1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

trojan virus in my computer

Discussion in 'Malware and Virus Removal Archive' started by mary651, 2002/12/03.

Thread Status:
Not open for further replies.
  1. 2002/12/16
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Also:
    I waited a few days before I re-installed the Word 2000 SR1 and that was when I checked to see if I could use it and couldn't. I still have not downloaded the WinMx program again. Mike told me to get the Word program working first. Mark I just went to the site that Mike directed me to. It has the gdi32.dll and the user32.dll files, but those aren't the ones SFC says need to be restored. The site doesn't have the other two dll files listed and of course wouldn't have the exe files either.
     
    Last edited: 2002/12/16
  2. 2002/12/16
    BillyBob Lifetime Subscription

    BillyBob Inactive

    Joined:
    2002/01/07
    Messages:
    6,048
    Likes Received:
    0
    mary651

    Right click on the My Computer Icon on the Desktop and send us the numbers that show up.

    I am still SERIOUSLY thinking that a re-install ( over existing ) of Windows may be in order.

    For two reasons.

    Missing or corrupted ( wrong version ) files.

    I would aslo suggest not getting any individual files from anywhere. It can cause more problems than you already have

    Some one that is familiar with Gateway will need to help with a re-install.

    And as far as any Trojan goes I think it is Microsoft .

    BillyBob
     
    Last edited: 2002/12/16

  3. to hide this advert.

  4. 2002/12/16
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Going to properties on right-clicking on "my computer" also brings up Microsoft Windows 98 4.10.1998
     
  5. 2002/12/16
    BillyBob Lifetime Subscription

    BillyBob Inactive

    Joined:
    2002/01/07
    Messages:
    6,048
    Likes Received:
    0
    OK. That says we are dealing with Win98.

    So any and all files downloaded from anywhere MUST match at least those numbers and I believe also the date.

    But what complicates matters even more is the question of any updates and/or patches that may have been installed.

    Windows .DLL files do not work alone. Even though SFC may say a file is missing or corrupt it just * MIGHT * be of the wrong version and does not play well with the other files.

    Unless SFC is run and updated FAITHFULLY after each and every change in software it is not reliable at all.

    Even if you add updates and/or patches SFC must be run immediately in order to be reliable.

    In this case where software has been installed and uninstalled makes SFC even more unreliable.

    I am not familiar with Gateway at all but, there must be a way to re-installed over itself. Which I believe in this case would fix things up.

    BillyBob
     
  6. 2002/12/16
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    The unwise.exe and quitremote.exe file are a part of Macromedia Shockwave player. The unwise.exe is to uninstall the shockwave player, doubtful this is the problem.

    Having user32.dll and gdi32.dll in the system folder and the helpdesk\sfc folder tell me that the files have already been restored using System File Checker. It moves the old files into the helpdesk\sfc folder when restoring the ones in the system folder.

    Ragent.Dll and Fp4autl.Dll are shared files from Word, Office and FrontPage.

    This is what I would do, uninstall Word, reboot. Then go into the c:\program files\common files\microsoft shared\web server extensions\40\bin folder and Cut and Paste the Fp4autl.Dll file out of that folder to somewhere else, just do not delete it, then do the same for Ragent.Dll in c:\program files\common files\microsoft shared\web folders. I would create a folder named c:\dunno, then create folders named 'bin' and 'web folders' under that one, just to keep from losing track of where they came from.

    Then install Word again. I say this because these are shared and usually are not removed when uninstalled. Then when you install again, the setup program checks the version number, if it matches what it has, it does nothing. The setup program does not check if these files are corrupted, only if they are there. If not there, it puts them there.

    If you cannot move them because windows says they are in use, restart, right when you see Starting Windows 98, have the CTRL key held down, then choose to start in Safe Mode, you should be able to Cut and Paste.
    Do you also have any version of FrontPage installed?
     
  7. 2002/12/17
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Doing all that you said Mark. Will let you know how it turns out. Don't have any version of Frontpage.
     
  8. 2002/12/17
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    I had used the sfc a while back to replace the files user32.dll and gdi32.dll. When I still got the error messages concerning these two modules, I figured that there was something else wrong and replacing them didn't work or solve the problem.

    Following up on the procedures. Taking the path you said after "bin" the next folder was named "1033" and the only thing in it was "FPext" and it was shaped like an envelope. I assumed that this must be it so I cut and pasted it as you said. On the next path, I got to web folders and there was no files at all in it I then re-installed Word and checked the path to the bin and the FPext was back. Going to Web Folders still came up with nothing being there. There was no Ragent.dll before I un-installed or re-installed.
     
  9. 2002/12/18
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    The FPext.msg file is a FrontPage Extension Message file. Contains error messages for Frontpage. I am aware that you do not have FrontPage installed, but remember this is a shared file to allow FrontPage to interact with Word or Office, and Personal Web Server. It should be there. I do not have Office or Word, and I still have it. This was not the one you posted that was corrupt. You did the wrong one.
    You went too far into the folders. It was the C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\40\Bin folder, not the C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\40\Bin\1033 folder. Yes, I know this can be confusing.
    Under the C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\40\Bin folder you should have three files there.
    FP4anwi.Dll, FP4autl.Dll, and FP4awec.Dll

    Now you are saying that Ragent.dll was not there in the first place, but SFC reported it as corrupt?
    Anyway, you also said that you have the 98 that originally came with the computer, so I am going to assume you mean 98, and not 98SE. Ragent.Dll did not come with 98, but did come with 98SE. Go to this link and download Ragent.Dll.
    http://www-pw.physics.uiowa.edu/~rlb/nssdc/temp/program/COMMON~1/MICROS~1/WEBFOL~1/
    Copy it to the C:\Program Files\Common Files\Microsoft Shared\Web folders.
    Open a dos prompt window and type this in exactly:

    cd\ "program files\common files\microsoft shared\web folders" <press enter>
    regsvr32 ragent.dll <press enter>
     
  10. 2002/12/19
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Mark, you say that in the "bin" folder there are supposed to be the three files you listed. Am I doing the path wrong? I am going into "My Computer" then to the "C" drive, program files, common files, Microsoft Shared, Web Folder Extensions, 40, Bin and all that is there is the "1033" folder and nothing else, are the other three files supposed to be there including this folder? If that is true, no wonder my computer is so messed up. None of the files I need are where they are supposed to be. I need to find out if I am doing it right. I am using the Windows 98, not the 98SE version.
     
  11. 2002/12/19
    brett

    brett Inactive Alumni

    Joined:
    2002/01/11
    Messages:
    2,058
    Likes Received:
    0
    A shot in the dark: do you by any chance have CyberMedia First Aid 97 installed?
     
  12. 2002/12/19
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Brett. I have the "Help Spot" from Gateway, but found no First Aid 97. In the "Help Spot" there are several Cybermedia programs such as CPR and Oil Change. I have tried to get updates on these but I think Cybermedia no longer exists.
     
  13. 2002/12/19
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Mark, I have downloaded the Ragent.Dll file and copied it to the correct folder. Don't remember how to open a DOS prompt. Every time I do it says it is an invalid entry. How do I get there and how do I get back out?
     
  14. 2002/12/19
    brett

    brett Inactive Alumni

    Joined:
    2002/01/11
    Messages:
    2,058
    Likes Received:
    0
    Do you have installation disks for the Cybermedia products? If so, uninstall the applications and see what happens.
     
  15. 2002/12/19
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    Start\Programs\MS Dos Prompt, click on the X on the window or type in exit and press enter to close.
     
  16. 2002/12/19
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Mark, Mike, Brett, and all of the guys who tried to help me the past few weeks, I want to thank you all. I am giving up and am going to try to re-install my Windows 98 OS. It just seems like too great a task to continue all of the suggestions that you all have given me. I tried and everything failed, I am afraid. I think the computer is just too messed up to do anything but try to start over. Thanks again. Am into the Windows 98 message forum to ask for assistance on re-installing. If your expertise extends to those issues I will check on that board for your comments. I certainly appreciate all that you have done.
     
  17. 2002/12/20
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    I surely understand Mary.

    You might consider an overlay install first. This will keep you from having to reinstall everything.

    To do this boot from your win98 floppy with the cd in

    run setup

    when it asks where to install c:\windows.000 make it only say
    c:\windows

    This probably will correct your problem but is not absolute. When you do this the install process takes steps to keep all software and settings intact.

    But it will replace all OS files that are missing and/or incorrect.

    Good luck,
    Mike
     
  18. 2002/12/20
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Mike, the computer is running in safe mode and I can't get it out. I hope you are online right now, if not could someone else please tell me how to get it out of safe mode. I just re installed Windows 98 OS over the top of itself as Mike said to.
     
  19. 2002/12/20
    markp62

    markp62 Geek Member Alumni

    Joined:
    2002/05/01
    Messages:
    4,012
    Likes Received:
    16
    Is there anything odd in the Device Manager? like yellow ! or yellow ? or and red X's. Go into Control Panel, System Properties, then click on the Device Manager tab, or hold down the Window key and press the Pause/Break key, this will bring it up also.
     
  20. 2002/12/20
    mary651

    mary651 Well-Known Member Thread Starter

    Joined:
    2002/11/28
    Messages:
    94
    Likes Received:
    2
    Mark, there is a red X on the dial up adaptar.
     
  21. 2002/12/21
    mflynn

    mflynn Inactive

    Joined:
    2002/08/14
    Messages:
    4,141
    Likes Received:
    9
    Mary

    Did it give any problems installing?

    Is it really safe mode or only looks that way by the screen size etc? Does it have SAFE MODE in all 4 corners?

    The modem would not normally cause this.

    Do you have an entry called OTHER in device manager if so what is in it. Then click and remove these devices.

    Begin at top click + and check for exact duplicate entries on all but HD Contorllers sound and System devices. If there are dupes remove all dupes! Then reboot!

    Mike
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.