Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Start Up Pop Up Error


  • Please log in to reply
13 replies to this topic

#1 Carolinajohn63

Carolinajohn63

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:53 AM

Posted 26 September 2008 - 05:31 AM

The 'problem' is that for the past few days when I turn on my computer I get a
box with "docmgr.exe Unable to locate Component" at the top. Inside the mes
sage area it says" The application has failed because vxvault.dll was not fo
und. Re-installing th appli cation may fix this problem."

The only new changes made to my system is that I added Zone alarm fire wall.

Help??

Thanks,

John

BC AdBot (Login to Remove)

 


#2 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:53 AM

Posted 26 September 2008 - 07:48 AM

Have you done any scans lately that have removed any possible malware


Is this a dell laptop?

Are you certain of the spelling of that file?

wxvault.dll seems to be more common
Chewy

No. Try not. Do... or do not. There is no try.

#3 Carolinajohn63

Carolinajohn63
  • Topic Starter

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:53 AM

Posted 26 September 2008 - 08:24 AM

Yes, I scanned with malawarebytes. And used ATF Cleeaner.

You may be right on the spelling. I am not home now to recheck Yes a Dell.

Edited by Carolinajohn63, 26 September 2008 - 08:26 AM.


#4 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:53 AM

Posted 26 September 2008 - 08:58 AM

We might have a winner

http://www.malwarebytes.org/forums/index.p...;hl=wxvault.dll

If the time/date and details match

A false positive is just that, a mistake

The file does encryption
Chewy

No. Try not. Do... or do not. There is no try.

#5 Carolinajohn63

Carolinajohn63
  • Topic Starter

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:53 AM

Posted 26 September 2008 - 10:20 AM

We might have a winner

http://www.malwarebytes.org/forums/index.p...;hl=wxvault.dll

If the time/date and details match

A false positive is just that, a mistake

The file does encryption


It will not load that URL.... so how do I stop the thing from popping up averytime I start windows?

Edited by Carolinajohn63, 26 September 2008 - 10:21 AM.


#6 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:53 AM

Posted 26 September 2008 - 10:30 AM

they are having server problems

try later

The proper way to fix a false positive is to restore the file from quarantine, but only if we verify that's the problem

After updating MBAM it should scan clean

You will need to post that MBAM log where it was cleaned
Chewy

No. Try not. Do... or do not. There is no try.

#7 Carolinajohn63

Carolinajohn63
  • Topic Starter

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:53 AM

Posted 26 September 2008 - 07:31 PM

they are having server problems

try later

The proper way to fix a false positive is to restore the file from quarantine, but only if we verify that's the problem

After updating MBAM it should scan clean

You will need to post that MBAM log where it was cleaned


OK...still getting the same pop up. Here is the scan results:

Malwarebytes' Anti-Malware 1.28
Database version: 1211
Windows 5.1.2600 Service Pack 3

9/26/2008 8:11:48 PM
mbam-log-2008-09-26 (20-11-48).txt

Scan type: Quick Scan
Objects scanned: 71355
Time elapsed: 21 minute(s), 16 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#8 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:53 AM

Posted 26 September 2008 - 07:36 PM

Sorry you misunderstood, I need the log where MBAM found and quaratined our problem file

I can verify if that was a false positive

that's about the only safe way to fix this problem
Chewy

No. Try not. Do... or do not. There is no try.

#9 Carolinajohn63

Carolinajohn63
  • Topic Starter

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:53 AM

Posted 26 September 2008 - 07:45 PM

Sorry you misunderstood, I need the log where MBAM found and quaratined our problem file

I can verify if that was a false positive

that's about the only safe way to fix this problem


OK found it:

Malwarebytes' Anti-Malware 1.28
Database version: 1204
Windows 5.1.2600 Service Pack 3

9/25/2008 11:32:06 AM
mbam-log-2008-09-25 (11-32-06).txt

Scan type: Quick Scan
Objects scanned: 68533
Time elapsed: 17 minute(s), 47 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\wxvault.dll (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\wxvault.dll (Trojan.Vundo) -> Delete on reboot.

#10 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:53 AM

Posted 26 September 2008 - 07:56 PM

We have a winner, have MBAM restore the file

Reboot
Chewy

No. Try not. Do... or do not. There is no try.

#11 Carolinajohn63

Carolinajohn63
  • Topic Starter

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:53 AM

Posted 26 September 2008 - 08:04 PM

We have a winner, have MBAM restore the file

Reboot


How do I do that?

#12 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:53 AM

Posted 26 September 2008 - 08:08 PM

Go to quarantine in MBAM and select that file and use the restore button, be careful and don't restore anything else
Chewy

No. Try not. Do... or do not. There is no try.

#13 Carolinajohn63

Carolinajohn63
  • Topic Starter

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:53 AM

Posted 26 September 2008 - 08:11 PM

Go to quarantine in MBAM and select that file and use the restore button, be careful and don't restore anything else


OK I am not getting the pop up any more thanks so much!!!!

How do I prevent that from happening again??

#14 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:04:53 AM

Posted 26 September 2008 - 08:30 PM

You have to be careful with malware scanners, these guys are working hard trying to catch the bad stuff and leave the good stuff alone, it's an impossible job and they need our help

We run into this a lot with all programs, some are setup so you can't fix it. MBAM has the best options for that I have ever seen.

I am not sure the program Dell uses is even necessary, seems a little crazy to be encrypting on top of all the secure encrypting we already have.

Edited by DaChew, 26 September 2008 - 08:32 PM.

Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users