all about computer information and technology
RSS icon Email icon Home icon
  • Fix Windows XP Log On/Log Off Loop Page 7

    Posted on May 5th, 2009 admin No comments

    Part 6 - Cleanup time!

    You’re in! Congrats! I would STRONGLY recommend you scan for spyware and viruses. (keep reading)

    DO NOT BOOT INTO NORMAL MODE YET OR ELSE THE SPYWARE/VIRUSES (if present) COULD CAUSE MORE PROBLEMS!

    You may be able to go into Safe Mode with Networking to access the Internet and download files that can clean your machine that way, however, I would recommend downloading the utilities listed below from another computer and putting them on a CD. Do not use a USB flash drive as that may become infected. Try and keep the infected computer off the Internet or your home network as long as possible. Not rebooting will also keep the virus/spyware at bay because it may want to undo some things each time you reboot.

     

    PLEASE, IF YOU VALUE

    YOUR COMPUTER AND

    EVERYTHING ON IT,

    BACKUP YOUR DATA

    AND

    HAVE A BACKUP PLAN

    SO YOU DO NOT HAVE

    TO SCRAMBLE

    LIKE THIS AGAIN!

    First, do the following:

     

     

    1. Click Start
    2. Click My Computer
    3. Select the Tools menu
    4. Click Folder Options at the top
    5. Select the View tab
    6. Under the Hidden files and folders heading, select Show hidden files and folders
    7. Uncheck the Hide protected operating system files (recommended) option
    8. Click Yes on the warning dialog that pops up
    9. Uncheck the Hide file extensions for known file types option
    10. Click Apply
    11. Click OK

    Go download and install these utilities. All of them are free to use and provide free updates. When running these installers, RENAME THEM as some viruses and spyware block them based on the file name. Make sure to keep the same file extension though. (.exe, .msi, etc.) These are in no way configured once installed. If you need help configuring them, please give me a call.

    PLEASE REMEMBER TO UPDATE

    THESE SCANNERS BEFORE

    SCANNING!

    YOU NEED TO USE ALL THE

    PROGRAMS ON THIS PAGE!

    • AVast! Antivirus
      • Can be installed/run under Safe Mode
      • Choose to run a Boot time scan
      • Choose to Restart later
      • Update AVast!’s defintions
      • Reboot into Safe Mode to run the boot time scan
      • If you have an antivirus scanner already, don’t use it anymore. Use AVast!. You can uninstall your old antivirus program when you get back into Normal mode.
      • Once you run AVast! Antivirus’ boot time scan, if it says you’ve been infected by Win32:Vitro, THERE IS NOTHING YOU CAN DO TO RESTORE YOUR SYSTEM TO A USABLE STATE WITHOUT REFORMATTING AND REINSTALLING. Backup your data and reformat the drive pronto. PLEASE MAKE SURE TO SCAN YOUR BACKUP AS WELL ON A CLEAN SYSTEM TO PREVENT REINFECTION.
    • Mozilla Firefox
      • Can be installed/run under Safe Mode
      • Please use this to browse the Internet from now on!
    • Spybot - Search & Destroy
      • Can be installed/run under Safe Mode
      • Do not select TeaTimer during installation
      • Do not select “Download updates” during installation
      • Close Spybot - Search & Destroy
      • Update the detection rules
      • Before installing: (if you have a version on your machine already)
        • Open Spybot - Search & Destroy
        • Undo all Immunization
        • Close Spybot - Search & Destroy
        • Remove it via Add/Remove Programs in the Control Panel
        • Restart the computer as it says, but go back into Safe Mode
        • Delete the following folders: (it is OK if some do not exist)
          • C:\Program Files\Spybot - Search & Destroy
          • C:\Program Files\TeaTimer
          • C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
          • C:\Documents and Settings\All Users\Application Data\TeaTimer
      • Once your machine is clean enough to get back into Normal mode, you’ll need to take note of this special procedure again for updating Spybot. You’ll need to uninstall it and reinstall it, as installing it under Normal mode will provide extra protection.
        • After you’re back in Normal mode and have uninstalled, cleaned up (see above) and then reinstalled Spybot, remember to update it and do another scan with it to take out anything else.
    • Malwarebytes’ Anti-Malware
      • Can be installed/run under Safe Mode
      • Update the program
      • Do a Full Scan
    • Windows Malicious Software Removal Tool
      • Can be installed/run under Safe Mode
      • Do a Full Scan
    • SpywareBlaster
      • Can be installed/run under Safe Mode
      • Before installing: (if you have a version on your machine already)
        • Open SpywareBlaster
        • Disable all Protection
        • Close SpywareBlaster
        • Remove it via Add/Remove Programs in the Control Panel
    • Bazooka Adware and Spyware Scanner
      • Can be installed/run under Safe Mode
      • If you’re running Windows Vista, you’ll see two false positives. Ignore them.
      • Update the program
      • Do a scan
    • Windows Defender
      • This program needs to be installed in Normal mode. YOU CANNOT INSTALL THIS UNDER SAFE MODE.
      • Update the program
      • Do a Full Scan
    • COMODO Firewall
      • Can be installed/run under Safe Mode
      • Do not install the COMODO Antivirus, as the software program below will take care of viruses
      • You do not need COMODO SafeSurf
      • Do the Spyware Scan
    • SUPERAntiSpyware
      • This program needs to be installed in Normal mode. YOU CANNOT INSTALL THIS UNDER SAFE MODE.
      • Update the program
      • Do a Full Scan
    • Ad-Aware
      • This program needs to be installed in Normal mode. YOU CANNOT INSTALL THIS UNDER SAFE MODE.
      • Update the program
      • Do a Full Scan

    AFTER YOUR MACHINE IS

    CLEAN, REMEMBER TO

    UPDATE TO XP SP3 IF

    YOU DID NOT HAVE IT!

    Some of the main things I’ve found that causes this loop:

    • People don’t uninstall old version(s) of Spybot: Search & Destroy when installing a new version
    • People uninstall the old version, but they don’t get rid of the Spybot/TeaTimer folders in C:\Program Files
    • People uninstall the old version, but they don’t get rid of the Spybot folders in C:\Documents and Settings\All Users\Application Data (I don’t think you really need to get rid of this, but I do just to have a full uninstall)
    • People don’t know when a new version of Spybot: Search & Destroy is available (no notification in updater, no auto-updater, etc.) Always check before doing a scan!
    • People are still using Internet Explorer (IE) to browse the Internet without adequate protection.
    • People are heavily infected with spyware and viruses without knowing it.

     

    Comments are closed.