Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Full hard drive - virus? [CLOSED]


  • This topic is locked This topic is locked

#16
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
If you know the brand of your HD you can look up a tool to test it at this site:
http://www.tacktech....ay.cfm?ttid=287

Hope it helps,
  • 0

Advertisements


#17
Thingol

Thingol

    Member

  • Topic Starter
  • Member
  • PipPip
  • 12 posts
Nope, it found nothig...


What's next?? Or is it hopeless??? (sorry for the delayed answer, but I've been having some trouble)

Thank you very much!!
  • 0

#18
Thingol

Thingol

    Member

  • Topic Starter
  • Member
  • PipPip
  • 12 posts
Hi again!!

I was searching which services were on my start list (not sure if that's the right way to say this; as you might have already noticed, english isn't my first language and since my windows is in spanish I tend to mix some words, sorry); you know,
start, run, msconfig...
and I found this: c:\windows\system32\NvCpl.dll,Nvstratup
So I looked it up and found this ( http://www.processli...nvcpl/index.php ):

Process File: NVCPL.EXE
Process Name: W32.SpyBot.S Worm


Description: NVCPL.EXE is a process which is registered as the W32.SpyBot.S Worm. It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft...n/ms04-011.mspx This is a registered security risk and should be removed immediately. Please see additional details regarding this process

What I can't undertand is why avg, kaspersky, windows antispyware, spybot, spywareblaster, ad-aware or any of the online scans I did found nothig...
Well, I'm not sure how to delete this, so i'll just prevent it from loading when I start my computer.

Edited by Thingol, 30 May 2005 - 11:34 PM.

  • 0

#19
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Did you ever give the difference between NvCpl.dll and NVCPL.EXE any thought?

Worms and viruses often use legitimate filenames or lookalikes to throw you off.
In this case it's the nVidia driver.

Regards,
  • 0

#20
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,676 posts
Can you give this a try please:
http://www.kaspersky...oduct=161744315

Regards,
  • 0

#21
Kat

Kat

    Retired

  • Retired Staff
  • 19,711 posts
  • MVP
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP