system 32 errors

[RevGlenn]

I picked up a virus on Friday evening and worked hard to scrub it using NVT
Malware Remover. Since that time, when I reboot I get two error messages for
"windows\system32\msdsym.exe" and "windows\system32\msirela.exe". I can not
find a fix for either and any help would be appreciated. Since Friday,
everything I attempt to open brings up the info box asking which program I
would like to use open the requested application (solitare, word, excel, etc.)

 

[Randem]

Those entries seem to be references to the virus/malware/spyware that was
removed. You are not clean yet you seem to only removed the files not the
effects.

What did you use to remove the problem?

--
Randem Systems
Your Installation Specialist
The Top Inno Setup Script Generator
http://www.randem.com/innoscript.html
Find Out What Your VB Program is Really Doing
http://www.randem.com/rstools.html

 

[Elmo]

I picked up a virus on Friday evening and worked hard to scrub it using NVT
Malware Remover. Since that time, when I reboot I get two error messages for
"windows\system32\msdsym.exe" and "windows\system32\msirela.exe". I can not
find a fix for either and any help would be appreciated. Since Friday,
everything I attempt to open brings up the info box asking which program I
would like to use open the requested application (solitare, word, excel, etc.)

The malware was deleted by your a/v software, but the reference to the
file was not removed from the registry.

Click Start, Run, type REGEDIT, click OK. Press the Home key, press F3,
type the name of the file into the search pane. Click "Find Next", and
when located, delete the reference to the file. Press F3 to continue
the search.

You can click File, Export, and save the entry to the Desktop. If you
remove it and there's a problem, double-click the .reg file you exported
to the Desktop and it'll be added to the registry again. You can create
a restore point before editing the registry too.

You could click Start, Run, type MSCONFIG, click OK, click the StartUp
tab, and deselect the item(s). When you restart the computer, you will
be warned that you're running in the Diagnostic mode; click to not alert
you again, and OK out. You won't see the message again. But I think
it's best to just remove the references from the registry.

 

[Elmo]

I picked up a virus on Friday evening and worked hard to scrub it using NVT
Malware Remover. Since that time, when I reboot I get two error messages for
"windows\system32\msdsym.exe" and "windows\system32\msirela.exe". I can not
find a fix for either and any help would be appreciated. Since Friday,
everything I attempt to open brings up the info box asking which program I
would like to use open the requested application (Solitaire, Word, Excel, etc.)

Fix the File Association for .lnk.
http://dougknox.com/xp/file_assoc.htm

 

[PA Bear [MS MVP]]

I suspect you've got (much) more work to do.

NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.

2. [WinXP ONLY!! =>] Run the Windows Live Safety Center's 'Protection' scan
(only!) in Safe Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums as well.**

If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.