 Pop Up After Virus Scan |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.| Important Announcement: The winners of the BC Million Post contest have been announced. You can read who the winners are at this post. - BleepingComputer Management |
  |
  Jan 10 2007, 08:28 PM
Post
#1
|
|
 Member  Group: Members Posts: 38 Joined: 26-September 06 Member No.: 87,247  |
 I was working on this PC that was so infected with the Rontok Bro Virus, it had got in and disabled the PC's (Windows 2000) antivirus program, Symatec 9.0 Corporate Edition,anyways I managed to get rid of the virus by slaving it to another PC's hard disk and running a full scan.All the programs are working okay but everytime I turn the PC on I get this popup message and its quite frustrating, the pop up reads "Cannot find the file C:\WINDOWS\KesenjanganSosial.exe (or one of its components)". Make sure the part and file name are correct and that all required libraries are availabe. and there's this option to click OK to get it out of the way..   1.Is there anyway to do with the registry or just about anything I can do to get rid of this silly pop up message ?  2. Is the virus still hidden somewhere in the PC thats causing the pop up to appear every time?  Please help me get rid of this pop up.......!!!!!  
-------------------- JDUKZE
The only man who never makes mistakes is the man who never does anything. Theodore Roosevelt |
 |
 
|
|
Jan 11 2007, 12:52 AM
Post
#2
|
|
|
Forum Regular Group: Members Posts: 212 Joined: 26-December 06 Member No.: 103,031 |
I would do a secondary scan if I were you, if that type of message is coming up it means a couple of things
1) theres still sections of the virus that are attempting to run still or 2) the virus has imbedded itself in startup and as such windows is still trying ot start it up you could probably find it in the registry as to where.. you got me on that one... probably somewhere in the current user system type area, but I dunno on that one try going start --> run MSconfig and see if theres an entry related to that that's trying to startup, if so get rid of it |
|
|
|
|
Jan 11 2007, 01:13 AM
Post
#3
|
|
 SPAM Magnet Group: Global Moderator Posts: 13,805 Joined: 6-May 04 From: SW Louisiana Member No.: 363 |
Try running your virus scan in Safe Mode.
How to start Windows in Safe Mode Also run a couple of online virus scans, just to be sure: BitDefender http://housecall.trendmicro.com/ And this trojan scanner: TrojanScan -------------------- I love being married.
It's so great to find that one special person you want to annoy, for the rest of your life. |
|
|
|
|
Jan 11 2007, 09:27 AM
Post
#4
|
|
 Visually handicapped, hence the avatar :0) Group: Moderator Posts: 14,526 Joined: 2-October 05 From: Southeastern CT, USA Member No.: 35,824 |
Once you've ensured that the virus is gone, search the registry for the path - it'll most likely turn up in the Run key in either HKLM or HKCU. Delete it and it should go away.
An easier way is to use Mike Lin's free StartupCPL available here: http://www.mlin.net/StartupCPL.shtml If it doesn't show in StartupCPL, this more powerful tool (still free) may help: http://www.microsoft.com/technet/sysintern...s/Autoruns.mspx Finally, you can also locate these things (most times) by using HiJackThis. Just be careful using it, because you can hose a lot of stuff with just a few mouse clicks! -------------------- - John
**If you need a more detailed explanation, please ask for it. I have the Knack. ** |
|
|
|
|
Jan 14 2007, 07:58 PM
Post
#5
|
|
|
Member Group: Members Posts: 38 Joined: 26-September 06 Member No.: 87,247 |
Thanks very very much John, I managed to get rid of it, with the tool - Autorun
Thanks again the pop up is gone forever. -------------------- JDUKZE
The only man who never makes mistakes is the man who never does anything. Theodore Roosevelt |
|
|
|
|
Jan 15 2007, 12:56 AM
Post
#6
|
|
|
Visually handicapped, hence the avatar :0) Group: Moderator Posts: 14,526 Joined: 2-October 05 From: Southeastern CT, USA Member No.: 35,824 |
It's good to hear that you fixed it! Do you recall where the key was located or what it was named? This'll help others who are faced with the same problem!
-------------------- - John
**If you need a more detailed explanation, please ask for it. I have the Knack. ** |
|
|
|
 Jan 15 2007, 06:55 PM
Post
#7
|
|
|
Member Group: Members Posts: 38 Joined: 26-September 06 Member No.: 87,247 |
 The key was located somewhere in the HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run or in C:\Documents and Settings\All Users\Start Menu\Programs\Startup but I am sure it was in the HKLM After I deleted it in the registry it went away for good. 
-------------------- JDUKZE
The only man who never makes mistakes is the man who never does anything. Theodore Roosevelt |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 21st November 2008 - 10:34 PM |
© 2003-2008 All Rights Reserved Bleeping Computer LLC.