Hi Dog Loving Senior
Thank you for the update. Not all malware can be detected, or removed by
some programs, that is why the HiJackThis is such an important part of the
process. Also, did you run the programs you listed in Safe Mode with hidden
files enabled? The purpose for this is that some forms of spyware and
malware are programmed to hide in Windows files that are being used when
WIndows is loaded, thus, if detected, if a program tries to remove it you
will see an error message that says the it "can't be removed as the file is
in use". Also, if the Show hidden files is disabled, these scumware files
can remain undetected. Thus, it is important to run the SpyBot, AdAware and
MSAS in Safe mode with Hidden files enabled. The information below will
show you how to do that.
How to Restart in Safe Mode
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406
How to Show Hidden Files
http://snipurl.com/6rl8
Then run these programs.
Now....here is how you can manually update the definitions for them even if
you can't access the Internet right now on the affected machine, to make
sure that you have all the latest definitions when you run the programs. On
your other computer, create a new folder called HOLD, then create a
subfolder there for AdAware, SpyBot and MSAS. Then go to the respective
websites for the programs and find the download for the latest update files,
then *SAVE* them to the hard drive in the HOLD>respective subfolder for each
program so that you can be sure to get the right defs in the right program
folders on the affected machine. You should see files like defs.ref in
these folders.
Copy the entire HOLD folder to the floppy, then copy the defs from each
subfolder into the respective program folder on the affected machine. Then
open and run the Update in the programs and they will use those definitions
to update, giving you all the most recent updates to scan with. Here are
the links to the update files to manually download.
SpyBot Definition Updates only -
Detection updates for (latest date shown)
http://www.safer-networking.org/en/download/index.html
Scroll down to here and click the download button and *SAVE* the definitions
to the hard drive.
Goes in - Program Files> SpyBot - Search and Destroy> Updates
AdAware Manual Updates
http://www.lavasoft.com/support/download/
Click on the update number link under "Latest Definition Files"
*SAVE* to the respective subfolder
Goes in - Programs>Lavasoft>Ad-Aware SE Personal
If you need any help with this just bark back here. With all the snow out
our way, I'll be in town for a few days yet. ;o)
Hope this helps.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
Replies are posted only to the newsgroup for the benefit or other readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
I have Lavasoft ALREADY installed that I can run (and do), also have and
use
the Microsoft Anti-Spyware AND Spyware Blaster that seems effective and
none
of these show malware or viruses installed on my system. I can't run the
programs that you have listed because that's how I discovered my problem,
when I tried to update to a newer version of Grissoft (Lavasoft). Tomorrow
I'll get on another computer and use your suggestion of a CD and load
those
programs. Will let you know the results if I am successful. We have
another
computer ( Win ME) a few feet away that I can use. Thanx greatly. (don't
leave town)
The Senior (Dog Loving Type)
Jan Il said:
Hi Dog Loving Senior
Thank you very much for the additional information. Let's keep all
replies
in this one thread, please, as it will make it easier for all of us to
keep
track of what is going on.
First, do you have Spy Sweeper installed?
Next....it is very possible that you have some form or malware on your
system that is causing this problem. Work through the information here
to
fully clean your system. If you can not access the Internet from the
affected computer, use another machine to download he removal tools, copy
them to a floppy, and load them to the affected machine and follow the
instructions for each.
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, HijackThis v1.99.1
(
http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware.
**Post
your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for
expert
analysis, not here.**
Hope this helps.
Jan
MS MVP - Windows IE/OE [DTS/AumHa]
Smiles are meant to be shared,
that's why they're so contagious.
Replies are posted only to the newsgroup for the benefit or other
readers.
How to make a good newsgroup post:
http://www.dts-l.org/goodpost.htm
I use win xp home edition. Don't know what has changed (or what I have
changed) to cause this. I am an intermediate user. Could be connected
to
the
fact that frequently I cannot connect to the internet until I stop
certain
unwanted processes that are running. Don't know why this happens also.
At
this point I cannot download most programs, like anti-virus programs or
do
computer scans offered by vendors, because I get that
message..."windows
cannot access the specified, etc.
Any clues or help out there? Thanx.....The Senior
