Windows XP Home problems

  • Thread starter Thread starter Chuck
  • Start date Start date
C

Chuck

First ; here is my system;

MSI 865PE Neo2-ls MB (new)
Intel 2.8ghz cpu w/HT (new)
512mb Corsiar DDR RAM (new)
Maxtor 80 GB HD (Boot;Partitioned)
Maxtor 25 GB
DVD ROM/CRDOM
Samsung CDROM CDRe-Writer
Floppy 1.44
400 Watt Power Supply

I've upgraded MB, CPU and RAM All other components have been working for
over a year. The ability to send this message indicates that the CPU and MB
are working. I have swapped the RAM out and there was no difference in the
problem, so it's not the RAM.

I did a repair install of Windows XP Home, and then started downloading
updates. In the process, I picked up the W32.welchia.worm virus. I have
since used the Symantec tool to remove, and confimed the removal of said
virus. I have since re-installed my Norton Antivirus, and SP1a and cannot
get the Antivirus to auto-protect. I also use Norton Utilities to view
System Information, and the system locks up when I try to view the Memory
details. The Windows XP System Information will not even open for me. I
opened the End Program Dialog box (Cntl-Ant-Del) and under operations I shut
off the schhost programs one at a time until I got a message about RPC
shuttingdown and the system was now shutting down in 60 seconds (I'm told
this is a symptom of welchia, but the HAS been removed). I ran sfc /scannow
and it didn't fix.

I sure hope someone here can help me. I'm tempted to do a complete
re-install of XP, but I just activated it (again) four days ago, and I would
rather now go through the phone thingy.

Thanks
Chuck
 
The new componants are all compatible. CPU at 800mhz, ram at 400mhz and cpu
AT 800MHZ.

After removing virus, I did a repair install of XP.
 
Hi Chuck,

Did you have one task in Task Manager that you could not seem to kill? It
kept coming back, but with different names? You're still infected, the
removal tool isn't perfect.

Boot into Safe mode, start/run regedit and take a look at this key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

You will likely find an entry there that is still loading the virus. Remove
(delete) the string in the right hand pane that corresponds to it. They are
usually very obvious and contain random characters.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
I only found two entries here with any values attached;
One was for the ccapp.exe in the symantex shared folder, and the other was
for a file in the windows\system32 folder named dumprep.exe (apparently the
error reporting tool). I removed to value string fo the dumprep.exe and
rebooted, but it was no help.

Here are a couple of (perhaps unnecessary) details I forgot to include;

My system includes
nividia geoforce2 ti w/64mb
SB PCI sound card
and a generic 56k v.90 modem
These have been in use for over a year.

Thanks
Chuck
 
Hi Chuck,

Start/run msinfo32, expand the software environment and click on the startup
programs folder. Click in the right pane, then click edit/select
all/edit/copy. Open a reply to this post and click in the message text area.
Hit ctrl+v to paste the startup contents for examination.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
msinfo32 would not start/open. I have the same problem with the
Programs/accessories/System tools/system information

They just wont open. No error message either.

Chuck
 
Hi Chuck,

They're the same thing. Try this:

Start/run cmd

From the prompt, run cd\

Then run:

copy C:\progra~1\common~1\micros~1\msinfo\msinfo32.exe C:\msinfo32.com

Then click start/run, enter:

C:\msinfo32.com

and click "ok", see if this opens system information.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
See Blaster worm info (Google)
Get the STINGER virus removal program
from
http://download.nai.com/products/mcafee-avert/stinger.exe
You must run a firewall to keep worms out.
You must download the patches from Windows Update.
See the link on Windows Update about 3 steps for security.

Many viruses alter the registry so you can't run anti-virus
programs (or they only appear to run). They also block
access to the device manager, control panel and other
functions (some good programs do this for security to keep
hijackers out, viruses do this to stay on your computer).


| The new componants are all compatible. CPU at 800mhz, ram
at 400mhz and cpu
| AT 800MHZ.
|
| After removing virus, I did a repair install of XP.
|
|
| | > First ; here is my system;
| >
| > MSI 865PE Neo2-ls MB (new)
| > Intel 2.8ghz cpu w/HT (new)
| > 512mb Corsiar DDR RAM (new)
| > Maxtor 80 GB HD (Boot;Partitioned)
| > Maxtor 25 GB
| > DVD ROM/CRDOM
| > Samsung CDROM CDRe-Writer
| > Floppy 1.44
| > 400 Watt Power Supply
| >
| > I've upgraded MB, CPU and RAM All other components have
been working for
| > over a year. The ability to send this message indicates
that the CPU and
| MB
| > are working. I have swapped the RAM out and there was no
difference in the
| > problem, so it's not the RAM.
| >
| > I did a repair install of Windows XP Home, and then
started downloading
| > updates. In the process, I picked up the
W32.welchia.worm virus. I have
| > since used the Symantec tool to remove, and confimed the
removal of said
| > virus. I have since re-installed my Norton Antivirus,
and SP1a and cannot
| > get the Antivirus to auto-protect. I also use Norton
Utilities to view
| > System Information, and the system locks up when I try
to view the Memory
| > details. The Windows XP System Information will not even
open for me. I
| > opened the End Program Dialog box (Cntl-Ant-Del) and
under operations I
| shut
| > off the schhost programs one at a time until I got a
message about RPC
| > shuttingdown and the system was now shutting down in 60
seconds (I'm told
| > this is a symptom of welchia, but the HAS been removed).
I ran sfc
| /scannow
| > and it didn't fix.
| >
| > I sure hope someone here can help me. I'm tempted to do
a complete
| > re-install of XP, but I just activated it (again) four
days ago, and I
| would
| > rather now go through the phone thingy.
| >
| > Thanks
| > Chuck
| >
| >
|
|
 
I carefully follow your guide, checking my typing (twice). Got a "copied one
file" message. Then the second part produced no response.


Chuck
 
Hi,

It must be keing on the file name, not the extension. Instead of
msinfo32.com, use ms1info32.com (the extra character in the middle should be
sufficient to fool it).

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
Hummm. Tried start/run/msinfo.com -nada
tries start/run/ms1info.com -nada
tried command promt with both of those commands -zilch
tried windows explorer and double-clicked on msinfo32.com in root
-zilch again.

I am able to access some system info through the Norton Utilities System
info. Would any of that help?

Also; The Mcafee's Stinger came up with nothing.

Chuck
 
Also just noticed that I cannot access any E-Mail attachments in outlook
express. They are showing, but greyed out.

Chuck
 
In
Chuck said:
Also just noticed that I cannot access any E-Mail attachments in
outlook express. They are showing, but greyed out.
Click to expand...


Starting with SP1, Outlook Express does this by default, for any
file type which *can* contain a virus. It's not a virus checker,
doesn't actually check the attachments, and this doesn't mean
that there actually is a virus there.

Such attachments *are* very risky. You often see advice not to
open attachments from people you don't know. I think that that's
one of the most dangerous pieces of advice you see around,
because it implies that it's safe to do the opposite--open
attachments from friends and relatives. But many viruses spread
by sending themselves to everyone in the infected party's address
book, so attachments received from friends are perhaps the *most*
risky to open.

Personally I never open executable attachments at all, except
from a *very* few trusted sources, and then only when I'm
expecting them. But if you want to remove this safeguard, it's
easy to do so: go to Tools | Options, and on the security tab,
uncheck "Do not allow attachments..."
 
Does it give a listing of the startup programs?

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone
 
Alright. I gave up.

CLEAN INSTALL

Problem goes Bye-Bye

Thank you for trying so hard to help me anyway

Chuck
 
Back
Top