14

Thanks for agreeing...

by Donna Buenaventura Moderator - 10/21/09 9:03 PM In reply to: Yes by Bugbatter

that we try to help here also and the help we provide is base not only on experience but also with the help of the provided info.

I see no point though to send the member to Dell Malware Removal forum if they will be sent to another non-Dell Malware Removal forum. That is also time consuming.

What we are doing this is I think fine since we've seen people's problem get solved too. We got our own way also to help without a need of log or we ask for log when we want one :)
And I'm sure you know well that different HJT forums has their own way of helping too. And over here, it does not matter which PC vendor is used by the OP since the issue is not hardware related... we will try to handle/help her then send to HJT forum only when needed.

The member is aware that there's no HJT log being attended here (it's on our stickies) so they provide other info that allow everyone to understand the problem and provide help. If they want their log to be analyzed, they can go to HJT forum and/or we send them there.

Thanks for cooperating and/or understanding, Linda.

Post 12 of 14

Donna...

by Bugbatter - 10/21/09 10:18 PM In reply to: Thanks for agreeing... by Donna Buenaventura Moderator

"I see no point though to send the member to Dell Malware Removal forum if they will be sent to another non-Dell Malware Removal forum. That is also time consuming."
It appears that you do not have access to information as to why that is done in certain cases at Dell. Please do not generalize.

Post 13 of 14

Nope

by Donna Buenaventura Moderator - 10/22/09 12:57 AM In reply to: Donna... by Bugbatter

No access there because I'm not a helper at Dell forums like you do but please and kindly understand that different forums has different way in attending on things.

It's similar to any other issues: e.g. MS updates or other product related, we don't tell people to go to "their forum for help at once", but we try to help here and exchange ideas that will help one another.

If you think there is such cases at Dell forums to decide sending people to another forum, I supposed you understand too that we have our way how to handle things? That we also send to other forums (especially HJT or vendors forum) when necessary or if we think it's about time.

Let's not hijack this thread, please. Thanks! :)

Post 14 of 14

Makes Sense to Me

by Bugbatter - 10/28/09 10:21 AM In reply to: Nope by Donna Buenaventura Moderator

Thanks, Donna. Perhaps Dell should try CNET's routine as a way to work around Dell Community's current forum software bugs.

Forum legend:
Locked Locked thread
Moderator Moderator
CNET staff CNET staff
Samsung staff Samsung staff
Norton Authorized Support team Norton Authorized Support team
AVG staff AVG staff
Windows Outreach team Windows Outreach team
Dell staff Dell staff
Intel staff Intel staff
Powered by Jive Software