General discussion

Locked

file gets rename

By cn_sanjeev2000 ·
Hi,
in my office one of the user has windows 98 system,its giving rundll32.exe error as usaual i copied that file from another pc it could work for 2 to 3 min then it gives same error so i cleaned virus, ran sfc & i even reinstalled os.
But no use because after 2-3 min it is renaming rundll32.exe to run32.exe.
please give any solution.
thanks in advance

This conversation is currently closed to new comments.

7 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

file gets rename

by hinrgman In reply to file gets rename

Sounds like you have a boot sector virus, you need to run your virus scan from a clean floppy or clean boot cd and then reinstall the OS.

Collapse -

file gets rename

by cn_sanjeev2000 In reply to file gets rename

The question was auto-closed by TechRepublic

Collapse -

file gets rename

by Gigelul In reply to file gets rename

Download <FixKlez.exe> from Symantec site and put it on a clean/new diskette. Run it from diskette (write protected).

Collapse -

file gets rename

by cn_sanjeev2000 In reply to file gets rename

The question was auto-closed by TechRepublic

Collapse -

file gets rename

by pschuvie In reply to file gets rename

What you're up against is the sircam trojan/virus

And what you have been missing is that this virus can be in your Network, possibly on a network share and each time you get it off the machine it just replicates itself.

You need to go over the detailed description from the vendor of your particular anti virus software and understand the details of just all the places that this menace hides.

One big step is to take the unit off the network and scan it as a stand alone. Use not only the scan but the specific fix tool from the antivirus vendor.

Change the scan pattern to scan ALL files without extension limitation. This file can arrive/reside in a double extension ender and you may be missing it. The ALL files will increase the length of time of scan but it needs to happen.

Scan, again with all files, any floppies, including boot floppies associated, used by, sitting next to, or brought to this machine.

DO NOT reconnect this machine to the network before you can get it up and running without the problem recurring for a minimum of 2 hours. That way you should know if your problem is just local, but I doubt it. Use the machine, have it do stuff, and if it remains stable then you can reconnect.

Once you reconnect if the problem recurs, particularly within the first hour or so, then you have the virus in your Network, most likely one or more NT servers, it does not seem to affect them the same, they just harbor it. Probably either the client unit share file or the Mail server file. If it is in the network then full scanning, deep scanning network wide is called for.

This can be a bugger to get out. Not impossible just tedious.

Hope that helps.

Collapse -

file gets rename

by cn_sanjeev2000 In reply to file gets rename

The question was auto-closed by TechRepublic

Collapse -

file gets rename

by cn_sanjeev2000 In reply to file gets rename

This question was auto closed due to inactivity

Back to Windows Forum
7 total posts (Page 1 of 1)  

Related Discussions

Operating Systems Forums