Unsolved

This post is more than 5 years old

9780

November 25th, 2008 08:00

Mc Afee virus scan stops on the same file and cant be skipped

Im having a problem with my McAfee virus scan. I havent been able to complete a virus scan in over a month. This is because the scan always stops at about 65% on the same file

nvcplrus.chm

This file is in the system 32 folder in repository files folder.

 

From what i have gathered, this file is a russian text help file for the Nvidia Control Panel. I dont really know how to fix it, other than deleting the file as im sure i dint need it, as im not russian! I tried chatting with McAfee to see what they could do/recommend, but they told me to contact Microsoft to get a new version of the file as it seems as though the current one is corrupted.

But it wont let me delete it in Normal mode.Would i have to boot in Safe mode to delete it and can anyone foresee any problems or errors that may arise if i did so?

Anyhelp or advice would be welcome.

2 Intern

 • 

5.8K Posts

November 25th, 2008 20:00

 

A limited google search suggests that file should not be in System32, but in your Windows/Help folder/subfolder, which is suspicious that it might be masked malware using a legit filename.

 

The easiest thing to try first, is to upload nvcplrus.chm to VirusTotal for analysis by mutiple scanners, and see if any flag it as malware. (This website has no removal capability, so this is safe).
It only takes a few minutes. Their website is here:
http://www.virustotal.com/

 

Once there, just browse to the location of that file, hilite it, click Open, and then the Send File bar to upload it.

 

Report back what you find.

November 26th, 2008 03:00

ill try it later when i get home and get that website to scan it.

The thing is, it in System32/Driverstore/RepositoryFile/nvddXXXXXX

Where XXXXXX is some numbers. in that folder there are other Nvidia help files for all other languages. nvcplesp(SPANISH).... nvcpleng(ENGLISH) etc. but when ever it get to nvcplrus it stops scanning. there are also icons with nvidia symbols, but im not to sure if thats relevant. thanks for the suggestion. ill post back when i find out.

 

would you say it ok to delete it in safe mode because it seems to be a help file?

2 Intern

 • 

5.8K Posts

November 26th, 2008 16:00

Okay, that sounds a little more reassuring, if all the other language files are also present as indicated.

In Vista, the DriverStore\FileRepository folder keeps backup of drivers. In general, you don't want to delete anything from this folder (or subfolders) but this help file is surely not essential, and *should* be safe to delete, if nothing turns up at Virus total. However, I don't use Vista, nor NVidia, and cannot gurantee this.

I'm not even sure one can say this file (if clean) is the problem just because the scan freezes on it. What shows on the screen during a scan is just a representation in general of what is (or has) been scanned. It is not like McAfee has flagged this file with an alert as a possible infection (an assumption I am making). I'm also assuming you have no other anti-virus running in the background (in real-time) or installed- that is a set-up for conflicts.

If the file is clean at VT, and if your version of McAfee allows this, tell it to ignore this file during scanning. Then run another scan and see if the freeze still occurs.

Another thing to try, since you haven't run a full AV scan for some time, is to rule out infection by running an online scanner, such as Eset's Online Scanner:
http://www.eset.com/onlinescan/
When doing this, you should disable your resident shield (real-time protection) in McAfee first (and remember to re-enable it after).

Finally, if you want to try to delete this one file, I would first try re-naming it to something like nvcplrus.old (you might have to do this in safe mode) and make sure your system isn't adversely affected (especially your display/help files), for a day or two. If no problems, then it's probably safe to delete.

November 27th, 2008 04:00

hi again.

I tried to boot in safe mode and delete the file. It wont let me delete it. It says that i do not have the permissions to delete it and gives me the option to try again. it keeps popping up asking me to try again, so i cancel. I havent tried renaming it but ill give it a try too.

 

I also tried to upload it to Virus total and firefox kept on crashing. Even when i double click on the file, windows explorer stops responding.

Im pretty sure that my version of McAfee doesnt have the option to skip this file during a scan, but ill investigate to see if i can.

November 28th, 2008 05:00

windows wont let me rename it at all. I scanned it with AdAware 2008. did a full scan. It seemed to take an awfully long time to scan nvcplrus among other files in the same folder but it seemed to scan them eventually. I also found a worm on my computer which had been there just after i got the computer so i don't think that had anything to do with the scan not completing.

Any ideas?

2 Intern

 • 

5.8K Posts

November 28th, 2008 13:00

All you have reported, to date,  suggests you have some malware.


1) Have you tried the ESET Online scan? It has all the abilities of NOD32 AV to scan and remove, and it's free:
http://www.eset.com/onlinescan/


2) Many here, myself included, have stopped using Ad-Aware, not finding it very useful. A far better free program worth getting is Malwarebytes Anti-Malware (MBAM), an on-demand scanner/remover of malware. Instructions on where to get it and how to use it are contained in Bugbatter's reply (#4) in this thread:

http://en.community.dell.com/forums/t/19242476.aspx#19372061


3) If that does not solve your problem, you should post a HijackThis log in the Malware Removal board for  further advice, according to the instructions here:
http://en.community.dell.com/forums/t/19241959.aspx


Good luck!

No Events found!

Top