[moishevelvel]

i tried removing the splm directory from the CMD prompt but it won't do it because there are two files in the directory that won't delete - kbdsapi.dll and lmfunit32.dll. i tried rebooting and deleting these in Windows Explorer and that doesn't work either. Any suggestions?

[djmellowfellow]

Hey, I've tried using HijackThis as suggested by some peops. In normal mode it shows up some files which end with the virus (ncsjapi32.exe). However, I've no idea how to use HJT in Safe/Command Prompt mode.

In fact I'm stumped when it gets to Safe/Command Prompt mode. I have no idea how to locate the file I want. I tried typing in many varieties of the following: CD"C:\WINDOWS\system32" RMDIR splm /s

but every time I get a reply saying that ...is not recognized as an internal or external command... OR a reply saying that the system cannot find the path specified.

Can anyone help please?
(Is this virus harmful?)

[Ferdz]

Here's the solution to your problem,

You have to re-start your computer and press F8. You need to delete the virus in a safe mode. Click start then choose RUN, and type regedit. Press
Control F and type ncsjapi32 then find. Delete any file related from that. After you delete them. Press control F again and type splm and spfx after and delete all related file from that as well specially when you see this file "Intelli Mouse Pro Version 2.0B" delete them even "Intelli Mouse" file. After you delete them all reboot your computer and it should be ok.
Hope everything is clear and Good Luck!

[slickdome]

RonnonF's solution worked fine. My grandson's computer was infected on August 7 and is now working fine. Thanks for the help

[janto1986]

I too have the same problem as moishevelvel, if someone could resolve this it would be a massive help

[mezic88]

I am very inexperienced with computers, so this may sound like a dumb question. I have the same problem, but i want to know if there is a way to do it without rebooting the computer because i don't want to loose all my data.

[angry_kitty]

thank you all so much for your help (particularly ferdz for making it clearer). I got hit with this virus a yesterday and googled this forum. i followed the instructions and deleted it in safe mode. then everything was working fine.

Today everything started normally and the computer was running fine up until about an hour ago when that annoying error message came up again!!
once again i returned to safe mode and followed the instructions and again deleted it but this time when i went into safe mode the error message came up in there!?!
i rebooted the computer and its still comming up. ive gone through safe mode about three or four times now but the messages are still comming up. am i doing something wrong??

and just to clarify, by "delete it" you ment highlight it and hit delete right?? cos i cant find any other way of getting rid of it.

someone please help!!

[angry_kitty]

ok this is odd.... its only comming up again when I plug my printer into my computer... now technically it's illogical for a virus to "hide" in a printer... isn't it??

I've tried deleting it while the printers plugged in but no luck.

please can someone help?

[SkintStudent]

I have the same problem - runtime error 21 popping up every time I plug my HP printer in... I have never experienced anything quite like it! Does anybody have any suggestions?

Thank you!

[SkintStudent]

It took some time, but it eventually worked for me - and I can plug my printer in without any error messages popping up! Thank you so much, Ferdz.

[joshyd]

Originally Posted by angry_kitty

ok this is odd.... its only comming up again when I plug my printer into my computer... now technically it's illogical for a virus to "hide" in a printer... isn't it??

I've tried deleting it while the printers plugged in but no luck.

please can someone help?

someone obviously doesn't watch Stargate.

My desktop won't load properly after I've pressed F8 whether I click the runtime errors once or twice or not at all.


EDIT: Scrap that, just my impateince,

But they are still coming up even after I deleted all the files I could

GRR itsn tnot working, ive deleted all th files it will let me delete (not the ones with wrnog values or something), I don't think I'm in safe mod, when do I press f8, im not very tech savvy.

[lehmann]

I have the same problem and I followed the instructions posted above to edit the registry in safe mode, but when I reboot the computer both the error and the intelli mouse file are still present.

Suggestions for how to permanently delete this would be very helpful.

Lisa

[SCFP]

Like I said in my 08/07/2008 posting:

Originally Posted by SCFP

I ran a FULL McAfee scan; found absolutely NOTHING.

I then took newb25's advice & did a System Restore [using a restore point date from 3 or 4 days ago] and that appears to have resolved the issue.

Since FACEBOOK appears to be a common link - in at least 3 or 4 of us reporting the issue in this forum - I would be very careful next time there (or tell your child - as I have - to be cautious as to WHAT he/she 'clicks' on while on the FACEBOOK site).

And someone with a FB logon should probably report this/these incidents to the FB Web Administrator/Customer Service, etc., and make THEM aware of it (they probably already have been told, but it never hurts to add more information, in a case like this !).

John G.

Do a Win XP System Restore - but make SURE that you choose a DATE prior to the 1st occurrence of the 'virus' [malware or whatever it is] - I'd use a date from the very end of JULY, as nobody in this forum has reported seeing it that far back. NOTHING I tried worked to fix this until I did the Sys Restore; since that time I've not had any more issues.

John G.

[djmellowfellow]

Hey, thanks to your advice guys, the virus seems to be almost completely removed (it's left its scar in the MSCONFIG startup box). However, now my McAfee Virus Scan is missing componants as it says:

<<Part of your protection must be fixed>>

When I click fix it tries to update but then says:

<<Error, You need to reinstall McAfee VirusScan Plus>>

Any ideas? I would just delete McAfee and install a better virus program but we've paid for it.>>

Thanks again.

[allan0928]

face book seems to be the culprit here.i did sa system restore to 4 days prior.it fixed the runtime error,but then created some other problems.by the way mcafee and norton are useless in these situations.matter of fact the are useless period.i deleted mcafee from my system.i am running webroot spyware and plan to purchase trend micro for virus protection.i currently and getting alot of "internet explorer cannot display this page" message on a portion of a web page,say msn.it is only partial.anyone know the solution to this one?

The reason you cannot display the webpage is because the virus edited your c:\windows\system32\drivers\etc\hosts file.

it inserted ip addresses of 0.0.0.0 for all of the antivurs update sites, and Microsoft.

go into safe mode and look at it and delete the bogus entries.