[Marika65]

hi,

I have a lot of pictures on a computer loaded with ? viruses I guess. I just want to get them all off and then reinstall windows.

I bought a memory stick awhile back and I don't get that. So, I gave up.

Then I tried Winzip. Too many pictures. Now, people have said buy an external hard drive.

well, I have a couple of other computers here so couldn't I move them (pictures) to the other computer(s)??????

I am beat from trying to get rid of these viruses.

Thanks for any help. I would really appreciate it.

Mari

[ferrija1]

Before, you should make sure they really are viruses. Have you scanned them with something? I would recommend an online scanner (http://housecall.trendmicro.com/), since viruses on your system can compromise anti-virus applications. Remember, just scan the suspicious files.

Also, where are these files?

[pinntech]

I agree, it would be wise to get a good scan of your system. If you do not chose to do that, make sure that if you do transfer the files to another system that the antivirus software on the receiving PC is up-to-date.

If you put them on a USB drive, then make sure when you reinstall your operating system that your antivirus is up-to-date before accessing the files.

If you don’t want to clean your system and still wish to get your files… Answer these questions….

What operating system are you running on the infected machine?

What “memory stick” are you referring too? Something such as “thumb drive” or USB drive? What do you not “get” about it?

“I have a couple of other computers here…” Are they running? What operating system is on them? Are they networked? What type of hard drives do they have in them? What type of hard drive do you have in your “infected” computer?

Sooooo many questions, but it’s better than guessing!

Thanks… Shane

[Marika65]

Hi

Thanks for the advice and replies. I don't know what I'm going to do. I'd like to get the problem cleared up because like you both say if it's a virus I'm just going to move it (maybe) and I don't want to do that. I've tried a lot of fixes.

I go to uninstall games and a box comes up with GHOST UNINSTALLER FILE LOG NOT FOUND!

I had a problem deleting other programs but, found a fix that worked. The games won't budge though. The memory card is a pro due sandisk. I only have the thing you plug in the computer though I don't have the little card that goes inside it and I have no idea how that happened. I've never used a memory card before except with cameras....The computer I'm trying to fix or clean up anyway is an Emachines with XP2.
I ran ad aware, trojan hunter, updated Norton and ran a full scan, cwshredder - I ran hijack this and deleted a couple of things (I forget what but, I didn't like the look of them)
It's running as crummy as before. It's slower now than it was before.

Anyway, I spent a long time on the internet looking for someone who may have resolved this problem and someone had written the same problem as me so I tried the fix someone gave them which as you can see is time consuming. I did every step. I went back to that site to see if the person got the problem resolved and it was from 2004.........

This was what they had written to fix the "nasties"

disable your system restore to flush out your restore folder, then get your latest defs for you anti-virus, spybot and adaware, and cwshredder, if you have an anti-trojan do the same, if you don't go to www.thepublicworks.com, go to payware and download free 30 trial of trojan hunter, get the latest defs.
next reboot to safe mode and scan your machine with all these scanners, and delete all the files they come up with.
next, clean your cache, temp files, history and cookie folders, and recycle bin.
next, put a check next to these if they appear in a new scan with hijackthis and hit the fix checked button:
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - _{5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
R3 - URLSearchHook: (no name) - _{707E6F76-9FFB-4920-A976-EA101271BC25} - (no file)

O2 - BHO: (no name) - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
O2 - BHO: (no name) - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - (no file)
O2 - BHO: WinPage Affiliate - {E8EAEB34-F7B5-4C55-87FF-720FAF53D841} - C:\Documents and Settings\Admin\Local Settings\Temp\Ebtr.dll
O3 - Toolbar: (no name) - {5E66DA43-DD10-4A4E-BFC9-060748C0A00B} - (no file)
O4 - HKLM\..\Run: [26XG5B62PRPD7P] C:\WINDOWS\System32\Wryv.exe
O4 - HKLM\..\Run: [AutoUpdater] C:\PROGRA~1\AUTOUP~1\AUTOUP~1.EXE
O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\SysUpd.exe
O4 - HKLM\..\Run: [6IS] C:\windows\temp\6IS.exe
O4 - HKLM\..\Run: [qgBvcM] C:\windows\temp\qgBvcM.exe
O4 - HKLM\..\Run: [ow0oV] C:\windows\temp\ow0oV.exe
O4 - HKLM\..\Run: [TV Media] C:\Program Files\TV Media\Tvm.exe
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load
O4 - HKLM\..\Run: [apiperft] C:\WINDOWS\System32\apiperft.exe
O4 - HKLM\..\Run: [avclntd] C:\WINDOWS\System32\avclntd.exe
O4 - HKLM\..\Run: [NhWjian] C:\documents and settings\admin\local settings\temp\NhWjian.exe
O4 - HKLM\..\Run: [b4HqnI] C:\documents and settings\admin\local settings\temp\b4HqnI.exe
O16 - DPF: {D97287B6-4018-4060-948D-54D2122FC5C3} - http://www.fastfind.org/ss/client/52...3C00/setup.exe
next you are going to have to unload these files from your process list so go to this address: http://www.diamondcs.com.au/index.php?page=products, and download this:
APM
unload these files if you find them:
Ebtr.dll
Wryv.exe
AUTOUP~1.EXE
SysUpd.exe
6IS.exe
qgBvcM.exe
ow0oV.exe
Tvm.exe
bridge.dll
apiperft.exe
avclntd.exe
NhWjian.exe
b4HqnI.exe
next do a search for these same files in your windows and windows32 system directory and if found delete them also delete the folder if they are found in a folder. here is where you can find them:
C:\Documents and Settings\Admin\Local Settings\Temp\Ebtr.dll
C:\WINDOWS\System32\Wryv.exe
C:\PROGRA~1\AUTOUP~1\AUTOUP~1.EXE
C:\WINDOWS\SysUpd.exe
C:\windows\temp\6IS.exe
C:\windows\temp\qgBvcM.exe
C:\windows\temp\ow0oV.exe
C:\Program Files\TV Media\Tvm.exe
C:\WINDOWS\System32\bridge.dll
C:\WINDOWS\System32\apiperft.exe
C:\WINDOWS\System32\avclntd.exe
C:\documents and settings\admin\local settings\temp\NhWjian.exe
C:\documents and settings\admin\local settings\temp\b4HqnI.exe
next re boot to normal mode, do a search for these files and delete them if found, clean your recycle bin, re enable your system restore ------------------------
this is a follow up and should be done when you reboot to safe mode:
if you find tvmedia in your control panel in the add and remove program list remove it from there also.
also do a search for tvmedia in your registry and if found delete the value
------------------

I found none of these files.

Mostly my pictures but, there are some that my daughter has on there to. I don't want to lose them and have other things I want to save. I'm afraid I may have thrown out half of the memory stick by accident. I'm also not working on this computer all the time concentrating on just that. I'm doing 5 other things at once and it's been over a period of a week or so.

I'd appreciate any advice. I'd love to get this figured out.
I can't answer the network questions because I'm too rusty with that at this time.

I have an extra dell computer with 98se and an HP with 98se.

[pinntech]

Hi..

Well, if your system is that “infested” and has been verified to be, then I, myself (personal opinion), would do what you were thinking of doing. I’d get my files backed up to a media where they are safe and then wipe out the system and reload it.

Then I would get my system updated and my antivirus installed & updated. Then I would scan my files to see if they are infected. After scanning them, I would move them back to my newly installed operating system.

Do you have any idea HOW MUCH space you need to store your files you want backed up?

Your two other computers, are they actually up & running and in use? Do they have anything absolutely important on them?

You have a few options here as far as I am concerned…..

1. Get yourself a good sized “USB Memory Stick (Drive, Thumb drive, whatever you want to call them) and move the files to that Memory Drive. You can get 4GB USB Drives really cheap at the moment.

2. If your Emachines has IDE drives installed in it, you could take one of the drives out of your Dell or HP computer and “slave” it into your Emachines PC to copy the files over to that drive.

3. Of course, you could also get yourself as previously stated an “external USB hard disk drive” and attach it to your computer and back up the files.

If your spare computers do not have anything absolutely important on them and your Emachines has IDE drives in them, I would slave one of the spare computer’s drive into the Emachines PC and copy your files to it. Just create a folder called something like Emachines Backup and copy them all of your files into that folder. Detach the drive when it is done, then reinstall your Emachines back to factory installation. After it is done and the antivirus is on there and updated, slave the drive back in there again and copy your files back over.

Thanks…. Shane

[deubanks]

You might can use cd's to back up your pictures on. That may be a cheaper way than buying an external hard drive or enough flash drive memory to put them on.