- Nuked files
- Posted by Russ on February 7th, 2004
Had to eliminate some system files to get rid of a worm.
Now I'm unable to run the machine. Can someone get me
copies of files32.vxd, cwbmidi.drv, and atikey32.exe?
- Posted by Russ on February 7th, 2004
Oops. No e-mail address. rbell16@yahoo.com
- Posted by Alan Edwards on February 7th, 2004
They are not system files. I suggest you read the details on the worm
on your AV's web site and see what you have to do.
Files32.vxd is supplied by the rather old PrettyPark worm
....Alan
--
Alan Edwards, MS MVP W95/98 Systems
http://dts-l.org/index.html
In microsoft.public.win95.general.discussion, "Russ"
<anonymous@discussions.microsoft.com> wrote:
- Posted by on February 7th, 2004
It was indeed Pretty Park. Had apparently been in the
machine for more than a year when my mother asked me to
load her AV. It immediately deleted those files and now
the machine will not function. How about atikey 32.exe? Is
that possibly the necessary file?
Russ
- Posted by Alan Edwards on February 7th, 2004
Here are some old notes on PrettyPark
I think it more likely you have not removed PrettyPark Worm correctly
as
this is not a Win9x file.
http://us.mcafee.com/virusInfo/defau...&virus_k=10175
An extract:
-------
Indications Of Infection
This program, when run, will display a "3D Pipe" screen saver and then
will copy itself to FILES32.VXD in WINDOWS\SYSTEM folder. It then
modifies the registry key value "command" located in the location:
HKEY_LOCAL_MACHINE\Software\CLASSES\exefile\shell\ open
from "%1" %* to FILES32.VXD "%1" %*. This in essence will cause the
FILES32.VXD to run during the execution of any exe file.
--------
If you cannot follow it all, here is the part in the Registry to be
changed back:
Make up a file from the lines below. Copy into a file called
exefix.reg
which should be created in Notepad. Do not retype, copy in case of
errors. The 1st line in the file is the line REGEDIT4
The last line must be blank.
Make sure your mail or news reader does not add any spaces to the end
of a line.
Doubleclick to restore the association.
-----copy below this line exefix.reg------------
REGEDIT4
[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"
---- end file above here
More information:
http://www.symantec.com/avcenter/ven...park.worm.html
http://vil.nai.com/vil/virusRemovalI...?virus_k=10175
Terminal Server Programs Do Not Run, System Cannot Find Files32.vxd
http://support.microsoft.com/support.../q249/9/21.asp
"atikey 32.exe" or atikey32.exe"?
Atikey32.exe is valid for an ATI video card.
If it is a valid file, then reinstall, though I cannot see why that
would make the system inoperable and I suggest you look up
Please supply more details of what error messages you get and exactly
what you mean by "can't run the machine"
I strongly suggest you read your AV site or supply more details here.
....Alan
--
Alan Edwards, MS MVP W95/98 Systems
In microsoft.public.win95.general.discussion,
<anonymous@discussions.microsoft.com> wrote:
- Posted by on February 7th, 2004
I'll give it a try. Thanks, Russ