Jump to content

Recommended Posts

Posted

Hi Sara,

 

Youtube sound has gone gain about an hour ago

I think we can rule out Combofix then as it hasn't been run since you re-installed the download manager.

A silly question maybe, but you are using IE when using the download manager?

IGN Download Manager has become a requirement for downloading files through FilePlanet.com. It is based on Internet Explorer and it installs through an ActiveX-plugin, hence Internet Explorer must be installed beforehand and downloads has to be initialized through that browser

 

c:\windows\System32\wscntfy.exe ... is missing !!

Well this is definatly not on the system.

Which is quite odd as it came with SP2 and should have been in a SP backup folder.

Something has obviously removed it.

It's not as critical as it sounds though.

This service is responsible for the Windows Security Center icon on the taskbar.

This is what tells you if the AV is not up to date or the Firewall is turned off etc.

 

If you had an XP pro disc we could sort this out.

Or even if you could borrow one off someone. ( it doesn't have to be the original to pull the files off.)

The other way of removing the service packs and then reinstalling them is too long winded and open to problems, so we won't go that route.

Member of:

UNITE

  • Replies 50
  • Created
  • Last Reply

Top Posters In This Topic

Posted

Hi Sara,

 

Yes that would work, just make sure it's Win XP pro with at least SP2. (SP3 would be even better)

Then we could get the SFC run and replace any missing files etc.

Member of:

UNITE

Posted
Thanks Starbuck for all your asistance so far. If it's ok could you keep the thread open and after the software arrives I'll come back? :)
Posted

Hi Starbuck,

Just received the software. It is for Dell computers only, something the vendor forgot to point out. So I will come back again and order another from elsewhere. Youtube problem was internal youtube bug....I hope.

sara :)

Posted

Hi Sara,

 

Ok, let's try running the System File Checker (SFC) to scan all protected files to verify their versions. If SFC discovers that a critical system file has been damaged, altered or missing, it restores the correct version of the file from the cache folder.

You must be logged on as an administrator or as a member of the Administrators group to run sfc and it may ask you to insert your XP Installation CD ..so have it available.

 

Use Task Manager ... New Task... and type: sfc /scannow

or

Click Start >> Run >> and type: sfc /scannow then click OK

 

Make sure that you include a space between the c and /.

This command will initiate the Windows File Protection service to scan all protected files, verify their integrity, and replace any problem files.

 

This will be a simple check to see if the missing files can be replaced.

If not we may need to go for a reinstall.

Member of:

UNITE

Posted

Hi Starbuck,

I ran that scan twice and a window appeared with a blue bar filling, on both occasions when the box had filled the program just shut down, it gave me no feedback.

Thanks again,

sara :)

Posted

Thanks Starbuck,

Can I ask one question before I start? It looks fairly technical so I will do my best to get it right but what must I do to ensure I dont lose any files or programmes? Do I have to buy a memory stick or cds? Or does the installation either safely bypass or save data?

Posted

Hi Sara,

A repair install will only reinstall the operating system, it doesn't touch the documents folders or your other installed programs.

But you will need to run the windows update afterwards to get the updates again.

Member of:

UNITE

Posted

Hi Starbuck,

 

Made progress in assigning the CD drive and then started. Firstly it appears that there are a number of differing menus that can appear with different makes of PCs so I am not seeing exactly what the instructions are showing. I got to the point where it asked me to select the hardrive and it gave me the options:

 

1: C

2: D

Press ENTER to esc.

 

I tried using the up down arrows to select C but no joy so I typed 1but no response so I pressed ENTER and accessed the exit menu.

 

So grateful if you might advise.

Thanks,

sara :)

Posted
Firstly it appears that there are a number of differing menus that can appear with different makes of PCs so I am not seeing exactly what the instructions are showing.

What is the make and model of your system?

Member of:

UNITE

Posted
What is the make and model of your system?

Hi Starbuck,

 

MS Windows XP

Professional ed

Version 2002

SP3

 

Intel core 2 duo CPU

E8400@300GHz

3.00 GHz, 3.oo, GB

Physical Address Extension

XP is installed on C drive and Windows 7 (which I have never accessed as I prefer XP) on D drive.

Posted

Hi Sara,

 

XP is installed on C drive and Windows 7 (which I have never accessed as I prefer XP) on D drive.

Which was installed first?

I would think that probably XP, as Vista and Win7 always like to install to the C drive.

From XP it would show that XP was on the C drive and Win7 on the D.

but from Win7, it'll probably show that Win7 is on the C drive and XP on the D.

It's just a strange way that Vista and Win7 work.

 

Sorry, by Make and model i meant:

Dell

Medion

HP etc

and the model of that make.

I just wanted to check if there was any sort of problem when running a repair install on that particular make/model.

Member of:

UNITE

Posted

Hi Starbuck,

 

Hi Sara,

 

Which was installed first?

I would think that probably XP, as Vista and Win7 always like to install to the C drive.

From XP it would show that XP was on the C drive and Win7 on the D.

but from Win7, it'll probably show that Win7 is on the C drive and XP on the D.

It's just a strange way that Vista and Win7 work.

 

It came with XP pre-installed but a PC engineer who was out on a call installed Windows 7 on the free drive in the hope of getting me uptodate but it has never has never been used. So I presume XP is on C?

 

I had to 'Configure Your Computer to Boot from CD' and I assigned it to C.

 

Sorry, by Make and model I meant:

Dell

Medion

HP etc

and the model of that make.

I just wanted to check if there was any sort of problem when running a repair install on that particular make/model.

 

Now that is a difficult one to work out as I got it built to order from a company that makes gaming computers called Beast:

 

http://www.beastcomputers.co.uk/index.php

 

and all I can see is that the case is made by Hiper. If there is any way I can locate further info please advise. I no longer have the original documentation as I bought it on 09/01/09, but I cant remember any other name apart from 'Beast' being listed. I only have the purchase agreement from the loan company which lists no details.

Thanks again,

sara

Posted

Hi Starbuck,

I had a lighting strike yesterday which blew my modem and had to call out a PC engineer. He has sorted out the problems and believes a trojan caused the task manager/msconfig issues. He was unable to ascertain if the trojan is still present in some form given all the tests already run. So looks like all is well again. Thanks very much for all your help which I greatly appreciated.

sara :)

Posted

Hi Sara,

 

Glad to hear everything is ok again.

 

We should finish off the cleaning and remove the tools we used.

 

Step 1

Restart MBAM.

Click on the Quarantine tab

If there are items in quarantine.....

Make sure everything is selected and then click Delete All.

Close MBAM.

 

 

Step 2

Please uninstall ComboFix by

Clicking on Start ...then run ... and type in combofix /uninstall (don't forget there's is a gap between x and /) Then press Ok

http://img.photobucket.com/albums/v708/starbuck50/new/cfu.png

 

This action will uninstall Combofix and also perform a few cleanup measures

 

 

 

Step 3

  • Please double-click OTL to run it.
  • You should see a CleanUp! button, press that button,
     
    http://img.photobucket.com/albums/v708/starbuck50/cleanupbutton.png
     
  • This will cleanup an assortment of tools used during malware removal, plus itself

 

Note:

MBAM will not be removed

 

 

Step 4

Now you should Set a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

 

The easiest and safest way to do this is:

  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the Restore Point a name then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then go to Start > Run and type: Cleanmgr
  • Click "OK".
  • Select the drive for cleaning then click OK (usually 'C' drive)
  • Click the "More Options" Tab.
  • Click "Clean Up" in the System Restore section to remove all previous restore points except the newly created one.

 

 

To find out how you may have been infected....read this topic:

How did i get infected?

 

Not all of the following information will be applicable to you, but it's still best to read it all.

 

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

  • Use an AntiVirus Software

     

    Note*:

    Upon installation MS Security Essentials will check that your OS is a legal copy.

     

    Only install one AntiVirus program

     

    [*]Update your AntiVirus Software regularly

     

    [*]Use a 3rd party Firewall

    NOTE: If choosing Zone Alarm be aware that the free version also installs ZoneAlarm Spy Blocker. It is recommended however that you UNcheck this option.

     

    Only install one software Firewall

     

    Some 3rd party Firewalls will turn off the windows firewall when they are installed.

    It's always best to check that the Windows Firewall is turned off:

     

    How to turn off Windows Firewall:

    Start ... Control Panel ...click on 'Classic View'.

    now select Windows Firewall.

    When the Windows Firewall box opens, put a tick against .. Off (not recommended) and then click Ok

     

    [*]Scan regularly with a 'Stand Alone' Anti-Malware scanner:

    Installing another scanner that you can run once or twice a week is always beneficial.

    Something like:

    Malwarebytes Anti-Malware

    SUPERAntiSypware

    Remember to update these programs each time before running.

    You can install more than one of these if you only run them as stand alone programs.

     

    [*] Use an alternative browser:

    Some excellent alternatives to MS Internet Explorer are:

     

    Firefox

    For added security, add the NoScript extension to this browser:

    Allow active content to run only from sites you trust, and protect yourself against XSS and Clickjacking attacks

    also consider adding:

    WOT - Safe Browsing Tool

     

    Web of Trust warns you about risky sites that cheat customers, deliver malware or send spam. Millions of members of the WOT community rate sites based on their experience, giving you an extra layer of protection when browsing or searching the Web.

    Btw: you don't have to make a contribution.

     

    Opera

     

    They offer better security, more stability, and better speed.

     

    [*]Keep a backup of your registry

    Keeping a regular backup of your registry will help when something goes wrong.

    Use a program like:

    Erunt

     

    A full tutorial on how to set up and use Erunt can be found here:

    Erunt tutorial

     

    [*]Keep your system clean of temp files etc, using a 'Cleaner':

    Cleaners are programs that will help to clean out your:

    Windows temp files

    Current user temp files

    Cookies

    Temporary Internet flies

    Browser history

    Recycle bin

    Etc.......

    In other words.... all the rubbish that you accumalate over the course of your browsing and day to day usage of your pc.

    Programs like:

    TFC by OldTimer

    ATF Cleaner

     

    [*]Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly.

     

    [*]Install SpywareBlaster - SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.

     

    A tutorial on installing & using this product can be found here:

    Using and installing SpywareBlaster

     

    [*]Update all your 'Security' programs regularly - Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

 

Glad I was able to help.

 

Safe surfing. http://fc08.deviantart.net/fs71/f/2010/033/b/3/Computer_addict__by_Sinister_Starfeesh.gif

Member of:

UNITE

Posted

Hi Starbuck,

Just finished al that and my PC s rip-roaring again. Now i just have to be careful to keep it that way.

you've been really great,

Thanks very much indeed,

regards,

sara :rapture:

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...