Re: Major problems, Please Help Me!

From: Malke (malke_at_nospoonnotreally.com)
Date: 10/10/04


Date: Sun, 10 Oct 2004 05:42:36 -0700

Julie wrote:

> I have tried to reinstall my virus software, although it
> tells me it has been sucessful it is not. i then try to
> uninstall/repair and i am getting an error 1721. i also
> have a problem when i use my internet. i can access my
> homepage fine but when i try to access another website
> (any website), I am prompted to supply a username and
> password.

It certainly sounds like you have malware on your system. Start by
cleaning with TrendMicro's Sysclean (see below). Of course, you will
need to get all the malware removal tools (including the latest virus
definitions for your full-featured antivirus program) from a clean
machine not connected to yours, that has Internet access and a cd
burner.

TrendMicro's Sysclean is a fairly extensive tool which has the advantage
of not needing to be installed. It requires two parts - the scanning
engine and the virus pattern files.

1. Create a new folder on your Desktop or the C: drive named something
useful like "Sysclean".
2. Go here and download the two parts of the program to that folder:

http://www.trendmicro.com/download/dcs.asp - Sysclean
http://www.trendmicro.com/download/pattern.asp - virus pattern files

3. Restart your computer in Safe Mode. Get into Safe Mode by repeatedly
tapping the F8 key as the computer is starting up to get to the proper
menu.
4. Go to the Sysclean folder you made and double-click on sysclean.com.
Start the scan. After the scan is finished, look at the log. You may
need to make a note of where any viruses were found if they were not
able to be removed so you can manually delete them.

Now continue your malware removal:

by first seeing if you can now install the full-featured antivirus you
have. First try and install it in Safe Mode (some programs will let you
do this, others won't). Install the definitions you got earlier
according to the program site's instructions and do another full scan
in Safe Mode.

Once you've cleaned up the viruses, it's time to get rid of spyware and
other non-viral malware. Do this with Spybot Search & Destroy from
www.safer-networking.org and Ad-aware from www.lavasoftusa.com. Be sure
to update these programs before running them. These programs are free,
so run them both since they complement each other. It is best to run
antivirus and spyware removal tools in Safe Mode. You may also want to
run CWShredder and HijackThis from http://aumha.org/freeware.htm.
Although CWShredder is no longer being updated, it will still clean
older variants of the CoolWebSearch malware. A combination of
HijackThis and About:Buster (http://www.majorgeeks.com) works well in
removing homepage hijackers. Please read the instructions carefully.
Make sure you are able to see all hidden files and extensions (View tab
in Folder Options). Also, make sure you've visited Windows Update and
applied all security patches. Do not install driver updates from
Windows Update. Make sure you are running a firewall.

HTH,

Malke

-- 
MS-MVP Windows User/Shell
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic"


Relevant Pages

  • Re: ie,...again
    ... > there is NO way I can install a program on that pc. ... > tried safe mode, and I'm still getting the same results. ... Switch to AVG Anti-Virus destination folder using these steps (assuming this ... >> The process of removing certain malware may kill your internet ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • RE: WARNING Long Reply - Re: IE web browser gets hijacked to "abou
    ... >> The process of removing certain malware may kill your internet connection. ... >> UPDATE them and go to Safe mode to run UPDATED versions CWShredder, ... >> A currently common parasite is some malware called CoolWebSearch. ... Run the program from this install location or the shortcut after ...
    (microsoft.public.win2000.general)
  • Re: Internet Explorer restarts computer after going on-line
    ... was heavily infested with malware which puts the issue in another ... Since the machine can get into Safe Mode, you or your friend can try ... full-featured av, install it, update it, and do a thorough scan. ... Sysclean - TrendMicro's Sysclean is an extensive antivirus tool which ...
    (microsoft.public.windowsxp.general)
  • RE: possible virus
    ... You have malware on your system. ... doing everything with updated tools in Safe Mode. ... TrendMicro's Sysclean. ... scan with HijackThis. ...
    (microsoft.public.security.virus)
  • Re: Hijacked Homepage
    ... Sysclean which is a free system scanner download from Trend ... You might want to consider installing Eric Howes' IESpyAds, SpywareBlaster ... http://www.javacoolsoftware.com/spywareblaster.html (Prevents malware Active ... install and keep updated a good HOSTS file. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)

Quantcast