PDA

View Full Version : TDS update killed Windows...


Buckyball
July 13th, 2004, 04:18 PM
I too was the victim of the bad update. I was successful in downloading another update however, I was not smart enough to not delete some important files. I think the files I deleted are showing up in the new Trojan scan as missing files, as follows.

16:42:13 [CRC32] File doesn't exist: C:\WINDOWS\System\cmd.exe
16:42:14 [CRC32] File doesn't exist: C:\WINDOWS\System\netstat.exe
16:42:14 [CRC32] File doesn't exist: C:\WINDOWS\System\drwatson.exe
16:42:15 [CRC32] File doesn't exist: C:\WINDOWS\System\drwtsn32.exe
16:42:16 [CRC32] File doesn't exist: C:\WINDOWS\System\rundll32.exe
16:42:17 [CRC32] File doesn't exist: C:\WINDOWS\System\taskman.exe
16:42:18 [CRC32] File doesn't exist: C:\WINDOWS\System\taskmgr.exe
16:42:19 [CRC32] File doesn't exist: C:\WINDOWS\System\winlogon.exe
16:42:21 [CRC32] File doesn't exist: C:\WINDOWS\System\regedt32.exe
16:42:21 [CRC32] File doesn't exist: C:\WINDOWS\System\netmsg.dll
16:42:25 [CRC32] File doesn't exist: C:\WINDOWS\System\winsock.dll

Do you think this could be true?

I did not back up the files I deleted thinking there were trojans embedded within. I thought I was only deleting the embedded file and not the complete file (stupid me). Can you tell me anything about the files shown above? What they do on my computer?

There are some things that are not working on my computer. Such as not all webpages are displaying that did in the past. I have an AOL account that I access directle and through AOL.com. Accessing through aol.com will show the homepage but will not proceed to the next page when I enter my screenname and password. Likewise, some webpages that were accessable before are coming up page not found.

I could go on and on but this is enough for now.

Thanks,

Bucky

Pilli
July 14th, 2004, 04:55 AM
Hi Buckyball, All the files you show are legitmate system files.

In Xp - Please run System restore to an earlier date than your TDS deletion date, be aware that doing a system restore does not delete any of your normal data files.

Good luck. Pilli

Buckyball
July 14th, 2004, 10:03 AM
Pilli,

Thanks for the reply. I should have mentioned I am running 98SE.

Bucky

nick s
July 14th, 2004, 11:57 AM
-{ Quote: "Pilli,

Thanks for the reply. I should have mentioned I am running 98SE.

Bucky" }-
This link should help:

Using System File Checker (http://www.windows-help.net/windows98/start-142.shtml)

Remember to enable "Check for deleted files".


Nick

Jooske
July 14th, 2004, 02:33 PM
In windows98se you don't have cmd.exe but in c:\windows\command.com
netstat.exe is in c:\windows too and so you can find back most of your files.
Once you located and added files you like in CRC (see in the IMPORTANT sticky threads on top of this form the very interesting threads about CRC and some tests with it.) see the CRCscan.txt in TDS > Edit Text Files etc.