Dave,

I cannot get into safe mode with command prompt, so I ran SmitRem.exe in
normal mode. Then I ran part 2 (Secured2K'....) and it appeared to work and
I gained back control of my homepage etc.

Tried again to reboot via F8 and still cannot get in Safe mode or safe mode
with command prompt. The safe mode appears in blue on the bottom left of the
screen by on top it only allows proceeding with "normal window statrt up". Am
I still infected? Or is this a fault/feature of Window XP 2002 home SP2?

I appraciate your further advice....and thank you for helping me fix
(apparently) the problem, Much appreciated.

Bill Suen

"David H. Lipman" wrote:

>>
>
> Use *all* the tools I provided you whn using the affected account. The issue is in that
> user's Registry. You have to be logged in as that user for that Registery to be fixed.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>

Dave,

Further to my last post, my sophos just reported picking up another
Troj/Dropper-DK in C:\system volume. So my underlying problem still exists.
And I still cannot get into safe mode command prompt, so cannot run sophos
trojan fix. Hope you can help getting to the bottom of this.

Many thanks.


Bill Suen



"Bill Suen" wrote:

> Dave,
>
> I cannot get into safe mode with command prompt, so I ran SmitRem.exe in
> normal mode. Then I ran part 2 (Secured2K'....) and it appeared to work and
> I gained back control of my homepage etc.
>
> Tried again to reboot via F8 and still cannot get in Safe mode or safe mode
> with command prompt. The safe mode appears in blue on the bottom left of the
> screen by on top it only allows proceeding with "normal window statrt up". Am
> I still infected? Or is this a fault/feature of Window XP 2002 home SP2?
>
> I appraciate your further advice....and thank you for helping me fix
> (apparently) the problem, Much appreciated.
>
> Bill Suen
>
> "David H. Lipman" wrote:
>
> >>
> >
> > Use *all* the tools I provided you whn using the affected account. The issue is in that
> > user's Registry. You have to be logged in as that user for that Registery to be fixed.
> >
> > --
> > Dave
> > http://www.claymania.com/removal-trojan-adware.html
> > http://www.ik-cs.com/got-a-virus.htm
> >
> >
> >

From: "Bill Suen" <BillSuen@discussions.microsoft.com>

| Dave,
|
| Further to my last post, my sophos just reported picking up another
| Troj/Dropper-DK in C:\system volume. So my underlying problem still exists.
| And I still cannot get into safe mode command prompt, so cannot run sophos
| trojan fix. Hope you can help getting to the bottom of this.
|
| Many thanks.
|

That's the System Restore cache.

Disable the System Restore cache and reboot the PC.

Re-enable the System Restore Cache and then create a new restore point.

http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm

I don't know what to tell you about your Safe Mode problem. It has many roots and the
majority aren't malware related.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Dave,

Further to my last post, my sophos just reported picking up another
Troj/Dropper-DK in C:\system volume. So my underlying problem still exists.
And I still cannot get into safe mode command prompt, so cannot run sophos
trojan fix. Hope you can help getting to the bottom of this.

Many thanks.


Bill Suen



"Bill Suen" wrote:

> Dave,
>
> I cannot get into safe mode with command prompt, so I ran SmitRem.exe in
> normal mode. Then I ran part 2 (Secured2K'....) and it appeared to work and
> I gained back control of my homepage etc.
>
> Tried again to reboot via F8 and still cannot get in Safe mode or safe mode
> with command prompt. The safe mode appears in blue on the bottom left of the
> screen by on top it only allows proceeding with "normal window statrt up". Am
> I still infected? Or is this a fault/feature of Window XP 2002 home SP2?
>
> I appraciate your further advice....and thank you for helping me fix
> (apparently) the problem, Much appreciated.
>
> Bill Suen
>
> "David H. Lipman" wrote:
>
> >>
> >
> > Use *all* the tools I provided you whn using the affected account. The issue is in that
> > user's Registry. You have to be logged in as that user for that Registery to be fixed.
> >
> > --
> > Dave
> > http://www.claymania.com/removal-trojan-adware.html
> > http://www.ik-cs.com/got-a-virus.htm
> >
> >
> >

From: "Bill Suen" <BillSuen@discussions.microsoft.com>

| Dave,
|
| Further to my last post, my sophos just reported picking up another
| Troj/Dropper-DK in C:\system volume. So my underlying problem still exists.
| And I still cannot get into safe mode command prompt, so cannot run sophos
| trojan fix. Hope you can help getting to the bottom of this.
|
| Many thanks.
|

That's the System Restore cache.

Disable the System Restore cache and reboot the PC.

Re-enable the System Restore Cache and then create a new restore point.

http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm

I don't know what to tell you about your Safe Mode problem. It has many roots and the
majority aren't malware related.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Dave,

many thanks again for the advice. Will do it tonight.

Bill Suen

"David H. Lipman" wrote:

> From: "Bill Suen" <BillSuen@discussions.microsoft.com>
>
> | Dave,
> |
> | Further to my last post, my sophos just reported picking up another
> | Troj/Dropper-DK in C:\system volume. So my underlying problem still exists.
> | And I still cannot get into safe mode command prompt, so cannot run sophos
> | trojan fix. Hope you can help getting to the bottom of this.
> |
> | Many thanks.
> |
>
> That's the System Restore cache.
>
> Disable the System Restore cache and reboot the PC.
>
> Re-enable the System Restore Cache and then create a new restore point.
>
> http://vil.nai.com/vil/SystemHelpDoc...SysRestore.htm
>
> I don't know what to tell you about your Safe Mode problem. It has many roots and the
> majority aren't malware related.
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>