I have windows XP. The scan disk does not work in normal mode or in

safe mode, or from the cmd prompt (chkdsk). The message says the volume

is being used by another process. The defragmenter does not work. The

system restore does not work. All restore points are gone. Can not

create a restore point. Antivirus does not detect any virus or malware.

System Tray does not show any unusual processes. I recently was

infected by something called win police pro. The antivirus removed it

but that is when I noticed the problem. No software or application

have been recently installed.

"Ed8757" <(E-Mail Removed)> wrote in message
news:9C530D30-4DD1-4358-931E-(E-Mail Removed)...
> I have windows XP. The scan disk does not work in normal mode or in
>
> safe mode, or from the cmd prompt (chkdsk). The message says the volume

I think you'll find chkdsk will only start when you next start up the
computer...

Ed8757 wrote:
> I have windows XP. The scan disk does not work in normal mode or in
>
> safe mode, or from the cmd prompt (chkdsk). The message says the volume
>
> is being used by another process. The defragmenter does not work. The
>
> system restore does not work. All restore points are gone. Can not
>
> create a restore point. Antivirus does not detect any virus or malware.
>
> System Tray does not show any unusual processes. I recently was
>
> infected by something called win police pro. The antivirus removed it
>
> but that is when I noticed the problem. No software or application
>
> have been recently installed.

It's time to back up your data and reinstall XP.

M

usually what happens is that when
an infection is removed by the
anti virus,

it cannot replace any system files
that became corrupted "or" zapped
into oblivion by the anti virus.

perhaps, it is also why there are no
system restore points, because they
became the host for the infections.

------------------

my suggestion is to run a repair
installation.

the method above will replace missing
or corrupted system files with genuine
ones from the xp cd.

however, there is a caveat to the above

the method can only work if you have
an xp cd that is the same version as the
o.s. on the hard drive.

in other words, a cd that is xp sp2 can
not repair an sp3 o.s.

----------------

keep us apprised of your stats.


--
db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
- @Hotmail.com
- nntp Postologist
~ "share the nirvana" - dbZen

~~~~~~~~~~~~~~~
>
>

"Ed8757" <(E-Mail Removed)> wrote in message
news:9C530D30-4DD1-4358-931E-(E-Mail Removed)...
> I have windows XP. The scan disk does not work in normal mode or in
>
> safe mode, or from the cmd prompt (chkdsk). The message says the volume
>
> is being used by another process. The defragmenter does not work. The
>
> system restore does not work. All restore points are gone. Can not
>
> create a restore point. Antivirus does not detect any virus or malware.
>
> System Tray does not show any unusual processes. I recently was
>
> infected by something called win police pro. The antivirus removed it
>
> but that is when I noticed the problem. No software or application
>
> have been recently installed.

In news:(E-Mail Removed),
db typed on Thu, 1 Oct 2009 10:24:31 -0500:
[...]
> my suggestion is to run a repair
> installation.
>
> the method above will replace missing
> or corrupted system files with genuine
> ones from the xp cd.
>
> however, there is a caveat to the above
>
> the method can only work if you have
> an xp cd that is the same version as the
> o.s. on the hard drive.
>
> in other words, a cd that is xp sp2 can
> not repair an sp3 o.s.

It is worse than that I understand. If you try to repair say XPSP2 with
XPSP2, but IE or WMP is a different version between the two. I hear tell
that you will toast that OS and it won't be good for anything. <sigh>

--
Bill
Asus EEE PC 702G8 ~ 2GB RAM ~ 16GB-SDHC
Windows XP SP2

On Oct 1, 9:59*am, Ed8757 <Ed8...@discussions.microsoft.com> wrote:
> I have windows XP. The scan disk does not work in normal mode or in
>
> safe mode, or from the cmd prompt (chkdsk). The message says the volume
>
> is being used by another process. The defragmenter does not work. The
>
> system restore does not work. All restore points are gone. Can not
>
> create a restore point. Antivirus does not detect any virus or malware.
>
> *System Tray does not show any unusual processes. *I recently was
>
> infected by something called win police pro. *The antivirus removed it
>
> but that is when I noticed the problem. *No software or application
>
> have been recently installed.

Reduce the number of questions, guessing and trying things that might
work by supplying more information:

Click Start, Run and in the box enter:

msinfo32

Click OK, and when the System Summary info appears, click Edit, Select
All, Copy and then paste
back here.

There would be some personal information (like System Name and User
Name) or whatever appears to
be only your business that you can delete from the paste.

Reduce the chances of malicious software by running some scans.

Download, install, update and do a full scan with these free malware
detection programs:

Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/

These can be uninstalled later if desired.

When the scans run clean, attack and resolve one problem at a time -
your pick.

Try to be more specific with your symptoms by replacing "does not
work" with what you see that you think you should not see or what you
do not see that you think you should see.

The problem is fixed. Everything works again. The Malwarebytes found a long
list of items and cleaned them. Why didn't My antivirus (Trend Micro)
prevent/find these?

"Jose" wrote:

> On Oct 1, 9:59 am, Ed8757 <Ed8...@discussions.microsoft.com> wrote:
> > I have windows XP. The scan disk does not work in normal mode or in
> >
> > safe mode, or from the cmd prompt (chkdsk). The message says the volume
> >
> > is being used by another process. The defragmenter does not work. The
> >
> > system restore does not work. All restore points are gone. Can not
> >
> > create a restore point. Antivirus does not detect any virus or malware.
> >
> > System Tray does not show any unusual processes. I recently was
> >
> > infected by something called win police pro. The antivirus removed it
> >
> > but that is when I noticed the problem. No software or application
> >
> > have been recently installed.
>
> Reduce the number of questions, guessing and trying things that might
> work by supplying more information:
>
> Click Start, Run and in the box enter:
>
> msinfo32
>
> Click OK, and when the System Summary info appears, click Edit, Select
> All, Copy and then paste
> back here.
>
> There would be some personal information (like System Name and User
> Name) or whatever appears to
> be only your business that you can delete from the paste.
>
> Reduce the chances of malicious software by running some scans.
>
> Download, install, update and do a full scan with these free malware
> detection programs:
>
> Malwarebytes (MBAM): http://malwarebytes.org/
> SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
>
> These can be uninstalled later if desired.
>
> When the scans run clean, attack and resolve one problem at a time -
> your pick.
>
> Try to be more specific with your symptoms by replacing "does not
> work" with what you see that you think you should not see or what you
> do not see that you think you should see.
>

Problem is fixed. Problem was caused by Rootkit.tdss. This thing is nasty.
This was left behind when Windows Police Pro malware was removed by the
antivirus (Trend Micro). The rootkit was carefully concealed so the
antivirus would not see it. The MalwareBytes software was able to remove
it.

"Ed8757" wrote:

> I have windows XP. The scan disk does not work in normal mode or in
>
> safe mode, or from the cmd prompt (chkdsk). The message says the volume
>
> is being used by another process. The defragmenter does not work. The
>
> system restore does not work. All restore points are gone. Can not
>
> create a restore point. Antivirus does not detect any virus or malware.
>
> System Tray does not show any unusual processes. I recently was
>
> infected by something called win police pro. The antivirus removed it
>
> but that is when I noticed the problem. No software or application
>
> have been recently installed.

On Oct 1, 7:10*pm, Ed8757 <Ed8...@discussions.microsoft.com> wrote:
> The problem is fixed. *Everything works again. *The Malwarebytes found a long
> list of items and cleaned them. *Why didn't My antivirus (Trend Micro)
> prevent/find these?
>
>
>
> "Jose" wrote:
> > On Oct 1, 9:59 am, Ed8757 <Ed8...@discussions.microsoft.com> wrote:
> > > I have windows XP. The scan disk does not work in normal mode or in
>
> > > safe mode, or from the cmd prompt (chkdsk). The message says the volume
>
> > > is being used by another process. The defragmenter does not work. The
>
> > > system restore does not work. All restore points are gone. Can not
>
> > > create a restore point. Antivirus does not detect any virus or malware.
>
> > > *System Tray does not show any unusual processes. *I recently was
>
> > > infected by something called win police pro. *The antivirus removedit
>
> > > but that is when I noticed the problem. *No software or application
>
> > > have been recently installed.
>
> > Reduce the number of questions, guessing and trying things that might
> > work by supplying more information:
>
> > Click Start, Run and in the box enter:
>
> > msinfo32
>
> > Click OK, and when the System Summary info appears, click Edit, Select
> > All, Copy and then paste
> > back here.
>
> > There would be some personal information (like System Name and User
> > Name) or whatever appears to
> > be only your business that you can delete from the paste.
>
> > Reduce the chances of malicious software by running some scans.
>
> > Download, install, update and do a full scan with these free malware
> > detection programs:
>
> > Malwarebytes (MBAM): *http://malwarebytes.org/
> > SUPERAntiSpyware: (SAS): *http://www.superantispyware.com/
>
> > These can be uninstalled later if desired.
>
> > When the scans run clean, attack and resolve one problem at a time -
> > your pick.
>
> > Try to be more specific with your symptoms by replacing "does not
> > work" with what you see that you think you should not see or what you
> > do not see that you think you should see.

It is nasty, but mostly just annoying.

There is no single program that seems to know about every kind of
malicious software - they change all the time!

It is definietly a good idea to have more than one in your malware
arsenal.

I have never used TM.

I have faith in MBAM, hence I start with it.

Glad it is working again - and no reinstall.

In
news:bac63818-273a-46ec-940b-(E-Mail Removed),
Jose typed on Thu, 1 Oct 2009 09:10:47 -0700 (PDT):
> Download, install, update and do a full scan with these free malware
> detection programs:
>
> Malwarebytes (MBAM): http://malwarebytes.org/
> SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
>
> These can be uninstalled later if desired.

Hi Jose, I never tried these two so I downloaded them and installed them
one at a time.

Malwarebytes found three files in an unused part by XP called
$RECYCLE.BIN. One file was called explorer.exe interesting enough. I
forgot what the other two were. All three files MBAM had called worms.
Oddly enough when it finished, I got no warning and it rebooted. This is
a very bad thing to do IMHO. It should warn you before it does this. I
could have had lots of unsaved work.

SUPERAntiSpyware found like 162 spyware cookies, which I see as no big
deal. Although it stated it needed to reboot to clear some of them out.
Ok, no problem. Rebooted and Windows hangs about 20 seconds into it.

Safe Mode works, but refuses to uninstall SUPERAntiSpyware and states
that the Windows Installer service may not be running. But it does allow
Malwarebytes to be uninstalled interesting enough. So the only way I
could get XP to boot normally is by renaming the folder that
SUPERAntiSpyware lives in. Once loaded, I renamed it back and then it
would uninstall.

I don't know about you? But both of these programs are acting like
malware themselves. And I am not that impressed. I am running Avast 4.8
and MS EWF is disabled.

--
Bill
Gateway MX6124 ('06 era) - Windows XP SP2