Re: IE7 Uninstall & regedit

Back for the last time hopefully but only on this problem.
Due to the fact that every time I ran a virus/spyware check I got the same
errors even they were deleted on the previous run I decided to bite the
bullet and do a clean install.
Have done that and so far so good.
Everything is working out fine and I am able to go on the WEB and run the
cmd and msconfig applications.
I am very grateful to you for your patience and help over the past week or so.

Thanks

tom

"Rock" wrote:

"toreilly" <toreilly@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
Yes I did the edit from Kelly's site.
Just ran Hijack and am going to try to post it. Can you advise how to add
an attachement or file to a post?

It depends on where you are posting to. If you want to include the hijack
this log to one of those forums, normally you copy and paste it into the
body of your post

Please don't post it here. That's what those specialty forums are for.

Ran the sysclean and found the following: WORM_MIMAIL Registry data
deleted?
Following this I ran:
Ad Aware------No Critical object found
S&D----------- No critical Object found
PCRescue----No critical object found
AVG Anti Virus and Spyware:-------Again nothing found.
All run in safe mose.
Looked for the WORM and could not find it in safe mode.

Ran machine in Normal mode and we still have the problems as before.



"Rock" wrote:

"toreilly" <toreilly@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9456C64A-C7F8-4C2F-BEF9-A8DDB14F93A7@xxxxxxxxxxxxxxxx
I know I am a nuisance but canI ask please?
What exactly should I be downloading?
I downloaded sysclean.comand the Zip file lpt571 but the Zip file would
not
open.
Also at the moment I cannot get on the WEB after the first connection.
When I get on to the home page and then try to connect to a second site
it
fails.(Using Internet Explorer).
I am doing my best to go thro the malware removal steps.
The David Lipmans site is in a foreign language, at lease foreign to
me.
I will continue with the removal steps as best I can until I get more
advise.
I suspect at this stage I might have to reformat and I am not looking
forward to doing that.

Thanks for your help to date.


"Rock" wrote:

"toreilly" wrote
I have followed all advise as best I could with my limited knowlege.
I have run all the virus and others checks both in Safe Mode and
normal
mode.
No major problems have been found except CMS.MSCONFIG is found every
time
bY
CWSCHREDDER.
Apart from the cmd and other shortcuts not working Symantec will not
allow
me to do a virus check over the WEB, it is saying that ActiveX is
not
enabled
but it is??
I do not run Norton on this amachine, I run AVG.

I would be grateful for any more advise you might have.

"Rock" wrote:

"toreilly" <toreilly@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
Desperate is not good enough a word for how I feel now.
I cannot see or find any Virus's Adaware, Spyware by running my
checks
but
I
still cannot run CMD: MSCONFIG: REGEDIT etc from the start/run.
All my other applications are running fine.

Please help anybody???

"toreilly" wrote:

Yes I have run in Safe Mode and they all work fine in that mode.
Have run anti-virus, ad-aware, S&D etc and all is fine, no fault
found

Any more advise would be welcome.

"Rock" wrote:

"toreilly" <toreilly@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
Ramesh, I don't want to be a nuisance but you may be able
to
help
me
again.
When I click; START-----RUN----- and type any of the
shortcuts;
REGEDIT:
MSCONFIG: CMD etc nothing happens though it was okay
earlier
today.

Hope you can advise.

Did you reboot to see? What happens in safe mode? These
commands
not
working is usually an indication of a malware infection.

Malware Removal
http://www.elephantboycomputers.com/page2.html#Removing_Malware

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Richard Harper’s Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

Try running the edit on Kelly's site:
http://www.kellys-korner-xp.com/xp_tweaks.htm
Line 275: Lift Restrictions - TM, Regedit and CMD

See the top of the page for info on running the edit.

1. Did you try running that edit on Kelly's site I gave you the info
on?

2. Did you run through all the malware removal steps in the first
link I
gave you, including running David Lipman's Multi-AV tool?
http://www.elephantboycomputers.com/page2.html#Removing_Malware

3. Have you run HiJackThis and posted a log to one of the specialty
forums
for it, _not_ this one, to have an expert look at it?

Forums to Interpret HijackThis Logs:

http://forums.spywareinfo.com/
http://forum.aumha.org/viewforum.php?f=30
http://forums.tomcoyote.org/
http://www.wilderssecurity.com/

There were two other things I asked about, which you didn't reply to:

1. Did you run the edit on Kelly's site

2. Have you run HijackThis and posted the log to one of the specialty
forums?

Also there are newsgroups specifically for malware issues:

microsoft.public.security.homeusers
microsoft.public.security.virus

--
Rock [MS-MVP User/Shell]





--
Rock [MS-MVP User/Shell]


.

Relevant Pages

  • Re: IE6 adds /?%20 to URLs
    ... Be sure to update you AV and run all the programs again in Safe Mode with Hidden files enabled. ... Please DO NOT post your log HiJackThis log to this newsgroup. ... It is important that you go to one of the HiJackThis Support Forums below and allow the experts there to analyze it for you.: ... or Winsock Fix Utility ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Pop-Up Wont Go Away
    ... they can only be detected and removed in Safe Mode. ... throw everything here at your "infection". ... And be sure to use the HijackThis. ... You will have to Register before posting on these Forums. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Cannot Close IE6
    ... You mentioned that you posted a Hijackthis log and it ... Safe Mode and Hidden files enabled? ... Then post your HijackThis log to one of the following forums for full ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Toolbar888
    ... SAFE MODE. ... Elendil - When I go to your website, I'm greeted by a big Joke Toolbar ... to be a helper on one of the HijackThis forums. ...
    (microsoft.public.security.virus)
  • Re: IE7 Uninstall & regedit
    ... Yes I did the edit from Kelly's site. ... Looked for the WORM and could not find it in safe mode. ... Apart from the cmd and other shortcuts not working Symantec will not ... Forums to Interpret HijackThis Logs: ...
    (microsoft.public.windowsxp.general)
Loading