Will Uninstall cure the blues????

[persian ram]

I have posted a few other questions relating problems on "my wife's"
computer and the suggestions have not cured any of the ills.

Here is the synopsis: worm/trojan/virus/??? has screwed up something and I
cannot get on line anymore because the connect wizard comes up with blocks.

Is a potential fix unistalling XP? Will I have to reload all the
applications? Since there is no longer an easy way to copy the e mail files
and address book, will I lose that data if I uninstall/install? I have
everything else backed up.

Thanks in advance for any help.

chuck

 

[Mike Hall \(MS-MVP\)]

In all probability, if you use the vendors OEM recovery process, you will
indeed lose everything..

A thought would be to purchase a retail upgrade version or better still a
retail full version of XP and do a repair install with it.. it is really
down to how much the data is worth.. I have no doubt that your wife would
have views on that..

 

[Richard Urban]

And if he doesn't perform a format/install the infections will still be
there!

A valuable lesson as to why backups are so necessary!

--
Regards,

Richard Urban

aka Crusty (-: Old B@stard

If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!

 

[Guest]

How about informing this guy to get her to install and run a good anti-virus
program. For all you've told him is how to clean it, but as soon as "she"
turns it on and accesses the Web, she'll be wide open for more "visitors."

 

[Mike Hall \(MS-MVP\)]

Exactly so..

--
Mike Hall
MVP - Windows Shell/user

 

[Mike Hall \(MS-MVP\)]

Byte

Closing the stable door at this point in time will only serve to keep the
straw bed from escaping..

--
Mike Hall
MVP - Windows Shell/user

 

[Mike Hall \(MS-MVP\)]

Persian

This is an addition to advice already given.. if all goes well with the
procedures outlined below, you should consider what I have already suggested
as it would give you a better way out in the future..

You will need the services of another computer in order to download certain
elements.. for the McAfee stinger and Trend MicroClean, this is not a
problem as both will come in latest form.. the spyware removers, however,
would all require updates, which presently you would not be able to get..
updates for these are not available as separate downloadable files.. they
integrate directly into the associated program.. read through all of my
post, and then you can make a list of what to download before you start the
process.. copy them to a CD.. your CD does still work?.. lets hope so..

So here goes..


OK.. start by turning OFF the System Restore function.. click on the Start
button.. right click on 'My Computer', then select Properties.. now select
the 'System Restore' tab..



Check the box "Turn off System Restore" or "Turn off System Restore on all
drives".. now click on 'Apply'.. you will be asked if it is ok to lose all
restore points.. answer YES to this.. now click on 'OK'



Run a one shot virus remover.. I have found that McAfee Stinger works for
people.. download and run it..



http://vil.nai.com/vil/stinger/



Another alternative is ..



http://housecall.trendmicro.com/housecall/start_corp.asp



Neither of these require updates.. run them before doing anything else..



Now to the spyware element..



You will also need to download Spyware removal software.. Spybot and Adaware
are available at these websites.. both are free.. download and run them..
get updates for them as soon as you can connect to the internet, and ensure
that you have set the XP firewall to run BEFORE you connect..



http://www.safer-networking.org/en/index.html



http://www.lavasoftusa.com/software/adaware/



.... and this link is for the latest Microsoft helping..



http://www.microsoft.com/athome/security/spyware/software/default.mspx



Spybot has the ability to immunize a system, but there is better for this
function, so download and run Spyware Blaster too.. again, check for
updates..



http://www.javacoolsoftware.com/



Time to turn ON System Restore.. this is obviously like turning it OFF, so
just reverse the procedure..



If you have had your Internet browser hijacked, that is to say, you get
redirected through a search engine NOT of your choosing, you will need
different tools..

HijackThis is a popular and effective tool.. download it from here..



http://www.spychecker.com/download/download_hijackthis.html



CWShredder will eliminate CoolWebSearch and variants.. there is a free
download here..



http://www.intermute.com/spysubtract/cwshredder_download.html



About:blank.. http://www.securiteam.com/securityreviews/5RP0L0UD5U.html



http://www.pchell.com/support/aboutblank.shtml



For other tools in the fight against spyware, visit this website and
bookmark it..



http://www.pchell.com



You must also run a firewall and anti-virus program.. here are some links
for you..



http://www.mcafee.com

http://www.symantec.com

http://www.zonealarm.com

http://www.kerio.com

http://www.gate.com

http://www.avast.com

http://www.grisoft.com



Please return to this thread and provide feedback.. it is the only way that
helpers here can determine how effective the advice given has been..



Good luck..


--
Mike Hall
MVP - Windows Shell/user

 

[Mark L. Ferguson]

The old folder, containing the *.DBX files (hidden files) will just be abandoned, not deleted, and you can use OE to File
menu/Import old mail files later.

Often virus/spyware damage is simply to the Winsock interface. The netsh command in SP2 can rebuild your Winsock. Open the command
prompt and type: netsh winsock reset , then press ENTER.