*********WIN32: VOLAGE-G [WRM] - PLEASE HELP!!!!!!!!!!!!!!!!!

Viruses and worms
1

I posted this in a different thread, but I thought I’d devote my problem to its own thread. I’m not intending to spam the board. Just really need some help. Here’s my problem…

I’m running Windows 98se on my computer. Avast shows that I have been infected by Win32: Volage-G [Wrm]. It showed 7 files infected. They are as follows:

c:\Windows\SYSTEM.dat
c:\Windows\sysbckup\rbbad.cab\system.dat
c:\Windows\sysbckup\rb000.cab\system.dat
c:\Windows\sysbckup\rb001.cab\system.dat
c:\Windows\sysbckup\rb002.cab\system.dat
c:\Windows\sysbckup\rb003.cab\system.dat
c:\Windows\sysbckup\rb004.cab\system.dat

I’m no expert on computers. I moved the above files to the Virus Chest, because that’s what Avast “recommended” that i do when it found the infected files. After the scan finished, I updated Avast (I couldn’t update it BEFORE my scan, because for some reason my internet connection was dead - I’m on a wireless home network). After Avast completed a program update, it prompted me to restart my computer, so I did. Ever since then, the following is what happens. Computer restarts. The following message displays:

“Warning: Windows has detected a registry/configuration error. Choose, Command prompt only, and run SCANREG.”

So I choose “Command Prompt Only” as instructed and run SCANREG. After maybe a half of a second, the following message displays:

[i][b]"Windows found an error in your system files and restored a recent backup of the files to fix the problem.

Press ENTER to retart your computer."[/b][/i]

So I press ENTER to restart. The same thing keeps happening over and over and over again! It just keeps cycling through the same messages and restarting. It’s an endless circle! I can’t get to my desktop in order to do anything else. Again, I’m no computer expert and any pc tech skills I have are extremely limited, to say the least.

Someone PLEASE help me to get this fixed! I don’t know what else to do other than post on a forum asking for help and/or advice. I would GREATLY appreciate it. Thanks!

2

:slight_smile: Hi RPuckett :

  As what was implied in the other thread, start by getting
  a "2nd Opinion" by downloading A-squared Free from
  www.emsisoft.com/en/software/free . Then install, update
  and run their most complete scan .
3

How do I do that? I can’t get past the Windows messages, which I quoted in my original post. Ultimately, it just tells me to restart the computer only to end up doing it again and again and again.

I suppose I could download that program which was recommended on the computer I’m using to talk to you on and then burn the application to a disc so that I can easily put it on MY computer, but again, even if I do that, MY computer won’t even get to the desktop. So I guess my question to you is, how do I even install that program on a computer that won’t boot to the desktop? I tried going into safe mode, but that won’t work either. I appreciate any help…

4

Hi rpuckett,

I think you are the victim of a false positive identification of registry file as malware:

http://forum.avast.com/index.php?topic=20666.0

You don’t need a-Squared, but I can’t offer any help, because I’m not familiar with Win98.

I’m sure somebody else will help!

5

Thanks Frank,

I certainly hope someone here can help me out. This has been and still is a nightmare for me.

Richard

6

Hi rpucket,

It was a false positive, if avast is updated you will find all is clear now.

polonus

7

Hi rpucket,

Here we go, keep your fingers crossed, and try to pull yourself back by the shoe-laces. Go to the dos prompt and give in: sfc.exe and then an enter, and let this run and fix the thing. After this turn the computer off, start up F1 and then cold-boot. After the boot-up make a scandisk. After all is well back-up the registry. All’s well that ends well.

polonus

8

Polonus is your man!

Had to prompt him a bit in a PM, where he also recommended the unofficial SP for Win98SE:

Ask him to download this and install: http://www.majorgeeks.com/download4131.html

The unofficial SP for Win98SE is just what he wants, he has the USB 2.0 drivers extra, all patches etc. Icons like in ME and stable like a rock, and up to date.
According to me the best way to go.

Cheers Polonus!

9

Hi rpucket,

Here ypu can read more about what to do using Scanreg after
this error message you have got:
http://www.helpwithwindows.com/windows98/start-145.html

To the rescue here…

If everything else fails, and your unable to solve it, allthough not recommended by Mucrosoft Certified Technical Education Centre we could do the following (at your own risk) but only as a last resort:

  1. Restart Windows in Safe mode. To do so, restart your computer, press and hold down the CTRL key until the Windows 98 Startup menu appears, and then choose Safe Mode.
  2. Click Start, point to Programs, point to Accessories, point to System Tools, and then click System Information.
  3. On the Tools menu, click System Configuration Utility.
  4. Click the Startup tab.
  5. Click to clear the ScanRegistry check box.
  6. Click OK.
  7. Restart Windows normally.

polonus

10

Thank you very much, Polonus and Frank! I’m going to print out your responses an dtry it out. I’ll let you know how it goes. Wish me luck!

Richard

11

I had to start my computer with the emergency boot disk. Just stick it in the floppy drive then start the computer. I chose option 4(minimal boot). It will present a C:/ prompt. I typed in- scanreg /restore please note the space after scanreg then press the enter key. It then gave me a list of previous registry backups to choose from. Choose the newest one by moving the up & down arrows of the keyboard & pressing enter. Take the floppy out before the computer reboots. I’m hoping that you did not delete those backups already, as that is what it looks like you deleted. Good Luck! Please note that I amn using WIndows ME, not 98, but i think they are similar in this respect. Also like I posted before, the new update did NOT detect the worm.