Ronin wrote:
> A friend's son's machine is relatively new for XP (2005), but it is
> sorely lacking in RAM, something that will be remedied as soon as
> Crucial delivers on Monday. It was also wildly inundated with
> spyware, etc., but no viruses according to Avast! Took a couple of
> days, but it seems relatively clean now. Probably some permanent
> damage, but clean reinstall is something I'm trying to avoid.
>
> Meanwhile, being an impatient sort of person, I still tried to
> install SP3 before upping the RAM. The install failed at first due
> to permissions issues which I thought I had remedied using SUBINACL
> as described here:
> http://www.askvg.com/windows-xp-service-pack-3-sp3-setup-error-access-is-denied
>
> The install actually finished after several hours -- 256MB RAM for
> WinXP is a
> crime, Dell should be held responsible for even allowing such a
> configuration. Anyway, when I rebooted, it showed itself updating
> things before logging on (the way Windows Updates often do.) But
> after logging on, two command windows popped up. One did whatever
> and went away quickly, but the other one showed a dozen or two
> responses, all of them "Access denied" (may not be the exact
> phrase.)
> I plan to reinstall SP3 when the new RAM arrives (unless that is
> contraindicated), but I suspect that won't solve this issue. My
> assumption is that the errors mean that the install wasn't entirely
> successful, but I'm not stuck on that. Maybe the responses are
> expected in certain circumstances. Still, if there is anything more
> I can do to ensure a clean installation, please tell me all about
> it (or them.)
If the system is slow with 256MB RAM in Windows XP - it is *not* generally
the fault of Windows XP - but of the things running resident. I'd check
what all runs at startup...
You mentioned "Avast!" --> I suggest switching to "Avira AntiVir" or "eSet
NOD32" (AV only - no suites.) The first is free for home use, the latter is
less than $60 U.S. for two years. I would say they should run quite well
and use less resources - thus making the entire computer run a bit better.
No third-party firewall software. Use the built-in firewall.
For the most part - no active 'antimalware only' software. One could
purchase/run MalwareBytes active protection if you feel it will keep this
machine running longer because of the owners 'habits' --> but I wouldn't do
it unless it comes to that.
But on to your cleanup query...
First - do you have a complete backup of this system "as-is"? I would
suggest some sort of image file creation of the entire system - so you could
revert to that if things get really bad. Barring that - just a copy of all
the important files (documents, bookmarks, emails, contacts, music,
pictures, etc...)
As for your resistance in a clean install - that may be doing yourself/your
friend's son a dis-service. If it was "wildly inundated with spyware, etc",
there is no guarantee, short of a clean installation, that you have cleared
everything (rootkits are seldom found by antivirus or basic antimalware
applications.) It is almost a certainty (given nothing more than your
symptoms) that even if you have cleared everything - the dmage from the
attacks still exists.
Along that latter line - I would highly suggest a repair
installation(in-place upgrade). Not just any repair installation (in-place
upgrade) - but one with a Service Pack 3 level installation media (of
Windows XP.) That way you kill two birds with one stone. You fix the
system files and you do so with SP3 level replacements. (You can
integrate/slipstream SP3 into said media, burn a new copy and use it to do
the repair - if you don't know how - look into nLite and/or AutoStreamer
using Google.)
How to Perform a Windows XP Repair Install
http://www.michaelstevenstech.com/XPrepairinstall.htm
How to perform an in-place upgrade (reinstallation) of Windows XP
http://support.microsoft.com/kb/315341
After you perform said repair - I would probably still suggest the following
steps.
(Yes - all of them, even ones you have done before, in order.)
Reboot and logon as administrative user.
Download/install Internet Explorer 7 - it will revert to IE6 - you should at
least have the system at IE7 - and for now - leave it at IE7.
http://www.microsoft.com/downloadS/details.aspx?familyid=9AE91EBE-3385-447C-8A30-081805B2F90B
Reboot and logon as administrative user.
Fix your file/registry permissions...
Ignore the title and follow the sub-section under
"Advanced Troubleshooting" titled,
"Method 1: Reset the registry and the file permissions"
http://support.microsoft.com/kb/949377
*will take time
** Ignore the last step (6) - you should already have SP3.
You will likely see errors pass by if you watching, even count up. No
worries *at this time*.
Reboot and logon as administrative user.
Download/install the "Windows Installer CleanUp Utility":
http://support.microsoft.com/kb/290301
After installing, do the following:
Start button --> RUN
(no "RUN"? Press the "Windows Key" + R on your keyboard)
--> type in:
"%ProgramFiles%\Windows Installer Clean Up\msizap.exe" g!
--> Click OK.
(The quotation marks and percentage signs and spacing should be exact.)
It will flash by *quick*, don't expect much out of this step to get
excited about.
Reboot and logon as administrative user.
Download, install, run, update and perform a full scan with the following
(freeware version):
SuperAntiSpyware
http://www.superantispyware.com/
Reboot and logon as administrative user.
Download, install, run, update and perform a full scan with the following
(freeware version):
MalwareBytes
http://www.malwarebytes.com/
Reboot and logon as administrative user.
Download and run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx
Reboot and logon as administrative user.
Download/Install the latest Windows Installer (for your OS):
( Windows XP 32-bit : WindowsXP-KB942288-v3-x86.exe )
http://www.microsoft.com/downloadS/details.aspx?familyid=5A58B56F-60B6-4412-95B9-54D056D6F9F4
Reboot and logon as administrative user.
Download the latest version of the Windows Update agent from here (x86):
http://go.microsoft.com/fwlink/?LinkID=91237
.... and save it to the root of your C:\ drive. After saving it to the
root of the C:\ drive, do the following:
Close all Internet Explorer windows and other applications.
Start button --> RUN and type in:
%SystemDrive%\windowsupdateagent30-x86.exe /WUFORCE
--> Click OK.
(If asked, select "Run.) --> Click on NEXT --> Select "I agree" and click on
NEXT --> When it finishes installing, click on "Finish"...
Reboot and logon as administrative user.
Visit this web page:
How do I reset Windows Update components?
http://support.microsoft.com/kb/971058
.... and click on the "Microsoft Fix it" icon. When asked, select "RUN",
both times. Check the "I agree" box and click on "Next". Check the box
for "Run aggressive options (not recommended)" and click "Next". Let
it finish up and follow the prompts until it is done. Close/exit.
Reboot and logon as administrative user.
You should now perform a full CHKDSK on your system drive (C
![Smile :) :)](https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/1f642.png)
...
How to scan your disks for errors
http://support.microsoft.com/kb/315265
* will take time and a reboot
You should now perform a full Defragment on your system drive (C
![Smile :) :)](https://cdn.jsdelivr.net/joypixels/assets/8.0/png/unicode/64/1f642.png)
...
How to Defragment your hard drives
http://support.microsoft.com/kb/314848
* will take time
Reboot and logon as administrative user.
Visit
http://windowsupdate.microsoft.com/ in Internet Explorer and
select to do a CUSTOM scan...
Every time you are about to click on something while at these web pages -
first press and hold down the CTRL key while you click on it. You can
release the CTRL key after clicking each time.
Once the scan is done, select just _ONE_ of the high priority updates
(deselect any others) and install it.
Reboot and logon as administrative user.
If it did work - try the web page again - selecting no more than 3-5 at a
time. Rebooting/logging on as an administrative user as many times
as needed.
The Optional Software updates are generally safe - although I recommend
against the "Windows Search" one and any of the "Office Live" ones or
"Windows Live" ones for now. I would completely avoid the
"Optional Hardware" updates. Also - I do not see any urgent need to
install Internet Explorer 8 at this time.
After all of that...
If you are comfortable with the stability of your system, you can delete the
uninstall files for the patches that Windows XP has installed...
http://www3.telus.net/dandemar/spack.htm
( Particularly of interest here - #4 )
( Alternative:
http://www.dougknox.com/xp/utils/xp_hotfix_backup.htm )
You can run Disk Cleanup - built into Windows XP - to erase all but your
latest restore point and cleanup even more "loose files"..
How to use Disk Cleanup
http://support.microsoft.com/kb/310312
You can turn off hibernation if it is on and you don't use it..
When you hibernate your computer, Windows saves the contents of the system's
memory to the hiberfil.sys file. As a result, the size of the hiberfil.sys
file will always equal the amount of physical memory in your system. If you
don't use the hibernate feature and want to recapture the space that Windows
uses for the hiberfil.sys file, perform the following steps:
- Start the Control Panel Power Options applet (go to Start, Settings,
Control Panel, and click Power Options).
- Select the Hibernate tab, clear the "Enable hibernation" check box, then
click OK; although you might think otherwise, selecting Never under the
"System hibernates" option on the Power Schemes tab doesn't delete the
hiberfil.sys file.
- Windows will remove the "System hibernates" option from the Power Schemes
tab and delete the hiberfil.sys file.
You can control how much space your System Restore can use...
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Highlight one of your drives (or C: if you only have one) and click on
the "Settings" button.
4. Change the percentage of disk space you wish to allow.. I suggest moving
the slider until you have just about 1GB (1024MB or close to that...)
5. Click OK.. Then Click OK again.
You can control how much space your Temporary Internet Files can utilize...
Empty your Temporary Internet Files and shrink the size it stores to a
size between 64MB and 128MB..
- Open ONE copy of Internet Explorer.
- Select TOOLS -> Internet Options.
- Under the General tab in the "Temporary Internet Files" section, do the
following:
- Click on "Delete Cookies" (click OK)
- Click on "Settings" and change the "Amount of disk space to use:" to
something between 64MB and 128MB. (It may be MUCH larger right
now.)
- Click OK.
- Click on "Delete Files" and select to "Delete all offline contents"
(the checkbox) and click OK. (If you had a LOT, this could take 2-10
minutes or more.)
- Once it is done, click OK, close Internet Explorer, re-open Internet
Explorer.
You can use an application that scans your system for log files and
temporary files and use that to get rid of those:
Ccleaner (Free!)
http://www.ccleaner.com/
Other ways to free up space..
JDiskReport
http://www.jgoodies.com/freeware/jdiskreport/index.html
SequoiaView
http://www.win.tue.nl/sequoiaview/
Those can help you visually discover where all the space is being used.
In the end - a standard Windows XP installation with all sorts of extras
will not likely be above about 4.5GB to 9GB in size. If you have more space
than that (likely do on a modern machine) and most of it seems to be used -
likely you need to move *your stuff* off and/or find a better way to manage
it.
Not mentioned above - amazingly - is the fact that you also may want to use
this mass-cleanup/updating/fix opportunity to download the latest hardware
device drivers from the manufacturer(s) web site(s) and install them. If it
is a third-tier type system (Dell, HP, Lenovo, Gateway, etc) - get all those
from said manufacturers support web page for the product model in question -
I would even recommend updating the System BIOS at this time (it could
prevent some issues with the memory you plan to install even...) If it is
less of an OEM/third-tier and more a hodge-podge of parts - visit the
individual hardware manufacturer's web pages and get the device drivers
straight from them (avoid getting non-microsoft hardware drivers from
Microsoft.)
The system should be - for all intents/purposes - pretty well cleaned up
after all that. Still a possibility it is infected, still a possibility
that some of the other software installed (likely beyond the OS) still has
damage done by the, "wildly inundated with spyware, etc" situation the
system was once in. Better however - without a doubt.
--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html