xp media edtn messed up after trojan removal...

G

Guest

Hi there.

Sorry this is kind of long, but this has been an arduous process over
several weeks already.... :-(

I've worked w/bleepingcomputer to fully rid my dad's laptop of some serious
crapware (a worm & trojan/trojan downloader). It's fully clean, but....lots
of not-so-little problems remain, namely W32 time provider's still erroring
causing time & date lapses; remote registry & web client services fail to
start; plus numerous application errors:
space.scr faulting,
"Fault bucket 143992858,"
"ANIWZCSdS.exe, version 1.0.1.30507,
faulting module ntdll.dll,
"Fault bucket 179419358,"
setupwizard.exe,
"DrWatson The application, E:\SetupWizard.exe, generated an application
error,"
"MsiInstall er Product: Macromedia Flash Player 8 -- Error 1905;"
"Fault bucket 372852869."

Additionally, I cannot perform Windows updates now via Auto or Manual Update
at Microsoft--no matter what--even using KBB822798 ("You cannot install some
programs or updates"). Even after following all the remedies....

AND after following the remedies, now IE 7 HANGS!!! nearly everywhere I try
to go online....

Prior to that I'd been unable to perform the MS File Checker (sfc \scannow)
function, having tried the tutorials to work around not having prog discs
(since this laptop only came with the option to perform a full-scale
'recovery' via hard-locked files on a separately partitioned drive). that
failed to work w/the current I386 file on the C drive.

What would you recommend? Reformatting via HP's 'recovery' files? And if so,
how will we re-register after?

Or are the Services.msc, reg & IE errors fixable?

Any help you can provide is greatly appreciated! :)
Kindly,

willzant
 
G

Guest

Re-activation of a preinstalled system should be transparent. Your problems
are with the addition apps you want to save. The 'factory default' restore
should put in the original stuff, and backing up your files and settings is
possible with the Fast Wizard.

Save settings and data with the Files and Settings Transfer Wizard (FAST
wizard): Go To: http://www.aumha.org/win5/a/fast.htm

Unfortunately, you lack the tools to do the repair a standard install would
have available. Without backups of the system and data, you are stuck with
what you can do. Best of Luck.
 
G

Guest

willzant said:
Hi there.

Sorry this is kind of long, but this has been an arduous process over
several weeks already.... :-(

I've worked w/bleepingcomputer to fully rid my dad's laptop of some serious
crapware (a worm & trojan/trojan downloader). It's fully clean, but....lots
of not-so-little problems remain, namely W32 time provider's still erroring
causing time & date lapses; remote registry & web client services fail to
start; plus numerous application errors:
space.scr faulting,
"Fault bucket 143992858,"
"ANIWZCSdS.exe, version 1.0.1.30507,
faulting module ntdll.dll,
"Fault bucket 179419358,"
setupwizard.exe,
"DrWatson The application, E:\SetupWizard.exe, generated an application
error,"
"MsiInstall er Product: Macromedia Flash Player 8 -- Error 1905;"
"Fault bucket 372852869."

Additionally, I cannot perform Windows updates now via Auto or Manual Update
at Microsoft--no matter what--even using KBB822798 ("You cannot install some
programs or updates"). Even after following all the remedies....

AND after following the remedies, now IE 7 HANGS!!! nearly everywhere I try
to go online....

Prior to that I'd been unable to perform the MS File Checker (sfc \scannow)
function, having tried the tutorials to work around not having prog discs
(since this laptop only came with the option to perform a full-scale
'recovery' via hard-locked files on a separately partitioned drive). that
failed to work w/the current I386 file on the C drive.

What would you recommend? Reformatting via HP's 'recovery' files? And if so,
how will we re-register after?

Or are the Services.msc, reg & IE errors fixable?

Any help you can provide is greatly appreciated! :)
Kindly,

willzant
Click to expand...

Hi Will,

First of all let's be clear about what these Error all about:
ANIWZCSdS.exe => Do you have LinkSys or D-Link wireless PCI Card installed
on this Laptop or HP Wireless Card?.
If Yes, Try to uninstall and Reinstall the Card, but do you connect at all
before doing the uninstall and what utility are you using the WZC or the
Utility came with the Wireless card to manage it's connection?.

E:\SetupWizard.exe => how many partitions you have and does this the DVD/CD
ROM letter?, what make.

MsiInstall er Product: Macromedia Flash Player 8 => This Macromedia and you
need to install or uninstall the corrupted one from the infection and
download the Flash player from here:
http://www.macromedia.com/software/flash/about/

downloading this tool and let us know what in the Run or in the start up and
also in this path:
C:\Windows\System32\ all the DLLs here.
Also in the run in this key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run=
AutoRuns for Windows v8.61
By Mark Russinovich and Bryce Cogswell
http://www.microsoft.com/technet/sysinternals/utilities/Autoruns.mspx
And this Process Explorer and see what running in the background:
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Go through these links here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;319624

Computer stops responding with a black screen when you start Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;314503

If all fail try Repair/Reinstall from the Laptop Restore Partition
http://www.michaelstevenstech.com/XPrepairinstall.htm
HTH.
Let us know.
nass
 
Top