Problem Started with Trojan (Thread Renamed)

[Nisa]

Hi-

I'm having a hideous problem with my other computer. I did a norton virus scan and it says I have the Trojan.StartPage.M virus. I tried removing the files that Norton failed to remove but when I go to the location of the file, I can not find the file. And now to top it off, my computer is telling me that norton can't run a full scan because my C: drive is too full. So I try freeing up space but I believe because of this virus I am getting messages of "no can't do". Can you help please.

-Thanks, Nisa

[Tom]

Howdy Nisa,
Try runnng the scan in Safe Mode. Tap F8 at startup, and select Safe Mode from the menu. If that works, you can better assess the next best step to take. Post back and let us know.

[Murray S.]

Howdy and welcome to CTH:

First of all, go to the following thread..

http://www.cybertechhelp.com/forums/showthread.php?t=86677

Follow all the instructions there as required..

Once you have finished, post a HiJackThis log in the Cyber Safety Forum and let the guru's there have a go at it..

http://www.cybertechhelp.com/forums/forumdisplay.php?f=25

Murray

[Nisa]

Howdy Nisa,
Try runnng the scan in Safe Mode. Tap F8 at startup, and select Safe Mode from the menu. If that works, you can better assess the next best step to take. Post back and let us know.
Well, I got Norton to scan after emptying my recycle bin, in Safe Mode. After that I tried deleted the bad files but Windows wouldn't let me. So I went back into Safe Mode and managed to delete them there but I couldn't find one wicked file, no where to be found. So I went into the registry and did a search, and found it. So I deleted that file and did another scan, and poof, Trojan.Start.Page.M was gone. However I ended up losing my internet (which comes thru a wireless adapter) and I still do not like the way my windows opens up. I get three internet pages trying to come up when I start my computer.

So at this point I decide I'm going to reload my windows 2000 profession. I load the CD, things are looking good until I get this message telling me that windows can't find MSRedit.msi and to look in another path. I can't find it. So now my computer is stuck at that same message every time I try to load again. At this point, windows won't let me do anything. Just waiting for me to give it that .msi. I have tried several times to reboot and ever reboot into Safe Mode. Can you help. I hope I'm making sense.

Oh, and yes, I don't know at all what I was doing. I was just doing what I thought made sense.

[Tom]

Nisa,
I see that you have reposted this in a different thread, which could leave you with an incomplete or worse solution. However, given my initial error of not directing your request to the CTH Cyber Safety folks, and some extra steps you have taken since last posting, I feel your next best ideas should come from Murray or one of the other CTH staff with the expertise to address this.

[Nisa]

Thank you Jintan.

[Nisa]

Hey Murray, I'm sorry if I'm making a mess by posting all over. Frankly, I'm somewhat confused of where to post.

Here's my latest dilema:

Well, I got Norton to scan after emptying my recycle bin, in Safe Mode. After that I tried deleted the bad files but Windows wouldn't let me. So I went back into Safe Mode and managed to delete them there but I couldn't find one wicked file, no where to be found. So I went into the registry and did a search, and found it. So I deleted that file and did another scan, and poof, Trojan.Start.Page.M was gone. However I ended up losing my internet (which comes thru a wireless adapter) and I still do not like the way my windows opens up. I get three internet pages trying to come up when I start my computer.

So at this point I decide I'm going to reload my windows 2000 profession. I load the CD, things are looking good until I get this message telling me that windows can't find MSRedit.msi and to look in another path. I can't find it. So now my computer is stuck at that same message every time I try to load again. At this point, windows won't let me do anything. Just waiting for me to give it that .msi. I have tried several times to reboot and ever reboot into Safe Mode. Can you help. I hope I'm making sense.

Oh, and yes, I don't know at all what I was doing. I was just doing what I thought made sense.

Again, I'm sorry for making a mess on the site.

[Murray S.]

Howdy and welcome to CTH:

First of all, go to the following thread..

http://www.cybertechhelp.com/forums/showthread.php?t=86677

Follow all the instructions there as required..

Once you have finished, post a HiJackThis log in the Cyber Safety Forum and let the guru's there have a go at it..

http://www.cybertechhelp.com/forums/forumdisplay.php?f=25

Murray

You should have taken this advice when I first gave it to you.. You had to clean your system before doing ANYTHING else!!! :(

I see by this thread you posted your problem elsewhere.. Please advise as to what has been suggested as a fix and what you have done thus far!!

Murray

[Nisa]

I'm sorry for not taking your advise, but the reason I didn't follow your directions was because when I went to that site I found it complicated and I also lost my internet (wireless adapter).

On the other hand what the other guy suggested, didn't work. So after I manage to do another scan and found the virus files, I tried to delete them, and when that didn't work, I tried to delete them on Safe Mode, that got rid of most of them except for one. That's where I decided to go into the registry and fine this tmp2654 (not sure the exact number). I found the file and deleted it. Did another scan and the Trojan.StartPage.M virus was totally gone. The reason I decided to reload my operationg system was because I wanted a fresh start.

In the middle of installing my windows 2000 I have come across a message that tells me that the feature I'm trying to use is on a network resource (I cant get on the net) and for me to enter an alternate path to a folder containing the installation package.

Also my windows setup has total control of my computer. I can not do anything until I give it what it wants. I can't even reboot. I have to power down to try and start over, only to get the above message over and over even in Safe Mode.

I need to know can I fix this problem without going out to buy a hold new operating system for my computer. Is it possible for me to download an application that can give me what the computer is asking for.

I'm sorry I messed up. I'm so new to this stuff. And you're right, I was being inpatient. :(

[Murray S.]

I have come across a message that tells me that the feature I'm trying to use is on a network resource

What is it asking for?? Where is the install stopping at??

Was this system on a network??

Murray

[Nisa]

thanks for getting back to me.

When performing final tasks, the install freezes half way throught "Registers Components". After she is frozen for a while, a long while, then I get the message for me to look in another path for "MSRedist.msi".

Nisa

[Murray S.]

You don't happen to use Norton anti-virus do you??

Murray

[Nisa]

Yes, I used Norton anti-virus when I did my scans. I also used Adware SE.

Nisa

[Murray S.]

Well, that file you are trying to find is part of Norton.. Do you have the Norton cd??

Murray

[Nisa]

No, I downloaded it from the internet but I can continue downloading it from the net for a year. Can I download my norton onto a disk from the net?

Nisa

[Murray S.]

You won't get the file you need doing it that way..

When you attepted the re-install, did you format and start clean ??

Murray

[Nisa]

No I didn't. There were three options and I picked the second one. I don't recall exactly what it said but I think it had something to do with copying or updating files. Again, I'm not sure.

Murray, if I really messed the computer up, is there anything else I can do. Like if I take her in to a PC fix-it store. What are they going to do? So why can't I do that? Do I have to go buy a whole new software?

I have to fix it. My son went on vacation and is returning Tues. So I thought to surprise him I would "FIX" his computer. I'm in trouble.

Thank you so much for helping me and not giving up on me yet.

Nisa

[Murray S.]

Lets try this.. Do the install again the same way you tried before.. This time, when it asks about that particular .msi file, see if you can browse the Norton folder and direct the install to there..

Murray

[Nisa]

Hi Murray-

I'm sorry but I tried looking in the norton folder, and even other folders and all I found that was similar was webfldrs.msi, that's it!. But I did try again after you advised me.

Should I just throw it out the window???....just kidding.

Any other suggestions?

Thanks, Nisa

[Murray S.]

Do you have 6 clean floppies handy??

Murray

[Nisa]

Yes, I have six clean floppy disks.

[Murray S.]

Okay.. Go to www.bootdisk.com (http://www.bootdisk.com) and download the files needed to create a set of boot floppies for XP (get the exact ones you need)..

Now, use those to install XP..

Murray

[Nisa]

Ok Murray, I went to www.bootdisk.com (http://www.bootdisk.com), but there's a lot of downloads to chose from. So I clicked on XP home/Pro Original/SPI/SP2. Then I picked the XP home edition to download but when I was downloading to the floppy, I got a message saying that it couldn't finish because there was not enough space and it didn't ask me for another floppy either. And that I need a higher density. The disk I'm using are clean 1.44 HD.

And another question, why am I downloading XP when the computer I'm working on (that is having the problems) is Windows 2000?

Either way, what am I doing wrong that I can't download to the floppies. I do have all clean six 1.44 HD floppies.

Thanks, Nisa

[Murray S.]

Download the file to your hard-drive.. It is a self-extracting file..

Once you have downloaded it, double-click the download and it will then start installing the needed files to the floppies..

Murray

[Nisa]

Thanks again Murray.



Well, again you gave me great advice. I managed to download the XP boot disks. Then I took them to the computer that I’m having problems with and installed them. After I got done with that, the computer asked me for the Windows XP cd. I don’t have a Windows XP for that computer. What I was downloading on that computer was Windows 2000. However, I took the Windows XP cd from my other computer (the working one) and tried to feed it that and that’s where I got this message:



[The following value in the .SIF file used by Setup is corrupted or missing:



Value 0 on the line in section [Source Disks Files] with key “SP2.cab.”



Setup cannot continue.]



After that, I say ok, and it shuts down.



Any more suggestions - please?



Nisa