Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Not Valid Win32 Application


  • Please log in to reply
3 replies to this topic

#1 noales3

noales3

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:04 AM

Posted 30 September 2008 - 04:54 PM

A friend gave me this Acer 9420 with XP full of virus and malware to try to save it. I run Malwarebytes with success and removed a rogue antivirus Xp 2008. But the antivirus I tried to install later all gave this error or just don't work. Also Combofix and HJT give the same error. Also tried running CCleaner but no improve. Any suggestion? Thank you in advance.

BC AdBot (Login to Remove)

 


#2 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:08:04 AM

Posted 30 September 2008 - 06:30 PM

:thumbsup: Not quite sure what you may have been doing with the tools you mention as both combofix and HJT are tools to be run only under the direction OF a Trained Expert :flowers:

can you kindly rerun run a scan with malawarebytes instruction are here ; update the definitions http://www.bleepingcomputer.com/forums/ind...st&p=959453

and let the members see what may be going on and where to try next for you
please post the report for examination

of interest, has the comp got SP2 installed and what other basic protection

But the antivirus I tried to install later all gave this error or just don't work.

??which one? and , to your knowledge what WAS the installed antivirus program on it ?( I guess it did have one?)

#3 noales3

noales3
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:04 AM

Posted 01 October 2008 - 05:22 PM

:thumbsup: Hi Ruby1. Thank you for your quick answer. I just downloaded Combofix and HJT and tested if they work in case I was advised to use them.
Automatic actualisation was active and it seems that the OS, XP Media Center Ver 2002 SP-2, is updated.
My friend tried to install Mcafee but it didn’t work (too late…)
Today I have run some online scans and it seems that the PC is a bit cleaner now.
This is the MBAM report (Sorry it is a Spanish version):

Malwarebytes' Anti-Malware 1.28
Versión de la Base de Datos: 1226
Windows 5.1.2600 Service Pack 2

02/10/2008 0:05:38
mbam-log-2008-10-02 (00-05-38).txt

Tipo de examen : Examen Rápido
Objetos examinados: 56986
Tiempo transcurrido: 34 minute(s), 37 second(s)

Procesos en Memoria Infectados: 0
Módulos en Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 1
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 1
Ficheros Infectados: 0

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)

Valores del Registro Infectados:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\rhc32ej0er4a (Rogue.AntivirusXP2008) -> Quarantined and deleted successfully.

Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)

Carpetas Infectadas:
C:\WINDOWS\system32\drivers\downld (Trojan.Agent) -> Quarantined and deleted successfully.

Ficheros Infectados:
(No se han detectado elementos maliciosos)

#4 ruby1

ruby1

    a forum member


  • Members
  • 2,375 posts
  • OFFLINE
  •  
  • Local time:08:04 AM

Posted 02 October 2008 - 01:09 PM

What if any antivirus program IS on there ?


See if it will let you run an on line scan from Trend

http://housecall.trendmicro.com/uk/
select your country from the menue available; then when the program starts do scroll down the page a wee bit to see the instructions and get the program fully loaded with the definitions ; you may wish to select the autoclean option .

Also,can you try both of these in English version?
superantispyware
http://www.bleepingcomputer.com/forums/ind...st&p=959604

and the malawarebytes
http://www.bleepingcomputer.com/forums/ind...st&p=959453




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users