I need help ...I have a virus I am now unable to use explorer to do
anything . I error out if I try to download programs, I error out if I
click on programs . I error out 2-3 times.  Im an investigative
researcher . I use my computer all day I am now unable to do anything
. Need sure fire cure with one follow up  if needed)

---

Request for Question Clarification by livioflores-ga on 06 Oct 2004 20:20 PDT

Hi!!

We need more info about your problem:
Could you tell us how do you know that the problem is a virus?
Could you give us more details about the problem (error messages, when
it happens, etc.)?
The problem is with Internet Explorer or Windows Explorer?


Thank you,
livioflores-ga

---

Clarification of Question by jackarron-ga on 07 Oct 2004 23:01 PDT

The onlyn thing I know iw every time I try to load a program using a
cd install it does not run. Every time I try to download a  file from
the internet I get an explorer message error that says send or don;t
send . No matter what you click the screen goes blank and you have to
log into internet explorer again.  I ran so many virus programs its
ridiculous . Now I can't even down load new ones becasue I error out
on downloads. Two people I talked to said I have a virus thats
imbedded somwhere in my registry ( i guess) I went thru the entire
registry . I dsid finf some spyware and I deleted it but guess what it
didn't help. I son;t know its automatically relaoding or how to find
it or even if that s what it is all I know is the machine(once again) 
runs like crap  and I can't  get anything done.....

---

Clarification of Question by jackarron-ga on 07 Oct 2004 23:02 PDT

sorry about the typos in the last message guys

---

Request for Question Clarification by hummer-ga on 08 Oct 2004 06:42 PDT

Hi again, jackarron,

I think you should follow the tutorial at MajorGeeks website -
corrective measures must be done in a methodical manner.

How to: Spyware, Trojan And Virus Removal
http://forums.majorgeeks.com/showthread.php?t=35407

At the very least, you will run the following four programs.

1) Run HouseCall, a very thorough online virus scan:
http://housecall.trendmicro.com/

Download and run the following programs ("check for updates" before scanning):

2) CWShredder:
http://www.spychecker.com/program/coolwebshredder.htmls

3) Adaware
http://lavasoft.element5.com/default.shtml.en

4) SpyBot
http://www.safer-networking.org/en/index.html

Another good tutorial is here:
KRC Anti-Spyware Tutorial
http://www.greyknight17.com/spyware.htm

Good luck,
hummer

---

Clarification of Question by jackarron-ga on 13 Oct 2004 00:41 PDT

thanks to everyone for checking in .plesae let me clarify so I won't
waste anyone's time. I am an investigative researcher . At present I
run 5 different spyware programs includijng Norton. I have a huge (
huge ) amount of research on my harddrive and althogh I back up
everything to DVD I don't always do it in a timely fashion.  I have
run spybot adware panda pest patrol registry healer you name it I ran
it  . I have run thru the registry and (literally) opened eveyone
point of entry . I have run and continue to run spyware programs on
startup. I have tweaked my system and closed as many back doors as I
can. I still ( unfortunately) have a problem ... If anyone can advise
another course of action I await your response.

---

Request for Question Clarification by hummer-ga on 13 Oct 2004 07:09 PDT

Hi again jackarron,

1) What OS are you using?

2) What are the error messages? Both when you try to download and load from CD.

3) Can you download ok if you use another browser (Netscape, Mozilla...)?

4) What version of IE are you using?

5) Did you scan with HouseCall? If not, please try it.
http://housecall.trendmicro.com/

6)  If HouseCall doesn't solve it, please download and run HijackThis
and post your log.
http://www.spychecker.com/download/download_hijackthis.html

Thanks,
hummer

---

Clarification of Question by jackarron-ga on 13 Oct 2004 23:55 PDT

Ok I eill try to log all the error messages - Now even if I click on a
ddesktop icon I get a microsoft error message -the ones that say click
here to send report whcihc I never do... There are a million of them
but most come back with

this : AppName: nmain.exe	 AppVer: 6.0.0.17	 ModName: jsconsole.dll
ModVer: 5.2.3790.0	 Offset: 00002de3

---

Request for Question Clarification by hummer-ga on 14 Oct 2004 05:21 PDT

Hi  jackarron,

Thank you for the error message, it helps - you seem to have picked up
a trojan. Please follow the directions at the following TrendMicro
link and run a HouseCall scan. If you have Windows XP, you will "Scan
your system with Trend Micro antivirus [HouseCall] and delete all
files detected as TROJ_STRTPAGE.EA. Directions for other systems are
given at the link.

"This Trojan may be installed in a system by another malware or by a
malicious script in a Web site."
"The component file usually arrives as JSCONSOLE.DLL."
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_STRTPAGE.EA

HouseCall (TrendMicro):
http://housecall.trendmicro.com/

After cleaning with HouseCall, it would be best to continue by
following a tutorial to make sure there's nothing else lurking about. 
Pick one and follow it word for word.

How to: Spyware, Trojan And Virus Removal
http://forums.majorgeeks.com/showthread.php?t=35407

KRC Anti-Spyware Tutorial
http://www.greyknight17.com/spyware.htm

At the very least, run CWShredder and Ad-aware, following the
directions at the tutorial. Be sure to "Check for Updates" before
running.

CWShredder:
http://www.spychecker.com/program/coolwebshredder.htmls

Adaware
http://lavasoft.element5.com/default.shtml.en

Please let us know how that goes.
hummer

---

Clarification of Question by jackarron-ga on 14 Oct 2004 07:51 PDT

I can't thank you enough for the info. I will follow your instructions
and post a final disposition.  I would also like to up your fee . How
do I do that?
Many Thanks
Jack Arron

---

Request for Question Clarification by hummer-ga on 14 Oct 2004 08:31 PDT

Dear Jack Arron,

Thank you for the thought but let's make sure all is well before
talking about upping fees (generically speaking, after your question
is answered there will be an option for a tip). The instructions sound
hopeful but we won't know for sure until you are finished.  I'll look
forward to your next update.

Sincerely,
hummer

---

Clarification of Question by jackarron-ga on 15 Oct 2004 12:45 PDT

ok here's the deal . I tried to download Housecall . But wa not able
to. I checked the registy but did not find the string to delete
anywhere. SO any other suggestions Although I wish the problem were
fixed . I am affraid it is not .  Any additional suggestions ???

---

Request for Question Clarification by hummer-ga on 15 Oct 2004 13:02 PDT

Hi again,

Well, let's stick with HouseCall for a bit. HouseCall is an online
virus scan, it's not something to download. When you first use it, it
will take a while for it to get your computer ready.

1) Press: Scan Now. It's Free!
2) Pick your location
3) How to use HouseCall:
   1. If this is your first time using HouseCall, expect to wait
several minutes while the scanner loads. This time will vary depending
on your modem speed and will be shorter the next time you visit. When
HouseCall finishes loading in the window above, you will see a list of
the disk drives on your computer.
   2. Click on My Computer.
   3. Click the SCAN button to start.

Please try it again, ok?
hummer

i also want to add that any reactive treatment you follow will not
prevent the exact same problem from popping up in two days. you should
always have a virus protection program running with current updates.
see norton antivirus for product information. in the new virus scans
not only do they look for virus but also spyware and adware. this will
provide you with proactive steps to prevent damage from a virus. once
a virus is on a computer it can create harm that cannot be repaired,
please take these steps to make your computer safe.

jackarron-ga:

If your problem is not yet fixed, consider getting another browser
like Firefox (http://www.mozilla.org/ ).  Since your IE is not working
for downloads, you may have to download and copy it on a CD from
another computer and install it, OR get it using FTP ( instructions
are at http://home.mchsi.com/~rathinam/get-firefox1pr.html  .  Since
you are reading this page (!), print them out and execute them on your
other computer).

And continue to look for options to fix your computer from the helpful
suggestions here and elsewhere.  At least you'll have a working
browser to check them.

--
I am not an official GA researcher.

Some Questions and Possible Solution:

1. Is there needed information on your computer?
2. If Yes, Can you back it up (cd, zip drive, external hd, disks, or
other storage media)?
3.Do you have install disks, or backup disks of your operating system?

If you have no important data or can back it all up, a solution could
be reformatting your hard drive, although it isn't a fun procedure, it
should get rid of your virus or problems.  At which point when your
operating system was reinstalled you could put on a good anti-virus
and hopefully stop this from happening in the future.

Reformatting your hard drive is a procedure used to erase everything
and start from scratch.  You would have to reinstall all programs
needed, redo any changed settings on your computer, and have to
reconfigure your internet connection.  It isn't recommended if you
can't backup any important information, or don't have the ability to
reinstall your operating system and programs.

Here is more information on why you would reformat,what reformating
does, and how to reformat your hard drive.
http://www.umt.edu/reslife/Reformat.htm

Hope This Helps You.

Maybe try scanning in safe mode?  Just hit F8 as your computer boots
up.  You should get a list of boot options.  Hit enter on the safe
mode option.  This will disable all startup items (such as viruses).
If your OS is 9X, then make sure your anti-virus/spyware software is
installed first.


*Warning: This may allow your 2nd computer to get the virus!*

If the posted info doesn't work try moving your hard drive to another
computer with the same OS.  Just set the hard drive as a slave and you
should be able to access the files with the OS on the master drive
(the 2nd PC's hard drive).
This will allow you to access your research files.

*Warning: This may allow your 2nd computer to get the virus!*