If you are using Windows XPand have access to a Windows XP cd, try this:
Boot up with your XP CD in the CD-ROM and allow setup to begin.
At the Welcome to Setup screen press 'R' to open the Recovery Console.
This is a command line interface.
You will need to select which operating system you are using from
the available list and then insert your administrator password.
If you are using XP Home then ignore the administrator password
(unless you have set one yourself) and simply press Enter.
Recovery Console will now run.
At the command prompt type: fixmbr and press Enter
If that doesn't work, you will probably have to reload your OS.
--
If you are under attack and MSAS does not seem to help:
*Submit suspected spyware report in the tools menu of MSAS*
1. Download:
lspfix.exe
www.cexx.org/lspfix.htm
ccleaner.exe
www.ccleaner.com
killbox.exe
www.bleepingcomputer.com/files/killbox.php
2. Reboot into safe mode -
http://tinyurl.com/pfca
3. Clean out all temp file locations - ccleaner.exe
(be sure to configure to delete all temp files
and not just those 48 hours old or older)
4. Run MSAS at least twice in full/deep mode
5. Run a robust, updated antivirus software scan
6. Reboot into normal mode,see if problem has been corrected
7. Install and use killbox to delete stubborn files
Battle Notes:
- If you have trojans (files that won't go away),
you may have to disable System Restore on XP:
http://tinyurl.com/movy
- If your Internet connectivity quits:
http://support.microsoft.com/kb/892350
LSPFix -
http://www.cexx.org/lspfix.htm
- This program will not detect or remove viruses
http://www.microsoft.com/athome/security/viruses/default.mspx
** For a detailed attack plan **
http://spywarewarrior.com/sww-help.htm
*** For assistance in battling infestations***
- Get HijackThis.exe from:
http://tomcoyote.org/hjt/hjt199//HijackThis.exe
- Save it to C:\hjt (new folder)
- Open it and select "Scan and Save Log"
- Note where you saved the log
- Send it to Ron Kinner as an attachment
- Ron's email address is (e-mail address removed)
- Put Hijack in the subject so he knows it's not spam
- He will tell you what to do next
Application Notes:
Registering a VB6 dll seems to fix missing agents:
1) Open up a command prompt (start -> run -> cmd)
2) Type in the following "regsvr32 msvbvm60.dll" (without the quotes).
3) Close and re-open Windows AntiSpyware
- Several issues are addressed by Microsoft -
Cookies, supported OS, and cost.
http://www.microsoft.com/athome/security/spyware/software/faq.mspx
- This program will not work with Windows 98 or ME.
If you need a tool for 9X/ME, go here:
http://www.majorgeeks.com/downloads31.html
- If your taskbar is on the side of your screen, the alerts
scroll off the screen. Move the taskbar back to the
bottom or top to stop the scroll, then revert back.
- Mark Ferguson maintains an FAQ:
http://www.geocities.com/marfer_mvp/FAQ_MSantispy.txt