Help - Search - Members - Calendar
Full Version: Pop Up After Virus Scan
BleepingComputer.com > Hardware > Internal Hardware
   
jdukze
blink.gif I was working on this PC that was so infected with the Rontok Bro Virus, it had got in and disabled the PC's (Windows 2000) antivirus program, Symatec 9.0 Corporate Edition,anyways I managed to get rid of the virus by slaving it to another PC's hard disk and running a full scan.
All the programs are working okay but everytime I turn the PC on I get this popup message and its quite frustrating, the pop up reads

"Cannot find the file C:\WINDOWS\KesenjanganSosial.exe (or one of its components)".
Make sure the part and file name are correct and that all required libraries are availabe.

and there's this option to click OK to get it out of the way.. crazy.gif devil.gif

1.Is there anyway to do with the registry or just about anything I can do to get rid of this silly pop up message ?spidy.gif
2. Is the virus still hidden somewhere in the PC thats causing the pop up to appear every time? alien.gif

Please help me get rid of this pop up.......!!!!! mad.gif ranting2.gif
resp
I would do a secondary scan if I were you, if that type of message is coming up it means a couple of things

1) theres still sections of the virus that are attempting to run still
or
2) the virus has imbedded itself in startup and as such windows is still trying ot start it up

you could probably find it in the registry as to where.. you got me on that one... probably somewhere in the current user system type area, but I dunno on that one

try going start --> run MSconfig and see if theres an entry related to that that's trying to startup, if so get rid of it
tg1911
Try running your virus scan in Safe Mode.
How to start Windows in Safe Mode

Also run a couple of online virus scans, just to be sure:
BitDefender
http://housecall.trendmicro.com/

And this trojan scanner:
TrojanScan
usasma
Once you've ensured that the virus is gone, search the registry for the path - it'll most likely turn up in the Run key in either HKLM or HKCU. Delete it and it should go away.

An easier way is to use Mike Lin's free StartupCPL available here: http://www.mlin.net/StartupCPL.shtml

If it doesn't show in StartupCPL, this more powerful tool (still free) may help: http://www.microsoft.com/technet/sysintern...s/Autoruns.mspx

Finally, you can also locate these things (most times) by using HiJackThis. Just be careful using it, because you can hose a lot of stuff with just a few mouse clicks!
jdukze
Thanks very very much John, I managed to get rid of it, with the tool - Autorun

Thanks again the pop up is gone forever.
usasma
It's good to hear that you fixed it! Do you recall where the key was located or what it was named? This'll help others who are faced with the same problem!
jdukze
thumbup.gif The key was located somewhere in the
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
or in

C:\Documents and Settings\All Users\Start Menu\Programs\Startup

but I am sure it was in the HKLM

After I deleted it in the registry it went away for good.
cool.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.