Help! Windows XP/Virus

katiemac · Aug 30, 2009

UPDATE POST #30 - thanks guys!

Last night my laptop snagged a virus somewhere. I reinstalled my security software, ran a massive scan, and cleaned it out.

I rebooted, but Windows XP would not load. I got a black screen saying there was a problem with Windows. I think the virus damaged something in the booting process. So I threw in my Windows XP installation CD (Service Pack 2) to repair it. During the repair, I kept getting prompts saying Windows could not copy this file, etc., but I had the option to proceed without copying the file.

Once the repair was finished, Windows loaded but I got three different errors, all three of which meant nothing to me. But the first one said something about the ATI (?) Panel not loading.

When I rebooted, despite the error messages, everything seems to have come back normally except everything is positively giant. My desktop icons, start-menu, internet browser (Firefox), etc. are all huge. I have a widescreen laptop and AW doesn't even fit in the window. (It should.) I checked my display settings, which are on "Normal," but this is definitely not normal.

Anyway, I ignore that for the moment to run the security scan again and it says I'm 100% protected, zero problems.

Now that I'm in Firefox, I think I still have the virus. I'll click on a link and get redirected somewhere else entirely. It took me about five tries to get into this forum because I kept getting redirected. And the whole browsing process feels a "twitchy" anyway.

So ... any thoughts? Did this virus totally screw me over? Could my computer itself be fine and now I'm experiencing problems from the XP repair?

scarletpeaches · Aug 30, 2009

I'm no expert but something similar happened with my previous laptop. Apparently it was a virus which stopped the computer accepting anything with Windows or Microsoft on the disc.

It cost me £35 to get the machine cleaned up and back to its factory settings.

dpaterso · Aug 30, 2009

Obvious question, your default home page in Firefox is what you expect it to be? Tools > Options > Main tab.

-Derek

alleycat · Aug 30, 2009

If you can't find and remove the problem using ordinary means or running anti-virus software, I strongly recommend this website;

http://malwareremoval.com/forum/index.php

It's might take a while to go through the whole process, but these folks are very good, and do not charge for help. Do EXACTLY what they tell you to do during the "fix".

If you go this route, you might want to download and run the latest version of HiJack This before going to the website. That way you'll be one step ahead.

alleycat · Aug 30, 2009

Oh, do you have a good restore point that you could use? Say from a few days ago.

Darzian · Aug 30, 2009

Ok, I'm understanding that your computer is now virus free. However, it seems that something screwed with your graphics driver. (That's the 'ATI' error message). There's is actually nothing wrong with your computer.

Go to the following support page and follow the instructions to increase your screen resolution. That should fix everything. I don't think this has anything to do with the browsers or anything.

http://www.microsoft.com/windowsxp/using/setup/personalize/resolution.mspx

This should solve your problem. If not, keep us updated.

This is a quote from the support page I posted above:

If, on the other hand, you would like text and pictures to appear smaller so that you can fit more windows on your desktop, you can increase your monitor’s resolution.

katiemac · Aug 30, 2009

dpaterso said:
Obvious question, your default home page in Firefox is what you expect it to be? Tools > Options > Main tab.

-Derek

Yes, the home page is right.

katiemac · Aug 30, 2009

alleycat said:
If you can't find and remove the problem using ordinary means or running anti-virus software, I strongly recommend this website;

http://malwareremoval.com/forum/index.php

It's might take a while to go through the whole process, but these folks are very good, and do not charge for help. Do EXACTLY what they tell you to do during the "fix".

If you go this route, you might want to download and run the latest version of HiJack This before going to the website. That way you'll be one step ahead.

Thanks! I'll check into that.

And yes, luckily everything is backed up on an external hard drive so no issues there.

katiemac · Aug 30, 2009

Darzian said:
Ok, I'm understanding that your computer is now virus free. However, it seems that something screwed with your graphics driver. (That's the 'ATI' error message). There's is actually nothing wrong with your computer.

Go to the following support page and follow the instructions to increase your screen resolution. That should fix everything. I don't think this has anything to do with the browsers or anything.

http://www.microsoft.com/windowsxp/using/setup/personalize/resolution.mspx

This should solve your problem. If not, keep us updated.

This is a quote from the support page I posted above:

Thanks, I'll check this too--

But does anyone have an explanation for why, when I click on "Tech Help Forum" here I'd get redirected to Colbert Nation or a random coupon site? It's very odd and painfully annoying. If it's not the virus, then okay.

katiemac · Aug 30, 2009

ETA:

I also forgot to mention that I seem to have lost one of my start-up screens. When Windows XP loads, I usually get the choice to load the Administator or guest settings, etc., but no such prompt anymore.

alleycat · Aug 30, 2009

katiemac said:
But does anyone have an explanation for why, when I click on "Tech Help Forum" here I'd get redirected to Colbert Nation or a random coupon site? It's very odd and painfully annoying. If it's not the virus, then okay.

Must be the virus. I don't get redirected.

katiemac · Aug 30, 2009

Yeah, I know it wouldn't be AW itself--it's definitely something off with my computer. So probably tracings of the virus.

Darzian was right about the settings though --I changed the pixels and now my icons are back to normal size! Thanks.

Off to malwareremoval to see what else might be going on.

Also, thank you so so much for the VERY quick replies! I got the virus late last night and ran the scan overnight, then was messing with the Windows XP reinstall this morning. So fast replies are doing a lot of my computer's self-esteem at the moment. Much appreciated.

Williebee · Aug 30, 2009

katiemac -- it sounds like a couple of things:

First, the malware thing is still there. Make sure you turn OFF the system restore before you run the AV and Malwarebytes programs, and be sure to run them in SAFE MODE (Hit F8 repeatedly when restarting your computer to get the Safe Mode option. Run it in Networking mode, if that is one of your options (this is version related).

Don't forget to turn System Restore back on after you're done.

Second, Darzian is most likely correct about your ATI problem. More than likely your "fix" with the CD fixed some stuff, but reset some drivers along the way, most likely back to earlier versions. Make sure you do all of your windows software and hardware updates -- in order.

Third -- BACK UP ANY DOCUMENTS, etc. before doing anything else (if you haven't already). Then scan the backups for viruses before putting them back on your machine.

Good luck!

katiemac · Aug 30, 2009

Williebee--Thanks!

Yes, I've got everything backed up on an external hard drive and haven't needed to save anything new since the virus slammed me, so no problems there. Whatever's on my external drive is 100% clean.

First, the malware thing is still there. Make sure you turn OFF the system restore before you run the AV and Malwarebytes programs, and be sure to run them in SAFE MODE (Hit F8 repeatedly when restarting your computer to get the Safe Mode option. Run it in Networking mode, if that is one of your options (this is version related).

Don't forget to turn System Restore back on after you're done.

Sorry! I'm only slightly tech-inclined ... I'm not sure what you mean by turning on/off system restore?

ETA: Google saves all! Working on it now---thank youuu!

katiemac · Aug 30, 2009

Okay I might have a bigger problem. I'm not convinced Windows XP is actually loaded onto my computer. It keeps trying to boot from the CD that's in my drive--when I remove the CD, it can't load. So.... I guess I have to figure this out before I can find where the malware still is on my computer.

Maybe it's describing Scarlet's problem, then, if the virus is blocking Windows.

alleycat · Aug 30, 2009

Use System Restore to Undo Changes if Problems Occur

Published: August 24, 2001

Every time you download or install a new game, application, or software update, you make changes to your computer. Sometimes that change may make your system unstable. Have you ever wanted to go back to the way it was? With System Restore, you can.
System Restore works a lot like the Undo command in Microsoft Word. You can use System Restore to remove any system changes that were made since the last time you remember your computer working correctly. System Restore does not affect your personal data files (such as Microsoft Word documents, browsing history, drawings, favorites, or eâ€“mail) so you won't lose changes made to these files.
How does System restore work?
Windows XP periodically records a snapshot of your computer. These snapshots are called restore points. Windows XP also creates restore points at the time of significant system events (such as when an application or driver is installed) or you can create and name your own restore points at any time. If youâ€™ve installed a program that has made your computer unstable, you can open system restore, choose a restore point, and return your computer to its previous stable state.
When you run System Restore, a calendar is displayed to help you find restore points. If you don't use your computer every day, some days might not have any restore points. If you use your computer frequently, you might have restore points almost every day, and some days might have several restore points.
Use System Restore to undo changes youâ€™ve made to your computer
Before you open the System Restore console, you may want to save your work and close all programs since System Restore requires you to restart your computer.
There are two ways to access System Restore â€“ through Help and Support or through your All Programs folder.
Through Help and Support:
1.
Click Start, and then click Help and Support.
2.
Under Pick a Task, click Undo changes to your computer with System Restore.
3.
Follow the instructions on the wizard.
Through the All Programs menu:
1.
Click Start.
2.
Point to All Programs.
3.
Point to Accessories.
4.
Point to System Tools.
5.
Click System Restore.
6.
Follow the instructions on the wizard.
Creating a restore point can be useful any time you anticipate making changes to your computer that are risky or might make your computer unstable. If something goes wrong, you select the restore point you just created and Windows XP undoes any system changes made since that time.
Create a Restore Point
1.
Open System Restore. (See step-by-step instructions above.)
2.
Click Create a restore point, and then click Next.
3.
In the Restore point description box, type a name to identify this restore point as seen in Figure 1 below. System Restore automatically adds the date and time that this Restore Point is created.

Figure 1. Creating a restore point

•To finish creating this restore point, click Create.
•To cancel restore point creation and return to the Welcome to System Restore screen, click Back.
•To cancel restore point creation and exit the System Restore Wizard, click Cancel.
To view or to return to this restore point, from the Welcome to System Restore screen of the System Restore Wizard select Restore my computer to an earlier time. Then select the date you created the restore point from the calendar in the Select a Restore Point screen. All of the restore points you created and you computer created on the selected date are listed by name in the list box to the right of the calendar.
Note System Restore does not replace the process of uninstalling a program. To completely remove the files installed by a program, you must remove the program using Add or Remove Programs in Control Panel or the program's own uninstall program. To open Add or Remove Programs, click Start, click Control Panel, and then click Add or Remove Programs.

This is from the MS website. I believe it would be considered fair use to repost this.

Darzian · Aug 30, 2009

Good to see your icons are back. You'll have to install the ATI graphics driver anyway, because I suspect that they were removed in some way, hence the upsetting of icon size.

And since it seems that the malware/virus is persisting, system restore is the safest option, atm, as others have suggested.

katiemac · Aug 30, 2009

Thanks for the continued assistance, everyone. Apparently my computer doesn't have any previous restore points. The only one available is from today, after the virus already hit, so that's not going to do a lot of good.

My computer might have to go to the doctor tomorrow. I'm not sure what to do, and I'm having trouble installing any other programs (like HiJack This) since I'm mostly just getting redirected over and over when I try to use the Internet (I'm on a desktop at the moment).

And unless I can reinstall what I'm missing (like the ATI panel) from the Windows XP disc, I don't really know where to find the hardware/updates I need (especially since my Internet access is wonky for that computer).

Matera the Mad · Aug 30, 2009

I never heard of a display setting called "normal. It sounds like your screen resolution is set too low. That can happen in a new install, but if it is limited that means video drivers are kapoo. If you had updated your drivers previously, that's all gone, and Windows has done its poor best to install something that sort of works. Or if the install disk is not what came with the laptop, it might not have what it needs. You can download fresh drivers using another computer and import via a USB flash drive or a CD. Get all possible info like computer's serial number to help find out what its guts are.

...I'm mostly just getting redirected over and over when I try to use the Internet (I'm on a desktop at the moment).

Sounds like that one has a problem too.

alleycat · Aug 30, 2009

katiemac said:
My computer might have to go to the doctor tomorrow. I'm not sure what to do, and I'm having trouble installing any other programs (like HiJack This) since I'm mostly just getting redirected over and over when I try to use the Internet (I'm on a desktop at the moment).

I can e-mail you the HJT installation file if you will send me your e-mail address by PM. It's less than 1 MG in size.

Williebee · Aug 30, 2009

I'd offer to help, KatieMac, but you don't live here in BFI. It would cost more to get it to me than it would to take to someone. If you do, take all the disks you can find, the ones that came with the machine, the ones that belong to any software or printers/scanners/cameras etc. that you've loaded. They may need them, they may not, but it's easier and cheaper to make the drive once than to pay them to search the web for the drivers.

Good Luck.

katiemac · Aug 30, 2009

Sounds like that one has a problem too.

No, sorry for the confusion--the desktop, aside from being a dinosaur, is fine. It's the laptop with the virus that keeps redirecting me to odd places on the Internet, so I'm having trouble downloading repair files.

I'd offer to help, KatieMac, but you don't live here in BFI. It would cost more to get it to me than it would to take to someone. If you do, take all the disks you can find, the ones that came with the machine, the ones that belong to any software or printers/scanners/cameras etc. that you've loaded. They may need them, they may not, but it's easier and cheaper to make the drive once than to pay them to search the web for the drivers.

Thanks, I appreciate that. I think I'm cursed. I had to take the laptop in for repair (a physical one--damaged power socket) for the first time ever just two weeks ago. My warranty from them covers everything but viruses, and I thought, no problem, I never get viruses. But at least my tech guy doesn't charge for diagnostics, just the repair, so they're pretty good.

I can e-mail you the HJT installation file if you will send me your e-mail address by PM. It's less than 1 MG in size.

Thanks again! It's worth a shot. Sending PM.

alleycat · Aug 30, 2009

I e-mailed the HJT file.

If you don't get it, you might try to click this link and see if you can download it from CNet.

http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html

Matera the Mad · Aug 30, 2009

If I was in everybody's neighborhood, I'd never have time to write :ROFL:

Try http://www.firefromthesky.org/files/HijackThis.zip
I put it up some time ago for someone else who had a problem.

alleycat · Aug 30, 2009

I just got a "failed delivery" message. Somewhere along the line it didn't like me sending you an exe file.

Help! Windows XP/Virus

Five by Five

Also in our Discord and IRC chat channels

Still around

Still around

To-to-to-ron-to

Five by Five

Five by Five

Five by Five

Five by Five

Still around

Five by Five

Capeless, wingless, & yet I fly.

Five by Five

Five by Five

Still around

To-to-to-ron-to

Five by Five

Bartender, gimme a Linux Mint

Still around

Capeless, wingless, & yet I fly.

Five by Five

Still around

Bartender, gimme a Linux Mint

Still around