SP2 Problems



ST
07-09-2005, 11:24 PM
Since we installed SP2 (so that we can install an IPOD,) from the disk, we
have had the following problems.

1. Can no longer open Internet Explorer from the desktop. Have to go to
the Start Button and start it from there.
2. Internet pop-up ads have increased 300%, getting over 20 in 1/2 hour
alone.
3. When I run Ad-aware, a small screen come up dsaying the system is
shutting down in 58 seconds. and the clicker counts down, and the sytem
shuts down.
4. When I have been able to get past this system shutdown, and the ad-aware
completes it scan, and I remove all critical items, I then get a message that
I now have "limited or no conectivity".

The first time this limited or no conectivity problem appeared, I was back
and forth between my ISP (Comcast) and Microsoft, which after 5 hours (2
seperate phone calls) I was told to run the "netsh winsock reset" which
restored my internet upon reboot. Now it has happened again, and will
attempt this fix again tonight when I get home.

Need help with these problems....

da_test
07-09-2005, 11:24 PM
On Thu, 12 May 2005 16:35:12 -0700, "ST"
<ST@discussions.microsoft.com> wrote:

>Since we installed SP2 (so that we can install an IPOD,) from the disk, we
>have had the following problems.
>
>1. Can no longer open Internet Explorer from the desktop. Have to go to
>the Start Button and start it from there.
>2. Internet pop-up ads have increased 300%, getting over 20 in 1/2 hour
>alone.
>3. When I run Ad-aware, a small screen come up dsaying the system is
>shutting down in 58 seconds. and the clicker counts down, and the sytem
>shuts down.
>4. When I have been able to get past this system shutdown, and the ad-aware
>completes it scan, and I remove all critical items, I then get a message that
>I now have "limited or no conectivity".
>
>The first time this limited or no conectivity problem appeared, I was back
>and forth between my ISP (Comcast) and Microsoft, which after 5 hours (2
>seperate phone calls) I was told to run the "netsh winsock reset" which
>restored my internet upon reboot. Now it has happened again, and will
>attempt this fix again tonight when I get home.
>
>Need help with these problems....
I suspect you still have malware on your machine.
Goto http://www.spywarewarrior.com/index.php
register with them and post a message in their
"spyware and malware" forum.

They'll probably ask yoiu to do a "hijackthis" log.
They have the experts there to analyze it for you.

Dave

Maurice N ~ MVP
07-09-2005, 11:24 PM
ST wrote:
> Since we installed SP2 (so that we can install an IPOD,) from the
> disk, we have had the following problems.
>
> 1. Can no longer open Internet Explorer from the desktop. Have to
> go to the Start Button and start it from there.
> 2. Internet pop-up ads have increased 300%, getting over 20 in 1/2
> hour alone.
> 3. When I run Ad-aware, a small screen come up dsaying the system is
> shutting down in 58 seconds. and the clicker counts down, and the
> sytem shuts down.
> 4. When I have been able to get past this system shutdown, and the
> ad-aware completes it scan, and I remove all critical items, I then
> get a message that I now have "limited or no conectivity".
>
> The first time this limited or no conectivity problem appeared, I was
> back and forth between my ISP (Comcast) and Microsoft, which after 5
> hours (2 seperate phone calls) I was told to run the "netsh winsock
> reset" which restored my internet upon reboot. Now it has happened
> again, and will attempt this fix again tonight when I get home.
>
> Need help with these problems....

Your system *is* infested ! I'm going to point to an article at Aumha on ways to cleanup parasites.
Follow the quick-fix protocol.
http://aumha.org/a/quickfix.htm

--
Maurice N
MVP Windows - Shell / User
-----

Yves Leclerc
07-09-2005, 11:25 PM
As it been suggested, your system was "infested" with spywares/malwares
BEFORE you installed the SP2.

Run:

Ad Aware SE
Spybot: Search and Destroy 1.3
CWShredder

Microsoft AntiSpyware Beta

so as to clear out the spywares. Then, activated the Pop-Up blocker in IE.

Locate, install and run Winsockxpfix.exe. This will rebuild your TCP/IP
protocol so as to correct the "limited or no conectivity" problem.


If after these steps, you still have problems, run HiJackThis and post to
the spyware forum mentioned before.


"ST" <ST@discussions.microsoft.com> wrote in message
news:12C92ACA-9564-4D9A-B6AE-9932CC52AB5E@microsoft.com...
> Since we installed SP2 (so that we can install an IPOD,) from the disk, we
> have had the following problems.
>
> 1. Can no longer open Internet Explorer from the desktop. Have to go to
> the Start Button and start it from there.
> 2. Internet pop-up ads have increased 300%, getting over 20 in 1/2 hour
> alone.
> 3. When I run Ad-aware, a small screen come up dsaying the system is
> shutting down in 58 seconds. and the clicker counts down, and the sytem
> shuts down.
> 4. When I have been able to get past this system shutdown, and the
> ad-aware
> completes it scan, and I remove all critical items, I then get a message
> that
> I now have "limited or no conectivity".
>
> The first time this limited or no conectivity problem appeared, I was back
> and forth between my ISP (Comcast) and Microsoft, which after 5 hours (2
> seperate phone calls) I was told to run the "netsh winsock reset" which
> restored my internet upon reboot. Now it has happened again, and will
> attempt this fix again tonight when I get home.
>
> Need help with these problems....

ST
07-09-2005, 11:26 PM
This morning I began the cleanup process tyhat has been recommended. I have
found a program labeled "weboffer, that will not delete itself even after I
have pressed the change/remove button

Also a small box appears in the start up describing problems with another
program called BMan, but can not find this in my list of programs in order
to remove it?

Maurice N ~ MVP
07-09-2005, 11:29 PM
Here are 2 tools from SysInternals that may help you get an insight on what's running.
Autoruns (checks & shows what's set to auto-load at Windows startup)
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml

Process Explorer http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

--
Maurice N
MVP Windows - Shell / User
-----

"ST" wrote
> This morning I began the cleanup process tyhat has been recommended. I have
> found a program labeled "weboffer, that will not delete itself even after I
> have pressed the change/remove button
>
> Also a small box appears in the start up describing problems with another
> program called BMan, but can not find this in my list of programs in order
> to remove it?
>

Rock
07-09-2005, 11:31 PM
ST wrote:

> This morning I began the cleanup process tyhat has been recommended. I have
> found a program labeled "weboffer, that will not delete itself even after I
> have pressed the change/remove button
>
> Also a small box appears in the start up describing problems with another
> program called BMan, but can not find this in my list of programs in order
> to remove it?
>

Do a thorough check for malware on the system.

Richard Harper’s Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

Run these programs to check for spyware/malware. After installing
update them, then boot into safe mode and run them. You should update
and run them weekly.

Cwshredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Ad-aware SE
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

Pest Patrol Free Pest Scanner
http://store.ca.com/dr/v2/ec_main.entry25?page=FindOutWhosWatchingYou&client=ComputerAssociates&sid=35715

If you’re still having problems after running these then run HijackThis
and post the log to one of the specialty forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm

--
Rock
MS MVP Windows - Shell/User


SP2 Problems