Lost some system options after getting beagle

mneenee · Sep 22, 2006

Hi there

I was hoping that someone could help me fix some problems with windows xp sp1? After getting the beagle virus I cannot get into: system restore, help and support, search or windows update. Is there anyway I can recover these files without an installation CD???? This is my sisters laptop it is a IBM Think Pad R31 with windows xp sp1. She purchased it preinstalled and never recieved any OEM software for it. I can however still vallidate it through microsoft. (unfortunatly that doesn't help.) I need to upgrade it to sp2. Hope someone can help let!!

Mneenee

TimW · Sep 22, 2006

Not much you can do without a cd ....most of those problems are fixable, but require a cd ...if you could borrow one ....we can maybe do the fix's without the repair install ....but would first retreive your cp key before we have to resort to a repair install.
SP/2 won't fix them ...but you can download it after all the fixin' is done.

mneenee · Sep 22, 2006

if i borrow one would that effect vallidating through microsoft? Also should it effect windows update and system restore? Just curiousto how it happened lol.

Thanks

Mneenee

TimW · Sep 22, 2006

Did you go thru our malware section to remove the beagle? .....another xp cd will not effect anything to restore the corrupt files ...would only effect for a repair install ...then you would probably have to call MS$ with explaination and original key and they would give you an activation code.

mneenee · Sep 22, 2006

Yes i went through the malware but actuallyfound the fix with avg and mcafee avert stinger.

Bold Eagle · Sep 23, 2006

Contact MS via email and state clearly what you said earlier (legit copy) and yet the supplier didn't provide a CD. Enquire about Product Support and why must you currently suffer when there are so many dubious individuals out there. If you word it well they should send you a copy!

mneenee · Sep 23, 2006

Thanks I will try that but am still waiting on the malware forum for someone to help make sure this pc is clean, actually I am kinda hoping its not lol. Just in case I could find a fix with something that I missed.

mneenee

Matacumbie · Sep 23, 2006

Click on Start > Run and enter the commands below, one at a time.

regsvr32 wshom.ocx

regsvr32 jscript.dll

regsvr32 urlmon.dll

regsvr32 /i mshtml

See if that solves the Help and Support/Search/Update issues.

Steve

mneenee · Sep 23, 2006

What can I say absolute genius Steve!!!! Only one problem remaining now I can get into windows update but it still willnot install. It just tells me that it failed any ideas on that??? You are absolutely wonderful thank you so much!!!!

Mneenee

TimW · Sep 23, 2006

XP: Get Updates No Matter What

Ok, i've been sitting on this one for a while, but with Vista and all, i don't see as much harm.

Move on over to the updates site Microsoft Updates

now when the page loads it will give you the options for custom or Express, if you were to make a choice now you would be given an error like Invalid CD Key or something to that effect... but if you want your updates any way then put this in the title bar:

javascript:void(window.g_sDisableWGACheck='all') and press enter

Then make your selection. The process will continue normally, just leaving out the little part about verifying your Key

*Hoping you are using this for legitimate reasons, if you perhaps entered your key wrong and would like to try changing it do this:

1) change the registry key at path: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\wpaevents
key name: OOBETimer
-By double clicking, just replace a letter or number, this will de-activate your windows so you can change the key.

2) open the key changer:
start\run type %systemroot%\system32\oobe\msoobe.exe /a
click the telephone customer support
click next
click change product key

3) Enter your product key carefully:
then click update
*you will be returned to the previous screen and click the remind me later option

4) Restart
this will re-activate your windows and fix your registry key, and if the key is an actual key, that is not already in use (as it's supposed to be) you will now be able to get updates without the above.

mneenee · Sep 23, 2006

Hi Tim

I dont have a problem vallidating at all. It was just that i couldn't update. Now I can actually get into the site (thanks to Metacombie's advice) but it says the update has failed. I think the problem is that I need to update the BIOS settings before installing SP2. Not completely sure about that but that is what IBM is saying. I am a little weary about updating the BIOS as I am not sure what the password for this comp is if any. but I am going to restart and press F1 just to see. I really appreciate all the help. will let you know how i make out..

Mneenee

TimW · Sep 23, 2006

Sorry ....misunderstood ...could try the download from here (set a restore point before installing):
xp sp2:
http://www.softwarepatch.com/windows/xpsp2.html

Matacumbie · Sep 23, 2006

A few other things to check/try:

1. Make sure you are logged on as Administrator account.

2. Check and make sure the Time/Date are set correctly.

3. Clear the Temporary Internet Files and History.

4. Temporarily disable your anti-virus and any popup blockers running.

5. Click Start, and then click Run.

Type "cmd" without the quotes and press enter.

Type in the following and press return after each line:

REGSVR32 %windir%\system32\wuapi.dll

REGSVR32 %windir%\system32\wuaueng.dll

REGSVR32 %windir%\system32\atl.dll

REGSVR32 %windir%\system32\wucltui.dll

REGSVR32 %windir%\system32\wups.dll

Enter "exit" and press enter.

Try updating again and see if it goes thru. Good Luck.

Steve

mneenee · Sep 23, 2006

Nope that didn't work . But I was mistaken it is trying to download Microsoft Windows installer 3.1 and update for windows xp KB898461. So I am really confused now are those updates for SP1 or SP2?? Thanks for all the help. I am scared to install SP2 until I know I have all the SP1 updates.

Mneenee

mneenee · Sep 23, 2006

Don'tknow if this will help but I have attatched a Bellarc advisor report. There are many missing updates!!! I dont think my sister should own a computer urg!!!!! Sorry just a little frustrated lol.

Mneenee

Matacumbie · Sep 23, 2006

Using windows explorer, find and rename the file:

c:\windows\system32\spupdsvc.exe

to

c:\windows\system32\spupdsvc.old

and then try the update again either through Windows Update or from the
full installer which can be downloaded here:

http://www.microsoft.com/downloads/...e1-9a67-4b99-a65a-069b79267856&DisplayLang=en

Now, try Updates again and see if they start.

Steve

mneenee · Sep 23, 2006

I don'thave that file here C:\windows\system32\spupdsvc.exe
It goes from sprio800.dll to spxcoins.dll

mneenee

TimW · Sep 23, 2006

Sp/2 handles alot of the "missing" updates .....just concerned that you are missing or have some corrupt system files.

mneenee · Sep 23, 2006

Ok, so what can I do to find out if I am missing or have corrupted files? I will try anything at this point lol. Going on hour 15 here and not getting paid lol!!!!

Mneenee

mneenee · Sep 23, 2006

not sure why the last couple of posts didn't post so I am going to repeat my last 2.

Steve I dont have the file C:windows\system32\psupdsvc.dll it goes from sprio800.dll to spxcoins.dll

Tim what can I do to see if I have corrupt or missing files??

Mneenee

TimW · Sep 23, 2006

Without a disk, you cant "system file check" scan .....though a borrowed one will allow you to ...as long as it is the same version of the os.
T'would be ...start / run / type "sfc /scannow" without qoutes ..and have the disk ready to insert.

mneenee · Sep 23, 2006

Ok I have found a copy of win xp home and can use it. Again my only concern would be that it would change my validation # through Microsoft?? Will it or not. I ask because a friend used someone elses cd (maybe not for the same thing) But after could not validate. Can you give me some clarity on this? thanks again

Mneenee

TimW · Sep 23, 2006

Running the file check has nothing to do with validation .....it only checks that the system files are correct or fixes if corrupt ....you are running xp home? If you are running pro, you need a pro cd. ....
The validation issue would come up if you use it to do a repair install with a disk that is not the one that was used to originally install the os ...or a clean install.

mneenee · Sep 23, 2006

Ok I will try it then. Also I just realised that I still can't start in safe mode? Could this be due to the same problem? Thanks

Mneenee

TimW · Sep 23, 2006

The problem with safe mode (you need to tell us exactly what happens if you try to get into safe mode) ..could be caused by a particular virus ...so, what happens?

Never mind ..found the post in malware ...be back...

mneenee · Sep 23, 2006

I am also having problems viewing this page.I cannot see the posts after the one with the belarc file attachment. I have to keep trying from my email and it eventually shows me. also i did not get an email stating that you had responded to me for this last post!

Mneenee

TimW · Sep 23, 2006

We may be running at cross pruposes ...I've read your malware post ...you need to stick with them until you are sure you are clean ...then we can work on any issues that remain ...in the meantime, have you downloaded firefox as a browser ...Firefox:
http://www.majorgeeks.com/Mozilla_Firefox_d2248.html

mneenee · Sep 23, 2006

yup have firefox still cant see the posts though. Is there a way to speedthings up in the malware forum as matt was helpingme but disapeared that was yesterday afternoon. no one has posted a response since then.

Thanks

Mneenee

TimW · Sep 23, 2006

The guys do this in their "spare time" ...and are very thourough ...view the post in the lounge about there efforts :
http://forums.majorgeeks.com/showthread.php?t=103105

Matacumbie · Sep 23, 2006

I noticed that, reply to the Malware thread again, that will bump it up.

Steve

mneenee · Sep 23, 2006

I'm not complaining at all just anxious to get this done. I am extremely appreciative for all you guys do, trust me. If it werent for u allot of people would be broke paying big bucks to get their comps fixed.

Mneenee

TimW · Sep 23, 2006

Just so you know ....you have a ton of infected files ...they are in numerous places (Infected with: DeepScan:Generic.Mitglied.ABD25896) ....please have patience ....(Infected with: Generic.Qhost.0F155C05)....(

Infected with: Win32.Bagle.GL@mm ....mostly in the avg vault ....but you still have the zip in a temp file) ....

What I am telling you is so you will realize that this needs some pro's to get you clean ...hang in there ....and we will see you when you are clean ...hopefully without any issues!!

Bitdefender deleted most ....but you need to be sure.

mneenee · Sep 23, 2006

Thanks Tim I noticed the infected files. Just waiting on a response gonna go out for a bit though and forget about this for a while lol. Thanks so much for your help and hopefully i will figure this out.

Mneenee

mneenee · Sep 28, 2006

Hi Tim

I think this pc is pretty clean now. I havent heard back from the malware forum to confirm this but all seems pretty good. I have been able to get windows updates and am now all current. Removed a bunch of bad stuff off of here.

I am only having just one problem now I still cannot boot into safemode. I have done the sfc /scannow 4 times and it still wont work. When I go into msconfig it just wants to send an error report to microsoft then tells me that the system configuration utility is not responding. When trying to do it from pushing F8 key it just keeps redirecting me to the options page. I have tried every option and the only two it will let me use are Last known good configuration and normal boot mode?? Hoping you can give some ideas as to what is needed here. Thanks allot.

Mneenee

Matacumbie · Sep 28, 2006

Do you have Nero (InCD) installed? If so, disable or uninstall it and try Safe Mode again.

Steve

mneenee · Sep 28, 2006

Nope dont have it installed but that is what some of the infected files were comming up as. as well as neo and some others. They were in a zip file format?? And all deleted. Does this mean anything. Thanks

Mneenee

mneenee · Sep 28, 2006

Ok I just did a search for nero and this is what it found: C:\ProgramFiles\Ahead When I navigate to this directory it has: 5 folders in it cover designer, nero, nero toolkit, shared and wmpburn. If this is what you mean how do I delete or disable it? Thanks

Mneenee

Matacumbie · Sep 28, 2006

Look in Add/Remove programs and see if you see Nero or Ahead listed.

Steve

mneenee · Sep 28, 2006

nope not there

mneenee

Matacumbie · Sep 28, 2006

Delete the Ahead folder.

Steve

mneenee · Sep 28, 2006

ok it is deleted

mneenee

Matacumbie · Sep 28, 2006

Do another search for Nero, Ahead, and InCD.

Steve

mneenee · Sep 28, 2006

It finds nothing but still wont let me boot into safe mode

Mneenee

Matacumbie · Sep 28, 2006

Try msconfig

Steve

mneenee · Sep 28, 2006

That is what i tried just stops responding but first tells me it is out of memory?

Mneenee

Matacumbie · Sep 28, 2006

Thinking here........

Can you bring up the Task Manager (Ctrl+Alt+Delete) ?

See if you notice Nero running.

Steve

mneenee · Sep 28, 2006

I dont think so but there are 53 processes running any idea of what it might look like? also there are a number of drwatson processes running is that normal?

Mneenee

Matacumbie · Sep 28, 2006

No, that's not causing your problem. I would be surprised if you got all the spyware, maybe it is causing the problem.

I know they are busy there and you have been very patient. Let me see if we can get back to your thread there. Kind of keep an eye out for a response there.

I am out of suggestions for now, unless there are other thoughts on it I would concentrate on making sure you are clean on malware.

Steve

mneenee · Sep 28, 2006

Ok thanks for your help it is greatly appreciated. Hopefully you won't have to hear from me again lol.

Mneenee

Matacumbie · Sep 28, 2006

I hope that is what it is, I know they can fix that part.

Steve

Log in or Sign up

Lost some system options after getting beagle

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

Bold Eagle MajorGeek

mneenee Corporal

Matacumbie Rocky Top

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Matacumbie Rocky Top

mneenee Corporal

mneenee Corporal

Attached Files:

Belarc Advisor Current Profile.txt

Matacumbie Rocky Top

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Matacumbie Rocky Top

mneenee Corporal

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

mneenee Corporal

mneenee Corporal

Matacumbie Rocky Top

mneenee Corporal

mneenee Corporal

Matacumbie Rocky Top

mneenee Corporal

Matacumbie Rocky Top

mneenee Corporal

Matacumbie Rocky Top

mneenee Corporal

Matacumbie Rocky Top

mneenee Corporal

Matacumbie Rocky Top

mneenee Corporal

Matacumbie Rocky Top

mneenee Corporal

Matacumbie Rocky Top