Like I mentioned yesterday in another post......On '98 (and XP) you can't just go and delete files off a PC, especially DLL files. You could really screw up a system by doing that. On XP, some you CAN delete and XP just puts them back where they were from the DLL cache folder.
There may be nothing wrong with the file, it could be the app that's trying to access it that has the problem. If you suspect a DLL file (or any Windows file) is bad, you should run the SFC and see if that helps. If it doesn't, you need to try and find the file from a DLL library type website (if it's a .dll file) and be sure the versions are the same. So, what did the properties say about the file, what's it for? Should be under the "Version" tab. "Nic Tech Networks" sounds like a file for your NIC, do you use one? Did you run scans by all the anti-SpyWare programs and get scanned by the security websites? For starters, try http://www.kaspersky.com/scanforvirus . When was the file created? Search for other files on your HD created on that same day and see if you can narrow down its origin. Although it could be a malware file, you can't always go by what these people post at forums or message boards because usually its speculation, and not always accurate at that. I've seen some erroneously claim that valid critical Windows system files are spyware. Only use those hits as guidelines or starting points, and in the case where there is only one hit, it's going to take more personal investigation on your own to determine what the file is for, if it's needed, if it's malware, etc. -Clint God Bless Clint Hamilton, Owner http://OrpheusComputing.com ) ----- Original Message ----- From: "Roger Carnell" <[EMAIL PROTECTED]> Thanks for the replies all ! I might be getting somewhere....where that is??? I'm not sure. Here's what i've found. I searched the HD for the file as Clint suggested and found it. It's in C:\Windows\System. Big surprise, huh. The properties say it's a read only, hidden file.While looking around, i found 10 other files just like it that have the 2nd letter changed to something else I.E. W*OCK32.DLL The 2nd letter is always lower case and the rest capitals. There all around 305KB and are an Application Extension. Also under properties, there is a tab called "Digital Signatures" and the name is "Nic Tech Networks Inc." Don't know if that means anything to you people or not. I did the search on google for WkOCK32.DLL and only got 1 hit also. I went to that hit and it was "Computing.Net". I scrolled down into the post that was there and a reply had some of these filenames in it. Heres a sample: Now this is the AdAware Log NUL=c:\windows\downloaded program files\download.inf NUL=c:\windows\system\nttapi.dll NUL=c:\windows\system\dzndi.dll NUL=c:\windows\system\nfnds.dll NUL=c:\windows\system\mttcp.dll NUL=c:\windows\system\dkcndi.dll NUL=c:\windows\system\imsetup.dll NUL=c:\windows\system\ncswan16.dll NUL=c:\windows\system\icfrared.dll NUL=c:\windows\system\nxswan16.dll NUL=c:\windows\system\wlock32.dll NUL=c:\windows\system\nqswan16.dll NUL=c:\windows\system\izfrared.dll NUL=c:\windows\system\nvswan16.dll NUL=c:\windows\system\wqock32.dll NUL=c:\windows\system\iyfrared.dll NUL=c:\windows\system\wkock32.dll Thats just a sample, there are many more and most of the W*OCK32.DLL files are there that are on my system. Again, not sure what this is telling me but I might think about deleting all of these (I'll make a backup first) and see what happens. Obviously Explorer has a problem with them. I ran Nic Tech Networks Inc on google and it appears its some sort of Spyware. Some other people have had problems with "them" also. thanks again for your replies, Roger C. ----- Original Message ----- From: "Support-OrpheusComputing.com" I only found one result for WKOCK32.DLL in a search and it didn't give any info. Since "s" and "k" are not close by on a keyboard, it probably wasn't a typo at the hit and the file may really exist. Did you search the HD for the file, and right click it and check out the info on it? I couldn't agree more with what Ben said. Get what you can off the HD and start over. That's much quicker. There's no telling what those guys put on that PC, or allowed to get on it. You may try just reinstalling Windows, but before you do that you'd have to run all the anti-malware programs and all the online scanners from AV software companies to be sure it was clean. -Clint -----Original Message----- Hello, My son-in-law's (Ben's) computer is bringing up an error message upon boot-up that I'm looking for help with. First, a bit of background. The machine is a Pent. III ......550mhz that came from Gateway. It has Win 98, 1st ed. installed. Ben has been letting his buddies use the machine for awhile. It seems downloading everything is their hobby. In short, according to them, they thought the machine was corrupted with spyware and started deleting it. Evidently they deleted too much of something and they've lost internet access, the machine will also lock up periodicly. I get it now after its no use to them to try to clean up the mess. It will boot up normally and go to the desktop and show the icons. Some of the programs are still active, MS suite, Norton, Nero, open and appear to work. The error box in the middle of the screen has "Explorer" in the title bar. The message is "This program has performed an illegal operation and will be shut down." The details of the message are as follows: EXPLORER caused an invalid page fault in module WKOCK32.DLL at 0177:10017d00. Registers: EAX=01427c44 CS=0177 EIP=10017d00 EFLGS=00010246 EBX=00000000 SS=017f ESP=0141f82c EBP=01427c78 ECX=01427c44 DS=017f ESI=00000003 FS=253f EDX=006b6e6c ES=017f EDI=00000000 GS=0000 Bytes at CS:EIP: 8b 02 3a 01 75 2e 0a c0 74 26 3a 61 01 75 25 0a Stack dump: 1000a7ae 006b6e6c 01427c44 bff92be9 00000090 00000000 0000000c 00000008 00000003 00000000 d82be2b0 11d05764 c0006ea9 a205d74f 001c0022 0000010a I can move the box out of the way to access some of the apps. If i close the error box, all of the icons and toolbars disappear and i have to use ctrl,alt,del to shut down. The recycle bin is empty. System File Checker,Dr. Watson, and Registry Checker found nothing. I tried to shut down and restart in MS-DOS mode to run scanreg /restore, but it won't do that. I used a boot up floppy to get the the DOS prompt and tried to run scanreg /restore from that but is just says bad command or file name. There are back up registry files in the sysbackup folder. I'm not sure thats even where the problem would be but was going to try it. I ran the Internet Explorer Repair Tool and it says to reinstall IE 6 because of a wrong version number. Originally this machine had IE 5 and was updated to IE 6 through a download. Might be tough to reinstall without internet access. Its probably a Windows system file or files that are deleted. Is there any way i can trace what they might have deleted (i.e. log file) or something so i can try to reinstall it? any help appreciated, Thanks, Roger Carnell ============= PCWorks Mailing List ================= Don't see your post? Check our posting guidelines & make sure you've followed proper posting procedures, http://pcworkers.com/rules.htm Contact list owner <[EMAIL PROTECTED]> Unsubscribing and other changes: http://pcworkers.com =====================================================
