Error Message win98

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

chess3945

Thread Starter
Joined
Jan 3, 2002
Messages
5
Hope you can help, as I am not computer sauvy. I get three error messages on startup in the following order.

A required .DLL file, CAPI2032.DLL, was not found.

I close that out, I then get this:

Unable to start process Ac32.exe, also with this I get a a window in the task bar, when I open that up, (w/o closing the above error message.) It reads: Status of Eurofile transfer.

What is that? Well actually, what does any of this mean? It did effect Zonealarm, but I downloaded it and reinstalled it again. It seems to be working fine. Also I havent been able to uninstall cleansweep, I get error messages when I try, even after I uninstalled and reinstalled Norton 2002. If you need those messages let me know and I'll try it again.

Any help or suggestions would be great appreciated.
Thanks
 

chess3945

Thread Starter
Joined
Jan 3, 2002
Messages
5
I recently installed WindowsXP, but kept on getting messages about virtual memory being to low while playing a game. I uninstalled it. Did I lose the DLL when I uninstalled it?

Thanks again
 
Joined
Dec 15, 2001
Messages
1,546
Hi chess3945,

Welcome to TSG.

It is possible you lost your dll during uninstall.
One option I have used to find deleted files is System File Checker. If you go to start/help/index and type in sys, you will see
it. double click using, then start in next window. Click on scan for altered files, it may find your dll if so try to restore form SFC or win 98 disk. This can be a time consuming process as it will bring up every system file you have updated or deleted.
Check back for other ideas.
 

eddie5659

Moderator
Malware Specialist
Joined
Mar 19, 2001
Messages
37,298
Hiya

Just jumping in quickly.

CAPI2032.DLL is from ISDN cards. Do you have one, or have you just installed a new card?

the errors regarding Norton will also be useful.

Regards

eddie
 

chess3945

Thread Starter
Joined
Jan 3, 2002
Messages
5
I havent installed a ISDN card or anything related to networking on my computer. Though when I installed Windows XP it couldnt find my modem, instead went through my fax modem.

Ratchet: I did try system file checker and it found nothing.

Eddie: Im gonna try and uninstall cleansweep and get back to you on those error messages.

Thanks to you both. Any more suggestions are greatly appreciated and always welcome.

Chris

BTW, anyone have any idea what Status of Eurofile transfer is?
 

chess3945

Thread Starter
Joined
Jan 3, 2002
Messages
5
Thank you Eddie and Ratchet, for your ideas. Though neither of them worked, I still appreciated the welcome I got from you both.

I have no idea what I did, but somehow I got those error messages to disappear. I deleted a few Window XP files still on my computer, and empty the Norton protected recyle bin and that seemed to do the trick.

Thanks again for all of your help.

Chris
 
Joined
Dec 9, 2000
Messages
45,855
Have you recently had an infection with the magistr worm?

In fact have you done an updated antivirus scan? You can do an online one here:

http://housecall.antivirus.com/pc_housecall/


Magistr has been known to place the ISDN connection wizard in startup, among other things.

Since you've uninstalled XP, you can run the startup log, which will give us a more complete look and help to spot any clever trojans that may be installed. Download, unzip and run the startuplog.com file from the link below. When you run it it will place startuplog.txt on your desktop. Copy and paste the full contents of that (not stubbpaths.txt) in your next reply.

http://home.earthlink.net/~rmbox/Reticulated/Toys.html
 

chess3945

Thread Starter
Joined
Jan 3, 2002
Messages
5
I think I did this right...
---------- C:\WINDOWS\desktop\StartUp.Log

Start-Ups checked at 01-05-2002 2:36:17.59p
__________________________________________________________________________
__________________________________________________________________________

StartUp Log for Windows 95/98 - Freeware by rmbox
__________________________________________________________________________
__________________________________________________________________________

Comments:

This is a log of all the programs on your computer that
are starting automatically every time you start Windows.
Using this log can be a quick way to spot trojans.

StartUp Log (version 1.54) - Release Date 12/12/2001

__________________________________________________________________________
__________________________________________________________________________

StartUp Log Index

1. HKLM Run
2. HKCU Run
3. HKLM RunOnce
4. HKCU RunOnce
5. HKLM RunServices
6. HKLM RunServicesOnce
7. WIN.INI file
8. SYSTEM.INI file
9. AUTOEXEC.BAT file
10. StartUp folder
11. All Users StartUp
12. Misc. StartUp Configurations

__________________________________________________________________________
__________________________________________________________________________

The following is a list of your current Start-Ups
__________________________________________________________________________
__________________________________________________________________________

1. HKLM Run - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ScanRegistry"="c:\\windows\\scanregw.exe /autorun"
"TaskMonitor"="c:\\windows\\taskmon.exe"
"SystemTray"="SysTray.Exe"
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"LXSUPMON"="C:\\WINDOWS\\SYSTEM\\LXSUPMON.EXE RUN"
"LVComs"="c:\\windows\\SYSTEM\\LVComS.exe"
"Go!Zilla dial-up fix"="\"C:\\PROGRAM FILES\\GOZILLA\\GO.EXE\" /FIXRAS"
"WinampAgent"="\"C:\\PROGRAM FILES\\WINAMP\\WINAMPa.exe\""
"NAV Agent"="c:\\PROGRA~1\\NORTON~1\\NORTON~1\\NAVAPW32.EXE"
"NPROTECT"="c:\\Program Files\\Norton SystemWorks\\Norton Utilities\\NPROTECT.EXE"
"GRA"="C:\\Cabs\\grainstall\\GRA.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents\MSFS]
"Installed"="1"


==========================================================================
__________________________________________________________________________

2. HKCU Run - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Washer"="c:\\Program Files\\Washer\\washer.exe /0"


==========================================================================
__________________________________________________________________________

3. HKLM RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]


==========================================================================
__________________________________________________________________________

4. HKCU RunOnce - Registry

[RegPath]
"StartUp"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]


==========================================================================
__________________________________________________________________________

5. HKLM RunServices - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
"SchedulingAgent"="mstask.exe"
"ScriptBlocking"="\"C:\\Program Files\\Common Files\\Symantec Shared\\Script Blocking\\SBServ.exe\" -reg"
"NPROTECT"="c:\\Program Files\\Norton SystemWorks\\Norton Utilities\\NPROTECT.EXE"
"SymTray - Norton SystemWorks"="c:\\Program Files\\Common Files\\Symantec Shared\\SymTray.exe \"Norton SystemWorks\""
"TrueVector"="C:\\WINDOWS\\SYSTEM\\ZONELABS\\VSMON.EXE -service"
"MiniLog"="C:\\WINDOWS\\SYSTEM\\ZONELABS\\MINILOG.EXE -service"


==========================================================================
__________________________________________________________________________

6. HKLM RunServicesOnce - Registry

[RegPath]
"StartUp"


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]


==========================================================================
__________________________________________________________________________

7. WIN.INI File - (c:\windows\win.ini)

Your win.ini run/load lines should look like run= and load= exclusively.
There should be nothing to the right of the equal signs.


These are the run and load lines in your WIN.INI file

run=

load=

==========================================================================
__________________________________________________________________________

8. SYSTEM.INI File - (c:\windows\system.ini)

Your system.ini shell line should look like shell=Explorer.exe exclusively.
You should only see Explorer.exe following the equal sign.


This is the shell line in your SYSTEM.INI file

shell=Explorer.exe

==========================================================================
__________________________________________________________________________

9. AUTOEXEC.BAT File - (c:\autoexec.bat)

(Some trojans have been known to start from this file)


These are your program startups and set paths in your autoexec.bat file

@ECHO OFF
rem
rem *** DO NOT EDIT THIS FILE! ***
rem
rem This file was created by the System Configuration Utility as
rem a placeholder for your AUTOEXEC.BAT file. Your actual
rem AUTOEXEC.BAT file has been saved under the name AUTOEXEC.TSH.
rem

==========================================================================
__________________________________________________________________________

10. StartUp Folder - (c:\windows\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your StartUp folder

*(No start-ups found)*

==========================================================================
__________________________________________________________________________

11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

Shortcuts to any program will automatically start when placed here.


These are the shortcuts located in your All Users StartUp folder

C:\WINDOWS\All Users\Start Menu\Programs\StartUp\ZoneAlarm Pro.lnk

==========================================================================
__________________________________________________________________________

12. Miscellaneous StartUp Configurations

-============================-
Registry StartUp Directories
-============================-

Should show the Start Menu StartUp and All Users StartUp directories

.....................................................................

[1] HKCU - Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

"Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

.....................................................................

[2] HKCU - User Shell Folders

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders


.....................................................................

[3] HKLM - Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders

"Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

.....................................................................

[4] HKLM - User Shell Folders

HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders


.....................................................................

-=======================-
Registry Shell Spawning
-=======================-

Open Commands for Executable File Types

@="\"%1\" %*"
(.exe file - RegPath = HKCR\exefile\shell\open\command)

@="\"%1\" %*"
(.com file - RegPath = HKCR\comfile\shell\open\command)

@="\"%1\" /S"
(.scr file - RegPath = HKCR\scrfile\shell\open\command)

@="\"%1\" %*"
(.bat file - RegPath = HKCR\batfile\shell\open\command)

@="\"%1\" %*"
(.pif file - RegPath = HKCR\piffile\shell\open\command)

@="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
(.hta file - RegPath = HKCR\htafile\shell\open\command)

-=========================-
HKLM RunOnceEx - Registry
-=========================-


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]


-=========================-
HKU (.Default) Run - Registry
-=========================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run]
"Washer"="c:\\Program Files\\Washer\\washer.exe /0"


-==============================-
HKU (.Default) RunOnce - Registry
-==============================-


[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce]


-================================-
StubPaths - Registry (Partial Listing)
-================================-

(Please see the StubPath.txt on your desktop for complete listing)

HKLM\Software\Microsoft\Active Setup\Installed Components


"StubPath"="c:\\windows\\SYSTEM\\ie4uinit.exe"
"StubPath"="c:\\windows\\msnmgsr1.exe"
"StubPath"=""
"StubPath"="c:\\windows\\COMMAND\\sulfnbk.exe /L"
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:WIN9X /user /install"
"StubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:WIN9X /user /install"
"StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"

-=================-
DOSSTART.BAT File - (c:\windows\dosstart.bat)
-=================-

@echo off

REM Notes:
REM DOSSTART.BAT is run whenenver you choose "Restart the computer
REM in MS-DOS mode" from the Shutdown menu in Windows. It allows
REM you to load programs that you might not want loaded in Windows,
REM (because they have functional equivalents) but that you do
REM want loaded under MS-DOS. The two primary candidates for
REM this are MSCDEX and a real mode driver for the mouse you ship
REM with your system. Commands that you want present in both Windows
REM and MS-DOS should be placed in the Autoexec.bat in the
REM \Image directory of your reference server. Please note that for
REM MSCDEX you will need to load the corresponding real-mode CD
REM driver in Config.sys. This driver won't be used by Windows 98
REM but will be available prior to and after Windows 98 exits.
REM
REM This file is also helpful if you want to F8 boot into MS-DOS 7.0
REM before Windows loads and access the CD-ROM. All you have to do
REM is press F8 and then run DOSSTART to load MSCDEX and your real
REM mode mouse driver (no need to remember the command line parameters
REM for these two files.
REM
REM - You MUST explicitly specify the CD ROM Drive Letter for MSCDEX.
REM - The string following the /D: statement must explicitly match
REM the string in CONFIG.SYS following your CD-ROM device driver.

REM MSCDEX.EXE /D:OEMCD001 /l:d
REM MOUSE.EXE


-=====================-
Screen Saver Settings (Possible system.ini start-up)
-=====================-

SCRNSAVE.EXE=C:\WINDOWS\XENASC~1.SCR

==========================================================================
__________________________________________________________________________

- Supplemental Environment Information -

TMP=c:\windows\TEMP
TEMP=C:\windows\TEMP
winbootdir=C:\WINDOWS
PATH=C:\WINDOWS;c:\windows;c:\windows\COMMAND
COMSPEC=C:\WINDOWS\COMMAND.COM
windir=C:\WINDOWS

File - c:\Boot.ini
File - c:\windows\deletefi.ini

==========================================================================
__________________________________________________________________________

- End -

Well looky there I did do it right. Now the only other problem I am having is my sound suddenly stops during the windows start up chime. I have no sound anywhere after that. I tried windows help file, nothing there worked. Any ideas? And thanks for all your help so far, you guys have been great!

Chris
 
Joined
Dec 9, 2000
Messages
45,855
Valid startups are not (usually) called from cab directories, so this, whatever it is needs to be removed:

"GRA"="C:\\Cabs\\grainstall\\GRA.exe"

From start, run regedit and navigate to

HKey_Local_Machine
+ Software
+ Microsoft
+ Windows
+ CurrentVersion
RUN

With RUN highlighted right click and delete that entry in the right hand pane.

You might also want to consider unchecking in msconfig

lxsupmon
lvcoms

Check them out in the startup list link below.

http://www.pacs-portal.co.uk/startup_pages/startup_full.htm#L

If you have a Gateway, this might be the answer to what grainstall is:

http://www.gateway.com/support/drivers/output.asp?txtFileName=grainstall.exe

If it's in Add/Remove programs it can probably be removed there. Or you can just uncheck it in msconfig and see whether it is related to your problems.

And the "Go!zilla" dialup fix may be another possibility. Are you currently using Go!zilla?
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top