Since having malware(now removed) I have these problems

Since having malware on my computer - a Chode infection, XP firewall is
always off on reboot and when i try to open the firewall icon it asks if i
want to start it up, which i click yes, then an error message pops up,
something like 'for unknown circumstances it can't show the firewall
settings'. I then try to open it again and the firewall settings window opens
with the firewall set to on. Huh?

When the Automatic update icon appears in my tray it is always at 0% and
then disappears. Today I checked manually for updates and proceded to
install. It said it was unsuccessful and couldn't install, then all of a
sudden a little window popped up and installed it? This website indicates
that the automatic downloads to my computer have been successful.

During the time of having malware problems before getting professional
assistence i recieved an error message, something like my SP2 files were
changed or corrupted to insert SP2 disk(which I don't have)windows will not
be stable.

My Vet Anti virus support gave me the link to download SP2 again, which I
did while I was still infected!

I would be grateful for any assistence to fix these problems?
--
SugarPlum

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_R...:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/
http://www.elephantboycomputers.com/...moving_Malware

When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
A more appropriate newsgroup for your problem:
news://msnews.microsoft.com/microsof...rity.homeusers

~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)


Evie wrote:
> Since having malware on my computer - a Chode infection, XP firewall is
> always off on reboot and when i try to open the firewall icon it asks if i
> want to start it up, which i click yes, then an error message pops up,
> something like 'for unknown circumstances it can't show the firewall
> settings'. I then try to open it again and the firewall settings window
> opens with the firewall set to on. Huh?
>
> When the Automatic update icon appears in my tray it is always at 0% and
> then disappears. Today I checked manually for updates and proceded to
> install. It said it was unsuccessful and couldn't install, then all of a
> sudden a little window popped up and installed it? This website indicates
> that the automatic downloads to my computer have been successful.
>
> During the time of having malware problems before getting professional
> assistence i recieved an error message, something like my SP2 files were
> changed or corrupted to insert SP2 disk(which I don't have)windows will
> not
> be stable.
>
> My Vet Anti virus support gave me the link to download SP2 again, which I
> did while I was still infected!
>
> I would be grateful for any assistence to fix these problems?

Thanks for you reply PA Bear,majorgeeks.com did help me, all the appropriate
hijackthis logs, AVG scans, shownew logs, getkey logs, pocket killbox,
registry fixes etc. That's why my computer is free of malware. I only wrote
in on the Microsoft site to find out if someone else had this problem and
could verify that my Service Pack 2 files might be corrupted. I could
download another firewall as suggested by them and also do manual updates but
I'm a bit of a perfectionist and like things to be working properly.
--
SugarPlum


"PA Bear" wrote:

> Run a /thorough/ check for hijackware, including posting your hijackthis log
> to an appropriate forum.
>
> Checking for/Help with Hijackware
> http://aumha.org/a/parasite.htm
> http://aumha.org/a/quickfix.htm
> http://aumha.net/viewtopic.php?t=5878
> http://wiki.castlecops.com/Malware_R...:_Introduction
> http://mvps.org/winhelp2002/unwanted.htm
> http://inetexplorer.mvps.org/data/prevention.htm
> http://inetexplorer.mvps.org/tshoot.html
> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> http://defendingyourmachine.blogspot.com/
> http://www.elephantboycomputers.com/...moving_Malware
>
> When all else fails, HijackThis v1.99.1
> (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
> It will help you to both identify and remove any hijackware/spyware with
> assistance from an expert. **Post your log to
> http://forums.spybot.info/forumdisplay.php?f=22,
> http://castlecops.com/forum67.html,
> http://forums.subratam.org/index.php?showforum=7,
> http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
> analysis, not here.**
>
> If the procedures look too complex - and there is no shame in admitting this
> isn't your cup of tea - take the machine to a local, reputable and
> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> --
> A more appropriate newsgroup for your problem:
> news://msnews.microsoft.com/microsof...rity.homeusers
>
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
>
>
> Evie wrote:
> > Since having malware on my computer - a Chode infection, XP firewall is
> > always off on reboot and when i try to open the firewall icon it asks if i
> > want to start it up, which i click yes, then an error message pops up,
> > something like 'for unknown circumstances it can't show the firewall
> > settings'. I then try to open it again and the firewall settings window
> > opens with the firewall set to on. Huh?
> >
> > When the Automatic update icon appears in my tray it is always at 0% and
> > then disappears. Today I checked manually for updates and proceded to
> > install. It said it was unsuccessful and couldn't install, then all of a
> > sudden a little window popped up and installed it? This website indicates
> > that the automatic downloads to my computer have been successful.
> >
> > During the time of having malware problems before getting professional
> > assistence i recieved an error message, something like my SP2 files were
> > changed or corrupted to insert SP2 disk(which I don't have)windows will
> > not
> > be stable.
> >
> > My Vet Anti virus support gave me the link to download SP2 again, which I
> > did while I was still infected!
> >
> > I would be grateful for any assistence to fix these problems?
>
>

From what you stated in your first post, it sounds like the machine may not
be 100% clean after all.

Can you cite a link to your thread at majorgeeks.com, please?

>>> My Vet Anti virus support gave me the link to download SP2 again, which
>>> I
>>> did while I was still infected!

How old is the machine? Did WinXP SP2 come pre-installed on it when you
bought it? Why did you have to download (install?) SP2 again?

Attempting to (re)install SP2 on an infected machine could cause no end of
problems/issues.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)


Evie wrote:
> Thanks for you reply PA Bear,majorgeeks.com did help me, all the
> appropriate
> hijackthis logs, AVG scans, shownew logs, getkey logs, pocket killbox,
> registry fixes etc. That's why my computer is free of malware. I only
> wrote
> in on the Microsoft site to find out if someone else had this problem and
> could verify that my Service Pack 2 files might be corrupted. I could
> download another firewall as suggested by them and also do manual updates
> but I'm a bit of a perfectionist and like things to be working properly.
>
>> Run a /thorough/ check for hijackware, including posting your hijackthis
>> log to an appropriate forum.
>>
>> Checking for/Help with Hijackware
>> http://aumha.org/a/parasite.htm
>> http://aumha.org/a/quickfix.htm
>> http://aumha.net/viewtopic.php?t=5878
>> http://wiki.castlecops.com/Malware_R...:_Introduction
>> http://mvps.org/winhelp2002/unwanted.htm
>> http://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot.html
>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>> http://defendingyourmachine.blogspot.com/
>> http://www.elephantboycomputers.com/...moving_Malware
>>
>> When all else fails, HijackThis v1.99.1
>> (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
>> It will help you to both identify and remove any hijackware/spyware with
>> assistance from an expert. **Post your log to
>> http://forums.spybot.info/forumdisplay.php?f=22,
>> http://castlecops.com/forum67.html,
>> http://forums.subratam.org/index.php?showforum=7,
>> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
>> expert
>> analysis, not here.**
>>
>> If the procedures look too complex - and there is no shame in admitting
>> this isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> --
>> A more appropriate newsgroup for your problem:
>> news://msnews.microsoft.com/microsof...rity.homeusers
>>
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE, OE, Security, Shell/User)
>>
>>
>> Evie wrote:
>>> Since having malware on my computer - a Chode infection, XP firewall is
>>> always off on reboot and when i try to open the firewall icon it asks if
>>> i
>>> want to start it up, which i click yes, then an error message pops up,
>>> something like 'for unknown circumstances it can't show the firewall
>>> settings'. I then try to open it again and the firewall settings window
>>> opens with the firewall set to on. Huh?
>>>
>>> When the Automatic update icon appears in my tray it is always at 0% and
>>> then disappears. Today I checked manually for updates and proceded to
>>> install. It said it was unsuccessful and couldn't install, then all of a
>>> sudden a little window popped up and installed it? This website
>>> indicates
>>> that the automatic downloads to my computer have been successful.
>>>
>>> During the time of having malware problems before getting professional
>>> assistence i recieved an error message, something like my SP2 files were
>>> changed or corrupted to insert SP2 disk(which I don't have)windows will
>>> not
>>> be stable.
>>>
>>> My Vet Anti virus support gave me the link to download SP2 again, which
>>> I
>>> did while I was still infected!
>>>
>>> I would be grateful for any assistence to fix these problems?

Thanks for your reply, here's my link;
http://forums.majorgeeks.com/showthread.php?t=117522
I also found this link http://windowsxp.mvps.org/sharedaccess.htm, which
describes one of my problems and the solution. Seems to be a corrupt shared
access registry key, which can happen after virus removal apparently.
Probably another corrupt file for my Windows update?
--
SugarPlum


"PA Bear" wrote:

> From what you stated in your first post, it sounds like the machine may not
> be 100% clean after all.
>
> Can you cite a link to your thread at majorgeeks.com, please?
>
> >>> My Vet Anti virus support gave me the link to download SP2 again, which
> >>> I
> >>> did while I was still infected!
>
> How old is the machine? Did WinXP SP2 come pre-installed on it when you
> bought it? Why did you have to download (install?) SP2 again?
>
> Attempting to (re)install SP2 on an infected machine could cause no end of
> problems/issues.
> --
> ~Robear Dyer (PA Bear)
> MS MVP-Windows (IE, OE, Security, Shell/User)
>
>
> Evie wrote:
> > Thanks for you reply PA Bear,majorgeeks.com did help me, all the
> > appropriate
> > hijackthis logs, AVG scans, shownew logs, getkey logs, pocket killbox,
> > registry fixes etc. That's why my computer is free of malware. I only
> > wrote
> > in on the Microsoft site to find out if someone else had this problem and
> > could verify that my Service Pack 2 files might be corrupted. I could
> > download another firewall as suggested by them and also do manual updates
> > but I'm a bit of a perfectionist and like things to be working properly.
> >
> >> Run a /thorough/ check for hijackware, including posting your hijackthis
> >> log to an appropriate forum.
> >>
> >> Checking for/Help with Hijackware
> >> http://aumha.org/a/parasite.htm
> >> http://aumha.org/a/quickfix.htm
> >> http://aumha.net/viewtopic.php?t=5878
> >> http://wiki.castlecops.com/Malware_R...:_Introduction
> >> http://mvps.org/winhelp2002/unwanted.htm
> >> http://inetexplorer.mvps.org/data/prevention.htm
> >> http://inetexplorer.mvps.org/tshoot.html
> >> http://www.mvps.org/sramesh2k/Malware_Defence.htm
> >> http://defendingyourmachine.blogspot.com/
> >> http://www.elephantboycomputers.com/...moving_Malware
> >>
> >> When all else fails, HijackThis v1.99.1
> >> (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
> >> It will help you to both identify and remove any hijackware/spyware with
> >> assistance from an expert. **Post your log to
> >> http://forums.spybot.info/forumdisplay.php?f=22,
> >> http://castlecops.com/forum67.html,
> >> http://forums.subratam.org/index.php?showforum=7,
> >> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
> >> expert
> >> analysis, not here.**
> >>
> >> If the procedures look too complex - and there is no shame in admitting
> >> this isn't your cup of tea - take the machine to a local, reputable and
> >> independent (i.e., not BigBoxStoreUSA) computer repair shop.
> >> --
> >> A more appropriate newsgroup for your problem:
> >> news://msnews.microsoft.com/microsof...rity.homeusers
> >>
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-Windows (IE, OE, Security, Shell/User)
> >>
> >>
> >> Evie wrote:
> >>> Since having malware on my computer - a Chode infection, XP firewall is
> >>> always off on reboot and when i try to open the firewall icon it asks if
> >>> i
> >>> want to start it up, which i click yes, then an error message pops up,
> >>> something like 'for unknown circumstances it can't show the firewall
> >>> settings'. I then try to open it again and the firewall settings window
> >>> opens with the firewall set to on. Huh?
> >>>
> >>> When the Automatic update icon appears in my tray it is always at 0% and
> >>> then disappears. Today I checked manually for updates and proceded to
> >>> install. It said it was unsuccessful and couldn't install, then all of a
> >>> sudden a little window popped up and installed it? This website
> >>> indicates
> >>> that the automatic downloads to my computer have been successful.
> >>>
> >>> During the time of having malware problems before getting professional
> >>> assistence i recieved an error message, something like my SP2 files were
> >>> changed or corrupted to insert SP2 disk(which I don't have)windows will
> >>> not
> >>> be stable.
> >>>
> >>> My Vet Anti virus support gave me the link to download SP2 again, which
> >>> I
> >>> did while I was still infected!
> >>>
> >>> I would be grateful for any assistence to fix these problems?
>
>

Evie, I'm not subscribed there so I can't see your HijackThis logs.

1. Close all browser windows and scan with HijackThis; save the log.

2. Copy/paste the log into an email and send it to me (pabearmvpATgmail.com;
replace AT with @).
--
~PA Bear


Evie wrote:
> Thanks for your reply, here's my link;
> http://forums.majorgeeks.com/showthread.php?t=117522
> I also found this link http://windowsxp.mvps.org/sharedaccess.htm, which
> describes one of my problems and the solution. Seems to be a corrupt
> shared
> access registry key, which can happen after virus removal apparently.
> Probably another corrupt file for my Windows update?
>
>> From what you stated in your first post, it sounds like the machine may
>> not
>> be 100% clean after all.
>>
>> Can you cite a link to your thread at majorgeeks.com, please?
>>
>>>>> My Vet Anti virus support gave me the link to download SP2 again,
>>>>> which
>>>>> I
>>>>> did while I was still infected!
>>
>> How old is the machine? Did WinXP SP2 come pre-installed on it when you
>> bought it? Why did you have to download (install?) SP2 again?
>>
>> Attempting to (re)install SP2 on an infected machine could cause no end
>> of
>> problems/issues.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-Windows (IE, OE, Security, Shell/User)
>>
>>
>> Evie wrote:
>>> Thanks for you reply PA Bear,majorgeeks.com did help me, all the
>>> appropriate
>>> hijackthis logs, AVG scans, shownew logs, getkey logs, pocket killbox,
>>> registry fixes etc. That's why my computer is free of malware. I only
>>> wrote
>>> in on the Microsoft site to find out if someone else had this problem
>>> and
>>> could verify that my Service Pack 2 files might be corrupted. I could
>>> download another firewall as suggested by them and also do manual
>>> updates
>>> but I'm a bit of a perfectionist and like things to be working properly.
>>>
>>>> Run a /thorough/ check for hijackware, including posting your
>>>> hijackthis
>>>> log to an appropriate forum.
>>>>
>>>> Checking for/Help with Hijackware
>>>> http://aumha.org/a/parasite.htm
>>>> http://aumha.org/a/quickfix.htm
>>>> http://aumha.net/viewtopic.php?t=5878
>>>> http://wiki.castlecops.com/Malware_R...:_Introduction
>>>> http://mvps.org/winhelp2002/unwanted.htm
>>>> http://inetexplorer.mvps.org/data/prevention.htm
>>>> http://inetexplorer.mvps.org/tshoot.html
>>>> http://www.mvps.org/sramesh2k/Malware_Defence.htm
>>>> http://defendingyourmachine.blogspot.com/
>>>> http://www.elephantboycomputers.com/...moving_Malware
>>>>
>>>> When all else fails, HijackThis v1.99.1
>>>> (http://aumha.org/downloads/hijackthis.zip) is the preferred tool to
>>>> use.
>>>> It will help you to both identify and remove any hijackware/spyware
>>>> with
>>>> assistance from an expert. **Post your log to
>>>> http://forums.spybot.info/forumdisplay.php?f=22,
>>>> http://castlecops.com/forum67.html,
>>>> http://forums.subratam.org/index.php?showforum=7,
>>>> http://aumha.net/viewforum.php?f=30, or other appropriate forums for
>>>> expert
>>>> analysis, not here.**
>>>>
>>>> If the procedures look too complex - and there is no shame in admitting
>>>> this isn't your cup of tea - take the machine to a local, reputable and
>>>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>>>> --
>>>> A more appropriate newsgroup for your problem:
>>>> news://msnews.microsoft.com/microsof...rity.homeusers
>>>>
>>>> ~Robear Dyer (PA Bear)
>>>> MS MVP-Windows (IE, OE, Security, Shell/User)
>>>>
>>>>
>>>> Evie wrote:
>>>>> Since having malware on my computer - a Chode infection, XP firewall
>>>>> is
>>>>> always off on reboot and when i try to open the firewall icon it asks
>>>>> if
>>>>> i
>>>>> want to start it up, which i click yes, then an error message pops up,
>>>>> something like 'for unknown circumstances it can't show the firewall
>>>>> settings'. I then try to open it again and the firewall settings
>>>>> window
>>>>> opens with the firewall set to on. Huh?
>>>>>
>>>>> When the Automatic update icon appears in my tray it is always at 0%
>>>>> and
>>>>> then disappears. Today I checked manually for updates and proceded to
>>>>> install. It said it was unsuccessful and couldn't install, then all of
>>>>> a
>>>>> sudden a little window popped up and installed it? This website
>>>>> indicates
>>>>> that the automatic downloads to my computer have been successful.
>>>>>
>>>>> During the time of having malware problems before getting professional
>>>>> assistence i recieved an error message, something like my SP2 files
>>>>> were
>>>>> changed or corrupted to insert SP2 disk(which I don't have)windows
>>>>> will
>>>>> not
>>>>> be stable.
>>>>>
>>>>> My Vet Anti virus support gave me the link to download SP2 again,
>>>>> which
>>>>> I
>>>>> did while I was still infected!
>>>>>
>>>>> I would be grateful for any assistence to fix these problems?