Re: SP2 makes XP-Home/SP1 CD useless - TROJAN


"Donald McDaniel" <dlmcdaniel2005@xxxxxxxxx> wrote in message news:2r4vg1l5cs19d9f8soh6c1k96p2ivd7hts@xxxxxxxxxx 
On Fri, 26 Aug 2005 15:39:34 -0500, "~ FreeSpirit ~"
<spammenot@xxxxxxxxxx> wrote:


"Donald McDaniel" <dlmcdaniel2005@xxxxxxxxx> wrote in message
news:tsfug1h3app8hi1harpf03rjhif46km01u@xxxxxxxxxx
> On Thu, 25 Aug 2005 23:58:31 -0500, "~ FreeSpirit ~"
> <spammenot@xxxxxxxxxx> wrote:
>
>>
>> "Donald McDaniel" <dlmcdaniel2005@xxxxxxxxx> wrote in message
>> news:b1org1d4ik6tes90onq9qanp6oi2qrsu8t@xxxxxxxxxx
>> > On Thu, 25 Aug 2005 09:30:24 +0100, "DL" <dl@spoofmail> wrote:
>> >
>> >> In your previous post on the Card reader, you were sent a link to >> >> an
>> >> MS
>> >> repair wizard.
>> >> You posted back that you had run this and it reported a problem >> >> with
>> >> your
>> >> card reader.
>> >>
>> >> Your card reader is defective
>> >
>> > More properly, the card reader is probably INCOMPATIBLE with XP and
>> > SP2.
>>
>> ** The flash-card reader came with this HP computer as did XP-Home. >> The
>> MS
>> scanner and camera wizard worked for 22 or 23 months, then quit. The
>> flash-card reader works fine - through WE. I would rather use the >> Wizard
>> as
>> it's much faster than WE to download the pictures. How can I make >> this
>> problem any plainer?
>>
>> > As for the problem of not being able to download critical updates to
>> > XP because of SP2: This is EXACTLY what SP2 was designed to do: >> > STOP
>> > you from downloading updates IF you have a PIRATED key or >> > installation
>> > of XP.
>>
>> ** Oh, get real!!!! I have the KEY number from HP and the 6 CDs to
>> reinstall the OS. I find that comment very insulting.
>>
>> > I would personally have your key CHECKED with Microsoft to make sure
>> > it is legitimate.
>>
>> ** How? Are you saying HP installed a pirated copy of XP on my PC?
>>
>> FS~
==================================
> Please forgive me for my seeming inferrence that you might have
> pirated software with your knowledge and cooperation. I did not mean
> to make this inferrence. It was an accident of my choice of words. I
> only meant to explain to you that it was possible to have a pirated
> key without your, or HP's, knowledge.

## How and where would I check this? How can I know? I trust HP would give
me a legal copy of W-XP. The PC was bought new from CompUSA. I can't see
how an illegal copy could have been installed. 

Microsoft has a website to check your CD key.  Submit it to:
http://www.microsoft.com/genuine/downloads/whyValidate.aspx
Just click on the first button on the page.  It will ask for your
product key.  Just enter it as it it was released to you.

I think it is a Java control, not an ActiveX control.  But I'm not
sure.  I have no problem using ActiveX on my installation of XP w/SP2

> Anything is possible.
>
> For example:
> A few months ago, Microsoft STOPPED allowing certain OEM versions of
> XP(such as HP's) to be  activated via the Internet.  It seems that 20
> or so large system builders' CD keys were being HEAVILY pirated.  So
> it IS possible for your key to be one of the pirated keys.  This is
> not HP's fault, nor is it Microsoft's.  It would just be a coincidence
> of the market-place.  Microsoft took this action to protect it's
> patents, trademarks, and profits.
> I would definitely check your key with Microsoft to make sure it is
> legitimate.  I would do it if it were mine, and I do check it, from
> time to time.

## Geeze!!!!! I believe you. How can I check with MS to be sure I have a
legal copy? I bought this PC in August of 2003.

> As for your scanner.  I have found that it is best to use the
> manufacturer of your scanner's software to use the scanner, rather
> than Microsoft's.

## I do.  I use Epson's software and the parser so it works with XP.

 Also make sure you are using the latest software
> and drivers for your scanner model.  It IS possible for SP2 to have
> "broken" some scanner software.  Check with HP to make sure you have
> any fixes for their software.

## I always but since installing SP2 I can no longer get downloads from HP
or MS. It's something about Active-X controls. I click to allow them if
given the choice (seldom) - but SP2's security does not allow them. I can
no longer use those websites to download anything - nor can I have helpful
websites SCAN my PC for worms and Trojans anymore. I've lost control of my
PC since installing SP2.

> It is possible, if you are using the driver originally supplied with
> XP, that it was "broken" by SP2.  Contact HP support to make sure you
> have a driver and software which is rated to work with SP2.

## See above. As long as SP2 is on this machine and I can't disable it to
allow downloads from HP and MS, I can't get any updates, patches etc. Sp2
doesn't allow any scans to help find problems either. I think I have to
get SP 2 off my system so I can once again get the critical patches,
updates, scans etc...... there doesn't seem to be any setting in SP2 to fix
this Active-X problem.
----------> 
I am sure that your ActiveX problem is not caused by SP2 itself, since
millions of people have installed it with no subsequent problems with
ActiveX.    I would CERTAINLY not use any other browser than Internet
Explorer  to update Windows (especially since 99.99% of them don't
implement ActiveX).

## You're right - the problem was/is an unremovable TROJAN. This is a copy of my message posted above in case you missed it:

Although I run Spybot, Adaware, and for the past week or so MSAS-Beta, have BHODemon and a StartUpMonitor plus CW SHredder and (monthly) HiJackThis (I found several suspicious things and set them on ignore) on my PC - last night MSAS found a Trojan that can't be removed. It's called "Trojan.downloader.HBO.req." Looking on the web and downloading the Spyware Dr as suggested by I believe Mr. Hall, I found nothing to remove it with. SpywareDr. doesn not see it. Only MSAV saw it but can't remove it. All I can do is deactivate it with HBODemon. You can't delete or remove the pmkhh.dll. If I delete the Key it comes back at the next reboot, even in Safe Mode. Paying for a program that promises to remove it is chancy since it can generate itself with each boot-up from what we understand. **Also, this Trojan prevents paying for AS/AT/ware. It doesn't allow the page where you pay to load.** This is the first time in almost 10 years I've had anything like this on my PC.

There is a possiblility that you don't have ActiveX properly
configured in InternetExplorer.  Check with someone very knowledgeable
about WindowsXP about how to FULLY implement ActiveX in Internet
Explorer under SP2.


## I have it set to default - but I don't think that's the problem.

As a last resort, you COULD just uninstall SP2, unless you have
deleted the installation files to save space on your HD.


## No, I didn't delete them, but deleting Sp2 wont help this problem.

But of course, if SP2 was slipstreamed at the factory with your OS,
you will be unable to uninstall SP2.  In that case, only a clean
install of XP (or another OS) will work

## We want to see if we can somehow locate information on how to remove this TROJAN before going through another reformat and reinstall of the OS. We're sick over this........ we're both so careful not to open anything suspicious, download anything questionable.....

FS~

.