Computer Hope

Software => Computer viruses and spyware => Topic started by: Jp on April 27, 2007, 10:01:13 AM

Title: Does this look right, Help ?
Post by: Jp on April 27, 2007, 10:01:13 AM
I submitted my HJT log to Virus Total, the feed back was this, and I do not recognize these files as being installed on my system.

Antivirus Version Update Result
AhnLab-V3 2007.4.26.0 04.27.2007  no virus found
AntiVir 7.4.0.15 04.27.2007  no virus found
Authentium 4.93.8 04.26.2007  no virus found
Avast 4.7.981.0 04.26.2007  no virus found
AVG 7.5.0.464 04.26.2007  no virus found
BitDefender 7.2 04.27.2007  no virus found
CAT-QuickHeal 9.00 04.27.2007  no virus found
ClamAV devel-20070416 04.27.2007  no virus found
DrWeb 4.33 04.27.2007  no virus found
eSafe 7.0.15.0 04.27.2007  no virus found
eTrust-Vet 30.7.3599 04.27.2007  no virus found
Ewido 4.0 04.27.2007  no virus found
FileAdvisor 1 04.27.2007  no virus found
Fortinet 2.85.0.0 04.27.2007  no virus found
F-Prot 4.3.2.48 04.26.2007  no virus found
F-Secure 6.70.13030.0 04.27.2007  no virus found
Ikarus T3.1.1.5 04.27.2007  no virus found
Kaspersky 4.0.2.24 04.27.2007  no virus found
McAfee 5018 04.26.2007  no virus found
Microsoft 1.2405 04.27.2007  no virus found
NOD32v2 2223 04.27.2007  no virus found
Norman 5.80.02 04.27.2007  no virus found
Panda 9.0.0.4 04.27.2007  no virus found
Prevx1 V2 04.27.2007  no virus found
Sophos 4.16.0 04.23.2007  no virus found
Sunbelt 2.2.907.0 04.19.2007  no virus found
Symantec 10 04.27.2007  no virus found
TheHacker 6.1.6.095 04.15.2007  no virus found
VBA32 3.11.4 04.27.2007  no virus found
VirusBuster 4.3.7:9 04.27.2007  no virus found
Webwasher-Gateway 6.0.1 04.27.2007 no virus found


Aditional Information
File size: 9767 bytes
MD5: 454e572f2707309af9ccb9fc3f357b3f
SHA1: 38ce61132083daa6cc5c826ce665341eb892e79 c

HJT log to come in following post.

Jp
Title: Re: Does this look right, HJT ?
Post by: Jp on April 27, 2007, 10:03:06 AM
Logfile of HijackThis v1.99.1
Scan saved at 9:39:46 AM, on 4/26/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\COMPAQ\Compaq Advisor\bin\compaq-rba.exe
C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe
C:\PROGRA~1\Compaq\COMPAQ~2\CPQWEB~1\WebDmi.exe
C:\PROGRA~1\Iomega\System32\ActivityDisk.exe
C:\Program Files\Prevx1\PXAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe
C:\WINDOWS\system32\fxssvc.exe
C:\PROGRA~1\Compaq\COMPAQ~2\cpqdmi.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Microsoft Works\WksSb.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\Program Files\Common Files\AOL\1143471933\ee\AOLSoftware.exe
C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
C:\PROGRA~1\Compaq\COMPAQ~2\CHKADMIN.EXE
C:\WINDOWS\System32\carpserv.exe
C:\Program Files\Compaq\Easy Access Button Support\CPQEAKSYSTEMTRAY.EXE
C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Compaq\EAKDRV\EAUSBKBD.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe
C:\Program Files\Iomega\AutoDisk\AD2KClient.exe
C:\PROGRA~1\RINGCE~1\RINGCE~1\RCIMAP.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\America Online 9.0\waol.exe
C:\Program Files\America Online 9.0\shellmon.exe
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\helpctr.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe
C:\Documents and Settings\Joe Poole\Desktop\HijackThis.exe
Title: Re: Does this look right, HJT ?
Post by: Jp on April 27, 2007, 10:03:59 AM

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=2c02&lc=0409
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://rd.yahoo.com/customize/yessentials_cq/defaults/su/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Compaq
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Application Data\Prevx\pxbho.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SST - {FFFFDA2C-A0D5-4D60-8EE1-1B7F8929E24D} - C:\Program Files\Lycos\sst.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: ThomasNet.com Toolbar - {46AE03C0-BCFA-4728-90E7-00EB4A8B3863} - C:\WINDOWS\Downloaded Program Files\AtHocTBr.DLL
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\COMPAQ\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [Pure Networks Port Magic] "C:\PROGRA~1\PURENE~1\PORTMA~1\PortAOL.exe" -Run
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [netdefense2003] C:\Documents and Settings\Joe Poole\Desktop\epc protector\netdefense.exe
O4 - HKLM\..\Run: [mswspl] C:\Documents and Settings\Joe Poole\Desktop\epc protector\netdefense.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [masqform.exe] C:\Program Files\PureEdge\Viewer 6.0\masqform.exe -UpdateCurrentUser
O4 - HKLM\..\Run: [Iomega Startup Options] C:\Program Files\Iomega\Common\ImgStart.exe
O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\JOEPOO~1\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install[1].exe -startup -product IncrediMail
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1143471933\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\StartEAK.exe
O4 - HKLM\..\Run: [ChkAdmin] C:\PROGRA~1\Compaq\COMPAQ~2\CHKADMIN.EXE
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\RunOnce: [Compaq_RBA] C:\Program Files\COMPAQ\Compaq Advisor\bin\compaq-rba.exe -z
O4 - HKCU\..\Run: [Iomega Active Disk] C:\Program Files\Iomega\AutoDisk\AD2KClient.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0\AOL.EXE" -b
O4 - HKCU\..\Run: [RCSync] "C:\PROGRA~1\RINGCE~1\RINGCE~1\RCIMAP.exe"
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://store.presario.net/scripts/redirectors/presario/storeredir2.dll?s=consumerfav&c=2c02&lc=0409
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/odc.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143817725593
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1169617713187
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_3_16_0.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F7A1AF5-AB99-4CB3-8138-3C843F1ED6DA}: NameServer = 205.188.146.145
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: Compaq Advisor (Compaq_RBA) - NeoPlanet - C:\Program Files\COMPAQ\Compaq Advisor\bin\compaq-rba.exe
O23 - Service: Compaq Local Alerter (CPQALERT) - Compaq Computer Corporation - C:\Program Files\Compaq\Compaq Management Agents\cpqalert.exe
O23 - Service: cpqdmi - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~2\cpqdmi.exe
O23 - Service: Compaq DMI Web Agent (cpqWebDmi) - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~2\CPQWEB~1\WebDmi.exe
O23 - Service: Iomega Activity Disk2 - Iomega Corporation - C:\PROGRA~1\Iomega\System32\ActivityDisk.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Win32Sl (WIN32SL) - Intel - C:\Program Files\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe

I will appreciate your review.

Jp
Title: Re: Does this look right, HJT ?
Post by: GX1_Man on April 27, 2007, 11:18:33 AM
Jp I think Raptor is looking for you.
Title: Re: Does this look right, HJT ?
Post by: Jp on April 27, 2007, 11:35:36 AM


GX1_Man,
It can't be for anything serious, ....................Can It ?  :-\
Title: Re: Does this look right, HJT ?
Post by: GX1_Man on April 27, 2007, 11:39:19 AM
Here you go:

http://www.computerhope.com/forum/index.php/topic,34526.0.html
Title: Re: Does this look right, HJT ?
Post by: CBMatt on April 27, 2007, 03:51:51 PM
I don't have the time to look at your log right now, but I can tell you that uploading your HJT log to VirusTotal will tell you absoluely nothing.  It's just a Notepad file.

I do not recognize these files as being installed on my system.
What files are you referring to?
Title: Re: Does this look right, HJT ?
Post by: Jp on April 27, 2007, 04:11:52 PM
CBMatt,
The files I am referring to as not being familiar, are the ones that were returned that say no viruses found, etc.

Not to worry about time I had some difficulties during this time this morning, am not sure what it is, I think that Prevx 1 which has expired, is giving me some background run time when I open my IS.

I should have this post removed to Other or something, but if and when you get time I would like to know if there is anything in the HJT log that might be causing me problems.

Thanks much,

Keep in touch.

Jp
Title: Re: Does this look right, HJT ?
Post by: CBMatt on April 27, 2007, 06:15:15 PM
Well, Joe, your log isn't too bad, but there are a couple of things that need attention.  But first, I'd like to address your question...  I'm still not entirely sure what files you're referring to.  Are you talking about that long list of anti-virus programs?  If so, then those aren't actually on your computer.  VirusTotal just uses those to scan files online.  It's somewhat like scanning with Panda online.  You can scan with it, but it's not actually on your computer.  I hope I've answered your question.  If not, please clarify a bit more to help me understand.  Now, time for your log...

First...
O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\JOEPOO~1\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install[1].exe -startup -product IncrediMail

Have you installed IncrediMail?  This appears to just be the installer for it, so if you don't need it, it can be deleted.  If you want it for any reason, you'll want to move it because it's in your Temp folder, which means it'll get deleted after a certain amount of time.

Speaking of your Temp folder...download CCleaner]http://www.ccleaner.com]CCleaner (http://www.ccleaner.com) (install without the Yahoo! toolbar) and use it to clean up a bit.

Now, open HJT and do a scan.  Check the following entries if they still appear (don't fix them yet)...
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)

O2 - BHO: SST - {FFFFDA2C-A0D5-4D60-8EE1-1B7F8929E24D} - C:\Program Files\Lycos\sst.dll (file missing)

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O4 - HKLM\..\Run: [netdefense2003] C:\Documents and Settings\Joe Poole\Desktop\epc protector\netdefense.exe
O4 - HKLM\..\Run: [mswspl] C:\Documents and Settings\Joe Poole\Desktop\epc protector\netdefense.exe

(Do you recognize this at all?  I can't find any real info on it, but the program appears to have been infected with a trojan.  If you do in fact know this program and want to keep it, the easiest route would be reinstalling it after the fix.  But because I don't recognize it, I would recommend not using it.)

Please print out these steps before proceding, and make sure your anti-virus defintions are up-to-date.  Now, close all windows (including this one) besides HiJackThis, then click Fix Checked.  Close HiJackThis and reboot into Safe Mode (http://www.computerhope.com/issues/chsafe.htm).

Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following (if present)...

NetOptimizer
Lycos SideSearch
EPC Protector
or NetDefense2003
Alexa


Navigate to and delete the following folder (if present)...

C:\Documents and Settings\Joe Poole\Desktop\epc protector

Do the same for the following files (if present)...

C:\Program Files\Lycos\sst.dll
C:\WINDOWS\web\related.htm


If you can't find the aforementioned files/folders, you may need to have Windows allow you to view hidden files and folders.  If you're not sure how to do so, please read this (http://www.computerhope.com/issues/ch000516.htm).  Perform a full-system scan with your virus scan (I would suggest AVG Free (http://free.grisoft.com/freeweb.php/doc/2)) and let it clean anything bad it finds.  Once you've done all of this, reboot into Normal Mode and post a new HijackThis log so we can see if there's any other junk we need to clean up.  Let me know how everything's running now and if you had any problems following my steps.
Title: Re: Does this look right, HJT ?
Post by: Jp on May 02, 2007, 09:20:26 AM
Hi Chris,
I have found Free Registry Scan!
 
 
RegCure Premium Registry Cleaner and PC Optimizer
 

and am not really sure what to do there seems to be several
CCleaners , exactly which one should I be using.


As I am writing this my curser is out of control, blinking
and scrolling down the page leaving the printed word far behind.

A lot of strange things are going on, like the picture program icon on the desk top opens all by itself and won't close, etc.

Generally a computer that is not working.

Jp



Title: Re: Does this look right, HJT ?
Post by: Jp on May 02, 2007, 03:40:16 PM
I was unable to reply from my computer I am using another.The curser will not stay still long enough for me to write.

I have completed AVG Virus Scan, over 4oo threats, but I don't know what to do next, how to clear etc. will wait for your reply.
Title: Re: Does this look right, Help!
Post by: Jp on May 02, 2007, 04:13:47 PM
Please Help !

Over 400 threats found need to deal with this how to correct or finish AVG Virus scan cleanup ?

(http://i166.photobucket.com/albums/u97/JoJoPoole/AVGTR1.jpg)(http://)

JP
Title: Re: Does this look right, Help ?
Post by: Jp on May 02, 2007, 05:37:56 PM
OS: Microsoft Windows XP
Home Edition
Version 2002
Service Pack 1
128 MB of RAM

Did you check out the virus scan ob the previous page ?

I must add, that during this episode, I was not able to re-start in safe mode,
also I restored the system once last week and then again today, no dif. seems worse, I wish I would have taken dl65's advice way back when but I had 2 many issues I hate malicious S-Birds, and would like to blame the FCC, for sitting on the Buts while I am eating some S-Birds dirt !


Jp
Title: Re: Does this look right, Help ?
Post by: Zylstra on May 02, 2007, 06:14:29 PM
Just for future refrence:
Instead of making a whole bunch of posts, you can use a service like Pastebin http://pastebin.com/ to have a lot of text

(I dont consider HJT logs a waste of post counts, it just takes a long time to do that)
Title: Re: Does this look right, Help ?
Post by: Jp on May 02, 2007, 10:05:52 PM
Hun !! Whatever I'm just glad that I still have a telecommunications system to answer you, like if my motor tickle was still running , . I would be tickled until the end of time.

I just need to get through this and I promise I will be good from now on.

Your hearts desire, I would K.Y.A. , . . .


Just don't break me because I am already a Bkn. A.



Jp

Besides that I would have to use the computer at the library if I wanted to go on line, . .  then I probably wouldn't need you any more, . . and that my love is unamaginable.
Title: Re: Does this look right, Help ?
Post by: dl65 on May 03, 2007, 12:42:01 AM
Jp..........
Quote
I wish I would have taken dl65's advice way back when

LOL....... this is funny, perhaps we should update the good folks here trying to help you........
At least 2 months back, maybe longer, we went through a similar exercise with your machine.
Why don't you do yourself a favour and wipe the machine clean and do a nice fresh install ? ................ Only this time, once you have done the clean install of XP/SP1 ........go immediately to the MicroSoft update site and d/l SP2.... ( oops no wait....... you had one comming in the mail from MicroSoft)
For the life of me I cannot understand why you refuse to do this. You claim that your copy of XP is 100% legal and passes the WGA test.  So in the words of NIKE ............ "Just do it"


dl65  ::)
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 03, 2007, 02:21:58 AM
Jp,
That is ridiculous.  I'd like to know how in the world you got so badly infected.  Some of these infections are pretty tough to get rid of...

When AVG gives you your results, you should have a couple of available options such as Heal and Move to vault.  Do you see those anywhere?  What about when you right-click on the screen?  If there, you should choose to Heal.

You've got a major infection and even if we can fix it for you, it would take a lot of work.  And I mean a lot.  I'm willing to do as much as I can to help you out here, but dl65's suggestion of a clean install might not be a bad idea.  I'm surprised your machine even turns on.
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 07:16:37 AM
I do not know how it got that way, I must have run into a mean bitc_,
somewhere.

I agree something drastic is going to be needed.

I do have the SP2 disc and an anti-virus and firewall installation packet containing 2 disc, from someone I trust.

I am going to try to clean this up first, I have started the heal and see that it has deleted one file, but I do not see anything else happening ?

What is it suppose to be doing ?

Appreciate you following this.


Jp
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 07:57:30 AM
My computer isn't working very good !  :(

(http://i166.photobucket.com/albums/u97/JoJoPoole/ObjectDetails.jpg)(http://)

Does this mean what I think it does ?  :P

Where did the heal button go after I pushed it ?

Where is the vault button.

This is BAD !

Jp

Title: Re: Does this look right, Help ?
Post by: Raptor on May 03, 2007, 08:24:12 AM
Time for a reformat, Jp. Even if you get it to work, your OS will have huge holes in it with all the damaged files you're now trying to fix.
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 08:34:20 AM
Raptor, I don't understand holes, but, . . .

Here is the results of the AVG heal process.

(http://i166.photobucket.com/albums/u97/JoJoPoole/ThreatsFound.jpg)(http://)


As soon as I am through this I am going prepare for the installation of SP2.

For now I would like to get through this.

Jp
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 03, 2007, 08:34:31 AM
I hate to say it, Jp, but Raptor might be right.  You have so many infections and there's no telling how many of them are self-replicating or might be letting other infections in.  You can do scans with AVG, TrojanHunter, and SUPERAntiSpyware (not at the same time, of course), but I don't know how much they'll be able to help you.  If you can somehow manage to get the number of infections down to...maybe 20, it wouldn't be quite so overwhelming.  But I really don't know if you can manage that.  Many infections require special needs and techniques...reformatting might not be the most convenient/desired route, but it's definitely easier.
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 08:38:12 AM
Chris,

Did you see the last results, . .Threats Found?

Jp
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 03, 2007, 08:41:19 AM
Yes, I just now saw that and I must say, I'm quite surprised.  Well, now that we're down to a reasonable number, we just might be able to work this out.  Good job!  Are you noticing a difference in performance?  Can you get into Safe Mode?  If so, you should do another scan from there.  It might help get rid of those remaining infections.
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 08:43:15 AM
Will Do !

Yes performance is somewhat better.

What if I can not get into safe mode ?

Jp
Title: Re: Does this look right, Help ?
Post by: Raptor on May 03, 2007, 08:48:17 AM
With holes I meant that your installation is most likely going to be broken down after removing all those viruses. They may have infected important files that are now unhealable and you'll end up using a very unstable Windows installation.
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 03, 2007, 08:51:03 AM
If you still can't get into Safe Mode, that's usually not a good sign.  What exactly happens?
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 09:22:42 AM
I could not get into safemode, the system is slowed, big time.

I can type out ok but switching programs or pages or opening is quite slow,

Shall I start up the virus scan ?

Jp

Wait a minute it seems to be picking up a little.

The curser is blinking a little, . .
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 03, 2007, 09:29:31 AM
Go ahead and give the virus scan a try, but I have a bad feeling about this.

I'm still wondering what happens when you try booting into Safe Mode.  Do you get any sort of error?
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 09:33:22 AM
I started tapping F8 as soon as it turned off, I saw a f1 boot something and it opened slower than usual, no warnings with the exception of a black screen saying something about making sure the key board was plugged in ect. this has been happening for awhile, or since the infection started.

Jp

I am logging off shortly, will get back to you on scan result.
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 10:46:50 AM
I started up the AVG scan and I now have 456 infected files, back from 5.


What to do, why can't I use systems restore ?

Jp
Title: Re: Does this look right, Help ?
Post by: Raptor on May 03, 2007, 10:56:49 AM
Jp, this is hopeless.

Unless you're running it as an experiment, I'd do a complete reformat and take precautions against problems such as these next time.

Are you running it as an experiment?
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 11:01:35 AM
Raptor,

Not exactly, I would like to defeat this,

most are
A0011064.exe   Trojan horse Generic. DLY   C:\systemvolume information\_restore

(8238BFe6.....etc.

I am not sure about a reformat, I never did that, I guess I should get ready, . .
suggestions ?

Jp



Title: Re: Does this look right, Help ?
Post by: Jonas Wauters on May 03, 2007, 11:23:14 AM
I don't have manny experiance with computers but I do have had much different virus scans.
And I sudjest Windows OneCare Live.
You can try it for free for 90days.
Did you allready tried onecare for those infections I don't think this will all thurn ok but you can try the onlything you can lose is 20min.
And have you tried to go into safemode with the help of MSCONFIG.
I don't think its going to make much difference but I not shure I've nefer had the problem that I couldn't go into safemode.

Jonas
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 11:26:51 AM
Ok,

I think you probably no what your talking about, I went to MS help and found it confusing >reformat, ?

Can you tell me, what is the easyiest way to do that, I dont have a disc, the computer came with WXP installed, if i could as you say reformat then I can set up the SP2 Install, . .  

What test did dl65 refer to for the install disc?

I am going to restart for now and try to go into safe mode again.

 sudjest Windows OneCare Live.


I'll try it ! What say Raptor ?

Jp


Title: Re: Does this look right, Help ?
Post by: Jonas Wauters on May 03, 2007, 11:29:16 AM
Quote from: Jonas Wauters link=topic=34727.msg213737#msg213737 date=
And have you tried to go into safemode with the help of MSCONFIG.
I don't think its going to make much difference but I not shure I've nefer had the problem that I couldn't go into safemode.

Just sow you know I've changed it
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 11:41:29 AM
Is there a special way to go into safe mode from msconfig,
I just restarted and after healing 460 infections I could not get into safe mode and if I were to scan again I would probably have those 460 Trojan horse infect. back.



Is it possible ???

When I first started AVG, I did get a warning that I had a ROXY CD & DVD creator that should be updated, so not to interfere, but I went to there site and was not able to update it, I didn't know I had one.

Would this have anything to do with re-infection after healing etc. ??


Jp
Title: Re: Does this look right, Help ?
Post by: Jonas Wauters on May 03, 2007, 12:03:13 PM
If you type "msconfig" in run then you go to boot.ini then you mark safe boot.
I sudjest that you try minimal first if that doesn't work you can try to boot with basic divices. (Diaganosic startup)
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 12:09:00 PM
Is it possible

When I first started AVG, I did get a warning that I had a ROXY CD & DVD creator that should be updated, so not to interfere, but I went to there site and was not able to update it, I didn't know I had one.

Would this have anything to do with re-infection after healing etc. ??


Jp
Title: Re: Does this look right, Help ?
Post by: Jonas Wauters on May 03, 2007, 12:15:10 PM
My knowledge about viruses is,.. well lets say 0.
But have you tried to look in ad or remove programs and see if the program is located there.
If it is and you do not know anything about installing that program why don't you just remove it.
If you do not use it it can only use diskspace ,cpu,..
Title: Re: Does this look right, Help ?
Post by: dl65 on May 03, 2007, 01:20:40 PM
JP.......... In an earlier post you said.........
Quote
What test did dl65 refer to for the install disc?
   The test I refered to was the WGA test..... ( which you said your machine had passed)   
Here is what it is ........  it is a update which should have been d/l from MicroSoft as a critical update.
Launched in July of 2005, the Windows Genuine Advantage (WGA) program was designed to deliver additional benefits to fully licensed customers of Windows, help protect honest businesses from counterfeiters, and help Microsoft better protect its intellectual property and combat Windows piracy. WGA is one of many programs Microsoft uses to address the problem of software piracy.

If you still don't know what WGA is , go to this link......
http://www.microsoft.com/downloads/details.aspx?familyid=f8b8bc77-cfa1-47bd-b325-7a6d3893add8&displaylang=en   
Download it and it will scan your machine and inform you if you have a legal
XP or not.   
In June of 2006, Microsoft expanded Windows Genuine Advantage to include a service called WGA Notifications. WGA Notifications was created to alert people using a non-genuine copy of Windows that they might be victims of software piracy and to help them resolve the issue.

I don't know what more I can add. Your machine is still badly infected and I would doubt that it can be repaired without a format and a clean install.


dl65  ::)




Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 01:52:17 PM
dl65,

I agree, would you please help, . .

If you are talking about some type of disc I only have the disc that the computer came with as stated I have owned the computer from purcahse.

That being the case concerning reformat, . . I do have the sp2, and could install that but what do I do with WXP sp1 ?

The only hardware is my multi functional Printer, other programs are relatively unimportant, I will look at them, I can not any longer use the computer.

Therefore I would like very much to get this resolved.

Did you say that since my computer WXP is original I should not have to worry about the disc I will use ?

Jp
Title: Re: Does this look right, Help ?
Post by: dl65 on May 03, 2007, 02:07:57 PM
JP.....
Quote
If you are talking about some type of disc I only have the disc that the computer came with as stated I have owned the computer from purcahse.
I really do not understand what you mean by this.


Quote
That being the case concerning reformat, . . I do have the sp2, and could install that but what do I do with WXP sp1 ?

OK...... one of the cd's that came with your machine ......... will have XP/SP1 on it .... You need that disk and you also require the SP2 cd that MicroSoft mailed you.

Go into the bios and set your boot sequence to ........ CD-Rom first boot .....
exit bios.
Then put the XP/SP1 cd in the cd drive and reboot the machine.
You will see that it begins to load ..... Make sure you format it as NTFS.
Let it do it's thing ...... and once the format is complete, it will begin to load XP ...........
When XP finishes loading .......... remove the XP/SP1 cd from the cd-rom ......
and replace it with the XP/SP2 cd and it will install.
When finished, install your anti-virus program and then go online, and go to MicroSofts update site and click the express button ........ your machine will be scanned and you will be shown a list of critical updates to install. Download these and your done........ It's just that easy.

dl65  ::)
Title: Re: Does this look right, Help ?
Post by: Zylstra on May 03, 2007, 02:20:23 PM
If you are using Outlook Express, I reccomend you uninstall it if you are not going to reformat, just to avoide letting the virus spead
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 02:41:52 PM
I have AOL mail service although I do have Outlook Express I do not use it.

Will other software be involved in the reformat process?

Jp

Title: Re: Does this look right, Help ?
Post by: Zylstra on May 03, 2007, 02:45:30 PM
Jp:
When you reformat your computer, all data is lost and removed completely.

You will have no operating system.

There will be no software installed.

This is why you need your Microsoft Windows Instalation CD or restore disk. Without it, there will be no where to go.

(Your computer would sit with "No operating system found" and maybe a blinking text cursor, that does nothing, if you have no instalation CD)
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 03:16:31 PM
I was given three of the four disc that compaq packed with my computer, I have requested numerous times to compaq and MS with no satisfactory answer, Can I get through this with the three I have;

1. Compaq Restore Plus
2. Compaq operating system
3. Compaq Restore Supplemenmtal software CD

4. I don't have,
Compaq Special Content CD


I do have a users guide and am reviewing it, any comments or suggestions will be greatly appreciated,

I do have a fax software that I believe was downloaded over the internet, I need to find a way to save it during thisd process, it is about the only thing I really care about, etc. all other things I believe I can easily replace.
Jp
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 04:21:29 PM
Is it possible

When I first started AVG, I did get a warning that I had a ROXY CD & DVD creator that should be updated, so not to interfere, but I went to there site and was not able to update it, I didn't know I had one.

Would this have anything to do with re-infection after healing etc. ??


Jp


Was it ? Itwas !
Tragic Kingdom in this post Java update was related to focal point of infection ?

and I am not tavoiding Dl65, I am studying his plan it looks good I just, for the time being trying to understand and relate, but did anyone answer my question concerning this Roxzy update ?

N-------------OHHHHHHHH !

Jp
Title: Re: Does this look right, Help ?
Post by: street1 (RIP) on May 03, 2007, 04:42:42 PM
Bet the Pope would be confused if you came to confession.

Watch the below site.

http://www.albinoblacksheep.com/flash/posting.php

Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 04:49:08 PM

God, . . . .I'm  going there,

when I get back I'll wright you a letter.



Jp
Title: Re: Does this look right, Help ?
Post by: Jp on May 03, 2007, 05:11:58 PM
He said to the chief, how you spell RAT, he said what do you wanna know

 that for, and He said, cause I'm wrighten my girlfriend a letter and I wana

tell her,  I wanna see her RAT Now !



Bingo Billy  :D


I got back, ahnd I said I was gonna write you a letter Wonn I did.
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 03, 2007, 06:06:51 PM
most are
A0011064.exe   Trojan horse Generic. DLY   C:\systemvolume information\_restore

Infections like this are in your System Restore folder.  You can get rid of them by turning System Restore off, restarting your computer, and turning it back on again.  I know we're talking about going through with a reformat now, but I'm wondering what affect (if any) doing this would have.
Title: Re: Does this look right, Help ?
Post by: street1 (RIP) on May 04, 2007, 04:22:20 AM
He said to the chief, how you spell RAT, he said what do you wanna know

 that for, and He said, cause I'm wrighten my girlfriend a letter and I wana

tell her,  I wanna see her RAT Now !



Bingo Billy  :D


I got back, ahnd I said I was gonna write you a letter Wonn I did.

And I preciated it too.
Title: Re: Does this look right, Help ?
Post by: Jp on May 04, 2007, 07:13:47 AM
CMatt,

Is this going to put me in a zero BIOS< if something goes wrong ?

I don't think this can be undone once I do it.


(http://i166.photobucket.com/albums/u97/JoJoPoole/SR.jpg)(http://)



Jp
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 04, 2007, 07:37:25 AM
Is this going to put me in a zero BIOS< if something goes wrong ?
I'm really not sure what you mean by this.  Turning off System Restore deletes old restore points and settings, which means you won't be able to restore your computer to an older point.

If you'd like to learn more about System Restore, see the following...
http://www.microsoft.com/windowsxp/using/helpandsupport/getstarted/ballew_03may19.mspx
Title: Re: Does this look right, Help ?
Post by: Jp on May 04, 2007, 11:51:22 AM
I have just formated SP1, and am ready to install SP2, the CD I have am sure is authentic, it has the genuine halogen on it and is labeled with Microsoft Windows Security Update CD.

Will this be correct ?

Jp

Reason I am asking;
When running the CD I get this;

Welcome to the Windows Security Update CD

This disk will help you improve your computer’s security settings
and ensure your computer has the latest security updates installed.
We recommend that you start by running the Windows Security Advisor
tool, and then install the updates included on this CD. We highly
recommend that you print these installation steps for your reference.

 

Step 1: Use the Windows Security Advisor (WSA) to improve your
computer’s firewall settings and also to turn on Automatic Updates.
(This feature automatically downloads Microsoft security updates
through the Web. All you have to do is install them.)

 

Step 2: The Install Updates section of the disk includes critical
updates for your computer. Go here to download Windows
XP Service Pack 1, Update Rollup for Microsoft Windows XP,
DirectX 9, and Windows Media Player 9.


Title: Re: Does this look right, Help ?
Post by: dl65 on May 04, 2007, 12:17:16 PM
Jp...... This cd you have ..... Microsoft Windows Security Update CD
does it contain SP2 or is it the free update cd ( that MS offered back in 2004) ?
Check the contents and be sure it contains SP2 as well as other critical updates.
If it doesnt contain SP2, install your anti-virus program and then go to the MS update site and d/l SP2


dl65  ::)
Title: Re: Does this look right, Help ?
Post by: Jp on May 04, 2007, 12:23:56 PM
dl65,
Yes I am pretty sure it is the 2004 issue, the packet with 2 disc is entitled Security Update CD February 2004.
I don't know how to check the content without going past the first page, which I will attempt to do.
I am taking it you mean use the other disc to install Free Anti Virus and Firewall Software Trial CD

This CD came with the pack and is titled EZ ARMOR LE


Jp


I checked;

The content on this page has expired
Please visit microsoft.com/protect to get the latest updates for your operating system.

Title: Re: Does this look right, Help ?
Post by: dl65 on May 04, 2007, 12:42:40 PM
Jp ......  Ok ...... that confirms my thought .  The anti-virus and firewall that is included on that disk is a trial version, so there is no point installing it.
You must have AVG free antivirus ....... install that . Then go to MS update site and d/l service pack 2 (SP2). Don't bother with the firewall now ..... get SP2 installed first.
There is a firewall included in SP2 , it's not the greatest, but for now it will suffice.
Don't install any other software except the anti-virus untill you get SP2 and any recent critical updates installed.

dl65  ::)
Title: Re: Does this look right, Help ?
Post by: Jp on May 04, 2007, 05:09:14 PM
  Key Riegst !



I don't care what you say, these Aho's could fricup a hicup, . . .why

meeeeee!


What the Smell does Aho Microsluff do on their day off ?

OK, I'm back on line and I'm using my computer but I still am not updated and

h**l, it don't get any better than this !


Am I just frustrated or do I really Hate Republicans and Democrats !
Title: Re: Does this look right, Help ?
Post by: Raptor on May 04, 2007, 06:44:03 PM
I swear, this guy is Mac.
Title: Re: Does this look right, Help ?
Post by: Jp on May 04, 2007, 06:50:22 PM
Raptor Quit trying to play it cool !

 8)
 I have no doubts about what part you played in all this.


And Oh, let me tell you that AOL had some kind of we can protect your mail, then reneged, about three weeks ago, tee hee  :-X  my mail files are gone on the reboot.

Thank you!!Thank you !! nice, nice, very nice !


Jp

PS do I desrve to know what mac means ? :'(
Title: Re: Does this look right, Help ?
Post by: dl65 on May 04, 2007, 07:05:40 PM
JP ..... So whats the situation now with your pc ?
Have you successfully installed SP2 ?
Do you have the other critical updates installed ?
Did the activation process go ok ?


dl65  ::)
Title: Re: Does this look right, Help ?
Post by: Jp on May 04, 2007, 07:20:17 PM
Dl65,

I did reformat with the restore CD's, but , . . when going to MS UD,
there were quite afew, and I chose from the top of the list it updated SP1,
instead of updateing what I thought was sp1 to sp2, . . .

in the mean time, I downloaded that TrUST ME Firewall and decided they had to go, I could't get rid of them and decided to reformat a 2nd time,

This time I definitely did not get exactly the same thing, there were some distnct differences, I can't even imagine how or why, . . . anyway,  . . .

I still haven't d/l sp2, and right now, I am just recharging after realizing I really I can't afford to sue MS or somebody or maybe anybody else that ever crosses my path.  again, . . . ever, . . .

I don't even care . . ., but just exactly where is this d/l,  . . and is it really worth it, . . I mean in your opinion,  . .  I mean, . . maybe I should just update AOL security, and consider myself a lucky devil, just to live in a free world.

  :-\

JP



Title: Re: Does this look right, Help ?
Post by: dl65 on May 04, 2007, 07:44:55 PM
Jp ..... Ok , so you have SP1 installed now and all of the applicable updates (excluding SP2) and the pc is working ok.

Do you have a anti-virus installed ?

Now go back to MS windows updates and d/l SP2  ( don't d/l anything other than SP2 first) ...... once its installed and things are working ok , go back to MS update page and click express , let it scan and then d/l all the updates for SP2      http://update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us

dl65  ::)
Title: Re: Does this look right, Help ?
Post by: GX1_Man on May 04, 2007, 08:37:22 PM
And if you have a burner, then burn it to a CD so you have no excuse to not be updated BEFORE you ever go on the internet next time you get to format that machine. Burn AVG and Spybot on that same CD as well.
Title: Re: Does this look right, Help ?
Post by: Jp on May 04, 2007, 08:38:06 PM
Thanks Dl65,

No, I don't and I can't belive this, I am seeing all the great security products that AOL has to offer, I just reformated I I get this;

(http://i166.photobucket.com/albums/u97/JoJoPoole/AOLSecurityRequirement.jpg)(http://)

Where have I gone wrong ?

Jp

Title: Re: Does this look right, Help ?
Post by: dl65 on May 04, 2007, 10:11:01 PM
Jp .......  Lets forget about the A O H**l thing for now.......
More important .......Have you downloaded and installed SP2 ?
Go into control panel/system   ...... general tab and take a screen shot and post it here.

Now then , what is it the is so great with the "great security products" that AO h**l offers?     Which products are you refering to?


dl65  ::)
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 02:29:55 AM

dl65,

The security programs for AO H**L


http://free.aol.com/tryaolfree/wr6_asm/more_info.adp

http://daol.aol.com/safetycenter


I now have this revamped computer running SP1, am I'm sorry but it is like I died and went to heaven.

I definetly need a new key board, the reason my curser is out there doing alot of crazy things.

After I get this key board installed I will be back, thanks much for now.




Jp

Title: Re: Does this look right, Help ?
Post by: CBMatt on May 05, 2007, 03:13:50 AM
Jp, you really need to download and install SP2 before you spend anymore time online.  You're in a vulnerable state right now.
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 07:44:04 AM
<Image removed by admin contains your Windows product key, suggest you also remove from the location you posted the picture to>
Title: Re: Does this look right, Help ?
Post by: Raptor on May 05, 2007, 07:46:32 AM
Reading this is like watching a dog drag its behind over the floor after it had a bad sh*t.

Don't get me wrong, it's fun to watch. Unless you're the person having to mob it up...
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 05, 2007, 08:41:08 AM
<pic removed by admin>
Your pictures aren't showing up for me, Jp.
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 08:46:43 AM
Raptor,

Hardee Har-Har  :'(


CBMatt,

What do you mean ?

I was asked by dl65 to post it, it's the right picture isn't it ?

Jp
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 08:56:06 AM
Raptor,

Why don't you in all of your computer prowress, and savy, get yourself a remote accsess and just fix the *censored* thing for us hopeless sons of dogs.

You would be in Compuserve Heaven, exactly were you think you going to be some day !

 :P

Jp
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 05, 2007, 09:16:15 AM
I'm not saying it's the wrong picture.  It just wasn't showing up for me.  It's working fine now, though.  My internet must be acting up this morning.

Now, why exactly haven't you downloaded/installed SP2 yet?
http://go.microsoft.com/?linkid=3646727
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 10:00:23 AM

Exactly,
I have written MS a query regarding the last attempt at specificaly d/l SP2 when it was updateing SP1 according to the hotfixes in A/R, There is no specific titles on the page referred; MS-Updates, therefore instead of having SP1 UD's loaded twice, I asked for the specific SP2 update D/L.

Accordingly, I received a scan, prior to there collection of information;

(http://i166.photobucket.com/albums/u97/JoJoPoole/MS-1.jpg)(http://)


Jp
Title: Re: Does this look right, Help ?
Post by: Raptor on May 05, 2007, 10:05:26 AM
Raptor,

Why don't you in all of your computer prowress, and savy, get yourself a remote accsess and just fix the d**n thing for us hopeless sons of dogs.

You would be in Compuserve Heaven, exactly were you think you going to be some day !

 :P

Jp


Now where's the fun in that? If you want me to have remote access, sure. Did you read my disclaimer yet? I am not liable for any nuclear explosions in your area.

Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 10:28:51 AM

Right, there wouldn't be any fun in that, . . .
but if anyone going to your computer and had access to it in anyway, could be identified, I wouldn't be here spending all my time trying to figure out what the H____?!@, is going to happen next, it's like going to a noisy library and trying to study, you wind up getting P.O'ed.

Jp
Title: Re: Does this look right, Help ?
Post by: Raptor on May 05, 2007, 10:30:54 AM

Right, there wouldn't be any fun in that, . . .
but if anyone going to your computer and had access to it in anyway, could be identified, I wouldn't be here spending all my time trying to figure out what the H____?!@, is going to happen next, it's like going to a noisy library and trying to study, you wind up getting P.O'ed.

Jp

I never visit libraries. I did once, put people gave me funny looks. So, do you want remote assistance or not? What do you need assistance with, anyway? Installing SP2?
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 10:40:31 AM
Right, I don't go much anymore either, except to use the computer when I have to, the library is here now !

As far as remote access, is concerned, I wouldn't want to interupr MS at the moment there trying to answer my question as to why I cant get specific information concerning their DL's, . .
the last time I was there they were updating my WXP Home Edition while I thought that they were d/l sp2, . . .why can't they take the time and tell you the title of their D/L and give you a number ?

What gives with MS, I a under the impression that they just like dominance,

some day the fed, gov. is going to step in, and I'll be one to support the legislation behind it, that is if we ever have a gov. again that we can trust and respect.

 >:(
Jp
Title: Re: Does this look right, Help ?
Post by: Raptor on May 05, 2007, 10:44:19 AM
Well, if you download all the updates for SP1, you'll be prompted to download SP2 at one point. Can't miss.

I've got SP2 on a CD so I don't have to go online when reinstalling my Windows installation before it's installed.. I can copy it and send it over to  ... wherever you're from, America I think, considering your spelling and... way of thinking.. but I'm assuming you've got broadband..

Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 10:53:10 AM
Dog-Gone, how was I suppose to know that, I suspected it but it was not,
a strong enough impulse.

And thats mighty nice of you to offer you SP2 D/L, unfortunately I don't have broadband, . .

I got into a fiasco with an aviation company finance thing and DOD contracting and I am still recovering, . . .

therefore I have little time for all the modern conveniences I would like to have.

I'll wait for MS to answer that way I won't have to trust there scan and get sp1 updates twice.

But thanks,


Jp

Jp

Title: Re: Does this look right, Help ?
Post by: Raptor on May 05, 2007, 10:55:28 AM
Quote
And thats mighty nice of you to offer you SP2 D/L, unfortunately I don't have broadband, . .

No, I meant copying it to a CD and sending it to you through analog service. You know, the mailman. SP2 includes SP1.
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 11:03:13 AM
Do you think it's worth the time, I mean any advantages over the website update download ?

That will probably take place on monday, however I am hearing that the disc is a better shot at it.

Jp
Title: Re: Does this look right, Help ?
Post by: Raptor on May 05, 2007, 11:05:40 AM
Do you think it's worth the time, I mean any advantages over the website update download ?

That will probably take place on monday, however I am hearing that the disc is a better shot at it.

Jp

Hm, I just found something else for you;

Order Windows XP Service Pack 2 on CD (http://www.microsoft.com/windowsxp/downloads/updates/sp2/cdorder/en_us/default.mspx)

Should be quicker/cheaper.

And yes, you're going to need SP2 if you are connected with the Internet. Even on dial-up I'd recommend having it.



Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 11:12:34 AM
Raptor,

Fine, tell me where, is this type of installation going to do the required updating of SP1 prior to D/l Sp2, . .

and let me see if I can understand something with this simple question;

When a co. like MS is downloading an update or an automatic update to your computer and it is already there or a newer version happens to be there is or does the scan specific always pick this up, in order not to fill your HD with un-necessary components.

I realize that MS scans but they don't seem to be comprehensive in service.

As I already realize the problems with compatibility.

Jp
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 11:47:49 AM
Please, correct me if I a wrong, it is possible that I just have not read far enough.

But, . .this what I'm getting at this web page when I was searching for an SP2 CD, . . .

http://www.microsoft.com/windowsxp/sp2/default.mspx

Windows XP Service Pack 2 (SP2) is a free update for Windows XP. It offers enhancements and better protection against viruses, hackers, and worms.

With features like Windows Firewall, Pop-up Blocker for Internet Explorer, and Windows Security Center, you can be confident that your computer has the right tools to stay more secure and up to date.

 
Your computer has already been upgraded to Windows XP Service Pack 2 (SP2). For tips or help using it, see the SP2 support and how-tos.

I realize this is fairly familiar, but I can't help it, I still would like to know a little more about it, . .
Jp
Title: Re: Does this look right, Help ?
Post by: Raptor on May 05, 2007, 12:23:00 PM
Since Nathan removed your picture, I can't verify, but it has to say Windows XP Service Pack 2 ...

As for updates; they don't overwrite. Windows knows what has been installed and what hasn't, so don't worry about that.

Quote
Your computer has already been upgraded to Windows XP Service Pack 2 (SP2). For tips or help using it, see the SP2 support and how-tos.

O.K, I only use Firefox so it can't detect what I'm using. You should use Firefox too, it's more safe.

Hm, well if you have SP2 you should have Windows firewall in your control panel. Do you have it?
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 01:03:51 PM
I haven't found it but I will say that Compaq's restore disc and what I had on this computer when it came from the store a deffinetly 2 dif. things.

However I am getting this from Control Panel > Windows update;



(http://i166.photobucket.com/albums/u97/JoJoPoole/WindowsUpdate.jpg)(http://)


and this is what I mean what the H is it ?

Jp

Title: Re: Does this look right, Help ?
Post by: Raptor on May 05, 2007, 01:22:47 PM
Wait, Jp.

You

1. Are on dial-up
2. Have SP2 installed
3. Have not yet ran Windows update

Is this correct?
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 02:08:18 PM
I am on Dial Up
The following is all that has been D/L, from update to the best of my knowledge;

(http://)
(http://i166.photobucket.com/albums/u97/JoJoPoole/SP1Upgates.jpg)

also it is beyond me how or why MS will sell complete DL SP2 disc, for $299,
but send it free to you in the form of a DL or a trial disc, that is a real ?

Please give me an explanation if you have one .

Jp
Title: Re: Does this look right, Help ?
Post by: Zylstra on May 05, 2007, 02:21:20 PM
The $299 disk is probably for a new copy of Windows

They might have an update disk that you can order... (wait for more responses)
Title: Re: Does this look right, Help ?
Post by: dl65 on May 05, 2007, 02:35:00 PM
JP ...... Let me clarify. what screen shot I asked you to post..........
It was the one showing the "general tab" ..... which is what you posted.
Your product serial code is not included in the information that you posted ....... what was displayed, is  the actual serial number of the version of XP home that you have installed.
if you had SP2 installed , the screenshot would have looked like this.

Your product serial code is a 25 digit alfa-numberic  number ....... and not what is shown.

Also, you should really install more ram , XP will run on 128 mb but will be very slow.
256 would be better, even more would be of greater value to you.

dl65  ::)


[cleaning up - attachment deleted by admin]
Title: Re: Does this look right, Help ?
Post by: Jp on May 05, 2007, 03:08:08 PM
Dl65,

OK,

This in such a case has been a defficentcy in the telecommunications system and Industry.

Those who do not honor honor are not honorable.

Jp
Title: Re: Does this look right, Help ?
Post by: GX1_Man on May 05, 2007, 05:00:36 PM
also it is beyond me how or why MS will sell complete DL SP2 disc, for $299,
but send it free to you in the form of a DL or a trial disc, that is a real ?

JP, get a grip. The download is free, the disc is free, the excuses not to - priceless.
Title: Re: Does this look right, Help ?
Post by: CBMatt on May 05, 2007, 07:35:31 PM
I'm totally lost here and I still don't quite understand what the excuse is.
Title: Re: Does this look right, Help ?
Post by: patio on May 06, 2007, 07:30:31 AM
What needs to be done in this situation should have happened 4 months ago...a complete format and clean install along with an install of SP2; followed by an install update and scan of all the protection programs suggested ;again followed up with the install of all applications; and then have a decent image program such as Acronis create a virgin image of a well running clean machine with no malware that could be restored in 7 and a half minutes....

This at most would take one solid evening.

 ::)         ::)
Title: Re: Does this look right, Help ?
Post by: Jp on May 06, 2007, 09:43:58 AM
patio,
I thank you, . .

I have just received feedback from MS, refering to OEM applications and details on D/L, I will look into a follow your clean machine suggestions and advice, once again I thank you and all of you superbly patient folks at Computer Hope for your help and assistance.

 ;)
JP
Title: Re: Does this look right, Help ?
Post by: dl65 on May 06, 2007, 12:05:57 PM
Jp.......
Quote
I have just received feedback from MS, refering to OEM applications and details on D/L

Would you care to share with us what information MicroSoft provided you with ?


dl65  ::)
Title: Re: Does this look right, Help ?
Post by: GX1_Man on May 06, 2007, 06:06:23 PM
They gave him the source code to Vista.  :o
Title: Re: Does this look right, Help ?
Post by: dl65 on May 06, 2007, 07:01:58 PM
LOL ........
 
Quote
They gave him the source code to Vista. 

That's a hoot.


dl65  ::)


Title: Re: Does this look right, Help ?
Post by: GX1_Man on May 06, 2007, 07:06:51 PM
Seriously, JP - four MONTHS?  ::)
Title: Re: Does this look right, Help ?
Post by: Jp on May 07, 2007, 11:36:43 AM

GX1_Man,
 
Please know that yes it has been awhile, however, remember if you will please, that I have been using the computer for years and never really realized how important maintenace was, I was forced financially, and was not able to reconnect with my ISP, after serveral months I broke out my laptop and in desperation to re-connect my communications with the gov. to submit tech disclosures, to USDHLS, for the reason of procurement solicitations, (not to get personal), I selected AOL because they offered a 90 free trial and I could get back on line, . .

attempting to do that I DL'ed aol service to the laptop and it went zilcho, if you recall, . . .

I then went out to the garage where I am now, and stretched a line across the lawn to the telephone box and got back on using my desk top, where I at one time had my own box T-connection, . .since that time,  . .

I have had the box re-installed and the line across the lawn is no longer used.

I then encountered the trojan problem I did not know I had and that was about the time, I arrived here, and we all met.

Now, before you start divvieing out the solutions, which I believe you have done gracefully, . .I need to tell you that it is apparent, that prior to installing either SP2 or Computer Firewall, virus protection and
malware protections, namely from AOL,(at this time I am going to need to upgrade my RAM, . . .

(http://i166.photobucket.com/albums/u97/JoJoPoole/AOLSC-DL.jpg)(http://)

Therefore, I realize your desires to resolve these issues, of which I will always be greatful, and hope that there may befall me a way to express my gratitude.

Until then let me find out what my computer specs are so that I can hopefully install the RAM update as apparently is needed, of which I did not think that it would be, since I have recently, Restored the BIOS.

From Microsoft;
To work together more effectively, before we try to install Windows XP SP2, please refer to the following article for detailed information about the download as well as the installation first:

 
What to Know Before You Download and Install Windows XP Service Pack 2

http://www.microsoft.com/windowsxp/sp2/sp2_whattoknow.mspx

If your original system is an OEM (Original Equipment Manufacturer) version preinstalled with the computer, I recommend contacting the computer manufacturer first before installing SP2. Please ask them if any of the software applications and hardware drivers need to be updated for SP2. Otherwise, installing SP2 may cause unexpected problems. Thank you for your understanding on this issue.

Generally, installation of Windows XP SP2 issue can occur if certain third party programs are running in the background during the upgrade (especially third party firewall, antivirus programs etc) which will conflict with the installation process. As a result, Windows XP SP2 cannot be downloaded completely and the installation will be failed. Therefore, I suggest we first perform the following steps to directly download Windows XP SP2 on our website in normal mode and then install it in Safe mode. This mode will load the system with the minimum amount of programs and devices. Hence, performing this step will help avoid any conflicts during the installation process. For your reference, I have included the steps below

Download and then install Windows XP SP2

===================================

1. Download Windows XP SP2 from the link below:


Windows XP Service Pack 2 Network Installation Package for IT Professionals and Developers

http://www.microsoft.com/downloads/details.aspx?FamilyId=049C9DBE-3B8E-4F30-8245-9E368D3CDB5A&displaylang=en

Note: The above link is also appropriate for home users. Please save the file on the Desktop.
 
2. Restart the computer and start pressing the F8 key on the keyboard. On a computer that is configured to boot multiple Operating Systems, press the F8 key when you see the boot menu.

3. When the Windows Advanced Options menu appears, select Safe Mode, and then press Enter.

4. Log onto Windows by using the Administrator account or any user account with Administrator privileges.

5. Double click the downloaded file "WindowsXP-KB835935-SP2-ENU.exe" on the Desktop to install Windows XP SP2 in Safe Mode.

Note: In Safe Mode, your system display and Desktop will look and perform differently than in Normal Mode. This is only temporary. To return to Normal Mode, we can simply restart the computer.


Is SP2 download and then installed successfully? If not, please follow the steps below to capture a screenshot if there is any error message.


Screenshot of the error message

=========================

1. Press the Print Screen key (PrtScn) on your keyboard.

2. Click "Start", click "Run", type "mspaint", and click "OK".

3. In Paint, click Paste under the Edit Menu, click Save under the File menu, type a file name for the snap shot, choose JPEG as "Save as type", click “Desktop” on the left pane, and click Save.

4. Please find the screenshot on the Desktop and send it as an attachment to: [email protected]

Then, please send me the SP2 installation related log files. All the installation historical logs will be automatically saved in these files during the installation process. Hence, they are very useful for us to determine the root cause of the problem. 

 

Windows XP SP2 installation log files

============================

1. Click "Start", "Run", enter "%windir%" (without the quotation marks), and then click OK.

2. Locate the files Svcpack.log and Setupapi.log in the opened folder.

3. Please send them to me at [email protected] for further research.

 
Note: When attaching files to emails, the process will vary depending on the email application being used. While you are composing the email, most applications will provide you with either an "Attach" button or Paper Clip Icon to click in order to attach a file. Once clicking this button/icon you must browse to the file you wish to attach and select it by either double clicking it or clicking it once and then clicking on the "Attach" button.

 
Thank you for providing me with above information in advanced. If necessary, I will provide further troubleshooting steps based on them in my next message.

 
I also would like to explain that if you are using a low speed Internet connection, alternatively, you may order a SP2 CD from the following address as well:

 
Order Windows XP Service Pack 2 on CD

http://www.microsoft.com/windowsxp/downloads/updates/sp2/cdorder/en_us/default.mspx

 
It may take approximately 4-6 weeks for shipping. During this period, I can only ask for your patience.

 
Please try the above steps and let me know the results at your earliest convenience. If there are any questions or concerns, feel free to let me know.

Gratefully Yours,
With expectations of Not dissapointing you.

Sincerely,
Jp