Major virus, spyware, adware troubles 4

[lucidity23]

Ok...I have a few issues that I am having on a friend's PC.

They just bought this new compaq about a month ago. It seems they did not run any of the spyware software I suggested, and maybe have not run a Norton Anti-Virus scan either.

I get their and was able to get SpyBot to run, it found about 150 problems. I need to get the update for spybot still, will explain that in a sec.

When I left their place because I eneded to figure the problems out and if they are even fixable, here is the status of the machine. It takes forever to startup, will not shut down, and I cannot see the taskbar. Not being to see the taskbar on XP stinks :-(

I was able to make a shortcut so it would read a CD in the drive, not sure about running something from the CD though. However it is my hope I can get it to read from the CD, otherwise the system may be a lost cause. IE and Netscape will not run at all. They do not even start. When I hit Cntrl-Alt-Del and look at all the prcoesses running, the list is huge, a LOT more than wha tit should be.

Here are my thoughts right now, and my questions. First, does this system sound salvagable at all? Does it sound possible to be able to clean it up so it is workable, or should I just wipe and restore? I want to avoid a restore if possible, I would rather get this working.

My current plan is to make a CD with the Spybot update, AdWar and the latest update, and Norton's latest update. I am hoping if I can get them to run I can maybe clean things up.

One big question I have is what processes SHOULD be running on XP? That way I know what I can turn off, delete, etc.

Does anyone have any other advice, tips, suggestions, comments, prayers, or even a HAMMER at this point.

I have never seen a system SOOOOO screwed up from all this crap. It is the result of what happens when u do not run ANY sor tof scans or protection. *sighs*


- carpe diem -

 

[DTracy]

Have you tried to use safe mode/administrator and restore to a point before all this happened?



Best Regards,
David Tracy

 

[rasETL]

DTracy has an excellent alternative.

When the PC starts booting up, hit the F8 key, and select / enter Safe Mode.

You can then run Adaware, Spybot, AV Software, and whatever under the "quiet" of safe Mode.

 

[lucidity23]

Oh...I knew theree was something I forgot to ask..

I was not sure how to get into safe mode on WinXP systems. I was hitting Shift+F% or Control+F5...

hehe

I will try that when I boot it up next time...

any other thoughts?

My main problem is I am not as familiar with XP, so I just want to make sure I am not missing anything else.


- carpe diem -

 

[linney]

This may be helpful in deciding between good and bad programs.

http://www.sysinfo.org/startupinfo.html

While at the above site click on the Exe hyperlink in this paragraph from the site and download Start_ups exe list which will give you a searchable list of most of the startup programs and whether they are good or bad.

"If you prefer the old format you can still download the HTML ZIP and EXE formats which consist of a single table arranged alphabetically and are recommended for regular visitors anyway. Also available is an EXCEL ZIP version which contains no hyperlinks."

Removing adware & spyware
faq608-4650

An introduction to the analysis of a Hi-jack This log file
faq760-4897

 

[lucidity23]

Thanks a ton.

I will check out all the info when I get home.


- carpe diem -

 

[billy71]

Another thing. Shut off System restore before all this.

 

[micker377]

Don't give up! Last week I had a system with NO protection. 680 instances of spyware and 12 viruii. Took awhile. Fortunatly, I had a copy of AdAware on my system I installed on his (transferred by thumb drive - I wasn't about to connect my system in ANY way!). This got rid of enough baddies that I could get online to do an online scan. (Trend Micro)

 

[starzwell]

shannanl" pegged it right on the money I do the same many times a day.

To add to that: look in the add/delete programs in the control pannel and uninstall anything that looks out of place. This includes things that refer to animals (LOL) like the cash back or bargin dog, the purple money, or anything like that. Once uninstalled reboot and run the adaware again.

Make sure Windows updates are done

And put some sort of pop-up blocker on so that your friends are less likely to click on something and start this all over again. My fav right now is the google task bar, it's super easy to install and it's not a pain in the but to surf the net with.

Steph

Practice random acts of kindness...Do nice things for no good reason.

 

[J741]

I deal with dozens of computers every day which customers only bring to me when they simply don't function any more. It amazes me just how many people have no concept about the security of their own computers. 80 to 90% of all computers which I service typically contain more than 5 different virii, typically infecting between 300 and 1000 different files in various locations on the computer. Also on average, AdAware will detect and remove between 800 and 1400 components of known malware. Once clean, I usually find that most customer's computer have never installed ANY Microsoft Windows Updates. To top it all off, very few have any form of firewall (software or hardware), and less than half have current, up-to-date, anti-virus protection.

The worst part about all of this is that most people just don't care until it's too late. They let their machines add uneccessary interent traffic, they waste my time by not taking common, basic precautions, and they generally won't listen to simple maintenance advice.

Anyways, just letting my frustration be known.

- James.

My memory is not as good as it should be, and neither is my memory.

I have forgotten more than I can remember

 

[lucidity23]

I hear ya...

I told them what to do beforehand to avoid this. Now I have to clean it up...

they only get 1 of these then it is out of my hands...

I will let u all know how this turns out once I get over there and fix it...

I shall overcome the evil virii!!! Death to the virii!!

sorry...on a sugar high right now


- carpe diem -

 

[lucidity23]

Ok.

I was able to get close to 1500 spyware and adware crap things off the PC. It starteds up, won't shut down properly. Takes forever, and lags slighhtly. But it is a little better than before.

The problem now is, Norton's will not run. I can also not get it to install a new copy of it. I am wondering if there is a way I can run a scan from a CD or install some other sort of free software just to clean this PC up enough so I can get norton's to run.

Any ideas?

Thanks


- carpe diem -

 

[BlackS2]

It sounds to me like you are not getting any where fast with this one, did you not try / think about the system restore at all?

Failing that I would personally format it so you know there is no nastys left and start a fresh.

Cheers

 

[lucidity23]

They were given no CD's with this new system, which I think is absolute CRAP!!!

That is one reason I build my own PC's.

I tried to activate System Restore, it would not work.

A format will be done next weekend, but it will mean they lose XP and I have to install Windows 2000 on the machine. Not the worst thing in the world, I like Win2k, but it stinks that they will lose XP.

The situation looks grim... :-(


- carpe diem -

 

[TIGREBLANCO]

If they bought the system brand new it does have a restore option, you just have to go to HP web site and find how to activate it. Usually Compact creates an extra partition on the hard drive from where it dumps all the stuff necessary to go back to a factory configuration.
Save yourself some time and agraviation, back up any files they need to save, get back the system to a factory configuration and dump those files back where they belong.

 

[linney]

Wiping Out Special "Recovery" Partitions, Pt. 1

http://www.langa.com/newsletters/2003/2003-02-06.htm

Hidden Partitions Interfere With Maintenance

http://www.langa.com/newsletters/2004/2004-03-01.htm#9

Manuals supplied with the new computer should have instructions such as a "Getting Started" section and details of how to use any recovery features. If the recovery CD was not created at "day 1" you may have to contact your manufacturer and supply the machine details from which they should be able to supply a recovery CD.

Have you tried this for Norton?

http://service4.symantec.com/SUPPORT/nsw.nsf/docid/2001101612274407

http://service1.symantec.com/SUPPORT/nsw.nsf/docid/2001100212100807