Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Windows Files Altered


  • Please log in to reply
3 replies to this topic

#1 ComputerGirl

ComputerGirl

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:17 PM

Posted 19 October 2007 - 11:06 AM

HELP!
I need help because I have been able to figure things out in the past, but this is fishy and I can't even
put my finger on what it is. However, I believe it to be spyware of some sort and have
halted internet traffic for now.

I have a Gateway Windows XP laptop. Last night, Trend Micro PC-cillin starting giving me a bunch of
warnings that my system had been altered. I opened the main console, and removed
all that came up under Spyware.

The target of these files are under
C:\Program files\Internet Explorer\IExplore.EXE

The location of these files are
C:\Documents and Settings\User\Local Settings\TEMP\

Files that were added are
1. 1192761064.DAT.EXE
2. abc123.pid
3. aax382.tmp
4. TWAIN
5. Twain001.Mtx
6. Twunk001.Mtx


This is the message I keep getting from Windows.
"Files that are required for Windows to run
properly have been replaced by unrecognized
versions. To maintain system stabilty, Windows must restore
the original versions of these files.

Insert your Windows XP Professional CD2 now."

What I don't get, is why is it asking for Professional and not Home Edition.
I can't find what disc there talking about for the life of me,
and I don't know how to fix it if I don't.

Would system restore be a good option? Should I
remove the above 6 files? And has anybody had a similar situation?

Any additional info needed to solve this issue would be gladly provided.

Thank in advance.
~ComputerGirl

BC AdBot (Login to Remove)

 


m

#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,558 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:17 PM

Posted 19 October 2007 - 03:00 PM

Have you tried doing your scans in "SAFE MODE"? Are you doing scans while logged into the "Administrator Account" or an "account with administrator privileges"?

Or it may be easier to try using System Restore or System Restore from a command prompt in "SAFE MODE" to return to a previous state before your problems began?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 ComputerGirl

ComputerGirl
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:03:17 PM

Posted 22 October 2007 - 02:02 PM

I believe it is working. That was my first inclination was to do the System Restore.
I also erased previous restore points and created a new one today.
I am now scanning for viruses and spyware. If nothing comes up, its back to normal.
Thank you.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,558 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:17 PM

Posted 22 October 2007 - 02:22 PM

Your welcome. Let us know how the scans turn out.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users