How do I know whether my computer is infected with virus?

miscsyl

Junior Member
Jan 30, 2003
22
0
0
I ran the file named "setup.exe". But I received a following error message:

The instruction at "0X10312ea4" referenced memory at "0x03c91000". The memory could not be "written". Click OK to terminate the program.

After this incident, I am getting a small icon with the following message:

Invalid filename
with [OK] icon.

I am getting above message every one minute or so..

I ran the Norton Antivirus scan and there was no virus.

Following is first several lines from the "setup.exe" file:
---------------------------------------------
MZP ÿÿ ¸ @ º
´ Í!¸ LÍ!??This program must be run under Win32

$7 PE L ^B* à ??
à ü @ @ @
@
?ý UPX0 ? àUPX1 à Þ @ à.rsrc
â @ À 1.23 UPX!
¦WÄ?¿Py Ý Ü \ & P[fþÿ @ Boolean * FûßÞÿalse True? ," Integer BÍÊïo?ÿ ?ÀD. ByoÿiF~ ?X'Word ÿlûwù Cain¯ / ??þ ? Ü V ±? ·ï?·Ï
Str}g¸

W
?ÛíideÈ
Vi?t 6ø

VØ?
O£%0 ä
&Uacute; > <&Ugrave;4M &Ouml; 04(p9&Ouml;&thorn;?f?&Egrave;TObject<f yx°6&Aacute;Cys m&auml;&yacute;&Atilde;m\$
I`rface&agrave; 5
r;&Agrave;[F ?@>&ucirc;&yuml;^ IDispatchX ] ¦&yacute;¿9 ?&Igrave;?D$ &oslash;&eacute; V (»k&iacute;I<&Igrave;¹?&Atilde; &Iacute;?z&otilde;xiC&Oslash;. P &auml;&auml;? hG>
>&auml; @?¼?v&Oslash;e^e?&ocirc;e ]l??T&aring;d9wh&Ccedil;&eth;¿¸~
T&Aacute;undArray&Ugrave; &icirc; ?i¨(±&yuml;% ²F _AN
-------------------------------------------------------------


This is the last line of the file.
------------------------------------------------------------
KERNEL32.DLL advapi32.dll comctl32.dll gdi32.dll ole32.dll oleaut32.dll user32.dll wininet.dll wsock32.dll LoadLibraryA GetProcAddress ExitProcess RegFlushKey ImageList_Add SaveDC OleDraw VariantCopy GetDC InternetOpenA inet_ntoa
-----------------------------------------------------------------

Any information will be appreciated.
Thank you
 

earthman

Golden Member
Oct 16, 1999
1,653
0
71
What version of Windows is this?
What "setup" program did you run? Where did it come from?
What version of anti virus software are you using?
 

miscsyl

Junior Member
Jan 30, 2003
22
0
0
earthman:

I am using windows 2000.
The setup.exe file was downloaded from edonkey2000. It was zipped with other files. I thought it was the setup file for the program. But it wasn't.
I am running Norton Antivirus 2003.

Thank you.
 

Lord Evermore

Diamond Member
Oct 10, 1999
9,558
0
76
How do I know whether my computer is infected with virus?

When the floppy drive gets all red and rashy, and the hard drive starts to scratch a lot, and the fan filters start to clog with phlegm.


Anyway, this doesn't sound like a virus, it just sounds like a corrupted executable. What program is the setup.exe supposed to install? Have you tried deleting it and downloading it again? Is it made to be compatible with your operating system? The constant appearance of the error message box means it's trying to run over and over, and its first task is to locate certain files. This isn't a setup.exe that you pulled out of a Zip file without the rest of its files, is it?
 

miscsyl

Junior Member
Jan 30, 2003
22
0
0
Lord Evermore:

The files are downloaded from edonkey2000. It was zipped with one of pocket pc software. There were two and apparently this setup.exe wasn't the right one.

As you suggested it probably isn't the virus. I ran norton 2003 and also ran Klez Virus Fix downloaded from Symantec. Nothing was detected.

I also ran Ad Aware 6.0. I removed all the spyware files. But still I am getting the "Invalid Filename" message.

I am running windows 2000 os.

Thanks
 

Lord Evermore

Diamond Member
Oct 10, 1999
9,558
0
76
Well, open Task Manager and see what processes are running. The setup.exe program probably hasn't quit, but is instead just constantly trying to find the right files to do its work. Then just make sure that there's nothing now in your Startup folder, or in the Run/RunOnce keys in the registry.