Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Result of removal of trojan WIN31.dll.vbs


  • Please log in to reply
7 replies to this topic

#1 tacarr

tacarr

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:23 AM

Posted 29 November 2008 - 12:39 PM

After removal of the trojan WIN31.dll.vbs when attempting to open C drive from My Computer the following message is shown "Can not find Script File "C:\WIN31.dll.vbs"". The same happens when trying to access external HDDs as well. Right click 'Open' is the command required.

Computer: ROCK Xtreme
Operating System: Windows XP Professional SP3
Antivrus: BitDefender Internet Security 2009

Can anyone help with this. I have tried a Google search but only came up with an Italian forum that did not translate well enough to be understood

BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:12:23 PM

Posted 29 November 2008 - 12:51 PM

I'd suggest trying the free program Autoruns ( http://www.microsoft.com/technet/sysintern...s/Autoruns.mspx ) and looking for any references to the WIN31.dll.vbs file. Disable (don't delete) those entries to see if that fixes it.
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 tacarr

tacarr
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:23 AM

Posted 29 November 2008 - 01:14 PM

Thanks for your reply. I have tried Autoruns but with out success. It could find no reference to offending item.

#4 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:12:23 PM

Posted 29 November 2008 - 01:35 PM

If you used the search function, try searching for variations such as WIN31 or WIN32.dll
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#5 tacarr

tacarr
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:23 AM

Posted 29 November 2008 - 06:07 PM

Have tried 'Find' function with variations eg 'vbs' but still no luck

#6 hamluis

hamluis

    Moderator


  • Moderator
  • 55,246 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:11:23 AM

Posted 29 November 2008 - 07:02 PM

Using Autoruns...most startup items are on the Logon tab (except for all the Microsoft items, drivers, etc.).

That's where I would look.

Louis

#7 tacarr

tacarr
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:08:23 AM

Posted 29 November 2008 - 09:24 PM

Thanks for your input Louis. Have tried Autoruns but to no avail

#8 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,089 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:12:23 PM

Posted 30 November 2008 - 08:02 AM

If you can't locate it in Autoruns, then I'd suggest:

1 - running SFC.EXE /SCANNOW from the Run dialog: http://www.bleepingcomputer.com/forums/t/43051/how-to-use-sfcexe-to-repair-system-files/
2 - a repair install of Windows XP. If you have IE7 installed, read this first: http://support.microsoft.com/?kbid=917964
Then, the instructions for the repair install are here: http://www.michaelstevenstech.com/XPrepairinstall.htm
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users