chiefy

[chiefy]

computer beginner need help

[Guest Wolfeymole]

Hello Chiefy

 

Welcome to FPCH

 

Well it might be an idea to let us know what help you require please. :p

[chiefy]

cannot access msn or other programs ,cannot do through restore either

[Goku]

Hello and Welcome to FPCH Chiefy. :)

 

No offense meant but please do not start multiple threads concerning the same problem as people will tend to ignore them rather than attend to your problem immediately.

 

Also, please post a detailed description of what problems you face.

 

-- Goku

[RandyL]

Hi chiefy;

We are going to need a whole lot more information here. Can you please tell us exactly everything you know about this issue.

 

What programs don't work?

 

What do you mean by "I can't access msn?

 

Does anything work?

 

When did this problem start and did you install anything prior?

 

Are there any errors and if so what are the errors.

 

We really need to know more to help.

[caskin]

Hi I belive I can help with Chiefys problem as it was myself who recommended they contact the forum.

 

User system is Win XP home they have four users on the PC but I have isolated adminstrator.

 

For last seven days they have been unable to activate any programme including system restore.

 

They are also unable to activate system restore in safe mode.

 

I belive they have a registry problem as constant error message received is "common one" as follows

 

"THis fie does not have a programme for performing this action create an association on the folder option"

 

Hope this helps as I do not like advising on reg repairs.....they are complete novices so be gentle

[Guest Wolfeymole]

Have you tried Last Known Good Configuration Caskin mate?

[RandyL]

With multiple users and the symptons you describe, coupled with the fact that safe mode can be entered but certan functions don't even work there, I suspect a serious infestation.

 

First let me ask if any registry programs were used. If so then this may be a lost cause short of a reinstall.

 

Secondly can you access the internet via safe mode with networking?

 

Thirdly what security is installed as in Antivirus etc?

 

To be honest this does not look good at this point.

[Goku]

There is a very high chance that the PC is heavily infected. The symptoms you state correspond to that shown by a computer with malware infection and add to that the fact that all users have Administrator privileges makes me suspect that it is a definitely a Malware infestation.

 

In that case, please guide Chiefy through our standard Malware removal procedure and see if it helps resolve her problem or not. Let us know how it goes though.

 

Good Luck.

 

-- Goku

[caskin]

Good point regarding last good configuration had forgotten that one.

 

At present all directions are being given to Chiefy by phone,I did attempt to get malware etc loaded and activtaed but she wasnt able to connect to correct site and complete download etc solo....so I guess a house visit may be the initial answer.

 

I will attempt last good config.

 

Followed by normal Forum malwar practice.......

 

Yes can connect to internet internet in Safe Mode.

 

At this point have unable to establish level of security (althoug I have requested it)but I belive Chiefy is uncertain so again a house vist will reveal all........I hope???

 

leave it with me as what you have said so far I can cope with,if it all fails to stabilize then like MacArthur I could be back....Cheers Guys.

[Seth]

If the malware procedure doesn't help, I'd opt for a repair install.

[caskin]

Seth run that routine past me please....its been nagging at me that the procedure is available but for the lfe of me could not remember how?

[Seth]

You'll need an XP cd, and usually the one that may have came with the computer. After the repair, you'll also need to install all MS updates:

 

Perform a Repair Installation

[Guest Wolfeymole]

Which one Caskin the malware thing or the repair install?

 

If Install check this.

 

How to Perform a Windows XP Repair Install

[BeeCeeBee]

Caskin based solely on the language of the thread I think this is what you are looking for. If not no harm done.

 

Your computer could be infected with Malware.

 

• Malware is software designed to infiltrate or damage a computer system without the owner's informed consent.
  It is a combination of the words malicious and software.
  The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.
  

• Required Cleanup Steps
  1. Disable the Spybot Search & Destroy TEA TIMER if you use it and if it is enabled
     
  2. Run a Temporary file and cache cleaner (ATF)
     
  3. Run 2 Anti-Malware scanners (Listed Below)
     
  4. Run an Online Anti-Virus / Anti-Malware Scanner (Listed Below)
     
  5. Clear out old System Restore points
     
  6. If continued Malware type activity is present you may be asked to post a TrendMicro™ HijackThis™ Log file, do not do so unless requested.
     

The reason to run multiple scanners is to ensure that no single scanner is missing something.

The time it takes will vary depending on your system and your internet connection speed.

Typically the SUPERAntiSpyware and Malwarebytes scanners will take between 10 to 90 minutes.

The ESET online scan should take between 1 to 3 hours.

In most cases, these scans will suffice to clean and disinfect your computer.

Heavily infected systems or slower PCs can take much longer to scan and clean.

 

For best results print the following instructions and bookmark this Web page

To keep this guide printer-friendly, use your cursor to highlight the contents below.

From your browser select File - Print and in the printer dialog box under "Print range"

click the

Selection

choice to print out these instructions for removal of malware.

 

 

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/printer-selection.gif

 

____________________________________________

STEP 1

• Disable Spybot Search & Destroys' TEA TIMER: (if installed, if not go to Step 2)
  1. Run Spybot-S&D in Advanced Mode.
     
     
  2. If it is not already set to do this Go to the Mode menu select "Advanced Mode"
     
     
  3. On the left hand side, Click on Tools
     
     
  4. Then click on the Resident Icon in the List
     
     
  5. Uncheck "Resident TeaTimer" and OK any prompts.
     
     
  6. Restart your computer.
     
     

__________________________________________________

STEP 2

• Follow these instructions carefully.
  
  
• Download ATF-Cleaner from
  Snapfiles.com
  to remove un-needed temporary files from your computer that may contain malware.
  
  
• You can also download it from
  Majorgeeks.com
  
  
• When you run ATF-Cleaner, check the items as shown below for Main.
  
  
• For FireFox, be sure to click on the FireFox tab on top and check the items as shown below for FireFox
  
  
• NOTE:
  If you don't have FireFox or Opera installed then they will be grayed out and can be ignored
  
  
• Then click on "Empty Selected".
  
  

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner01.gif

.

http://i306.photobucket.com/albums/nn266/FPCH/Malware%20Guide/atf-cleaner02.gif

__________________________________________________

STEP 3

• Install and run the free version (not the Professional version) of SUPERAntiSpyware from
  SUPERAntiSpyware.com
  
  
  • Accept any prompts to allow SUPERAntiSpyware to install the latest rules and infection definition files.
    
    
  • You do not have to send them your e-mail address, just click next.
    
    
  • You can leave the automated check for updates on.
    
    
  • You can uncheck "Send a diagnostic report to research center" if you don't want to send the information.
    
    
  • DO NOT
    allow SUPERAntiSpyware to protect your Home Page settings.
    
    
  • On the
    Top Left
    select the
    Scan your computer
    button.
    
    
  • Make sure there is a CHECK MARK on all
    Fixed Drives
    .
    
    
  • Click "Perform a Complete Scan". Click "Next" to Repair issues found and reboot the computer when prompted to do so.
    
    

__________________________________________________

STEP 4

• Install and run
  Malwarebytes' Anti-Malware
  from
  Malwarebytes - (direct download)
  
  
  • Accept all defaults for the installer
    
    
  • Allow the program to update the definitions
    
    
  • Click on the
    Quick Scan
    and click Next.
    
    
  • If any items are found allow it to clean them and then Reboot your computer.
    
    

__________________________________________________

STEP 5

• Run an online scan with ESET from
  Free Virus Scan: Use ESET's Online Antivirus Scanner
  
  
  • You
    must
    use Internet Explorer for this online scan. FireFox, Opera, etc will not work for this scan.
    
    
  • If your computer is running Window's Vista, then you
    must first
    start Internet Explorer as an Administrator. To do so, right-click on the
    Internet Explorer
    icon in the Start Menu and select "
    Run as administrator
    " from the popup context menu.
    
    
  • Accept the terms and click "Start".
    
    
  • Once the scanner is ready, check "Remove found threats" AND "Scan unwanted applications".
    
    
  • Click "Start" to begin the scan.
    
    
  • When completed restart your computer
    
    

__________________________________________________

Make sure your internet firewall security is enabled, and then please return to

Extreme Tech Support - Free PC Help

and tell us how the computer seems to be operating.

At that time, you will receive instructions to assist you in removing malicious programs from your Add/Remove program list if warranted.

 

If required this is the download link for

TrendMicro™ HijackThis™

Unless instructed to by the Technician helping you then do not download this tool.

 

Once you and the Technician agree that your system appears to be clean then you should delete all your System Restore points and recreate a new one.

Please follow the instructions here

How to turn off and turn on System Restore in Windows XP

How to turn off and turn on System Restore in Windows Vista

 

Edited November 10, 2008 by BeeCeeBee