Re: Attn: Rock

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Rock (rock_at_comcast.nospam.net)
Date: 09/20/04


Date: Sun, 19 Sep 2004 17:47:44 -0700

Rachel K wrote:

>>-----Original Message-----
>>Rachel K wrote:
>>
>>
>>>Hi Rock,
>>>
>>>I went through the steps you gave me below in regards
>
> to
>
>>>my post on Sept 18th at 6:18 "Infected files that are
>>>archived, virus program wont remove" and it didn't
>
> work.
>
>>>The 5 infected files are still present and my
>
> antivirus
>
>>>wont delete them. I am not computer savvy and this
>
> very
>
>>>frustrating. Any other suggestions?
>>>
>>>Rachel
>>>
>>>
>>>When I run my virus software (Anti Vir XP)it gives me
>
> 5
>
>>>>infected files that are archived and cannot be removed
>>>
>>>or
>>>
>>>
>>>>deleted. I can't do anything in Windows Explorer
>>>
>>>because
>>>
>>>
>>>>it shuts down and restarts immediately and my IE 6
>>>
>>>shuts
>>>
>>>
>>>>down frequently. How do I get rid of something that
>
> is
>
>>>>archived when I can't stay in Windows Explorer or on
>>>
>>>the
>>>
>>>
>>>>Internet for very long?
>>>>
>>>>Thanks
>>>
>>>
>>>Start with Trend Micro's Sysclean. After downloading
>
> the
>
>>>program and
>>>signature file turn off system restore, boot into safe
>>>mode and run it.
>>> Then boot back into normal mode, turn system
>
> restore,
>
>>>and do a
>>>complete scan with your AV product.
>>>
>>>Trend Micro Sysclean
>>>http://www.trendmicro.com/download/dcs.asp
>>>
>>>Trend Micro Signature File
>>>http://www.trendmicro.com/download/pattern.asp
>>>
>>>
>>
>>Where are these files and what are file names? You mean
>
> you downloaded
>
>>and ran Trend Micro's sysclean in safe mode, and you
>
> turned of system
>
>>restore? What were the results of the scan?
>>_____________________________________________________
>>The folder and file names are...
>
> (1)Folder: C\Documents and Settings\kyker\Local
> Settings\temp
> File: conscorr...ini
> Status: Free memory
> Detected: TR/Dldr.Stubby.C
>
> (2)Folder: C\Documents and Settings\kyker\..\THI10BA.tmp
> File: multimpp.cap...prelnsmm.exe
> Status: Free memory
> Detected: TR/Hijack.mulltiPP
>
> (3)Folder: C\Documents and Settings\kyker\..\THI163A.tmp
> File: multimpp.cap...prelnsmm.exe
> Status: Free memory
> Detected: TR/Hijack.mulltiPP
>
> (4)Folder: C\Documents and Settings\kyker\..\THI22EA.tmp
> File: localNRd.cab...polall1I.exe
> Status: Free memory
> Detected: TR/Dldr.Krepper.3
>
> (5)Folder: C\Documents and Settings\kyker\..\THI6CF0.tmp
> File: multimpp.cap...prelnsmm.exe
> Status: Free memory
> Detected: TR/Hijack.MulltiPP
>
> I did download TM's sysclean and I ran it in safemode
> with system restore off. I rebooted in Normal mode,
> turned system restore back on, and ran AntiVir XP. The
> same 5 files showed up. The results from sysclean showed
> that there were errors for some of the files it couldnt
> get into (like yahoo or aol messenger), but it wasn't any
> of my files above. When sysclean was running I noticed
> if it couldnt clean something it deleted it. Maybe it
> couldn't do either for these? It may be easier to email
> any more suggestions because sometimes my IE shuts down
> before I can get to this page.
> My email is rkyker@yahoo.com. I really appreciate your
> help.
> Rachel

Answered in the newer post.



Relevant Pages

  • Re: Attn: Rock or anyone else that can help
    ... > Status: Free memory ... Symantec Online Virus and Security Scan: ... RAV AntiVirus - Scan Online ...
    (microsoft.public.windowsxp.general)
  • Re: Please Help
    ... >> even closing my antivirus and it did not help. ... > now have a Windows 2000/98 look which turned off many of the annoying ... > Why you should use a computer firewall.. ... > The system restore feature is a new one - first appearing in Windows ...
    (microsoft.public.windowsxp.perform_maintain)
  • trojan news..
    ... i have done a scan with the sysclean in normal windows bcoz i couldn't ... it said that the restore points would b deleted so i opted not ... > 4) If you are using WinME or WinXP, ...
    (alt.computer.security)
  • Re: What is Backdoor.Winbach as reported by eTrust Pest Patrol scan?
    ... do not use prior restore points. ... First thing is to run a cleanup on your current system. ... "Michael" wrote ... I suggest you get & run SYSCLEAN from Trendmicro. ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Cannot mount Mailbox Store nor Public Folder Exchange 2000
    ... You were absolutely correct.The antivirus did as you ... However an overzealous server operator cleared out the ... Hence my restore ... >Hello Steve, ...
    (microsoft.public.windows.server.sbs)