Windows Forum

Ask something
Discussion Locked

Error Cannot find Setup.exe

0 helpful
3 replies

by ascnsult

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

A client's NT 4.0 Workstation SP5 was recently infected with vbs.loveletter and w32/magistr.a viruses. We used an AVERT removal tool in DOS to remove the viruses and clean/repair the infected files. We also ran the Sircam removal tool to check forviruses, but it did not find the Sircam virus.

Now when we try to install software, an error message states "Cannot find \:setup.exe. Windows need this file to continue". The setup.exe file exists on the installation disk. Even if we double-click the setup file, we still get the same message. I have copied the installation contents of a CD-ROM to the hard drive to install, but still get the same message. This has occurred wwhen trying to install Norton AntiVirus 2001 and Seagate Backup Exec. We did successfully install McAfee VirusScan 6.0.

I have checked the Event Viewer for errors, but only have a Messenger Error that relates to MSN Messenger Service. I reapplied SP5 after cleaning the machine of viruses. Per Symantec's instructions, I have downloaded and installed the MS Windows Installer Upgrade 1.2 update prior to the McAfee VirusScan 6.0 installation.

Thanks for pointers to repair this problem.

3 replies

by rorycarlin

Part of Sircam's payload changes a registry entry, namely : HKEY_CLASSES_ROOT\exefile\shell\open\command.

The default or noname value in this key should read:

"%1" %*

Your machine's value may contain a reference to the sircam executable. Simply change the value back to the above mentioned default value.

If you can't run regedt32 or regedit because of the infection, then try running regedt32 on another NT machine on your network and connecting remotely to the infected machine to make the registry changes.

Hope this helps.

by ascnsult

Thanks--it was a good place to start! The client was lucky to not have the SirCam virus although the w32/magistr.a seems to have been extremely detrimental. I've ran the SirCam removal tool three times and didn't find it. I've also ran the magistr removal tool plus ran several online scans--the machine appears to be clean now. I checked the value for this registry entry and it was unchanged. However, I also spent several hours on the phone with NT Tech Support and they have been unableto fix the error either. Thanks for your input!

This discussion is closed to new replies.