1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Files are Read-Only

Discussion in 'Earlier Versions of Windows' started by Westlake02, Jan 28, 2002.

Thread Status:
Not open for further replies.
Advertisement
  1. Westlake02

    Westlake02 Thread Starter

    Joined:
    Jan 28, 2002
    Messages:
    6
    I had installed an anit-virus program and once it was installed it had found a couple virii in my Windows98 folder. It had quarantined them and all, I thought it would be good to re-install Windows98 since RegEdit and other files from the folder were renamed and all. When I went to reinstall it came up with an error saying it could not update system files possibly to a real-time virus protection program. I then uninstalled the virus program and tried again but it still came up with that error. Windows98 runs fine, and there is nothing majorly wrong with my computer but all my files are coming up Read-Only and in the file properties the Read-Only box is not checked. I was trying to upload some files to my website but it won't let me saying theyre readonly system files. I have no idea where it went wrong and setting all my files to Read-Only. Any insite on this matter would be greatly appreciated.
     
  2. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Hi Westlake02, welcome to TSG.

    I don't have a solution to the problem handy, but I'd like to know what viruses were found and what antivirus program you used.

    You say the "readonly" attribute is not checked on those files' properties pages, what about the "system" atttribute?

    Also have you tried using the System File Checker to replace those "renamed" files?

    And how long has the problem existed?
     
  3. Westlake02

    Westlake02 Thread Starter

    Joined:
    Jan 28, 2002
    Messages:
    6
    The virus that was found was the PE_MAGISTR.B virus. It had infected a couple files, I can't remember the exact amount anymore. I used PC-Cillin 2000 trial version that I had downloaded from their website.

    The system attribute is not existant to be highlight. All the files on my harddrive are coming up are Read-Only files and theres no attribute to them saying they are Read-Only files or System files.

    I had used Go-Back to retrieve the files from an earlier date before I had install the virus program.

    This problem with the Read-Only has been going on, I'm gonna say since I installed PC-Cillin and tried to install Win98 again which was Saturday afternoon.

    I had done some updated to my one website and when I went to upload the file to the server, the error came up saying it was a read-only system file and then thats when I tried other files and noticed the problem with all the files.
     
  4. slipe

    slipe

    Joined:
    Jun 27, 2000
    Messages:
    6,832
  5. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Magistr sometimes leaves files in startup which are "clean", legitimate Windows files, but do not belong there, nonetheless.

    We can have a look if you download the startuplog.zip, and run the startuplog.com application in it. Copy and paste here the full contents of Startuplog.txt (but not stubbpaths.txt) which it creates on the desktop.

    I'd suggest a possible registry restore since the problem is less than 5 days old, but it would likely replace registry entries which PC-Cillin has removed. In any case you do have Goback which might be your best choice for a system restore if all else fails.

    http://home.earthlink.net/~rmbox/Reticulated/Toys.html
     
  6. Matrikx_

    Matrikx_

    Joined:
    May 15, 2001
    Messages:
    95
    I suspect that the virus software you downloaded has a feature which changes files that may have been contaminated to readonly so that it cant infect other files. Just a thought.
     
  7. Westlake02

    Westlake02 Thread Starter

    Joined:
    Jan 28, 2002
    Messages:
    6
    I tried that Read-Only program but none of the files were found to be Read-Only.

    I had tried a whole system restore to before I downloaded the virus program, but it was not sucessful in fixing the problem.

    I downloaded the Startup.com file, and here is the log file:


    ---------- C:\WINDOWS\desktop\StartUp.Log

    Start-Ups checked at 01-28-2002 4:15:09.87p
    __________________________________________________________________________
    __________________________________________________________________________

    StartUp Log for Windows 95/98 - Freeware by rmbox
    __________________________________________________________________________
    __________________________________________________________________________

    Comments:

    This is a log of all the programs on your computer that
    are starting automatically every time you start Windows.
    Using this log can be a quick way to spot trojans.

    StartUp Log (version 1.54) - Release Date 12/12/2001

    __________________________________________________________________________
    __________________________________________________________________________

    StartUp Log Index

    1. HKLM Run
    2. HKCU Run
    3. HKLM RunOnce
    4. HKCU RunOnce
    5. HKLM RunServices
    6. HKLM RunServicesOnce
    7. WIN.INI file
    8. SYSTEM.INI file
    9. AUTOEXEC.BAT file
    10. StartUp folder
    11. All Users StartUp
    12. Misc. StartUp Configurations

    __________________________________________________________________________
    __________________________________________________________________________

    The following is a list of your current Start-Ups
    __________________________________________________________________________
    __________________________________________________________________________

    1. HKLM Run - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "EnsoniqMixer"="starter.exe"
    "Multi-function Keyboard"="GWHotKey.exe"
    "SystemTray"="SysTray.Exe"
    "vptray"="c:\\Program Files\\Norton AntiVirus\\vptray.exe"


    ==========================================================================
    __________________________________________________________________________

    2. HKCU Run - Registry

    [RegPath]
    "StartUp"


    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "ICQ Plus"="C:\\PROGRA~1\\ICQPLUS\\vplus.exe"
    "Attune Download"="C:\\PROGRA~1\\AVEO\\ATTUNE\\UPDATER1\\ATTUNEL.EXE"


    ==========================================================================
    __________________________________________________________________________

    3. HKLM RunOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]


    ==========================================================================
    __________________________________________________________________________

    4. HKCU RunOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]


    ==========================================================================
    __________________________________________________________________________

    5. HKLM RunServices - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
    "LoadPowerProfile"="Rundll32.exe powrprof.dll,LoadCurrentPwrScheme"
    "winmodem"="WINMODEM.101\\wmexe.exe"
    "GoBack Polling Service"="C:\\Program Files\\Wild File\\GoBack\\GBPoll.exe"
    "Machine Debug Manager"="C:\\WINDOWS\\SYSTEM\\MDM.EXE"
    "rtvscn95"="c:\\Program Files\\Norton AntiVirus\\rtvscn95.exe"
    "defwatch"="c:\\Program Files\\Norton AntiVirus\\defwatch.exe"


    ==========================================================================
    __________________________________________________________________________

    6. HKLM RunServicesOnce - Registry

    [RegPath]
    "StartUp"


    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]


    ==========================================================================
    __________________________________________________________________________

    7. WIN.INI File - (c:\windows\win.ini)

    Your win.ini run/load lines should look like run= and load= exclusively.
    There should be nothing to the right of the equal signs.


    These are the run and load lines in your WIN.INI file

    run=

    load=

    ==========================================================================
    __________________________________________________________________________

    8. SYSTEM.INI File - (c:\windows\system.ini)

    Your system.ini shell line should look like shell=Explorer.exe exclusively.
    You should only see Explorer.exe following the equal sign.


    This is the shell line in your SYSTEM.INI file

    shell=Explorer.exe

    ==========================================================================
    __________________________________________________________________________

    9. AUTOEXEC.BAT File - (c:\autoexec.bat)

    (Some trojans have been known to start from this file)


    These are your program startups and set paths in your autoexec.bat file

    @C:\PROGRA~1\WILDFI~1\GOBACK\GB_PROG.EXE /i C:2000
    SET BLASTER=A220 I7 D1 H7 P330 T6
    SET SBPCI=C:\SBPCI
    REM [Header]
    @ECHO OFF










    REM [CD-ROM Drive]
    REM [Miscellaneous]
    REM [Display]


    ==========================================================================
    __________________________________________________________________________

    10. StartUp Folder - (c:\windows\start menu\programs\startup)

    Shortcuts to any program will automatically start when placed here.


    These are the shortcuts located in your StartUp folder

    C:\WINDOWS\Start Menu\Programs\StartUp\GoBack.lnk
    C:\WINDOWS\Start Menu\Programs\StartUp\TaskAgent.lnk

    ==========================================================================
    __________________________________________________________________________

    11. All Users Folder - (c:\windows\all users\start menu\programs\startup)

    Shortcuts to any program will automatically start when placed here.


    These are the shortcuts located in your All Users StartUp folder


    *(No start-ups found)*

    ==========================================================================
    __________________________________________________________________________

    12. Miscellaneous StartUp Configurations

    -============================-
    Registry StartUp Directories
    -============================-

    Should show the Start Menu StartUp and All Users StartUp directories

    .....................................................................

    [1] HKCU - Shell Folders

    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

    "Startup"="C:\\WINDOWS\\Start Menu\\Programs\\StartUp"

    .....................................................................

    [2] HKCU - User Shell Folders

    HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders


    .....................................................................

    [3] HKLM - Shell Folders

    HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\Shell Folders

    "Common Startup"="C:\\WINDOWS\\All Users\\Start Menu\\Programs\\StartUp"

    .....................................................................

    [4] HKLM - User Shell Folders

    HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders


    .....................................................................

    -=======================-
    Registry Shell Spawning
    -=======================-

    Open Commands for Executable File Types

    @="\"%1\" %*"
    (.exe file - RegPath = HKCR\exefile\shell\open\command)

    @="\"%1\" %*"
    (.com file - RegPath = HKCR\comfile\shell\open\command)

    @="\"%1\" /S"
    (.scr file - RegPath = HKCR\scrfile\shell\open\command)

    @="\"%1\" %*"
    (.bat file - RegPath = HKCR\batfile\shell\open\command)

    @="\"%1\" %*"
    (.pif file - RegPath = HKCR\piffile\shell\open\command)

    @="C:\\WINDOWS\\SYSTEM\\MSHTA.EXE \"%1\" %*"
    (.hta file - RegPath = HKCR\htafile\shell\open\command)

    -=========================-
    HKLM RunOnceEx - Registry
    -=========================-


    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]


    -=========================-
    HKU (.Default) Run - Registry
    -=========================-


    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Run]
    "ICQ Plus"="C:\\PROGRA~1\\ICQPLUS\\vplus.exe"
    "Attune Download"="C:\\PROGRA~1\\AVEO\\ATTUNE\\UPDATER1\\ATTUNEL.EXE"


    -==============================-
    HKU (.Default) RunOnce - Registry
    -==============================-


    [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\RunOnce]


    -================================-
    StubPaths - Registry (Partial Listing)
    -================================-

    (Please see the StubPath.txt on your desktop for complete listing)

    HKLM\Software\Microsoft\Active Setup\Installed Components


    "OldStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
    "RealStubPath"="C:\\WINDOWS\\SYSTEM\\IE4UINIT.EXE"
    "StubPath"="c:\\windows\\msnmgsr1.exe"
    "StubPath"=""
    "StubPath"="c:\\windows\\COMMAND\\sulfnbk.exe /L"
    "OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:WIN9X /user /install"
    "RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:OE /CALLER:IE50 /user /install"
    "OldStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:WIN9X /user /install"
    "RealStubPath"="\"C:\\PROGRA~1\\OUTLOO~1\\setup50.exe\" /APP:WAB /CALLER:IE50 /user /install"
    "StubPath"="C:\\WINDOWS\\SYSTEM\\updcrl.exe -e -u C:\\WINDOWS\\SYSTEM\\verisignpub1.crl"

    -=================-
    DOSSTART.BAT File - (c:\windows\dosstart.bat)
    -=================-

    @echo off

    REM Notes:
    REM DOSSTART.BAT is run whenenver you choose "Restart the computer
    REM in MS-DOS mode" from the Shutdown menu in Windows. It allows
    REM you to load programs that you might not want loaded in Windows,
    REM (because they have functional equivalents) but that you do
    REM want loaded under MS-DOS. The two primary candidates for
    REM this are MSCDEX and a real mode driver for the mouse you ship
    REM with your system. Commands that you want present in both Windows
    REM and MS-DOS should be placed in the Autoexec.bat in the
    REM \Image directory of your reference server. Please note that for
    REM MSCDEX you will need to load the corresponding real-mode CD
    REM driver in Config.sys. This driver won't be used by Windows 98
    REM but will be available prior to and after Windows 98 exits.
    REM
    REM This file is also helpful if you want to F8 boot into MS-DOS 7.0
    REM before Windows loads and access the CD-ROM. All you have to do
    REM is press F8 and then run DOSSTART to load MSCDEX and your real
    REM mode mouse driver (no need to remember the command line parameters
    REM for these two files.
    REM
    REM - You MUST explicitly specify the CD ROM Drive Letter for MSCDEX.
    REM - The string following the /D: statement must explicitly match
    REM the string in CONFIG.SYS following your CD-ROM device driver.

    REM MSCDEX.EXE /D:OEMCD001 /l:d
    REM MOUSE.EXE
    C:\SBPCI\SBINIT




    -=========================-
    ICQ Inet Registry StartUp
    -=========================-

    Shows applications that start when connected to Inet


    [HKEY_CURRENT_USER\Software\Mirabilis\ICQ\Agent\Apps]
    "Launch Browser"="No"


    -=====================-
    Screen Saver Settings (Possible system.ini start-up)
    -=====================-

    SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\WINDOW~1.SCR

    ==========================================================================
    __________________________________________________________________________

    - Supplemental Environment Information -

    TMP=c:\windows\TEMP
    TEMP=C:\windows\TEMP
    winbootdir=C:\WINDOWS
    PATH=C:\WINDOWS;c:\windows;c:\windows\COMMAND
    COMSPEC=C:\WINDOWS\COMMAND.COM
    SBPCI=C:\SBPCI
    windir=C:\WINDOWS

    File - c:\WinBoot.ini
    File - c:\windows\deletefi.ini

    ==========================================================================
    __________________________________________________________________________

    - End -
     
  8. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    The only good suspect I see there is the presence of a winboot.ini file. This is something that does not really belong.

    Try renaming it to winboot.old or even deleting it. It may be a hidden file and it is sometimes necessary to delete it from DOS.

    I would also run msconfig and remove the check for machine debug manager. More about what it does, here:

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;q221438
     
  9. Westlake02

    Westlake02 Thread Starter

    Joined:
    Jan 28, 2002
    Messages:
    6
    I tried both suggestions but neither one of them worked. I'm beginning to think that maybe I'm going to have to reformat my harddrive and start over from scratch.

    I remember the one time I had tried to install Win98 again from startup that it was about to reformat my harddrive but it had come up with an error. I don't know if maybe that when it went to reformat that it might have had some effect on it.
     
  10. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    Did you both find and delete the winboot.ini file? (If done from DOS, you need to use the deltree command on it.) If done from Windows, you will also need to shutdown and restart afterwards to clear it from memory. Make sure it hasn't reappeared.
     
  11. Westlake02

    Westlake02 Thread Starter

    Joined:
    Jan 28, 2002
    Messages:
    6
    Yes I found the file and deleted and restarted. And I am still unable to upload files because it says they are Read-Only.
     
  12. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    What are the extension types of the files you are trying to upload? Does the problem occur with all uploads or just specific ones? For example can you upload an attachment of a small jpeg, gif, or text file using the option here?

    Are you using a specific utility for uploading, such as FTP? You may need to remove and reinstall that. The fact that they are "read only" should not preclude their being uploaded. It sounds like they are being mis-identified, not actually marked as system files. If you create a simple text file in "My Documents", can you upload that? (Keep them out of the windows or windows\system directory)
     
  13. Westlake02

    Westlake02 Thread Starter

    Joined:
    Jan 28, 2002
    Messages:
    6
    At first I tried uploading an HTML and JPEG file, then to see if it was just them I randomly picked another file to upload and it said it was Read-Only. All the files I'm trying are in My Documents and I have tried files in other folders. I tried using WS_FTP Pro and then I used the FTP program in the Windows folder, and it says the same thing that the file are Read-Only. I also tried to set the attributes in DOS of the file but it doesn't do anything.
     
  14. Rollin' Rog

    Rollin' Rog

    Joined:
    Dec 9, 2000
    Messages:
    45,855
    And it doesn't matter where you upload them to? I can set a text or html file to "read-only" and upload it to my FortuneCity website usinng WS_FTP without any complaint.

    Do you have a small jpeg you can attach here? Use the Browse tab to go to it when you have the Reply window open.
     
  15. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/66773

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice