Xp Virus - Help Appreciated - diyAudio
Go Back   Home > Forums > General Interest > Everything Else

Everything Else Anything related to audio / video / electronics etc) BUT remember- we have many new forums where your thread may now fit! .... Parts, Equipment & Tools, Construction Tips, Software Tools......

Please consider donating to help us continue to serve you.

Ads on/off / Custom Title / More PMs / More album space / Advanced printing & mass image saving
Reply
 
Thread Tools Search this Thread
Old 5th December 2008, 02:59 PM   #1
poynton is offline poynton  United Kingdom
diyAudio Member
 
poynton's Avatar
 
Join Date: Mar 2005
Location: A life on the ocean waves when I'm not at home in N. Wales (but I'm not Welsh so no sheep jokes!)
Default Xp Virus - Help Appreciated

Hi.

I am running Windows XP SP2 with Panda AV Platinum - all up to date.

Panda has reported 2 incidents of W32/DMSPatch.A.

Both appear to be registry entries pointing to this file :-
c\windows\system32\dmserver.dll

After a scan, Panda puts the virus on report but does nothing else.
During use, the virus is intercepted by Panda (red info box in corner) and says it has been neutralised and quarentined. However, the file is still there and nothing appears in quarentine.

I cannot rename the file, delete it or anything else even though 1 site suggests replacing with a clean copy.

Panda website states that it should delete the file!

Anyone come across this ??
Anyone suggest anything (oher than get a Mac!)

Andy
__________________
If it ain't broke, break it !! Then fix it again. It's called DIY !
  Reply With Quote
Old 5th December 2008, 03:06 PM   #2
Wizard of Kelts
diyAudio Moderator
 
Join Date: Sep 2001
Location: Connecticut, The Nutmeg State
Boot into Safe Mode and try to delete it then?

Just a suggestion-sometimes it works.

Keep tapping F8 as soon as your machine comes on. That takes you to Safe Mode.
__________________
"A friend will help you move. A really good friend will help you move a body."
-Anonymous
  Reply With Quote
Old 5th December 2008, 03:09 PM   #3
poynton is offline poynton  United Kingdom
diyAudio Member
 
poynton's Avatar
 
Join Date: Mar 2005
Location: A life on the ocean waves when I'm not at home in N. Wales (but I'm not Welsh so no sheep jokes!)
Quote:
Originally posted by kelticwizard
Boot into Safe Mode and try to delete it then?

Just a suggestion-sometimes it works.

Keep tapping F8 as soon as your machine comes on. That takes you to Safe Mode.
Yep. Tried that !

I also tried going to the dos prompt and tried to reset the attributes/delete/rename. All I get is access denied.

Andy
__________________
If it ain't broke, break it !! Then fix it again. It's called DIY !
  Reply With Quote
Old 5th December 2008, 03:28 PM   #4
diyAudio Member
 
Join Date: May 2005
Location: QCA, IL
Try taking a look at This link and this link.
Scott
  Reply With Quote
Old 5th December 2008, 03:31 PM   #5
Wizard of Kelts
diyAudio Moderator
 
Join Date: Sep 2001
Location: Connecticut, The Nutmeg State
There are a lot of good computer people on here, but here are two sites which specialize in this sort of thing where I have gone successfully in the past.

aumha.net I have gone to many times. I am amazed at the lengths the people at aumha have gone to to help-realy detailed, step-by-step advice.

Castle Cops I have gone to only twice, but was quite pleased with the response.


www.aumha.net

www.castlcops.com
__________________
"A friend will help you move. A really good friend will help you move a body."
-Anonymous
  Reply With Quote
Old 5th December 2008, 08:58 PM   #6
diyAudio Member
 
theAnonymous1's Avatar
 
Join Date: Feb 2004
Location: Anonymityville
Is there a program in the add/remove programs list called Comet Cursor? If so, try uninstalling it.

http://www.pctoday.com/editorial/art...ID=25525&guid=
  Reply With Quote
Old 5th December 2008, 10:14 PM   #7
es44 is offline es44  Denmark
diyAudio Member
 
es44's Avatar
 
Join Date: Apr 2005
Location: Fredericia, DK
Did you try Superantispyware ?
It's sometimes amazing what this little tool can do.

Best of luck.
Ebbe
  Reply With Quote
Old 5th December 2008, 10:16 PM   #8
lineup is offline lineup  Sweden
diyAudio Member
 
lineup's Avatar
 
Join Date: Dec 2005
Location: the north
there is a spray you can buy
you spray the pc outside
this will keep the virus away from your computer

Spybot Search & Destroy is a very good free program.
It is welknown.
Will search your PC and give you info and options to 'clean up'
http://www.spybot.com/
__________________
lineup
  Reply With Quote
Old 5th December 2008, 10:45 PM   #9
diyAudio Member
 
Join Date: Sep 2006
You need to delete the file. You can try killbox first. You will probably need to use MoveOnBoot if it is very stubborn. Then you can replace the DLL with one from an uninfected computer.
  Reply With Quote
Old 6th December 2008, 04:01 AM   #10
poynton is offline poynton  United Kingdom
diyAudio Member
 
poynton's Avatar
 
Join Date: Mar 2005
Location: A life on the ocean waves when I'm not at home in N. Wales (but I'm not Welsh so no sheep jokes!)
Hi.

I tried both suggestions.

with moveonboot, I got "access denied"

Killbox was also unsuccessful




Andy
__________________
If it ain't broke, break it !! Then fix it again. It's called DIY !
  Reply With Quote

Reply


Hide this!Advertise here!
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Virus Attack Help boris333 Everything Else 1 7th May 2009 02:10 PM
new virus is out karma Everything Else 16 28th April 2004 04:29 PM
New virus threat for M$ PC's dhaen Everything Else 19 21st September 2003 03:00 AM
Virus or HOAX? Elso Kwak Everything Else 14 12th March 2003 07:55 AM
Virus Alert! GRollins Everything Else 9 8th February 2002 06:51 PM


New To Site? Need Help?

All times are GMT. The time now is 09:09 AM.


vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2014 DragonByte Technologies Ltd.
Copyright 1999-2014 diyAudio

Content Relevant URLs by vBSEO 3.3.2