Re: User Account Problem



You're not quite cleaned up, see (may need to scroll down):
http://www.castlecops.com/StartupList.html

**It is very important to run the update for each program before running the app/s to be sure you have the latest definitions.**
Run the programs in Safe Mode after assuring you have shut down all running tasks except explorer or systray and all apps are fully up to date.
Remove your Temp Internet files: Right click IE. Under the General tab click Delete Files, put a check in Delete all Offline..., click OK and close when finished.
Delete all files in c:\windows\temp.

Download/run Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search variants:
http://www.richardthelionhearted.com/~merijn/cwschronicles.html

Download/install/run Ad-Aware SE to detect/rid of any other parasites/spyware that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the latest up-to-date ref file, then run Ad-Aware and delete everything it finds.

Download/install/run Spybot - Search & Destroy:
http://security.kolla.de/index.php?lang=en&page=download
Run it at it's default settings until you learn an know more about it. Spybot S&D is more of an advanced users tool and changing from the default settings can be dangerous to the novice user. Items found in the default settings that are RED can usually be safely removed. If you are unsure of a found item, do not remove it and ask for help.

If you still have problems, download/run HijackThis from:
http://www.richardthelionhearted.com/~merijn/downloads.html
http://majorgeeks.com/downloads31.html

Copy HJT to it's own folder, this is where the log files will be saved. Run HJT in Normal Mode.
Do not remove anything with it until you get advice on what to remove, HJThis will list many apps that are needed along with the bad ones. Removing items listed hap-hazardly without knowing what they are can/will create a royal mess. Read the quick start here on how to create a log file that can be copied/pasted into a forum that can provide assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate forum where they specialize in spyware/hijacker removal. Please read any sticky notes for proper posting which are most commonly posted first at the top in each specific forum. Read any information under each forum category name for information on what that particular one is used for, look for the proper one that you post logs to.
http://forums.spywareinfo.com/
http://aumha.net/
http://forum.aumha.org/

After running the above and assuring you have a clean machine:
It’s also a good idea to have a HOSTS file to block bad sites, scroll to HOSTS File Manager here:
http://www.mvps.org/PracticallyNerded/Software.htm

Download/install/run SpywareBlaster which stops the badboys before they even get a chance to install:
http://www.javacoolsoftware.com/spywareblaster.html


--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/




Kat Smith wrote:
After getting rid of a major malware problem I went to my user account icon
but when I clicked on it I get a black screen that says "16 bit ms-dos
subsystem. C:\\windows\system32\mshta.exe.
C:\\Windows\system32\Autoexec.nt. The system file is not suitable for
running MS-DOS and Microsoft windows application." Now I'm unable to cancel
the guest account, which gave me the malware problem in the first place, and
I'm afraid I won't be able to install new programs because I don't have
administrative rights. Can someone give me step by step instructions on how
to fix this. Thank you for any help.

.



Relevant Pages

  • Re: troublesome pop ups
    ... It would have been more than hard pressed to install a Sym 2008 update 3 yrs ago. ... download/run HijackThis from: ... Copy HJT to it's own folder, this is where the log files will be saved. ... Read the quick start here on how to create a log file that can be copied/pasted into a forum that can provide assistance on removal of unwanted pests. ...
    (microsoft.public.windowsxp.general)
  • Re: Removing File From Desktop.
    ... download/run HijackThis from: ... Copy HJT to it's own folder, this is where the log files will be saved. ... that can be copied/pasted into a forum that can provide assistance on ... even get a chance to install: ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Windows XP taskbar invasion
    ... Spybot S&D is more of an advanced users tool and changing from the default settings can be dangerous to the novice user. ... download/run HijackThis from: ... Copy HJT to it's own folder, this is where the log files will be saved. ... Read the quick start here on how to create a log file that can be copied/pasted into a forum that can provide assistance on removal of unwanted pests. ...
    (microsoft.public.windowsxp.general)
  • Re: mscongig startup
    ... download/run HijackThis from: ... Copy HJT to it's own folder, this is where the log files will be saved. ... Read the quick start here on how to create a log file that can be copied/pasted into a forum that can provide assistance on removal of unwanted pests. ... msconfig, preventing it from being loaded at start up and this fixed ...
    (microsoft.public.windowsxp.general)
  • Re: Red error pops up?
    ... Spybot S&D is more of an advanced users tool and changing from the default settings can be dangerous to the novice user. ... download/run HijackThis from: ... Copy HJT to it's own folder, this is where the log files will be saved. ... Read the quick start here on how to create a log file that can be copied/pasted into a forum that can provide assistance on removal of unwanted pests. ...
    (microsoft.public.windowsxp.general)