Help!!! strange error message??? - Footslog's Web Boards

For information on how to deal with, and protect your computer, please go down to the bottom of the help desk to the archive section (main page). From there select how to combat Spyware, in this archive there are many tools, which will help you combat this problem. Problems concerning the Windows XP Operating System should go in this forum.

Email This Page to Someone

Footslog's Web Boards

Windows XP

Help!!! strange error message???

profile | register | preferences | faq | search

next newest topic | next oldest topic

Author	Topic: Help!!! strange error message???
Josh1 Administrator	posted October 31, 2003 12:16 AM This topic has been moved here. http://www.footslog.com/board/Forum18/HTML/000211.html ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ [This message has been edited by Josh1 (edited October 31, 2003).] IP: Logged
Josh1 Administrator	posted October 27, 2003 06:30 PM Paula, I emailed you so whenever you get the chance look at it so we can help you. ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ My Techno music can be heard here http://www.ejay.co.uk/artist/YSJosh www.compsol.8k.com www.footslog.com IP: Logged
Paula518 Member	posted October 27, 2003 04:26 PM no prob IP: Logged
Josh1 Administrator	posted October 27, 2003 04:02 PM Hi Paula, I don’t mean to inconvenience you, but could send the email you sent to the footslog address to webpremier@msn.com thanks ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ My Techno music can be heard here http://www.ejay.co.uk/artist/YSJosh www.compsol.8k.com www.footslog.com IP: Logged
Paula518 Member	posted October 27, 2003 02:53 PM Hi josh and wedor, I sent a copy and paste pf the msnvc error to your footslog e-mail.. Thanks Paula IP: Logged
Paula518 Member	posted October 27, 2003 02:48 PM Hi Josh I can't think of anything I loaded before this problem started..Yes I am sure it is a a MSNVC message I am looking right at it.. your page will not allow me to paste. The paste option is greyed out..Can I send it to you via e-mail?? IP: Logged
wedor Moderator	posted October 26, 2003 06:45 AM Here's the question, are you 100% sure that the message says MSNVC? the only reference to the file is from the virus, if the spelling is off we need to know as it makes all the difference in the world. The runtime 6 overflow portion refers to a Visual Basic error in a program. How long have you had this message? can you copy and paste the entire message here? [This message has been edited by wedor (edited October 26, 2003).] IP: Logged
Josh1 Administrator	posted October 25, 2003 05:54 PM Paula, okay I am going to see what else I can find. Did you install something prior to this happening? ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ My Techno music can be heard here http://www.ejay.co.uk/artist/YSJosh www.compsol.8k.com www.footslog.com IP: Logged
Paula518 Member	posted October 25, 2003 04:12 PM Josh, I tried all the steps. And none of those files were up there...So we are back to square one....Any other suggestions??? Thanks, Paula IP: Logged
Josh1 Administrator	posted October 22, 2003 09:46 PM Hi Paula, okay first thing we need to do, is backup the registry, so in case something does go wrong, we can fall back on one that works. What we can do is create a system restore point, to do this, go to start-all programs- accessories-system tools-system restore then from there you want to select create a restore point, then hit next, then it will ask you what you want to name it this can be any name, then hit create and your system restore point will be made. So when we go into the registry and something happens, we can fall back on that restore point, and it will be as if we never messed with the registry at all. Onto the registry. Go to start-run then type regedit, now we are looking at the registry, now navigate to this key "HKEY_LOCAL_MACHINE>Software>Microsoft> Windows>CurrentVersion>Run now make sure you have the run folder highlighted, and then look on the right side of the window, do you see this "svchost ="c:\admagic.exe" If so then highlight it and delete it. Now going back to the left side look for this "HKEY_CURRENT_USER\CLSID\{CD03FC97-2C85-4714-A5FF-37821781BE8C}" Then in the same pane right click on the subkey and hit delete. "Now look for these keys "HKEY_CURRENT_USER\TypeLib\{422FB26A-0DB0-4D4C-A65F-91034971476B} " "HKEY_CURRENT_USER\Winner.WinnerObject" "HKEY_CURRENT_USER\Winner.WinnerObject.1" "HKEY_CURRENT_USER\Interface\{119D8864-53C2-4681-8D29-4F1E2A911DA1}" And do the same for all of these keys. After that is done exit the registry editor, find and delete the files I told you to delete. Then go to start-run-find and search for the files, "RAW32X.EXE, SM.DLL" if found delete them. Then restart windows, should you have a problem while editing the registry you can always fall back to the restore point that was created. To do this reboot windows, as soon as your computer boots, press F8 this will bring you to the advanced boot menu, from there go to safe mode. Once in safe mode, go to start-al programs-accessories-systemtools-system restore, then go to restore my computer from an earlier time. then click on the restore point you made then the system will be restored. Let us know how it goes. ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ My Techno music can be heard here http://www.ejay.co.uk/artist/YSJosh www.compsol.8k.com www.footslog.com IP: Logged
Paula518 Member	posted October 22, 2003 07:06 PM Hi Josh, I am not that computer savvy...But if you give me the steps I am willing to try anything to get this bug gone ...Thanks Paula IP: Logged
Josh1 Administrator	posted October 22, 2003 05:19 PM Paula, see if these files are on your computer. C:\admagic.exe, C:\test.txt or SNVC, go to start find and then input the file names, make sure you have the search criteria set to all files and folders. And how comfortable are you with going in the registry and possibly deleting entries? ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ My Techno music can be heard here http://www.ejay.co.uk/artist/YSJosh www.compsol.8k.com www.footslog.com IP: Logged
Paula518 Member	posted October 22, 2003 05:01 PM Hi Josh, I tried the housecall and again it said I had no virus problem I also installed and and ran the adaware and spybot and still I am getting the same error showing up at start up...I even went into the task manager and checked for the file WORM_SMIBAG.A. I am lost....What else can I do??? Thanks for all you knowledge....Paula IP: Logged
Josh1 Administrator	posted October 21, 2003 12:02 PM Okay this is what me and Mark both think Paula, you may have a virus, but the virus failed to install, that’s why you are getting the run time error message. As I said a run time error is, the programs code is corrupted. So maybe a virus somehow got on your computer, you restarted your computer, the virus tried to infect your computer, but the code that needed to run got corrupted, and that is why you get the message at startup. That is not good, because the file is still on your computer, and you really need to get it off. So what we can do is try and manually remove it. Now this is how to manually remove the virus, MANUAL REMOVAL INSTRUCTIONS Identifying the Malware Program To remove this malware, first identify the malware program. 1. Scan your system with your Trend Micro antivirus product. 2. NOTE all files detected as WORM_SMIBAG.A. Trend Micro customers need to download the latest pattern file before scanning their system. Other Internet users may use Housecall, Trend Micro’s free online virus scanner. Terminating the Malware Program This procedure terminates the running malware process from memory. You will need the name(s) of the file(s) detected earlier. 1. Open Windows Task Manager. On Windows 95/98/ME systems, press CTRL+ALT+DELETE On Windows NT/2000/XP systems, press CTRL+SHIFT+ESC, then click the Processes tab. 2. In the list of running programs, locate the malware file or files detected earlier. 3. Select one of the detected files, then press either the End Task or the End Process button, depending on the version of Windows on your system. 4. Do the same for all detected malware files in the list of running processes. 5. To check if the malware process has been terminated, close Task Manager, and then open it again. 6. Close Task Manager. NOTE: On systems running Windows 95/98/ME, Task Manager may not show certain processes. You may use a third party process viewer to terminate the malware process. Otherwise, continue with the next procedure, noting additional instructions. Removing Autostart Entries from the Registry Removing autostart entries from the registry prevents the malware from executing during startup. To remove the malware autostart entries: 1. Open Registry Editor. To do this, click Start>Run, type Regedit, then press Enter. 2. In the left panel, double-click the following: HKEY_LOCAL_MACHINE>Software>Microsoft> Windows>CurrentVersion>Run 3. In the right panel, locate and delete the entry or entries: svchost = "c:\admagic.exe" NOTE: If you were not able to terminate the malware process from memory as described in the previous procedure, restart your system. Removing Other Malware Entries from the Registry 1. Still in the left panel, double-click the following: HKEY_CURRENT_USER\CLSID\{CD03FC97-2C85-4714-A5FF-37821781BE8C} 2. Still in the same pane, right-click on the said subkey, and choose “Delete”. 3. Do the same for the following registry keys: HKEY_CURRENT_USER\TypeLib\{422FB26A-0DB0-4D4C-A65F-91034971476B} HKEY_CURRENT_USER\Winner.WinnerObject HKEY_CURRENT_USER\Winner.WinnerObject.1 HKEY_CURRENT_USER\Interface\{119D8864-53C2-4681-8D29-4F1E2A911DA1} 4. Close Registry Editor Deleting Dropped Files To delete the dropped files: 1. Open Windows Explorer and go to drive C. 2. Locate and delete the following files. C:\admagic.exe C:\TEST.TXT 3. Close Windows Explorer. 4. Right-click Start then click Search… or Find… depending on your version of Windows. 5. In the Named input box, type: RAW32X.EXE SM.DLL 6. In the Look In drop-down list, select the drive which contains Windows, then press Enter. 7. Once located, select the file then hit Delete. Now remember you may or may not have to remove anything, because the virus may not be in your registry. I believe that it is on your computer, however it cannot run because of the corrupt code. Run AdAware and Spybot and try the manual remove and see if that works. ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ My Techno music can be heard here http://www.ejay.co.uk/artist/YSJosh www.compsol.8k.com www.footslog.com IP: Logged
Josh1 Administrator	posted October 21, 2003 10:56 AM Hi Paula, that is good, now did you download Adaware and Spybot? If so did you run them both? Try that and see what happens. ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ My Techno music can be heard here http://www.ejay.co.uk/artist/YSJosh www.compsol.8k.com www.footslog.com IP: Logged
Paula518 Member	posted October 20, 2003 08:39 PM hi josh did the house call virus check it said everything was fine NO VIRUS detected!!!! THANK GOODNESS... Now what do I do???? IP: Logged
Josh1 Administrator	posted October 19, 2003 12:13 PM Hi Paula, I am not certain, but you may be infected with a virus. I need you to go here and scan your pc, register as a home user and then scan here, http://housecall.trendmicro.com/ The reason I say that is because if you go to www.yahoo.com and you look up MSNVC most of the results are going to be SMB that is a virus, the details can be found here http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_SMIBAG.A&VSect=T A runtime error means that the code in that particular program is wrong and cannot run properly. I want to make sure that we are not dealing with a virus, however if we are then we can take the necessary steps to eliminate it. In addition to that, you may want to download Adaware, and Spybot. Because this virus is malware and spyware and or Adaware should pick that up and delete the files, however we still need to run the virus scan. Adaware is here, http://download.com.com/3000-2144-10214379.html?tag=lst-0-1 Spybot is here, http://download.com.com/3000-2144-10194058.html?tag=lst-0-1 Let us know what happens. ------------------ To every Problem there is a Solution. ------------------------ I love Ciela ------------------------ My Techno music can be heard here http://www.ejay.co.uk/artist/YSJosh www.compsol.8k.com www.footslog.com IP: Logged
Paula518 Member	posted October 19, 2003 11:33 AM HI Josh, Every time I boot up my computer I keep getting this error box: MSNVC run-time error'6' verflow... I just push ok and go on with my day...Do you have any idea what this is???Thanks Paula IP: Logged

All times are CT (US)	next newest topic \| next oldest topic
Administrative Options: Close Topic \| Archive/Move \| Delete Topic
	Hop to:

Contact Us | Footslog Home

The information presented on FootsloG.com is copyrighted as a collective work. FootsloG.com is free for personal use (non-commercial). Any other use FootsloG.com, including copying or reproducing any portion of this web site is strictly prohibited without the express written consent of FootsloG.com. If you have any questions about the usage term please contact us via email: webmaster@footslog.com.

Problems, Knowledge, and Power, powered by intelligent Computing Solutions