Error Message at Logon... Cannot Find the file rock.exe... 3

[ad73]

Hello:

I am running Windows NT4.0 Terminal Server Edition with SP 6. WE have in the last 2 days been receiving the following error messages for ALL USERS including administrators, when they login to their sessions.

"Cannot find the file "rock.exe" or one of its components. Make sure the path and filename are correct and that all required libraries are available."

Once the user, OK's this error message, they can proceed in their Terminal Server Session.

I have not installed any new programs (that I know of) so I am not sure why this is happening. I also cannot find any "rock.exe" file in my system or any reference to it with a basic file search. Does anyone have any suggestions. It would be appreciated.

Thank you.

ad73

 

[EBGreen]

Is your anti-virus up to date?

http://www.symantec.com/avcenter/venc/data/vbs.slip@mm.html

[red]"... isn't sanity really just a one trick pony anyway?! I mean, all you get is one trick, rational thinking, but when you are good and crazy, oooh, oooh, oooh, the sky is the limit!" - The Tick[/red]

 

[ad73]

Yes.

I have the latest Virus Definitions and engines running for Mcafee. I have also run the antivirus program (twice) and run another stand-alone app from Mcafee called Stinger. Both show that there are no files that there is not virus, worm, or trojan that registers.

ad73

 

[BOKA]

It is possible, that a virus tried to install, your antivirus program actually caught and cleaned it, but registry entry that supposed to launch the infected file stayed. Do a search in registry for this file.

Good luck.

 

[ronlow]

I just ran into "rock.exe" Friday (WinNT 4 w/SP6a). Trend Micro later flagged a virus on my PC. The files were "C:\WINNT\System32\rock.exe", "C:\ane.exe", and a file in the Internet cache "~\Temporary Internet Files\Content.IE5\UXO72DYX\e[1].EXE". "rock.exe" also appears in the registry.

 

[ad73]

Thanks ROnlow:

All of you have been most helpful. Ronlow - I think I have the same problem as you. What steps did you take to remove the problem, please.


Thanks again in advance
ad73

 

[AndrewTait]

Please see the following link:

http://securityresponse.symantec.com/avcenter/venc/data/vbs.slip@mm.html

Details what this does, and how to get rid of it!

So often times it happens that we live our lives in chains
And we never even know we have the key

 

[EBGreen]

That link looks familiar...

[red]"... isn't sanity really just a one trick pony anyway?! I mean, all you get is one trick, rational thinking, but when you are good and crazy, oooh, oooh, oooh, the sky is the limit!" - The Tick[/red]

 

[AndrewTait]

EBGreen,

Serves me right for only scanning the thread, and not reading previously posted links.

Sorry, no offence intended.

Regards,

Andy

So often times it happens that we live our lives in chains
And we never even know we have the key

 

[EBGreen]

No offense taken. Sometimes the route taken isn't as important as that you wind up at the right place.

[red]"... isn't sanity really just a one trick pony anyway?! I mean, all you get is one trick, rational thinking, but when you are good and crazy, oooh, oooh, oooh, the sky is the limit!" - The Tick[/red]