Computer Virus

[Oski]

Hi Folks,
My daughter's laptop (Dell Inspiron B130 about 4 years old running XP) seems to have a virus which gives an error message every few seconds:
"The application or DLL C:\WINDOWS\System 32\rovoyato.dll is not a valid Windows image. Please check this against your installation diskette."
It then gives the message repeatedly for different .exe (wiltray.exe, quickset.exe, rundll32.exe etc.) I cannot run Malaware Bytes on it as the virus allows the installation but not the running.
Anything I can do short of reinstalling XP?
Big thanks for any help!
Oski

 

[Theblackoutow]

Why not just run the Repair feature on the Windows XP disk?

 

[johnb35]

Why not just run the Repair feature on the Windows XP disk?

A repair install will not eradicate the infection.

Hi Folks,
My daughter's laptop (Dell Inspiron B130 about 4 years old running XP) seems to have a virus which gives an error message every few seconds:
"The application or DLL C:\WINDOWS\System 32\rovoyato.dll is not a valid Windows image. Please check this against your installation diskette."
It then gives the message repeatedly for different .exe (wiltray.exe, quickset.exe, rundll32.exe etc.) I cannot run Malaware Bytes on it as the virus allows the installation but not the running.
Anything I can do short of reinstalling XP?
Big thanks for any help!
Oski

Please do the following procedure.

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.

• Download this file here :
  
  http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  
  
• Then double click combofix.exe & follow the prompts.
• When finished, it shall produce a log for you. Post that log in your next reply

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.

In your next reply please post:

• The ComboFix log
• A fresh HiJackThis log
• An update on how your computer is running

 

[Theblackoutow]

Oh, it just sounded like they messed up one of windows files by themselves not a virus actually infecting each file.

 

[PerfessorGadget]

A repair install will not eradicate the infection.





Please do the following procedure.

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.

• Download this file here :
  
  http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  
  
• Then double click combofix.exe & follow the prompts.
• When finished, it shall produce a log for you. Post that log in your next reply

Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.

In your next reply please post:

• The ComboFix log
• A fresh HiJackThis log
• An update on how your computer is running

Is it OK to run ComboFix if you have an anti-virus program?

Oh, it just sounded like they messed up one of windows files by themselves not a virus actually infecting each file.

I had this same situation. It is a virus that is going around.

 

[johnb35]

Yes, its ok to run combofix when you have an antivirus program. It's only necessary to run combofix in certain situations but since we don't really know whats going on, that should be his first step, he can always run malwarebytes and hijackthis afterwards.