| Home | Register | Members | Search | Windows Vista Tips | File Database | Links |
![]() |
| Thread Tools | Display Modes |
|
|
|
| |
|
Dellphinus
Guest
Posts: n/a
|
Correction- clicking CANCEL brings up the context menu. CLicking OK
generates File Not Found. "Dellphinus" wrote: > Just installed latest updates for SP2 in prep for SP3 install. > After the install, any time I right click on C:\ in My COmputer or Windows > Explorer, I get the windows Installer. "The feature you are trying to > install is on a CD-ROM or other removable disk that is not avaliable. Insert > the " disk and click OK. "Use Source" option box has then numeral 1 in it. > Clicking OK after clearing the Use Source box results in the right click > context menu coming up withj no apparent ill effects. > > System information (complements of a previous encounter with Mr. Stanley :-) ) > Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack 2 > Dell DImension 4500, Intel processor > Microsoft Genuine Advantage Diagnostic Results ALL Passed > MGA Diagnostics Report > Diagnostic Report (1.9.0019.0): > ----------------------------------------- > WGA Data--> > Validation Status: Genuine > Validation Code: 0 > > Cached Validation Code: N/A > Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG > Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w= > Windows Product ID: 55277-OEM-2141875-62038 > Windows Product ID Type: 3 > Windows License Type: OEM System Builder > Windows OS version: 5.1.2600.2.00010300.2.0.hom > ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3) > Is Admin: Yes > TestCab: 0x0 > WGA Version: Registered, 1.9.9.1 > Signed By: Microsoft > Product Name: N/A > Architecture: N/A > Build lab: N/A > TTS Error: N/A > Validation Diagnostic: 025D1FF3-230-1 > Resolution Status: N/A > > WgaER Data--> > ThreatID(s): N/A > Version: N/A > > WGA Notifications Data--> > Cached Result: N/A, hr = 0x80070002 > File Exists: No > Version: N/A, hr = 0x80070002 > WgaTray.exe Signed By: N/A, hr = 0x80070002 > WgaLogon.dll Signed By: N/A, hr = 0x80070002 > > OGA Notifications Data--> > Cached Result: N/A, hr = 0x80070002 > Version: N/A, hr = 0x80070002 > OGAExec.exe Signed By: N/A, hr = 0x80070002 > OGAAddin.dll Signed By: N/A, hr = 0x80070002 > > OGA Data--> > Office Status: 100 Genuine > Microsoft Office Professional Edition 2003 - 100 Genuine > OGA Version: Registered, 2.0.48.0 > Signed By: Microsoft > Office Diagnostics: > 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005 > > Browser Data--> > Proxy settings: N/A > User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) > Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe > Download signed ActiveX controls: Prompt > Download unsigned ActiveX controls: Disabled > Run ActiveX controls and plug-ins: Allowed > Initialize and script ActiveX controls not marked as safe: Disabled > Allow scripting of Internet Explorer Webbrowser control: Disabled > Active scripting: Allowed > Script ActiveX controls marked as safe for scripting: Allowed > > File Scan Data--> > > Other data--> > Office Details: > <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel > Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" > minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell System,Dell > Computer,Dell System,Dell > System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central > Standard > Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product > GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft > Office Professional Edition > 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App > Id="15" Version="11" Result="100"/><App Id="16" Version="11" > Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" > Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App > Id="1B" Version="11" Result="100"/><App Id="44" Version="11" > Result="100"/></Applications></Office></Software></GenuineResults> > > Licensing Data--> > N/A > > Windows Activation Technologies--> > N/A > > HWID Data--> > N/A > > OEM Activation 1.0 Data--> > BIOS string matches: yes > Marker string from BIOS: 145B4 ell Inc|19CC0:GENUINE C&C> INC|145B4:Microsoft Corporation > Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell System,Dell > System > > OEM Activation 2.0 Data--> > N/A > > |
|
|
|
|
|||
|
|||
|
PA Bear [MS MVP]
Guest
Posts: n/a
|
See...
Help: I Got Hacked. Now What Do I Do? http://technet.microsoft.com/en-us/l.../cc700813.aspx Back-up any personal data (none of which should be considered 100% trustworthy at this point) then format the HDD & do a clean install of Windows. Please note that a Repair Install (AKA in-place upgrade) will NOT fix this! HOW TO do a clean install of WinXP: See http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 in http://support.microsoft.com/kb/978307 After the clean install, you'll have the equivalent of a "new computer" so take care of everything on the following page before otherwise connecting the machine to the internet or a local network (i.e., other computers) and before using a flash drive or SDCard that isn't brand-new or hasn't been freshly formatted: 4 steps to help protect your new computer before you go online http://www.microsoft.com/security/pypc.aspx Other helpful references include: HOW TO get a computer running WinXP Gold (no Service Packs) fully patched (after a clean install) http://groups.google.com/group/micro...5afa8ed33e121c HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a clean install) http://groups.google.com/group/micro...66ae41add7dd2b Tip: After getting the computer fully-patched, download/install KB971029 manually: http://support.microsoft.com/kb/971029 NB: Any Norton or McAfee free-trial that came preinstalled on the computer when you bought it will be reinstalled (but invalid) when Windows is reinstalled. You MUST uninstall the free-trial and download/run the appropriate removal tool before installing any updates, Windows Service Packs or IE upgrades and before installing your new anti-virus application (which will require WinXP SP3 to be installed). Norton Removal Tool ftp://ftp.symantec.com/public/englis...moval_Tool.exe McAfee Consumer Products Removal Tool http://download.mcafee.com/products/...tches/MCPR.exe Also see: Steps To Help Prevent Spyware http://www.microsoft.com/security/spyware/prevent.aspx Steps to Help Prevent Computer Worms http://www.microsoft.com/security/worms/prevent.aspx Avoid Rogue Security Software! http://www.microsoft.com/security/antivirus/rogue.aspx If these procedures look too complex - and there is no shame in admitting this isn't your cup of tea - take the machine to a local, reputable and independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop. -- ~Robear Dyer (PA Bear) MS MVP-IE, Mail, Security, Windows Client - since 2002 Dellphinus wrote: > Correction- clicking CANCEL brings up the context menu. CLicking OK > generates File Not Found. > > "Dellphinus" wrote: > >> Just installed latest updates for SP2 in prep for SP3 install. >> After the install, any time I right click on C:\ in My COmputer or >> Windows >> Explorer, I get the windows Installer. "The feature you are trying to >> install is on a CD-ROM or other removable disk that is not avaliable. >> Insert the " disk and click OK. "Use Source" option box has then numeral >> 1 in it. Clicking OK after clearing the Use Source box results in the >> right click context menu coming up withj no apparent ill effects. >> >> System information (complements of a previous encounter with Mr. Stanley >> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack 2 >> Dell DImension 4500, Intel processor >> Microsoft Genuine Advantage Diagnostic Results ALL Passed >> MGA Diagnostics Report >> Diagnostic Report (1.9.0019.0): >> ----------------------------------------- >> WGA Data--> >> Validation Status: Genuine >> Validation Code: 0 >> >> Cached Validation Code: N/A >> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG >> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w= >> Windows Product ID: 55277-OEM-2141875-62038 >> Windows Product ID Type: 3 >> Windows License Type: OEM System Builder >> Windows OS version: 5.1.2600.2.00010300.2.0.hom >> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3) >> Is Admin: Yes >> TestCab: 0x0 >> WGA Version: Registered, 1.9.9.1 >> Signed By: Microsoft >> Product Name: N/A >> Architecture: N/A >> Build lab: N/A >> TTS Error: N/A >> Validation Diagnostic: 025D1FF3-230-1 >> Resolution Status: N/A >> >> WgaER Data--> >> ThreatID(s): N/A >> Version: N/A >> >> WGA Notifications Data--> >> Cached Result: N/A, hr = 0x80070002 >> File Exists: No >> Version: N/A, hr = 0x80070002 >> WgaTray.exe Signed By: N/A, hr = 0x80070002 >> WgaLogon.dll Signed By: N/A, hr = 0x80070002 >> >> OGA Notifications Data--> >> Cached Result: N/A, hr = 0x80070002 >> Version: N/A, hr = 0x80070002 >> OGAExec.exe Signed By: N/A, hr = 0x80070002 >> OGAAddin.dll Signed By: N/A, hr = 0x80070002 >> >> OGA Data--> >> Office Status: 100 Genuine >> Microsoft Office Professional Edition 2003 - 100 Genuine >> OGA Version: Registered, 2.0.48.0 >> Signed By: Microsoft >> Office Diagnostics: >> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005 >> >> Browser Data--> >> Proxy settings: N/A >> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) >> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe >> Download signed ActiveX controls: Prompt >> Download unsigned ActiveX controls: Disabled >> Run ActiveX controls and plug-ins: Allowed >> Initialize and script ActiveX controls not marked as safe: Disabled >> Allow scripting of Internet Explorer Webbrowser control: Disabled >> Active scripting: Allowed >> Script ActiveX controls marked as safe for scripting: Allowed >> >> File Scan Data--> >> >> Other data--> >> Office Details: >> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel >> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" >> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell >> System,Dell >> Computer,Dell System,Dell >> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central >> Standard >> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product >> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft >> Office Professional Edition >> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App >> Id="15" Version="11" Result="100"/><App Id="16" Version="11" >> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" >> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App >> Id="1B" Version="11" Result="100"/><App Id="44" Version="11" >> Result="100"/></Applications></Office></Software></GenuineResults> >> >> Licensing Data--> >> N/A >> >> Windows Activation Technologies--> >> N/A >> >> HWID Data--> >> N/A >> >> OEM Activation 1.0 Data--> >> BIOS string matches: yes >> Marker string from BIOS: 145B4 ell Inc|19CC0:GENUINE C&C>> INC|145B4:Microsoft Corporation >> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell >> System,Dell >> System >> >> OEM Activation 2.0 Data--> >> N/A |
|
|
|
|
|||
|
|||
|
Dellphinus
Guest
Posts: n/a
|
PA Bear,
Can you elaborate? This computer was just given a clean bill of health at the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee Enterprise. What nastie does this? "PA Bear [MS MVP]" wrote: > See... > > Help: I Got Hacked. Now What Do I Do? > http://technet.microsoft.com/en-us/l.../cc700813.aspx > > Back-up any personal data (none of which should be considered 100% > trustworthy at this point) then format the HDD & do a clean install of > Windows. Please note that a Repair Install (AKA in-place upgrade) will NOT > fix this! > > HOW TO do a clean install of WinXP: See > http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 in > http://support.microsoft.com/kb/978307 > > After the clean install, you'll have the equivalent of a "new computer" so > take care of everything on the following page before otherwise connecting > the machine to the internet or a local network (i.e., other computers) and > before using a flash drive or SDCard that isn't brand-new or hasn't been > freshly formatted: > > 4 steps to help protect your new computer before you go online > http://www.microsoft.com/security/pypc.aspx > > Other helpful references include: > > HOW TO get a computer running WinXP Gold (no Service Packs) fully patched > (after a clean install) > http://groups.google.com/group/micro...5afa8ed33e121c > > HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a > clean install) > http://groups.google.com/group/micro...66ae41add7dd2b > > Tip: After getting the computer fully-patched, download/install KB971029 > manually: http://support.microsoft.com/kb/971029 > > NB: Any Norton or McAfee free-trial that came preinstalled on the computer > when you bought it will be reinstalled (but invalid) when Windows is > reinstalled. You MUST uninstall the free-trial and download/run the > appropriate removal tool before installing any updates, Windows Service > Packs or IE upgrades and before installing your new anti-virus application > (which will require WinXP SP3 to be installed). > > Norton Removal Tool > ftp://ftp.symantec.com/public/englis...moval_Tool.exe > > McAfee Consumer Products Removal Tool > http://download.mcafee.com/products/...tches/MCPR.exe > > Also see: > > Steps To Help Prevent Spyware > http://www.microsoft.com/security/spyware/prevent.aspx > > Steps to Help Prevent Computer Worms > http://www.microsoft.com/security/worms/prevent.aspx > > Avoid Rogue Security Software! > http://www.microsoft.com/security/antivirus/rogue.aspx > > If these procedures look too complex - and there is no shame in admitting > this isn't your cup of tea - take the machine to a local, reputable and > independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair shop. > -- > ~Robear Dyer (PA Bear) > MS MVP-IE, Mail, Security, Windows Client - since 2002 > > > Dellphinus wrote: > > Correction- clicking CANCEL brings up the context menu. CLicking OK > > generates File Not Found. > > > > "Dellphinus" wrote: > > > >> Just installed latest updates for SP2 in prep for SP3 install. > >> After the install, any time I right click on C:\ in My COmputer or > >> Windows > >> Explorer, I get the windows Installer. "The feature you are trying to > >> install is on a CD-ROM or other removable disk that is not avaliable. > >> Insert the " disk and click OK. "Use Source" option box has then numeral > >> 1 in it. Clicking OK after clearing the Use Source box results in the > >> right click context menu coming up withj no apparent ill effects. > >> > >> System information (complements of a previous encounter with Mr. Stanley > >> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack 2 > >> Dell DImension 4500, Intel processor > >> Microsoft Genuine Advantage Diagnostic Results ALL Passed > >> MGA Diagnostics Report > >> Diagnostic Report (1.9.0019.0): > >> ----------------------------------------- > >> WGA Data--> > >> Validation Status: Genuine > >> Validation Code: 0 > >> > >> Cached Validation Code: N/A > >> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG > >> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w= > >> Windows Product ID: 55277-OEM-2141875-62038 > >> Windows Product ID Type: 3 > >> Windows License Type: OEM System Builder > >> Windows OS version: 5.1.2600.2.00010300.2.0.hom > >> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3) > >> Is Admin: Yes > >> TestCab: 0x0 > >> WGA Version: Registered, 1.9.9.1 > >> Signed By: Microsoft > >> Product Name: N/A > >> Architecture: N/A > >> Build lab: N/A > >> TTS Error: N/A > >> Validation Diagnostic: 025D1FF3-230-1 > >> Resolution Status: N/A > >> > >> WgaER Data--> > >> ThreatID(s): N/A > >> Version: N/A > >> > >> WGA Notifications Data--> > >> Cached Result: N/A, hr = 0x80070002 > >> File Exists: No > >> Version: N/A, hr = 0x80070002 > >> WgaTray.exe Signed By: N/A, hr = 0x80070002 > >> WgaLogon.dll Signed By: N/A, hr = 0x80070002 > >> > >> OGA Notifications Data--> > >> Cached Result: N/A, hr = 0x80070002 > >> Version: N/A, hr = 0x80070002 > >> OGAExec.exe Signed By: N/A, hr = 0x80070002 > >> OGAAddin.dll Signed By: N/A, hr = 0x80070002 > >> > >> OGA Data--> > >> Office Status: 100 Genuine > >> Microsoft Office Professional Edition 2003 - 100 Genuine > >> OGA Version: Registered, 2.0.48.0 > >> Signed By: Microsoft > >> Office Diagnostics: > >> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005 > >> > >> Browser Data--> > >> Proxy settings: N/A > >> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) > >> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe > >> Download signed ActiveX controls: Prompt > >> Download unsigned ActiveX controls: Disabled > >> Run ActiveX controls and plug-ins: Allowed > >> Initialize and script ActiveX controls not marked as safe: Disabled > >> Allow scripting of Internet Explorer Webbrowser control: Disabled > >> Active scripting: Allowed > >> Script ActiveX controls marked as safe for scripting: Allowed > >> > >> File Scan Data--> > >> > >> Other data--> > >> Office Details: > >> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel > >> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" > >> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell > >> System,Dell > >> Computer,Dell System,Dell > >> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central > >> Standard > >> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product > >> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft > >> Office Professional Edition > >> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App > >> Id="15" Version="11" Result="100"/><App Id="16" Version="11" > >> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" > >> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App > >> Id="1B" Version="11" Result="100"/><App Id="44" Version="11" > >> Result="100"/></Applications></Office></Software></GenuineResults> > >> > >> Licensing Data--> > >> N/A > >> > >> Windows Activation Technologies--> > >> N/A > >> > >> HWID Data--> > >> N/A > >> > >> OEM Activation 1.0 Data--> > >> BIOS string matches: yes > >> Marker string from BIOS: 145B4 ell Inc|19CC0:GENUINE C&C> >> INC|145B4:Microsoft Corporation > >> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell > >> System,Dell > >> System > >> > >> OEM Activation 2.0 Data--> > >> N/A > > . > |
|
|
|
|
|||
|
|||
|
Michael
Guest
Posts: n/a
|
Download and run this, full scan, and see what turns up.
http://www.malwarebytes.org/ I don't know from this "GeekstoGo", but I do know CrapAfee is one of the worst AV out there. -- "Don't pick a fight with an old man. If he is too old to fight, he'll just kill you." "Dellphinus" <> wrote in message news:34259E37-883E-4587-BB37-... > PA Bear, > Can you elaborate? This computer was just given a clean bill of health > at > the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee > Enterprise. > What nastie does this? > > "PA Bear [MS MVP]" wrote: > >> See... >> >> Help: I Got Hacked. Now What Do I Do? >> http://technet.microsoft.com/en-us/l.../cc700813.aspx >> >> Back-up any personal data (none of which should be considered 100% >> trustworthy at this point) then format the HDD & do a clean install of >> Windows. Please note that a Repair Install (AKA in-place upgrade) will >> NOT >> fix this! >> >> HOW TO do a clean install of WinXP: See >> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 >> in >> http://support.microsoft.com/kb/978307 >> >> After the clean install, you'll have the equivalent of a "new computer" >> so >> take care of everything on the following page before otherwise connecting >> the machine to the internet or a local network (i.e., other computers) >> and >> before using a flash drive or SDCard that isn't brand-new or hasn't been >> freshly formatted: >> >> 4 steps to help protect your new computer before you go online >> http://www.microsoft.com/security/pypc.aspx >> >> Other helpful references include: >> >> HOW TO get a computer running WinXP Gold (no Service Packs) fully patched >> (after a clean install) >> http://groups.google.com/group/micro...5afa8ed33e121c >> >> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a >> clean install) >> http://groups.google.com/group/micro...66ae41add7dd2b >> >> Tip: After getting the computer fully-patched, download/install KB971029 >> manually: http://support.microsoft.com/kb/971029 >> >> NB: Any Norton or McAfee free-trial that came preinstalled on the >> computer >> when you bought it will be reinstalled (but invalid) when Windows is >> reinstalled. You MUST uninstall the free-trial and download/run the >> appropriate removal tool before installing any updates, Windows Service >> Packs or IE upgrades and before installing your new anti-virus >> application >> (which will require WinXP SP3 to be installed). >> >> Norton Removal Tool >> >> ftp://ftp.symantec.com/public/englis...moval_Tool.exe >> >> McAfee Consumer Products Removal Tool >> >> http://download.mcafee.com/products/...tches/MCPR.exe >> >> Also see: >> >> Steps To Help Prevent Spyware >> http://www.microsoft.com/security/spyware/prevent.aspx >> >> Steps to Help Prevent Computer Worms >> http://www.microsoft.com/security/worms/prevent.aspx >> >> Avoid Rogue Security Software! >> http://www.microsoft.com/security/antivirus/rogue.aspx >> >> If these procedures look too complex - and there is no shame in admitting >> this isn't your cup of tea - take the machine to a local, reputable and >> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair >> shop. >> -- >> ~Robear Dyer (PA Bear) >> MS MVP-IE, Mail, Security, Windows Client - since 2002 >> >> >> Dellphinus wrote: >> > Correction- clicking CANCEL brings up the context menu. CLicking OK >> > generates File Not Found. >> > >> > "Dellphinus" wrote: >> > >> >> Just installed latest updates for SP2 in prep for SP3 install. >> >> After the install, any time I right click on C:\ in My COmputer or >> >> Windows >> >> Explorer, I get the windows Installer. "The feature you are trying to >> >> install is on a CD-ROM or other removable disk that is not avaliable. >> >> Insert the " disk and click OK. "Use Source" option box has then >> >> numeral >> >> 1 in it. Clicking OK after clearing the Use Source box results in the >> >> right click context menu coming up withj no apparent ill effects. >> >> >> >> System information (complements of a previous encounter with Mr. >> >> Stanley >> >> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service >> >> Pack 2 >> >> Dell DImension 4500, Intel processor >> >> Microsoft Genuine Advantage Diagnostic Results ALL Passed >> >> MGA Diagnostics Report >> >> Diagnostic Report (1.9.0019.0): >> >> ----------------------------------------- >> >> WGA Data--> >> >> Validation Status: Genuine >> >> Validation Code: 0 >> >> >> >> Cached Validation Code: N/A >> >> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG >> >> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w= >> >> Windows Product ID: 55277-OEM-2141875-62038 >> >> Windows Product ID Type: 3 >> >> Windows License Type: OEM System Builder >> >> Windows OS version: 5.1.2600.2.00010300.2.0.hom >> >> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3) >> >> Is Admin: Yes >> >> TestCab: 0x0 >> >> WGA Version: Registered, 1.9.9.1 >> >> Signed By: Microsoft >> >> Product Name: N/A >> >> Architecture: N/A >> >> Build lab: N/A >> >> TTS Error: N/A >> >> Validation Diagnostic: 025D1FF3-230-1 >> >> Resolution Status: N/A >> >> >> >> WgaER Data--> >> >> ThreatID(s): N/A >> >> Version: N/A >> >> >> >> WGA Notifications Data--> >> >> Cached Result: N/A, hr = 0x80070002 >> >> File Exists: No >> >> Version: N/A, hr = 0x80070002 >> >> WgaTray.exe Signed By: N/A, hr = 0x80070002 >> >> WgaLogon.dll Signed By: N/A, hr = 0x80070002 >> >> >> >> OGA Notifications Data--> >> >> Cached Result: N/A, hr = 0x80070002 >> >> Version: N/A, hr = 0x80070002 >> >> OGAExec.exe Signed By: N/A, hr = 0x80070002 >> >> OGAAddin.dll Signed By: N/A, hr = 0x80070002 >> >> >> >> OGA Data--> >> >> Office Status: 100 Genuine >> >> Microsoft Office Professional Edition 2003 - 100 Genuine >> >> OGA Version: Registered, 2.0.48.0 >> >> Signed By: Microsoft >> >> Office Diagnostics: >> >> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005 >> >> >> >> Browser Data--> >> >> Proxy settings: N/A >> >> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) >> >> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe >> >> Download signed ActiveX controls: Prompt >> >> Download unsigned ActiveX controls: Disabled >> >> Run ActiveX controls and plug-ins: Allowed >> >> Initialize and script ActiveX controls not marked as safe: Disabled >> >> Allow scripting of Internet Explorer Webbrowser control: Disabled >> >> Active scripting: Allowed >> >> Script ActiveX controls marked as safe for scripting: Allowed >> >> >> >> File Scan Data--> >> >> >> >> Other data--> >> >> Office Details: >> >> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel >> >> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" >> >> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell >> >> System,Dell >> >> Computer,Dell System,Dell >> >> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central >> >> Standard >> >> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product >> >> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft >> >> Office Professional Edition >> >> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App >> >> Id="15" Version="11" Result="100"/><App Id="16" Version="11" >> >> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" >> >> Version="11" Result="100"/><App Id="1A" Version="11" >> >> Result="100"/><App >> >> Id="1B" Version="11" Result="100"/><App Id="44" Version="11" >> >> Result="100"/></Applications></Office></Software></GenuineResults> >> >> >> >> Licensing Data--> >> >> N/A >> >> >> >> Windows Activation Technologies--> >> >> N/A >> >> >> >> HWID Data--> >> >> N/A >> >> >> >> OEM Activation 1.0 Data--> >> >> BIOS string matches: yes >> >> Marker string from BIOS: 145B4 ell Inc|19CC0:GENUINE C&C>> >> INC|145B4:Microsoft Corporation >> >> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell >> >> System,Dell >> >> System >> >> >> >> OEM Activation 2.0 Data--> >> >> N/A >> >> . >> |
|
|
|
|
|||
|
|||
|
Dellphinus
Guest
Posts: n/a
|
GeekstoGo- think BleepingComputer. ANtimalware/Antispyware diagnosis/cleaning.
MBAM, SuperAntiSpyware, ESET, McAfee, RootRepeal, GMER, Kaspersky all came up clean; I'm rerunning MBAM, SAS, Kaspersky, Rootrepeal and McAfee now. "Michael" wrote: > Download and run this, full scan, and see what turns up. > http://www.malwarebytes.org/ > > I don't know from this "GeekstoGo", but I do know CrapAfee is one of the > worst AV out there. > > -- > > > "Don't pick a fight with an old man. > If he is too old to fight, he'll just kill you." > > >> |
|
|
|
|
|||
|
|||
|
MowGreen
Guest
Posts: n/a
|
Some "thing" was installed that used Windows Installer for it's
installation and it left a temp link to an .msi on the C:\ drive. Suggest you run the Windows Installer Cleanup Utility and see if it offers to clean up which said "thing" was installed from a "CD-ROM or other removable media" that used the msi installation process. http://support.microsoft.com/kb/290301 If a "destructive" antivirus or security suite is installed (EX: Norton/McAfee), then the phantom running of the .msi is most likely directly related to it. MowGreen ================ * -343-* FDNY Never Forgotten ================ banthecheck.com "Security updates should *never* have *non-security content* prechecked Dellphinus wrote: > GeekstoGo- think BleepingComputer. ANtimalware/Antispyware diagnosis/cleaning. > MBAM, SuperAntiSpyware, ESET, McAfee, RootRepeal, GMER, Kaspersky all came > up clean; I'm rerunning MBAM, SAS, Kaspersky, Rootrepeal and McAfee now. > > > "Michael" wrote: > >> Download and run this, full scan, and see what turns up. >> http://www.malwarebytes.org/ >> >> I don't know from this "GeekstoGo", but I do know CrapAfee is one of the >> worst AV out there. >> >> -- >> >> >> "Don't pick a fight with an old man. >> If he is too old to fight, he'll just kill you." >> >> > >> |
|
|
|
|
|||
|
|||
|
PA Bear [MS MVP]
Guest
Posts: n/a
|
If you only just now got around to getting WinXP SP2 installed, you haven't
installed ANY critical security updates since October 2006 so there's no WAY you could trust the security of the computer (or your data) now, despite what anyone at GeekstoGo told you. And there's no way any anti-virus application would be working on a WinXP SP1 computer either. Dellphinus wrote: > PA Bear, > Can you elaborate? This computer was just given a clean bill of health > at > the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee > Enterprise. > What nastie does this? > > "PA Bear [MS MVP]" wrote: >> See... >> >> Help: I Got Hacked. Now What Do I Do? >> http://technet.microsoft.com/en-us/l.../cc700813.aspx >> >> Back-up any personal data (none of which should be considered 100% >> trustworthy at this point) then format the HDD & do a clean install of >> Windows. Please note that a Repair Install (AKA in-place upgrade) will >> NOT >> fix this! >> >> HOW TO do a clean install of WinXP: See >> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 >> in >> http://support.microsoft.com/kb/978307 >> >> After the clean install, you'll have the equivalent of a "new computer" >> so >> take care of everything on the following page before otherwise connecting >> the machine to the internet or a local network (i.e., other computers) >> and >> before using a flash drive or SDCard that isn't brand-new or hasn't been >> freshly formatted: >> >> 4 steps to help protect your new computer before you go online >> http://www.microsoft.com/security/pypc.aspx >> >> Other helpful references include: >> >> HOW TO get a computer running WinXP Gold (no Service Packs) fully patched >> (after a clean install) >> http://groups.google.com/group/micro...5afa8ed33e121c >> >> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a >> clean install) >> http://groups.google.com/group/micro...66ae41add7dd2b >> >> Tip: After getting the computer fully-patched, download/install KB971029 >> manually: http://support.microsoft.com/kb/971029 >> >> NB: Any Norton or McAfee free-trial that came preinstalled on the >> computer >> when you bought it will be reinstalled (but invalid) when Windows is >> reinstalled. You MUST uninstall the free-trial and download/run the >> appropriate removal tool before installing any updates, Windows Service >> Packs or IE upgrades and before installing your new anti-virus >> application >> (which will require WinXP SP3 to be installed). >> >> Norton Removal Tool >> >> ftp://ftp.symantec.com/public/englis...moval_Tool.exe >> >> McAfee Consumer Products Removal Tool >> >> http://download.mcafee.com/products/...tches/MCPR.exe >> >> Also see: >> >> Steps To Help Prevent Spyware >> http://www.microsoft.com/security/spyware/prevent.aspx >> >> Steps to Help Prevent Computer Worms >> http://www.microsoft.com/security/worms/prevent.aspx >> >> Avoid Rogue Security Software! >> http://www.microsoft.com/security/antivirus/rogue.aspx >> >> If these procedures look too complex - and there is no shame in admitting >> this isn't your cup of tea - take the machine to a local, reputable and >> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair >> shop. >> -- >> ~Robear Dyer (PA Bear) >> MS MVP-IE, Mail, Security, Windows Client - since 2002 >> >> >> Dellphinus wrote: >>> Correction- clicking CANCEL brings up the context menu. CLicking OK >>> generates File Not Found. >>> >>> "Dellphinus" wrote: >>> >>>> Just installed latest updates for SP2 in prep for SP3 install. >>>> After the install, any time I right click on C:\ in My COmputer or >>>> Windows >>>> Explorer, I get the windows Installer. "The feature you are trying to >>>> install is on a CD-ROM or other removable disk that is not avaliable. >>>> Insert the " disk and click OK. "Use Source" option box has then >>>> numeral >>>> 1 in it. Clicking OK after clearing the Use Source box results in the >>>> right click context menu coming up withj no apparent ill effects. >>>> >>>> System information (complements of a previous encounter with Mr. >>>> Stanley >>>> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack >>>> 2 >>>> Dell DImension 4500, Intel processor >>>> Microsoft Genuine Advantage Diagnostic Results ALL Passed >>>> MGA Diagnostics Report >>>> Diagnostic Report (1.9.0019.0): >>>> ----------------------------------------- >>>> WGA Data--> >>>> Validation Status: Genuine >>>> Validation Code: 0 >>>> >>>> Cached Validation Code: N/A >>>> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG >>>> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w= >>>> Windows Product ID: 55277-OEM-2141875-62038 >>>> Windows Product ID Type: 3 >>>> Windows License Type: OEM System Builder >>>> Windows OS version: 5.1.2600.2.00010300.2.0.hom >>>> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3) >>>> Is Admin: Yes >>>> TestCab: 0x0 >>>> WGA Version: Registered, 1.9.9.1 >>>> Signed By: Microsoft >>>> Product Name: N/A >>>> Architecture: N/A >>>> Build lab: N/A >>>> TTS Error: N/A >>>> Validation Diagnostic: 025D1FF3-230-1 >>>> Resolution Status: N/A >>>> >>>> WgaER Data--> >>>> ThreatID(s): N/A >>>> Version: N/A >>>> >>>> WGA Notifications Data--> >>>> Cached Result: N/A, hr = 0x80070002 >>>> File Exists: No >>>> Version: N/A, hr = 0x80070002 >>>> WgaTray.exe Signed By: N/A, hr = 0x80070002 >>>> WgaLogon.dll Signed By: N/A, hr = 0x80070002 >>>> >>>> OGA Notifications Data--> >>>> Cached Result: N/A, hr = 0x80070002 >>>> Version: N/A, hr = 0x80070002 >>>> OGAExec.exe Signed By: N/A, hr = 0x80070002 >>>> OGAAddin.dll Signed By: N/A, hr = 0x80070002 >>>> >>>> OGA Data--> >>>> Office Status: 100 Genuine >>>> Microsoft Office Professional Edition 2003 - 100 Genuine >>>> OGA Version: Registered, 2.0.48.0 >>>> Signed By: Microsoft >>>> Office Diagnostics: >>>> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005 >>>> >>>> Browser Data--> >>>> Proxy settings: N/A >>>> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) >>>> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe >>>> Download signed ActiveX controls: Prompt >>>> Download unsigned ActiveX controls: Disabled >>>> Run ActiveX controls and plug-ins: Allowed >>>> Initialize and script ActiveX controls not marked as safe: Disabled >>>> Allow scripting of Internet Explorer Webbrowser control: Disabled >>>> Active scripting: Allowed >>>> Script ActiveX controls marked as safe for scripting: Allowed >>>> >>>> File Scan Data--> >>>> >>>> Other data--> >>>> Office Details: >>>> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel >>>> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" >>>> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell >>>> System,Dell >>>> Computer,Dell System,Dell >>>> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central >>>> Standard >>>> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product >>>> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft >>>> Office Professional Edition >>>> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App >>>> Id="15" Version="11" Result="100"/><App Id="16" Version="11" >>>> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" >>>> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App >>>> Id="1B" Version="11" Result="100"/><App Id="44" Version="11" >>>> Result="100"/></Applications></Office></Software></GenuineResults> >>>> >>>> Licensing Data--> >>>> N/A >>>> >>>> Windows Activation Technologies--> >>>> N/A >>>> >>>> HWID Data--> >>>> N/A >>>> >>>> OEM Activation 1.0 Data--> >>>> BIOS string matches: yes >>>> Marker string from BIOS: 145B4 ell Inc|19CC0:GENUINE C&C>>>> INC|145B4:Microsoft Corporation >>>> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell >>>> System,Dell >>>> System >>>> >>>> OEM Activation 2.0 Data--> >>>> N/A >> >> . |
|
|
|
|
|||
|
|||
|
Dellphinus
Guest
Posts: n/a
|
PA Bear,
Machine has had SP2 installed for a long time, I just installed the latest updates to it (I think there was only one Security update outstanding on it). "PA Bear [MS MVP]" wrote: > If you only just now got around to getting WinXP SP2 installed, you haven't > installed ANY critical security updates since October 2006 so there's no WAY > you could trust the security of the computer (or your data) now, despite > what anyone at GeekstoGo told you. > > And there's no way any anti-virus application would be working on a WinXP > SP1 computer either. > > > Dellphinus wrote: > > PA Bear, > > Can you elaborate? This computer was just given a clean bill of health > > at > > the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee > > Enterprise. > > What nastie does this? > > > > "PA Bear [MS MVP]" wrote: > >> See... > >> > >> Help: I Got Hacked. Now What Do I Do? > >> http://technet.microsoft.com/en-us/l.../cc700813.aspx > >> > >> Back-up any personal data (none of which should be considered 100% > >> trustworthy at this point) then format the HDD & do a clean install of > >> Windows. Please note that a Repair Install (AKA in-place upgrade) will > >> NOT > >> fix this! > >> > >> HOW TO do a clean install of WinXP: See > >> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 > >> in > >> http://support.microsoft.com/kb/978307 > >> > >> After the clean install, you'll have the equivalent of a "new computer" > >> so > >> take care of everything on the following page before otherwise connecting > >> the machine to the internet or a local network (i.e., other computers) > >> and > >> before using a flash drive or SDCard that isn't brand-new or hasn't been > >> freshly formatted: > >> > >> 4 steps to help protect your new computer before you go online > >> http://www.microsoft.com/security/pypc.aspx > >> > >> Other helpful references include: > >> > >> HOW TO get a computer running WinXP Gold (no Service Packs) fully patched > >> (after a clean install) > >> http://groups.google.com/group/micro...5afa8ed33e121c > >> > >> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after a > >> clean install) > >> http://groups.google.com/group/micro...66ae41add7dd2b > >> > >> Tip: After getting the computer fully-patched, download/install KB971029 > >> manually: http://support.microsoft.com/kb/971029 > >> > >> NB: Any Norton or McAfee free-trial that came preinstalled on the > >> computer > >> when you bought it will be reinstalled (but invalid) when Windows is > >> reinstalled. You MUST uninstall the free-trial and download/run the > >> appropriate removal tool before installing any updates, Windows Service > >> Packs or IE upgrades and before installing your new anti-virus > >> application > >> (which will require WinXP SP3 to be installed). > >> > >> Norton Removal Tool > >> > >> ftp://ftp.symantec.com/public/englis...moval_Tool.exe > >> > >> McAfee Consumer Products Removal Tool > >> > >> http://download.mcafee.com/products/...tches/MCPR.exe > >> > >> Also see: > >> > >> Steps To Help Prevent Spyware > >> http://www.microsoft.com/security/spyware/prevent.aspx > >> > >> Steps to Help Prevent Computer Worms > >> http://www.microsoft.com/security/worms/prevent.aspx > >> > >> Avoid Rogue Security Software! > >> http://www.microsoft.com/security/antivirus/rogue.aspx > >> > >> If these procedures look too complex - and there is no shame in admitting > >> this isn't your cup of tea - take the machine to a local, reputable and > >> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair > >> shop. > >> -- > >> ~Robear Dyer (PA Bear) > >> MS MVP-IE, Mail, Security, Windows Client - since 2002 > >> > >> > >> Dellphinus wrote: > >>> Correction- clicking CANCEL brings up the context menu. CLicking OK > >>> generates File Not Found. > >>> > >>> "Dellphinus" wrote: > >>> > >>>> Just installed latest updates for SP2 in prep for SP3 install. > >>>> After the install, any time I right click on C:\ in My COmputer or > >>>> Windows > >>>> Explorer, I get the windows Installer. "The feature you are trying to > >>>> install is on a CD-ROM or other removable disk that is not avaliable. > >>>> Insert the " disk and click OK. "Use Source" option box has then > >>>> numeral > >>>> 1 in it. Clicking OK after clearing the Use Source box results in the > >>>> right click context menu coming up withj no apparent ill effects. > >>>> > >>>> System information (complements of a previous encounter with Mr. > >>>> Stanley > >>>> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service Pack > >>>> 2 > >>>> Dell DImension 4500, Intel processor > >>>> Microsoft Genuine Advantage Diagnostic Results ALL Passed > >>>> MGA Diagnostics Report > >>>> Diagnostic Report (1.9.0019.0): > >>>> ----------------------------------------- > >>>> WGA Data--> > >>>> Validation Status: Genuine > >>>> Validation Code: 0 > >>>> > >>>> Cached Validation Code: N/A > >>>> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG > >>>> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w= > >>>> Windows Product ID: 55277-OEM-2141875-62038 > >>>> Windows Product ID Type: 3 > >>>> Windows License Type: OEM System Builder > >>>> Windows OS version: 5.1.2600.2.00010300.2.0.hom > >>>> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3) > >>>> Is Admin: Yes > >>>> TestCab: 0x0 > >>>> WGA Version: Registered, 1.9.9.1 > >>>> Signed By: Microsoft > >>>> Product Name: N/A > >>>> Architecture: N/A > >>>> Build lab: N/A > >>>> TTS Error: N/A > >>>> Validation Diagnostic: 025D1FF3-230-1 > >>>> Resolution Status: N/A > >>>> > >>>> WgaER Data--> > >>>> ThreatID(s): N/A > >>>> Version: N/A > >>>> > >>>> WGA Notifications Data--> > >>>> Cached Result: N/A, hr = 0x80070002 > >>>> File Exists: No > >>>> Version: N/A, hr = 0x80070002 > >>>> WgaTray.exe Signed By: N/A, hr = 0x80070002 > >>>> WgaLogon.dll Signed By: N/A, hr = 0x80070002 > >>>> > >>>> OGA Notifications Data--> > >>>> Cached Result: N/A, hr = 0x80070002 > >>>> Version: N/A, hr = 0x80070002 > >>>> OGAExec.exe Signed By: N/A, hr = 0x80070002 > >>>> OGAAddin.dll Signed By: N/A, hr = 0x80070002 > >>>> > >>>> OGA Data--> > >>>> Office Status: 100 Genuine > >>>> Microsoft Office Professional Edition 2003 - 100 Genuine > >>>> OGA Version: Registered, 2.0.48.0 > >>>> Signed By: Microsoft > >>>> Office Diagnostics: > >>>> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005 > >>>> > >>>> Browser Data--> > >>>> Proxy settings: N/A > >>>> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) > >>>> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe > >>>> Download signed ActiveX controls: Prompt > >>>> Download unsigned ActiveX controls: Disabled > >>>> Run ActiveX controls and plug-ins: Allowed > >>>> Initialize and script ActiveX controls not marked as safe: Disabled > >>>> Allow scripting of Internet Explorer Webbrowser control: Disabled > >>>> Active scripting: Allowed > >>>> Script ActiveX controls marked as safe for scripting: Allowed > >>>> > >>>> File Scan Data--> > >>>> > >>>> Other data--> > >>>> Office Details: > >>>> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel > >>>> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" > >>>> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell > >>>> System,Dell > >>>> Computer,Dell System,Dell > >>>> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central > >>>> Standard > >>>> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product > >>>> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft > >>>> Office Professional Edition > >>>> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App > >>>> Id="15" Version="11" Result="100"/><App Id="16" Version="11" > >>>> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" > >>>> Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App > >>>> Id="1B" Version="11" Result="100"/><App Id="44" Version="11" > >>>> Result="100"/></Applications></Office></Software></GenuineResults> > >>>> > >>>> Licensing Data--> > >>>> N/A > >>>> > >>>> Windows Activation Technologies--> > >>>> N/A > >>>> > >>>> HWID Data--> > >>>> N/A > >>>> > >>>> OEM Activation 1.0 Data--> > >>>> BIOS string matches: yes > >>>> Marker string from BIOS: 145B4 ell Inc|19CC0:GENUINE C&C> >>>> INC|145B4:Microsoft Corporation > >>>> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell > >>>> System,Dell > >>>> System > >>>> > >>>> OEM Activation 2.0 Data--> > >>>> N/A > >> > >> . > > . > |
|
|
|
|
|||
|
|||
|
PA Bear [MS MVP]
Guest
Posts: n/a
|
Thanks for clarifying. What anti-virus application or security suite is installed and is your subscription current? What anti-spyware applications (other than Defender)? What third-party firewall (if any)? Were any of these applications running in the background when you attempted to install SP3? Has a(another) Norton or McAfee application ever been installed on the computer (e.g., a free-trial version that came preinstalled when you bought it)? How to troubleshoot an unsuccessful installation of WinXP SP3 http://support.microsoft.com/kb/950718 WinXP SP3 - Read all prerequisites for a successful installation http://msmvps.com/blogs/harrywaldron...tallation.aspx Free unlimited installation and compatibility support for WinXP SP3 was available from 14 April 2008 thru May 2009. Such support will cost you US$59 per incident now. [You snooze, you lose.] Dellphinus wrote: > PA Bear, > > Machine has had SP2 installed for a long time, I just installed the > latest > updates to it (I think there was only one Security update outstanding on > it). > > "PA Bear [MS MVP]" wrote: >> If you only just now got around to getting WinXP SP2 installed, you >> haven't >> installed ANY critical security updates since October 2006 so there's no >> WAY you could trust the security of the computer (or your data) now, >> despite what anyone at GeekstoGo told you. >> >> And there's no way any anti-virus application would be working on a WinXP >> SP1 computer either. >> >> >> Dellphinus wrote: >>> PA Bear, >>> Can you elaborate? This computer was just given a clean bill of health >>> at >>> the GeekstoGo site. ANd I've been running Black Ice firewall and McAfee >>> Enterprise. >>> What nastie does this? >>> >>> "PA Bear [MS MVP]" wrote: >>>> See... >>>> >>>> Help: I Got Hacked. Now What Do I Do? >>>> http://technet.microsoft.com/en-us/l.../cc700813.aspx >>>> >>>> Back-up any personal data (none of which should be considered 100% >>>> trustworthy at this point) then format the HDD & do a clean install of >>>> Windows. Please note that a Repair Install (AKA in-place upgrade) will >>>> NOT >>>> fix this! >>>> >>>> HOW TO do a clean install of WinXP: See >>>> http://michaelstevenstech.com/cleanxpinstall.html#steps and/or Method 1 >>>> in >>>> http://support.microsoft.com/kb/978307 >>>> >>>> After the clean install, you'll have the equivalent of a "new computer" >>>> so >>>> take care of everything on the following page before otherwise >>>> connecting >>>> the machine to the internet or a local network (i.e., other computers) >>>> and >>>> before using a flash drive or SDCard that isn't brand-new or hasn't >>>> been >>>> freshly formatted: >>>> >>>> 4 steps to help protect your new computer before you go online >>>> http://www.microsoft.com/security/pypc.aspx >>>> >>>> Other helpful references include: >>>> >>>> HOW TO get a computer running WinXP Gold (no Service Packs) fully >>>> patched >>>> (after a clean install) >>>> http://groups.google.com/group/micro...5afa8ed33e121c >>>> >>>> HOW TO get a computer running WinXP SP1(a) or SP2 fully patched (after >>>> a >>>> clean install) >>>> http://groups.google.com/group/micro...66ae41add7dd2b >>>> >>>> Tip: After getting the computer fully-patched, download/install >>>> KB971029 >>>> manually: http://support.microsoft.com/kb/971029 >>>> >>>> NB: Any Norton or McAfee free-trial that came preinstalled on the >>>> computer >>>> when you bought it will be reinstalled (but invalid) when Windows is >>>> reinstalled. You MUST uninstall the free-trial and download/run the >>>> appropriate removal tool before installing any updates, Windows Service >>>> Packs or IE upgrades and before installing your new anti-virus >>>> application >>>> (which will require WinXP SP3 to be installed). >>>> >>>> Norton Removal Tool >>>> >>>> ftp://ftp.symantec.com/public/englis...moval_Tool.exe >>>> >>>> McAfee Consumer Products Removal Tool >>>> >>>> http://download.mcafee.com/products/...tches/MCPR.exe >>>> >>>> Also see: >>>> >>>> Steps To Help Prevent Spyware >>>> http://www.microsoft.com/security/spyware/prevent.aspx >>>> >>>> Steps to Help Prevent Computer Worms >>>> http://www.microsoft.com/security/worms/prevent.aspx >>>> >>>> Avoid Rogue Security Software! >>>> http://www.microsoft.com/security/antivirus/rogue.aspx >>>> >>>> If these procedures look too complex - and there is no shame in >>>> admitting >>>> this isn't your cup of tea - take the machine to a local, reputable and >>>> independent (i.e., not BigBoxStoreUSA or Geek Squad) computer repair >>>> shop. >>>> -- >>>> ~Robear Dyer (PA Bear) >>>> MS MVP-IE, Mail, Security, Windows Client - since 2002 >>>> >>>> >>>> Dellphinus wrote: >>>>> Correction- clicking CANCEL brings up the context menu. CLicking OK >>>>> generates File Not Found. >>>>> >>>>> "Dellphinus" wrote: >>>>> >>>>>> Just installed latest updates for SP2 in prep for SP3 install. >>>>>> After the install, any time I right click on C:\ in My COmputer or >>>>>> Windows >>>>>> Explorer, I get the windows Installer. "The feature you are trying >>>>>> to >>>>>> install is on a CD-ROM or other removable disk that is not avaliable. >>>>>> Insert the " disk and click OK. "Use Source" option box has then >>>>>> numeral >>>>>> 1 in it. Clicking OK after clearing the Use Source box results in the >>>>>> right click context menu coming up withj no apparent ill effects. >>>>>> >>>>>> System information (complements of a previous encounter with Mr. >>>>>> Stanley >>>>>> :-) ) Windows version 5.1 (Build2600.xpsp2_gdr.090804-1412:Service >>>>>> Pack >>>>>> 2 >>>>>> Dell DImension 4500, Intel processor >>>>>> Microsoft Genuine Advantage Diagnostic Results ALL Passed >>>>>> MGA Diagnostics Report >>>>>> Diagnostic Report (1.9.0019.0): >>>>>> ----------------------------------------- >>>>>> WGA Data--> >>>>>> Validation Status: Genuine >>>>>> Validation Code: 0 >>>>>> >>>>>> Cached Validation Code: N/A >>>>>> Windows Product Key: *****-*****-3WWXQ-2VJRX-T6XKG >>>>>> Windows Product Key Hash: rMG42bVgCPBKBWJPdRV2mNNEr0w= >>>>>> Windows Product ID: 55277-OEM-2141875-62038 >>>>>> Windows Product ID Type: 3 >>>>>> Windows License Type: OEM System Builder >>>>>> Windows OS version: 5.1.2600.2.00010300.2.0.hom >>>>>> ID: {F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}(3) >>>>>> Is Admin: Yes >>>>>> TestCab: 0x0 >>>>>> WGA Version: Registered, 1.9.9.1 >>>>>> Signed By: Microsoft >>>>>> Product Name: N/A >>>>>> Architecture: N/A >>>>>> Build lab: N/A >>>>>> TTS Error: N/A >>>>>> Validation Diagnostic: 025D1FF3-230-1 >>>>>> Resolution Status: N/A >>>>>> >>>>>> WgaER Data--> >>>>>> ThreatID(s): N/A >>>>>> Version: N/A >>>>>> >>>>>> WGA Notifications Data--> >>>>>> Cached Result: N/A, hr = 0x80070002 >>>>>> File Exists: No >>>>>> Version: N/A, hr = 0x80070002 >>>>>> WgaTray.exe Signed By: N/A, hr = 0x80070002 >>>>>> WgaLogon.dll Signed By: N/A, hr = 0x80070002 >>>>>> >>>>>> OGA Notifications Data--> >>>>>> Cached Result: N/A, hr = 0x80070002 >>>>>> Version: N/A, hr = 0x80070002 >>>>>> OGAExec.exe Signed By: N/A, hr = 0x80070002 >>>>>> OGAAddin.dll Signed By: N/A, hr = 0x80070002 >>>>>> >>>>>> OGA Data--> >>>>>> Office Status: 100 Genuine >>>>>> Microsoft Office Professional Edition 2003 - 100 Genuine >>>>>> OGA Version: Registered, 2.0.48.0 >>>>>> Signed By: Microsoft >>>>>> Office Diagnostics: >>>>>> 77F760FE-153-80070002_7E90FEE8-175-80070002_025D1FF3-230-1_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005 >>>>>> >>>>>> Browser Data--> >>>>>> Proxy settings: N/A >>>>>> User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32) >>>>>> Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe >>>>>> Download signed ActiveX controls: Prompt >>>>>> Download unsigned ActiveX controls: Disabled >>>>>> Run ActiveX controls and plug-ins: Allowed >>>>>> Initialize and script ActiveX controls not marked as safe: Disabled >>>>>> Allow scripting of Internet Explorer Webbrowser control: Disabled >>>>>> Active scripting: Allowed >>>>>> Script ActiveX controls marked as safe for scripting: Allowed >>>>>> >>>>>> File Scan Data--> >>>>>> >>>>>> Other data--> >>>>>> Office Details: >>>>>> <GenuineResults><MachineData><UGUID>{F3F1404E-5C64-4760-9C1C-3F6E9B8B2BF4}</UGUID><Version>1.9.0019.0</Version><OS>5.1.2600.2.00010300.2.0.hom</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-T6XKG</PKey><PID>55277-OEM-2141875-62038</PID><PIDType>3</PIDType><SID>S-1-5-21-1708537768-1078081533-839522115</SID><SYSTEM><Manufacturer>DELL</Manufacturer><Model>DIM_4500</Model></SYSTEM><BIOS><Manufacturer>Intel >>>>>> Corp.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" >>>>>> minor="3"/><Date>20020522000000.000000+000</Date><SLPBIOS>Dell >>>>>> System,Dell >>>>>> Computer,Dell System,Dell >>>>>> System</SLPBIOS></BIOS><HWID>FBF8388701842062</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central >>>>>> Standard >>>>>> Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product >>>>>> GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft >>>>>> Office Professional Edition >>>>>> 2003</Name><Ver>11</Ver><Val>B90A82CB9436500</Val><Hash>QkyZNrhgPP7BeMX/VkVt7x/e8Zg=</Hash><Pid>73931-640-1545006-57285</Pid><PidType>14</PidType></Product></Products><Applications><App >>>>>> Id="15" Version="11" Result="100"/><App Id="16" Version="11" >>>>>> Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" >>>>>> Version="11" Result="100"/><App Id="1A" Version="11" >>>>>> Result="100"/><App >>>>>> Id="1B" Version="11" Result="100"/><App Id="44" Version="11" >>>>>> Result="100"/></Applications></Office></Software></GenuineResults> >>>>>> >>>>>> Licensing Data--> >>>>>> N/A >>>>>> >>>>>> Windows Activation Technologies--> >>>>>> N/A >>>>>> >>>>>> HWID Data--> >>>>>> N/A >>>>>> >>>>>> OEM Activation 1.0 Data--> >>>>>> BIOS string matches: yes >>>>>> Marker string from BIOS: 145B4 ell Inc|19CC0:GENUINE C&C>>>>>> INC|145B4:Microsoft Corporation >>>>>> Marker string from OEMBIOS.DAT: Dell System,Dell Computer,Dell >>>>>> System,Dell >>>>>> System >>>>>> >>>>>> OEM Activation 2.0 Data--> >>>>>> N/A >>>> >>>> . >> >> . |
|
|
|
|
|||
|
|||
|
|
|
| |
![]() |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Windows Update Error Code: 80070005 | Joe Davis | Windows Update | 33 | 05-05-2010 09:03 AM |
| Two problems resulting from failed dual boot install | lysander | Windows Vista Installation | 6 | 03-03-2010 02:26 AM |
| Overriding default SBS 2008 policies | Andrew M. Saucci, Jr. | Windows Small Business Server | 4 | 02-08-2010 08:36 AM |
| Windows SP3 Update won't complete because of Beethoven's 9th | Dellphinus | Windows Update | 7 | 02-07-2010 07:19 PM |
| Windows Vista-Ready Products | LPH | Windows Vista General Discussion | 2 | 01-13-2010 02:48 PM |
Forum Software Powered by vBulletin®, Copyright Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2 ©2009, Crawlability, Inc. |



Linear Mode

