Strange Virus...
<div class="IPBDescription">Anybody heard of this?</div> Well I turned my computer on about half an hour ago to see some strange things happening. First, instead of the win-xp home log in screen(big blue one, shows each users picture etc.) instead there was just a small login window that allowed you to pick user/guest and put in a password. First I ignored this because stuff just happens. But then when the computer finished loading even more stuff starting happening, I got about 5 or 6 of these error messages about diffrent processes.
Nmain.exe Bad image
The application or dll c:/winnt/system32/msvcp60.dll is not a valid windows image. Please check this against your installation disk.
That was only one of them, it gave the same error for ccapp and a few others.
So I restarted my computer thinking it was just a 1 time thing. Computer boots up, same weird login screen(makes me think of the ones at school, except the background was just black), and same errors. Suspecting a virus I tryed to power up norton, game the the error listed above again. Tried norton firewall(no comment) and it gave me same error, also each time after clicking okay it said this:
Symantec integrator could not intialize the current frame class. Please make sure you did not directly run the integrator.
A bit angered(had my share of viruses) I search google for "not valid windows image nmain.exe" and got several things it could possibly be,
Bugbear@mm, win32/nugosh-a. Only problem is I tryed to locate the file and registry entire that it should have created and they didnt exist <!--emo&???--><img src='http://www.unknownworlds.com/forums/html/emoticons/confused.gif' border='0' style='vertical-align:middle' alt='confused.gif'><!--endemo-->
Also they are supposed to be spread by email, yet I haven't opened any emails today or anything. Both of the viruses were characterized by it killing processes whenever they start... Anybody have any idea what this is?
Nmain.exe Bad image
The application or dll c:/winnt/system32/msvcp60.dll is not a valid windows image. Please check this against your installation disk.
That was only one of them, it gave the same error for ccapp and a few others.
So I restarted my computer thinking it was just a 1 time thing. Computer boots up, same weird login screen(makes me think of the ones at school, except the background was just black), and same errors. Suspecting a virus I tryed to power up norton, game the the error listed above again. Tried norton firewall(no comment) and it gave me same error, also each time after clicking okay it said this:
Symantec integrator could not intialize the current frame class. Please make sure you did not directly run the integrator.
A bit angered(had my share of viruses) I search google for "not valid windows image nmain.exe" and got several things it could possibly be,
Bugbear@mm, win32/nugosh-a. Only problem is I tryed to locate the file and registry entire that it should have created and they didnt exist <!--emo&???--><img src='http://www.unknownworlds.com/forums/html/emoticons/confused.gif' border='0' style='vertical-align:middle' alt='confused.gif'><!--endemo-->
Also they are supposed to be spread by email, yet I haven't opened any emails today or anything. Both of the viruses were characterized by it killing processes whenever they start... Anybody have any idea what this is?
Comments
If that doesn't work, try giving us a list of your startup programs (not in start menu, either from msconfig or a 3rd party tool like is included in spybot search and destroy), and stuff like that. Or, barring telling us, you can just google anything that is a mystery to you (funky process names and whatnot).
The trouble with the virus scanner is interesting, but could be any number of things. Plenty of virii screw with mcafee and norton software, but they're also very integrated into the lower levels of the OS, so they also get strange side effects from errors in other places.
Though it's unlikely that it'll be able to clean it away, with how bad that infection sounds. Just goes to show... don't download stuff from websites you don't trust. And especially don't download or run executables without tossing 'em through your virus scanner first.
How so? Why would you say that? If I had multiple virus scanners, I wouldn't run them both at one time. But then I guess multiple virus scanners would be good in some way because some people say that McAfee is better than Norton and all that hootinanny. Never hurts to test the waters.
First, I replaced the msvcp60.dll file, and everything started working great. The virus scanner and everything was allowed to boot up. So I did a system scan and nothing came up. So just to make sure I restarted my computer to see if it would re-infect the new file even though the scanner didn't come up with anything. Then things got really bad. The computer started to boot, but after going through the memory and hardrive checks, the sytem restarted...After it finshed checking that time, it would ask me if I wanted to start in safe mode/normal/safe+cmd prompt etc. Each time I tryed one computer would just restart again. So I whipped out my windows cd and reformatted.
Now on to some other questions.
The drive is completely clear right now, I haven't installed the OS on it yet. Now I ahve actually been meaning to set up a master/slave HD array for while and I figure this would be a good opportunity. I have a smal 9.1 gb hardrive at 5400rpm and the one I just formatted at 40 gb and either 5400 or probably 7200 rpm(came with a cheap computer so probably 5400). What I was picturing doing is having the OS on the 9.1 hardrive and having that set as master and then keep all my other files on the 40gb and ahve that set as slave. Because I read somwhere that not having your os and programs on the same hardrive can make things run faster. So how would I do this/would this be a good idea? Im using a soyo p4x400 plat. ed motherboard and have the Windows xp HE cd. I think the 9.1 gb is kinda old(I dont think they make them that size anymore). So what do I have to do to make it work? I know there are jumpers on the back of each one to set whether they are master or slave, so do I just arrange those then hook the two together with an IDE cable then hook it into the motherboard? So would this be a good idea or should I just keep the same setup as before aka 40 gb was only HD
Is this a good idea? Having the 9 gb as master and 40 gb as slave? And I looked and my 40 gb is 7200 rpm, so would it be bad if the Master was slower then the slave?
-------
running two realtime "on-access scan" virusscanners will **** up your computer, as they will conflict and start an endless loop of trying to scan one another. having multiple installed is not bad so long as you dont use on access scanning.
-----
to use two drives, set one to master and one to slave using the jumpers on the back (<a href='http://www.atmarkit.co.jp/fpc/special/hdd_replace/hdd_jumper_dtla_s.jpg' target='_blank'>diagram</a> 1: jumpers, 2: a sample jumper legend, youll need the correct settings for your hdd models) then plug them each into a free plug on the same ribbon cable. each ribbon cable can have a master and a slave, you can split them up any way you like, just dont ahve two masters or two slaves on either one.
having the operating system on a separate drive can really speed things up, as the computer will be using each one independantly, however if the 9.1 is 5400 and the other is a 7200, you may see better performance just keeping the windows on the 7200 40gb, because it has better access times anyway!