Need help with apparent virus damage

[JM]

XP Professional machine had two viruses as identified by AVG Free. Before
the owner ran the virus scan, the computer got to where nothing would open.
No programs, My Computer, My Docs, Control Panel, run commands, nothing.
However, the computer wasn't "locked up," per se. When an icon was
double-clicked, the program or window would flash open, then immediately
close. The icons on the task bar and system tray would respond, but that's
about it. After cleaning the viruses off, running Adaware, CWShredder, and
HiJack This, the situation is the same.

However, the computer will open things and otherwise act normally in safe
mode.

Is this likely damage remaining from the viruses, and what is my best plan
of attack at this point?

Let me know what important details I've left out. I will be glad to provide
more info.

thank you,

jm

 

[Unk]

XP Professional machine had two viruses as identified by AVG Free. Before
the owner ran the virus scan, the computer got to where nothing would open.
No programs, My Computer, My Docs, Control Panel, run commands, nothing.
However, the computer wasn't "locked up," per se. When an icon was
double-clicked, the program or window would flash open, then immediately
close. The icons on the task bar and system tray would respond, but that's
about it. After cleaning the viruses off, running Adaware, CWShredder, and
HiJack This, the situation is the same.

The virus is still there, and in your System Restore files too...
Disable System Restore, and run your AV software from the Safe Mode.

This is a link to a small FREE program by McAfee Anti-virus named Stinger.
It will scan your system for 55 known viruses and trojans and repair them.
You don't need McAfee anti-virus installed on your computer... this is a
stand alone program. http://vil.nai.com/vil/stinger/ or
http://us.mcafee.com/virusInfo/default.asp?id=stinger
Direct Download: http://download.nai.com/products/mcafee-avert/stng260.exe

Another possibility is to borrow a second computer with anti-virus software on it, and put that
HDD in it as a slave, and run the anti-virus software to clean it up.

 

[Ron Martell]

XP Professional machine had two viruses as identified by AVG Free. Before
the owner ran the virus scan, the computer got to where nothing would open.
No programs, My Computer, My Docs, Control Panel, run commands, nothing.
However, the computer wasn't "locked up," per se. When an icon was
double-clicked, the program or window would flash open, then immediately
close. The icons on the task bar and system tray would respond, but that's
about it. After cleaning the viruses off, running Adaware, CWShredder, and
HiJack This, the situation is the same.

However, the computer will open things and otherwise act normally in safe
mode.

Is this likely damage remaining from the viruses, and what is my best plan
of attack at this point?

Let me know what important details I've left out. I will be glad to provide
more info.

thank you,

One way of fixing this would be to do a Repair Install of Windows XP
as per the instructions at
http://michaelstevenstech.com/XPrepairinstall.htm

A Repair Install will preserve the installed applications, user data
files, and program configuration settings. Windows updates will have
to be reinstalled.

Good luck

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."

 

[paulmd]

XP Professional machine had two viruses as identified by AVG Free. Before
the owner ran the virus scan, the computer got to where nothing would open.
No programs, My Computer, My Docs, Control Panel, run commands, nothing.
However, the computer wasn't "locked up," per se. When an icon was
double-clicked, the program or window would flash open, then immediately
close. The icons on the task bar and system tray would respond, but that's
about it. After cleaning the viruses off, running Adaware, CWShredder, and
HiJack This, the situation is the same.

However, the computer will open things and otherwise act normally in safe
mode.

Is this likely damage remaining from the viruses, and what is my best plan
of attack at this point?

Let me know what important details I've left out. I will be glad to provide
more info.

thank you,

jm

What I've seen work is to do sfc /scannow to repair the damage done,
and then clean off viruses again before you reboot, or they will just
come back. Clear the various Run menus in the registry, disable system
restore and hibernate.

 

[Ron Martell]

The virus is still there, and in your System Restore files too...
Disable System Restore, and run your AV software from the Safe Mode.

Never repeat never disable System Restore on an infected system. If
something goes blooey on the cleanup attempts you may be left with a
non-functioning system and no way of to fix it other than a reinstall.

Viruses in the System Restore folder are totally encapsulated and
cannot reinfect the system or otherwise escape unless System Restore
is used to restore the system to its pre-cleanup state.

Once the system has been cleaned and is functioning properly then the
System Restore archive can be purged so as to ensure that the
infection is not inadvertently brought back again. However rather
than disabling system restore it is safer to first create a new
restore point then use the advanced options in Disk Cleanup to remove
all but the most recent restore point.

And any suggestions about disabling System Restore need to also
include instructions to reboot the computer and then reactivate System
Restore. Otherwise a neophyte user reading these suggestions could
end up with System Restore being left turned off permanently, with
potentially disastrous consequences.

Ron Martell Duncan B.C. Canada
--
Microsoft MVP (1997 - 2006)
On-Line Help Computer Service
http://onlinehelp.bc.ca

"Anyone who thinks that they are too small to make a difference
has never been in bed with a mosquito."