Will I lose my programs if I reinstalled Windows XP?

  • Thread starter Thread starter Allan Rogers
  • Start date Start date
A

Allan Rogers

I have a Trojan on my computer that my Norton Antivirus cannot repair or
remove. It is: Backdoor.Tidserv!inf and is located in C: windows/system32
folder. I have already ran Spybot, SuperAntiSpyware and CCleaner without
success. System restore would not go back further than December 9, 2009. Is
it possible to restore to 30 days prior? Will I lose my programs already
installed on my computer if I reinstalled Windows XP? Can I replace the
system32 file only? Please tell me what is the best solution. I cannot
understand the Windows Recovery from the XP CD.

Thank you,
Allan
 
yes,

if you wipe the harddisk and
reinstall xp you will also have
to reinstall your programs in
order to integrate them into
the o.s and perhaps we activate
them as a registered user.

have you tried these instructions:

http://tiny.cc/yVSGB

--
db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
- @Hotmail.com
- nntp Postologist
~ "share the nirvana" - dbZen

~~~~~~~~~~~~~~~
 
Allan Rogers said:
I have a Trojan on my computer that my Norton Antivirus cannot repair or
remove. It is: Backdoor.Tidserv!inf and is located in C:
windows/system32
folder. I have already ran Spybot, SuperAntiSpyware and CCleaner
without
success. System restore would not go back further than December 9,
2009. Is
it possible to restore to 30 days prior? Will I lose my programs
already
installed on my computer if I reinstalled Windows XP? Can I replace the
system32 file only? Please tell me what is the best solution. I cannot
understand the Windows Recovery from the XP CD.

Thank you,
Allan
Click to expand...


So much for what Symantec says.
http://www.symantec.com/security_response/writeup.jsp?docid=2008-111113-1112-99

Have you tried this?

Malwarebytes Anti-Malware 1.40
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html
 
Allan said:
I have a Trojan on my computer that my Norton Antivirus cannot repair or
remove. It is: Backdoor.Tidserv!inf and is located in C:\Windows\System32
folder. I have already rUn Spybot, SuperAntiSpyware and CCleaner without
success. System restore would not go back further than December 9, 2009. Is
it possible to restore to 30 days prior? Will I lose my programs already
installed on my computer if I reinstalled Windows XP? Can I replace the
system32 file only? Please tell me what is the best solution. I cannot
understand the Windows Recovery from the XP CD.

Thank you,
Allan
Click to expand...

Burn BitDefender, or another program listed at the link below, to a CD
(using a working machine) and test the infected machine with it.
BitDefender also has a Rootkit checker on the Linux Desktop; run it if
you think that's the problem:

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/

Download the executable rather than the .iso image, if one is available,
(though no .exe is available for BitDefender).

After the scan is run, if you elect to quarantine files, they're
quarantined to RAM and lost after you reboot. You'll need to copy any
quarantined files to the hard drive, a thumb drive or elsewhere before
exiting.

Then run these:

Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

SuperAntispyware
http://www.superantispyware.com/superantispywarefreevspro.html
 
SpywareDoctor and CyberDefender wants me to BUY these programs to complete
the removal process. Why should I buy these programs and I already bought
Norton Antivirus and it is not doing what it supposed to be doing?...that is:
protecting my computer from threats.


http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
Download the executable rather than the .iso image, if one is available,
(though no .exe is available for BitDefender).
Click to expand...
I do not understand anything on this page and I cannot find software to
download. . --
www.inmate-connection.com
 
You have the mistaken assumption that one program does all. Especially
Norton. That is not the case. Malware comes in many forms. And Norton is not
highly regarded to be that helpful.

But, there are free alternatives, such as the highly rated Malwarebytes and
superantispyware. Google for them.

: SpywareDoctor and CyberDefender wants me to BUY these programs to complete
: the removal process. Why should I buy these programs and I already bought
: Norton Antivirus and it is not doing what it supposed to be doing?...that
is:
: protecting my computer from threats.
:
:
: http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
: >
: > Download the executable rather than the .iso image, if one is available,
: > (though no .exe is available for BitDefender).
: I do not understand anything on this page and I cannot find software to
: download. . --
: www.inmate-connection.com
:
:
: "Elmo" wrote:
:
: > Allan Rogers wrote:
: > > I have a Trojan on my computer that my Norton Antivirus cannot repair
or
: > > remove. It is: Backdoor.Tidserv!inf and is located in
C:\Windows\System32
: > > folder. I have already rUn Spybot, SuperAntiSpyware and CCleaner
without
: > > success. System restore would not go back further than December 9,
2009. Is
: > > it possible to restore to 30 days prior? Will I lose my programs
already
: > > installed on my computer if I reinstalled Windows XP? Can I replace
the
: > > system32 file only? Please tell me what is the best solution. I
cannot
: > > understand the Windows Recovery from the XP CD.
: > >
: > > Thank you,
: > > Allan
: >
: > Burn BitDefender, or another program listed at the link below, to a CD
: > (using a working machine) and test the infected machine with it.
: > BitDefender also has a Rootkit checker on the Linux Desktop; run it if
: > you think that's the problem:
: >
: >
http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
: >
: > Download the executable rather than the .iso image, if one is available,
: > (though no .exe is available for BitDefender).
: >
: > After the scan is run, if you elect to quarantine files, they're
: > quarantined to RAM and lost after you reboot. You'll need to copy any
: > quarantined files to the hard drive, a thumb drive or elsewhere before
: > exiting.
: >
: > Then run these:
: >
: > Malwarebytes© Corporation
: > http://www.malwarebytes.org/mbam/program/mbam-setup.exe
: >
: > SuperAntispyware
: > http://www.superantispyware.com/superantispywarefreevspro.html
: >
: > --
: > Joe =o)
: > .
: >
 
Allan said:
I have a Trojan on my computer that my Norton Antivirus cannot repair
or remove. It is: Backdoor.Tidserv!inf and is located in C:
windows/system32 folder. I have already ran Spybot, SuperAntiSpyware
and CCleaner without success. System restore would not go back
further than December 9, 2009. Is it possible to restore to 30 days
prior? Will I lose my programs already installed on my computer if I
reinstalled Windows XP? Can I replace the system32 file only? Please
tell me what is the best solution. I cannot understand the Windows
Recovery from the XP CD.
Click to expand...

Even if System Restore could go back 30 or 60 days, it wouldn't matter,
since the backdoor trojan has already done too much damage. That is,
even if it were possible to do so, you wouldn't want to do this!

In fact, once you are free of this infection, you should actually turn
off System Restore and turn it on again. This would delete all previous
restore points, which you don't want because they could accidentally be
run, which would reintroduce the infection!

The only surefire way to know you are 100% clean is to perform a Clean
Install. This would of course wipe off everything on your hard drive,
including all your programs, and they would all need to be reinstalled.
In fact, if your attempts to try to eradicate this pest fail, a Clean
Install would be your only option. Fortunately, many people have had
success removing this malware. More on that below.

Although it is possible to perform a Repair Install (and this would keep
your programs and data intact), that shouldn't be done in this situation
since it won't get rid of the trojan.

If you are interested in removing the malware, the first thing I would
try is use another PC to download the *free* MBAM installation file from
this site:

http://www.malwarebytes.org/mbam.php

It might be helpful to rename the executable. That is, change it from
mbam-setup.exe to something like byebye.exe .

Copy it to a flash drive and then copy it again to the infected PC.
Install the program and run it. Make sure you update it before you run
the scan. You might need to do it first in Safe Mode, then a second time
in normal mode.

If this method doesn't work, post back and we can offer additional
advice.
 
SpywareDoctor and CyberDefender wants me to BUY these programs to complete
the removal process.  Why should I buy these programs and I already bought
Norton Antivirus and it is not doing what it supposed to be doing?...thatis:
protecting my computer from threats.

http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-...


I do not understand anything on this page and I cannot find software to
download.  .  --www.inmate-connection.com
Click to expand...

Please re-read the beginning of this thread. Get wither the free
versions of SuperAntiSpyware or MalwareByte's Anti-Malware. These
should be able to detect this "auto-hiding" trojan.

You need to know that Norton's "track record" for "stealthy" trojans
has never been good. My recent "extremely bad" experience with a
Norton anti-virus software issue was to re-install my XP. And this
was caused by their on-line support agent who yanked my Norton product
with the Removal Tool without first uninstalling the Norton softwares.

Norton A/V will not return to my PCs some some years to come!

You should consider "dumping" Norton A/v for something a little less
"buggy."
 
Allan said:
SpywareDoctor and CyberDefender wants me to BUY these programs to complete
the removal process. Why should I buy these programs and I already bought
Norton Antivirus and it is not doing what it supposed to be doing?...that is:
protecting my computer from threats.
Click to expand...

No one suggested that you buy SpywareDoctor and CyberDefender.
http://www.techmixer.com/free-bootable-antivirus-rescue-cds-download-list/
I do not understand anything on this page and I cannot find software to
download.
Click to expand...

If you'd gone to the "Guide :How to Create Bootable BitDefender Rescue
Disk CD" page, you'd have seen the instructions for burning the .iso
image, and a link to the file. The actual link the file is below the
instructions, with a link that reads: "Download BitDefender 2009 Rescue
Disk CD".

http://www.techmixer.com/bitdefender-rescue-cd-with-auto-update-virus-definition-features/

The actual link the file is below the instructions, with a link that
reads: "Download BitDefender 2009 Rescue Disk CD".
http://download.bitdefender.com/rescue_cd/

The advantage to using a Knoppix Live CD is that no malware can run in
the background and block the scan, since your hard drive isn't accessed.
 
Back
Top