Close all open browsers before using, especially FireFox. <-Important!!!
Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.
If you use Firefox browser click Firefox at the top and choose: Select All
Click the Empty Selected button. If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser click Opera at the top and choose: Select All
Click the Empty Selected button. If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
Notes: On Vista, "Windows Temp" is disabled. To empty Temp, ATF-Cleaner must be Run As Administrator.
The Prefetch cleaning feature has been disabled for Vista Users. Tabs for applications that are not installed are grayed out.
Next
Before we start fixing anything you should print out these instructions or copy them to a NotePad file so they will be accessible. Some steps will require you to disconnect from the Internet or use Safe Mode and you will not have access to this page.
Please download Dr.Web CureIt and save it to your desktop. DO NOT perform a scan yet. alternate download link Note: The file will be randomly named (i.e. 5mkuvc4z.exe).
Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".
Scan with Dr.Web CureIt as follows:
Double-click on the randomly named file to open the program and click Start. (There is no need to update if you just downloaded the most current version
Read the anti-virus check by DrWeb scanner prompt and click Ok where asked to Start scan now? Allow the setup.exe to load if asked by any of your security programs.
The Express scan will automatically begin. (This is a short scan of files currently running in memory, boot sectors, and targeted folders).
If prompted to dowload the Full version Free Trial, ignore and click the X to close the window.
If an infected object is found, you will be prompted to move anything that cannot be cured. Click Yes to All. (This will move any detected files to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if they can't be cured)
After the Express Scan is finished, put a check next to Complete scan to scan all local disks and removable media.
In the top menu, click Settings > Change settings, and uncheck "Heuristic analysis" under the "Scanning" tab, then click Apply, Ok.
Back at the main window, click the green arrow "Start Scanning" button on the right under the Dr.Web logo.
Please be patient as this scan could take a long time to complete.
When the scan has finished, a message will be displayed at the bottom indicating if any viruses were found.
Click Select All, then choose Cure > Move incurable.
In the top menu, click file and choose save report list.
Save the DrWeb.csv report to your desktop.
Exit Dr.Web Cureit when done.
Important!Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)
I did the ATL Cleaner, and then I downloaded Dr. Whatever. The first time I did it, I remaned the file Dr. Whatsit on my desktop. But when I reboted in Safe Mode, the file didn't show up on the desktop. So then I exited and reinstalled the software, allowing it whatever name it wanted, saving to the desktop. I then rebooted in Safe Mode, but the file was still not there.
Something strange is happening here. When I rebooted in Safe Mode, the computer asked me to log on. I used my usual log on password, but it didn't work. But when I entered the password for my new laptop, it wokrked. Let me explain.
This laptop that we've been working on was my work computer from 2006 to this year. I bought a new Dell laptop this year to replace it, and retired the old one to my house. The logon password was the same for both laptops until I had a scare and I changed the logon on my NEW laptop. Nobody on the network (or on the planet) knows that I have a different password for my new laptop let alone what my password is. YET, when I rebooted in SAFE MODE under your direction, I was prompted to log on. When I entered my old logon password, it didn't work. But when I entered my new, SECRET password, that nobody but ME knows, it logged on.
Something is ****** up here
By the way, I am still only using my old computer (which uses the old log on) and have never, ever used the new computer to access this site.
This must have something to do with Outlook. The only time I use the new password is to access WebOutlook.
To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair your computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.
On the System Recovery Options menu you will get the following options: Startup Repair System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Choose a Restore Point that was before the computer began having issues, and follow the onscreen instructions.
(Typing from my tablet. Please forgive errors. I freaking HATE digital keyboards.
OK, I rebooted into safe mode. But the options were different than what you directed. The closest option is "Last known good configuration (your most recent settings that worked)."
Do you want me to list all of the options in safe mode on my computer?
Navigate to the Start -> Programs -> Accessories -> System Tools program group and choose System Restore. Choose the Restore my computer to an earlier time radio button and then click Next >.
Choose an available date on the calendar on the left. Note: Available dates are those when a restore point was created and are shown in bold. You can not use System Restore to undo Windows XP changes to a date that a restore point does not exist.
Choose a specific restore point on the right. Note: All restore points created on the date you selected in Step 3 will be listed here. This includes any restore points that you created, scheduled restore points that Windows XP created, and those created automatically during the installation of certain programs.
Click Next >.
Click Next > on the Confirm Restore Point Selection window to begin the System Restore. Note: Windows XP will shut down to complete the System Restore so be sure to save any work you might have open in other programs now. Important: System Restore will not revert any of your non-system files like documents, email, music, etc. to a previous state. These types files are completely unaffected by System Restore. If your intention with this tool was to recover a deleted non-system file, try a file recovery program instead of System Restore.
System Restore will now restore Windows XP to the state that was recorded in the restore point you chose in Step 4. Note: The System Restore process could take several minutes. Your computer will then reboot as normal when complete.
Immediately after logging in after the reboot, you should see the Restoration Complete window.
Click OK.
Windows XP will now continue to start.
This is so strange. I did the restore several days ago and then posted the results, but my post is not here.
Anyway, the restore worked! I restored to a point in late March, as in early April I deleted Microsoft Silverlight and one other program. I'm thinking I didn't delete the programs completely and some part of the program was still searching or trying to connect??? Don't know. Anyway, the browser is working MUCH faster now.
What next? Do I need to uninstall the programs you had me install?
And going forward, can you give me a list of files I can safely delete on a routine basis to keep my hard drive clean (temp files, downloads, etc.)? I routinely use Internet Tools to delete those files, but there are still so many files that aren't deleted. Any advice about this?
Thanks so much for your persistent help!
That link doesn't take me to Hijackthis, but rather to the main Antivirus Software page. I've clicked through the various menus and don't see hijackthis. Can't I get it from TrendMicro's website?
I'm having some personal problems, I will return to you as soon as possible, please have a little patience