Repairing XP



mcp6453
07-09-2005, 11:55 PM
I just spent an hour cleaning off spyware and viruses from an XP Pro
machine. And I am not convinced I got it all, although Ad-Aware did
remove 1239 objects and EZTrust found two viruses. The problem now is
that 1) the machine will not pull an IP address via DHCP, and 2)
Internet Explorer cannot get to the Internet. I set the machine IP
address to static, which allowed me to ping the outside world, but still
no surf.

What should I do to try to get this machine back to normal? Options I'm
considering:

1) Installing HD in another machine and doing a spyware and virus scan.
2) SFC /scannow
3) Installing Firefox to see if IE or Windows Networking is hosed

Other suggestions are welcome. It will boot to the desktop. The only
thing that appears out of whack at the moment is Windows Networking/IE.

Carey Frisch [MVP]
07-09-2005, 11:55 PM
Perform a SFC and then a checkdisk.

Description of Windows XP System File Checker (Sfc.exe)
http://support.microsoft.com/default.aspx?scid=kb;en-us;310747&Product=winxp

How to Perform Disk Error Checking in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;315265&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

"mcp6453" wrote:

| I just spent an hour cleaning off spyware and viruses from an XP Pro
| machine. And I am not convinced I got it all, although Ad-Aware did
| remove 1239 objects and EZTrust found two viruses. The problem now is
| that 1) the machine will not pull an IP address via DHCP, and 2)
| Internet Explorer cannot get to the Internet. I set the machine IP
| address to static, which allowed me to ping the outside world, but still
| no surf.
|
| What should I do to try to get this machine back to normal? Options I'm
| considering:
|
| 1) Installing HD in another machine and doing a spyware and virus scan.
| 2) SFC /scannow
| 3) Installing Firefox to see if IE or Windows Networking is hosed
|
| Other suggestions are welcome. It will boot to the desktop. The only
| thing that appears out of whack at the moment is Windows Networking/IE.

Stephen
07-09-2005, 11:55 PM
mcp6453 wrote:
>> I just spent an hour cleaning off spyware and viruses from an XP Pro
>> machine. And I am not convinced I got it all, although Ad-Aware did
>> remove 1239 objects and EZTrust found two viruses. The problem now is
>> that 1) the machine will not pull an IP address via DHCP, and 2)
>> Internet Explorer cannot get to the Internet. I set the machine IP
>> address to static, which allowed me to ping the outside world, but
>> still no surf.
>>
>> What should I do to try to get this machine back to normal? Options
>> I'm considering:
>>
>> 1) Installing HD in another machine and doing a spyware and virus
>> scan. 2) SFC /scannow
>> 3) Installing Firefox to see if IE or Windows Networking is hosed
>>
>> Other suggestions are welcome. It will boot to the desktop. The only
>> thing that appears out of whack at the moment is Windows
>> Networking/IE.

You might want to do an inplace repair installation. Boot from theWindows
CD-ROM and choose the installation option. Then choose the Repair option.

After the installation is refreshed, you should send the thing to Windows
Update and make sure all the patches get re-installed.

It is best if you can upgrade Windows to Service Pack 2 level *before*
connecting it to the Internet if your Windows XP CD-ROM doesn't include SP2
already.. So this might mean getting the *network* version of service pack2
beforehand and burning it to disc so you can manually apply it before
connecting your computer to the Internet for the first time. Maybe a friend
can do it for you tonight or something or you can do it yourself with
another computer. If you can't do that, install SP2 online at Windows
update. But waste no time getting to Windows Update as the mean time for
infection for an unprotected Windows XP box pre SP2 is about 16 minutes.

Bobby
07-09-2005, 11:55 PM
Haven't I seen spyware effect some winsock/winstack?? settings. After
running you may lose your IE connection.

try this http://www.cexx.org/lspfix.htm


"Stephen" <stephen@online.nospam> wrote in message
news:%23lcB9JvZFHA.580@TK2MSFTNGP15.phx.gbl...
> mcp6453 wrote:
> >> I just spent an hour cleaning off spyware and viruses from an XP Pro
> >> machine. And I am not convinced I got it all, although Ad-Aware did
> >> remove 1239 objects and EZTrust found two viruses. The problem now is
> >> that 1) the machine will not pull an IP address via DHCP, and 2)
> >> Internet Explorer cannot get to the Internet. I set the machine IP
> >> address to static, which allowed me to ping the outside world, but
> >> still no surf.
> >>
> >> What should I do to try to get this machine back to normal? Options
> >> I'm considering:
> >>
> >> 1) Installing HD in another machine and doing a spyware and virus
> >> scan. 2) SFC /scannow
> >> 3) Installing Firefox to see if IE or Windows Networking is hosed
> >>
> >> Other suggestions are welcome. It will boot to the desktop. The only
> >> thing that appears out of whack at the moment is Windows
> >> Networking/IE.
>
> You might want to do an inplace repair installation. Boot from theWindows
> CD-ROM and choose the installation option. Then choose the Repair option.
>
> After the installation is refreshed, you should send the thing to Windows
> Update and make sure all the patches get re-installed.
>
> It is best if you can upgrade Windows to Service Pack 2 level *before*
> connecting it to the Internet if your Windows XP CD-ROM doesn't include
SP2
> already.. So this might mean getting the *network* version of service
pack2
> beforehand and burning it to disc so you can manually apply it before
> connecting your computer to the Internet for the first time. Maybe a
friend
> can do it for you tonight or something or you can do it yourself with
> another computer. If you can't do that, install SP2 online at Windows
> update. But waste no time getting to Windows Update as the mean time for
> infection for an unprotected Windows XP box pre SP2 is about 16 minutes.
>
>

mcp6453
07-09-2005, 11:55 PM
Carey Frisch [MVP] wrote:
> Perform a SFC and then a checkdisk.
>
> Description of Windows XP System File Checker (Sfc.exe)
> http://support.microsoft.com/default.aspx?scid=kb;en-us;310747&Product=winxp
>
> How to Perform Disk Error Checking in Windows XP
> http://support.microsoft.com/default.aspx?scid=kb;en-us;315265&Product=winxp
>

Thanka, all. The computer is a Dell, which means that the Windows "CD"
is on a recovery partition. How am I supposed to run SFC without a disk?
I have several copies of XPP on disk, but I have no way to know which
one would be the right version, unless I test them all. But then Dell
could have a completely different version.

mcp6453
07-09-2005, 11:55 PM
Bobby wrote:
> Haven't I seen spyware effect some winsock/winstack?? settings. After
> running you may lose your IE connection.
>
> try this http://www.cexx.org/lspfix.htm


That's the utility I was trying to remember. Thanks. That will be my
first try, out of curiosity, if nothing else. It worked for me once before.

mcp6453
07-09-2005, 11:55 PM
Stephen wrote:
>
> You might want to do an inplace repair installation. Boot from theWindows
> CD-ROM and choose the installation option. Then choose the Repair option.
>
> After the installation is refreshed, you should send the thing to Windows
> Update and make sure all the patches get re-installed.
>
> It is best if you can upgrade Windows to Service Pack 2 level *before*
> connecting it to the Internet if your Windows XP CD-ROM doesn't include SP2
> already.. So this might mean getting the *network* version of service pack2
> beforehand and burning it to disc so you can manually apply it before
> connecting your computer to the Internet for the first time. Maybe a friend
> can do it for you tonight or something or you can do it yourself with
> another computer. If you can't do that, install SP2 online at Windows
> update. But waste no time getting to Windows Update as the mean time for
> infection for an unprotected Windows XP box pre SP2 is about 16 minutes.

Stephen -- dumb question: Does the inplace repair preserve the programs
and data? I tried it once before and end up with a fresh install. I
never had a problem doing an inplace repair with Windows 98. Is it the
same idea?

GTS
07-09-2005, 11:55 PM
This is often caused by damage to the LSP/Winsock stack after Trojan and
spyware removal.

Try this (if running SP2) at a command prompt. netsh winsock reset catalog

If that fails see these 2 links for repair utilities.
http://www.spychecker.com/program/winsockxpfix.html
http://www.cexx.org/lspfix.htm
--

"mcp6453" <mcp6453@earthlink.net> wrote in message
news:e58ii$uZFHA.2768@tk2msftngp13.phx.gbl...
>I just spent an hour cleaning off spyware and viruses from an XP Pro
>machine. And I am not convinced I got it all, although Ad-Aware did remove
>1239 objects and EZTrust found two viruses. The problem now is that 1) the
>machine will not pull an IP address via DHCP, and 2) Internet Explorer
>cannot get to the Internet. I set the machine IP address to static, which
>allowed me to ping the outside world, but still no surf.
>
> What should I do to try to get this machine back to normal? Options I'm
> considering:
>
> 1) Installing HD in another machine and doing a spyware and virus scan.
> 2) SFC /scannow
> 3) Installing Firefox to see if IE or Windows Networking is hosed
>
> Other suggestions are welcome. It will boot to the desktop. The only thing
> that appears out of whack at the moment is Windows Networking/IE.


Repairing XP