943,640 Members | Top Members by Rank

Ad:
You are currently viewing page 3 of this multi-page discussion thread; Jump to the first page
Jul 21st, 2008
0

Re: shutdown message problem

Arthas, I need a good slapping. Ignore my post about those two shell keys - that's something I put in my sys.
But do try post #18
Reputation Points: 239
Solved Threads: 296
Industrious Poster
gerbil is offline Offline
4,169 posts
since May 2005
Jul 26th, 2008
0

Re: shutdown message problem

I also had this problem and miraculously I cured it

I want to share it here - After using removal.bat, I also got the "registry can not be imported..." kind of message, I continued it and then I manually searched the registry for "iph.exe". I deleted each and every value which I found. AND viola !!! I got my problem fixed.

Hey seniors, try this and you will get the solution

Please do reply if it helps...

Harish Dobhal
http://indexviews.blogspot.com
Reputation Points: 10
Solved Threads: 1
Newbie Poster
hcdin is offline Offline
1 posts
since Jul 2008
Jul 27th, 2008
0

Re: shutdown message problem

I also tried gebrils post #18. But whenever I ran that runthis.bat in safe mode, it complained after sometimes that
16 bit MS-DOS Subsystem
SDFix
c:/Program../Symantec/S32ENIL.dll. An installable Virtual driver failed DLL initialization.
Choose close to ternimate the app.
(It all came in a dialog box)
When I chose Ignore, it says "Cannot load VDM IPX/SPX support". I have to now quit the shell.
Now when I restart in normal mode, it says finalizing.. and again displays the same .dll problem. Here also when I chose ignore it does sth. I have got a report. How is it that I send it to you people if needed.
I also tried the removing of the iph.exe's from the regisery. But it had not done me faour. Is it that I did not know the proper sequence of removing the values. And is it due to the same that I am being tortured(I mean iph.exe).
Attached Files
File Type: txt Report.txt (5.6 KB, 6 views)
Reputation Points: 10
Solved Threads: 0
Light Poster
Arthas is offline Offline
39 posts
since Jun 2008
Jul 27th, 2008
0

Re: shutdown message problem

I also tried searching the "iph.exe" int the registry, but nothing was found. I thing there nothing called iph.exe in my registry.
Reputation Points: 10
Solved Threads: 0
Light Poster
Arthas is offline Offline
39 posts
since Jun 2008
Jul 27th, 2008
0

Re: shutdown message problem

And here is the HJT log of my system.
Please analyse it.
Attached Files
File Type: txt hijackthis.txt (9.5 KB, 6 views)
Reputation Points: 10
Solved Threads: 0
Light Poster
Arthas is offline Offline
39 posts
since Jun 2008
Jul 27th, 2008
1

Re: shutdown message problem

Symantec/S32ENIL.dll .. is there any chance you typed that incorrectly, arthas? It should be the name of a dll that exists in that Symantec S32 directory under program Files. Anyway, i notice that you are running Avast from Alwill Software, so that Symantec error is a leftover from an incomplete uninstallation of Symantec. To fix that you should go to Symantec's website for the removal tool for the edition of their AV that you were using. For your immediate problem you can do this....
==Navigate to this key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\VirtualDeviceDrivers
-in the right pane rclick VDD and delete it.
-in the Edit menu point to New and then select Multi-string Value.
-type VDD in the Value Name box, press ENTER.
-exit Regedit.

The Symantec tool will clear out all ? remnants though....
[with Avast installed I am surprised you do not have this entry for VDD at that key:
C:\Program Files\Alwil Software\Avast4\aswMonVd.dll ... but anyway..]
That is an incomplete SDFix log. Try running it again.
Reputation Points: 239
Solved Threads: 296
Industrious Poster
gerbil is offline Offline
4,169 posts
since May 2005
Jul 28th, 2008
0

Re: shutdown message problem

I did what you said. I deleted VDD and re added it.
I ran the runthis.bat and it went on well.
Down is the report of it( hope this time it is complete).
Attached Files
File Type: txt Report.txt (6.3 KB, 10 views)
Reputation Points: 10
Solved Threads: 0
Light Poster
Arthas is offline Offline
39 posts
since Jun 2008
Jul 29th, 2008
0

Re: shutdown message problem

I see that SDFix detected no malware. Please run this scan to see what it turns up:
==Download this file to your desktop: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- to run it dclick combofix.exe and follow the prompts to start it. When finished, it will produce a log, C:\Combofix.txt - post that log in your next reply.
A word of caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs reboot to restore the desktop.
Reputation Points: 239
Solved Threads: 296
Industrious Poster
gerbil is offline Offline
4,169 posts
since May 2005
Aug 6th, 2008
0

Re: shutdown message problem

I ran combo fix on my system, and I think it worked. I have attached the log of it below.
I can finally run DOS commands without hesitation. Thanks a lot everyone, and especially gebril and sattis.
And would you plz tell me what combofix did to my system. It would be more interesting to know how to manually fix the problem.
Attached Files
File Type: txt log.txt (28.6 KB, 8 views)
Reputation Points: 10
Solved Threads: 0
Light Poster
Arthas is offline Offline
39 posts
since Jun 2008
Aug 7th, 2008
0

Re: shutdown message problem

ComboFix does operations that are in general terms similar to other anti-malware tools. Briefly, I would not dream of attempting to emulate it manually. Check its bat file for some of its operations.
I see the point of your infection - a USB device.

==Download this temp file cleaner from http://www.atribune.org/ccount/click.php?id=1 --click in the download window to run it, and when ATF Cleaner opens go Select all, and then Empty Selected.
Next click Firefox [if you have that browser..] at the top, Select All again, and Empty Selected again. Follow that procedure also if you have Opera. Repeat in other User profiles.
Close ATF.
==Please use IE or Firefox to do an online scan at panda:- http://www.pandasecurity.com/homeuse...s/activescan/?
-for the free online virus scan select the link Scan your PC, then Register [otherwise there will be no disinfection, merely detection] with a valid email and follow through.
Please ATTACH to your post the log it produces.
==download hijackthis: http://www.majorgeeks.com/download5554.html
-copy it to a new FOLDER placed either alongside your program files or on your desktop and then... rename hijackthis.exe to imabunny.exe
-in that folder start HijackThis by dclicking the .exe; now close ALL other applications and any open windows including the explorer window containing HijackThis.
-click the Scan and Save a Logfile button. Post the log here.
Reputation Points: 239
Solved Threads: 296
Industrious Poster
gerbil is offline Offline
4,169 posts
since May 2005

This thread is solved

Either the thread starter or a moderator has marked this thread as solved. You can most likely trust the responses and answers given. There is most likely no reason for any further responses to be posted here. If you have a related question, please start a new thread in this forum instead.

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in Windows NT / 2000 / XP Forum Timeline: Repair Install Problem -- How can I abort?
Next Thread in Windows NT / 2000 / XP Forum Timeline: asiuoqgusdbaksd





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC