HELP!! Bloodhound.W32.2 Virus

elrME · 11-08-2005, 04:27 PM

Hi Everyone,

I quarrantined c:\windows\system\mspwl32.dll when prompted by Norton during bootup not knowing this is one of the most important files when WinME starts

Whether SafeMode or Normal, I cannot get to the point of having a Start Menu or anything else useful. Even a DOS interface would be better than this endless hanging during bootup

I'mm at a loss to know what else to try.

Any advice is extremely appreciated.

Yours truly,
--Eric

dai · 11-09-2005, 12:23 PM

follow greyknights instructions here and the experts will help you
http://www.greyknight17.com/spyware.htm

elrME · 11-09-2005, 03:57 PM

Dai,

Thank you for this excellent resource. Scanned thru it for an initial overview. Maybe I missed something but I don't see how it provides a way to troubleshoot the current issue (see next sentence).

Because the file I quarrantined is so integral to Win ME getting itself fully started, the errors that follow its absence leave ME crippled with no Start menu or any other interface by which to troubleshoot.

Maybe there's a way to boot this Win ME desktop using a floppy or CD?

From there, I could:

1. un-quarrantine the file
2. re-boot Normal with the virus still present
3. get a Start Menu and Internet connectivity
4. follow the article's advice.

I'm posting to this forum from an XP Pro SP2 laptop. Anyone know a way I can use this laptop to:

a. obtain a Win ME boot disk or CD
b. once booted, run my Norton Anti-virus to un-quarrantine the file

Thank you in advance, big time!

--Eric

dai · 11-09-2005, 05:26 PM

d/l a bootdisk from here
http://www.bootdisk.com/
boot from it and type help
and look for the command line to do a system restore,my brain is a bit rusty on ME

elrME · 11-10-2005, 01:09 AM

Dai,

Did system restore. All it did was change the registry to an older one.

The c:\windows\system\mspwl32.dll is still quarrantined so, it is not found during Normal or Safe bootup. This causes a cascade of errors that prevents the Start menu or any other useful interface from appearing.

I'm reluctant to use my Quick Restore CD just yet.

Any other ideas?

--Eric

Geekgirl · 11-10-2005, 06:11 AM

Your in a real perdictament

If it were me in your shoes, I would remove the hard drive and slave it on another computer. I would download this file from HERE and place it in the system folder. It's worth a shot

Chevy · 11-10-2005, 08:08 AM

You should be able to extract the dll from your ME cd.

Boot using the floppy you created, type in extract /?, and it will tell you how to do it.

11-08-2005, 04:27 PM	#1 (permalink)
elrME Registered User Join Date: Nov 2005 Posts: 3 OS: ME	HELP!! Bloodhound.W32.2 Virus Hi Everyone, I quarrantined c:\windows\system\mspwl32.dll when prompted by Norton during bootup not knowing this is one of the most important files when WinME starts Whether SafeMode or Normal, I cannot get to the point of having a Start Menu or anything else useful. Even a DOS interface would be better than this endless hanging during bootup I'mm at a loss to know what else to try. Any advice is extremely appreciated. Yours truly, --Eric

11-09-2005, 12:23 PM	#2 (permalink)
dai Manager, Hardware Forums Join Date: Jul 2004 Location: west australia Posts: 46,514 OS: vista 32x ultimate retail	follow greyknights instructions here and the experts will help you http://www.greyknight17.com/spyware.htm __________________

11-09-2005, 05:26 PM	#4 (permalink)
dai Manager, Hardware Forums Join Date: Jul 2004 Location: west australia Posts: 46,514 OS: vista 32x ultimate retail	d/l a bootdisk from here http://www.bootdisk.com/ boot from it and type help and look for the command line to do a system restore,my brain is a bit rusty on ME __________________

11-10-2005, 06:11 AM	#6 (permalink)
Geekgirl Manager, Microsoft Support Join Date: Jan 2005 Location: Pennsylvania Posts: 12,676 OS: 98SE/WinXP Home/WinXP Pro Blog Entries: 1	Your in a real perdictament If it were me in your shoes, I would remove the hard drive and slave it on another computer. I would download this file from HERE and place it in the system folder. It's worth a shot __________________ Compare NOD32 to your current antivirus and anti-spyware solution, HERE How to back up and restore the registry in Windows XP and Windows Vista How to back up and restore the registry in Windows 98/ ME / NT 4.0 / 2000 I DO NOT ACCEPT EMAILS AND WILL NOT REPLY TO THEM !!!!! TSF DOES NOT SUPPORT ASSISTANCE THROUGH EMAIL OR PRIVATE MESSAGES, PLEASE KEEP ALL QUESTIONS IN THE OPEN FORUM

11-10-2005, 08:08 AM	#7 (permalink)
Chevy Semi-Retired Manager, Microsoft Support Join Date: Jul 2003 Location: Notlob Posts: 5,250 OS: Vista Ultimate My System	You should be able to extract the dll from your ME cd. Boot using the floppy you created, type in extract /?, and it will tell you how to do it. __________________ “The man who smiles when things go wrong has thought of someone to blame it on. ” - Robert Bloch

11-09-2005, 03:57 PM	#3 (permalink)
elrME Registered User Join Date: Nov 2005 Posts: 3 OS: ME	Dai, Thank you for this excellent resource. Scanned thru it for an initial overview. Maybe I missed something but I don't see how it provides a way to troubleshoot the current issue (see next sentence). Because the file I quarrantined is so integral to Win ME getting itself fully started, the errors that follow its absence leave ME crippled with no Start menu or any other interface by which to troubleshoot. Maybe there's a way to boot this Win ME desktop using a floppy or CD? From there, I could: 1. un-quarrantine the file 2. re-boot Normal with the virus still present 3. get a Start Menu and Internet connectivity 4. follow the article's advice. I'm posting to this forum from an XP Pro SP2 laptop. Anyone know a way I can use this laptop to: a. obtain a Win ME boot disk or CD b. once booted, run my Norton Anti-virus to un-quarrantine the file Thank you in advance, big time! --Eric

11-10-2005, 01:09 AM	#5 (permalink)
elrME Registered User Join Date: Nov 2005 Posts: 3 OS: ME	Dai, Did system restore. All it did was change the registry to an older one. The c:\windows\system\mspwl32.dll is still quarrantined so, it is not found during Normal or Safe bootup. This causes a cascade of errors that prevents the Start menu or any other useful interface from appearing. I'm reluctant to use my Quick Restore CD just yet. Any other ideas? --Eric