pop-up issue

[pentium]

Re: pop-up issue

Well where Norton Antivirus failed to find anything, House call found a good half dozen trojans.
They have since been purged however I'm running another scan to see to it that they are purged and then after that I'll fire up Spybot S&D and call it a night.

[zandrax]

Re: pop-up issue

Well where Norton Antivirus failed to find anything, House call found a good half dozen trojans.

Trendmicro's Housecall? I don't use a TM software from ages so no idea here
If it works, keep it; otherwise install an antivirus free for home use such as Avira Free, AVG, Avast (though I'm not fond of Avast due to a lot of false positives in past, its engine turned to be rather good in last AV-Comparatives' comparison).

They have since been purged however I'm running another scan to see to it that they are purged and then after that I'll fire up Spybot S&D and call it a night.

At the end call Ghostbusters to clean everything: just keep Norton Ghost cds out of their reach

Zandrax

[pentium]

Re: pop-up issue

I don't believe it.

I turned in at around 11:40 and I guess at midnight Norton Antivirus started up again and started scanning the drive. IT disrupted House call and while it had eight hours to scan, IT IS STILL SCANNING! . Great. Now I have to wait to finish, then run House call again and THEN run spybot AND THEN put the drive back in the system and try to start it up.

[pentium]

Re: pop-up issue

Well after three scans with different antivius programs and a sweep of Spybot S&D I think I have it cleaned up now and am ready to reinstall the drive in the computer. Is there anything else I should do in case I am still stuck with the system hanging at the login screen?

[pentium]

Re: pop-up issue

Topcat, you really need to fix the editing time limit. :/

Anyways, booting is still a no-go. am still hanging at the login screen.
also, what exactly will selecting Directory Services Restore Mode do? will I lose much?

[i4004]

Re: pop-up issue

ah yeah...we concentrated on viruses, while
https://www.badcaps.net/forum/showpo...4&postcount=12

[momaka]

Re: pop-up issue

also, what exactly will selecting Directory Services Restore Mode do? will I lose much?

Directory Services Restore Mode is almost the same as Safe Mode, with the exception that Safe Mode boots only the most basic services from the regular Windows directory, whereas Directory Services Restore Mode boots from a backup Windows location. In Directory Services Restore Mode, you can also modify some system files in the System32 folder, which is usefull if they got infected (although that's rare).

Here's a thing I'd suggest you do: Try to boot from Directory Services Restore Mode, and scan the computer for viruses/spyware from there. Otherwise if you're scanning from another computer/system, you're not effectively scanning the registry (if at all), which is where most keyloggers and malware usually hide (not to mention they self-install again on next bootup if you don't remove their registries). Once you log into Directory Services Restore Mode, try Webroot SpySweeper since that thing not only finds spyware, but has no problem deleting it unlike some other spyware programs.

ah yeah...we concentrated on viruses, while
https://www.badcaps.net/forum/showpo...14&postcount=12

Wait, you're saying that BioLogon could be the cause of the problem? I never used BioLogon, so I can't really confirm anything on that.

[pentium]

Re: pop-up issue

Directory Services Restore Mode is almost the same as Safe Mode, with the exception that Safe Mode boots only the most basic services from the regular Windows directory, whereas Directory Services Restore Mode boots from a backup Windows location. In Directory Services Restore Mode, you can also modify some system files in the System32 folder, which is usefull if they got infected (although that's rare).

Here's a thing I'd suggest you do: Try to boot from Directory Services Restore Mode, and scan the computer for viruses/spyware from there. Otherwise if you're scanning from another computer/system, you're not effectively scanning the registry (if at all), which is where most keyloggers and malware usually hide (not to mention they self-install again on next bootup if you don't remove their registries). Once you log into Directory Services Restore Mode, try Webroot SpySweeper since that thing not only finds spyware, but has no problem deleting it unlike some other spyware programs.


Wait, you're saying that BioLogon could be the cause of the problem? I never used BioLogon, so I can't really confirm anything on that.

First off, I have been using BioLogon for two years now and have never had a problem with it.

Second I did what you said and as soon as I got to the desktop I ran the installable demo of House call which found a bunch more trojans (geez, where did they all come from?), a few tracking cookies and a virus.
After that initial job I rebooted and tried logging in normally again.
No dice.
I restarted again and went back to Directory Services Restore Mode and well here I am now. I might fire up Spybot S&D again but that mens I will have to download it.
Also, after we scrub the system clean, how do fix the primary issue where I can't normally log in? It almost seems that it could be a system process going screwy as if I very quickly log in I can reach the desktop before it freezes and if I wait a while on the login screen it will just freeze on its own.

[pentium]

Re: pop-up issue

Crap.
Like said, there are a few stubborn ones that keep reinstalling themselves after I remove them.

[Fizzycapola]

Re: pop-up issue

Damn these viruses really seem to be wasting alot of your time man.

My strategy has always been format, or simply rewrite an HD image over the bad drive, it takes 1 - 3 minute's on a modern drive from discovering my system isn't working like it should to back to my optimized image, quicker than all this life wasting scanning. But I guess if you have alot of files, unlike me, I mainly use my PC for reading the internet these days or drinking coffee staring at auction count down timers to snipe a 50p saving on ebay or playing Trackmania or Emu's of games I own, then probably worthwhile.

I hope you get them all.

[jpdoe]

Re: pop-up issue

I agree with Fizzycappola. But that path isn't efficient until one sets up the machine differently:
- a relatively small system partition, with minimum user generated files, located in only a couple of folders ("My Documents" and a folder called "Archive" hanging from the root, for example)
- a different partition for user generated files

That way the backup tasks before dumping the image to the system partition are minimal and easily done even when booting with a WinPE o BartPE cdrom, in case windows is inoperable.

[pentium]

Re: pop-up issue

Wait, so you want me to back up all my files and start from scratch?
Well, a) it's going to require a few hard drives as I have nothing near 120Gb and b) I only have one install of Windows XP pro left and I'm saving it until I get my new drives. I can still live with safe mode until then but I'll be horribly crippled.
Also, I ran another scanner last night and compared the the last scan, this time I found nearly three times as many.

[zandrax]

Re: pop-up issue

@ Pentium:
When malware corrupts system files and you can't boot Windows again (put aside the BioLogon trouble with Safe mode), then reinstalling is the only way to have a working computer: backup everything important then format the partition, reinstall Windows and all programs and recover the backup.
Suggestion: before installing Windows and supposed you don't change partitions' sizes, copy the activation files (both WPA.DBL and WPA.BAK in %Windir%\System32: just add them to the backup and restore them after installing all drivers). After the restore follow Fizzy advice: image the "C:" partition with Norton Ghost, Acronis Trueimage, Clonezilla or similar programs and store it in a small, hidden partition on the same drive or on another medium at your choice.

Zandrax

[momaka]

Re: pop-up issue

Also, after we scrub the system clean, how do fix the primary issue where I can't normally log in? It almost seems that it could be a system process going screwy as if I very quickly log in I can reach the desktop before it freezes and if I wait a while on the login screen it will just freeze on its own.

Ok, I seriously hope you don't have the same problem I had 4 years ago with my XP Pro SP1 (though mine was clean from malware and viruses). In my case, I was the only user on my computer, so I didn't go through a login/password screen. My problem was, if I waited 30 or so seconds after startup, my system would totaly freeze (except for the mouse, which could move freely), and nothing would be clickable. If I tried starting up a game right after start-up, there was a 50-50% chance it would work. If it did, I was able to play for as long as I wanted, and the system wouldn't freeze untill I exited the game. And if I had Task Manager open prior to starting the game, and then after playing a little and exiting the game, the Task Manager would work, but under the Processes tab, tasks were missing the User Name that started them, and under the Users tab there was no one logged in .

If there's a way you can check if that's the problem you have, then I'd too suggest you reinstall Windows. I eventually fixed mine by replacing all of the system files with non-SP1/SP2 WinXp system files. This made the system stable for a while. After installing AVG-Free, it was completely stable (I have no idea why since my system was clean prior to the problem).

But don't take my route, I just had a lot of time to experiment. Also, I had my files on a second partition D: on the drive, so if I needed I could always format my C: partition and reinstall Windows without having to back up files.

If you reinstall Windows (or plan to in the future), make 2 partitions on your drive: 1 for Windows and 1 for your files and programs. If you do a lot of internet surfing, 4GB should be a minumum for Windows. You don't need to go more than 15GB though.

[370forlife]

Re: pop-up issue

I run malewarbytes, it is extremely effective and quick. Also, SUPERantispyware works well, too. I suggest downloading them both and running them. Also, there is a program called Ratscheddar that will re-enable things that viruses disable, like the control panel, background, resolution, etc...

malwarebytes:
http://www.techspot.com/downloads/47...i-malware.html

Ratscheddar:
http://rathat.geekstogo.com/Applicat...atsCheddar.zip

SUPERantispyware free home edition:
http://www.techspot.com/downloads/26...tispyware.html

[i4004]

Re: pop-up issue

i would reinstall...but only if my system was in such a state that cannot be worked on(too slow).
otherwise i would first run 3 freeware avs (avira, avg and avast) and then see how things are.
(afaik, you've just run crappy norton, house call trendmicro(which doesn't strike me as thing that usefull...it's just activex control and i don't think it's same as full blown av program)...eh..you've also run spybot s&d which is hideously slow...i wowed never to use that crap again...)

that solved it when my laptop become spambot...
avira solved winlogon problem on 2k
http://picasaweb.google.hr/i4004b3/W...meOnStartup2k#

offcourse, if you can't do that, then reinstall is only path...

i liked this comment
https://www.badcaps.net/forum/showpo...05&postcount=8
you seriously don't have another windows machine(but clean, without viruses) where you could install those av progs and scan your drive? and also do what momaka just said.
(that norton machine should be left alone...it has the worst virus out there: norton! hehe)

stop buying old apple stuff and buy some pc parts or machines...it's obvious now you need it more, right?
or are you writing this from that small mac laptop from 1994?
DAMN IT!
hehe...

[370forlife]

Re: pop-up issue

He he, that is funny.

If my computer ever gets infected, im screwed. I only have 2 other computers with sata, the one at my dad's and our dimension 4600 (no sata drivers installed)

[PCBONEZ]

Re: pop-up issue

If you remove the virii files by putting the drive into another PC and running an anti-v then any registry entries the virus made will no longer have working files associated with them and won't cause replications.
If you are having replications then the anti-v didn't get them all.
If you are having errors (can't find some file, can't start some service) then that's due to a registry entry that no longer has a file associated with it. (It may have been a pure virus file or a virus corrupted system file.)
If it's only a few you can replace the files manually by copying them from a clean machine.
If there are too many or Windows won't run then do a repair install to replace system files and rebuild the registry.

.

[PCBONEZ]

Re: pop-up issue

Linux sounds better every day. - Don't it.

[Scenic]

Re: pop-up issue

what i did to prevent spyware and stuff getting onto my pc when my mom wants to surf on the net:

i set up a virtual PC with ms virtual pc 2004 (earlier.. now i'm using VMWare) & XP.
after i finished installing xp and some basic tools, i just copied the HDD image.
now my mum can surf almost everywhere and get tons of spyware and viruses... i dont care... i just overwrite the HDD image with the backup copy and everything's fine

she doesn't even know that its a virtual pc because i'm starting it in fullscreen before i let her surf... lol

edit: oh and BTW: Backups FTW :o
i'm doing a backup of my system every week onto my external 250GB HDD.
Acronis TrueImage does a real good job compressing the HDD-Image