[NeonFx]

In the BIOS, can you find a screen that has a list of possible boot up locations? If you can, then you want to have your HardDrive listed higher up on the list so that it is looked at first. The instructions on how to do that are usually listed on the same screen either on the right panel or on the bottom.

Excellent. Let's cleanup.

Step 1 will rehide files that should be hidden by default (the semi transparent files on your Desktop). Let me know if they're still there. Settings.dat belongs to RootRepeal, so you can delete that one.


STEP 1

To clean up OldTimer's tools, along with a few others, do the following:

• Run OTS.exe by double clicking on it
• Click on the "CleanUp" button on the top.
• You will be asked if you wish to reboot your system, select "Yes"

STEP 2

Remove any other tools or files we used by right-clicking on them or any folders they created, hold down the Shift key, and select "Delete" by clicking on it. This will delete the files without sending them to the RecycleBin.

You can also uninstall the other programs (HijackThis or MalwareBytes if we used them) by going to Start > Control Panel > Add/Remove programs (Programs and Features in Vista and Programs > Uninstall a Program in 7)

All Clean

Congratulations!, , your system is now clean. Now that your system is safe we would like you to keep it that way. Take the time to follow these instructions and it will greatly reduce the risk of further infections and greatly diminish the chances of you having to visit here again.

Microsoft Windows Update
Microsoft releases patches for Windows and Office products regularly to patch up Windows and Office products loopholes and fix any bugs found. Install the updates immediately if they are found.
To update Windows
Go to Start > All Programs > Windows Update
To update Office
Open up any Office program.
Go to Help > Check for Updates


Download and Install a HOSTS File
A HOSTS file is a big list of bad web sites. The list has a specific format, a specific name, (name is just HOSTS with no file extension), and a specific location. Your machine always looks at that file in that location before connecting to a web site to verify the address. A HOSTS listing can be used to "short circuit" a request to a bad website by giving it the address of your own machine and prevent your computer from connecting to that website.

See how to get it HERE
(For Vista and 7 see HERE )

You can also use a tool to update your Hosts file. See HERE and HERE

If you have a separate party firewall or Winpatrol, you may have to give permissions at various times to Unlock the present default HOSTS file and install the new one.

Install WinPatrol
Download it HERE
You can find information about how WinPatrol works HERE and HERE

Note: This program will work alongside all other security programs without conflicts. It might ask you to allow certain actions that security programs perform often, but if you tell Scotty to remember the action by checking the option, the alerts will lessen.

Other Software Updates
It is very important to update the other software on your computer to patch up any security issues you may have. Go HERE to scan your computer for any out of date software. In particular make sure you download the updates for Java and Adobe as these are subject to many security vulnerabilities.

Setting up Automatic Updates
So that it is not necessary to have to remember to update your computer regularly (something very important to securing your system), automatic updates should be configured on your computer. Microsoft has guides for XP and Vista on how to do this.

Read further information HERE, HERE, and HERE on how to prevent Malware infections and keep yourself clean.


Let me know how the BIOS thing goes or if you need anything else. If you figure it out, please mark this thread as "Solved" by clicking on the button at the top of this page.

[jaxstraw]

Ok . . . Now I'm having some other issues. . . .

1. BIOS . . . was set up already to boot from harddrive(s) first... Switched the order around some.. and it still wants me to hit F1 to continue...

2. Ran OTS Clean Up and the computer froze part way through. Had to shut it down, reboot, and then run the OTS Clean Up again.. This time it finished and and rebooted. The OTS program is gone now..

3. The transparent files are still there..

4. Started doing Microsoft Windows Updates and it wanted me to install the service pack 3.... This took a long time and again the computer froze. I shut it down, rebooted and it took forever for my desktop to load.... But it finally did and indicated that it was installing the update and was going to shut down.... It did and i started the computer again and windows update said to install 3 more updates... The first 2 installed fine , but the 3rd one was IE 8 and it caused the machine to lock up and then gave me a BWOD...Here is the error signature:

BCCode : 100000d1 BCP1 : 00000018 BCP2 : 00000002 BCP3 : 00000000
BCP4 : F72AF25F OSVer : 5_1_2600 SP : 3_0 Product : 256_1

and here is error report:

C:\DOCUME~1\Daniel\LOCALS~1\Temp\WERe0a5.dir00\Mini110909-01.dmp
C:\DOCUME~1\Daniel\LOCALS~1\Temp\WERe0a5.dir00\sysdata.xml

Now I'm afraid to do anything...

[NeonFx]

Windows updates can cause those problems sometimes and regrettably there's no easy fix. This is not related to the infection you had though.

Can you boot into Windows at all? How about Safe Mode?

[jaxstraw]

Yes... I am in windows now..... just really slow to load..

[NeonFx]

Alright. Let's try uninstalling Service Pack 3 by going into Start > Control Panel > Add/Remove Programs

After that's done, restart your computer twice and let me know how its running. Service Pack 3 is not for everyone.

[jaxstraw]

I am not seeing Service Pack 3 in the Add or Remove list... However, when I run sysdm.cpl I do see that it is listed in the general tab under system... All in all, the computer is running well. It is just the startup that concerns me.... Very, very slow.....as if something is trying to load while the desktop builds, but never does....??

[NeonFx]

Did you install the hosts file from my cleanup instructions? That can cause that symptom on some systems.

[jaxstraw]

No, I have not installed the HOST files. I was going down your list in order and the slow start up began when I was trying to do the Microsoft Windows Update .

[NeonFx]

There are several things you can do to speed up a system. See HERE for a few. Step 5 recommends JkDefrag and I think defragging your system is the single most important thing you can do to speed things up, especially at start up.

JkDefrag is now known as MyDefrag though, see my post at the end of that thread.


If you have any other problems please create a new topic in the XP forum as your system is now clean. Please mark this thread as "Solved" by clicking on the button at the top of this page when you're ready.

[NeonFx]

Oh yeah, and to hide files that should be hidden do the following:

1. Click 'Start'.
2. Open 'My Computer'.
3. Select 'Tools' menu
4. Click 'Folder Options'
5. Select the 'View' Tab.
6. Uncheck 'Show hidden files and folders' in the Hidden files and folders section.
7. Select 'Hide protected operating system files (recommended)' option.
8. Check the 'Hide file extensions for known file types' option.
9. Click 'Yes'.
10. Click 'OK'.