After using Bitdefender Still facing virus problems- Please Help.

star500k

Hello everyone,

I just downloaded and scanned the whole PC with deep scanning. But why BD didn't detect the following viruses on my PC and I am still facing virus problems?

1. When I open my computer, and click on C drive this message pop up.

[ Can not find ****** file "C:\MS32DLL.dll.vbs"]

To open the drive, I have to right click and select open or explore.

What kind of virus is this? How can I solve this problem?

2. When I open my C,D, and E drive I can see a folder named "System Volume Information". But when I try to click open this folder, it says, access denied! Is this the same virus as number 1.? Or a different virus? How can I delete this folder?

3. When I open some folder I can see a file named "desktop.ini". What kind of virus is this? How can I remove this virus?

Please help me... " />

AndreiASM

1. This could be because of a virus or some missing files. Update BD and make another deep scan.

2. "System Volume Information" is a system folder used by windows to store restore points and it is used by System Restore. You can't delete this folder.

3. "desktop.ini" is o configuration file, and you shouldn't delete it. It is probably a hidden file. If it's bothering you, go to

Tools -> Folder Options and then click on the "View" tab. Then check the "Do not show hidden files and folders." radio button and check the "Hide protected Operating System Files. (Recomanded)" checkbox. This way, you won't see "desktop.ini" and "System Volume Information anymore".

star500k

Hi AndreiASM,

Thanks alot for your help.

1. This morning when I deleted some files from those drives and restarted computer, it was solved.

2. Yes, I know this before but just forgot yesterday.

3. This file "desktop.ini" is seen in many folders while this file should be only in C: drive right? This is a virus as this file "desktop.ini" is created whenever you create a folder. Please help...

AndreiASM

Usually, this file is created by Windows. Since it is a configuration file, it isn't executable and it isn't a ******, desktop.ini is harmles. However, post the content of the file, I'll take a look. Ini files are used by many applications to store various configurations, options etc.

vladx

It's very improbable that desktop.ini contains a virus, my guess is that a virus contained in other file(s) that relpicates desktop.ini in every folder like you said.It's quite possible that the virus is a Visual Basic ******.Did you run something like this lately?

AndreiASM

Try and create some new folders and see if desktop.ini appears in them. It could have been left there by some previous viruses you had.

vlad

desktop.ini is the file in which folder settings are saved individually for each folder. Some folders are already customized when you install Windows (such as Contril Panel, Start Menu, etc.), and you may have customized others yourself. Unless it has a double extension (i.e. another extension after .ini, which would be hidden with default explorer settings, it is harmless.

MS32DLL.dll.vbs is most likely malware, and it is an excellent example of a double extension. Some googling yielded this: http://howto.redcomputer.net/windows/hacked_by_godzilla.php (note: I am in no way affiliated with that site, it's just something I picked up on Google); it may help. If you can find this file, please send it for analysis.

miekiemoes

It's indeed one of these flashdrive infections.

More info here.

So make sure Bitdefender also removes the infected files from your flashdrive(s) - this to prevent you're infecting other computers with it.

Also look in the registry if there are still references to the "MS32DLL.dll.vbs". Especially under the "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{random CLSID}\Shell\AutoRun\command" key.

Normally the valuedata "C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript.exe MS32DLL.dll.vbs" should still be present in there. Delete that value.

Then you won't get the errors anymore when you want to doubleclick your flashdrive.