asked on

MPNotify.exe Application Error after virus fixes

I was given a laptop with a number of viruses on it. I ran avast on it to start the removal process and it found a load and deleted the files. It also ran a boot time virus check. One of the files was mpnotify.exe which had a virus. It couldn't repair the file so it deleted it.

Now when I try to login to the machine, it comes up with the error "Mpnotify.exe Application Error" and then gives a memory referenced error message below. Once you click ok, it immediately closes the machine down. The only way I can get into the machine is to boot into safe mode with no networking and login to the computer not the domain.

Can anyone help with this please?

Jonvee

Found a similar problem here, see if this helps>

mpnotify.exe - Application Error:
https://www.experts-exchange.com/questions/23141181/mpnotify-exe-Application-Error.html

Jonvee

Which suggested this>
mpnotify.exe > Multiple Provider Notification application

Has more to do with windows login on a network, rather than windows updates.

http://support.microsoft.com/kb/885423
https://www.experts-exchange.com/questions/23136305/Startup-Pop-UP-problem-Accessing-protected-Item-PZ12.html
http://km-dev.blogspot.com/2007/05/xpe-tip-37-mpnotifyexe-is-not-held-by.html

Jonvee

Also i recommend downloading, then updating Malwarebytes' Anti-Malware:
http://www.malwarebytes.org/mbam.php
When updated, reboot into Safe Mode by selecting F8 at bootup & run a scan.
Tutorial available, if you require >
http://www.bleepingcomputer.com/forums/lofiversion/index.php/t169669.html

Then to be really sure, try the Kaspersky free online virus scanner which is a good way to find out if you have any viruses or spyware without having to uninstall your existing antivirus software>
http://www.kaspersky.co.uk/virusscanner

This scanner is also very good>
Trend Micro's free online virus scanner:
http://housecall.trendmicro.com/uk/
Ideal for scanning online, using "Safe Mode with networking".

GuitarRich

ASKER

yeah - I've looked at that and its not much help unfortunately. I used the XP recovery console to copy mpnotify.exe from the XP disc back over the top and that has changed the message. Now I'm getting an svchost.exe error. But it still logs the user off straight away after logging in. I can't even get into safe mode anymore :(

Jonvee

Maybe the laptop is still quite infected so an alternative could be to remove the infected HD, connect it as 'slave' in another machine, then run Malware & virus scanners from the new machine.

ASKER CERTIFIED SOLUTION

warturtle

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Jonvee

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

GuitarRich

ASKER

Ran Dr Curit and it seems the PC is infect with the Virut.56 virus - everywhere I look says to format and re-install windows :( oh well. Thank you for your help in getting this far!

warturtle

Yes, Virut is going to be difficult to remove. Infected files generally have to be replaced and there could be thousands of them in Windows alone. The only things that you can possibly save are your word, excel and powerpoint documents and that can be done by creating the Knoppix CD as advised in the previous post and taking a backup on USB drive.

Virut will infect exe files, so don't copy any of those.

GuitarRich

ASKER

Thanks for the help guys

warturtle

Glad to be of assistance :) and thanks for the feedback.

Jonvee

You're welcome. Thanks.