Irene
07-10-2005, 01:43 AM
Hi Mike,
The fire wall has all ways been on and i honestly thought i was safe with
that and the norton, there is one born every day!!. I will run through the
rest of your instructions in the morning and let you know how i get on. I
have three progrms in my add/remove list which i know i did not add on and no
matter how many times i try and delete them it asks me to logg on to the web
to take them off? they are search extender,shopping wizard and home search
assistant. I am also having a problem removing messenger from my tool bar. it
just keeps popping back up each time i log on. Sorry i have no idea what sp2
is. Please don't apologise for trying to help. i have been grateful for every
ones input. That people are willing to help a stranger and a total beginer is
great. So thatnks to all who are trying to help
regards
Irene
"Mike Hall (MS-MVP)" wrote:
> Irene
>
> Normally, the processes clear up issues that you had.. contrary to the
> beliefs of some, none of the programs suggested make anything worse, and
> many run them without problems..
>
> You must set a firewall.. if you do not have one, enable the XP firewall for
> now.. it will stop any invasion from outside sources.. go to Properties for
> your internet connection, then click on the 'advanced' tab.. check the box
> to enable the firewall..
>
> Download the free version of Zonealarm.. http://www,zonealarm.com .. and set
> it running.. once in place, you can disable the XP firewall..
>
> Hijackthis is not the easiest program to use but it is effective.. there are
> forums where you can post the results and people there will diagnose from
> them.. unfortunately, it does leave the user having to edit registry, which
> can bring problems of its own..
>
> OK.. firewall in place?.. reboot the machine into safe mode by tapping the
> F8 key as Windows starts to load.. then run Adaware, Spybot and any other
> defence.. hopefully, they will detect any other hidden stuff..
>
> Restart the machine and see what happens.. look in the ADD/REMOVE programs
> list for anything that you do not think should be there.. make a list and
> report back with it..
>
> Another talked of SP2.. if you do not have SP2 installed on your system, do
> nothing about it until all of the bad things have been eradicated.. SP2 does
> not like being installed on a corrupted operating system.. we will deal with
> that as and when..
>
> I really must apologise for putting you through all of this.. in 99 cases
> out of 100, it works fine.. yours is obviously #100.. I feel that we will
> get through this, and both learn something.. I will add a section to my set
> piece on the importance of having a firewall running before any procedures
> are carried out.. it is a sad fact that people like you have to learn this
> way.. unfortunately, there are those out there who don't care as they send
> yet another invasive and destructive program to the unwary..
>
> If at any point, you feel that it would be better to start over, I will
> understand.. I was and still do hope that we can get over this without the
> need for you to clean install, and possibly lose anything important.. once
> the problems have gone, you will be way more aware, and will have the tools
> and the knowledge to at least stand your ground..
>
> If you choose to take it to a local repair guy, have it in writing that he
> will save as much data as possible before wiping your system, and do not pay
> him until you see your system working with everything in place..
>
> Thank you for being so patient and willing to try all that I suggested..
>
> Here's hoping..
>
> --
> Mike Hall
> MVP - Windows Shell/User
> http://dts-l.org/goodpost.htm
>
>
>
>
>
> "Irene" <Irene@discussions.microsoft.com> wrote in message
> news:C8B72C60-3A29-4E33-AE1E-A258ED4E5B9C@microsoft.com...
> >
> >
> > "Irene" wrote:
> >
> >> Hi Mike
> >> I have run through the list you gave me and tese are the results
> > stinger said i had nothing on my computer
> > housecall tren -i could not download it my computer said it would have to
> > shut down 3 times!
> > spybot found 3 problems and fixed them
> > ad aware found 23 critical objects and fixed them
> > microsoft found about blank
> > spyware blaster i enabled
> > i then went to add/remove programes but could not remove/search
> > extender/shopping wizzard/home search assistant(they just put up open the
> > internet connection when i clicked on them?
> > Hijack this i am not sure how to work
> > the shredder said that about blank is not present also that cool websearch
> > was not present. I then restarted and i got an error message which read
> > system fehler code 1400 invalid window handle.
> > i logged on to the internet and got two adds straight away also lots of
> > little windows telling me that programes were trying to change settings.
> > Is
> > the cure going to be worse than the ailment(only joking). It's obviously
> > not
> > quite right yet. can you help please.
> > Irene
> >> Irene
> >>
> >> "Mike Hall (MS-MVP)" wrote:
> >>
> >> > Irene
> >> >
> >> >
> >> > Please try the processes below.. and do them in order.. none of the
> >> > processes are beyond the abilities of a newbie user..
> >> >
> >> >
> >> >
> >> > You would be better advised to work on the problems rather than start
> >> > over
> >> > now, have the same things happen again, and then have to repeat the
> >> > process.. maintaining a computer should be done regularly, and will
> >> > only
> >> > take a few minutes per week..
> >> >
> >> >
> >> >
> >> > OK.. start by turning OFF the System Restore function.. click on the
> >> > Start
> >> > button.. right click on 'My Computer', then select Properties.. now
> >> > select
> >> > the 'System Restore' tab..
> >> >
> >> > Check the box "Turn off System Restore" or "Turn off System Restore on
> >> > all
> >> > drives".. now click on 'Apply'.. you will be asked if it is ok to lose
> >> > all
> >> > restore points.. answer YES to this.. now click on 'OK'
> >> >
> >> >
> >> >
> >> > Now to the removal process..
> >> >
> >> >
> >> >
> >> > Run a one shot virus remover.. I have found that McAfee Stinger works
> >> > for
> >> > people.. download and run it..
> >> >
> >> >
> >> >
> >> > http://vil.nai.com/vil/stinger/
> >> >
> >> >
> >> >
> >> > Another alternative is ..
> >> >
> >> >
> >> >
> >> > http://housecall.trendmicro.com/housecall/start_corp.asp
> >> >
> >> >
> >> >
> >> > Finish this process first..
> >> >
> >> >
> >> >
> >> > You will also need to download Spyware removal software.. Spybot and
> >> > Adaware
> >> > are available at these websites.. both are free.. download and run
> >> > them..
> >> > don't forget to check for updates after you have started them..
> >> >
> >> >
> >> >
> >> > http://www.safer-networking.org/en/index.html
> >> >
> >> >
> >> >
> >> > http://www.lavasoftusa.com/software/adaware/
> >> >
> >> >
> >> >
> >> > .... and this link is for the latest Microsoft helping..
> >> >
> >> >
> >> >
> >> > http://www.microsoft.com/athome/security/spyware/software/default.mspx
> >> >
> >> >
> >> >
> >> > Spybot has the ability to immunize a system, but there is better for
> >> > this
> >> > function, so download and run Spyware Blaster too.. again, check for
> >> > updates..
> >> >
> >> >
> >> >
> >> > http://www.javacoolsoftware.com/
> >> >
> >> >
> >> >
> >> > Time to turn ON System Restore.. this is obviously like turning it OFF,
> >> > so
> >> > just reverse the procedure..
> >> >
> >> >
> >> >
> >> > If you have any sense, you will now remove any programs that are known
> >> > carriers of all things bad.. some, like Patchou's MessengerPlus can be
> >> > installed such that the sponsor software does not get installed with
> >> > it..
> >> > the sponsor software, if left, will re-infect your system immediately
> >> > it is
> >> > run again.. use ADD/REMOVE PROGRAMS to un-install and then re-install,
> >> > taking care to check the box that gives you the option of NOT accepting
> >> > the
> >> > sponsor crap.. if a program installation process does not allow you to
> >> > do
> >> > this, forget about it.. leave it well alone..
> >> >
> >> >
> >> >
> >> > If you have had your Internet browser hijacked, that is to say, you get
> >> > redirected through a search engine NOT of your choosing, you will need
> >> > different tools..
> >> >
> >> >
> >> >
> >> > HijackThis is a popular and effective tool.. download it from here..
> >> >
> >> >
> >> >
> >> > http://www.spychecker.com/download/download_hijackthis.html
> >> >
> >> >
> >> >
> >> > CWShredder will eliminate CoolWebSearch and variants.. there is a free
> >> > download here..
> >> >
> >> >
> >> >
> >> > CWShredder..
> >> > http://www.intermute.com/spysubtract/cwshredder_download.html
> >> >
> >> >
> >> >
> >> > About:blank.. http://www.securiteam.com/securityreviews/5RP0L0UD5U.html
> >> > or
> >> >
> >> > http://www.pchell.com/support/aboutblank.shtml
> >> >
> >> >
> >> >
> >> > For other tools in the fight against spyware, visit this website and
> >> > bookmark it..
> >> >
> >> >
> >> >
> >> > http://www.pchell.com
> >> >
> >> >
> >> >
> >> > Mark Hasting has put much work into this site.. it is an invaluable
> >> > site,
> >> > both for reference and fix-its..
> >> >
> >> >
> >> >
> >> > You must also run a firewall and anti-virus program.. here are some
> >> > links
> >> > for you..
> >> >
> >> >
> >> >
> >> > http://www.mcafee.com
> >> >
> >> > http://www.symantec.com
> >> >
> >> > http://www.zonealarm.com
> >> >
> >> > http://www.kerio.com
> >> >
> >> > http://www.sygate.com
> >> >
> >> > http://www.avast.com
> >> >
> >> > http://www.grisoft.com
> >> >
> >> >
> >> >
> >> > If you do not run a firewall and anti-virus solution, you are leaving
> >> > yourself open to attacks of all kinds.. these two types of program are
> >> > your
> >> > first line of defence..
> >> >
> >> >
> >> >
> >> > So by now, your system should be in reasonable shape.. you will have
> >> > tools
> >> > 'locked and loaded', ready for weekly use against those who seek to
> >> > destroy
> >> > your pleasure.. incorporate these into a housekeeping policy that
> >> > includes
> >> > running Defragmenter and Disk Cleanup, and you will be able to easily
> >> > maintain your system..
> >> >
> >> >
> >> >
> >> > Please return to this thread and provide feedback.. it is the only way
> >> > that
> >> > helpers here can determine how effective the advice given has been..
> >> >
> >> >
The fire wall has all ways been on and i honestly thought i was safe with
that and the norton, there is one born every day!!. I will run through the
rest of your instructions in the morning and let you know how i get on. I
have three progrms in my add/remove list which i know i did not add on and no
matter how many times i try and delete them it asks me to logg on to the web
to take them off? they are search extender,shopping wizard and home search
assistant. I am also having a problem removing messenger from my tool bar. it
just keeps popping back up each time i log on. Sorry i have no idea what sp2
is. Please don't apologise for trying to help. i have been grateful for every
ones input. That people are willing to help a stranger and a total beginer is
great. So thatnks to all who are trying to help
regards
Irene
"Mike Hall (MS-MVP)" wrote:
> Irene
>
> Normally, the processes clear up issues that you had.. contrary to the
> beliefs of some, none of the programs suggested make anything worse, and
> many run them without problems..
>
> You must set a firewall.. if you do not have one, enable the XP firewall for
> now.. it will stop any invasion from outside sources.. go to Properties for
> your internet connection, then click on the 'advanced' tab.. check the box
> to enable the firewall..
>
> Download the free version of Zonealarm.. http://www,zonealarm.com .. and set
> it running.. once in place, you can disable the XP firewall..
>
> Hijackthis is not the easiest program to use but it is effective.. there are
> forums where you can post the results and people there will diagnose from
> them.. unfortunately, it does leave the user having to edit registry, which
> can bring problems of its own..
>
> OK.. firewall in place?.. reboot the machine into safe mode by tapping the
> F8 key as Windows starts to load.. then run Adaware, Spybot and any other
> defence.. hopefully, they will detect any other hidden stuff..
>
> Restart the machine and see what happens.. look in the ADD/REMOVE programs
> list for anything that you do not think should be there.. make a list and
> report back with it..
>
> Another talked of SP2.. if you do not have SP2 installed on your system, do
> nothing about it until all of the bad things have been eradicated.. SP2 does
> not like being installed on a corrupted operating system.. we will deal with
> that as and when..
>
> I really must apologise for putting you through all of this.. in 99 cases
> out of 100, it works fine.. yours is obviously #100.. I feel that we will
> get through this, and both learn something.. I will add a section to my set
> piece on the importance of having a firewall running before any procedures
> are carried out.. it is a sad fact that people like you have to learn this
> way.. unfortunately, there are those out there who don't care as they send
> yet another invasive and destructive program to the unwary..
>
> If at any point, you feel that it would be better to start over, I will
> understand.. I was and still do hope that we can get over this without the
> need for you to clean install, and possibly lose anything important.. once
> the problems have gone, you will be way more aware, and will have the tools
> and the knowledge to at least stand your ground..
>
> If you choose to take it to a local repair guy, have it in writing that he
> will save as much data as possible before wiping your system, and do not pay
> him until you see your system working with everything in place..
>
> Thank you for being so patient and willing to try all that I suggested..
>
> Here's hoping..
>
> --
> Mike Hall
> MVP - Windows Shell/User
> http://dts-l.org/goodpost.htm
>
>
>
>
>
> "Irene" <Irene@discussions.microsoft.com> wrote in message
> news:C8B72C60-3A29-4E33-AE1E-A258ED4E5B9C@microsoft.com...
> >
> >
> > "Irene" wrote:
> >
> >> Hi Mike
> >> I have run through the list you gave me and tese are the results
> > stinger said i had nothing on my computer
> > housecall tren -i could not download it my computer said it would have to
> > shut down 3 times!
> > spybot found 3 problems and fixed them
> > ad aware found 23 critical objects and fixed them
> > microsoft found about blank
> > spyware blaster i enabled
> > i then went to add/remove programes but could not remove/search
> > extender/shopping wizzard/home search assistant(they just put up open the
> > internet connection when i clicked on them?
> > Hijack this i am not sure how to work
> > the shredder said that about blank is not present also that cool websearch
> > was not present. I then restarted and i got an error message which read
> > system fehler code 1400 invalid window handle.
> > i logged on to the internet and got two adds straight away also lots of
> > little windows telling me that programes were trying to change settings.
> > Is
> > the cure going to be worse than the ailment(only joking). It's obviously
> > not
> > quite right yet. can you help please.
> > Irene
> >> Irene
> >>
> >> "Mike Hall (MS-MVP)" wrote:
> >>
> >> > Irene
> >> >
> >> >
> >> > Please try the processes below.. and do them in order.. none of the
> >> > processes are beyond the abilities of a newbie user..
> >> >
> >> >
> >> >
> >> > You would be better advised to work on the problems rather than start
> >> > over
> >> > now, have the same things happen again, and then have to repeat the
> >> > process.. maintaining a computer should be done regularly, and will
> >> > only
> >> > take a few minutes per week..
> >> >
> >> >
> >> >
> >> > OK.. start by turning OFF the System Restore function.. click on the
> >> > Start
> >> > button.. right click on 'My Computer', then select Properties.. now
> >> > select
> >> > the 'System Restore' tab..
> >> >
> >> > Check the box "Turn off System Restore" or "Turn off System Restore on
> >> > all
> >> > drives".. now click on 'Apply'.. you will be asked if it is ok to lose
> >> > all
> >> > restore points.. answer YES to this.. now click on 'OK'
> >> >
> >> >
> >> >
> >> > Now to the removal process..
> >> >
> >> >
> >> >
> >> > Run a one shot virus remover.. I have found that McAfee Stinger works
> >> > for
> >> > people.. download and run it..
> >> >
> >> >
> >> >
> >> > http://vil.nai.com/vil/stinger/
> >> >
> >> >
> >> >
> >> > Another alternative is ..
> >> >
> >> >
> >> >
> >> > http://housecall.trendmicro.com/housecall/start_corp.asp
> >> >
> >> >
> >> >
> >> > Finish this process first..
> >> >
> >> >
> >> >
> >> > You will also need to download Spyware removal software.. Spybot and
> >> > Adaware
> >> > are available at these websites.. both are free.. download and run
> >> > them..
> >> > don't forget to check for updates after you have started them..
> >> >
> >> >
> >> >
> >> > http://www.safer-networking.org/en/index.html
> >> >
> >> >
> >> >
> >> > http://www.lavasoftusa.com/software/adaware/
> >> >
> >> >
> >> >
> >> > .... and this link is for the latest Microsoft helping..
> >> >
> >> >
> >> >
> >> > http://www.microsoft.com/athome/security/spyware/software/default.mspx
> >> >
> >> >
> >> >
> >> > Spybot has the ability to immunize a system, but there is better for
> >> > this
> >> > function, so download and run Spyware Blaster too.. again, check for
> >> > updates..
> >> >
> >> >
> >> >
> >> > http://www.javacoolsoftware.com/
> >> >
> >> >
> >> >
> >> > Time to turn ON System Restore.. this is obviously like turning it OFF,
> >> > so
> >> > just reverse the procedure..
> >> >
> >> >
> >> >
> >> > If you have any sense, you will now remove any programs that are known
> >> > carriers of all things bad.. some, like Patchou's MessengerPlus can be
> >> > installed such that the sponsor software does not get installed with
> >> > it..
> >> > the sponsor software, if left, will re-infect your system immediately
> >> > it is
> >> > run again.. use ADD/REMOVE PROGRAMS to un-install and then re-install,
> >> > taking care to check the box that gives you the option of NOT accepting
> >> > the
> >> > sponsor crap.. if a program installation process does not allow you to
> >> > do
> >> > this, forget about it.. leave it well alone..
> >> >
> >> >
> >> >
> >> > If you have had your Internet browser hijacked, that is to say, you get
> >> > redirected through a search engine NOT of your choosing, you will need
> >> > different tools..
> >> >
> >> >
> >> >
> >> > HijackThis is a popular and effective tool.. download it from here..
> >> >
> >> >
> >> >
> >> > http://www.spychecker.com/download/download_hijackthis.html
> >> >
> >> >
> >> >
> >> > CWShredder will eliminate CoolWebSearch and variants.. there is a free
> >> > download here..
> >> >
> >> >
> >> >
> >> > CWShredder..
> >> > http://www.intermute.com/spysubtract/cwshredder_download.html
> >> >
> >> >
> >> >
> >> > About:blank.. http://www.securiteam.com/securityreviews/5RP0L0UD5U.html
> >> > or
> >> >
> >> > http://www.pchell.com/support/aboutblank.shtml
> >> >
> >> >
> >> >
> >> > For other tools in the fight against spyware, visit this website and
> >> > bookmark it..
> >> >
> >> >
> >> >
> >> > http://www.pchell.com
> >> >
> >> >
> >> >
> >> > Mark Hasting has put much work into this site.. it is an invaluable
> >> > site,
> >> > both for reference and fix-its..
> >> >
> >> >
> >> >
> >> > You must also run a firewall and anti-virus program.. here are some
> >> > links
> >> > for you..
> >> >
> >> >
> >> >
> >> > http://www.mcafee.com
> >> >
> >> > http://www.symantec.com
> >> >
> >> > http://www.zonealarm.com
> >> >
> >> > http://www.kerio.com
> >> >
> >> > http://www.sygate.com
> >> >
> >> > http://www.avast.com
> >> >
> >> > http://www.grisoft.com
> >> >
> >> >
> >> >
> >> > If you do not run a firewall and anti-virus solution, you are leaving
> >> > yourself open to attacks of all kinds.. these two types of program are
> >> > your
> >> > first line of defence..
> >> >
> >> >
> >> >
> >> > So by now, your system should be in reasonable shape.. you will have
> >> > tools
> >> > 'locked and loaded', ready for weekly use against those who seek to
> >> > destroy
> >> > your pleasure.. incorporate these into a housekeeping policy that
> >> > includes
> >> > running Defragmenter and Disk Cleanup, and you will be able to easily
> >> > maintain your system..
> >> >
> >> >
> >> >
> >> > Please return to this thread and provide feedback.. it is the only way
> >> > that
> >> > helpers here can determine how effective the advice given has been..
> >> >
> >> >