Odd Computer Startup Issue

Actually, the viruses did infect your computer, only your antivirus has either quarantined or cleansed your affected files. However, the entries that the viruses wrote into your system registry have not been deleted, so your OS will search for the applications that the files are supposed to run. You can get rid of them by deleting them from the registry by running the regedit.exe function, but I would not recommend doing this, because if you alter your registry entries without knowing what you are really doing, you can end up rendering your computer inoperable. If this problem of yours is just a minor nuisance, nothing more, then just leave it as it is. If you really must get rid of them, then get a professional to do it for you.

I hope this helps.

DVader,

I agree that editing the registry is fraught with peril, but so is driving on the freeway. Worst case - you have to reinstall Vista. The old axiom that "you can't hurt it by pushing buttons" applies here.

The other benefit is that someone who has to install his own OS will be very selective about what gets installed:

no bloatware

no "special features"

maybe even a "downgrade" to XP

You can get rid of them by deleting them from the registry by running the regedit.exe function, but I would not recommend doing this, because if you alter your registry entries without knowing what you are really doing, you can end up rendering your computer inoperable.

Recommend a back-up before altering registry

it s really something wrong with the computer. I suggest you download Rising which is a free killer software now to find the suspect file out. (avg is also a good)

or control+alt+del to task management and check if there is any suspect procedure and del it from registor table.

3) go to registor from command, cmd -- regedit to open the registor, find Run iterm and find which files are runing from start. pay attention.

4, use windows doctor to check the problem.

5. update pac in time.

GA for a really good answer, should prove most helpful.

I also use Registry Fast, a similar bit even easier to use Registry cleaner.....

In fact I use them both as I seem to get more doen by running them both, one after the other.

Registry Fast can be run several times as more will be found each time its run, tzhe clean before seems to make more available for cleaning, used it for at least a year, once a week or so, no problems seen from the cleabning, though I do make the backups as recommended of what is being cleaned off.....

Hi to all,

Just to keep you updated, I ran CCleaner and the '*.dll' problem disappeared, but the 'winrvt32.rom' remains.

I'm not going to 'play' much more for fear of 'breaking' something.

Kind regards ...

Did you google for the remaining file name? You might also look around here.

Hi,

Yes, I did a Google search, but such is not found. There is a reference to winrvc32.rom as a virus, but not the one I am encountering.

PC Hell is a great resource, but I can't find a way to 'search'

Kind regards ...

Try this:

Open "My Computer" and click on "Local Disk (C:)". Click for "Search for files and folders". Select "All files and folders". Click "More advanced options". Select these options:

Search system folders
Search hidden files and folders
Search subfolders

The type "winrvt32.rom" in the box "A word or phrase in the file:". Finally, click "Search".

This will search for files that have "winrvt32.rom" in them. Hopefully, it will find the file that's trying to open it.

Good luck,

Vulcan

Im afraid its no use, thats only an exe file which will call the "winrvt32.rom", but the "winrvt32.rom" file was not exsited in his computer. this may be banned by anti virus software. what you have to do is find the exe files in register run items and del it.

so that it will not act when start computer.

will call the "winrvt32.rom", but the "winrvt32.rom" file was not exsited in his computer

Yes, but I'm hoping that the file search might be able to look inside an exe, com or bat file and find "winrvt32.rom" in there. If it finds it, you might be able to delete it. I don't know if it will look into the registry as well, however.

regards,

Vulcan

yes you cannt find it in the fold but may find in register at run item.

then del these suspection files.

because when you start computer, the register " run"file will be excuted at first.

Well, I just discovered that the registry editor (regedit) has a Find function. Just type in the search text and go.

Also, if you open CCleaner and go to Tools/Startup, you'll find the files/programs that get opened at startup. Might be a way to find what's trying to run the winrvt32.rom file.

regards,

Vulcan

Hi,

Almost similar situation for myslef too, the message is

'pxe-61:mediatest failure, check cable.

pxe-maf:exiting broadcom pxe rom.

I have been ignoring this all the while and there is no other consequence i believe.

Will there be any problem that I did not realised??

please comment

regards,

From DXB.

Hi DXB,

FIRST, welcome to CR4. We're a crazy lot, but have a good mix of fun and serious, and there are some very good exchanges here. We hope to see you as often as time allows.

SECOND, thanks for your input.

So far, I have seen no negative consequence to the problem, but just curious enough to try to learn the "why". It seems to me, there is something in the system calling for this file, but (maybe) my virus protection has eliminated it. I would really like to know what is making that "call", but so far (and with my limited knowledge) elusive.

Again, so far, I see no consequences to the event, so, as many would say, "if it ain't broke, don't fix it". I'm content with that until I can find an answer, and I don't have any plans to dig too deeply into the issue ... I just finished rebuilding 'C' drive and re-installing everything, lost all my emails not yet archived ... a real PITA, and I'm not anxious to go through that again.

Anyway, welcome, and THANKS.

Kind regards ...

Hello DCaD,

you can try a search as suggested by a couple of members.

But before doing so go to wherever it is in Vista and click or un-click the bit which shows you hidden files. Once you can view the hidden files it may be in there.

I am still looking!

Take care.......

Hello From DXB:

Welcome by the way...............

You should join it is great!

With regard to your message which comes up on the screen, does it come up as it is starting? And can you tell me exactly what the message says, including the quotation? You have two similar lines on your message above. I need to know the exact words. Can you copy and paste it to this forum please?

Take care and I hope you stay. Happy holiday...................

Spybot has a Registry error detection section if you change it to Advanced Mode. It will search your registry for errors, you can possibly get to it that way.

Hello DCaD,

hope you are fine...............

I googled both and got what I think will be good help on the 'dll. But nothing so far with the 'winrvt32.rom'.

http://www.dll-doctor.com/landing/dll5/repair-fix-dll.php?sc=g&cp=s&kw=20315&gclid=CInz6-Wsu5cCFQ4i3godZTNUTQ

Try this. As one may be causing the other. I have just got up so you may have solved the problem by now, and I apologise for this late try to help, if it is fixed.

I do not have vista but will search Microsoft Vista as well.

Take care, Good luck and a happy holiday to you!.............

Hello DCaD,

Can you tell me which version of Vista you have and do you have sp1 and or sp2 if there is one?

Hi BB,

Good to hear from you, and thanks for your suggestions.

I'm running Vista Home Premium with SP1 ... I don't think there is an SP2.

Kind regards ...

Hello DCaD,

did you look for and find the small file left by the now cleaned up vurus?

Hello CDaD, [ Note: I have put the numbers before each entry below OK ?And each section I have written is in '[ ]' square brackets. ] [ I hope you can follow this. It has taken a long time to gather sorry. ] [ I have searched for the file names and exact details on a help site which asks for people to sent a complete scan of the system into them. The site was ]: forums.afterdawn.com/ [ Entries # 2, 3, 4, I have copied from the extremely long copied detail of a system, all from: ] forums.afterdawn.com/thread_view.cfm/519042
[ As you can see in #2, the helper on this site has noted that he wants to check out "winrvc32........ ] [ I copied winrvc32.dll and pasted it into Google. And the items on the #1) address are relating to it. ] 1) http://www.google.co.uk/search?sourceid=navclient&ie=UTF-8&rlz=1T4GGLJ_enGB294GB294&q=winrvc32%2edll+

2) Need help wih spyware malar nd r posibly viruses

3) Winlogon Notify: winrvc32 - C:\WINDOWS\SYSTEM32\winrvc32.dll

4) O20 - Winlogon Notify: winrvc32 - C:\WINDOWS\SYSTEM32\winrvc32.dll

==================================================

[ The address of the site in large point and I have put 1) by it, has a whole lot of detail of this "winrvc32.dll" and it does appear to be a virus. Which may be quarantined, or safe now, but you will need to search for this winrvc.2dll and getting rid of any file which is related. The site I list should help here! Go to your 'system32' Folder, and you should find it in there. ]

[ Good luck and let me know how you get on. ]

Take care.................

Hello CDaD!

Next time You decide to format your C: drive, buy the excellent recovey program DriveClone Pro.

A push on a button and you're back on the track! You don't even need a antivirus prog!

Regards, Jonas in Sweden

Hi,

That is an excellent suggestion. Fortunately, this hasn't happened often, but when it does, it is a PITA. This time, it was more frustration that usual.

My laptop came with Vista Home Premium installed, so no disks. There was a 'recovery' file also on a partitioned drive D, which sounds pretty safe. "it" also instructed me early on to create "recovery disks", which also sounded pretty safe.

About a month ago, one faithful morning, there was an error in the boot sector, so nothing would start (oh crap). Well, I did have my trusty recovery disks which DID start my computer, but wouldn't allow a 'repair' screen ... the only solution in-hand, was to allow it to "rebuild C drive to the 'original factory condition'" ... not exactly what I would call an elegant solution. Frankly, being a laptop, I don't know of too many who happen to carry their original system disks with them anyway, so it seems although my dilemma was mine, it has probably happened to others when away from their home base.

Anyway, thanks much for your suggestion about Drive Clone ... I will check it out.

AND, register with us on CR4 ... it's a good (mostly ) group of folks, and we could use your input.

Kind regards ...

Hello DCaD,

You may want to take a peek at this..............It is the file details and association of the file you mention.

http://www.threatexpert.com/files/winrvc32.dll.html

Go down the page and you will see ten instances of various cleaners and this file. One may be the cleaner you are using.

I am still checking how to remove any bit and pieces this Trojan left.

I say Trojan because on most sites I have been to it is listed as a 'back door Trojan'.

Take care..............

Hello DCaD,

I searched for this in relation with Vista and got this back. The first line (site) is where I got this info.

The rest explains what this 'Virus/Trojan' is related to.

I would be obliged if you could let me know if this was useful, as I am filing it for myself.

And meant in the nicest possible way, if you do not want any other replies posts let me know. This is not an insult in any way, shape or form OK?.

As you know and as you can see from the info' this may 'morph' into something else, and some of the stuff I sent and this explains this. Take care and good luck. I would hate to see your system still infected.

Please see below:

http://www.bleepingcomputer.com/startups/winrvc32.dll-21252.html

C:\Windows\System32 for Windows XP and Vista. <<< This is where to look (if it is still there)!

www.majorgeeks.com

ref: "HighJack This"

Hello wire,

Unfortunately for DCaD

that 'thang' he had or has was a virus. Some if not all instances mention it as a Trojan, but maybe a Trojan would have done more damage? Still, if he has just sorted his 'C' section, (cant recall the correct word there sorry), it wont have much to work on? I think it is one one of the sites I pasted for him, they mention how to get to the file it left behind. By memory (not good!) it is in C Window 32. But I have not heard if he has tried to find it yet.

I think it was you who said it was a virus in the first place?

I am glad it did not wipe him out! But I would want to get the bit it left off, or at least check to see it is there?

Honestly, if these useless people spreading viruses were to put as much effort into designing a new OP they would be useful?..............I do not understand what they get out of it. I do understand if it was left as a key-logger and was sending stuff back to somewhere, to allow them to fleece him. But virus for there own sake............Naarrgghh!

Take care Mr wire........and happy holiday.......................

Yes all good too.

The link and description I sent will find the scrap ASAP it's scan function takes about 2-3 seconds and from there you can isolated, destroy ect.. and it's free

DVader ID'd viruses

I also had a strange start up problem about the same date that you first started the query. I first had a virus [first one ever 30 months] and was "fixed". the start up got worse and worse. i did a restore which did not help much.[not earlier enough] I later figured out that my anti virus [AVAST, paid version] was locking up near end of start up. I went into "troubleshooting" and noticed settings had changed itself during one of the updates. i discontinued " Rootkit scan on system startup"

2-"disabled raw disk access in avast boot -time scan"

3-when i un installed and re installed it kept my previous settings. which was the problem. I found out by a FAQ blog. I hope this helps some one and avoid the misery I went through for 6 weeks.