SP2 Problems

[Guest]

Since we installed SP2 (so that we can install an IPOD,) from the disk, we
have had the following problems.

1. Can no longer open Internet Explorer from the desktop. Have to go to
the Start Button and start it from there.
2. Internet pop-up ads have increased 300%, getting over 20 in 1/2 hour
alone.
3. When I run Ad-aware, a small screen come up dsaying the system is
shutting down in 58 seconds. and the clicker counts down, and the sytem
shuts down.
4. When I have been able to get past this system shutdown, and the ad-aware
completes it scan, and I remove all critical items, I then get a message that
I now have "limited or no conectivity".

The first time this limited or no conectivity problem appeared, I was back
and forth between my ISP (Comcast) and Microsoft, which after 5 hours (2
seperate phone calls) I was told to run the "netsh winsock reset" which
restored my internet upon reboot. Now it has happened again, and will
attempt this fix again tonight when I get home.

Need help with these problems....

 

[da_test]

Since we installed SP2 (so that we can install an IPOD,) from the disk, we
have had the following problems.

1. Can no longer open Internet Explorer from the desktop. Have to go to
the Start Button and start it from there.
2. Internet pop-up ads have increased 300%, getting over 20 in 1/2 hour
alone.
3. When I run Ad-aware, a small screen come up dsaying the system is
shutting down in 58 seconds. and the clicker counts down, and the sytem
shuts down.
4. When I have been able to get past this system shutdown, and the ad-aware
completes it scan, and I remove all critical items, I then get a message that
I now have "limited or no conectivity".

The first time this limited or no conectivity problem appeared, I was back
and forth between my ISP (Comcast) and Microsoft, which after 5 hours (2
seperate phone calls) I was told to run the "netsh winsock reset" which
restored my internet upon reboot. Now it has happened again, and will
attempt this fix again tonight when I get home.

Need help with these problems....

I suspect you still have malware on your machine.
Goto http://www.spywarewarrior.com/index.php
register with them and post a message in their
"spyware and malware" forum.

They'll probably ask yoiu to do a "hijackthis" log.
They have the experts there to analyze it for you.

Dave

 

[Maurice N ~ MVP]

Since we installed SP2 (so that we can install an IPOD,) from the
disk, we have had the following problems.

1. Can no longer open Internet Explorer from the desktop. Have to
go to the Start Button and start it from there.
2. Internet pop-up ads have increased 300%, getting over 20 in 1/2
hour alone.
3. When I run Ad-aware, a small screen come up dsaying the system is
shutting down in 58 seconds. and the clicker counts down, and the
sytem shuts down.
4. When I have been able to get past this system shutdown, and the
ad-aware completes it scan, and I remove all critical items, I then
get a message that I now have "limited or no conectivity".

The first time this limited or no conectivity problem appeared, I was
back and forth between my ISP (Comcast) and Microsoft, which after 5
hours (2 seperate phone calls) I was told to run the "netsh winsock
reset" which restored my internet upon reboot. Now it has happened
again, and will attempt this fix again tonight when I get home.

Need help with these problems....

Your system *is* infested ! I'm going to point to an article at Aumha on ways to cleanup parasites.
Follow the quick-fix protocol.
http://aumha.org/a/quickfix.htm

 

[Yves Leclerc]

As it been suggested, your system was "infested" with spywares/malwares
BEFORE you installed the SP2.

Run:

Ad Aware SE
Spybot: Search and Destroy 1.3
CWShredder

Microsoft AntiSpyware Beta

so as to clear out the spywares. Then, activated the Pop-Up blocker in IE.

Locate, install and run Winsockxpfix.exe. This will rebuild your TCP/IP
protocol so as to correct the "limited or no conectivity" problem.


If after these steps, you still have problems, run HiJackThis and post to
the spyware forum mentioned before.

 

[Guest]

This morning I began the cleanup process tyhat has been recommended. I have
found a program labeled "weboffer, that will not delete itself even after I
have pressed the change/remove button

Also a small box appears in the start up describing problems with another
program called BMan, but can not find this in my list of programs in order
to remove it?

 

[Maurice N ~ MVP]

Here are 2 tools from SysInternals that may help you get an insight on what's running.
Autoruns (checks & shows what's set to auto-load at Windows startup)
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml

Process Explorer http://www.sysinternals.com/ntw2k/freeware/procexp.shtml

 

[Rock]

This morning I began the cleanup process tyhat has been recommended. I have
found a program labeled "weboffer, that will not delete itself even after I
have pressed the change/remove button

Also a small box appears in the start up describing problems with another
program called BMan, but can not find this in my list of programs in order
to remove it?

Do a thorough check for malware on the system.

Richard Harper’s Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

Run these programs to check for spyware/malware. After installing
update them, then boot into safe mode and run them. You should update
and run them weekly.

Cwshredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Ad-aware SE
http://www.lavasoftusa.com

Spybot Search and Destroy
http://www.safer-networking.org

Bazooka Adware and Spyware Scanner
http://download.com.com/3000-2144-10247783.html

Pest Patrol Free Pest Scanner
http://store.ca.com/dr/v2/ec_main.e...tchingYou&client=ComputerAssociates&sid=35715

If you’re still having problems after running these then run HijackThis
and post the log to one of the specialty forums, _NOT_ this one.

HijackThis
http://www.majorgeeks.com/download.php?det=3155

Forums to Interpret HijackThis Logs:

http://www.spywareinfo.com/forums/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

After your system is clean use these programs to help keep it clean:

Spywareblaster
www.javacoolsoftware.com/sbdownload.html

Spywareguard
http://www.javacoolsoftware.com/sgdownload.html

IE-SPYAD
http://www.staff.uiuc.edu/~ehowes/resource.htm