Easy16.dll

This is my first time here and I'm far from proficient at the computer. I have Windows 98, a PB Multimedia 7900 with 366 MHz Celeron processor and CD ROM, if you need that info. I can't get in my control panel. When I go to Settings, Control Panel, I get an error message: EXPLORER caused a general protection fault in module EASY16.DLL at 0001:00000073, followed by a list of registers. I last used the control panel just before Christmas to change the text on my screen saver. The only thing I've downloaded recently was something called "atomic clock" as this program is supposed to keep it accurate. I uninstalled that, in case it was the problem, but to no avail. I found a file called EASY in Windows Explorer in the Windows System file. It is a control panel ext. file, called Easy.cpl. I tried to open it, and got the same error message, except that it says RUNDLL.32 caused...........(same message). I have other things going on. For instance, when I change my preferences on Windows Explorer (to View as a List, with details, rather than as a web page) it will change, but when I open Windows Explorer again, it has reverted back to the original settings, which it never did before. The next major thing wrong is my CD Drive isn't working. I have my Master Recovery CD, and thought I'd put it in and try to fix the problem with it, and I can hear the CD turning, but nothing happens. My CD drive is Q. I can't get into the control panel to do anything! (Tired of Merry Christmas text screen saver) Anyway, do you have any idea what I can do to fix this, short of calling the warranty company and ending up losing all my files?
I upgraded my McAfee, and ran va scan and found no problems. I have Norton FirstAid, I ran that and found no errors. I've done a thorough scan and found no errors. I don't think it's a virus, as I have a Wavman program, and it works fine. I can get on AOL, get on the web, use Wavman, play solitaire, etc. with no problem. Any help would be appreciated. Or tell me if I'm out of my league and playing with fire. I don't want to make things worse.

 

check & see if any of these may apply

http://www.google.com/search?hl=en&q=+EASY16+&btnG=Google+Search

 

you really should go to Housecall & do the free online scan

http://housecall.antivirus.com/

 

nothing in there that helped - I already tried that - thanks anyway

 

I can't find anything else thats why I want you to go to housecall... Trojans rename themselves as .exe files

 

I did go to housecalls and ran the scan. It alarmed on 6 files, all noncleanable. 4 are d/l joke files I've had for some time. I don't mind deleting them as they're not important. I don't think they're viruses, but some viruscans mark them as they attach something to them which makes them "work" a certain way, and it can look like a virus. So I can delete those without much worry. However, 2 are Windows System files. It says wormbadtransa for both, both in Windows/System one is Kern32, the other hksdl.dll. As it says they're not cleanable, I'm hesitant to delete them. I went to McAfee and scanned on the Kern32 file, and it didn't mark it. I'm going to email McAfee before I delete a file like this, as it is a system file. Thank you for the info.

 

I did investigate the virus alert by HouseCalls. It's a worm called Badtransa, which replies to email messages with itself as an attachment. It's not destructive, and medium risk. It comes in email programs like Outlook/Outlook Express. From the sound of it, I don't think it has anything to do with what's going on with my control panel, but I'll get rid of it anyway.

 

Badtrans is a nasty worm indeed, and certainly deserves to be taken seriously: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_BADTRANS.B&VSect=T

The two files you mentioned are Badtrans files and must be deleted.

Complete manual removal instructions:

Restart Windows in Safe Mode (reboot your computer, as soon as you see the text Starting Windows at the bottom of the screen, hit the F5 key).

Find the following files, if present, and delete them:
In your Windows folder: INETD.EXE

In your Windows\System folder:
KERN32.EXE
KERNEL32.EXE
KDLL.DLL
HKSDLL.DLL

Now go to Start/Run, and type Regedit.
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Click 'RunOnce' once, in order to highlight it.
Now find the value 'Kernel32=kernel32.exe' in the right pane, highlight, and hit 'delete'.

Good luck

 

well I'm glad you found it...
I knew there was something there. Tony is great w/ this sort of thing . Let us know how its going on the cleanup.
All the people getting automatically sent by the worm e-mail may become infected too.