I believe it may be a virus or trojan horse

http://support.microsoft.com/kb/269238

"CdLSRN" <ginnyrn5@nospam.com> wrote in message

news:4838d0b0$0$25038$607ed4bc@cv.net...

> This is a follow up to my 'can't get online' post. When I run Spybot it

> goes 3/4 of

> the way then a box pops up that says there is something wrong with my

> trojan checker.

> If I say o.k. it continues and says my system is clear. However, I am

> missing 3 files

> from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

>

May 25, 2008

Re: I believe it may be a virus or trojan horse

On Sat, 24 May 2008 22:33:54 -0400, "CdLSRN" <ginnyrn5@nospam.com>

wrote:

>This is a follow up to my 'can't get online' post. When I run Spybot it goes 3/4 of

>the way then a box pops up that says there is something wrong with my trojan checker.

>If I say o.k. it continues and says my system is clear. However, I am missing 3 files

>from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

>

Do you have a backup of your Windows installation? Just copy those 3

files to C:\Windows\System.

If not, do you have a friend that uses Win98 and IE6? You said your

email works, so have them email you those 3 files.

If binaries were allowed on here, I'd zip them and upload them to you.

If you cant get them elsewhere, I will email them to you in one zip

file.

By the way, you have two names the same (above).

On my system,

MSXMLA.DLL is 15K

MSXMLR.DLL is 26K

all small files..... What's the 3rd one you need?

May 25, 2008

Re: I believe it may be a virus or trojan horse

That is possible, however, you would need to install a few programs to test

for such. These programs MAY not function properly if you are missing some

key files.

QUESTION:

Did you contact Gary for those CDROMS he has referred to?

The Security Updates CD contains the installer for IE6 {which will replace

those files that you are missing. NOTE: you would then need to check on

windowsupdate to see if you needed any more updates. IF NOT then did you

attempt to FTP the IE6 installation files from somewhere [because you can't

apparently use a browser]?

THE REASON:

IF you re-install IE6 you may downgrade some of the updates already applied

to your system. Using the supplied CD-ROMs could potentially place you in a

compromised condition, which we refer to as "DLL hell" {mismatched DLLs in

the system and registry}. Moreover, you have some files in your system which

should not apparently be there.

THE PROBLEM:

IF you truly do have missing files then either you removed them or

something else did. That something could be a virus or otherwise. IF you are

infected, then merely replacing the files WILL NOT ensure that your system

is free of that potential hack or virus. Moreover, if you have a virus,

there is a potential that whatever you would download may become infected

during the attempt.

REGRETFULLY:

This may mean you need to prepare to re-install the system and programs on

a clean and checked disk. *IF* you have those disks Gary suggested, then you

would only need your 98(FE/SE} installation CDROM, driver, and application

installers to get back online, from there you can search for anything you

may be missing. One warning is, if you have older programs, then they would

likely need installed soon after the fresh installation, and updated if you

have those files..

YOUR FILES:

How did you get those versions? Do you have Office 2003 or something, or

did you install an XP update or was one suggested somewhere? Did you install

an un-official update or two? Or are we actually talking about XP here:

List of Microsoft XML Parser (MSXML) versions

Microsoft Security Bulletin MS06-061

http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

MS06-071: Security update for Microsoft XML Core Services 4.0

http://support.microsoft.com/kb/927978

--

--

_________

"CdLSRN" <ginnyrn5@nospam.com> wrote in message

news:4838d0b0$0$25038$607ed4bc@cv.net...

| This is a follow up to my 'can't get online' post. When I run Spybot it

goes 3/4 of

| the way then a box pops up that says there is something wrong with my

trojan checker.

| If I say o.k. it continues and says my system is clear. However, I am

missing 3 files

| from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

|

May 25, 2008

Re: I believe it may be a virus or trojan horse

Oops:

You would also need a boot floppy to fdisk and format, and start the

computer.

--

| http://support.microsoft.com/kb/269238

--

_________

"MEB" <meb@not here@hotmail.com> wrote in message

news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

| That is possible, however, you would need to install a few programs to

test

| for such. These programs MAY not function properly if you are missing some

| key files.

|

| QUESTION:

|

| Did you contact Gary for those CDROMS he has referred to?

| The Security Updates CD contains the installer for IE6 {which will

replace

| those files that you are missing. NOTE: you would then need to check on

| windowsupdate to see if you needed any more updates. IF NOT then did you

| attempt to FTP the IE6 installation files from somewhere [because you

can't

| apparently use a browser]?

|

| THE REASON:

|

| IF you re-install IE6 you may downgrade some of the updates already

applied

| to your system. Using the supplied CD-ROMs could potentially place you in

a

| compromised condition, which we refer to as "DLL hell" {mismatched DLLs in

| the system and registry}. Moreover, you have some files in your system

which

| should not apparently be there.

|

| THE PROBLEM:

|

| IF you truly do have missing files then either you removed them or

| something else did. That something could be a virus or otherwise. IF you

are

| infected, then merely replacing the files WILL NOT ensure that your system

| is free of that potential hack or virus. Moreover, if you have a virus,

| there is a potential that whatever you would download may become infected

| during the attempt.

|

| REGRETFULLY:

|

| This may mean you need to prepare to re-install the system and programs

on

| a clean and checked disk. *IF* you have those disks Gary suggested, then

you

| would only need your 98(FE/SE} installation CDROM, driver, and application

| installers to get back online, from there you can search for anything you

| may be missing. One warning is, if you have older programs, then they

would

| likely need installed soon after the fresh installation, and updated if

you

| have those files..

|

| YOUR FILES:

|

| How did you get those versions? Do you have Office 2003 or something, or

| did you install an XP update or was one suggested somewhere? Did you

install

| an un-official update or two? Or are we actually talking about XP here:

|

| List of Microsoft XML Parser (MSXML) versions

|

| Microsoft Security Bulletin MS06-061

| http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

|

| MS06-071: Security update for Microsoft XML Core Services 4.0

| http://support.microsoft.com/kb/927978

|

| --

| MEB http://peoplescounsel.orgfree.com

| --

| _________

|

| "CdLSRN" <ginnyrn5@nospam.com> wrote in message

| news:4838d0b0$0$25038$607ed4bc@cv.net...

| | This is a follow up to my 'can't get online' post. When I run Spybot it

| goes 3/4 of

| | the way then a box pops up that says there is something wrong with my

| trojan checker.

| | If I say o.k. it continues and says my system is clear. However, I am

| missing 3 files

| | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

| |

|

May 25, 2008

Re: I believe it may be a virus or trojan horse

She now has IE6SP1 and the CDs will be in Monday's mail. How can she

determine provenance of the DLLs if she doesn't have them on her system

anymore.

--

Gary S. Terhune

MS-MVP Shell/User

> http://support.microsoft.com/kb/269238

"MEB" <meb@not here@hotmail.com> wrote in message

news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

> That is possible, however, you would need to install a few programs to

> test

> for such. These programs MAY not function properly if you are missing some

> key files.

>

> QUESTION:

>

> Did you contact Gary for those CDROMS he has referred to?

> The Security Updates CD contains the installer for IE6 {which will replace

> those files that you are missing. NOTE: you would then need to check on

> windowsupdate to see if you needed any more updates. IF NOT then did you

> attempt to FTP the IE6 installation files from somewhere [because you

> can't

> apparently use a browser]?

>

> THE REASON:

>

> IF you re-install IE6 you may downgrade some of the updates already

> applied

> to your system. Using the supplied CD-ROMs could potentially place you in

> a

> compromised condition, which we refer to as "DLL hell" {mismatched DLLs in

> the system and registry}. Moreover, you have some files in your system

> which

> should not apparently be there.

>

> THE PROBLEM:

>

> IF you truly do have missing files then either you removed them or

> something else did. That something could be a virus or otherwise. IF you

> are

> infected, then merely replacing the files WILL NOT ensure that your system

> is free of that potential hack or virus. Moreover, if you have a virus,

> there is a potential that whatever you would download may become infected

> during the attempt.

>

> REGRETFULLY:

>

> This may mean you need to prepare to re-install the system and programs on

> a clean and checked disk. *IF* you have those disks Gary suggested, then

> you

> would only need your 98(FE/SE} installation CDROM, driver, and application

> installers to get back online, from there you can search for anything you

> may be missing. One warning is, if you have older programs, then they

> would

> likely need installed soon after the fresh installation, and updated if

> you

> have those files..

>

> YOUR FILES:

>

> How did you get those versions? Do you have Office 2003 or something, or

> did you install an XP update or was one suggested somewhere? Did you

> install

> an un-official update or two? Or are we actually talking about XP here:

>

> List of Microsoft XML Parser (MSXML) versions

>

> Microsoft Security Bulletin MS06-061

> http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

>

> MS06-071: Security update for Microsoft XML Core Services 4.0

> http://support.microsoft.com/kb/927978

>

> --

> MEB http://peoplescounsel.orgfree.com

> --

> _________

>

> "CdLSRN" <ginnyrn5@nospam.com> wrote in message

> news:4838d0b0$0$25038$607ed4bc@cv.net...

> | This is a follow up to my 'can't get online' post. When I run Spybot it

> goes 3/4 of

> | the way then a box pops up that says there is something wrong with my

> trojan checker.

> | If I say o.k. it continues and says my system is clear. However, I am

> missing 3 files

> | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

> |

>

May 25, 2008

Re: I believe it may be a virus or trojan horse

The first, actually is MSXML.DLL, MSXMLA.DLL, MSXMLR.DLL.

<letterman@invalid.com> wrote in message

news:cish34la3djjv8kjshgk99ndjqrermpqn6@4ax.com...

> On Sat, 24 May 2008 22:33:54 -0400, "CdLSRN" <ginnyrn5@nospam.com>

> wrote:

>

> >This is a follow up to my 'can't get online' post. When I run Spybot it goes 3/4

of

> >the way then a box pops up that says there is something wrong with my trojan

checker.

> >If I say o.k. it continues and says my system is clear. However, I am missing 3

files

> >from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

> >

>

> Do you have a backup of your Windows installation? Just copy those 3

> files to C:\Windows\System.

> If not, do you have a friend that uses Win98 and IE6? You said your

> email works, so have them email you those 3 files.

> If binaries were allowed on here, I'd zip them and upload them to you.

> If you cant get them elsewhere, I will email them to you in one zip

> file.

> By the way, you have two names the same (above).

> On my system,

> MSXMLA.DLL is 15K

> MSXMLR.DLL is 26K

>

> all small files..... What's the 3rd one you need?

May 25, 2008

Re: I believe it may be a virus or trojan horse

"Gary S. Terhune" <none> wrote in message

news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

| She now has IE6SP1 and the CDs will be in Monday's mail. How can she

| determine provenance of the DLLs if she doesn't have them on her system

| anymore.

|

| --

| Gary S. Terhune

| MS-MVP Shell/User

| http://www.grystmill.com

She has the 4.0 DLLs. She should have 3.0.... have her check what

versions of all those files are to isolate where they came from...

See this to review they might have come from:

http://support.microsoft.com/kb/269238

Check this for 3.0

http://support.microsoft.com/?scid=ph;en-us;3346

Check this for Office 2003

http://support.microsoft.com/?scid=ph;en-us;2488

If she has installed something or attempted to install something not called

for into 98, then installing IE6 will NOT correct all the issues involved.

--

| > http://support.microsoft.com/kb/269238

--

_________

|

| "MEB" <meb@not here@hotmail.com> wrote in message

| news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

| > That is possible, however, you would need to install a few programs to

| > test

| > for such. These programs MAY not function properly if you are missing

some

| > key files.

| >

| > QUESTION:

| >

| > Did you contact Gary for those CDROMS he has referred to?

| > The Security Updates CD contains the installer for IE6 {which will

replace

| > those files that you are missing. NOTE: you would then need to check on

| > windowsupdate to see if you needed any more updates. IF NOT then did you

| > attempt to FTP the IE6 installation files from somewhere [because you

| > can't

| > apparently use a browser]?

| >

| > THE REASON:

| >

| > IF you re-install IE6 you may downgrade some of the updates already

| > applied

| > to your system. Using the supplied CD-ROMs could potentially place you

in

| > a

| > compromised condition, which we refer to as "DLL hell" {mismatched DLLs

in

| > the system and registry}. Moreover, you have some files in your system

| > which

| > should not apparently be there.

| >

| > THE PROBLEM:

| >

| > IF you truly do have missing files then either you removed them or

| > something else did. That something could be a virus or otherwise. IF you

| > are

| > infected, then merely replacing the files WILL NOT ensure that your

system

| > is free of that potential hack or virus. Moreover, if you have a virus,

| > there is a potential that whatever you would download may become

infected

| > during the attempt.

| >

| > REGRETFULLY:

| >

| > This may mean you need to prepare to re-install the system and programs

on

| > a clean and checked disk. *IF* you have those disks Gary suggested, then

| > you

| > would only need your 98(FE/SE} installation CDROM, driver, and

application

| > installers to get back online, from there you can search for anything

you

| > may be missing. One warning is, if you have older programs, then they

| > would

| > likely need installed soon after the fresh installation, and updated if

| > you

| > have those files..

| >

| > YOUR FILES:

| >

| > How did you get those versions? Do you have Office 2003 or something, or

| > did you install an XP update or was one suggested somewhere? Did you

| > install

| > an un-official update or two? Or are we actually talking about XP here:

| >

| > List of Microsoft XML Parser (MSXML) versions

| >

| > Microsoft Security Bulletin MS06-061

| > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

| >

| > MS06-071: Security update for Microsoft XML Core Services 4.0

| > http://support.microsoft.com/kb/927978

| >

| > --

| > MEB http://peoplescounsel.orgfree.com

| > --

| > _________

| >

| > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

| > news:4838d0b0$0$25038$607ed4bc@cv.net...

| > | This is a follow up to my 'can't get online' post. When I run Spybot

it

| > goes 3/4 of

| > | the way then a box pops up that says there is something wrong with my

| > trojan checker.

| > | If I say o.k. it continues and says my system is clear. However, I am

| > missing 3 files

| > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

| > |

| >

|

May 25, 2008

Re: I believe it may be a virus or trojan horse

Oh, OK. I missed that list. Good catch.

--

Gary S. Terhune

MS-MVP Shell/User

> http://support.microsoft.com/kb/269238

"MEB" <meb@not here@hotmail.com> wrote in message

news:e$cr9mjvIHA.2292@TK2MSFTNGP05.phx.gbl...

>

> "Gary S. Terhune" <none> wrote in message

> news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

> | She now has IE6SP1 and the CDs will be in Monday's mail. How can she

> | determine provenance of the DLLs if she doesn't have them on her system

> | anymore.

> |

> | --

> | Gary S. Terhune

> | MS-MVP Shell/User

> | http://www.grystmill.com

>

> She has the 4.0 DLLs. She should have 3.0.... have her check what

> versions of all those files are to isolate where they came from...

>

> See this to review they might have come from:

>

> Check this for 3.0

> http://support.microsoft.com/?scid=ph;en-us;3346

>

> Check this for Office 2003

> http://support.microsoft.com/?scid=ph;en-us;2488

>

> If she has installed something or attempted to install something not

> called

> for into 98, then installing IE6 will NOT correct all the issues involved.

>

> --

> MEB http://peoplescounsel.orgfree.com

> --

> _________

>

> |

> | "MEB" <meb@not here@hotmail.com> wrote in message

> | news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

> | > That is possible, however, you would need to install a few programs to

> | > test

> | > for such. These programs MAY not function properly if you are missing

> some

> | > key files.

> | >

> | > QUESTION:

> | >

> | > Did you contact Gary for those CDROMS he has referred to?

> | > The Security Updates CD contains the installer for IE6 {which will

> replace

> | > those files that you are missing. NOTE: you would then need to check

> on

> | > windowsupdate to see if you needed any more updates. IF NOT then did

> you

> | > attempt to FTP the IE6 installation files from somewhere [because you

> | > can't

> | > apparently use a browser]?

> | >

> | > THE REASON:

> | >

> | > IF you re-install IE6 you may downgrade some of the updates already

> | > applied

> | > to your system. Using the supplied CD-ROMs could potentially place you

> in

> | > a

> | > compromised condition, which we refer to as "DLL hell" {mismatched

> DLLs

> in

> | > the system and registry}. Moreover, you have some files in your system

> | > which

> | > should not apparently be there.

> | >

> | > THE PROBLEM:

> | >

> | > IF you truly do have missing files then either you removed them or

> | > something else did. That something could be a virus or otherwise. IF

> you

> | > are

> | > infected, then merely replacing the files WILL NOT ensure that your

> system

> | > is free of that potential hack or virus. Moreover, if you have a

> virus,

> | > there is a potential that whatever you would download may become

> infected

> | > during the attempt.

> | >

> | > REGRETFULLY:

> | >

> | > This may mean you need to prepare to re-install the system and

> programs

> on

> | > a clean and checked disk. *IF* you have those disks Gary suggested,

> then

> | > you

> | > would only need your 98(FE/SE} installation CDROM, driver, and

> application

> | > installers to get back online, from there you can search for anything

> you

> | > may be missing. One warning is, if you have older programs, then they

> | > would

> | > likely need installed soon after the fresh installation, and updated

> if

> | > you

> | > have those files..

> | >

> | > YOUR FILES:

> | >

> | > How did you get those versions? Do you have Office 2003 or something,

> or

> | > did you install an XP update or was one suggested somewhere? Did you

> | > install

> | > an un-official update or two? Or are we actually talking about XP

> here:

> | >

> | > List of Microsoft XML Parser (MSXML) versions

> | > http://support.microsoft.com/kb/269238

> | >

> | > Microsoft Security Bulletin MS06-061

> | > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

> | >

> | > MS06-071: Security update for Microsoft XML Core Services 4.0

> | > http://support.microsoft.com/kb/927978

> | >

> | > --

> | > MEB http://peoplescounsel.orgfree.com

> | > --

> | > _________

> | >

> | > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

> | > news:4838d0b0$0$25038$607ed4bc@cv.net...

> | > | This is a follow up to my 'can't get online' post. When I run Spybot

> it

> | > goes 3/4 of

> | > | the way then a box pops up that says there is something wrong with

> my

> | > trojan checker.

> | > | If I say o.k. it continues and says my system is clear. However, I

> am

> | > missing 3 files

> | > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

> | > |

> | >

> |

>

May 25, 2008

Re: I believe it may be a virus or trojan horse

Seems we used to do this a few years ago, early morning posts covering each

others backs... I'm going to bed... catch ya tomorrow, er later,,,

--

| http://www.grystmill.com

--

_________

"Gary S. Terhune" <none> wrote in message

news:uw%23aPxjvIHA.2068@TK2MSFTNGP05.phx.gbl...

| Oh, OK. I missed that list. Good catch.

|

| --

| Gary S. Terhune

| MS-MVP Shell/User

|

| "MEB" <meb@not here@hotmail.com> wrote in message

| news:e$cr9mjvIHA.2292@TK2MSFTNGP05.phx.gbl...

| >

| > "Gary S. Terhune" <none> wrote in message

| > news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

| > | She now has IE6SP1 and the CDs will be in Monday's mail. How can she

| > | determine provenance of the DLLs if she doesn't have them on her

system

| > | anymore.

| > |

| > | --

| > | Gary S. Terhune

| > | MS-MVP Shell/User

| > | http://www.grystmill.com

| >

| > She has the 4.0 DLLs. She should have 3.0.... have her check what

| > versions of all those files are to isolate where they came from...

| >

| > See this to review they might have come from:

| > http://support.microsoft.com/kb/269238

| >

| > Check this for 3.0

| > http://support.microsoft.com/?scid=ph;en-us;3346

| >

| > Check this for Office 2003

| > http://support.microsoft.com/?scid=ph;en-us;2488

| >

| > If she has installed something or attempted to install something not

| > called

| > for into 98, then installing IE6 will NOT correct all the issues

involved.

| >

| > --

| > MEB http://peoplescounsel.orgfree.com

| > --

| > _________

| >

| > |

| > | "MEB" <meb@not here@hotmail.com> wrote in message

| > | news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

| > | > That is possible, however, you would need to install a few programs

to

| > | > test

| > | > for such. These programs MAY not function properly if you are

missing

| > some

| > | > key files.

| > | >

| > | > QUESTION:

| > | >

| > | > Did you contact Gary for those CDROMS he has referred to?

| > | > The Security Updates CD contains the installer for IE6 {which will

| > replace

| > | > those files that you are missing. NOTE: you would then need to check

| > on

| > | > windowsupdate to see if you needed any more updates. IF NOT then did

| > you

| > | > attempt to FTP the IE6 installation files from somewhere [because

you

| > | > can't

| > | > apparently use a browser]?

| > | >

| > | > THE REASON:

| > | >

| > | > IF you re-install IE6 you may downgrade some of the updates already

| > | > applied

| > | > to your system. Using the supplied CD-ROMs could potentially place

you

| > in

| > | > a

| > | > compromised condition, which we refer to as "DLL hell" {mismatched

| > DLLs

| > in

| > | > the system and registry}. Moreover, you have some files in your

system

| > | > which

| > | > should not apparently be there.

| > | >

| > | > THE PROBLEM:

| > | >

| > | > IF you truly do have missing files then either you removed them or

| > | > something else did. That something could be a virus or otherwise. IF

| > you

| > | > are

| > | > infected, then merely replacing the files WILL NOT ensure that your

| > system

| > | > is free of that potential hack or virus. Moreover, if you have a

| > virus,

| > | > there is a potential that whatever you would download may become

| > infected

| > | > during the attempt.

| > | >

| > | > REGRETFULLY:

| > | >

| > | > This may mean you need to prepare to re-install the system and

| > programs

| > on

| > | > a clean and checked disk. *IF* you have those disks Gary suggested,

| > then

| > | > you

| > | > would only need your 98(FE/SE} installation CDROM, driver, and

| > application

| > | > installers to get back online, from there you can search for

anything

| > you

| > | > may be missing. One warning is, if you have older programs, then

they

| > | > would

| > | > likely need installed soon after the fresh installation, and updated

| > if

| > | > you

| > | > have those files..

| > | >

| > | > YOUR FILES:

| > | >

| > | > How did you get those versions? Do you have Office 2003 or

something,

| > or

| > | > did you install an XP update or was one suggested somewhere? Did you

| > | > install

| > | > an un-official update or two? Or are we actually talking about XP

| > here:

| > | >

| > | > List of Microsoft XML Parser (MSXML) versions

| > | > http://support.microsoft.com/kb/269238

| > | >

| > | > Microsoft Security Bulletin MS06-061

| > | > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

| > | >

| > | > MS06-071: Security update for Microsoft XML Core Services 4.0

| > | > http://support.microsoft.com/kb/927978

| > | >

| > | > --

| > | > MEB http://peoplescounsel.orgfree.com

| > | > --

| > | > _________

| > | >

| > | > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

| > | > news:4838d0b0$0$25038$607ed4bc@cv.net...

| > | > | This is a follow up to my 'can't get online' post. When I run

Spybot

| > it

| > | > goes 3/4 of

| > | > | the way then a box pops up that says there is something wrong with

| > my

| > | > trojan checker.

| > | > | If I say o.k. it continues and says my system is clear. However, I

| > am

| > | > missing 3 files

| > | > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

| > | > |

| > | >

| > |

| >

|

May 25, 2008

Re: I believe it may be a virus or trojan horse

Gary S. Terhune wrote:

> Do you have a HOSTS file? Might be a

> program called Hosts File Manager if you've followed this NG for a

> while. If so, you'll want to disable the HOSTS file itself.

That may be a BINGO. If I were she, I would rename it and see if I could

get online. The botched Avast uninstall may have left things directed back

to 127.0.0.1

--

dadiOH

____________________________

dadiOH's dandies v3.06...

....a help file of info about MP3s, recording from

LP/cassette and tips & tricks on this and that.

Get it at http://mysite.verizon.net/xico

May 25, 2008

Re: I believe it may be a virus or trojan horse

Since you've started a new thread, I will continue here.

First, I need to see if you have a proxy set up in the browsers.....if you do, you

need to remove those settings.

For IE6:

Start Internet Explorer.

Click the Tools menu> Internet Options

Click the Connections tab.

Click on the |LAN Settings| button.

If there a check in the box for "Use a proxy server for your LAN", uncheck the box

and click OK all the way out, then close a re-open IE.

For Firefox 2.x:

Start Firefox.

Click the Tools menu> Options.

Click the Advanced button on the Options window's toolbar.

Click the |Settings| button in the Connection section.

In the section "Configure proxies to access the Internet", make sure "Direct

connection to the Internet" is selected (NOT Manual Proxy Configuration), and if you

had to change it, click OK all the way out.

Close Firefox and then re-open it.

For Firefox 1.5.x (this is from memory, as I don't have it installed):

Open Firefox.

Click the Tools menu> Options.

Click the General tab.

Click the |Connection Settings| button in the Connection section at the bottom of

the window.

In the section "Configure proxies to access the Internet", make sure "Direct

connection to the Internet" is selected (NOT Manual Proxy Configuration), and if you

had to change it, click OK all the way out.

Close Firefox and then re-open it.

Post back to THIS thread with what you found there, in each case, and if you made

the changes if required. Don't just post back with a one-liner reply like "It

didn't work" or "It wasn't there".....those type answers are useless. Provide

details as to what you find and what you change. Take notes and use them, please.

--

Glen Ventura, MS MVP Windows, A+

http://dts-l.net/

http://dts-l.net/goodpost.htm

"CdLSRN" <ginnyrn5@nospam.com> wrote in message

news:4838d0b0$0$25038$607ed4bc@cv.net...

> This is a follow up to my 'can't get online' post. When I run Spybot it goes 3/4

> of

> the way then a box pops up that says there is something wrong with my trojan

> checker.

> If I say o.k. it continues and says my system is clear. However, I am missing 3

> files

> from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

>

May 25, 2008

Re: I believe it may be a virus or trojan horse

I wish my memory was better, but as of a couple of years ago, I stopped

using HOSTS File Manager for some reason, and thus gave up on the HOSTS file

itself. Or vice versa, can't remember. (SpywareBlaster is pretty much all I

use for that kind of passive protection.) Wish I could recall the

circumstances, but it may have been something quite like this, if not this

exact problem.

--

Gary S. Terhune

MS-MVP Shell/User

"dadiOH" <dadiOH@invalid.com> wrote in message

news:Ok13W7kvIHA.2208@TK2MSFTNGP04.phx.gbl...

> Gary S. Terhune wrote:

>

>> Do you have a HOSTS file? Might be a

>> program called Hosts File Manager if you've followed this NG for a

>> while. If so, you'll want to disable the HOSTS file itself.

>

> That may be a BINGO. If I were she, I would rename it and see if I could

> get online. The botched Avast uninstall may have left things directed

> back to 127.0.0.1

>

> --

>

> dadiOH

> ____________________________

>

> dadiOH's dandies v3.06...

> ...a help file of info about MP3s, recording from

> LP/cassette and tips & tricks on this and that.

> Get it at http://mysite.verizon.net/xico

>

May 25, 2008

Re: I believe it may be a virus or trojan horse

I just rebooted my computer a couple of times and pressed esc when the dell page came

up.... there is something there that could explain why , when I have 74% of my memory

free, it is telling me I only have 34mb free. (I have 350mb).

Anyway it says in the dos mode while starting up, "Vortex Dos Audio driver 2.0"

(which I don't believe I have),"Interrupt 5, Ports 220-22fh DMA 3, Joystick 201h" I

do not have a joystick, No games have ever been played on this computer. Is someone

else using my computer since I have lost all protection?

"Gary S. Terhune" <none> wrote in message

news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

> She now has IE6SP1 and the CDs will be in Monday's mail. How can she

> determine provenance of the DLLs if she doesn't have them on her system

> anymore.

>

> --

> Gary S. Terhune

> MS-MVP Shell/User

> > http://support.microsoft.com/kb/269238

>

> "MEB" <meb@not here@hotmail.com> wrote in message

> news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

> > That is possible, however, you would need to install a few programs to

> > test

> > for such. These programs MAY not function properly if you are missing some

> > key files.

> >

> > QUESTION:

> >

> > Did you contact Gary for those CDROMS he has referred to?

> > The Security Updates CD contains the installer for IE6 {which will replace

> > those files that you are missing. NOTE: you would then need to check on

> > windowsupdate to see if you needed any more updates. IF NOT then did you

> > attempt to FTP the IE6 installation files from somewhere [because you

> > can't

> > apparently use a browser]?

> >

> > THE REASON:

> >

> > IF you re-install IE6 you may downgrade some of the updates already

> > applied

> > to your system. Using the supplied CD-ROMs could potentially place you in

> > a

> > compromised condition, which we refer to as "DLL hell" {mismatched DLLs in

> > the system and registry}. Moreover, you have some files in your system

> > which

> > should not apparently be there.

> >

> > THE PROBLEM:

> >

> > IF you truly do have missing files then either you removed them or

> > something else did. That something could be a virus or otherwise. IF you

> > are

> > infected, then merely replacing the files WILL NOT ensure that your system

> > is free of that potential hack or virus. Moreover, if you have a virus,

> > there is a potential that whatever you would download may become infected

> > during the attempt.

> >

> > REGRETFULLY:

> >

> > This may mean you need to prepare to re-install the system and programs on

> > a clean and checked disk. *IF* you have those disks Gary suggested, then

> > you

> > would only need your 98(FE/SE} installation CDROM, driver, and application

> > installers to get back online, from there you can search for anything you

> > may be missing. One warning is, if you have older programs, then they

> > would

> > likely need installed soon after the fresh installation, and updated if

> > you

> > have those files..

> >

> > YOUR FILES:

> >

> > How did you get those versions? Do you have Office 2003 or something, or

> > did you install an XP update or was one suggested somewhere? Did you

> > install

> > an un-official update or two? Or are we actually talking about XP here:

> >

> > List of Microsoft XML Parser (MSXML) versions

> >

> > Microsoft Security Bulletin MS06-061

> > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

> >

> > MS06-071: Security update for Microsoft XML Core Services 4.0

> > http://support.microsoft.com/kb/927978

> >

> > --

> > MEB http://peoplescounsel.orgfree.com

> > --

> > _________

> >

> > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

> > news:4838d0b0$0$25038$607ed4bc@cv.net...

> > | This is a follow up to my 'can't get online' post. When I run Spybot it

> > goes 3/4 of

> > | the way then a box pops up that says there is something wrong with my

> > trojan checker.

> > | If I say o.k. it continues and says my system is clear. However, I am

> > missing 3 files

> > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

> > |

> >

>

May 25, 2008

Re: I believe it may be a virus or trojan horse

ie6 is the only browser I have now and I do not have a proxy. but I found while

re-booting "Vortex Dos Audio driver 2.0, Interrupt 5, Ports 220-22fh dma3, Joystick

201h". I have no joystick, or Vortex and games have NEVER been played on this

computer.

"glee" <glee29@spamindspring.com> wrote in message

news:O73DeKmvIHA.5472@TK2MSFTNGP06.phx.gbl...

> Since you've started a new thread, I will continue here.

>

> First, I need to see if you have a proxy set up in the browsers.....if you do, you

> need to remove those settings.

>

> For IE6:

> Start Internet Explorer.

> Click the Tools menu> Internet Options

> Click the Connections tab.

> Click on the |LAN Settings| button.

> If there a check in the box for "Use a proxy server for your LAN", uncheck the box

> and click OK all the way out, then close a re-open IE.

>

> For Firefox 2.x:

> Start Firefox.

> Click the Tools menu> Options.

> Click the Advanced button on the Options window's toolbar.

> Click the |Settings| button in the Connection section.

> In the section "Configure proxies to access the Internet", make sure "Direct

> connection to the Internet" is selected (NOT Manual Proxy Configuration), and if

you

> had to change it, click OK all the way out.

> Close Firefox and then re-open it.

>

> For Firefox 1.5.x (this is from memory, as I don't have it installed):

> Open Firefox.

> Click the Tools menu> Options.

> Click the General tab.

> Click the |Connection Settings| button in the Connection section at the bottom of

> the window.

> In the section "Configure proxies to access the Internet", make sure "Direct

> connection to the Internet" is selected (NOT Manual Proxy Configuration), and if

you

> had to change it, click OK all the way out.

> Close Firefox and then re-open it.

>

> Post back to THIS thread with what you found there, in each case, and if you made

> the changes if required. Don't just post back with a one-liner reply like "It

> didn't work" or "It wasn't there".....those type answers are useless. Provide

> details as to what you find and what you change. Take notes and use them, please.

> --

> Glen Ventura, MS MVP Windows, A+

> http://dts-l.net/

> http://dts-l.net/goodpost.htm

>

> "CdLSRN" <ginnyrn5@nospam.com> wrote in message

> news:4838d0b0$0$25038$607ed4bc@cv.net...

> > This is a follow up to my 'can't get online' post. When I run Spybot it goes 3/4

> > of

> > the way then a box pops up that says there is something wrong with my trojan

> > checker.

> > If I say o.k. it continues and says my system is clear. However, I am missing 3

> > files

> > from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

> >

>

May 25, 2008

Re: I believe it may be a virus or trojan horse

NO. Likely you have an Aureal Vortex based sound card installed... please

see and answer the questions I placed previously. The more misdirections

that you place will cause your issues to be extended for days or weeks

without resolution.

--

| > > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

--

_________

"CdLSRN" <ginnyrn5@nospam.com> wrote in message

news:4839a623$0$25041$607ed4bc@cv.net...

| I just rebooted my computer a couple of times and pressed esc when the

dell page came

| up.... there is something there that could explain why , when I have 74%

of my memory

| free, it is telling me I only have 34mb free. (I have 350mb).

| Anyway it says in the dos mode while starting up, "Vortex Dos Audio driver

2.0"

| (which I don't believe I have),"Interrupt 5, Ports 220-22fh DMA 3,

Joystick 201h" I

| do not have a joystick, No games have ever been played on this computer.

Is someone

| else using my computer since I have lost all protection?

|

| "Gary S. Terhune" <none> wrote in message

| news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

| > She now has IE6SP1 and the CDs will be in Monday's mail. How can she

| > determine provenance of the DLLs if she doesn't have them on her system

| > anymore.

| >

| > --

| > Gary S. Terhune

| > MS-MVP Shell/User

| > http://www.grystmill.com

| >

| > "MEB" <meb@not here@hotmail.com> wrote in message

| > news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

| > > That is possible, however, you would need to install a few programs to

| > > test

| > > for such. These programs MAY not function properly if you are missing

some

| > > key files.

| > >

| > > QUESTION:

| > >

| > > Did you contact Gary for those CDROMS he has referred to?

| > > The Security Updates CD contains the installer for IE6 {which will

replace

| > > those files that you are missing. NOTE: you would then need to check

on

| > > windowsupdate to see if you needed any more updates. IF NOT then did

you

| > > attempt to FTP the IE6 installation files from somewhere [because you

| > > can't

| > > apparently use a browser]?

| > >

| > > THE REASON:

| > >

| > > IF you re-install IE6 you may downgrade some of the updates already

| > > applied

| > > to your system. Using the supplied CD-ROMs could potentially place you

in

| > > a

| > > compromised condition, which we refer to as "DLL hell" {mismatched

DLLs in

| > > the system and registry}. Moreover, you have some files in your system

| > > which

| > > should not apparently be there.

| > >

| > > THE PROBLEM:

| > >

| > > IF you truly do have missing files then either you removed them or

| > > something else did. That something could be a virus or otherwise. IF

you

| > > are

| > > infected, then merely replacing the files WILL NOT ensure that your

system

| > > is free of that potential hack or virus. Moreover, if you have a

virus,

| > > there is a potential that whatever you would download may become

infected

| > > during the attempt.

| > >

| > > REGRETFULLY:

| > >

| > > This may mean you need to prepare to re-install the system and

programs on

| > > a clean and checked disk. *IF* you have those disks Gary suggested,

then

| > > you

| > > would only need your 98(FE/SE} installation CDROM, driver, and

application

| > > installers to get back online, from there you can search for anything

you

| > > may be missing. One warning is, if you have older programs, then they

| > > would

| > > likely need installed soon after the fresh installation, and updated

if

| > > you

| > > have those files..

| > >

| > > YOUR FILES:

| > >

| > > How did you get those versions? Do you have Office 2003 or something,

or

| > > did you install an XP update or was one suggested somewhere? Did you

| > > install

| > > an un-official update or two? Or are we actually talking about XP

here:

| > >

| > > List of Microsoft XML Parser (MSXML) versions

| > > http://support.microsoft.com/kb/269238

| > >

| > > Microsoft Security Bulletin MS06-061

| > >

| > > MS06-071: Security update for Microsoft XML Core Services 4.0

| > > http://support.microsoft.com/kb/927978

| > >

| > > --

| > > MEB http://peoplescounsel.orgfree.com

| > > --

| > > _________

| > >

| > > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

| > > news:4838d0b0$0$25038$607ed4bc@cv.net...

| > > | This is a follow up to my 'can't get online' post. When I run Spybot

it

| > > goes 3/4 of

| > > | the way then a box pops up that says there is something wrong with

my

| > > trojan checker.

| > > | If I say o.k. it continues and says my system is clear. However, I

am

| > > missing 3 files

| > > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

| > > |

| > >

| >

|

May 25, 2008

Re: I believe it may be a virus or trojan horse

"Gary S. Terhune" <none> wrote in message

news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

> She now has IE6SP1 and the CDs will be in Monday's mail. How can she

> determine provenance of the DLLs if she doesn't have them on her system

> anymore.

>

If you need to make a special trip to the post office...

wait 'til Tue. as Monday is a holiday!

> Gary S. Terhune

> MS-MVP Shell/User

> > http://support.microsoft.com/kb/269238

>

> "MEB" <meb@not here@hotmail.com> wrote in message

> news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

> > That is possible, however, you would need to install a few programs to

> > test

> > for such. These programs MAY not function properly if you are missing

some

> > key files.

> >

> > QUESTION:

> >

> > Did you contact Gary for those CDROMS he has referred to?

> > The Security Updates CD contains the installer for IE6 {which will

replace

> > those files that you are missing. NOTE: you would then need to check on

> > windowsupdate to see if you needed any more updates. IF NOT then did you

> > attempt to FTP the IE6 installation files from somewhere [because you

> > can't

> > apparently use a browser]?

> >

> > THE REASON:

> >

> > IF you re-install IE6 you may downgrade some of the updates already

> > applied

> > to your system. Using the supplied CD-ROMs could potentially place you

in

> > a

> > compromised condition, which we refer to as "DLL hell" {mismatched DLLs

in

> > the system and registry}. Moreover, you have some files in your system

> > which

> > should not apparently be there.

> >

> > THE PROBLEM:

> >

> > IF you truly do have missing files then either you removed them or

> > something else did. That something could be a virus or otherwise. IF you

> > are

> > infected, then merely replacing the files WILL NOT ensure that your

system

> > is free of that potential hack or virus. Moreover, if you have a virus,

> > there is a potential that whatever you would download may become

infected

> > during the attempt.

> >

> > REGRETFULLY:

> >

> > This may mean you need to prepare to re-install the system and programs

on

> > a clean and checked disk. *IF* you have those disks Gary suggested, then

> > you

> > would only need your 98(FE/SE} installation CDROM, driver, and

application

> > installers to get back online, from there you can search for anything

you

> > may be missing. One warning is, if you have older programs, then they

> > would

> > likely need installed soon after the fresh installation, and updated if

> > you

> > have those files..

> >

> > YOUR FILES:

> >

> > How did you get those versions? Do you have Office 2003 or something, or

> > did you install an XP update or was one suggested somewhere? Did you

> > install

> > an un-official update or two? Or are we actually talking about XP here:

> >

> > List of Microsoft XML Parser (MSXML) versions

> >

> > Microsoft Security Bulletin MS06-061

> > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

> >

> > MS06-071: Security update for Microsoft XML Core Services 4.0

> > http://support.microsoft.com/kb/927978

> >

> > --

> > MEB http://peoplescounsel.orgfree.com

> > --

> > _________

> >

> > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

> > news:4838d0b0$0$25038$607ed4bc@cv.net...

> > | This is a follow up to my 'can't get online' post. When I run Spybot

it

> > goes 3/4 of

> > | the way then a box pops up that says there is something wrong with my

> > trojan checker.

> > | If I say o.k. it continues and says my system is clear. However, I am

> > missing 3 files

> > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

> > |

> >

>

May 25, 2008

Re: I believe it may be a virus or trojan horse

On Sun, 25 May 2008 13:50:45 -0400, "CdLSRN" <ginnyrn5@nospam.com>

wrote:

>ie6 is the only browser I have now and I do not have a proxy. but I found while

>re-booting "Vortex Dos Audio driver 2.0, Interrupt 5, Ports 220-22fh dma3, Joystick

>201h". I have no joystick, or Vortex and games have NEVER been played on this

>computer.

Just a thought.

How much important software do you have installed on your computer?

I ask this because if all you really have is Win98 and the things that

come with it, plus a few other things, maybe you'd be better off just

starting over. I always fix my computer and find the problem, but I

have lots of software installed and lots of personal data. But if all

you have is the basic Win98 CD files and a few other programs, for

example you might have photoshop, quicken, and a couple shareware

programs, it might be easier to just backup all personal files, such

as your email data, your bookmarks, your photos, stuff like the

Quicken data files, and any saved web pages, downloads, music, etc.

Then format the harddrive and reinstall Windows and your other

programs.

For me, a reinstall means spending weeks getting all my programs

reinstalled, but if all you have comes off the Win98 CD, and a few

other CDs, it's often easier to just reinstall.

I know your problem is repairable, but is it worth the amount of time

spent to do it, when a reinstall may be faster.

Just a thought !!!

May 25, 2008

Re: I believe it may be a virus or trojan horse

By golly, you're right. No, I just walk 30' to the mailbox, pop it in and

put up the flag. Might have to dodge some rain, but...

--

Gary S. Terhune

MS-MVP Shell/User

>> > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

"philo" <philo@privacy.net> wrote in message

news:Qd2dnU1hbZZtVqTVnZ2dnUVZ_gmdnZ2d@ntd.net...

>

> "Gary S. Terhune" <none> wrote in message

> news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

>> She now has IE6SP1 and the CDs will be in Monday's mail. How can she

>> determine provenance of the DLLs if she doesn't have them on her system

>> anymore.

>>

>

> If you need to make a special trip to the post office...

> wait 'til Tue. as Monday is a holiday!

>

>> Gary S. Terhune

>> MS-MVP Shell/User

>> http://www.grystmill.com

>>

>> "MEB" <meb@not here@hotmail.com> wrote in message

>> news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

>> > That is possible, however, you would need to install a few programs to

>> > test

>> > for such. These programs MAY not function properly if you are missing

> some

>> > key files.

>> >

>> > QUESTION:

>> >

>> > Did you contact Gary for those CDROMS he has referred to?

>> > The Security Updates CD contains the installer for IE6 {which will

> replace

>> > those files that you are missing. NOTE: you would then need to check on

>> > windowsupdate to see if you needed any more updates. IF NOT then did

>> > you

>> > attempt to FTP the IE6 installation files from somewhere [because you

>> > can't

>> > apparently use a browser]?

>> >

>> > THE REASON:

>> >

>> > IF you re-install IE6 you may downgrade some of the updates already

>> > applied

>> > to your system. Using the supplied CD-ROMs could potentially place you

> in

>> > a

>> > compromised condition, which we refer to as "DLL hell" {mismatched DLLs

> in

>> > the system and registry}. Moreover, you have some files in your system

>> > which

>> > should not apparently be there.

>> >

>> > THE PROBLEM:

>> >

>> > IF you truly do have missing files then either you removed them or

>> > something else did. That something could be a virus or otherwise. IF

>> > you

>> > are

>> > infected, then merely replacing the files WILL NOT ensure that your

> system

>> > is free of that potential hack or virus. Moreover, if you have a virus,

>> > there is a potential that whatever you would download may become

> infected

>> > during the attempt.

>> >

>> > REGRETFULLY:

>> >

>> > This may mean you need to prepare to re-install the system and programs

> on

>> > a clean and checked disk. *IF* you have those disks Gary suggested,

>> > then

>> > you

>> > would only need your 98(FE/SE} installation CDROM, driver, and

> application

>> > installers to get back online, from there you can search for anything

> you

>> > may be missing. One warning is, if you have older programs, then they

>> > would

>> > likely need installed soon after the fresh installation, and updated if

>> > you

>> > have those files..

>> >

>> > YOUR FILES:

>> >

>> > How did you get those versions? Do you have Office 2003 or something,

>> > or

>> > did you install an XP update or was one suggested somewhere? Did you

>> > install

>> > an un-official update or two? Or are we actually talking about XP here:

>> >

>> > List of Microsoft XML Parser (MSXML) versions

>> > http://support.microsoft.com/kb/269238

>> >

>> > Microsoft Security Bulletin MS06-061

>> >

>> > MS06-071: Security update for Microsoft XML Core Services 4.0

>> > http://support.microsoft.com/kb/927978

>> >

>> > --

>> > MEB http://peoplescounsel.orgfree.com

>> > --

>> > _________

>> >

>> > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

>> > news:4838d0b0$0$25038$607ed4bc@cv.net...

>> > | This is a follow up to my 'can't get online' post. When I run Spybot

> it

>> > goes 3/4 of

>> > | the way then a box pops up that says there is something wrong with my

>> > trojan checker.

>> > | If I say o.k. it continues and says my system is clear. However, I am

>> > missing 3 files

>> > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

>> > |

>> >

>>

>

May 26, 2008

Re: I believe it may be a virus or trojan horse

"Gary S. Terhune" <none> wrote in message

news:eVEuz4rvIHA.4476@TK2MSFTNGP06.phx.gbl...

> By golly, you're right. No, I just walk 30' to the mailbox, pop it in and

> put up the flag. Might have to dodge some rain, but...

>

A 30' walk is not too bad...

Just mentioned it incase you were driving.

with the price of gas, I expect to see a lot more people walking!

> --

> Gary S. Terhune

> MS-MVP Shell/User

> >> > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

>

> "philo" <philo@privacy.net> wrote in message

> news:Qd2dnU1hbZZtVqTVnZ2dnUVZ_gmdnZ2d@ntd.net...

> >

> > "Gary S. Terhune" <none> wrote in message

> > news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

> >> She now has IE6SP1 and the CDs will be in Monday's mail. How can she

> >> determine provenance of the DLLs if she doesn't have them on her system

> >> anymore.

> >>

> >

> > If you need to make a special trip to the post office...

> > wait 'til Tue. as Monday is a holiday!

> >

> >> Gary S. Terhune

> >> MS-MVP Shell/User

> >> http://www.grystmill.com

> >>

> >> "MEB" <meb@not here@hotmail.com> wrote in message

> >> news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

> >> > That is possible, however, you would need to install a few programs

to

> >> > test

> >> > for such. These programs MAY not function properly if you are missing

> > some

> >> > key files.

> >> >

> >> > QUESTION:

> >> >

> >> > Did you contact Gary for those CDROMS he has referred to?

> >> > The Security Updates CD contains the installer for IE6 {which will

> > replace

> >> > those files that you are missing. NOTE: you would then need to check

on

> >> > windowsupdate to see if you needed any more updates. IF NOT then did

> >> > you

> >> > attempt to FTP the IE6 installation files from somewhere [because you

> >> > can't

> >> > apparently use a browser]?

> >> >

> >> > THE REASON:

> >> >

> >> > IF you re-install IE6 you may downgrade some of the updates already

> >> > applied

> >> > to your system. Using the supplied CD-ROMs could potentially place

you

> > in

> >> > a

> >> > compromised condition, which we refer to as "DLL hell" {mismatched

DLLs

> > in

> >> > the system and registry}. Moreover, you have some files in your

system

> >> > which

> >> > should not apparently be there.

> >> >

> >> > THE PROBLEM:

> >> >

> >> > IF you truly do have missing files then either you removed them or

> >> > something else did. That something could be a virus or otherwise. IF

> >> > you

> >> > are

> >> > infected, then merely replacing the files WILL NOT ensure that your

> > system

> >> > is free of that potential hack or virus. Moreover, if you have a

virus,

> >> > there is a potential that whatever you would download may become

> > infected

> >> > during the attempt.

> >> >

> >> > REGRETFULLY:

> >> >

> >> > This may mean you need to prepare to re-install the system and

programs

> > on

> >> > a clean and checked disk. *IF* you have those disks Gary suggested,

> >> > then

> >> > you

> >> > would only need your 98(FE/SE} installation CDROM, driver, and

> > application

> >> > installers to get back online, from there you can search for anything

> > you

> >> > may be missing. One warning is, if you have older programs, then they

> >> > would

> >> > likely need installed soon after the fresh installation, and updated

if

> >> > you

> >> > have those files..

> >> >

> >> > YOUR FILES:

> >> >

> >> > How did you get those versions? Do you have Office 2003 or something,

> >> > or

> >> > did you install an XP update or was one suggested somewhere? Did you

> >> > install

> >> > an un-official update or two? Or are we actually talking about XP

here:

> >> >

> >> > List of Microsoft XML Parser (MSXML) versions

> >> > http://support.microsoft.com/kb/269238

> >> >

> >> > Microsoft Security Bulletin MS06-061

> >> >

> >> > MS06-071: Security update for Microsoft XML Core Services 4.0

> >> > http://support.microsoft.com/kb/927978

> >> >

> >> > --

> >> > MEB http://peoplescounsel.orgfree.com

> >> > --

> >> > _________

> >> >

> >> > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

> >> > news:4838d0b0$0$25038$607ed4bc@cv.net...

> >> > | This is a follow up to my 'can't get online' post. When I run

Spybot

> > it

> >> > goes 3/4 of

> >> > | the way then a box pops up that says there is something wrong with

my

> >> > trojan checker.

> >> > | If I say o.k. it continues and says my system is clear. However, I

am

> >> > missing 3 files

> >> > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

> >> > |

> >> >

> >>

> >

>

May 26, 2008

Re: I believe it may be a virus or trojan horse

Me? Drive? HAHAHAHAHAHAHA!!!!!!

--

Gary S. Terhune

MS-MVP Shell/User

"philo" <philo@privacy.net> wrote in message

news:eF$8xQsvIHA.3968@TK2MSFTNGP04.phx.gbl...

>

> "Gary S. Terhune" <none> wrote in message

> news:eVEuz4rvIHA.4476@TK2MSFTNGP06.phx.gbl...

>> By golly, you're right. No, I just walk 30' to the mailbox, pop it in and

>> put up the flag. Might have to dodge some rain, but...

>>

>

> A 30' walk is not too bad...

>

> Just mentioned it incase you were driving.

> with the price of gas, I expect to see a lot more people walking!

>

>> --

>> Gary S. Terhune

>> MS-MVP Shell/User

>> http://www.grystmill.com

>>

>> "philo" <philo@privacy.net> wrote in message

>> news:Qd2dnU1hbZZtVqTVnZ2dnUVZ_gmdnZ2d@ntd.net...

>> >

>> > "Gary S. Terhune" <none> wrote in message

>> > news:Oe3OmvivIHA.4912@TK2MSFTNGP03.phx.gbl...

>> >> She now has IE6SP1 and the CDs will be in Monday's mail. How can she

>> >> determine provenance of the DLLs if she doesn't have them on her

>> >> system

>> >> anymore.

>> >>

>> >

>> > If you need to make a special trip to the post office...

>> > wait 'til Tue. as Monday is a holiday!

>> >

>> >> Gary S. Terhune

>> >> MS-MVP Shell/User

>> >> http://www.grystmill.com

>> >>

>> >> "MEB" <meb@not here@hotmail.com> wrote in message

>> >> news:eue9KgivIHA.420@TK2MSFTNGP02.phx.gbl...

>> >> > That is possible, however, you would need to install a few programs

> to

>> >> > test

>> >> > for such. These programs MAY not function properly if you are

>> >> > missing

>> > some

>> >> > key files.

>> >> >

>> >> > QUESTION:

>> >> >

>> >> > Did you contact Gary for those CDROMS he has referred to?

>> >> > The Security Updates CD contains the installer for IE6 {which will

>> > replace

>> >> > those files that you are missing. NOTE: you would then need to check

> on

>> >> > windowsupdate to see if you needed any more updates. IF NOT then did

>> >> > you

>> >> > attempt to FTP the IE6 installation files from somewhere [because

>> >> > you

>> >> > can't

>> >> > apparently use a browser]?

>> >> >

>> >> > THE REASON:

>> >> >

>> >> > IF you re-install IE6 you may downgrade some of the updates already

>> >> > applied

>> >> > to your system. Using the supplied CD-ROMs could potentially place

> you

>> > in

>> >> > a

>> >> > compromised condition, which we refer to as "DLL hell" {mismatched

> DLLs

>> > in

>> >> > the system and registry}. Moreover, you have some files in your

> system

>> >> > which

>> >> > should not apparently be there.

>> >> >

>> >> > THE PROBLEM:

>> >> >

>> >> > IF you truly do have missing files then either you removed them or

>> >> > something else did. That something could be a virus or otherwise. IF

>> >> > you

>> >> > are

>> >> > infected, then merely replacing the files WILL NOT ensure that your

>> > system

>> >> > is free of that potential hack or virus. Moreover, if you have a

> virus,

>> >> > there is a potential that whatever you would download may become

>> > infected

>> >> > during the attempt.

>> >> >

>> >> > REGRETFULLY:

>> >> >

>> >> > This may mean you need to prepare to re-install the system and

> programs

>> > on

>> >> > a clean and checked disk. *IF* you have those disks Gary suggested,

>> >> > then

>> >> > you

>> >> > would only need your 98(FE/SE} installation CDROM, driver, and

>> > application

>> >> > installers to get back online, from there you can search for

>> >> > anything

>> > you

>> >> > may be missing. One warning is, if you have older programs, then

>> >> > they

>> >> > would

>> >> > likely need installed soon after the fresh installation, and updated

> if

>> >> > you

>> >> > have those files..

>> >> >

>> >> > YOUR FILES:

>> >> >

>> >> > How did you get those versions? Do you have Office 2003 or

>> >> > something,

>> >> > or

>> >> > did you install an XP update or was one suggested somewhere? Did you

>> >> > install

>> >> > an un-official update or two? Or are we actually talking about XP

> here:

>> >> >

>> >> > List of Microsoft XML Parser (MSXML) versions

>> >> > http://support.microsoft.com/kb/269238

>> >> >

>> >> > Microsoft Security Bulletin MS06-061

>> >> > http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx

>> >> >

>> >> > MS06-071: Security update for Microsoft XML Core Services 4.0

>> >> > http://support.microsoft.com/kb/927978

>> >> >

>> >> > --

>> >> > MEB http://peoplescounsel.orgfree.com

>> >> > --

>> >> > _________

>> >> >

>> >> > "CdLSRN" <ginnyrn5@nospam.com> wrote in message

>> >> > news:4838d0b0$0$25038$607ed4bc@cv.net...

>> >> > | This is a follow up to my 'can't get online' post. When I run

> Spybot

>> > it

>> >> > goes 3/4 of

>> >> > | the way then a box pops up that says there is something wrong with

> my

>> >> > trojan checker.

>> >> > | If I say o.k. it continues and says my system is clear. However, I

> am

>> >> > missing 3 files

>> >> > | from IE6 (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

>> >> > |

>> >> >

>> >>

>> >

>>

>

May 26, 2008

Re: I believe it may be a virus or trojan horse

In case it is spyware causing the problems, try the free versio of

SuperAntispyware which can be dl'd at the same name and adding a .com.

Download it, install it, update it and then run it.

You can always just uninstall it if you don't want it. The free version is

just as powerful as the paid version except that it is on-demand only

instead of full-time plus a few other features.

If you do try it and decide to uninstall it, make sure superantispyware is

not running or showing on your task bar before using the uninstall.

Those three files (MSXML.DLL, MSXMLA.DLL, MSXMLR.DLL) can be be copied from

another Win98 machine or possibly from the install Win98SE cd. They are

fairly small in size, 525kb total.

Put them in the C:\Windows\Systems folder.

On my Win98SE system, those files are version 8.0.6730.0.

CdLSRN wrote:

> This is a follow up to my 'can't get online' post. When I run Spybot

> it goes 3/4 of the way then a box pops up that says there is

> something wrong with my trojan checker. If I say o.k. it continues

> and says my system is clear. However, I am missing 3 files from IE6

> (MSXMLA.DLL, MSXMLA.DLL, MSXMLR.DLL.

May 26, 2008

Re: I believe it may be a virus or trojan horse

"Gary S. Terhune" <none> wrote in message

news:Ohhn3isvIHA.3384@TK2MSFTNGP03.phx.gbl...

> Me? Drive? HAHAHAHAHAHAHA!!!!!!

>

I guess you would not need a car to drive the 30' to the mailbox <G>

I once saw a guy drive his car to the end of the block, then do a U

turn so he would not have to drive to a bar that was almost across the

street from his

house. The bar was probably 30 feet from the sidewalk in front of his house.

A friend of mine who I was visiting pointed it out to me that his neigbor

made that drive

almost every day!

> Gary S. Terhune

> MS-MVP Shell/User