Re: Many problems

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: ***Wolverine*** (Wolverine_at_discussions.microsoft.com)
Date: 11/05/04 

Date: Fri, 5 Nov 2004 07:34:14 -0800

Dear Chuck, Thank you for responding to my question. I connect to the
internet with my phone line. The only things I've ever downloaded over the
internet (other than something from Microsoft) are those programs that scan
for viruses. They don't find anything except "cookies", and I delete the
cookies. I have McAfee virus protection. I don't think I have Service Pack
2. I'm computer illiterate and don't quite understand what you are saying
about creating a folder (I know how to make a folder, I just wouldn't know
what exactly what I should put in it and what to do then). If I run one of
the programs to find adware on my computer, should I buy the program over the
internet in order to remove the adware? I'll look into the links you listed
that I haven't already downloaded and see if I can fingure out if there is
anything I can still do. Chuck, why don't my siblings have any problems with
adware and viruses--and they don't have any antivirus protection like McAfee?
 Does this only happen with XP? I never had these types of problems until I
got XP!

"Chuck" wrote:

> On Thu, 4 Nov 2004 16:11:03 -0800, ***Wolverine***
> <Wolverine@discussions.microsoft.com> wrote:
>
> >I have many problems with XP home edition. I'm not on a network and I don't
> >have Oracle.
> >Here are the latetest:
> >System Event ID 4, E100B, Warning
> >System Event ID, 4202, Tcpip, Error
> >The computer freezes when I try to disconnect from the internet. I have to
> >turn off the computer.
> >I can't install my Scanner. The programs install, but the hardware won't.
> >I have the CD.
> >On the system tray, there is an X that says, Local Area Connection. A
> >Network Cable is Unplugged, when I point to the X. (I'm not on a network.
> >This is a home computer.)
> >Can you help?
>
> How does the computer connect to the internet? And what protection do you have
> against the bad stuff that's out there?
>
> Freezing when you disconnect from the internet sounds like an infection of some
> type.
>
> Do you have the Windows XP firewall (SP2? pre-SP2?) enabled? If not, enable it
> immediately.
>
> How current is your virus protection? Try one or more of these free online
> virus scans, which should complement your current protection:
> <http://www.bitdefender.com/scan/license.php>
> <http://www.pandasoftware.com/activescan>
> <http://www.ravantivirus.com/scan/>
> <http://security.symantec.com/ssc/home.asp>
> <http://housecall.trendmicro.com/housecall/start_corp.asp>
>
> Now check for, and learn to defend against, additional problems - adware,
> crapware, spyware.
>
> Start by downloading each of the following additional free tools:
> AdAware <http://www.lavasoftusa.com/>
> CWShredder <http://www.majorgeeks.com/download4086.html>
> HijackThis <http://www.majorgeeks.com/download.php?det=3155>
> LSP-Fix and WinsockXPFix <http://www.cexx.org/lspfix.htm>
> Spybot S&D <http://www.safer-networking.org/index.php?page=download>
> Stinger <http://us.mcafee.com/virusInfo/default.asp?id=stinger>
> TrendMicro Engine <http://www.trendmicro.com/download/dcs.asp>
> TrendMicro Signatures <http://www.trendmicro.com/download/pattern.asp>
>
> Create a separate folder for HijackThis, such as C:\HijackThis - copy the
> downloaded file there. Create a separate folder for the two TrendMicro files,
> such as C:\TrendMicro - copy the downloaded files there (unzipped if necessary).
> AdAware, CWShredder, and Spybot S&D have install routines - run them. The other
> downloaded programs can be copied into, and run from, any convenient folder.
>
> First, run Stinger. Have it remove any problems found.
>
> Next, close all Internet Explorer and Outlook windows, and run CWShredder. Have
> it fix all problems found.
>
> Next, disable System Restore.
> <http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm>
> Boot your computer into Safe Mode.
> http://support.microsoft.com/?id=315222
> Run C:\TrendMicro\Sysclean.com. Delete any infectors found.
> Reboot your computer, and re enable System Restore.
>
> Next, run AdAware. First update it ("Check for updates now"), configure for
> full scan (<http://forums.spywareinfo.com/index.php?showtopic=11150>), then
> scan. When scanning finishes, remove all Critical Objects found.
>
> Next, run Spybot S&D. First update it ("Search for updates"), then run a scan
> ("Check for problems"). Trust Spybot, and delete everything ("Fix Problems")
> that is displayed in Red.
>
> Then, run HijackThis ("Scan"). Do NOT make any changes immediately. Save the
> HJT Log.
> <http://forums.spywareinfo.com/index.php?showtopic=227>
> <http://forums.spywareinfo.com/index.php?showtopic=11150>
>
> Finally, have your HJT log interpreted by experts at one or more of the
> following security forums (and please post a link to your forum posts, here):
> Aumha: <http://forum.aumha.org/index.php>
> Net-Integration: <http://forums.net-integration.net/>
> Spyware Info: <http://forums.spywareinfo.com/>
> Spyware Warrior: <http://spywarewarrior.com/index.php>
> Tom Coyote: <http://forums.tomcoyote.org/>
>
> If removal of any spyware affects your ability to access the internet (some
> spyware builds itself into the network software, and its removal may damage your
> network), run LSP-Fix and / or WinsockXPFIx.
>
> Finally, improve your chances for the future.
>
> Harden your browser. There are various websites which will check for
> vulnerabilities, here are three which I use.
> http://www.jasons-toolbox.com/BrowserSecurity/
> http://bcheck.scanit.be/bcheck/
> https://testzone.secunia.com/browser_checker/
>
> Block Internet Explorer ActiveX scripting from hostile websites (Restricted
> Zone).
> <https://netfiles.uiuc.edu/ehowes/www/main.htm> (IE-SpyAd)
>
> Block known dangerous scripts from installing.
> <http://www.javacoolsoftware.com/spywareblaster.html>
>
> Block known spyware from installing.
> <http://www.javacoolsoftware.com/spywareguard.html>
>
> Make sure that the spyware detection / protection products that you use are
> reliable:
> http://www.spywarewarrior.com/rogue_anti-spyware.htm
>
> Harden your operating system. Check at least monthly for security updates.
> http://windowsupdate.microsoft.com/
>
> Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
> use:
> http://www.accs-net.com/hosts/get_hosts.html
> http://www.mvps.org/winhelp2002/hosts.htm
> (The third is included, and updated, with Spybot (see above)).
>
> Maintain your Hosts file (merge / eliminate duplicate entries) with:
> eDexter <http://www.accs-net.com/hosts/get_hosts.html>
> Hostess <http://accs-net.com/hostess/>
>
> Secure your operating system, and applications. Don't use, or leave activated,
> any accounts with names or passwords with trivial (guessable) values. Don't use
> an account with administrative authority, except when you're intentionally doing
> administrative tasks.
>
> Use common sense. Yours. Don't install software based upon advice from unknown
> sources. Don't install free software, without researching it carefully. Don't
> open email unless you know who it's from, and how and why it was sent.
>
> Educate yourself. Know what the risks are. Stay informed. Read Usenet, and
> various web pages that discuss security problems. Check the logs from the
> security products that you use regularly, look for things that don't belong, and
> take action when necessary.
>
> How did I get infected in the first place?
> http://forums.net-integration.net/index.php?showtopic=3051
> Essential tips for infection prevention
> http://forums.spywareinfo.com/index.php?showtopic=24339
>
> Chuck
> Paranoia comes from experience - and is not necessarily a bad thing.
>

Relevant Pages

  • Re: What Is Blue Screen of Death? I Think I have it!
    ... Have discovered Welchia again on my computer. ... product of Muckrosoft meant to punish us for not downloading Service packs. ... Now, with almost nothing downloaded from the internet, this smokin' ... Before connecting any XP system (new or a fresh install) to the internet: ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Buying incremental MacOS releases on disc
    ... install 10.5.0 and then get the update over the Internet. ... From what I have read it requires downloading software. ... To infest your machine with the recently-reported trojan horse you must ... on the disk image to install the trojan horse in your system. ...
    (comp.sys.mac.system)
  • Windows XP with Internet Complications
    ... Chuck Wrote: ... > clearing my temporary internet files and cookies. ... > Start by downloading each of the following additional free tools: ... First update it, then run a scan. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Illegal Downloaders Face Ban
    ... "People in the UK who go online and illegally download music and films may have their internet access cut under plans the government is considering. ... Davenport Lyons would send a monthly letter to each ISP to tell them which customers must be punished, and after about six months you might possibly persuade your ISP that you are innocent and that your access should be restored. ... personally i'd prefer to see a 'tax' on my internet connection, say a few quid a month, with the gov distributiong it to anyone who can show they have registered something as copyright, and an even split at that so its not just 'big corp' who gets something back, and the result being that downloading stuff just becomes legal, and everyone is paying. ...
    (uk.legal)
  • Re: zone alarm woes-deluxe games
    ... >>> Downloading is typically copying a file from a network drive or server. ... >>> Evidently you've already downloaded the product install file from the ... ZA and ZA Pro does both. ... some apps were gaining internet ...
    (microsoft.public.windowsxp.general)