Desktop and Favorites

[Crono]

um i didnt know you could turn off the system restore but it finished and i dont think i can reverse it to my regular comp

[Crono]

btw if i install something in safe mode will it be on my orginal desktop.

[dl65]

Crono....... Are you scanning in safe mode ?

What anti virus scanner are you using ?

dl65  

[dl65]

Crono .....Dont install anything yet ...........ARe you still in safe mode ?

What viruses were found ?

dl65  

[Crono]

im using panda active scan involves no downloading but the infect rate has gone up to 7 one disinfected ya im still in safe mode

[Fed]

From what I've seen, system restore can do more harm than good, the one & only time I ever used it, it removed all my drivers. LOL

[Crono]

if i could find my computer staring cd i could start my comp all over.

[Fed]

Don't loose your nerve Crono!  

[dl65]

Crono...So where are we at now ....has the scan finished ? If so what did it find ?

Please list what it found

dl65  

[Crono]

Incident                      Status                        Location                                                                                                                                                                                                                                                        

Adware:Adware/nCase           No disinfected                C:\Temp\FLEOK                                                                                                                                                                                                                                                  
Adware:Adware/Apropos         No disinfected                C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Manager\Downloads\AlertSWF\contents\Exec.exe                                                                                                                                          
Virus:Trj/Pakes.V             Disinfected                   C:\WINDOWS\cpa.exe                                                                                                                                                                                                                                              
Adware:Adware/nCase           No disinfected                C:\WINDOWS\Downloaded Program Files\clientax.dll                                                                                                                                                                                                                
Adware:Adware/nCase           No disinfected                C:\WINDOWS\Downloaded Program Files\ClientAX.inf                                                                                                                                                                                                                
Adware:Adware/PopCapLoader    No disinfected                C:\WINDOWS\Downloaded Program Files\popcaploader.inf                                                                                                                                                                                                            
Spyware:Spyware/ISTbar        No disinfected                C:\WINDOWS\mgrsts.exe                                                                                                                                                                                                                                          

[dl65]

Crono.....Ok ...so we are making some headway.....
The Virus .....  Trj/Pakes.V     Has it been deleted ?
If yes ...can you go to Start / Control Panel /ADD /Remove programs ........ if you can get there and the list populates ( shows)   look and see if you see anything like ISTBAR .....if its there go over to the right  and click remove .....

let us know

dl65  

[Fed]

Start at the top I guess.
Bug #1 FLEOK
http://www3.cai.com/securityadvisor/pest/pest.aspx?id=453088286

[Fed]

Maybe starting at the top should be installing anti-virus, anti-spyware and a firewall?

Edit: As above on the fresh XP you install.  

[Crono]

i cant find that on my remove/ add programs how do i use that other way with that link

doing this all on safe mode

what i dont have a fresh xp

[Fed]

Crono, the link above is not a removal program, it's directions for manual removal.

At this point you really have to question if it's worth trying to remove all this stuff considering the previous problems with restore and ZA etc.

Maybe a fresh install of xp as you said earlier is the way to go.