Many problems

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have many problems with XP home edition. I'm not on a network and I don't
have Oracle.
Here are the latetest:
System Event ID 4, E100B, Warning
System Event ID, 4202, Tcpip, Error
The computer freezes when I try to disconnect from the internet. I have to
turn off the computer.
I can't install my Scanner. The programs install, but the hardware won't.
I have the CD.
On the system tray, there is an X that says, Local Area Connection. A
Network Cable is Unplugged, when I point to the X. (I'm not on a network.
This is a home computer.)
Can you help?
 
I have many problems with XP home edition. I'm not on a network and I don't
have Oracle.
Here are the latetest:
System Event ID 4, E100B, Warning
System Event ID, 4202, Tcpip, Error
The computer freezes when I try to disconnect from the internet. I have to
turn off the computer.
I can't install my Scanner. The programs install, but the hardware won't.
I have the CD.
On the system tray, there is an X that says, Local Area Connection. A
Network Cable is Unplugged, when I point to the X. (I'm not on a network.
This is a home computer.)
Can you help?
Click to expand...

How does the computer connect to the internet? And what protection do you have
against the bad stuff that's out there?

Freezing when you disconnect from the internet sounds like an infection of some
type.

Do you have the Windows XP firewall (SP2? pre-SP2?) enabled? If not, enable it
immediately.

How current is your virus protection? Try one or more of these free online
virus scans, which should complement your current protection:
<http://www.bitdefender.com/scan/license.php>
<http://www.pandasoftware.com/activescan>
<http://www.ravantivirus.com/scan/>
<http://security.symantec.com/ssc/home.asp>
<http://housecall.trendmicro.com/housecall/start_corp.asp>

Now check for, and learn to defend against, additional problems - adware,
crapware, spyware.

Start by downloading each of the following additional free tools:
AdAware <http://www.lavasoftusa.com/>
CWShredder <http://www.majorgeeks.com/download4086.html>
HijackThis <http://www.majorgeeks.com/download.php?det=3155>
LSP-Fix and WinsockXPFix <http://www.cexx.org/lspfix.htm>
Spybot S&D <http://www.safer-networking.org/index.php?page=download>
Stinger <http://us.mcafee.com/virusInfo/default.asp?id=stinger>
TrendMicro Engine <http://www.trendmicro.com/download/dcs.asp>
TrendMicro Signatures <http://www.trendmicro.com/download/pattern.asp>

Create a separate folder for HijackThis, such as C:\HijackThis - copy the
downloaded file there. Create a separate folder for the two TrendMicro files,
such as C:\TrendMicro - copy the downloaded files there (unzipped if necessary).
AdAware, CWShredder, and Spybot S&D have install routines - run them. The other
downloaded programs can be copied into, and run from, any convenient folder.

First, run Stinger. Have it remove any problems found.

Next, close all Internet Explorer and Outlook windows, and run CWShredder. Have
it fix all problems found.

Next, disable System Restore.
<http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm>
Boot your computer into Safe Mode.
http://support.microsoft.com/?id=315222
Run C:\TrendMicro\Sysclean.com. Delete any infectors found.
Reboot your computer, and re enable System Restore.

Next, run AdAware. First update it ("Check for updates now"), configure for
full scan (<http://forums.spywareinfo.com/index.php?showtopic=11150>), then
scan. When scanning finishes, remove all Critical Objects found.

Next, run Spybot S&D. First update it ("Search for updates"), then run a scan
("Check for problems"). Trust Spybot, and delete everything ("Fix Problems")
that is displayed in Red.

Then, run HijackThis ("Scan"). Do NOT make any changes immediately. Save the
HJT Log.
<http://forums.spywareinfo.com/index.php?showtopic=227>
<http://forums.spywareinfo.com/index.php?showtopic=11150>

Finally, have your HJT log interpreted by experts at one or more of the
following security forums (and please post a link to your forum posts, here):
Aumha: <http://forum.aumha.org/index.php>
Net-Integration: <http://forums.net-integration.net/>
Spyware Info: <http://forums.spywareinfo.com/>
Spyware Warrior: <http://spywarewarrior.com/index.php>
Tom Coyote: <http://forums.tomcoyote.org/>

If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix and / or WinsockXPFIx.

Finally, improve your chances for the future.

Harden your browser. There are various websites which will check for
vulnerabilities, here are three which I use.
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/

Block Internet Explorer ActiveX scripting from hostile websites (Restricted
Zone).
<https://netfiles.uiuc.edu/ehowes/www/main.htm> (IE-SpyAd)

Block known dangerous scripts from installing.
<http://www.javacoolsoftware.com/spywareblaster.html>

Block known spyware from installing.
<http://www.javacoolsoftware.com/spywareguard.html>

Make sure that the spyware detection / protection products that you use are
reliable:
http://www.spywarewarrior.com/rogue_anti-spyware.htm

Harden your operating system. Check at least monthly for security updates.
http://windowsupdate.microsoft.com/

Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
use:
http://www.accs-net.com/hosts/get_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm
(The third is included, and updated, with Spybot (see above)).

Maintain your Hosts file (merge / eliminate duplicate entries) with:
eDexter <http://www.accs-net.com/hosts/get_hosts.html>
Hostess <http://accs-net.com/hostess/>

Secure your operating system, and applications. Don't use, or leave activated,
any accounts with names or passwords with trivial (guessable) values. Don't use
an account with administrative authority, except when you're intentionally doing
administrative tasks.

Use common sense. Yours. Don't install software based upon advice from unknown
sources. Don't install free software, without researching it carefully. Don't
open email unless you know who it's from, and how and why it was sent.

Educate yourself. Know what the risks are. Stay informed. Read Usenet, and
various web pages that discuss security problems. Check the logs from the
security products that you use regularly, look for things that don't belong, and
take action when necessary.

How did I get infected in the first place?
http://forums.net-integration.net/index.php?showtopic=3051
Essential tips for infection prevention
http://forums.spywareinfo.com/index.php?showtopic=24339

Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Dear Chuck, Thank you for responding to my question. I connect to the
internet with my phone line. The only things I've ever downloaded over the
internet (other than something from Microsoft) are those programs that scan
for viruses. They don't find anything except "cookies", and I delete the
cookies. I have McAfee virus protection. I don't think I have Service Pack
2. I'm computer illiterate and don't quite understand what you are saying
about creating a folder (I know how to make a folder, I just wouldn't know
what exactly what I should put in it and what to do then). If I run one of
the programs to find adware on my computer, should I buy the program over the
internet in order to remove the adware? I'll look into the links you listed
that I haven't already downloaded and see if I can fingure out if there is
anything I can still do. Chuck, why don't my siblings have any problems with
adware and viruses--and they don't have any antivirus protection like McAfee?
Does this only happen with XP? I never had these types of problems until I
got XP!
 
Dear Chuck, Thank you for responding to my question. I connect to the
internet with my phone line. The only things I've ever downloaded over the
internet (other than something from Microsoft) are those programs that scan
for viruses. They don't find anything except "cookies", and I delete the
cookies. I have McAfee virus protection. I don't think I have Service Pack
2. I'm computer illiterate and don't quite understand what you are saying
about creating a folder (I know how to make a folder, I just wouldn't know
what exactly what I should put in it and what to do then). If I run one of
the programs to find adware on my computer, should I buy the program over the
internet in order to remove the adware? I'll look into the links you listed
that I haven't already downloaded and see if I can fingure out if there is
anything I can still do. Chuck, why don't my siblings have any problems with
adware and viruses--and they don't have any antivirus protection like McAfee?
Does this only happen with XP? I never had these types of problems until I
got XP!
Click to expand...

Everybody has problems with adware and viruses. Some folks just don't know
about their problems.

Some people buy a new computer because the old one has "worn out". Don't laugh
- this is the truth. But "worn out" is not an irreversible condition - after I
clean out all of the spyware and viruses, it's like new again. I cleaned my
sister's computer (her son uses it too) last year - and removed over 500 traces
of adware / spyware / viruses. She wasn't using any of the protective tools
that I recommended to you, but she is now.

Spyware is written to not be detectable - and some you can't detect unless you
look very carefully, which is why I recommended a dozen different detection /
protection tools. Your sort of complaint is heard very frequently here, and it
usually turns out to be an adware / spyware / virus infection.

All of the tools I recommend are free. You don't have to do anything but
download them. Some, like AdAware and Spybot, install themselves - you just
double click on the file you downloaded. Others, like HijackThis, are written
very simply so 1) They can be easily downloaded, and 2) You see exactly what
you're installing: 1 module - and you know that's all you're installing.

So, with HijackThis, you create the new folder C:\HijackThis. Then you copy
hijackthis.exe into C:\HijackThis. You need to do this because HijackThis
creates files each time it runs, and the files need to go into a dedicated
folder. You can put a shortcut to HijackThis on the desktop, or the Start menu,
if you like. Or you can run hijackthis.exe by double clicking on the entry in
Windows Explorer, in C:\HijackThis. That's your choice.

Have you worked with shortcuts yet? They allow you to have a file in one place,
like have HijackThis.exe in C:\HijackThis, but have an entry (shortcut) for it
on your desktop. After you copy hijackThis.exe into C:\HijackThis, you Right
Click on c:\hijackthis\hijackthis.exe, and select "Create shortcut". You can
rename the shortcut to something shorter, like HijackThis, by Right Clicking on
the shortcut and selecting "Rename". Then, you can copy the shortcut to your
desktop, by Copy - Paste. Whenever you want to run HijackThis, you click on the
desktop shortcut.

So, take a look at the instructions I provided. Try one, ask questions, get
comfortable with it. Then try another.

Oh yeah, if you're running Windows XP, you can AND SHOULD enable Internet
Connection Firewall (ICF) (pre-SP2) or Windows Firewall (WF) (SP2). Please do
that first. In Help and Support (from the Start menu), search on "enable ICF"
for instructions. That is absolutely the first thing you should do.

When you're done, you can help your siblings. I can guarantee you their
computers need help too.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Hi Chuck,
Thank you for the instructions on how to enable a firewall. I do know how
to create a shortcut, but what I've run into in the past is that I run those
programs (not the ones that you mentioned--yet), and they find some adware
that are listed as "low" problems, but I don't know which ones I'm suppose to
delete because some of them say they are from Microsoft. I guess I'm afraid
to do anything without step-by-step directions.
I don't think I have that Service Pack 2 on my computer. Should I download
it? I've seen so many e-mails saying that people have problems after
installing it, so I haven't done so yet.
I don't have the oportunity to be on my computer for very long, so it may
take me a little while to try to enable the firewall, but please check for my
response occasionally. Thanks for all you help.
 
Hi Chuck,
Thank you for the instructions on how to enable a firewall. I do know how
to create a shortcut, but what I've run into in the past is that I run those
programs (not the ones that you mentioned--yet), and they find some adware
that are listed as "low" problems, but I don't know which ones I'm suppose to
delete because some of them say they are from Microsoft. I guess I'm afraid
to do anything without step-by-step directions.
I don't think I have that Service Pack 2 on my computer. Should I download
it? I've seen so many e-mails saying that people have problems after
installing it, so I haven't done so yet.
I don't have the oportunity to be on my computer for very long, so it may
take me a little while to try to enable the firewall, but please check for my
response occasionally. Thanks for all you help.
Click to expand...

SP2 is a good idea for many reasons, if installed correctly, but will not fix
all possible security problems. The most useful accessory is a well-tuned
interface between the chair and keyboard.

As far as the adware FUD, I sympathise with you. Uncertainty about adware /
spyware detections is always a problem.

Reading alt.comp.virus, alt.computer.security, alt.privacy.spyware,
microsoft.public.security, and microsoft.public.security.virus is a good way to
stay informed. Also CERT at <http://www.cert.org/>, and SANS at
<http://isc.sans.org/>. And a very active and reliable forum is SpywareInfo at
<http://forums.spywareinfo.com/>. And the BBR/DSLR Security forum at
<http://www.dslreports.com/forum/security>.

As far as knowing what to delete, that will only come with experience. Find
products that you can trust, and use them. The tools that I suggested -
AdAware, HijackThis, and Spybot, will all keep backups of anything that they
remove. Of course, the experts at SWI Forums (and others) will help you in
diagnosing problems identified by HijackThis (please don't use HJT without
expert advice).

With proper preparation, SP2 is not a problem. The complaints that you see
represent a very small percentage of the total number of SP2 installations that
go without any problems. Many forums run a poll from time to time: "Have you
implemented SP2 yet, and did you have problems?", and the great majority of the
answers that you'll see say "No problems".

However, most security experts also advise that the SP2 firewall, while better
than nothing, does not constitute a reason of its own to implement SP2. Third
party firewalls, like Kerio, Sygate, or Zone Alarm, are far superior to WF, and
work with multiple versions and SP levels of Windows.

Whatever you do, please do something. Immediately. On many ISP services, you
can be infected by the worm of the month within 2 MINUTES of connecting to their
service, if your computer is otherwise unsecured. Once infected, your computer
can be used to infect others, to serve as a tool to attack others, or for spam
distribution. And occasionally (too rarely, unfortunately) owners of infected
computers, when identified, may lose their internet service without warning.

I'll keep an eye on this thread, so please post here with any more concerns.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
 
Hi again Chuck,
I hope you saw my other 2 questions--I clicked "Reply" on them. I hate to
be such a pain in the neck, but the only reasons I'm giving this a try is
because I have you to ask questions to when I don't know what to do.
The next question:
I downloaded TrendMicro Engine, but the page said, "...must download the
latest pattern file into the same folder...". What do I do?
Also, do I download the "DCT Control Release"?
 
Hi again Chuck,
I hope you saw my other 2 questions--I clicked "Reply" on them. I hate to
be such a pain in the neck, but the only reasons I'm giving this a try is
because I have you to ask questions to when I don't know what to do.
The next question:
I downloaded TrendMicro Engine, but the page said, "...must download the
latest pattern file into the same folder...". What do I do?
Also, do I download the "DCT Control Release"?
Click to expand...

Questions are good. That's how we all learn. Sometimes I learn my instructions
aren't correct. %-}

Following the Trend Micro instructions on:
http://www.trendmicro.com/download/dcs.asp,
a non-TM customer must download from:
http://www.trendmicro.com/ftp/products/tsc/sysclean.com

Then, you read the further instructions at:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
then download the pattern file from:
http://www.trendmicro.com/download/pattern.asp
Pattern 2.246 (the latest) becoming:
http://www.trendmicro.com/ftp/products/pattern/lpt246.zip
and place all components in the same folder, unzipped when necessary.
They don't make it easy do they? #-]

I don't know what's up with WinsockXPFix. Try one of the other Winsock
cleaners. This is all freeware stuff, and not too organised.

As far as CoolWebShredder, http://www.majorgeeks.com/download4086.html gives you
a choice of 5 download sites, 4 MG and 1 PM. Just pick one. MajorGeeks seems
to be the best organised freeware distribution site right now. In a couple
months, another will probably spring up. Read alt.privacy.spyware occasionally,
and get a feel for how grass-roots the anti-spyware movement is.

Cheers,
Chuck
 
You can get winsockxpfix here..
http://www.spychecker.com/program/winsockxpfix.html

Chuck said:
Hi again Chuck,
I hope you saw my other 2 questions--I clicked "Reply" on them. I hate to
be such a pain in the neck, but the only reasons I'm giving this a try is
because I have you to ask questions to when I don't know what to do.
The next question:
I downloaded TrendMicro Engine, but the page said, "...must download the
latest pattern file into the same folder...". What do I do?
Also, do I download the "DCT Control Release"?
Click to expand...

Questions are good. That's how we all learn. Sometimes I learn my
instructions
aren't correct. %-}

Following the Trend Micro instructions on:
http://www.trendmicro.com/download/dcs.asp,
a non-TM customer must download from:
http://www.trendmicro.com/ftp/products/tsc/sysclean.com

Then, you read the further instructions at:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
then download the pattern file from:
http://www.trendmicro.com/download/pattern.asp
Pattern 2.246 (the latest) becoming:
http://www.trendmicro.com/ftp/products/pattern/lpt246.zip
and place all components in the same folder, unzipped when necessary.
They don't make it easy do they? #-]

I don't know what's up with WinsockXPFix. Try one of the other Winsock
cleaners. This is all freeware stuff, and not too organised.

As far as CoolWebShredder, http://www.majorgeeks.com/download4086.html
gives you
a choice of 5 download sites, 4 MG and 1 PM. Just pick one. MajorGeeks
seems
to be the best organised freeware distribution site right now. In a
couple
months, another will probably spring up. Read alt.privacy.spyware
occasionally,
and get a feel for how grass-roots the anti-spyware movement is.

Cheers,
Chuck
Click to expand...
 
Hi Chuck,
Again I'm going to need step-by-step instructions. I downloaded STINGER,
and the instructions said to, "Disable System Restore" before running it. It
said that disabling System Restore would, "erase all my Restore Points". I
was afraid to do that because I have been working for months with Dell
trying to get my computer to work properly, and we have re-installed my
operating system three times. As we did that, new problems would start
happening. I have not been able to install all my software yet, but I think
I have one Restore Point that was OK before I installed some software. So, I
ran Stinger without disabling my System Restore. I can't figure out how to
REMOVE what it found. It doesn't give an option to do that where it LISTS
what it found. I went into PREFERENCES and checked REMOVE and ran it again.
After I did that, it didn't say it had removed anything, so I ran it another
time to see if my computer was clean. When I clicked on LIST, the same list
of viruses was still there. I don't think it removed them. What should I
do?

Chuck said:
Hi again Chuck,
I hope you saw my other 2 questions--I clicked "Reply" on them. I hate to
be such a pain in the neck, but the only reasons I'm giving this a try is
because I have you to ask questions to when I don't know what to do.
The next question:
I downloaded TrendMicro Engine, but the page said, "...must download the
latest pattern file into the same folder...". What do I do?
Also, do I download the "DCT Control Release"?
Click to expand...

Questions are good. That's how we all learn. Sometimes I learn my instructions
aren't correct. %-}

Following the Trend Micro instructions on:
http://www.trendmicro.com/download/dcs.asp,
a non-TM customer must download from:
http://www.trendmicro.com/ftp/products/tsc/sysclean.com

Then, you read the further instructions at:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
then download the pattern file from:
http://www.trendmicro.com/download/pattern.asp
Pattern 2.246 (the latest) becoming:
http://www.trendmicro.com/ftp/products/pattern/lpt246.zip
and place all components in the same folder, unzipped when necessary.
They don't make it easy do they? #-]

I don't know what's up with WinsockXPFix. Try one of the other Winsock
cleaners. This is all freeware stuff, and not too organised.

As far as CoolWebShredder, http://www.majorgeeks.com/download4086.html gives you
a choice of 5 download sites, 4 MG and 1 PM. Just pick one. MajorGeeks seems
to be the best organised freeware distribution site right now. In a couple
months, another will probably spring up. Read alt.privacy.spyware occasionally,
and get a feel for how grass-roots the anti-spyware movement is.

Cheers,
Chuck
Click to expand...
 
Hi Chuck,
Again I'm going to need step-by-step instructions. I downloaded STINGER,
and the instructions said to, "Disable System Restore" before running it. It
said that disabling System Restore would, "erase all my Restore Points". I
was afraid to do that because I have been working for months with Dell
trying to get my computer to work properly, and we have re-installed my
operating system three times. As we did that, new problems would start
happening. I have not been able to install all my software yet, but I think
I have one Restore Point that was OK before I installed some software. So, I
ran Stinger without disabling my System Restore. I can't figure out how to
REMOVE what it found. It doesn't give an option to do that where it LISTS
what it found. I went into PREFERENCES and checked REMOVE and ran it again.
After I did that, it didn't say it had removed anything, so I ran it another
time to see if my computer was clean. When I clicked on LIST, the same list
of viruses was still there. I don't think it removed them. What should I
do?
Click to expand...

OK, I have to sympathise with you on this issue. With XP System Restore, you
have to disable it, and lose all restore points. You can't delete SR points
selectively. :-(

Stinger looks for problems that could possibly hide in files that may be saved
by System Restore. So before you run Stinger, you do have to disable SR, and
lose all previous SR points. After you finish, you then re enable SR, and have
it make a SR point (I think automatically).

This is a leap of faith that you just have to take.

Of course, if you're keeping SR enabled to save that one RP, there's no
guarantee that point is still valid. You're going to have to move forward.
Disable SR, run Stinger, and let it remove what it finds.

After you rerun Stinger with SR disabled, get the list of what it finds, and
post the list here.
 
Hi Chuck,
I took that leap of faith and disabled system restore. I ran Stinger with
the REMOVE button checked (in Preferences). This is the Report Log it made:

McAfee AVERT Stinger Version 2.4.4.0 built on Nov 8 2004
Copyright (C) 2004 Networks Associates Technology, Inc. All Rights Reserved.
Virus data file v1000 created on Nov 8 2004.
Ready to scan for 45 viruses, trojans and variants.
Scan initiated on Tue Nov 16 17:57:42 2004
Number of clean files: 50782

I can't tell from this if it found anything--but I guess you can.
When I connected to the internet after doing this, I got a message saying
something about "...Win32Time...", and then I lost my internet connection.
I re-started my computer.
Did I do something wrong? What should I do now?

Hi again Chuck,
I hope you saw my other 2 questions--I clicked "Reply" on them. I hate to
be such a pain in the neck, but the only reasons I'm giving this a try is
because I have you to ask questions to when I don't know what to do.
The next question:
I downloaded TrendMicro Engine, but the page said, "...must download the
latest pattern file into the same folder...". What do I do?
Also, do I download the "DCT Control Release"?
Click to expand...

Questions are good. That's how we all learn. Sometimes I learn my instructions
aren't correct. %-}

Following the Trend Micro instructions on:
http://www.trendmicro.com/download/dcs.asp,
a non-TM customer must download from:
http://www.trendmicro.com/ftp/products/tsc/sysclean.com

Then, you read the further instructions at:
http://www.trendmicro.com/ftp/products/tsc/readme.txt
then download the pattern file from:
http://www.trendmicro.com/download/pattern.asp
Pattern 2.246 (the latest) becoming:
http://www.trendmicro.com/ftp/products/pattern/lpt246.zip
and place all components in the same folder, unzipped when necessary.
They don't make it easy do they? #-]

I don't know what's up with WinsockXPFix. Try one of the other Winsock
cleaners. This is all freeware stuff, and not too organised.

As far as CoolWebShredder, http://www.majorgeeks.com/download4086.html gives you
a choice of 5 download sites, 4 MG and 1 PM. Just pick one. MajorGeeks seems
to be the best organised freeware distribution site right now. In a couple
months, another will probably spring up. Read alt.privacy.spyware occasionally,
and get a feel for how grass-roots the anti-spyware movement is.

Cheers,
Chuck
Click to expand...
 
Hi Chuck,
I took that leap of faith and disabled system restore. I ran Stinger with
the REMOVE button checked (in Preferences). This is the Report Log it made:

McAfee AVERT Stinger Version 2.4.4.0 built on Nov 8 2004
Copyright (C) 2004 Networks Associates Technology, Inc. All Rights Reserved.
Virus data file v1000 created on Nov 8 2004.
Ready to scan for 45 viruses, trojans and variants.
Scan initiated on Tue Nov 16 17:57:42 2004
Number of clean files: 50782

I can't tell from this if it found anything--but I guess you can.
When I connected to the internet after doing this, I got a message saying
something about "...Win32Time...", and then I lost my internet connection.
I re-started my computer.
Did I do something wrong? What should I do now?
Click to expand...

Did your internet service come back after restarting the computer? If not, use
LSP-Fix or WinsockXPFix to repair your LSP stack. It sounds like your Winsock
may have gotten clobbered.
 
Yes, I was able to get back on the internet. Do I still need to repair my
LSP Stack?
Were you able to figure out if Stinger found any viruses on my computer by
that Report? Did it remove them? Why doesn't it list whether if found
anything or not?
 
Well, here I am again--feeling dumber and dumber. I'm still trying to
download Trendmicro. I read in instructions that said to download a Pattern
file (which I have no idea what that is) lpt$vpn.XXX. I cannot find anything
with that title. There was a lpt251.zip file. Is that the same? Also, I'm
hoping when I am able to get the correct pattern file that it will have
instructions on how to EXTRACT the file--I've never done that. Can you tell
me which pattern file I'm suppose to download from
www.trendmicro.com/download/pattern.asp ? Thanks.
 
Well, here I am again--feeling dumber and dumber. I'm still trying to
download Trendmicro. I read in instructions that said to download a Pattern
file (which I have no idea what that is) lpt$vpn.XXX. I cannot find anything
with that title. There was a lpt251.zip file. Is that the same? Also, I'm
hoping when I am able to get the correct pattern file that it will have
instructions on how to EXTRACT the file--I've never done that. Can you tell
me which pattern file I'm suppose to download from
www.trendmicro.com/download/pattern.asp ? Thanks.
Click to expand...

Don't feel dumber and dumber - just feel eXPerienced. ;-)

TrendMicro doesn't make it easy for you, does it? Yes, lpt251.zip is, I
believe, the latest pattern 2.251.00. I think it's easier if you purchase the
TM product, that is, the regular customers in alt.comp.virus seem to talk about
it that way. You'll have to unzip the file and move the pattern file into the
TM folder, fortunately Windows XP supports .zip format archives natively.

Re the Stinger log, if what you posted was the entire log, then Stinger found
nothing. That doesn't mean that TM, AdAware, Spybot, or HijackThis won't
though.

And if rebooting brought your internet back, then no need to repair the LSP. I
just mentioned LSP-Fix cause that has to be done occasionally after removing
spyware.

It's a lot of work to do, but do it regularly, and one step at a time, and you
get used to it.
 
Hi Chuck,
I was running the Trendmicro scan when I got a message saying,
"..Sysclean.exe has encountered a problem and needs to close...". Before it
closed, there were losts of entries that said, "error <-94>". What is that?
There was a file in the trendmicro folder that I didn't put in there and it
was really long. Most of the entries said, "...could not configure..." or
"access denied". One virus was found (I have Mcafee so I don't know how that
can happen). How do I delete the virus? I then re-started my computer, and
when I was trying to enable System Restore, my computer froze, and at the top
of the box it said, "...System Properties...not responding..." I had to use
Ctrl+Alt+Del and End Task.
Do I re-run Trendmicro's Sysclean? What if it again has a problem & has to
close?
Thanks.
 
Back
Top