Re: Clarifying questions!

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

JJ

Junior Junk wrote:


I don't believe I downloaded any software to use my camera. I have
been using a third party photo album application (Photoshop Pro Photo
Album). I could not find how Sony Cybershot on the list of
applications to uninstall.

With my own digital camera I was provided with a CD but I am not certain one is always needed. It would seem that I am placing an incorrect interpretation on the original Error Report referring to Sony Cybershot


I did enter the run cmd: net share Sony Cybershot /delete
The screen appeared to have a window flash up and close instantly.
Otherwise, no visible change.

So, please give me guidance on next steps for the step 3. (Sony
Cybershot)

I would leave this point for now as there are other issues needing attention first. The other action taken by you may have resolved the problem.


Was there a reason for the Microsoft Fax Service being installed? Did
you intend at some point intend to use it?

I do not intend to use it. I suspect it came installed on my
computer. Though, it is possible that I installed it in the past and
do not recall doing so. I certainly have no need of it at this time.

Good. That closes that problem.


You have Norton Internet Security installed? What version? Has the
subscription expired?

Had the subscription expired and, if so, how long ago? I am asking because you have an infestation.


At this point, I have run the Norton Removal tool. I have not
reinstalled Norton Internet Security.

Removing Norton Internet Security can be problematic, even when you use the Removal. Not everything may have been removed. However, there is no need to pursue that possibility at this time.

How much RAM memory does your computer have? Right click on the My
Computer icon on your Desktop to get this information.

Dell Dimension XPS
Pentium 4 Processor 550 (3.4GHz)
2GB DDR2 SDRAM at 553MHz
System properties simply says 2.00 GB of RAM

Good. No problem there.


Microsoft Windows XP (SP2)
At installation it was SP1a, therefore, this is what my XP CD has.
I downloaded SP2 online.

Good. No problem there.


After attempting to complete step 3, I moved on to step 5. (Step 4
does not require any action from me.)

Earlier answers to Step 4 do throw up an issue. You were running two programmes in the background performing similar tasks. Norton Internet Security and Windows Live OneCare. A conflict between the two could result in one or both dropping the ball.


Step 5 directed me a link where I downloaded and ran the Windows Live
OneCare Tool. (It would not open in Firefox and luckily I thought of
trying to access it via IE, which worked.)

Good you got around that hurdle.


It found 1 medium risk that Windows Live OneCare was unable to clean.
http://safety.live.com/site/en-US/virusenc/VirusEncInfo.htm?virusname=PowerRegScheduler

This was located in-
c:\recycler\s-1-5-21-15916 83429-1095659703-1588970106-1006\dc233.exe

A definite nasty. The nasy is in your recycle bin. Enter Safe Mode and empty your Recycle Bin and run Disk CleanUp for good measure.



It found 1 low risk Windows Live OneCare was unable to clean.
http://safety.live.com/site/en-US/virusenc/VirusEncInfo.htm?virusname=Exploit%3aJS%2fIframeBOShell

This was located in-
c:\documents and settings\all users\application data\symantec\norton
antivirus\quarantine\09 Ia4f5f (cryptff)\(utf-161e)\(scri pt0000)

Another nasty. Is that file still there following the removal of Norton Internet Security? It would seem that Norton detected and quarantined the bug. Try deleting 09 Ia4f5f (cryptff)\(utf-161e)\(scri pt0000) in Safe Mode.


I allowed Windows Live OneCare to defragment the harddrive. (This is
ongoing.)

Step 6 does not require me to do anything if I understand it
correctly. I do not need to reinstall Photoshop Pro Photo Album at
this point.

Noted

Step 7 directs me to another forum with a lengthy discussion. I am
not certain I can follow the directions there. Please advise on what
to do concerning step 7.

Nass also has me foxed on this one. There are a few reports linking that CLSID to malware. Malware does often disguise itself but I cannot follow why that message in the bleepingcomputer forums helps.


Step 8 was a discussion of my Norton AntiVirus protection prior to the
problem's arrival. :-)

Windows Live Onecare does include anti-virus protection.
http://www.windowsonecare.com/prodinfo/Default.aspx

It is, however, a beta.

Step 9 is where I find myself next.
9. Visit one or all of the following for virus scanning?
http://www.pandasecurity.com
http://www.sophos.com
http://www.avast.com
http://www.trendmicro.com

Sometimes you need to run an anti-virus from a floppy and Trend offer one that can be used.

Create a new folder named Sysclean (e.g., C:\Program files\Sysclean, or just a desktop folder).
Download Sysclean.com (http://www.trendmicro.com/download/dcs.asp) and place it in this folder.

Download the latest Controlled Pattern Release zip
(http://www.trendmicro.com/download/pattern.asp, e.g., lpt123.zip) and
extract its contents to the same folder. See the Readme text file for additional instructions.

Delete Temporary Internet Files (IE Tools>Internet Options>General) accepting the option to delete all offline content. Reboot and delete
contents of all TEMP folders and then your Recycle Bin.

Close all running programs including your anti-virus application (Live OneCare) , go offline, and run Sysclean. For best results, do nothing with the machine
until the scan completes.


Then step 10
10.
For malwares:
install, then run the updates to get the new definitions and scan
for malwares:
http://www.lavasoft.com/products/ad-aware_se_personal.php

From the above link you will down;oad the Lavasoft SE for personal
use only to scan for malwares.

http://www.safer-networking.org for Spybot S&D

From the above you need to download the Spybot S&D and don't run in
Tea timer mode when you setup the scaning options.


I should install something available from those two web pages? One
thing from both pages? Then I should run one or both applications
and scan for malwares, correct?

That right, but try to download the update by runing the update
option to get the latest definitions for them.

What is Tea Timer mode? Will it be obvious when I download the
application?


I am not familiar with Tea Timer but this post from Google may help.

From: Phillips
Date: 19.7.2004
Group: microsoft.public.windowsxp.basics


TeaTimer should load automatically at startup.
Open Spybot, Mode/AdvancedMode/Yes; then left click the Tools tab (on the
lower left-hand side of the window, with a small white + in a blue square.In
the Tools menu check the Resident checkbox in the main Spybot window. Double
click the Resident Icon and in the resident Window check Resident "TeaTimer"
(the second checkbox) You can also check the one on top. Exit Spybot and
reboot. TeaTimer should be in your TrayBar and in your Processes.

Michael



What is the current position regarding generation of Error Reports?
Restart your computer noting the time. Wait 10 minutes and then look
in Event Viewer. Please post copies of any Warning and Error Reports
appearing after you restarted your computer.

Given the above information, please let me know if I should do this
at this time, or if the new information changes your request.

Whenever.



Thanks again.
JJ

You've had your ration for the next month <G>.


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~




.

Relevant Pages

  • Re: Finder disappointment
    ... The Mac OS X Finder has changed the user interface to be based around ... principles, remembering the view for each folder, down to the window ... Your reference to `aliases' is confusing - what sort of alias? ...
    (uk.comp.sys.mac)
  • Re: Image Viewing Software for CDs
    ... Download the file Slideshow.exe in one of your folder, ... this window to copy to a CD-R. ... Check if your drive is set for recording. ... but you can't find a Recording tab when the window opens. ...
    (microsoft.public.windowsxp.photos)
  • Re: Spotlight still sucks.
    ... When one opens a Window via Show All, ... hold down the shift key while selecting "Find" from the File menu or ... Duplicate, Make Alias, Burn and Compress are missing. ... Choose "Open enclosing folder" and then continue. ...
    (comp.sys.mac.advocacy)
  • Re: Taking of installing stuff in different OSs ..
    ... What I'd do is open a Finder window, click on the `Computer' icon at the ... Apps folder. ... I then close the .dmg then drag it to the trash. ...
    (uk.comp.sys.mac)
  • Re: Internt Explorer with unknown error
    ... You could try downloading and replacing this file again from ... Open Windows Explorer, click on Tools, click on "Folder Options...". ... in the "Folder Options" window, click on the "View" tab at the top. ... If the above does not resolve the issue, you might also try the following ...
    (microsoft.public.windows.inetexplorer.ie6.browser)