Author Topic: System check - XP Pro  (Read 17201 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: System check - XP Pro
« Reply #30 on: February 07, 2012, 08:51:20 PM »
Just delete the [createrestorepoint] from the initial scan

konfoozed

  • Guest
Re: System check - XP Pro
« Reply #31 on: February 07, 2012, 09:14:45 PM »
Just delete the [createrestorepoint] from the initial scan
OK, thanks, will hopefully send all in the morning.

konfoozed

  • Guest
Re: System check - XP Pro
« Reply #32 on: February 07, 2012, 09:18:43 PM »
Just noticed the message time is an hour late?

konfoozed

  • Guest
Re: System check - XP Pro
« Reply #33 on: February 08, 2012, 11:45:29 AM »
Just delete the [createrestorepoint] from the initial scan
Logs asrequested, thanks.

true indian

  • Guest
Re: System check - XP Pro
« Reply #34 on: February 08, 2012, 11:46:32 AM »
Thanks! for the logs essexboy will be here by night or in another 1 hour

check back by that time! :)

konfoozed

  • Guest
Re: System check - XP Pro
« Reply #35 on: February 08, 2012, 01:06:08 PM »
Cheers!

true indian

  • Guest
Re: System check - XP Pro
« Reply #36 on: February 08, 2012, 01:25:54 PM »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: System check - XP Pro
« Reply #37 on: February 08, 2012, 10:33:04 PM »
Could you check in device manager to see if any yellow exclamation marks are there

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

If you have Malwarebytes 1.6 or better installed please disable it for the duration of this run

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    Quote
    :OTL
    IE - HKU\S-1-5-21-1957994488-842925246-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1
    IE - HKU\S-1-5-21-1957994488-842925246-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = localhost:12080
    O3 - HKU\S-1-5-21-1957994488-842925246-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
    O33 - MountPoints2\{33a2a2df-a252-11df-a4e1-001e8c269596}\Shell\AutoRun\command - "" = J:\laucher.exe
    O33 - MountPoints2\{33a2a2e1-a252-11df-a4e1-001e8c269596}\Shell\AutoRun\command - "" = J:\laucher.exe
    [2012/02/04 11:45:23 | 000,000,320 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\~rvjxVaaaNz56kH
    [2012/02/04 11:45:23 | 000,000,216 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\~rvjxVaaaNz56kHr
    [2012/02/04 11:45:19 | 000,000,344 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\rvjxVaaaNz56kH

    :Files
    ipconfig /flushdns /c

    :Commands
    [purity]
    [emptytemp]
    [CREATERESTOREPOINT]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

DonZ63

  • Guest
Re: System check - XP Pro
« Reply #38 on: February 08, 2012, 10:35:25 PM »
Quote
With a dual boot system (which I have) System Restore doesn't function fully. You can create a restore point but if you shut down, you lose it. Whether you can create a restore point and go back to it if you don't shut down I just don't know.
This will eliminate your WIN 7? restore points from being deleted when you boot into XP. Works for both Vista or Win 7 and any earlier Windows OS. Use Method 1.
 
http://support.microsoft.com/kb/926185

konfoozed

  • Guest
Re: System check - XP Pro
« Reply #39 on: February 08, 2012, 11:05:52 PM »
Could you check in device manager to see if any yellow exclamation marks are there

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

If you have Malwarebytes 1.6 or better installed please disable it for the duration of this run

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    Quote
    :OTL
    IE - HKU\S-1-5-21-1957994488-842925246-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1
    IE - HKU\S-1-5-21-1957994488-842925246-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = localhost:12080
    O3 - HKU\S-1-5-21-1957994488-842925246-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
    O33 - MountPoints2\{33a2a2df-a252-11df-a4e1-001e8c269596}\Shell\AutoRun\command - "" = J:\laucher.exe
    O33 - MountPoints2\{33a2a2e1-a252-11df-a4e1-001e8c269596}\Shell\AutoRun\command - "" = J:\laucher.exe
    [2012/02/04 11:45:23 | 000,000,320 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\~rvjxVaaaNz56kH
    [2012/02/04 11:45:23 | 000,000,216 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\~rvjxVaaaNz56kHr
    [2012/02/04 11:45:19 | 000,000,344 | ---- | M] () -- H:\Documents and Settings\All Users\Application Data\rvjxVaaaNz56kH

    :Files
    ipconfig /flushdns /c

    :Commands
    [purity]
    [emptytemp]
    [CREATERESTOREPOINT]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Hi. I did have a problem just this afternoon when I discovered my Realtek HD Audio wasn't recognized. I went into Device Manager and it had an exclamation mark by it. I subsequently got the sound back. I PM'd you today regarding current status.
Also, how do I disable MBAM (free)?
Again, regarding the latest fix, I can't  create restore point.
Presume quote points after [emptytemp]?
Please advise before I proceed anything else, thanks.

« Last Edit: February 09, 2012, 12:03:30 AM by konfoozed »

konfoozed

  • Guest
Re: System check - XP Pro
« Reply #40 on: February 08, 2012, 11:17:14 PM »
Quote
With a dual boot system (which I have) System Restore doesn't function fully. You can create a restore point but if you shut down, you lose it. Whether you can create a restore point and go back to it if you don't shut down I just don't know.
This will eliminate your WIN 7? restore points from being deleted when you boot into XP. Works for both Vista or Win 7 and any earlier Windows OS. Use Method 1.
 
http://support.microsoft.com/kb/926185

Thank you for that...something no-one else has mentioned. Trouble is it may solve the problem for W7 but still leaves XP out in the cold (unless I've misunderstood).
Having read the microsoft article again, I believe this is for partition drives rather than totally separate drives.
« Last Edit: February 08, 2012, 11:26:54 PM by konfoozed »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: System check - XP Pro
« Reply #41 on: February 09, 2012, 12:12:31 AM »
Oops  I forgot - yes just delete the create restore line

DonZ63

  • Guest
Re: System check - XP Pro
« Reply #42 on: February 09, 2012, 12:30:55 AM »
Quote
Thank you for that...something no-one else has mentioned. Trouble is it may solve the problem for W7 but still leaves XP out in the cold (unless I've misunderstood).
Having read the microsoft article again, I believe this is for partition drives rather than totally separate drives.
XP is not the issue as far as it's restore points are concerned. The problem lies in the way XP creates it's restore points; it will delete those in any other OS present. It's a bug in XP that Microsoft chose not to fix.

Fix works fine when each OS is installed on a separate drive. That is how my dual boot is set up.
 

konfoozed

  • Guest
Re: System check - XP Pro
« Reply #43 on: February 09, 2012, 08:15:31 AM »
Quote
Thank you for that...something no-one else has mentioned. Trouble is it may solve the problem for W7 but still leaves XP out in the cold (unless I've misunderstood).
Having read the microsoft article again, I believe this is for partition drives rather than totally separate drives.
XP is not the issue as far as it's restore points are concerned. The problem lies in the way XP creates it's restore points; it will delete those in any other OS present. It's a bug in XP that Microsoft chose not to fix.

Fix works fine when each OS is installed on a separate drive. That is how my dual boot is set up.

Thank you for that....I'll have a look at it again but would I then be able to retain my SR points for XP? Up to now I've always lost them on both XP and W7. .
« Last Edit: February 09, 2012, 08:36:20 AM by konfoozed »

konfoozed

  • Guest
Re: System check - XP Pro
« Reply #44 on: February 09, 2012, 09:25:43 AM »
For Essexboy

This morning's scan.
Thanks.