[Metallica]

If you know the brand of your HD you can look up a tool to test it at this site:
http://www.tacktech....ay.cfm?ttid=287

Hope it helps,

[Advertisements]

Nope, it found nothig...


What's next?? Or is it hopeless??? (sorry for the delayed answer, but I've been having some trouble)

Thank you very much!!

[Thingol]

Nope, it found nothig...


What's next?? Or is it hopeless??? (sorry for the delayed answer, but I've been having some trouble)

Thank you very much!!

[Thingol]

Hi again!!

I was searching which services were on my start list (not sure if that's the right way to say this; as you might have already noticed, english isn't my first language and since my windows is in spanish I tend to mix some words, sorry); you know,
start, run, msconfig...
and I found this: c:\windows\system32\NvCpl.dll,Nvstratup
So I looked it up and found this ( http://www.processli...nvcpl/index.php ):

Process File: NVCPL.EXE
Process Name: W32.SpyBot.S Worm


Description: NVCPL.EXE is a process which is registered as the W32.SpyBot.S Worm. It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft...n/ms04-011.mspx This is a registered security risk and should be removed immediately. Please see additional details regarding this process

What I can't undertand is why avg, kaspersky, windows antispyware, spybot, spywareblaster, ad-aware or any of the online scans I did found nothig...
Well, I'm not sure how to delete this, so i'll just prevent it from loading when I start my computer.

Edited by Thingol, 30 May 2005 - 11:34 PM.

[Metallica]

Did you ever give the difference between NvCpl.dll and NVCPL.EXE any thought?

Worms and viruses often use legitimate filenames or lookalikes to throw you off.
In this case it's the nVidia driver.

Regards,

[Metallica]

Can you give this a try please:
http://www.kaspersky...oduct=161744315

Regards,

[Kat]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.