Virus or Trojan

[Guest]

Hi Guys,
Our computer at home recently has obtained a Virus or Trojan, it is called devldr32.exe and 'Norton' can't even find it as a virus, 'Spybot' can't find it as malware or spyware, and neither can 'a2' all of these have the latest patterns and program files as well but they still can't find it. devldr32.exe makes the Start icon not even work on my bro's profile, and in the other profiles the Start icon can open but the expandable sections like 'All Programs' doesn't open. I 'm running XP Pro. Can you please tell me of how I can get rid of it. Because it is one of those files that says that it cannot be deleted because it is either full or write protected! Thanks,
Cameron

 

[Michael D. Alligood]

devldr32.exe is a process that runs solely on Windows 2000 and XP. It seems
to be crucial to the audio input, the Creative Mixer, the PlayCenter, and
the AudioHQ application. The file was created by Creative Technology Ltd..

The devldr32.exe belongs to the soundblaster drivers included with win xp.
Their is a bug in them which prevents to shutdown the devldr32.exe correctly
during the shutdown procedure. If you are running RC1 of XP, use "windows
update" (found under Start --> Programs) to install the new soundblaster
drivers provided by Microsoft. This will fix the problem...



If you can not remove devldr32.exe (because you can not locate it, or it is
in use), download Anti-Spy.Info. This program can kill the process, delete
or quarantine this file, or just list all security related information about
this file and all other running background processes.

Note: Any malware can be named anything - so you should check where the
files of the running processes are located on your disk. If a
"non-Microsoft" .exe file is located in the C:\Windows or
C:\Windows\System32 folder, then there is a high risk for a virus, spyware,
trojan or worm infection! Check it out!




--
Best of luck!

Michael D. Alligood
MCSA, MCP, CCNA, A+,
Network+, i-Net+, CIW A, CIW CI

Hi Guys,
Our computer at home recently has obtained a Virus or Trojan, it is called

devldr32.exe and 'Norton' can't even find it as a virus, 'Spybot' can't
find it as malware or spyware, and neither can 'a2' all of these have the
latest patterns and program files as well but they still can't find it.
devldr32.exe makes the Start icon not even work on my bro's profile, and in
the other profiles the Start icon can open but the expandable sections like
'All Programs' doesn't open. I 'm running XP Pro. Can you please tell me of
how I can get rid of it. Because it is one of those files that says that it
cannot be deleted because it is either full or write protected! Thanks,

 

[Guest]

Hi Michael,
Thanks, I'll give that a try.
Pygmygod

 

[Guest]

Hi,
I went to the Windows Update and then drivers but there wasn't anything in
there about Soundblaster drivers, there was only modem, monitor, and network
card drivers. Does that mean that the devldr32.exe I have is a Trojan? I got
Adaware and updated that but it didn't find anything to do with the Trojan, I
already had Spybot and that didn't find anything either.
Thanx

 

[Guest]

Hi Michael,
I have a list of the .exe files that where in the task manager on the family
computer but not on mine. Can you please tell me if any of them are suspected
Trojans, Malware etc.
ALG.exe
CTFMON.exe
DEVLDR32.exe (someone at MVP said that this one is for soundblaster drivers
and told me to go to Windows Update but they weren't there, there was only
drivers for monitor, network card, modem.)
NVSVC32.exe
RUNDLL32.exe

Thanks

 

[Colin Cogle]

None of those are viruses. ALG.exe is the Application Layer Gateway
service. CTFMON.exe is Windows' CTF Loader. NVSVC32.exe is the Norton
Auto-Protect service executable, and RUNDLL32.exe runs DLL's as
applications. All of those are good.

And when replying to a message, POST IT IN THE SAME THREAD!!! Otherwise,
we lose track of what you write and it just makes a mess of the newsgroup.

 

[Colin Cogle]

And when replying to a message, POST IT IN THE SAME THREAD!!! Otherwise,
we lose track of what you write and it just makes a mess of the newsgroup.

Never mind. You are in the same thread. My newsreader's just out of
whack. Sorry, everything's good.

 

[Guest]

Tut Tut Colin...Theres no need to shout, especially when you are wrong. I
have found some info about changing it in the registry to fix the "start"
button, so I'll try that tonight and post to tell you if it's fixed or not.
P.S Apology accepted.
Thanks Colin

 

[Guest]

Hi Colin,
I have fixed the problem, I just ran a Repair over Windows.
Thanks anyway.
Cameron