Bay 12 Games Forum

Please login or register.

Login with username, password and session length
Advanced search  

Author Topic: weird laptop virus.  (Read 558 times)

Robot Parade Leader

  • Bay Watcher
  • Well, go on ... parade!
    • View Profile
weird laptop virus.
« on: December 30, 2013, 08:24:37 pm »

I have a virus on my laptop that plays random audio. Strangely, I got it right AFTER running malewarebytes. (I don't think malwarebytes gave it to me but wow).

Running windows 7.

When i start the computer, it says,
______________________
"The module "C:\\Uers\Me\AppData\Local\Viewer.dll" failed to load.

Make sure the binary is stored at the specified path or debug it to check for problems with the binary or dependent DLL files.

The specific module cound not be found
______________________

I can use the computer ok so far. The random audio stops when i disable the internet connection.

I'm running malwarebytes again and trying to see if that helps.

Any other ideas would be very appreciated, if you'd be willing to give them. Thank you.
Logged

nenjin

  • Bay Watcher
  • Inscrubtable Exhortations of the Soul
    • View Profile
Re: weird laptop virus.
« Reply #1 on: December 30, 2013, 08:36:32 pm »

Without much more detailed info, it's hard to say what else can be done. Here's what I usually tell people:

1. Get Process Explorer from Microsoft.
2. Check all running processes.
3. Google each process that seems suspicious.
4. Track down any executable or related file in your file system.
5. Attempt to rename the file in question. Chances are this will fail.
6. If it doesn't fail, awesome. If it does fail (access denied, ect...)....
7. Reboot your computer in safe mode.
8. Navigate back to the files in question.
9. Rename them. This should work. If they can't be renamed the problem goes deeper than your average virus.
10. If the files were renamed correctly, they should fail to load on windows startup. Files not in use can be deleted.*
11. This isn't a guarantee. There may be some other process that was missed that will recreate/rename the files. The only way to check is to restart and verify the processes aren't running/files haven't been recreated.
12. This may not fix other windows problems caused by the virus. Some viruses damage or alter system settings that either need to be repaired or reinstalled or reconfigured. Knowing what's been changed is the hard part.

A couple other things you can do:

1. Start --> Run --> msconfig. Check to see if anything stupid is set to load at Windows start. Most viruses worth their salt aren't going to do something so obvious, but it's worth a shot never the less, you may have some low grade malware.

2. Get better tools. You can try Ultra Virus Killer, but it is not a tool for people who don't know what they're doing. Malewarebytes is decent for your garden variety malware and viruses, but it fails to catch a ton of stuff.

3. Spybot Search and Destroy and Hijackthis are both lower level tools you can use see if your browser has been hijacked in any way. SBS&D might also have luck where Malwarebytes didn't find anything.

My honest to goodness advice is: reformat if possible. It's faster usually than searching everything by hand. It will do a better job of getting everything than simply checking on processes. (Note: it's not a guarantee either, the worst viruses can attack your motherboard. Unlikely you have something that bad.) I'll trade 12 hours backing up my data and reinstalling over continuing to use a system that might be compromised in ways I can't tell.

Just out of curiosity, what 'random audio' does it play?

*All this is given with the disclaimer that renaming/deleting a core windows file will fuck everything up, and you should be very certain what you're messing with before you decide to do anything with it. At the very least, if you're unsure, copy the file to another folder and rename it so you can put it back if it turns out it was something you needed.
« Last Edit: December 30, 2013, 08:42:21 pm by nenjin »
Logged
Cautivo del Milagro seamos, Penitente.
Quote from: Viktor Frankl
When we are no longer able to change a situation, we are challenged to change ourselves.
Quote from: Sindain
Its kinda silly to complain that a friendly NPC isn't a well designed boss fight.
Quote from: Eric Blank
How will I cheese now assholes?
Quote from: MrRoboto75
Always spaghetti, never forghetti

foil

  • Bay Watcher
  • Yarr!
    • View Profile
Re: weird laptop virus.
« Reply #2 on: December 31, 2013, 06:59:14 am »

Does this only happen in the browser?
Logged

Robot Parade Leader

  • Bay Watcher
  • Well, go on ... parade!
    • View Profile
Re: weird laptop virus.
« Reply #3 on: December 31, 2013, 09:22:26 pm »

I had backups for data and reinstalled windows. That was about all I could manage.

The audio happened when I had no programs running (none that showed up in task manager on any tabs) and just played sound in the background independent of any programs I could see. Windows media player etc were not running. Odd sidenote, I could not adjust power levels (power saver, balanced, etc) or turn down the sound. I could however plug in headphones.... So at least that made it the sound play at a level that wasn't audible.

From what little I could tell it messed with the registry pretty bad.

So far no signs of it, but I'm watching closely. Thank you both for helping.
Logged

miauw62

  • Bay Watcher
  • Every time you get ahead / it's just another hit
    • View Profile
Re: weird laptop virus.
« Reply #4 on: January 01, 2014, 02:01:06 pm »

Googling processes can be fishy and get you "OH GOD THIS PROCESS TURNS YOUR COMPUTER INTO A NUKE" messages for innocent processes, so make sure you do it properly.
Logged

Quote from: NW_Kohaku
they wouldn't be able to tell the difference between the raving confessions of a mass murdering cannibal from a recipe to bake a pie.
Knowing Belgium, everyone will vote for themselves out of mistrust for anyone else, and some kind of weird direct democracy coalition will need to be formed from 11 million or so individuals.