Software

Ask something
Question Locked

I need help with removing

0 helpful
6 replies

by schuyler

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am working on a Dell Dimension B710 running Windows XP Home Edition, with one Admin acct and two limited "user" accts. After running scans, ("HijackThis", "Trendmicro", "Pandssoftware", "RootkitRevealer 1.71").

Trendmicro, HijackThis, and rootkit revealer says that all is clean.

When I atempt to run "Symantec" online virus scan in IE 7 I receive this notice,

"Unable to run Virus Detection. In order to run Virus Detection you must be using MIcrosoft Internet Explorer 5.0 or higher with Active X and Scripting enabled".

All "Active X Controls" and "Scripting" settings are set as required.

When I attempt to run "Symantec" in Firefox IE Tab I receive a "Script" error.

When I run Pandasoftware online virus scan to check "Local disks" in all three accts, all is clean.

When I run Pandasoftware online virus scan to check "My Computer" in all three accts, one (1) item is found.......

"Adware:adware/powerstrip Windows Registry Not disinfected".

When I ran "Pandasoftware", I noticed that "Pandasoftware" searched in a folder called "Registero de Windows". It appears that this is where the infected file is located.

All information that I can find for removal of this item, from the first step to the final step, leads to a dead-end. None of the items listed for removal can be found in either the "Windows Registy" nor in the various folders of the "C:/" drive.

I have never heard of this problem before. Any help or suggestions are greatly appreciated. Thank you.

6 replies

by hal 9000

If not log in as Admin and download and install Lava Soft Ad aware SE

http://tinyurl.com/lvov4

Spy Bot S & D

http://tinyurl.com/yrwy2

Install update and then reboot into safe mode and run scans.

[b]NB With Spy Bot it's possible to pick up False Positives so things like Windows Defender and some other programs will come up as infections. You need to be sure that these are not being used or you will cripple them when you remove the links to them through Spy Bot.[/b]

Col

by schuyler

Yes, I did. I used Spybot, Ad aware SE and Windows Defender. Sorry for neglecting to mention that in my previous post. I also forgot to mention that I do not have any installation CD's.

by hal 9000

It has plenty of known issues and you are running into some of them here. The good news is that you [b]Can Not[/b] remove it without breaking most of Windows.

As for [i]Registero de Windows[/i]

Do a search of the HDD/s and see if this folder actually exists unless you have some strange Language version of XP it shouldn't and if it doesn't exist I would say that you are getting a [b]False Positive[/b] due to a IE7 incompatibility.

You already have several programs claiming that the system is clean so I would go with those and make sure that there is an up to date AV Product installed and then you can send it back knowing that you have done all that you can.

If there is no current AV Product installed download & install AVG 7.5 and leave it like that.

http://tinyurl.com/cgvwp

Col

by schuyler

Ahhh.....I was beginning to wonder about IE7. Is there a way to repair IE7, or should I un-install and re-install IE7? Interestingly enough, I have never had any known issues on my computer, or any other computer except for this one. So this is a new one to me.

I did a search of all HDD's and did not find any files or folders named, "Registro de Windows". I agree that this is something that shouldn's be there as this is a "US" computer, built for the United States.

I've been leaning towards the possibility that Pandasoftware is giving a false positive. Mainly because of inability to find any said item in "Local Disks", (in all three accts). Yet it is only found when doing a scan of "My Computer", (in all three accts).

Now I am not quite sure that the item that Pandasoftware found is not a false positive. I found an alias for Adware:adware/powerstrip. I did a registry search and found all the items in the registry that I was unable to find before. I deleted the infected/corrupted files that were found in the registry.

Ran a Panda Scan and still find said infected file, (Adawre:adware/powerstrip), in "Registro de Windows".

This computer is running an up to date virus scanner, (AVG 7.5), "Zone Alarm" firewall, "Spybot S&D 1.4", "Ad-Aware SE Personnal", and "Windows Defender".

by hal 9000

No you can not remove it and reinstall it or go back to IE6 easily. For some reason M$ knows best and wants IE7 on every XP Box and to hell with the problems.

M$ does have a way to remove IE7 that they charge for but even that has some known issues and doesn't work for all hardware configurations. The only way to safely remove IE7 is to save the data wipe the Drive and reinstall which is both time consuming and generally speaking a waste of time as IE7 will be installed come next M$ Tuesday.

On the few machines that I've seen it installed on there have been some major problems associated with it from being unable to access the Windows Update Site to blocking some Web Sites that work perfectly OK under FF. Apparently M$ doesn't want you looking at Key Finder by Magic Jelly Bean because it's a useful tool to change product keys on XP with. That one that I run into all the time when I'm called out at a moments notice and don't carry everything that I need with me though I'm getting better but you learn very quickly to start to pick up things that you don't think that you'll actually need. Besides I have the file on my NB and I always throw in a new box of Floppies so it's no longer an issue and because I have it all the time I no longer need it as often or at least that's the way that it feels.

As you have removed a Registry Entry make sure that everything now works as you'll need to test the thing quite heavily just to be on the safe side, but if it works forget about the thing and let it go.

Col

This discussion is closed to new replies.