[Help] I don't understand what virus I have

  • Thread starter Thread starter SDG
  • Start date Start date
S

SDG

Hi, my Windows XP PC has been infected by a virus (I don't understand
how, since I use webmail, I never open unknown attachments, and I have
Comodo Firewall and Avast installed). Searching on the websites of
McAfee and Symantec I have not yet found what virus is the one which I
got. Here are the symptoms:
- The task manager has been disabled
- All the icons on the desktop, and almost all the ones on the start
menù have been erased (of all the users, both limited and
administrators)
- When I click on an executable file Windows isn't able to execute
it, and tells me about a problem with run32.dll.
This symptoms show themself also if I reboot to limited mode.
This virus showed itself in this way: While I was working, at one
point a pop-up showed up, with a message in a foreign language
(probably German or some scandinavian language, or some East Europe
language), and after a few seconds the PC rebooted itself.
Do you know what virus this is? So far I'm doing a scan from my
notebook with McAfee Security Center, to the Samba share of the
Windows partition (the Samba share is manager by Ubuntu), but so far
it hasn't found anything.
Thanks a lot
 
Hi, my Windows XP PC has been infected by a virus (I don't understand
how, since I use webmail, I never open unknown attachments, and I have
Comodo Firewall and Avast installed). Searching on the websites of
McAfee and Symantec I have not yet found what virus is the one which I
got. Here are the symptoms:
- The task manager has been disabled
- All the icons on the desktop, and almost all the ones on the start
menù have been erased (of all the users, both limited and
administrators)
- When I click on an executable file Windows isn't able to execute
it, and tells me about a problem with run32.dll.
This symptoms show themself also if I reboot to limited mode.
This virus showed itself in this way: While I was working, at one
point a pop-up showed up, with a message in a foreign language
(probably German or some scandinavian language, or some East Europe
language), and after a few seconds the PC rebooted itself.
Do you know what virus this is? So far I'm doing a scan from my
notebook with McAfee Security Center, to the Samba share of the
Windows partition (the Samba share is manager by Ubuntu), but so far
it hasn't found anything.
Thanks a lot

Is it really run32.dll or is it rundll32.exe ?
If it is run32.dll , then it most likely is spyware or a virus.
But, rundll32.exe is a necessary microsoft program
 
Hi, my Windows XP PC has been infected by a virus (I don't understand
how, since I use webmail, I never open unknown attachments, and I have
Comodo Firewall and Avast installed). Searching on the websites of
McAfee and Symantec I have not yet found what virus is the one which I
got. Here are the symptoms:
- The task manager has been disabled
- All the icons on the desktop, and almost all the ones on the start
menù have been erased (of all the users, both limited and
administrators)
- When I click on an executable file Windows isn't able to execute
it, and tells me about a problem with run32.dll.
This symptoms show themself also if I reboot to limited mode.
This virus showed itself in this way: While I was working, at one
point a pop-up showed up, with a message in a foreign language
(probably German or some scandinavian language, or some East Europe
language), and after a few seconds the PC rebooted itself.
Do you know what virus this is? So far I'm doing a scan from my
notebook with McAfee Security Center, to the Samba share of the
Windows partition (the Samba share is manager by Ubuntu), but so far
it hasn't found anything.
Thanks a lot
Click to expand...

When you refer to "limited mode" do you mean SAFE mode? Often Windows will
run properly in SAFE mode even with virus/spyware problems. Try the most
basic SAFE mode (not SAFE mode with networking). If Windows doesn't work in
SAFE mode you can try a non-destructive reinstall using the XP CD. If you
need info about how to do that just ask.
 
Back
Top