Me problem

[khazars]

Hi, my sisters computer will boot up, but she has no icons on the toolbar and the mouse is frozen. also, she has a graphics display problem , that is the colours are all wrong and grey. I asked her to check device manager gor errors, but there are none. I got her to run defrag, clean disk adn AVG found two virues which it deleted. The error she got when I tried msconfig and selective stratup, turing ogf sys,ini, win.ini etc was,

error:OE:0028:c152d968,

this happened when she tried switching sys.ini back on. Basically, the computer will boot, with V&d loaded and win.ini selected, without safe mode, with sys.ini and group items selected it freezes and need to reboot to safe mode.

Does anyone have any ideas, I think it might be the graphics card, she's had th is machine for 2 and a half years without reformatting. It's a 1 gig processor, 256 Ram , 40 gig hD, and a hewlett packard machine.

thx in advance khaz

 

[khazars]

oops this was the full error:

FILT95(01)+000030F8
error:OE:0028:c152d968,

 

[wolluf]

Try again.

Any history on this (eg, when was machine working ok, what happened between then and now, any other problems?)

Is system restore enabled? Can she restore to point before problem?

Likely best action will be to backup, wipe the drive and clean install ME.

 

[khazars]

cheers wolluf, she informed me that she had Various viruses, I got her to boot to safemode and run AVG, which was outdated, she aint got a clue on computer management, and her 2 teenage kids run riot on it, i.e msn chat, yahoo chat and all the rest.

She told me she had multiple entries of MSN and MSN messenger+ I told her to delete the lot. Because of the virus issues, I told her to turn off system restore to stop reinfection, catch 22 scenario, I guess I should have told her to try system restore first.

Her problems started 2 nights ago, the kids were surfing, she booted up and all the probs I discussed above were there. she also has no connection to the net.

I think your right, I suggested she just re-install using the HP restore disc, cos I think her computer has too much crap on it, like that was the first time in nearly a year they ran disc-defrag lol.

thx wolluf

 

[xkjdhdg]

FILT95 is part of ZONEALARM. The virus corrupted part of Zonealarm. Go to start run type msconfig, select the startup tab. uncheck Zonealarm do not let it run at startup. Then uncheck anything thing else that is not needed for the system. Keep AVG running. See if the system will come up ok. Reinstall Zonealarm.

 

[khazars]

Ihm, she had zonealarm, but i took it off and put Agnitum outpost on instead. I know there is probs uninstalling ZA, with it leaving instances of itself still on the compter, such as the Vsdata95.VXD but I have never heard of FILT95, is it safe to delete as I have already taken it off like 2 years ago?

Other probs are now that agnitum outpost firewall reports Norton anti virus has been removed, but instances of it are running in memory. i've got my sis to delete all instances of NAV using the search folder. She removed NAV from add=remove, but it said it couldn't uninstall but I guess it uninstalled most of itself, NAV is crap!

Her computer is nearly ok now, but still the grey background, her mouse is ok, can connect to the internet apart fom this Nav error from the firewall, i'm gonna get her to update AVG, rescan, then get adaware, spybot, spywareblaster and spywareguard, plus cwshredder and hijack this.

thx mrfixit! khaz

 

[khazars]

Mr fixit, just did a search, no FILT95, but I just noticed on google in a search that Agnitum's outpost firewall writes a file driver called FILT95.VXD to the registry, this is the key.

What does Outpost write to the registry?
Windows 9x

run_helper
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Driver
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VxD\FILT95
GUI

I take then it's outpost that's become corrupted and needs to be uninstalled?

cheers khaz

 

[xkjdhdg]

It sounds like the system it trying to start the VXD for FLTR95. Go to start, run, type msconfig, check the VXD tab, uncheck the any NAV and ZA VXDs. Edit the registry and remove the FLTR95 refers. The FLTR95 is a ZONEALARM file.