removing persistent virus damage

test posted to help group
microsoft.public.windowsme.general:
I have a pc with damage from viruses. I have Norton
Antivirus with
current definitions, but it does not detect the viruses
sdware.ncase
and adware.bookedspace. I printed the instructions from
Symantec,
and manually removed these viruses, but they keep
recurring. My
Windows version is ME, and my IE version is
6.0.2800.1106. When I
first restart the system, I get an error "rundll has
caused an error
in mmsystem.dll. rundll will now close. if you continue
to experience
problems, try restarting your computer." Also, I cannot
print to a
network printer from any programs or to print a test page.
When I try
to go to start/setting/printers, and select the printer, I
get the same
error I did on startup ["rundll has caused an error in
mmsystem.dll.
rundll will now close. if you continue to experience
problems, try
restarting your computer."] if I try a second time, then I
get the
properties box, where I can click to print a test page,
and then I get
an error, "Windows was unable to print the test page.
Would you like
to begin troubleshooting now?" Troubleshooter is unable to
resolve the
problem.

Also, in IE, I keep getting an unwated search bar poping
up. I can
turn it off by going to view, and toolbars, but there is
no name for
it. I just click to uncheck the blank space, and this
searchbar goes
away. Also, my default home page keeps resetting to
http://www.i-lookup.com, no matter how many times I reset
it. Also,
I tried to add this page to tools/internet
options/security/restricted
sites, but It will not allow it, saying it is already on
another zone,
which it is not, visibly.

Mike
Tue Apr 20 10:16:32 CDT 2004

Your problems sounds perhaps more to be due to parasites than viruses and
Norton doesn't target such pests.

I-Lookup
For more details see http://www.pestpatrol.com/pestinfo/i/i-lookup.asp &
http://www.doxdesk.com/parasite/ILookup.html

BookedSpace
For details see http://www.doxdesk.com/parasite/BookedSpace.html and also
http://www.kephyr.com/spywarescanner/library/bookedspace/index.phtml.

Adware.ncase
This is part of the n-CASE real-time comparison shopping engine that may be
installed when you install other free software applications. See MS KB317714 -
"Error Message: "Msbb.exe has encountered a problem and needs to close...""
(http://support.microsoft.com/?kbid=317714) for how to rid yourself of this
junk.

Rather than relying on Norton to keep malware at bay you not only need to
browse with caution but also to regularly run AdAware
(http://www.lavasoftusa.com/software/adaware/) and SpyBot Search & Destroy
(http://www.safer-networking.org/) remembering that they are only as good as
when you last updated their reference files. I also use a program called
BHOCaptor (http://www.xcaptor.org) that checks for unwanted Browser Help
Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help prevent
some parasites getting a grip on your PC. Then finally, of course, there is
CWShredder (http://www.zerosrealm.com/downloads/CWShredder.zip or
http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the best way
of getting rid of the many forms of the CoolWebSearch hijacker details of
which can be found at http://www.spywareinfo.com/~merijn/cwschronicles.html
and also http://www.pestpatrol.com/pestinfo/c/cws.asp.
--
Mike Maltby MS-MVP
mcmaltby@hotmail.com


ruth <ruthgriffith@yahoo.com> wrote:

> test posted to help group
> microsoft.public.windowsme.general:
> I have a pc with damage from viruses. I have Norton
> Antivirus with
> current definitions, but it does not detect the viruses
> sdware.ncase
> and adware.bookedspace. I printed the instructions from
> Symantec,
> and manually removed these viruses, but they keep
> recurring. My
> Windows version is ME, and my IE version is
> 6.0.2800.1106. When I
> first restart the system, I get an error "rundll has
> caused an error
> in mmsystem.dll. rundll will now close. if you continue
> to experience
> problems, try restarting your computer." Also, I cannot
> print to a
> network printer from any programs or to print a test page.
> When I try
> to go to start/setting/printers, and select the printer, I
> get the same
> error I did on startup ["rundll has caused an error in
> mmsystem.dll.
> rundll will now close. if you continue to experience
> problems, try
> restarting your computer."] if I try a second time, then I
> get the
> properties box, where I can click to print a test page,
> and then I get
> an error, "Windows was unable to print the test page.
> Would you like
> to begin troubleshooting now?" Troubleshooter is unable to
> resolve the
> problem.
>
> Also, in IE, I keep getting an unwated search bar poping
> up. I can
> turn it off by going to view, and toolbars, but there is
> no name for
> it. I just click to uncheck the blank space, and this
> searchbar goes
> away. Also, my default home page keeps resetting to
> http://www.i-lookup.com, no matter how many times I reset
> it. Also,
> I tried to add this page to tools/internet
> options/security/restricted
> sites, but It will not allow it, saying it is already on
> another zone,
> which it is not, visibly.

JD
Tue Apr 20 20:50:19 CDT 2004

I just installed spybpt S&D & am wondering which other
adware/spyware etc. is recommended? I just did a total
system reformat/recovery & want to keep everything running
as smooth as possible.
I also want to know how I know just exactly what
can/cannot be gotten rid of? Or is it a read & learn type
of thing?
When I ran Spybot I had about 10 backwab lite's there. I
did get rid of them but they are saved in the restore
file. I believe that came with my HP.
Thanks, JD

>-----Original Message-----
>Your problems sounds perhaps more to be due to parasites
than viruses and
>Norton doesn't target such pests.
>
>I-Lookup
>For more details see
http://www.pestpatrol.com/pestinfo/i/i-lookup.asp &
>http://www.doxdesk.com/parasite/ILookup.html
>
>BookedSpace
>For details see
http://www.doxdesk.com/parasite/BookedSpace.html and also
>http://www.kephyr.com/spywarescanner/library/bookedspace/i
ndex.phtml.
>
>Adware.ncase
>This is part of the n-CASE real-time comparison shopping
engine that may be
>installed when you install other free software
applications. See MS KB317714 -
>"Error Message: "Msbb.exe has encountered a problem and
needs to close...""
>(http://support.microsoft.com/?kbid=317714) for how to
rid yourself of this
>junk.
>
>Rather than relying on Norton to keep malware at bay you
not only need to
>browse with caution but also to regularly run AdAware
>(http://www.lavasoftusa.com/software/adaware/) and SpyBot
Search & Destroy
>(http://www.safer-networking.org/) remembering that they
are only as good as
>when you last updated their reference files. I also use
a program called
>BHOCaptor (http://www.xcaptor.org) that checks for
unwanted Browser Help
>Objects and SpywareBlaster
>(http://www.wilderssecurity.net/spywareblaster.html)
which can help prevent
>some parasites getting a grip on your PC. Then finally,
of course, there is
>CWShredder
(http://www.zerosrealm.com/downloads/CWShredder.zip or
>http://www.spywareinfo.com/~merijn/files/cwshredder.zip)
which is the best way
>of getting rid of the many forms of the CoolWebSearch
hijacker details of
>which can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html
>and also http://www.pestpatrol.com/pestinfo/c/cws.asp.
>--
>Mike Maltby MS-MVP
>mcmaltby@hotmail.com
>
>
>ruth <ruthgriffith@yahoo.com> wrote:
>
>> test posted to help group
>> microsoft.public.windowsme.general:
>> I have a pc with damage from viruses. I have Norton
>> Antivirus with
>> current definitions, but it does not detect the viruses
>> sdware.ncase
>> and adware.bookedspace. I printed the instructions from
>> Symantec,
>> and manually removed these viruses, but they keep
>> recurring. My
>> Windows version is ME, and my IE version is
>> 6.0.2800.1106. When I
>> first restart the system, I get an error "rundll has
>> caused an error
>> in mmsystem.dll. rundll will now close. if you
continue
>> to experience
>> problems, try restarting your computer." Also, I
cannot
>> print to a
>> network printer from any programs or to print a test
page.
>> When I try
>> to go to start/setting/printers, and select the
printer, I
>> get the same
>> error I did on startup ["rundll has caused an error in
>> mmsystem.dll.
>> rundll will now close. if you continue to experience
>> problems, try
>> restarting your computer."] if I try a second time,
then I
>> get the
>> properties box, where I can click to print a test page,
>> and then I get
>> an error, "Windows was unable to print the test page.
>> Would you like
>> to begin troubleshooting now?" Troubleshooter is unable
to
>> resolve the
>> problem.
>>
>> Also, in IE, I keep getting an unwated search bar poping
>> up. I can
>> turn it off by going to view, and toolbars, but there is
>> no name for
>> it. I just click to uncheck the blank space, and this
>> searchbar goes
>> away. Also, my default home page keeps resetting to
>> http://www.i-lookup.com, no matter how many times I
reset
>> it. Also,
>> I tried to add this page to tools/internet
>> options/security/restricted
>> sites, but It will not allow it, saying it is already
on
>> another zone,
>> which it is not, visibly.
>
>
>.
>

masterprometheus
Thu Apr 22 10:50:31 CDT 2004


"Mike M" <No_Spam@Corned_Beef.Only> wrote in message
news:OjYXCquJEHA.2660@TK2MSFTNGP09.phx.gbl...
> Your problems sounds perhaps more to be due to parasites than viruses
and
> Norton doesn't target such pests.

Hi Mike,

It now targets spywares, too.

http://www.symantec.com/sabu/nis/nis_pe/features.html

But this is a new feature and i don't know which versions support it.
But i guess liveupdate will update NIS/NAV2003 engine in order to enable
spyware detection and removal. (I installed 2003 on a friend's machine
last weekend and the engine was certainly among updated parts).

I don't use Norton products, and i would prefer something specialized on
the spyware detection and removal issues. For example ad-aware, spybot
s&d or pestpatrol.

Regards
MP



> I-Lookup
> For more details see http://www.pestpatrol.com/pestinfo/i/i-lookup.asp
&
> http://www.doxdesk.com/parasite/ILookup.html
>
> BookedSpace
> For details see http://www.doxdesk.com/parasite/BookedSpace.html and
also
> http://www.kephyr.com/spywarescanner/library/bookedspace/index.phtml.
>
> Adware.ncase
> This is part of the n-CASE real-time comparison shopping engine that
may be
> installed when you install other free software applications. See MS
KB317714 -
> "Error Message: "Msbb.exe has encountered a problem and needs to
close...""
> (http://support.microsoft.com/?kbid=317714) for how to rid yourself of
this
> junk.
>
> Rather than relying on Norton to keep malware at bay you not only need
to
> browse with caution but also to regularly run AdAware
> (http://www.lavasoftusa.com/software/adaware/) and SpyBot Search &
Destroy
> (http://www.safer-networking.org/) remembering that they are only as
good as
> when you last updated their reference files. I also use a program
called
> BHOCaptor (http://www.xcaptor.org) that checks for unwanted Browser
Help
> Objects and SpywareBlaster
> (http://www.wilderssecurity.net/spywareblaster.html) which can help
prevent
> some parasites getting a grip on your PC. Then finally, of course,
there is
> CWShredder (http://www.zerosrealm.com/downloads/CWShredder.zip or
> http://www.spywareinfo.com/~merijn/files/cwshredder.zip) which is the
best way
> of getting rid of the many forms of the CoolWebSearch hijacker details
of
> which can be found at
http://www.spywareinfo.com/~merijn/cwschronicles.html
> and also http://www.pestpatrol.com/pestinfo/c/cws.asp.
> --
> Mike Maltby MS-MVP
> mcmaltby@hotmail.com
>
>
> ruth <ruthgriffith@yahoo.com> wrote:
>
> > test posted to help group
> > microsoft.public.windowsme.general:
> > I have a pc with damage from viruses. I have Norton
> > Antivirus with
> > current definitions, but it does not detect the viruses
> > sdware.ncase
> > and adware.bookedspace. I printed the instructions from
> > Symantec,
> > and manually removed these viruses, but they keep
> > recurring. My
> > Windows version is ME, and my IE version is
> > 6.0.2800.1106. When I
> > first restart the system, I get an error "rundll has
> > caused an error
> > in mmsystem.dll. rundll will now close. if you continue
> > to experience
> > problems, try restarting your computer." Also, I cannot
> > print to a
> > network printer from any programs or to print a test page.
> > When I try
> > to go to start/setting/printers, and select the printer, I
> > get the same
> > error I did on startup ["rundll has caused an error in
> > mmsystem.dll.
> > rundll will now close. if you continue to experience
> > problems, try
> > restarting your computer."] if I try a second time, then I
> > get the
> > properties box, where I can click to print a test page,
> > and then I get
> > an error, "Windows was unable to print the test page.
> > Would you like
> > to begin troubleshooting now?" Troubleshooter is unable to
> > resolve the
> > problem.
> >
> > Also, in IE, I keep getting an unwated search bar poping
> > up. I can
> > turn it off by going to view, and toolbars, but there is
> > no name for
> > it. I just click to uncheck the blank space, and this
> > searchbar goes
> > away. Also, my default home page keeps resetting to
> > http://www.i-lookup.com, no matter how many times I reset
> > it. Also,
> > I tried to add this page to tools/internet
> > options/security/restricted
> > sites, but It will not allow it, saying it is already on
> > another zone,
> > which it is not, visibly.
>
>

Mike
Thu Apr 22 11:03:40 CDT 2004

Given the aggressive legal approach taken by some of the commercial parasite
concerns I know that I for one will never expect even the very best of AV
applications to target more than a few of the many possible parasites, as for
NAV I would suspect that it would be even less. :-) For example one just has
to look at how Newcr&pnet have been targeting those who criticise the junk
they foist on users.

Like yourself I suspect I'll be sticking with the free and not for profit
offerings for this aspect of my systems' protection.
--
Mike Maltby MS-MVP
mcmaltby@hotmail.com


masterprometheus <masterprometheus666@hotmail.com> wrote:

> It now targets spywares, too.
>
> http://www.symantec.com/sabu/nis/nis_pe/features.html
>
> But this is a new feature and i don't know which versions support it.
> But i guess liveupdate will update NIS/NAV2003 engine in order to enable
> spyware detection and removal. (I installed 2003 on a friend's machine
> last weekend and the engine was certainly among updated parts).
>
> I don't use Norton products, and i would prefer something specialized on
> the spyware detection and removal issues. For example ad-aware, spybot
> s&d or pestpatrol.

masterprometheus
Fri Apr 23 15:30:39 CDT 2004


"Mike M" <No_Spam@Corned_Beef.Only> wrote in message
news:%23L4BkNIKEHA.2624@TK2MSFTNGP09.phx.gbl...
> Given the aggressive legal approach taken by some of the commercial
parasite
> concerns I know that I for one will never expect even the very best of
AV
> applications to target more than a few of the many possible parasites,
as for
> NAV I would suspect that it would be even less. :-)

I concur.


>For example one just has
> to look at how Newcr&pnet have been targeting those who criticise the
junk
> they foist on users.
>
> Like yourself I suspect I'll be sticking with the free and not for
profit
> offerings for this aspect of my systems' protection.

Ad-aware and spybot s&d are good enough but I rarely use them because of
my security settings.

Regards
MP

> --
> Mike Maltby MS-MVP
> mcmaltby@hotmail.com
>
>
> masterprometheus <masterprometheus666@hotmail.com> wrote:
>
> > It now targets spywares, too.
> >
> > http://www.symantec.com/sabu/nis/nis_pe/features.html
> >
> > But this is a new feature and i don't know which versions support
it.
> > But i guess liveupdate will update NIS/NAV2003 engine in order to
enable
> > spyware detection and removal. (I installed 2003 on a friend's
machine
> > last weekend and the engine was certainly among updated parts).
> >
> > I don't use Norton products, and i would prefer something
specialized on
> > the spyware detection and removal issues. For example ad-aware,
spybot
> > s&d or pestpatrol.
>
>

Mike
Fri Apr 23 16:18:47 CDT 2004

MP,

Like yourself my security settings combined with my router's firewall
(Efficient 5861) plus Zone Alarm on most PCs on the LAN mean that I also
rarely ever find anything when I remember to scan with AdAware, SpyBot or
whatever and even then it has only ever to date been the odd cookie that I
have had to permit so as to actually gain access to some site or other.
--
Mike Maltby MS-MVP
mcmaltby@hotmail.com


masterprometheus <masterprometheus666@hotmail.com> wrote:

> "Mike M" <No_Spam@Corned_Beef.Only> wrote in message
> news:%23L4BkNIKEHA.2624@TK2MSFTNGP09.phx.gbl...
>> Given the aggressive legal approach taken by some of the commercial
>> parasite concerns I know that I for one will never expect even the very
>> best of AV applications to target more than a few of the many possible
>> parasites, as for NAV I would suspect that it would be even less. :-)
>
> I concur.
>
>
>> For example one just has
>> to look at how Newcr&pnet have been targeting those who criticise the
>> junk they foist on users.
>>
>> Like yourself I suspect I'll be sticking with the free and not for profit
>> offerings for this aspect of my systems' protection.
>
> Ad-aware and spybot s&d are good enough but I rarely use them because of