I am running winxppro. I have adware and Ave running but somehow picked up a virus. My pc just keeps starting and restarting. First I get the Windows XP start up screen, black background, which runs for about 3 mins and then it goes black, After about a minute the screen lights up to blue, icons that look like ghosts start appearing and then they disappear and I have the blue screen with *Security Warning, Fatal error IE0028:C0011E36 in VXD VMM<01> + 00010E36. Error was caused by Trojan-SPY. HTML.Smithfraud.com. Then it goes to a Dark Blue screen and reads something like there is an error in Internet Explorer and windows has to shut down...
At the bottom it reads STOP:0xoooooo8E {0xC0000005,0xF9A92459,0XF3793B58,0X00000000}
vdmt16.sys-addressF9A92459 base at F9A92000, Datestamp 427a2a44
Beginning dump of physical MEMORY, screen goes blank and reloads.
I have been able to get it to safe mode with the ghost icons and the Security Warning in the background which reads as above* and a box that has the red round circle with the X in the middle saying that, Error loading F:\windows\sustem32\NVCPL.dll
A dynamic link library (DLL) intialized failed
I downloaded Download s-t-i-n-g-e-r.exe onto a floppy from my other PC and I am trying to get it to run with out success. I will try to connect to the internet with the infected PC to see if I can run it or another virus remover but wanted to get this in here to see if I am on the right track. Thanks!

what firewall have you got??the trojan you mention..is not a trojan.......but a website.have you added any new HARDWARE to your pc.?Searsman:

Looks like you have at least two infections:

A. The vdmt16.sys file is from the Backdoor.Haxdoor.D Trojan Horse.  The removal instructions are here:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.haxdoor.d.html

B. The NvCpl file is likely from the [email protected] worm.  The removal instructions are here:

http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

You may need to boot to Safe Mode to edit the registry.  

Let us know if you need more help.

Regards,
Doc






had same issue eariler in the week.  If you can boot in safe mode w/networking try housecall antivirus, I ran stinger and it found nothing , house call found a ton of viruses and after running it a couple of times it cleared my issue and havent had a problem since

good luck
jayGood suggestion, Jay, and welcome to the forum!

I have used Striker, Adaware, housecall, pc illian as well as both of the recommendations from Doc about manually removing backdoor virus's and still have a problem. My desktop is blue with this in the middle "Security Warning, Fatal error IE0028:C0011E36 in VXD VMM<01> + 00010E36. Error was caused by Trojan-SPY. HTML.Smithfraud.com."  I can't change my display at all. It is set at 800 x 600 with color quality set at 4bit. Any ideas?Have you add a new vid/graphics card?/like gainwood.No new hardware or software.reforemate the drive and reload osSearsman:

I did a Google of your error message and this is the result:

http://www.google.com/search?q=Fatal+error+OE+0028+C0011E36+in+VXD+VMM+&hl=en&lr=&start=0&sa=N

And a Google REGARDING html.smithfraud.com yielded this:

http://www.google.com/search?hl=en&lr=&q=HTML+Smithfraud+com&btnG=Search

It looks like only forum posts (like this one) with no official answer from an authoritative Web site of, for example, an anti-virus software maker.  Hence, i'd take all the answers with a grain of salt.

BlueDaddy's advice to reformat the hard drive and reinstall Windows may be your best option.  You may lose all your documents and PROGRAMS and etc., but that is safer than doing a repair installation and having the virus(es) or Trojan Horse(s) still present.

If you'd like to take the chance and do a repair installation, the instructions are here:

http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/doug92.mspx

You may still lose some files or have to reinstall some programs after you try this:

http://support.microsoft.com/kb/312369


Hope things work out,
Doc