Author Topic: [Resolved] Wiley Virus?  (Read 6468 times)

0 Members and 1 Guest are viewing this topic.

Offline ssheltmire

  • Bronze Member
  • Posts: 106
Re: [In Progress] Wiley Virus?
« Reply #30 on: March 04, 2009, 05:16:11 PM »
Yes, I believe it does.

Offline ssheltmire

  • Bronze Member
  • Posts: 106
Re: [In Progress] Wiley Virus?
« Reply #31 on: March 04, 2009, 06:30:15 PM »
Sorry, I misled you.  Having verified my processor, it is an Intel Pentium 4.  I think my last PC was an AMD, but that is not the case with this current one.

SS

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22662
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Wiley Virus?
« Reply #32 on: March 04, 2009, 07:25:50 PM »
Did you install or update an HP printer just before this started happening?

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline ssheltmire

  • Bronze Member
  • Posts: 106
Re: [In Progress] Wiley Virus?
« Reply #33 on: March 04, 2009, 09:22:24 PM »
No. I can't think of any hardware related updates or changes occurring recently.

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22662
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Wiley Virus?
« Reply #34 on: March 04, 2009, 10:05:16 PM »
I need you to go to the administration tools in XP. They are in the Control Panel. Open the Admin tools, then open the event viewer. Over on the left hand side and click on System. Then up at the top click on Action and then click on Save Events As, type in system as the file name,  make sure file type EVT is selected, and then navigate so it will save the file to your desktop, then click save. Over on the left hand side and click on Application. Then up at the top click on Action and then click on Save Events As, type in application as the file name,  make sure file type EVT is selected, and then navigate so it will save the file to your desktop, then click save. Zip them both up into a single zip file, post them back here in your next reply as attachments.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline ssheltmire

  • Bronze Member
  • Posts: 106
Re: [In Progress] Wiley Virus?
« Reply #35 on: March 04, 2009, 10:21:35 PM »
OK, let me know if you have any problems with this archive file.

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22662
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Wiley Virus?
« Reply #36 on: March 04, 2009, 11:02:39 PM »
I have found some errors from when you tried to run the update. One of them says to run chkdsk on your C drive. Do you know how to do that? It will require a reboot.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline ssheltmire

  • Bronze Member
  • Posts: 106
Re: [In Progress] Wiley Virus?
« Reply #37 on: March 05, 2009, 05:26:01 AM »
I think so.  I can run chkdsk from the command line, can't I? 

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22662
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Wiley Virus?
« Reply #38 on: March 05, 2009, 10:30:50 AM »
Just do it from the run menu, because no matter where you run it from, it will have to schedule it to run at the bootup.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline ssheltmire

  • Bronze Member
  • Posts: 106
Re: [In Progress] Wiley Virus?
« Reply #39 on: March 05, 2009, 11:13:15 AM »
Hmmm, well I booted up the PC, went straight to the run command after the Desktop loaded and input chkdsk.  It went through the process and indicated "recovering lost files" at stage 2.  It seemed to complete OK.  If I was supposed to schedule that to run at boot time I didn't see where to do that.  But, having run the chkdsk process, are we ok with the results?

SS

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22662
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Wiley Virus?
« Reply #40 on: March 05, 2009, 01:19:29 PM »
Yep, if it ran, I am not going to complain.

Try to do the windows update now. If it doesn't go, write down whatever error it gives you and let me know.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline ssheltmire

  • Bronze Member
  • Posts: 106
Re: [In Progress] Wiley Virus?
« Reply #41 on: March 05, 2009, 07:42:42 PM »
Hoov,
  Still encountering a problem with the update.  As before, it got about 60% through the first process then a small window popped up stating "Installation Failed....Access error".  Clicked OK and it went into a lengthy backout mode.  However, it apparently doesn't back everything out as it also stated that all updates were not applied and Windows may not operate properly. (Why would they not just back it all out?)

Anyway, I went ahead and zipped up the system and application logs and attached them.  The SP3 install attempt should be right at the top. 

Of course, I'll need to reboot for the "updates to take effect".  I  imagine another chkdsk might be in order after that as well.

SS

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22662
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Wiley Virus?
« Reply #42 on: March 05, 2009, 08:07:35 PM »
OK, doing some more research, download the sp3 installer and then reboot your computer, disconnect from the internet, turn off all your AV and Firewall and other security products, and then run the installer. Once it is done you will have to reboot. Let me know what happens.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!

Offline ssheltmire

  • Bronze Member
  • Posts: 106
Re: [In Progress] Wiley Virus?
« Reply #43 on: March 06, 2009, 05:39:57 AM »
Not good news to report.   After downloading the installer I ran it and obtained identical results from before.  But, I also realized that I forgot to disconnect from the Internet as advised.  So, I went through the process again after removing Internet acess, still no change. So, I then ran chkdsk, but, it went through that without finding any problems.  Nevertheless, upon reboot, it started hanging up when the selective start-up panel came up.  Had to power down and try again.  Still hung at that start-up panel.  So, I booted up in safe mode and restored files back to a restore point I set just before initially runningthe SP3 install.  That's where I am now.  Desktop loaded excrutiatingly slow, though.

SS

Offline Hoov

  • Malware Removal Mentors
  • Global Moderator
  • Diamond Member
  • Posts: 22662
  • Unwilling part owner of Gov't. Motors and Chrysler
    • Hoov's Personal Site
Re: [In Progress] Wiley Virus?
« Reply #44 on: March 06, 2009, 11:22:52 AM »
From Microsoft. (make sure you create a restore point before doing this. Also when you get to the end to do the sp3 update. Turn off the internet connection again and disable the virus scanners, firewalls, and any other security style software.

Method 1: Reset the registry and the file permissions
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756  (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows
To reset the registry and file permissions, follow these steps:

   1. Download and then install the Subinacl.exe file. To do this, visit the following Microsoft Web site:
      http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en (http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en)
   2. Start Notepad.
   3. Copy and then paste the following text into Notepad.
      cd /d "%ProgramFiles%\Windows Resource Kits\Tools"
      subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f
      subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f
      subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f
      subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f
      subinacl /subdirectories %windir%\*.* /grant=administrators=f /grant=system=f
      secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
      Microsoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure. However, they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements.
   4. Save this Notepad file as Reset.cmd.
   5. Double-click the Reset.cmd file to run the script.

      Note This script file may take a long time to run. You must run this script as an administrator.
   6. Install Windows XP SP3.

If this method resolved the error message and if you successfully installed Windows XP SP3, you are finished.

Consumer Security

If I am helping you and you don't hear from me for 24Hrs, send me a PM Please!