I have a virus or a spyware but I can’t find it with anything. A soon as my computer boots up, screens starts popping up that say “Message” 31 errors have been detected in your computer. visit www.pcspyware.com for urgent repair.(and it beeps) Avast comes up clean, adaware, spybot, microsoft antispy all find nothing. I reformatted my hard drive and reinstalled Windows 2000, the second I connected to the internet, it started, same screen kept popping up. The first time I saw it I thought it was just a pop-up ad, but the same window popped up with Internet Explorer shutdown.
Have a look at the attached link http://forums.vnunet.com/thread.jsp?forum=12&thread=73794&message=499825
It would seem that you might be the victim of a very bad marketing ploy!
Same old advice I am afraid, Avast should form part of your defences against the big bad World.
Also run a good firewall, Zone Alarm, Kerio & Outpost seem popular choices. You can download several good freeware cleaners, Spybot, Ad-Aware, Ewido, Microsoft Anti-spyware, C Cleaner. Also take a look at Spyware Blaster, Reg Seeker & Pest Patrol to help keep your computer clean. Consider running one of the on-line scanners from Tend Micro or F-secure.
Unfortunately, keeping a clean computer takes a bit of an effort.
After returning to this message board and rereading my post, I think most people will think this is a joke. It is not, believe me. I have been using Avast for 1 1/2 years and tell everyone I encounter about it for I truly believe in this software. I have been dealing with this (whatever it is for almost a week and a half. I became so frustrated, I indeed did reformat my hard drive and reinstall Windows 2000 Pro. Before the cable modem was ever plugged into my computer, Avast, ZA were installed and properly set up. I have spent countless hours searching the web trying to find out what it is and have failed. I have went through my task manager, item by item and searched the web to confirm that everything I see running is legit, all checked out but regsvc.exe which “could” be suspect in certain circumstances. I have never incountered a pop up that made your computer beep from inside the tower, I have not yet hooked up the speakers. In order to save time I didn’t post that there are actually 2 screens that pop up at different times. The second is similar but has a different web address, but redirects to the above website memtioned in my previous post. I also forgot to mention that I have in fact done the online virus scanners and they also come up clean.
I’m back. I just decided to rerun Avast. It found Win32:Sdbot-2974. This is the third time I have ran it including the bootscan when I reinstalled. It is now residing in my virus chest. I’m not sure what to do, the kernell32.dll is listed twice, isn’t this a necessary windows file. What should I do?
This is not classed as a virus but adware/scumware abd is unlikely to be picked up by a dedicated anti-virus scanner.
There is an internal speeker (of sorts) on every motherboard, you get a bep at Post and if there are hardware errors, etc. you get a different sequence of long and short beeps. Someone is simply using this.
Leave any file that is in the System section of the avast Chest (only those in the Infected or User Files {those you sent to the chest} are suspect or infected), they are backups for your system files and there is can be more than one copy there.
There is no rush to delete anything from the chest, they can’t do any harm there. If after a week or two and you have suffered no adverse effects from moving these to the chest, scan them again (inside the chest) and if they are still detected as viruses, delete them.
If you haven’t already got this software (freeware), download, install, update and run it.
- Ad-Aware
- Spybot Search and Destroy
- Spywareblaster Don’t install this until you are clean.
- Ewido Security Suite If using winXP. or a-Squared free if using win98/ME.
Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
OR HiJackThis Log file - On-line Analysis 2
You may need to turn off Windows Messenger Service.
http://forums.vnunet.com/thread.jsp?forum=12&thread=73794&message=499825
Ahh forgot about the Shoot the Messenger, I’ve had it disabled for so long.
Freewheelin, you are amazing. The link you posted, is exactly what is happening to my computer. Exactly. I may just beat this crappy thing yet. Thanks everybody. To the other posters, I have tried “all” the above mentioned programs and they find nothing. I guess I have 2 separate issues here. The messenger spam and the Win32SdBot trj.
Testy,
Glad to see you got a result in the in end, I am sorry that you thought that I was treating your problem as a joke … I assure you was not! If you care to look at my post I had already tried to guide you to the same link (found by searching Google) that FrewheelinFrank gave you later in the day . Not knowing your level of computer competence the rest of my post was suppose to be friendly commonsense advice to help you not ridicule you in anyway.
Regards,
Thorny
Hi, I see that you went through the process of reinstalling your OS and still came up with the adware problem. That is my recommended procedure for getting rid of the pests. However, you need to take additional steps, other than just reinstalling the OS. First zero out your drives, this removes everything from the hard drive, to include all partitions. Second, turn your system off and remove the power cable. Let the system stay off for a while. This will drain all power from the system, there are a lot of the bugs out there that will jump up to your memory and reside there until they can find a place to reinstall themselves. Third, reinstall your OS. If you do this the bug will be removed.
I have failed to remove the power from the system on several occasions when cleaning a customers system and had the same bug place itself right back again as soon as Windows was installed. Good luck and I hope this helps.