IMPORTANT: Only authorized members may reply to threads in this forum due to the complexity of the malware removal process. Authorized members include Malware Specialists and Trainees, Administrators, Moderators, and Trusted Advisors. Regular members are not permitted to reply, and any such posts will be deleted without notice or further explanation. Notice
You've got problems with the syntax of one of the programs that executes at startup or one of the commands contains a "/?" switch. Do this so we can see your startup programs. Go here and download Startlog.com
Once it's downloaded, double left click on it to execute it. You'll see a Notepad window open up. In Notepad click on Edit>SelectAll and then click on Edit>Copy.
Then come back to this thread and click on PostReply. Then Right click in the reply window, select Paste and click on SubmitReply.
On your Desktop you should see a light blue icon called Startup.log
Right click on it and select Rename. Now rename it Startup.txt
When prompted if your sure you want to do this, click on Yes.
Now come back here and click on PostReply. At the bottom of the reply window click on "Browse". Now locate Startup.txt in the Explorer window and double left click on it to attach the Startup.txt file.
Not sure at this point which line is causing the error but I can tell you your loaded down with quite a few Spyware components like New.dot, SaveNow, NSCheck, etc...
Do you recall installing some kind of Web Accelerator, Web Surfing tool or any freeware programs that might help us determine where you got all of that stuff.
not rececently but i did install a anti virus program and it found a virus win32/magistr.a and it heal all but 1 file and thats when i started getting the start up message and i thought i uninstalled all that excess stuff
Then try this and lets see what it cleans up and we'll go from there. Go here , then on the Right side of the page, click on the little Yellow folder next to Ad-aware 5.62 Final to download AAW.exe. Once you've downloaded it, double left click on it to install it. Then look for the AdAware folder in Start>Programs and execute the program. Once it launches, on the Left side of the screen, be sure to select ScanRegistry(DeepScan), ScanMemory and Scan Fixed C: Drive from the directory tree on the Left side and then click on Scan. When it's done scanning, click on Continue and then select everything it lists and continue on to delete and clean it up.
Once that's done, rerun Startlog.com, rename Startup.log to Startup.txt and attach the new Startup.txt file to a reply here.
BTW, I may or may not be here when your done. If I'm not, there are plenty of others that will reply and help you.
Be sure to come back and let us how it goes. You should be fine if print out the Microsoft article and follow the instructions step by step. Then run the AdAware cleanup program to get rid of any lingering pieces of Spyware. If all goes well and your able to clean it all up, you should notice a big difference in the performance of your PC.
And I also just noticed you may still have part of the Magistr.a virus running. I'm not 100 percent sure at this point if it is part of Magistr.a but do this and see what happens. If I caught you before you left to remove the Spyware, try this first and let us know what happens.
Start>Run, key in Msconfig and press enter. Click on the "Startup" tab. Now locate the entry for SYSOCMGQ and remove the check mark next to it. Now click Appy and then OK. Follow the prompts to restart. Do you still get the error at startup?
I hate to keep doing this to you but everytime I look closer at your Startup log, I find a few more strange things. Anyway, you have another suspicious entry in your startup that is most likely part of a virus. Go back to msconfig and see if you can locate an entry for WALIGM.EXE
If you find it, Uncheck it and click on Apply
If you can't find it let us know. We'll help you disable it manually.
And be sure to post a new copy of Startup.txt once your done all of this so we can be sure your clean.
Rerun Msconfig and Uncheck NSCheck and WALIGM.EXE, click on Apply and Restart Windows. Delete the Old startup.txt and then rerun Startlog.com to create a new one. Then attach a new copy of Startup.txt to a reply here.
If you can't locate both of the entries in Msconfig, let us know before you restart.
... In Msconfig, click on the "Win.ini" tab. Now click on the "+" next to yellow "Windows" folder. Do you see the entry for run=WALIGM.EXE? If so, remove the checkmark next to it and click on Apply, OK and then restart Windows.
Status
Not open for further replies.
You have insufficient privileges to reply here.
Related Threads
?
?
?
?
?
Tech Support Guy
9.9M posts
860K members
Since 1998
A forum community dedicated to tech experts and enthusiasts. Come join the discussion about articles, computer security, Mac, Microsoft, Linux, hardware, networking, gaming, reviews, accessories, and more!