\Windows\System\...files needed

Status
This thread has been Locked and is not open to further replies. The original thread starter may use the Report button to request it be reopened but anyone else with a similar issue should start a New Thread. Watch our Welcome Guide to learn how to use this site.

FZWG

Thread Starter
Joined
Dec 17, 2000
Messages
974
Appreciate some assistance.

Did an on-line scan of PC, and found out a group of files in C:\Windows\System\... were infected with Magistr virus, and were deleted.

How can the Windows 98SE \Windows\System\... files be reinstalled? Is it necessary to reinstall W98SE all over again, or is there a specific way to reinstall just the \Windows\System\... files?
 
Joined
Dec 9, 2000
Messages
45,855
You should be able to extract them from a Windows CD or c:\windows\options\cabs using SFC:

Using SFC to extract files

1. Go to Start>Run and enter SFC and click OK
2. Check "Extract one File"
3. Enter the file name and click on "Start"
4. In the "Restore from" field enter:: D:\WIN98 [if 'D' is not the letter of your CD-Rom drive, modify appropriately]
5. Click OK

{if you do not have a Windows system CD, try subsitituting c:\windows\options\cabs in the"restore from field"}


Are you sure they were in fact all Windows files? Just because they were in the Windows\system folder doesn't necessarily mean they were legit.
 

FZWG

Thread Starter
Joined
Dec 17, 2000
Messages
974
Rollin' Rog,

Thank you for your reply.

Have no idea if these files were legit or not. PC is having all sorts of problems.

Will try SFC and see how it goes. Do have the W98SE CD.

All sorts of files were deleted. Will checking "Extract one file" apply, or is there something else to consider?

Thanks for your help.
 
Joined
Dec 9, 2000
Messages
45,855
Extract one file will do just that. You will have to enter the file name, and if they have been deleted, the restore to location.

If they are legit Windows files, they should be on your Windows CD or in c:\windows\options\cabs unless they were installed by some other software.

Magistr has a habit of infecting odd things, mostly not required to run Windows, but some of them associated with the original vendors software, such as Compaq.

If you have any questions about the files, just list them here and we can look them up.
 

FZWG

Thread Starter
Joined
Dec 17, 2000
Messages
974
Thanks Rollin' Rog.

Will work on the PC sometime tomorrow.

There were so many files in question that I did not write them all down. Some of the ones were: (all started with C:Windows\System) \RNAAP.EXE, \TAPISRN.EXE, \RSVP.EXE, \MSHTA.RBO, etc.
 
Joined
Dec 9, 2000
Messages
45,855
Ok, I can see you are going to have problems using SFC to restore these altered files. What Magistr does is alter the names of them. For example tapisrn.exe is really tapisrv.exe

Rather than trying to figure out what's what, you would probably be better off doing a reinstall. Then you can just delete anything leftover that is identified as infected.

If you've updated IE you should decline the invitation to reinstall that from the CD to avoid conflicts, and reinstall it independently if that is necessary (you might just be able to run the Repair Tool to correct any problems with its files)

Since this is pretty much a virus issue, I'm going to move the thread there for good housekeeping.
 

FZWG

Thread Starter
Joined
Dec 17, 2000
Messages
974
Rollin' Rog,

Thank you for your reply.


The plot thickens on this one! Started the PC and got the following:

"Cannot find a device file that may be needed to run Windows or a Windows application. The Windows registry or System.INI file refers to this device file, but the device file no longer exist...."

All sorts of files are identified, all of them VXD files such as: C:\Windows\system\VMM32\vwin32.VXD
.......................\vfat.VXD
.......................\vcache.VXD

There are too many to even list.

At the end of all these files it says: "Configuration Manager cannot load because one of the files is either not present or has an invalid version number: VMM.VXD, SHELL.VXD, VTD.VXD, VXDLDR.VXD. Try running setup again."

After that, the computer just shuts down.

Is there any way to get this PC going again?

Wiping out the Hard Drive and re-installing W98SE is always an option, but getting it to work otherwise is a much bigger challenge.

Oh Boy!! :)
 
Joined
Dec 9, 2000
Messages
45,855
Looks like I was rather premature in assigning you to the Virus Forum. :rolleyes:

I think you you have suffered some widespread file corruption, perhaps due to the virus or to disk errors. I would run a thorough scandisk from DOS, it probably won't allow you to boot windows, but it might repair the drive sufficiently to better allow an overinstall to succeed. Or in a worse case scenario it could corrupt things worse and require you to fdisk and reformat. When running a thorough scandisk, it is better to have it prompt for errors rather than automatically fix. That way you will know what is going on.

To run one from DOS, press and hold the ctrl key starting up so as to access the boot menu. Choose the command prompt option and at the c:\prompt, enter:

scandisk

Have it do a thorough surface scan as indicated.

If the scandisk file itself is corrupted, you will need to run it from a boot disk. You might want to do this anyway, since you will need to load a boot disk and start with CD-Rom support to do an overinstall.

Once you are at an a:\prompt, you can enter:

scandisk c:\

To reinstall, you will need your system cd. If 'e' was the letter assigned your cd-rom drive when the startup disk loaded, you can begin setup with the command:

e:\setup

Think I'll move you back to OS, although it is still possible this is virus related if these errors are the result of a boot sector virus. Hard to tell unless you have a virus scan on a floppy you can boot and run.

For a startup disk, I would create or use one that was not recently used on this pc, just in case it happens to be infected. Write protect it before using. You can download one from www.bootdisk.com if need be.
 

FZWG

Thread Starter
Joined
Dec 17, 2000
Messages
974
Thanks Rollin' Rog.

Maybe the PC will "come back to life"! Who knows? However, it won't be from lack of trying. Don't give up easily.

Thanks for all your help. Will post back on outcome.
 
Status
This thread has been Locked and is not open to further replies. The original thread starter may use the Report button to request it be reopened but anyone else with a similar issue should start a New Thread. Watch our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Members online

Top