"Tab" wrote:
Did Norton ever found a virus and Quarantine it or moved it to the Virus
Chest?.
This Execution extension name look fishy to me.
Come to the missing DLL, try to search for this File and see how many
there, you looks like didn't use the Norton removal tool to uninstall the Old
Version of Norton and the old file there and making trouble.
Search for it and right click the NUMISC.dll and select Properties, on
properties see the maker and the date, it will tell youthe maker and the date
of the file.
If you found more than one try to rename the older version (date) then
reboot your computer, does the error occur?.
Disable it from the Start up by opening a run command and type in:
msconfig click [OK] then on System Config window click on StartUp Tab and
uncheck the check box for either the process or the DLL.
http://searchg.symantec.com/search?q=NUMISC.dll&charset=utf-8&proxystylesheet=symc_en_US&client=symc_en_US&hitsceil=100&site=symc_en_US&output=xml_no_dtd&context=gbh&x=14&y=6
You need to be sure your system is clean from malware and Viruses by
scanning for them
Scan for malware from here:
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
http://onecare.live.com/standard/en-gb/default.htm
Run a scan from here on-line:
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Lots of tools to download and disinfect your machine:
http://www.bitdefender.co.uk/site/Downloads/browseFreeRemovalTool/
http://free.grisoft.com/doc/5390/lng/us/tpl/v5
HTH.
nass
--------
www.nasstec.co.uk
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Autoruns.mspx
--
Hope this helps.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Don't you think there is a distinct possibility that this is an orphaned
entry in the Start-Up relating to a virus which has been partly removed?
--
Regards.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Assuming the OP didn't use the Norton Removal Tool to completely the Old
version to prepare the system for the new one, here is another attempt:
Download and run the Norton Removal Tool
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039
Run Disk CleanUp and Defrag in safe mode then try the New Av and see if the
error will go away, also I will scan for malware as Norton is Anti-Virus and
not Complete Anti-malware.
HTH.
nass
My point being removing a StartUp item using Autoruns is relatively
simple. Your approach is very thorough but less easy to implement. The
Error Report suggests failure to tidy up after removal but I could be
wrong. Of course if the virus was picked if on a routine scan rather
than at the front door it could have been holding the door open inviting
all his friends to come and join him!
"nass" wrote:
Hi Gerry,
Your point to some extent could be right?, BUT I will not rely on Partly
Removed virus and the OP confirm that by saying the Av Did ask Him/Her to
Delete/Remove the quarantine Virus(s). We all know sometimes
the Av will not be capable to remove the Virus or viral infection, either
because its definitions OLD (not
up2date) or the Vendor didn't build the Database for the new Viruses
created every day or the AV engine is that OLD and incapable of Removing the
Virus.
Unfortunately the OP did not elaborate on this in the last post:
" What's weird is my daughter did the exact same thing and her computer is
working and mine is not. ", we don't know if both machine having the same
problem at present or one in the past and this one now(I'm confused LOL).
I have seen in the past uninstalling that the AV did move the Virus to the
Fault/Virus Chest, but the Virus still active, fooling the AV and causing
the AV some corruption (step-by-step until it Kill it = Useless), then when
you uninstall it will ask do you "Do you want to remove the Virus Yes or
NO/Cancel"
click Yes and there is no message to confirm that the Virus been removed?,
do we know if it is
still there or Not?. Hmmm.. Install the New AV (happy customer) and all the
carp come back to the machine?.
Partially Removed Virus, it doesn't mean it is dead or unable to cause
havoc!, some
viruses will resurrect itself from a small File and build itself to a
completely new Virus and Rename itself to something else the Av will not
detect.
Assuming the OP didn't use the Norton Removal Tool to completely remove the
I can see one correction! Were there others? I had aleady answered your
first post.
nass wrote:
> Hi Gerry,
> Your point to some extent could be right?, BUT I will not rely on
> Partly and the OP confirm Did ask Him/Her to Delete/Remove. We all know
> sometimes the Av will not be capable, either because its
> definitions is OLD (not up2date) or the Vendor didn't build the
> Database for the new Viruses or the Engine is OLD and incapable to
> Remove the Virus. Unfortunately the OP did elaborate on this :
> " What's weird is my daughter did the exact same thing and her
> computer is working and mine is not. ", we don't know if both
> machine having the same problem at present or one in the past and
> this one now(I'm confused LOL). I have in the past uninstall and the AV
> did move the Virus to the
> Fault/Virus Chest, but the Virus still active and fooling the AV
> and causing the AV some corruption (step-by-step until it Kill it =
> Useless), then when you uninstall it will ask do you want "Do you
> want to remove the Virus or NO" click Yes and there is no message
> of Virus removed?, do we know if it is still there or NO? Hmmm..
> Install the New AV (happy customer) and all the carp come to the
> machine?. Partially Removed with Virus it doesn't mean it is dead or
> Sick!,
> some viruses will resurrect itself from a small File and build
> itself to a complete new Virus and Rename itself to something else
> the Av will not detect.
> Assuming the OP didn't use the Norton Removal Tool to completely
> the Old version to prepare the system for the new one, here is
> another attempt: Download and run the Norton Removal Tool
> http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039
> Run Disk CleanUp and Defrag in safe mode then try the New Av and
> see if the error will go away, also I will scan for malware as
> Norton is Anti-Virus and not Complete Anti-malware.
> HTH.
> nass
nass wrote:
> Correction:
Corrections I saw...
( At this point - it would have been better just to re-compose the entire
message, Nass. ;-) )
"BUT I will not rely on Partly and the OP confirm Did ask Him/Her to
Delete/Remove."
changed to:
"BUT I will not rely on Partly Removed virus and the OP confirm that by
saying the Av Did ask Him/Her to Delete/Remove the quarantine Virus(s)."
"... or the Engine is OLD and incapable to Remove the Virus."
changed to:
"or the Vendor didn't build the Database for the new Viruses created every
day or the AV engine is that OLD and incapable of Removing the Virus."
"Unfortunately the OP did elaborate on this :"
changed to:
"Unfortunately the OP did not elaborate on this in the last post:"
"I have in the past uninstall and the AV did move the Virus to the
Fault/Virus Chest, but the Virus still active and fooling the AV and
causing..."
changed to:
"I have seen in the past uninstalling that the AV did move the Virus to the
Fault/Virus Chest, but the Virus still active, fooling the AV and
causing..."
"you uninstall it will ask do you want "Do you want to remove the Virus or
NO" click Yes and there is no message of Virus removed?, do we know if it is
still there or NO?"
changed to:
"you uninstall it will ask do you "Do you want to remove the Virus Yes or
NO/Cancel" click Yes and there is no message to confirm that the Virus been
removed?, do we know if it is still there or Not?."
"Hmmm.. Install the New AV (happy customer) and all the carp come to the
machine?."
changed to:
"Hmmm.. Install the New AV (happy customer) and all the carp come back to
the machine?."
"Partially Removed with Virus it doesn't mean it is dead or Sick!,"
changed to:
"Partially Removed Virus, it doesn't mean it is dead or unable to cause
havoc!,"
"...complete new Virus and Rename itself to something else the Av will not
detect."
changed to:
"...completely new Virus and Rename itself to something else the Av will not
detect."
"Assuming the OP didn't use the Norton Removal Tool to completely the Old
version..."
changed to:
"Assuming the OP didn't use the Norton Removal Tool to completely remove the
Old version..."
Many changes - not all made sense before or after, methinks. ;-P
For the conversation in its entirity:
http://groups.google.com/group/microsoft.public.windowsxp.perform_maintain/browse_frm/thread/4949fdb1912d9325/4e998745309a1f26?lnk=st&q=&rnum=1#4e998745309a1f26
Enjoy!
--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html
Nass and I often exhange views. He lives not so far away from where I
was born. I had got the drift of what he was staying. I just didn't
think any changes he had made, made any difference to the response I had
sent to his uncorrected message.
--
Regards.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
Nothing taken all welcome to correct, I never pay attention to grammar as My
thoughts always including more technical points which is matter rather than
grammatical points and I get tired from writing lengthy articles!.
After all I'm using the CDO.
I do agree with you the CDO is awful and it doesn't encourage you to reread
your reply or revise it properly. In the past I resist Wes advice to use a
proper newsgroups reader for a reason?.
"Gerry" wrote:
> Nass
>
> It has been hot today. It was a rambling scribe <G>! Have you caught
> foot and mouth from Pirbright?
>
> Why are you using CDO. It's awful!
It has been hot today. It was a rambling scribe <G>! Have you caught
foot and mouth from Pirbright?
Why are you using CDO. It's awful!
--
Regards.
Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
In the past I resist Wes > advice to use a proper newsgroups reader for
a reason?.
Why? Are you short of disk space?