3. Now run a thorough check for hijackware, including posting requested logs
in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
Post by AdelaHi Robear and thanks so much for a thorough review of, and remedies for, my
problems! Yes...it is very complicated for me I'm embarrassed to admit, and
can't afford a technician to come over (I couldn't carry it!). Also, I
don't have a 2nd computer... :o) As you can see, I'm only a mediocre,
simple computer user with a very old computer which, all things considered,
I believe is doing remakably well... lol!
However, after following your previous instructions, I did several
anti-virus scans, and it caught and deleted several infections at different
times, even after scanning and while I was writing my emails! As a result,
2 of the problems got fixed: the Google "Clear History", and the "The
document moved, redirect...". Two problems resolved out of 3 is an
excellent thing and I thank you a lot! The only one that remains is the
frequent error: "This program is not responding..." Do you think this is
caused by a virus or spy rather than by a mechanical kind of error?
As to the MSRT, I don't have MS Live, and don't have yet IE8, which I've
seen in the MS links below. But I think I may be able to do some of the
other scans you suggested. Meantime, your valuable efforts won't be wasted
at all as I'm keeping all the data and links you so very kindly prepared for
me, in case I'll gather enough courage to try to do it.
Again my thousand thanks to you! :-) Adela
Post by PA Bear [MS MVP]As I suspected earlier, you are seeing the effects of a hijackware
infection!
NB: If you had no anti-virus application installed or the subscription had
expired *when the machine first got infected* and/or your subscription has
since expired and/or the machine's not been kept fully-patched at Windows
Update, don't waste your time with any of the below: Format & reinstall
Windows. A Repair Install will NOT help!
Microsoft PCSafety provides home users (only) with no-charge support in
dealing with malware infections such as viruses, spyware (including
unwanted software), and adware.
https://support.microsoft.com/oas/default.aspx?&prid=7552&st=1
https://consumersecuritysupport.microsoft.com/
Otherwise...
http://www.microsoft.com/security/malwareremove/default.mspx
NB: Run the FULL scan, not the QUICK scan! You may need to download the
MSRT on a non-infected machine, then transfer MRT.EXE to the infected
machine and rename it to SCAN.EXE before running it.
2a. WinXP => Run the Windows Live Safety Center's 'Protection' scan
http://onecare.live.com/site/en-us/center/howsafe.htm
http://onecare.live.com/site/en-us/center/whatsnew.htm
3. Now run a thorough check for hijackware, including posting requested
logs in an appropriate forum, not here. DO NOT SKIP THIS STEP!!
• http://mvps.org/winhelp2002/unwanted.htm
• http://inetexplorer.mvps.org/tshoot.html
• http://www.mvps.org/sramesh2k/Malware_Defence.htm
• http://www.elephantboycomputers.com/page2.html#Removing_Malware
**Chances are you will need to seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://www.spywarewarrior.com/viewforum.php?f=5,
http://www.dslreports.com/forum/cleanup,
http://www.bluetack.co.uk/forums/index.php,
http://aumha.net/viewforum.php?f=30 or other appropriate forums.**
If these procedures look too complex - and there is no shame in admitting
this isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop.
Post by AdelaHi again Robear. I did all the suggestions you gave me, including the
Reset, also tested it, and it sitll has the 3 errors. On restarting it, the
anti-malware Hitman Pro found 3 items which I list below in case they mean
atapl.sys
C:\Windows\System32\drivers (rootkit)
sdra64.exe
C:\Windows\System32\ (malware)
windir.exe
Documents and Settings\My Name\Local Settings\Temp (malware)
Is there something else that can be done to fix the errors? But meantime,
which of the Adobe Reader v9.3.1 I should download, per my previous
email
to
you.
Also, is there another way to get rid of the very long list of Google
history files where the "Delete History" button cannot be seen?
Thank you very much for all your help! :o) Adela
Post by PA Bear [MS MVP]Post by AdelaMy new computer came with a paid-up McAfee but shortly after I foolishly
paid again for Norton on someone's recommendation. At present I have Avira
Antivir personal free.
Assuming you uninstalled the McAfee application and the Norton application
ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe
1b. Download the McAfee Consumer Products Removal Tool, saving it to your
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe
2. Close all open applications (i.e., anything with an icon on the taskbar).
3. Double-click on the file you saved in #1a above to run the utility.
Don't TOUCH your keyboard until the run completes, then reboot.
4. Double-click on the file you saved in #1b above to run the utility.
Don't TOUCH your keyboard until the run completes, then reboot.
5. Do a Reset per
http://www.malwarehelp.org/how-to-reset-internet-explorer-6-to.html
6. Test to see if you still get the errors.
IN RE Adobe Reader: Uninstall your current version of Adobe Reader then...
http://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows;
or...
http://www.foxitsoftware.com/pdf/rd_intro.php
Post by AdelaHello and thank you Robear!
Post by PA Bear [MS MVP]1. Why hasn't WinXP SP3 been installed by now?
I am getting SP3 as soon as I complete fixing these "infections" (or
whatever they are). I'm aware they will discontinue support in July.
I
also plan on upgrading to IE8 at that time.
Post by PA Bear [MS MVP]2. Why isn't Adobe Reader v9.3.1 installed? See
http://www.adobe.com/support/security/bulletins/apsb10-07.html
I thought it updated itself automatically as I vaguely recall ir running...I
gues not. Thru the above link you so kindly gave me I learned I have
version 8.0.0. and, while they say that one can download if one has version
9.3, they dont' say what to do if one has older versions. Do you
happen
to
know?
Post by PA Bear [MS MVP]3. Has a Norton or McAfee application ever been installed on the computer
(e.g., a free-trial version that came preinstalled when you bought it)?
My new computer came with a paid-up McAfee but shortly after I foolishly
paid again for Norton on someone's recommendation. At present I have Avira
Antivir personal free.
Post by PA Bear [MS MVP]4. Does the behavior persist after doing a Reset? See
http://www.malwarehelp.org/how-to-reset-internet-explorer-6-to.html
Wow the reset sounds awfully complicated. I noticed that the Internet
Option screenshots are different from mine which will cause additional
problems. However, if I must, I will do it...with a prayer. LOL!
Thank you again! Adela
Post by PA Bear [MS MVP]1. Why hasn't WinXP SP3 been installed by now?
NOTE: Extended Support for WinXP (x86) SP2 ends on 13 July 2010. After
that date, computers running WinXP (x86) SP2 will NOT be offered any
further critical security updates, Automatic Updates will not work, and
Windows Update website will not be accessible until SP3 is installed.
2. Why isn't Adobe Reader v9.3.1 installed? See
http://www.adobe.com/support/security/bulletins/apsb10-07.html
3. Has a Norton or McAfee application ever been installed on the computer
(e.g., a free-trial version that came preinstalled when you bought it)?
4. Does the behavior persist after doing a Reset? See
http://www.malwarehelp.org/how-to-reset-internet-explorer-6-to.html
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002
Post by Adela[MS WinXP Home 2002 - SP2; OE 6; IE 6; MS Office Pro; Avira Antivir
Personal Free anti-virus; Dell Dimension XPS T448MHz Pentium III;
384MB
RAM;
high speed cable; WordPerfect8; Lexmark Laser printer "Optra E310"; Windows
Media Player; Adobe Reader 8; Adobe Flash Player 10 Activex..]
Hello, I have 3 error msgs that I think may have to do with windows
and
IE6;
if not, please forgive and tell me where to post? They've been
making
my
life miserable. Thanks.
1. "This program is not responding and it will shut off." (More
and
more
frequent)
2. The Google "Delete History" button is covered by a very long
list
ALL
the way down so I haven't been able to delete it. (Cleaning out Internet
Options doesn't help)
3. This is only a few days old: "The document has moved, redirect..."
Thanks so much for any suggestions to fix those wretched things.
o)
__________ Information from ESET NOD32 Antivirus, version of virus
signature database 4983 (20100329) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
__________ Information from ESET NOD32 Antivirus, version of virus
signature database 4986 (20100330) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com