shanenin

I think you are referring to ATF Cleaner

The computer was already running really buggy, so it made sense to reload it. I was still curious if anyone had an opinion on what this infection may have been doing. Since it was not trying to extort money, like anti-virus xp, I was more worried to what is was doing quietly.

If any of you experts would like to weigh in on what these items found may have been doing, I would love to hear your opinion. Registry Values Infected: 2 Registry Data Items Infected: 3 Folders Infected: 1 Files Infected: 5 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: C:\WINDOWS\system32\nvaux32.dll (Trojan.Agent) -> Delete on reboot. Registry Keys Infected: (No malicious items detected) Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\supinit_dlls (Spyware.Agent.H) -> Quarantined and deleted successfu

It may be a hardware issue, I would recommend adding at a minimum an additional 256mb(512 would be better) of Ram. I have seen computers that were severely ram deficient not able to load web pages, they would time out. As of today, newegg has a free shipping deal, you can get an aditional 256mb for $9.99. Even if that is not causing the problem, it will adb a huge performance gain to the pc. It will run like a night and day difference. You have a good computer, but even the best computer without enough ram will run slow. It will be the best $9.99 you ever spent.

I think the clean up went well, to be sure, I am going to reload it. The computer has been flakey for some time, this will be the event that will push me to get it done.

I go my first malware infection on my shop computer. I no longer can brag that I don't use anti-virus and have never gotten infected. My faith in anti-virus is crap. I don't think it would have made a difference. My employee noticed that the firewall was turned off. Then he said, "maybe we should run MalwareBytes", it found 12 bad items, backdoor trojans among some. The scary thing was this was a silent infection. Since they were hiding from us with no indication they were their(other then the fire wall being turned off), you have no idea what they were doing. I would have been happier if it

Both memtest86 and seatools are run from a cdrom. They both come as .iso files. These files will used to create a cd that the computer will boot from. Here is a link to bootable cd version of seatools. This is the direct link to memtestx86 Seagate made a tutorial on how to burn an .iso file to cd. This will also work with the memtestx86 .iso Even if you pass both of the tests, they do not indicate with complete certainty of the health of the device. But if either of the tests fail, you can be fairly certain the piece of the hard ware is bad.

Being a novice programmer/scripter(I have not done any in a couple of years), I can appreciate unexpected consequences(bugs). The point you make is a good one. With that said, won't any third party startup manager cause those same problems? Short of doing it from within the authors program, I think all other methods would cause odd bugs.

I use msconfig out of laziness. I don't feel it causes much for problems. With that said their are better ways of doing it.

Thanks for the link and update :-)

Any luck using sfc? You could also try a system restore, it is simple but effective

I will try it in the future. I just assumed it did the same job as ATF cleaner.

"ActiveX Codec" in add/remove programs is a big tip off :-)

Statistically porn sites are probably more prone to malware, but.... If a person is practicing good habits, those sites do not have to be any dangerous then others. I can safely say the majority of people who catch infections do not get them from porn or warez sites. It is those benign looking sites that offer free coupons if you install this program.

Porn sites are no more dangerous then other sites. If a person is just viewing jpegs, wma and flash videos, it is as safe as any other site with media. It is as you said, installing executables without knowing what they may do.

That would be wonderful if I could do that at my shop. The things we could do would be great. I am assuming these tools are not available to the average person.

that was my thought, maybe important windows files got damaged or removed. Running sfc may repair damaged files and allow you to set the start menu back to the default vista theme.

incase the problem is do to a missing system file, I would try and do the following at a command prompt sfc /scannow

You could check and see if their is a different driver version available for that printer. Maybe just reinstalling the current driver may work.

A few extra screw are to be expected :-) Did you remove the whole screen assembly and work on it flat, or did you leave it attached to the base of the computer while you worked on it? Just curious.

As to transferring the files, networking them would be the cheapest method. Using an external hard drive would also work well. A second reason for getting the external drive would be to use it as a backup source. Any file that you don't want lost should be in two separate locations. As to transferring the program, I don't think it can be done. Most programs are installed in many locations, including many settings in the registry. You will need to get the original cd

Will using cygwin allow me to delete files that windows explorer will not, for example, stuff running in memory? I have a hunch this just uses the windows api and can't do this.

That might be a great idea, I could install it to a flash drive.

Thanks, I did not even think of that, but it is still not showing all the files. edit added later// in particular the content.ie5 folder(it contains lots of temporary internet files) seems to be really hidden. If I type it in the explorer address bar manually, I can get to those files, then delete them

When I am cleaning spyware in other peoples computers, I try to do it as fast as possible. I noticed when running MBAM, it spends lots of time scanning temporary internet files. To try and speed the scan up, I run ATF cleaner first, but it does not seem to delete them all. It seems as if Windows is doing its best to hide and protect them. If I navigate to the following location C:\Documents and Settings\owner\Local Settings\Temporary Internet Files, this directory appears empty, even though I have hidden files shown. I know it is not empty, since MBAM spens lots of time scanning files in it.