RE: Cant access search,user accounts from XP

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jim (Jim_at_discussions.microsoft.com)
Date: 12/05/04


Date: Sun, 5 Dec 2004 07:53:07 -0800

Hi,
Have been searching MS,Symantec,BBs and various other sites to no avail,
finely I find your message (great joy).
It appears that it also effects(blanks) USER ACCOUNTS, SYSTEM RESTORE,
SEARCH (although you can get around that by disabling search assistant
found at the following link
http://www.helpwithwindows.com/WindowsXP/tune-20.html
and HELP & SUPPORT CENTER (although I'm not sure whether I have a seperate
problem with this item).
I have also noticed on my machine there are 3 family logons two seemed
reversed
although both appear to function? and show correct infomation on DESKTOP.
When you look at Document and Settings directory they appear switched,
I found this out when trying copy some bookmarks to the favorites directory
of the user I was logged on to and found they appeared on the second user
iexplorer.

Can anyone confirm this information ?

My problem is the machine came pre=loaded with XPhome edition
so there are no discs.

The following text is my questions to the support forum at the link below

http://www.winguides.com/forums/showflat.php?Cat=&Board=brdVirus&Number=122232&page=0&view=collapsed&sb=5&part=
------------------------------------------------------------------
Symptoms....when I try to use RESTORE all I get is blank box i'e no dialogue
boxes shown.
when I try to search for files again I don't see any dialogue boxes
when I try to access Symantec web site securityreponse.symantec.com I can
but can't
access their antivirus check.(I have used this before to solve virus
problems).
All this happen after I uninstalled NIS and the antivirus and tried to load
NSW which
failed to load leaving the machine without any antivirus protection.
I used the for explorer register patch from WINDOW-HELP.NET which enabled me
to use
the classic search, that worked OK but still can't find what virus I have.
I removed the firewall thinking this was stopping access to the symantec
virus check.
Still no response.As expected when I left the internet I found I had a virus
w32.spybot.worm
and download.trojan I found out what they were by checking on my other
machine.
Register has been checked to see if there were any files at
Hkey_Local_Machine\software\microsoft\windows\currentversion\run
NONE FOUND that weren't supposed to be there.

Does anybody know what virus I have ?

Update to my problem managed to run antivirus check at TrendMicro didn't
show any active
virus\worm\trojan's except a WORM_RBOT.TM located in my "System Volume
Information" directory.
Further symptoms noticed are no visual info when accessing USER accounts
also can not print
screen in IE (although Notepad prints ok).
I have noticed in registry at
HLM\Software\Microsoft\Windows\CurrentVersion\Run there appears
a sub dir called "OptionalComponents" showing IMAIL installed, MAPI
installed and Nochange
and MSFS installed.

Haven't yet been able to run HIJACKTHIS as the machine in question is at my
brothers home.
I did run Hijack on my machine to check it out that
was ok.
Some background info, initially my sister inlaw phoned saying her email
wasn't working that
was fixed. At that time the win firewall was on NIS was running.
I made the mistake of not running system scan before uninstalling NIS and
trying to install NSW.
I agree with your ramblings because thats what I've got on my old P2's and
thats what I do !

I do need help with there machine so will be in touch.
--------------------------------------------------------------

Cheers Jim

"Pamela1985" wrote:

> I just recently got an attack by the Trojan Horse and after we recovered the
> computer I tried to Manage the accounts and when I click on it from the
> Control Panel It opens a window but there is nothing that I can click on its
> just a blank screen. Also when I do the search from the start menu I am not
> able to search for anything. It brings up the window and from there you see
> the little doggy that is suppose to help assist you when you are searching
> but all I see is him and a blank blue window. Does anyone have any
> suggestions as what I can do to try and get those back without deleting all
> of my files and reinstalling windows?



Relevant Pages

  • Re: limited users can access administrators files.
    ... Note that some apps don't require admin access to install (although most ... If you're worried that you have a virus, do you have good, updated AV ... it is almost as though the limited user ... > under user accounts they are listed as limited user accounts. ...
    (microsoft.public.windowsxp.general)
  • XP "add printer" error msg = "Operation could not be performed".
    ... Then had virus problem. ... checker which had a conflict with Norton. ... Went to print something and error msg said "install ... Faxes" window and get error message: ...
    (microsoft.public.windowsxp.hardware)
  • Re: 16 BIT Window Subsytem
    ... Norton found a virus but said ... window was to restart the computer. ... >> I have been trying to install AVG 6 from Grisoft to aid ...
    (microsoft.public.windowsxp.basics)
  • Re: pop-up window named **Update**
    ... >popup-killer dosn't close the window. ... Can it be virus, not really an update? ... download and install a spyware removal program. ...
    (microsoft.public.security.virus)
  • Critical Updates donot install
    ... virus will not allow updates to be installed. ... >As tried to install automatic as well as manuely, ... > I'm about ready to throw this PC out the window!! ...
    (microsoft.public.windowsupdate)