Computer Question

[Smurf1976]

I'm helping a colleague with some computer problems at home...

Suffice to say that Vet antivirus was installed and operating properly but for reasons best explained by the presence of children in the house it became deactivated somehow. One of them said they didn't know what Vet was and thought it might be a virus so removed it...

Anyway, the viruses basically locked up the machine preventing the downloading of anything and also preventing the successful reinstallation of Vet. So I have used a freeware program called "Avast" and detected 604 viruses on the machine today.

I have deleted all virus-containing files except Windows files (about 15 infected I think). This program was unable to repair those files but the removal of the other 589 viruses has enabled a successful start of the machine (but not installation of Vet) and backing up of personal files. (Yes I will properly scan those before using them!).

Now what to do?

Should I run Avast again to remove the other 15 or so infected files (which will probably make Windows inoperative?) and then re-install Windows? Yes they have all CD, code etc that came with the machine when new.

How, exactly, should I do this? Do I need anything apart from the Windows CD and code? Should I format C drive first and then re-install Windows or just get rid of the virus infected Windows files with Avast and then install windows again without formatting? The Windows version in question is XP Home Edition.

Most of the files deleted were internet-related and a few were music files so they shouldn't be too important although I did note that Internet Explorer has disappeared apart from the shortcut.

Or is there another, easier, way?

Any help greatly appreciated.

P.S. Yes I've had a few words to the kids about not removing the anti-virus software in future...

 

[Julia]

Smurf:

Sounds ghastly. We have a talented IT forum member in 123enen. He solved my problem a couple of weeks ago, after failed attempts to assist by three IT firms via phone, and then a tech spending two hours here at home.
Thanks again, 123enen.

Commiserations.

Julia

 

[chansw]

Under this situation, I would suggest you format the drive and reinstall the Windows XP after that. Given that the machine is infected with so many viruses, I definitely prefer to start from scratch for the peace of mind. Before you format the drive, do you have all the CDs of all other applications (other than Windows)? Also, any user data like Word documents, email, ICQ files etc you need to backup? Make sure those non recoverable data are backup first before you do anything. Just my 2 cents.

 

[tarnor]

Thats a remarkable amount of viruses for just turning the virus buster off for a little while? sounds like a long period with an ineffective virus buster was it ever updated?

avg has a free version which updates regualary.. zonealarm has a good free personal firewall 2..

Sounds like a serious infection id be going for the backup all files and a fresh format and resinstall..

All the windows cds ive had do a format at start. throw the cd in and it will request for you to hit any key to boot from cd when u turn the machine on .. it will then load a few setup files and ask if you want to repair or do a new install..choosing new intall, it will then give you the option of formating the drive.. - do not select the quick format here you need to do a full format..

Once you get it back up and running the first thing you want to do is install service pack 2 before connecting to the internet(it will at least get the windows firewall up and running).. its best if you can have this on a cd before installing windows. After that u can connect to the internet and go straight for all the windows securities updates. next go for a decent virus buster and make sure it has all the latest updates. Then you should be safe to scan what u salvaged from the old computer.. id copy it over to the hard drive and hit it with a few of the online scanners like trend micro as well as your regular one to make sure you didnt miss anything.. I read an article where the techie used 4 different scans when he came and did house calls so for serious infections one good virus scanner is not always enough..

 

[GreatPig]

Smurf,

It sounds a bit of a mess. I unwittingly got a virus on my wife's laptop recently and it ended up infecting a few hundred files, which AVG could only partly clean. In the end I just wiped everything and reinstalled it all.

Then I went and bought True Image (cost US$50) and have now done an image of the drive. Unlike some other imaging software, True Image allows storing the image on the same partition that's being imaged (although of course it needs to be moved elsewhere afterwards). Useful on laptops with only a single partition and no external hard drive.

You may as well try repairing the files before reformatting though. Some Windows files will automatically be recovered by Windows if you delete them, so you may be lucky.

Simply removing the anti-virus software shouldn't give the machine viruses. If a firewall is used, and the PC is kept up-to-date with Windows patches, then the main cause of viruses is executing dodgy email attachments (something kids are prone to do though).

What virus was it?

GP

 

[Smurf1976]

Thanks for the replies!

I'll do a format and complete reinstall. Sounds like that's the safest option.

They have the Office etc CD so should be no problems there. Windows is on a CD and there's a sticker with the Product Key on the side of the PC.

Just one more question. I remember something about a floppy disk "recovery disk" being needed. Is this needed to reinstall Windows XP or was that something else I'm thinking of?

I'll have to do the internet account setup manually though as that was done this way in the first place. They just signed up online (well, I did it for them) so don't have any disks for that. Wasn't too hard from what I remember.

Thanks again.

 

[Smurf1976]

Smurf,

It sounds a bit of a mess. I unwittingly got a virus on my wife's laptop recently and it ended up infecting a few hundred files, which AVG could only partly clean. In the end I just wiped everything and reinstalled it all.

Then I went and bought True Image (cost US$50) and have now done an image of the drive. Unlike some other imaging software, True Image allows storing the image on the same partition that's being imaged (although of course it needs to be moved elsewhere afterwards). Useful on laptops with only a single partition and no external hard drive.

You may as well try repairing the files before reformatting though. Some Windows files will automatically be recovered by Windows if you delete them, so you may be lucky.

Simply removing the anti-virus software shouldn't give the machine viruses. If a firewall is used, and the PC is kept up-to-date with Windows patches, then the main cause of viruses is executing dodgy email attachments (something kids are prone to do though).

What virus was it?

GP

Just read your post after already starting my reply.

Not sure what the virus is but there were several different "Trojan" viruses picked up by Avast. Hundreds of internet files had them and about 15 of the Windows files. A few music and other personal files too (nothing important).

I'm not sure how they got the viruses but I assume it's via internet and swapping CD's with friends and not scanning anything for viruses. No doubt their friends' computers are similarly infected...

I'll give Avast another go and delete the Windows files this time and see what happens. It did try to fix the files but said that it couldn't. I also did try some online scans that I found via a google search but then the virus simply shut down the internet connection so that didn't work. I opted not to delete the Windows files last time as I thought that would cause more problems and hadn't been able to backup the personal files yet. At least they're backed up now so little consequence if it goes wrong and have to start from scratch. The PC is only for home use and not for trading shares, running a business etc so not too critical in that sense. Might be lucky...

Apparently it's been showing symptoms since September 2005 but the kids didn't worry until it stopped altogether.

If nothing else, this experience will make me very careful to keep my backups up to date as I do have some things I wouldn't want to lose. Thankfully the person whose PC has the problem is only using it for games, web surfing etc.

 

[laurie]

Thanks for the replies!


Just one more question. I remember something about a floppy disk "recovery disk" being needed. Is this needed to reinstall Windows XP or was that something else I'm thinking of?



Thanks again.

I think you are referring to the admin password

cheers laurie

 

[123enen]

Same opinion as other posters. This sound like a reinstall job. Sorry cant be of more help.

 

[GreatPig]

the virus simply shut down the internet connection

There were a couple of viruses that commonly did that - Blaster I think was one of them. You needed the Windows patch or a firewall to stop that one, as you could get it without doing anything yourself.

To me, the three most important things are:

- Have a firewall (broadband router or software one)
- Have AV software and keep it updated
- Keep up with the critical Windows patches

I also run GRC's Decombobulator program to disable DCOM.

Cheers,
GP

 

[clowboy]

Smurf as far as I am aware you do not need a boot disk for xp (certainly not for pro).

You should be able to boot straight from the cd.

Go into bios and set it to scan cd rom as first option then reset pc with windows cd in and test it first to be certain.

 

[Smurf1976]

Thanks everybody.

Did the complete Windows reinstall. Haven't put the software on yet but all seems OK. Did notice a complete lack of shortcuts on the desktop apart from the recycle bin (and Start menu) though which I wasn't expecting. I thought it would have put the basics such as "My Computer" etc on but it seems not. Should be able to do manually though so no problem I hope.

Note: I had to enter setup and select the CD drive as the first boot device. Simply putting the CD in the drive before starting the machine produced errors although it did run.

So with a bit of luck will be all back to normal in a few days.

 

[Stan 101]

to get the icons right click on desktop > properties > desktop > customise desktop. You will see tick boxes for what you would like to see icon-wise.



Cheers,

 

[Fab]

Any freeware to log share transactions ??

 

[Happy]

I think A: floppy drive -Boot up- disk is needed to start the computer after C: drive is formatted, but I never did it myself just vaguely remember this comment, could be incorrect too.

 

[Fab]

Where could I download a freeware to log my share transactions ? Any suggestion would be welcome ?

 

[anon]

Earlier versions of Windows asked for a blank diskette to be inserted at some point during Set Up to record some basic DOS commands to create a tool for testing basic operations of the cpu etc. in case of failure to boot up from the hard drive. I'm not sure this is done for Windows XP. I went through the XP installation manual and found no reference to using a floppy diskette during installation. I've also gone through "The Windows XP Pocketbook" and found no mention of using a floppy during installation.

I then went to Windows "Help" feature and have found an entry for "Floppy Disks, Troubleshooter", displayed it, and again there was no explanation. There is information for Emergency Repair Disk, but this disk is on the hard disk that the system is on, not a floppy.

anon

 

[FXST01]

You can definitely boot and install from the windows xp cdrom, once it formatted and starts installing, on re-boot it'll read the c drive and then complete the installation from cdrom.


cheers

P.S. www.trendmicro.com.au have a home checkup for virus removal called housecall. Its on their front page

 

[JimBob]

Although the original post is from February, you should also get Adaware,
http://www.lavasoftusa.com/products/ad-aware_se_personal.php
and run it once a week to rid your computer of spyware that you pick up from general web surfing. If you think you have a virus, visit trend micro's website - as already suggested by others - and run their free online virus scan. If it cant fix the infected files, it should tell you what virus you have. A quick look on google will tell you how to fix the problem. A lot of them are fairly simple to remove, write down the infected file/s, reboot windows in safe mode and delete the files.

 

[SirRumpole]

My Internet connection has been out for a couple of days. I have a mobile Broadband modem. After a bit of mucking around I find I can use my mobile phone as wifi "hotspot".

Is there any need for a separate wifi modem ?