continous warning message

[dechef]

hello
tohiba laptop / win XP / old symantec antivirus / son'n laws puter

I put myself out there by telling my son in law "no problem Ill fix it " SO ...
stupid thing keeps kicking up a warning box that winmm64.dll trogan horse ,infected .... thing is , it says no action taken , file unchanged
I have never seen this kind of thing before .and the window just keeps on running into the thousands . I know one of you people will set me straight on this and I offer my heartfelt thanks, although for the reasons stated I will have to take full credit for fixing his machine. thanks folks

[Deathhawk78]

Format. :(

[dechef]

that will really screw up my "family christmas" he is a young university proffessor and I never saw so much stuff on a lap top before. My life / alpha status is in jepordy and telling him , by the way all your work on that computer is about to get wiped out means he will definitely NOT pass the roast potatoes at dinner !
My talents are limited in the computer field, but should I not be able to remove the trogan IF i can identify the little bugger

[dbusguy]

Can't say I've had that exact one before but when I get a virus / trogan that won't go away with my antivirus, instead of spending hours trying, I have found i faster to just throw in the restore disc and install a fresh copy of windows (format). You can be surfing in a little over an hour. Always makes for a good weekend project. By Saturday night I'd be fully running with all my programs installed. A fresh install will speed up the computer. It's like getting a new computer in hours.

[Mindcore]

winmm64.dll is a trojan and not a windows file. Download SuperAntispyware and use that to attempt a clean. Doing this in Safe Mode is preferable.

I would highly suggest backing up personal files first before attempting this in the case Windows is totally corrupted. A scan of those personal files is highly recommended.

[dechef]

glad to see taht this place is as reliable and friendly as ever. I used to work the tv camera when The Computer Mechanics was on Rogers TV out of Newmarket. That was a while ago , but great memories,
I know that reformating is the route to go , BUT it is not my computer and in some wierd way I feel uncomfortable getting that personal with some one else's equipment

[Bogie]

You could also try Spyware Doctor edition.

Another alternative would be Avast Antivirus and schedule a boot scan. That way it can detect and clean without being in Windows.

[mander]

You could also try Spyware Doctor edition.

Another alternative would be Avast Antivirus and schedule a boot scan. That way it can detect and clean without being in Windows.

Agreed there Bogie. Have it clean without something like this hiding in the system restore. I dont see the need to format. Malewarebytes is also a very good one to use.

[Aristera]

Download and run Ccleaner (http://www.ccleaner.com/download) Not anti virus but it will help in the next few steps.
Download and run Malware Bytes AntiMalware (http://www.malwarebytes.org/) Once installed be sure to run an update first.
Usually at this point your clean but there are some buggers to get rid of.
You can also try SuperAntispyware (http://www.superantispyware.com/)

Make sure you have some sort of antivirus running, recommended is AVG (http://free.avg.com/ww-en/homepage) or Avast (http://www.avast.com/eng/programs.html). Make sure they are updated then run a full scan. Running Ccleaner first will save you possibly hours so your not scanning thousands of temp files.

Finally right click on My Computer and select properties. Click the system restore tab and click "Turn off System Restore" This will delete all old points preventing the viruses from restoring them selves. Once it's done processing, clear the check box to turn it back on and making a new point. Empty the recycling bin if there is anything in there and reboot.

You might not need to do everything I listed there but it sure covers a lot of areas.

[dechef]

BAH HUMBUG i was planning on sitting in my lazy boy all weekend having my two daughter's men competing against each other to be "the favourite" and now i have myself jammed in a corner struggling to save face and cling to my tentative spot as alpha male. who knew computers could have such far reaching effects on humans ....
I thank you one and all for the invaluable advice and may you all have a very happy and joyfull time in the coming days. ( that's politicaly correct speak for MERRY CHRISTMAS )

[Buka12]

find this for you
http://www.superantispyware.com/malwarefiles/WINMM64.DLL.html

a good program to keep.

[Buka12]

more help on this site:
http://forum.avira.com/wbb/index.php?page=Thread&postID=857224

while your computer is scanning, you can be with the family :)

[dechef]

OK now I am in bigger trouble ... I ran the Avast boot scan and it found a couple of instances of keagol and suggested i delet them which i did.
after that , on re-boot i got all kinds of ***** component not found messages that also said that "netpgua.dll" was missing and needs to be replaced , however i googled it and can not find out wht it is. warning box pops up every few seconds . Anyone know what this might be and how to resolve it. The sharks are circiling and the Tim card won't cut it if i toasted his work computer ....

[linuxguru]

Run msconfig and look at applications in the startup tab. Disable unfamiliar ones one at a time and reboot each time to see what happens.

[Bogie]

Did you turn off the Windows Restore function?

Did you try to boot to Last Known Good Configuration (http://support.microsoft.com/kb/307852)?

[dechef]

i have gone back to restore a couple of times but i did NOT turn off the retore function because my understanding is that it will wipe out ALL restores points so i might end up in worse shape than it is now. when all else fails i guess that will be the last resort, but a re-install of xp would actually be easier and less risky. I am desperately trying to avoid a re-format, two of those programs have to stay one way or another
in the meantime the clam chowder nad ribs are ready,m just gonna cook the wings... at least in the kitchen i know what i'm doing !

[Buka12]

makes me wonder if you are a male or a female................:d

[dechef]

OK i live in the woods , literally , i run a hunting and fishing lodge north of Elliot lake, but i am also a professional chef, you should see my dinner spread, wings two kinds of ribs clamchowder, fresh fries, baked vegtables... and ALL preped by me , no frozen crap, well the lakes frozen but that is to be expected.... tomorrow is a whole new menu, i cook more when i'm frustrated ! and male

[Buka12]

we are all coming over for dinner :). how is the computer now??

[Mouse]

Screw the computer, we are coming up for dinner. :)

[frostyone]

... I ran the Avast boot scan and it found a couple of instances of keagol and suggested i delet them which i did.
after that , on re-boot i got all kinds of ***** component not found messages that also said that "netpgua.dll" was missing ....


With zero google hits on "netpgua.dll" ,odds are it's malware.

It seems you've only partially cleaned the system.
The malware is still there and is frantically looking for the now missing components.
Hence the warnings about missing dlls.

Continue cleaning the system.

Anti-viruses don't always do the best job of cleaning.

Follow Aristera's advice above.
Remember to update MBAM.

[dechef]

heh , go to wildernesslodge.ca thats me ! I'll make a real good deal for anyone who mentions this site ... seriously i will
computer is still screwed up.I think i'll open it up and see if i can "see" any problems

[Buka12]

so, your computer is cooked??

[dechef]

not so much the computer is cooked , more like my goose is cooked, the son in laws are whispering and glancing at me and then giggling ! they don't know the days of watching a picture load pixel by pixel across the screen, anticipating what she would look like ....

[dechef]

YIPPPEEE i got the bugger fixed , thanks to all your help and suggestions. ii cleaned everything up , ran and re-ran several cleaning /antivirus/antispye ware things and still had the boxes popping up. the silver bullet was
sfc /scannow (only 1 space). in the command line. new to me but it has solved the issues and it appears to be fine now . thanks again