S
Sirius
Guest
Not mine, hers. I'm not sure why. She has Free AVG... i guess it's not the
best. And with AVG she had not good firewall..
"PA Bear [MS MVP]" wrote in message
news:eNVfoYV$KHA.1448@TK2MSFTNGP06.phx.gbl...
> Why dint ur av app catch it?
>
> Sirius wrote:
>> It found o.dat that was missed by mbam and dr. web.
>>
>> "PA Bear [MS MVP]" wrote in message
>> news:e0kVhDQ$KHA.980@TK2MSFTNGP04.phx.gbl...
>>> QED: Why did it find anything?
>>>
>>> Sirius wrote:
>>>> Thank you, Jose. I did a scan in safe mode with DR Web Cure it an
>>>> quarantined everything it found.
>>>>
>>>> I was able to run a safe mode scan with mbam older version.
>>>> I can not get the new verison of mbam to work.
>>>> Keep getting the "mbam error expanding variables 0 9".
>>>> Every scan takes a very long time because there is a lot.
>>>>
>>>> Now I am doing Avast boot time scanner. I'll post back with what you
>>>> suggested when finished.
>>>>
>>>> Thanks again.
>>>>
>>>> "Jose" wrote in message
>>>> news:e9433a4b-574a-4d1e-8d9f-acd9b94118e2@o12g2000vba.googlegroups.com...
>>>> On May 26, 12:12 pm, "Sirius" wrote:
>>>>> It's happening in safe mode also.
>>>>> Is there a way to manually extract a copy of the registry from a
>>>>> restore
>>>>> point?
>>>>>
>>>>> "Db" wrote in message
>>>>>
>>>>> news:C1615B6A-FD0F-408B-ACAE-77D6C8439838@microsoft.com...
>>>>>
>>>>>
>>>>>
>>>>>> sometimes when the desktop
>>>>>> fails to load,
>>>>>
>>>>>> it is a sign of a problem with
>>>>>> the registry hive.
>>>>>
>>>>>> you might try opening the
>>>>>> task manager and killing all
>>>>>> instances of explorer.exe
>>>>>
>>>>>> then launch a new instance
>>>>>> of explorer.exe
>>>>>
>>>>>> however, given that you are
>>>>>> also unable to amend the
>>>>>> startups in msconfig,
>>>>>
>>>>>> the issues above may be
>>>>>> indicative of a serious problem
>>>>>> with the registry hive
>>>>>
>>>>>> the registry hive, like any file
>>>>>> on the disk can become un-
>>>>>> indexed by the mft.
>>>>>
>>>>>> there is also a possibility that
>>>>>> a program has locked up the
>>>>>> registry to keep it from being
>>>>>> modified.
>>>>>
>>>>>> the above can be caused by
>>>>>> malware or some anti viral
>>>>>> program that was intentionally
>>>>>> installed.
>>>>>
>>>>>> because there are several
>>>>>> methods to address the issue
>>>>>> or issues above,
>>>>>
>>>>>> my first suggestion is to
>>>>>> simply boot into safe
>>>>>> mode.
>>>>>
>>>>>> in there you can see if
>>>>>> performance is better than
>>>>>> in normal mode.
>>>>>
>>>>>> in there you can use system
>>>>>> restore and see if there is a
>>>>>> functional point to execute.
>>>>>
>>>>>> in there you can amend the
>>>>>> startups and services via
>>>>>> msconfig;
>>>>>
>>>>>> disabling all startups and
>>>>>> non microsoft services.
>>>>>
>>>>>> --
>>>>>> --
>>>>>> db·´¯`·...¸>
>>>>>
>>>>>> DatabaseBen, Retired Professional
>>>>>
>>>>>> ~~~~~~~~~~~~~~~
>>>>>> This NNTP newsgroup is evolving to:
>>>>>
>>>>>> http://answers.microsoft.com/en-us/default.aspx
>>>>>
>>>>>> "Sirius" wrote in message
>>>>>> news:e3sPxWN$KHA.5916@TK2MSFTNGP04.phx.gbl...
>>>>>>> Hello People
>>>>>
>>>>>>> This is my friends computer - again. It seems she really got it
>>>>>>> messed
>>>>>>> up.
>>>>>
>>>>>>> Also some programs missing from the start menu also, like system
>>>>>>> restore.
>>>>>>> I was able to access system restore from the help and support, went
>>>>>>> back
>>>>>>> about a month, but the icons did not come back.
>>>>>>> Some minor spyware and adware infections were found.
>>>>>
>>>>>>> Also, in msconfig I can't turn off some startup items. After I
>>>>>>> uncheck
>>>>>>> them they keep coming back. They are:
>>>>>
>>>>>>> ntuser.dat, ntuser.dat.LOG, ntuser.ini, and ~ (tilde file).
>>>>>
>>>>>>> Is there any way to get back her icons - I'm not even sure what she
>>>>>>> had
>>>>>>> exactly -? Or are they gone forever?
>>>>>
>>>>>>> Thank you.
>>>>
>>>> If I were you, I would stop "trying" things. You can try things all
>>>> day long nd it doesn't seem to be working very well.
>>>>
>>>> Did booting in Safe Mode help you at all? Describe what you learned
>>>> from that exercise and what you will do next.
>>>>
>>>> You need to have some known starting point so get there and then work
>>>> on the issues. Nothing you describe sounds too terrible, but some of
>>>> the ideas to get your system working are way overboard - but, you can
>>>> do what you want of course.
>>>>
>>>> You should stop messing with msconfig, turning things off and on,
>>>> don't worry about extracting just registry files from a restore point,
>>>> etc. If SR is missing or borken, no problem - we can fix it later
>>>> but first you need to get stabilized.
>>>>
>>>> If your system boots and can get on the Internet, you con't need to
>>>> slave it in another machine - fix it where it is.
>>>>
>>>> To eliminate questions and guessing, please provide additional
>>>> information about your system.
>>>>
>>>> Click Start, Run and in the box enter:
>>>>
>>>> msinfo32
>>>>
>>>> Click OK, and when the System Summary info appears, click Edit, Select
>>>> All, Copy and then paste the information back here.
>>>>
>>>> There will be some personal information (like System Name and User
>>>> Name), and whatever appears to be private information to you, just
>>>> delete it from the pasted information.
>>>>
>>>> Perform some scans for malicious software, then fix any remaining
>>>> issues:
>>>>
>>>> Download, install, update and do a full scan with these free malware
>>>> detection programs:
>>>>
>>>> Malwarebytes (MBAM): http://malwarebytes.org/
>>>> SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
>>>>
>>>> They can be uninstalled later if desired.
>
best. And with AVG she had not good firewall..
"PA Bear [MS MVP]" wrote in message
news:eNVfoYV$KHA.1448@TK2MSFTNGP06.phx.gbl...
> Why dint ur av app catch it?
>
> Sirius wrote:
>> It found o.dat that was missed by mbam and dr. web.
>>
>> "PA Bear [MS MVP]" wrote in message
>> news:e0kVhDQ$KHA.980@TK2MSFTNGP04.phx.gbl...
>>> QED: Why did it find anything?
>>>
>>> Sirius wrote:
>>>> Thank you, Jose. I did a scan in safe mode with DR Web Cure it an
>>>> quarantined everything it found.
>>>>
>>>> I was able to run a safe mode scan with mbam older version.
>>>> I can not get the new verison of mbam to work.
>>>> Keep getting the "mbam error expanding variables 0 9".
>>>> Every scan takes a very long time because there is a lot.
>>>>
>>>> Now I am doing Avast boot time scanner. I'll post back with what you
>>>> suggested when finished.
>>>>
>>>> Thanks again.
>>>>
>>>> "Jose" wrote in message
>>>> news:e9433a4b-574a-4d1e-8d9f-acd9b94118e2@o12g2000vba.googlegroups.com...
>>>> On May 26, 12:12 pm, "Sirius" wrote:
>>>>> It's happening in safe mode also.
>>>>> Is there a way to manually extract a copy of the registry from a
>>>>> restore
>>>>> point?
>>>>>
>>>>> "Db" wrote in message
>>>>>
>>>>> news:C1615B6A-FD0F-408B-ACAE-77D6C8439838@microsoft.com...
>>>>>
>>>>>
>>>>>
>>>>>> sometimes when the desktop
>>>>>> fails to load,
>>>>>
>>>>>> it is a sign of a problem with
>>>>>> the registry hive.
>>>>>
>>>>>> you might try opening the
>>>>>> task manager and killing all
>>>>>> instances of explorer.exe
>>>>>
>>>>>> then launch a new instance
>>>>>> of explorer.exe
>>>>>
>>>>>> however, given that you are
>>>>>> also unable to amend the
>>>>>> startups in msconfig,
>>>>>
>>>>>> the issues above may be
>>>>>> indicative of a serious problem
>>>>>> with the registry hive
>>>>>
>>>>>> the registry hive, like any file
>>>>>> on the disk can become un-
>>>>>> indexed by the mft.
>>>>>
>>>>>> there is also a possibility that
>>>>>> a program has locked up the
>>>>>> registry to keep it from being
>>>>>> modified.
>>>>>
>>>>>> the above can be caused by
>>>>>> malware or some anti viral
>>>>>> program that was intentionally
>>>>>> installed.
>>>>>
>>>>>> because there are several
>>>>>> methods to address the issue
>>>>>> or issues above,
>>>>>
>>>>>> my first suggestion is to
>>>>>> simply boot into safe
>>>>>> mode.
>>>>>
>>>>>> in there you can see if
>>>>>> performance is better than
>>>>>> in normal mode.
>>>>>
>>>>>> in there you can use system
>>>>>> restore and see if there is a
>>>>>> functional point to execute.
>>>>>
>>>>>> in there you can amend the
>>>>>> startups and services via
>>>>>> msconfig;
>>>>>
>>>>>> disabling all startups and
>>>>>> non microsoft services.
>>>>>
>>>>>> --
>>>>>> --
>>>>>> db·´¯`·...¸>
>>>>>
>>>>>> DatabaseBen, Retired Professional
>>>>>
>>>>>> ~~~~~~~~~~~~~~~
>>>>>> This NNTP newsgroup is evolving to:
>>>>>
>>>>>> http://answers.microsoft.com/en-us/default.aspx
>>>>>
>>>>>> "Sirius" wrote in message
>>>>>> news:e3sPxWN$KHA.5916@TK2MSFTNGP04.phx.gbl...
>>>>>>> Hello People
>>>>>
>>>>>>> This is my friends computer - again. It seems she really got it
>>>>>>> messed
>>>>>>> up.
>>>>>
>>>>>>> Also some programs missing from the start menu also, like system
>>>>>>> restore.
>>>>>>> I was able to access system restore from the help and support, went
>>>>>>> back
>>>>>>> about a month, but the icons did not come back.
>>>>>>> Some minor spyware and adware infections were found.
>>>>>
>>>>>>> Also, in msconfig I can't turn off some startup items. After I
>>>>>>> uncheck
>>>>>>> them they keep coming back. They are:
>>>>>
>>>>>>> ntuser.dat, ntuser.dat.LOG, ntuser.ini, and ~ (tilde file).
>>>>>
>>>>>>> Is there any way to get back her icons - I'm not even sure what she
>>>>>>> had
>>>>>>> exactly -? Or are they gone forever?
>>>>>
>>>>>>> Thank you.
>>>>
>>>> If I were you, I would stop "trying" things. You can try things all
>>>> day long nd it doesn't seem to be working very well.
>>>>
>>>> Did booting in Safe Mode help you at all? Describe what you learned
>>>> from that exercise and what you will do next.
>>>>
>>>> You need to have some known starting point so get there and then work
>>>> on the issues. Nothing you describe sounds too terrible, but some of
>>>> the ideas to get your system working are way overboard - but, you can
>>>> do what you want of course.
>>>>
>>>> You should stop messing with msconfig, turning things off and on,
>>>> don't worry about extracting just registry files from a restore point,
>>>> etc. If SR is missing or borken, no problem - we can fix it later
>>>> but first you need to get stabilized.
>>>>
>>>> If your system boots and can get on the Internet, you con't need to
>>>> slave it in another machine - fix it where it is.
>>>>
>>>> To eliminate questions and guessing, please provide additional
>>>> information about your system.
>>>>
>>>> Click Start, Run and in the box enter:
>>>>
>>>> msinfo32
>>>>
>>>> Click OK, and when the System Summary info appears, click Edit, Select
>>>> All, Copy and then paste the information back here.
>>>>
>>>> There will be some personal information (like System Name and User
>>>> Name), and whatever appears to be private information to you, just
>>>> delete it from the pasted information.
>>>>
>>>> Perform some scans for malicious software, then fix any remaining
>>>> issues:
>>>>
>>>> Download, install, update and do a full scan with these free malware
>>>> detection programs:
>>>>
>>>> Malwarebytes (MBAM): http://malwarebytes.org/
>>>> SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
>>>>
>>>> They can be uninstalled later if desired.
>