swen worm virus

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

honeyv

Thread Starter
Joined
Jul 25, 2003
Messages
55
My friend is running os win 98 and has just got the Swen Virus instead of waiting she tried to delete the files it had corrupted. In the process she deleted an obviously much needed application which says ufgac.exe: and nothing opens it is saying we dont have it. Is there somewhere I can download it again as I have got the tool to remedy virus but without this application it wont allow me to do it. We are just novices so any help would be much appreciated.
 
Joined
Dec 9, 2000
Messages
45,855
That is the viral file; if it is deleted before a registry fix is run programs will not open until the necessary repairs are made. I will move this to the Antivirus forum. Please see the post at the top for help in restoring the system.
 
Joined
Dec 9, 2000
Messages
45,855
A quick repair for this might be to click Shutdown > Restart in MS-DOS mode.

At the c:\windows> prompt enter:

scanreg /restore

Use the arrow keys to select a started registry from one of the first four displayed which PREDATES the infection

This should repair the registry.

If no dates are available, she can try registry patches I linked to in the Swen repair thread, or try this one I am attaching.

It must be downloaded and RENAMED:

swen.inf

If the icon does not change from a text icon it has not been renamed correctly

Once it has it can be right clicked on and "install" selected.

Then reboot the computer.
 

Attachments

honeyv

Thread Starter
Joined
Jul 25, 2003
Messages
55
We tried that and it keeps saying that we require the missing ufgac.exe: she deleted without knowing what she was doing and everything I have tried tells me it needs this particular application. Do we need to get a new hard drive or can this one be saved.
 
Joined
Dec 9, 2000
Messages
45,855
Tried what? I suggested several things. Please be specific.

That IS the viral file. The registries shell open commands for exe and other files have been altered to refer to it. You will not be able to run the Symantec repair tool until certain registry repairs are made. Those registry entries must be repaired either manually, by scanreg /restore or using a patch such as I referred to.

This is entirely fixable, but we must focus on the registry repair first.
 

honeyv

Thread Starter
Joined
Jul 25, 2003
Messages
55
ms dos is not working at all wont let me in requires missing app and the patch wont work because I am downloading on to my pc and then trying to work it on her pc wont let me open anything the same message keeps appearing. So the most it will let me do is turn it on.
 
Joined
Dec 9, 2000
Messages
45,855
Don't try restarting in DOS then. Shutdown completely (this way the exit to dos.pif file is not accessed, I forgot about that).

After shutting down. Restart and press and hold the ctrl key until you see the boot menu. Select the Command Prompt option from the boot menu.

At the c:> prompt enter

scanreg /restore

note the space afer the 'g' and the forward slash.

Use the arrow keys to select a prior started registry. Don't try to select the 5th one in the list, it will usually fail. Hopefully the infection has not been on the system longer than 4 days. If it has, this will probably not work.

If this doesen't work, and she still has internet access, then download the patch in this thread and follow those intructions.
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top