Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Win32/Heur [Solved]


  • This topic is locked This topic is locked

#16
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Could you please run Dr Web again just the quick scan initially but with a fresh copy

ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
  • 0

Advertisements


#17
BigDod

BigDod

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
I am having problems downloading DrWeb and I have already deleted the copy I had. Do you have any other download locations for it.
  • 0

#18
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK it looks like Virut was not killed. This is a nasty virus that infects all of your exe files and as you did a reinstall rather that reformat it looks like the windows files were re-infected as they reloaded. I would recommend at this stage to back up all your data files but not .exe or screensavers

Try this link http://cid-32d8666f4...nch.exe?lc=2057

and download launch.exe
  • 0

#19
BigDod

BigDod

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
Attached File  DrWeb.zip   206bytes   190 downloads

Express scan log

Edit - I did do a format but there was a folder with very important data that had to be copied from before.

Edit2 - If there is any way to ensure that the file on my memory stick were completely cleaned I could always do another format and install.

Edited by BigDod, 13 February 2009 - 03:01 PM.

  • 0

#20
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Can you try this

Right click each element in turn and select properties
Select the driver tab
Select roll back driver

And then let me know the result
  • 0

#21
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Sorry forgot to answer your question -

If there is any way to ensure that the file on my memory stick were completely cleaned I could always do another format and install.

as long as they are not executable files or screensavers they are OK that is to say if they are data files (word, excell etc. )
  • 0

#22
BigDod

BigDod

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
When I try to roll back the drivers I get a message stating "No driver files have been backed up for this device".
Is the computer now clean of virus's, if so would a repair install fix the driver issue.
  • 0

#23
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
I can see no further malware so try a repair install and the post a new Hijackthis log and let me know how things are running
  • 0

#24
BigDod

BigDod

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
I am posting this from the "infected" computer so I have network back.

Attached File  hijackthis.txt   3.09KB   176 downloads

Now I get a message saying crystl32.ocx is not registered when I try to run the program that is needed on this computer.
  • 0

#25
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Lets register that ocx then, to do this :

Click Start > Run and type in the following

Regsvr32 /s crystl32.ocx

Then retry the programme

Your Hijackthis log now looks clean

Update and run MBAM and then let me know how your system is running
  • 0

Advertisements


#26
BigDod

BigDod

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
Still the same error message with the program. Running MBAM now.
  • 0

#27
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK lets change the parameters slightly to see if it will work. If this fails we will need to check the dependencies

Click Start > Run and type in the following including quote marks

regsvr32.exe "C:\Windows\System\crystl32.ocx"
  • 0

#28
BigDod

BigDod

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
Attached File  mbam_log_2009_02_14__14_40_24_.txt   1.11KB   187 downloads
MBAM found 4 things.

regsvr32.exe "C:\Windows\System\crystl32.ocx" still failed

Edited by BigDod, 14 February 2009 - 08:46 AM.

  • 0

#29
Essexboy

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK Just trying to find a copy of dependency walker to find out why the ocx is not registering

On the MBAM report it says no action taken is this correct ?
  • 0

#30
BigDod

BigDod

    Member

  • Topic Starter
  • Member
  • PipPip
  • 37 posts
It said that it needed to restart to fix and I did that.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP