latest reply to David Lipman from Umwhat
From: Umwhat (me.somewhere_at_somewhere)
Date: 05/21/05
- Next message: Mark: "How to undo making a folder "shared?""
- Previous message: Jupiter Jones [MVP]: "Re: Decrypting Files from a Deleted Partition"
- In reply to: David H. Lipman: "Re: A trojan or something , whse"
- Next in thread: Malke: "Re: latest reply to David Lipman from Umwhat"
- Reply: Malke: "Re: latest reply to David Lipman from Umwhat"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sat, 21 May 2005 01:29:18 -0700
You may like to read my 2 earlier posts to your reply which are the 2 posts
after this post before reading this post to make sense of where I am with the
removal of whse .
I ran the Mcfee scan and it found no problems .
The entry of whse remains in the msconfig Startup Programs and I have found
entries in the Registry :
HKEY_CURRENT USER_Software\Microsoft\SearchAssistant\ACMru\5603 and 6504 .
Now I am going back to the site I downloaded the Mcfee scan from to check
with the entries there that should be removed to remove whse .
Do you think after I have deleted those entries I could find any more
entries related to whse in any other registry locations because I had to
search manually to find the entries I've found to now .
thankyou for reading
and , it's a very cold winter's night in Auckland
but it's warm inside
"David H. Lipman" wrote:
> From: "Umwhat" <me.somewhere@somewhere else.com>
>
> | it's there in msconfig if I RUN msconfig and I'm pretty sure it's a tro...
> | a vi... I mean I don't know what it is but can someone tell me how to
> | get rid of it please . I'm sure it's nowhere else and it may have come with
> | an older download archived search I had done for an older Motherboard which
> | had a Adobe type program to view it by .
> | but and but and um , ,,,,
> | the computer has crashed a few times and the latest Error message was :
> | BCCode: 19 BCP1: 00000020 BCP2: E2B00490 BCP3: E2B00590 BCP4: 0C200201
> | OS Ver: 5_1_2600 SP:2_0 Product:768_1
> | I saw a similar error number on the Microsoft website and that number
> | referred to a Trojan , I think .
> | I had downloaded 2 diagnostic programs too , one of which included
> | giveio.sys , which I have promptly removed because I didn't really need
> | them anyway , three , anyone at home tonight ?
> | it's getting coooooolder in Auckland NZ !
> |
> | --
> | signature
>
>
> Dump the contents of the IE Temporary Internet Folder cache (TIF)
> Start --> Settings --> Control Panel --> Internet Options --> Delete Files
>
> Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
> Tools --> Options --> Privacy --> Cache --> Clear
>
>
> Download CLEAN.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/clean.exe
>
> It is a self-extracting ZIP file that contains the Kixtart Script Interpreter
> { http://kixtart.org Kixtart is CareWare } three batch files, two Kixtart scripts, two Link
> (.lnk) files and a PDF instruction file.
>
> GETFILES.BAT -- For downloading (FTP) the files needed to run the McAfee Command Line
> Scanner. If you are using Windows XP, you may have to disable the Windows XP FireWall to
> allow the FTP utility to download the needed files
>
> CLEAN.BAT -- For running within Windows after running c:\mcafee\GetFiles.BAT. If you choose
> to scan again at a future date, run this batch file. It will automatically check the date
> of the McAfee DAT files and if it is a couple of days old, it will download (FTP) the latest
> signature files and install them before performing the scan.
>
> DOSCLEAN.BAT -- For use on a Win9x/ME PC or on a Win2K/WinXP PC that is using FAT32 after
> you have booted from an Emergency Boot Disk or DOS disk and have already executed;
> c:\mcafee\GetFiles.BAT from within Windows. DOS disk boot images can be obtained from;
> http://www.bootdisk.com/bootdisk.htm
>
> I need you to perform the following...
>
> Execute; CLEAN.EXE
> Choose; Unzip
> Choose; Close
>
> Execute; c:\mcafee\GetFiles.BAT
> { or Double-click on 'GetFiles Link' in c:\mcafee }
>
> Reboot the PC into Safe Mode [F8 key during boot]
>
> Shutdown as many applications as possible !
> It would also help for you to read - "How to perform a clean boot in Windows XP"
> http://support.microsoft.com/kb/310353
>
> Execute; c:\mcafee\CLEAN.BAT
> { or Double-click on 'Clean Link' in c:\mcafee }
>
> A final report in HTML format called C:\mcafee\ScanReport.HTML will be generated. At the
> end of the scan, it will be displayed in your browser (Opera, FireFox or Internet Explorer).
> It is suggested that you move the report out of c:\mcafee before performing another scan.
> It would be a good idea to scan in Safe Mode and in Normal Mode and save a copy of the HTML
> report for each session.
>
>
> * * * Please report back your results * * *
>
>
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>
- Next message: Mark: "How to undo making a folder "shared?""
- Previous message: Jupiter Jones [MVP]: "Re: Decrypting Files from a Deleted Partition"
- In reply to: David H. Lipman: "Re: A trojan or something , whse"
- Next in thread: Malke: "Re: latest reply to David Lipman from Umwhat"
- Reply: Malke: "Re: latest reply to David Lipman from Umwhat"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
