Rstrui.exe not working; several DLL's missing, nothing lau..

[eb09]

Hello, last night I found my laptop computer slowing down while playing
a game. I opened up the Task Manager to see "y.exy" running then it
disappeared. Shortly thereafter I was greeted by a popup from Opera
advertising an entertainment website. The computer was issued by a
home-schooling company and it has a 3-CD installation package that has
XP and other things used by the school for students.

I tried several anti-virus/spyware programs - first McAfee, then Avira,
Spybot, then Malwarebytes Anti-Malware. They all detected spyware,
specifically "Agent" and several others. I proceeded to remove them with
a Malwarebytes scan and when I rebooted, several dll's were missing,
Windows said they were not valid image files. It seems they are dll's
written with names in a foreign language (i am not fluent in windows
files so I am unsure if these are natural). Nothing will launch,
including System Restore on safe mode prompt and in normal mode; the
window appears but is blank. I do not know what to do; will anyone help?


--
EB09
------------------------------------------------------------------------
EB09's Profile: http://forums.techarena.in/members/136544.htm
View this thread: http://forums.techarena.in/windows-xp-s ... 248449.htm

http://forums.techarena.in

[daave]

EB09 wrote:
> Hello, last night I found my laptop computer slowing down while
> playing a game. I opened up the Task Manager to see "y.exy" running
> then it disappeared. Shortly thereafter I was greeted by a popup from
> Opera advertising an entertainment website. The computer was issued
> by a home-schooling company and it has a 3-CD installation package
> that has XP and other things used by the school for students.

Are you one of the students?

> I tried several anti-virus/spyware programs - first McAfee, then
> Avira, Spybot, then Malwarebytes Anti-Malware. They all detected
> spyware, specifically "Agent" and several others. I proceeded to
> remove them with a Malwarebytes scan and when I rebooted, several
> dll's were missing, Windows said they were not valid image files. It
> seems they are dll's written with names in a foreign language (i am
> not fluent in windows files so I am unsure if these are natural).
> Nothing will launch, including System Restore on safe mode prompt and
> in normal mode; the window appears but is blank. I do not know what
> to do; will anyone help?

If I were you, I'd perform a clean install.

[elmo]

EB09 wrote:
> Hello, last night I found my laptop computer slowing down while playing
> a game. I opened up the Task Manager to see "y.exy" running then it
> disappeared. Shortly thereafter I was greeted by a popup from Opera
> advertising an entertainment website. The computer was issued by a
> home-schooling company and it has a 3-CD installation package that has
> XP and other things used by the school for students.
>
> I tried several anti-virus/spyware programs - first McAfee, then Avira,
> Spybot, then Malwarebytes Anti-Malware. They all detected spyware,
> specifically "Agent" and several others. I proceeded to remove them with
> a Malwarebytes scan and when I rebooted, several dll's were missing,
> Windows said they were not valid image files. It seems they are dll's
> written with names in a foreign language (I am not fluent in Windows
> files so I am unsure if these are natural). Nothing will launch,
> including System Restore on safe mode prompt and in normal mode; the
> window appears but is blank. I do not know what to do; will anyone help?

Burn BitDefender, or another program listed at the link below, to a CD
(using a working machine) and test the infected machine with it.
BitDefender also has a Rootkit checker on the Linux Desktop; run it if
you think that's the problem:

http://www.techmixer.com/free-bootable- ... load-list/

Download the executable rather than the .iso image, if one is
available.. it prompts you to insert a CD and burns the file, no problem.

Then run these:

Malwarebytes

[jose]

On Sep 18, 5:58

[jose]

On Sep 27, 12:42

[jose]

On Sep 27, 11:36