Office(R)Tool Project

Discussion in 'Microsoft Office' started by Dark Dinosaur, Nov 6, 2021.

?

Change brand name or not ?

Poll closed Dec 26, 2021.
  1. No, keep it like that

    148 vote(s)
    75.1%
  2. Yes, officeRTool need fresh name

    49 vote(s)
    24.9%
  1. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    OfficeRTool\OfficeFixes
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    #1142 Dark Dinosaur, Nov 9, 2022
    Last edited: Nov 9, 2022
    (OP)
    I think I need to rename this s**ti name to Files / Add-ins ?
    it's way better than OfficeFixes
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    latest setup.exe release still does problems.

    upload_2022-11-9_20-47-10.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    That's not the error I'm having and I don't think it has to do with setup.exe but with OfficeRTool.
     
  5. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    same setup.exe (previous release) with same configuration

    upload_2022-11-9_20-50-0.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    #1146 Windows 10 User, Nov 9, 2022
    Last edited: Nov 23, 2022
    After all, I think it has to do with setup.exe. Before replacing files, I have the attached image. I did another clean install and didn't install any program. Also, my Settings.ini file is empty.

    EDIT: It looks like the Settings.ini file is empty because the tool is inside a folder whose name has an acute accent. If I delete the file, remove the acute accent and run OfficeRTool, the Settings.ini file is recreated and it's not empty.
     

    Attached Files:

  7. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    so the new setup.exe version work ? or have the same problem ?
    I can't replace it anyway, because I will have to ditch the xml method
    and have lot of headache doing so …. :(
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    I'll try. What's weird is that I have the detected infected file (symsrv.dll in C:\Program Files\Common Files\System) from previous installs even after doing another clean install and before installing any program (including the supposedly infected installer which I no longer have).
     
  9. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    #1149 Windows 10 User, Nov 9, 2022
    Last edited: Dec 3, 2022
    Malwarebytes says I'm infected again and I didn't install a single program. Weird.
     
  10. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    first thing to do, remove Malwarebytes, un-install completely
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    #1151 Windows 10 User, Nov 9, 2022
    Last edited: Nov 9, 2022
    Already did. It can't remove this virus and it looks like it survives clean installs too.
     
  12. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    #1152 Windows 10 User, Nov 9, 2022
    Last edited: Nov 11, 2022
    I redownloaded it and it worked without replacing the setup.exe. I'm sure it has to do with this infection.
     
  13. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    I start thinking you don't have any virus
    maybe you have some stupid ass a/v software
    that block the file from working correctly
    it more reasonable than virus the survive nuclear war
    check you software you have currently installed,
    share it here, maybe one of them cause your problems
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    #1154 Windows 10 User, Nov 9, 2022
    Last edited: Nov 11, 2022
    According to what I searched, Virus.Floxif infects EXE files so it explains why OfficeRTool crashes since in spite of being a CMD file, it runs Office's setup.exe (Chrome and Edge while updating and UUP Dump's Windows 11 installer's downloader should use EXE files too, but I don't get it why they're working now when before none of them as well as OfficeRTool were working).
     
  15. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    please download autoruns, run it, in option menu, un-hide anything
    press on save button, share the file.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  16. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    like this.

    upload_2022-11-9_22-23-56.png

    upload_2022-11-9_22-24-10.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    #1157 Windows 10 User, Nov 10, 2022
    Last edited: May 12, 2023
    It looks like the virus infects the EXE files run from the external HDD and that's why I was always being reinfected after reinstalling Windows since many EXE files were infected and I was running them to install or run programs. I had to replace them and some of the them were hard to find. It looks like the virus infected VB Runtime's installer, Edge, Chrome, Malwarebytes' installer, OfficeRTool, Rufus, YUMI, UUP Dump's downloaded file, etc. It looks like the EXE files were only infected after I manually ran them.

    l had to reinstall Windows, delete every infected EXE file from my external HDD after scanning them using VirusTotal and redownload them. Some of the programs were hard to find. Anyway, I still don't get why was I only having this problem with OfficeRTool the last time and not with all programs that use EXE like OfficeRTool itself, Malwarebytes installer, Edge and Chrome, YUMI, Rufus, etc.

    EDIT: It looks like it also infected the USB flash drive where I burned the Windows 11 installer but this time it's not an EXE file but a DLL one. I formatted it, scanned the ISO with Malwarebytes just to be sure and burned it to the USB flash drive.
     
  18. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,908
    118
    60
    #1158 Windows 10 User, Nov 11, 2022
    Last edited: Nov 11, 2022
    Finally, I got rid of this nasty virus and I'm not having the 0xc0000005 error when running EXE files or programs that use/should use them (like OfficeRTool, UUP Dump's Windows 11 installer's downloader, Rufus, YUMI, Edge and Chrome).
     
  19. Dark Dinosaur

    Dark Dinosaur X Æ A-12

    Feb 2, 2011
    3,756
    5,220
    120
    @Windows 10 User
    God Bless America
    but I suggest to re-format your computer
    and make a clean backup
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  20. Felipe Andrade x86

    Felipe Andrade x86 MDL Novice

    Aug 23, 2022
    1
    0
    0
    The first link (anonfiles) is redirecting us to an executable, which is a virus