Go Back  PPRuNe Forums > Misc. Forums > Computer/Internet Issues & Troubleshooting
Reload this Page >

Help Please!Windows Start up Problem


Notices
Computer/Internet Issues & Troubleshooting Anyone with questions about the terribly complex world of computers or the internet should try here. NOT FOR REPORTING ISSUES WITH PPRuNe FORUMS! Please use the subforum "PPRuNe Problems or Queries."

Help Please!Windows Start up Problem

Old 7th September 2003 | 23:52
  #1 (permalink)  
Thread Starter
 
Joined: Mar 2000
Posts: 1,337
Likes: 1
From: Sunrise Senior Living
Question Help Please!Windows Start up Problem

Can anybody help please? On switching my PC on, the desktop page appears ok, but bearing the following messages:

First: ''Cannot find 'msinfo.exe' (or one of its components). Make sure the path and filename are correct and all required libraries are available.''

On clicking 'ok' up comes: ''Could not load or run 'msinfo.exe specified in the WIN.INI file. Make sure the file exists on your computer or remove the reference to it in the WIN.INI file.''

I am running Windows 98 (SE) on a Dell Dimension XPS T600R PIII 128MB SDRAM memory and a 13.6GB ATA Ultra Hard Drive (7200RPM). The sound card is a 32MB nVIDIA GeFORCE 256 AGP Card. I have the original Windows CDs.

I have no idea how this came about, but I am not the only one in the family to use the machine - I just pay the bills! My computer skills are very basic, so if you may be able to help, please make any instructions explicit.

Many thanks to all who have taken the time to read this.
Cheers,
mcdhu
mcdhu is offline  
Old 8th September 2003 | 00:31
  #2 (permalink)  
Nightrider
Guest
 
Posts: n/a
Careful here!!!!

"Msinfo.exe" is a trojan browser hijacker.

Most virus checker do not catch this...read
here
 
Old 8th September 2003 | 02:36
  #3 (permalink)  
Ecce Homo! Loquitur...
Community Influencer
 
Joined: Jul 2000
Aviation Qualifications: Spotter
Posts: 24,614
Likes: 7,320
From: Peripatetic
CoolWebSearch Hijack see here (variant 9). Download and run cwshredder from the bottom of the page. Do a web search on msinfo.exe and CoolWebSearch if you want more details.

Last edited by ORAC; 8th September 2003 at 02:51.
ORAC is offline  
Old 8th September 2003 | 03:39
  #4 (permalink)  
The Oracle
 
Joined: Aug 2001
Posts: 2,902
Likes: 0
From: Naples, Florida U.S.A.
mcdhu,

I would suggest that you perform an online scan of your computer with:

Trend Micro's HouseCall

Just to make sure you do not have any more viruses on your computer.

Take Care,

Richard
Naples Air Center, Inc. is offline  
Old 8th September 2003 | 16:47
  #5 (permalink)  
Thread Starter
 
Joined: Mar 2000
Posts: 1,337
Likes: 1
From: Sunrise Senior Living
Many thanks to you Nightrider, Orac and Richard. I did as you suggested and, between them, they seem to have done the trick.

Trend Micro's Housecall found something called ''TROJ SMALL.J'' which it deemed ''not cleanable'' in C:/dload.exe*C:/dload.exe* - whatever that all means. It suggested that I delete it which I have now done and the 'startup' symptoms mentioned above seem to have gone away.

I am mystified why my Norton kit didn't find it on a full scan. Should I be changing provider perhaps?

Again, many thanks and happy landings - CFU tonight!!!

mcdhu
mcdhu is offline  
Old 8th September 2003 | 23:16
  #6 (permalink)  
The Oracle
 
Joined: Aug 2001
Posts: 2,902
Likes: 0
From: Naples, Florida U.S.A.
mcdhu,

The reason I mention the online scan is because the payload of some viruses is to disable your Anti Virus program. With the online scan we at know we are getting one good scan of your computer.

Take Care,

Richard
Naples Air Center, Inc. is offline  
Old 9th September 2003 | 04:19
  #7 (permalink)  
 
Joined: Aug 2000
Posts: 1,776
Likes: 1
From: UK
Naples, great call. My firewall often catches msinfo.exe trying to pass info out of my machine; I thought it was some sort of MS software checking on registration, etc. However, I have just run Housecall and within seconds got this message:

'Housecall has found and cleaned a malware BKDR_SDBOT.M'

[Whatever that means...]

Thanks for the tip

FJJP
FJJP is offline  
Old 9th September 2003 | 07:12
  #8 (permalink)  
The Oracle
 
Joined: Aug 2001
Posts: 2,902
Likes: 0
From: Naples, Florida U.S.A.
FJJP,

BKDR_SDBOT.M is backdoor program allows a remote user to access and control the infected system via Internet Relay Chat (IRC).

Through the IRC channel, the malicious user can send commands to the backdoor to process on the infected system, leaving the system compromised.

The good news about that program is that it is NOT Destructive, so your computer programs and operating system should be intact. The bad news is that it is a backdoor program that allows the user not only to control your computer, but to also access any and all of your data.

Take Care,

Richard
Naples Air Center, Inc. is offline  
Old 4th October 2003 | 23:26
  #9 (permalink)  
Thread Starter
 
Joined: Mar 2000
Posts: 1,337
Likes: 1
From: Sunrise Senior Living
Is It Back Again??

I go away for a few days only to find on start up:

'Cannot find the file'info32.exe' (or one of its components). Make sure the path and filename are correct and that all required libraries are available.''

On clicking 'OK', appears:

'Could not load or run 'info32.exe' specified in the WIN.INI file. Make sure the file exists on your computer ot remove the reference to it in the WIN.INI file'.

The computer runs fine - system details as above. A Norton scan reveals nothing; neither does Richard's Trend Micro Housecall. Also ran CW Shredder.

Can anyone shed any light on this. Please keep any instructions simple!

Many thanks,
mcdhu

Last edited by mcdhu; 4th October 2003 at 23:42.
mcdhu is offline  
Old 5th October 2003 | 01:06
  #10 (permalink)  
Ecce Homo! Loquitur...
Community Influencer
 
Joined: Jul 2000
Aviation Qualifications: Spotter
Posts: 24,614
Likes: 7,320
From: Peripatetic
Backdoor Trojan
ORAC is offline  
Old 5th October 2003 | 03:26
  #11 (permalink)  
 
Joined: Mar 2001
Posts: 2,335
Likes: 0
From: Wet Coast
The fact that info32.exe is missing is good news, the trojan is gone. Whatever you used to clean it didn't quite finish the job though as there is still a reference in the win.ini file (run=info32.exe). You need to remove references in WIN.INI and/or SYSTEM.INI and/or registry for final clean-up measures. Just edit win.ini and delete the above line ONLY, and see if the message goes away.

Then find out who in the household keeps loading these things and smack 'em good.
PaperTiger is offline  
Old 6th October 2003 | 03:20
  #12 (permalink)  
Thread Starter
 
Joined: Mar 2000
Posts: 1,337
Likes: 1
From: Sunrise Senior Living
Thanks all, the CWShredder seems finally to have done the trick.

The only remaining anomaly seems to be on start up when the 'black' page says, among other things, some thing like 'Memory manager not found', but it doesn't stay still for long enough for me to copy it and the 2 other lines down!

On the other hand, before all this I had a 'Runtime Error' on shutdown which seems to have disappeared. I guess every cloud has a silver lining! AOL Parental controls now in force!

Cheers all,
mcdhu
mcdhu is offline  

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Thread Tools
Search this Thread

Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.