Hi guys,
I really need help on reinstalling windowsxp in my computer, how do you reinstall windowsxp without losing any datas, if you could please type down step by step process for reinstalling xp, that'd b really really ppreciated and yah without losing any documents or things..

Please and thankyouuuu..

harey, why do you have to interfere LOL
anywho, redstone, em dont scaning and deleting the virus so what do i do now..:)

okay, i ran out of posts while helping you!

after you deleted the virus and hijack logs, can you post the hijack log again?

whats the linkie for hijack agen?

haray ram ram ram! you manche!

http://files4.majorgeeks.com/files/a576433ccd77ad5fe21cb70af8011038/spyware/hijackthis.zip

save it this time! you gonna need it again!

there,
Logfile of HijackThis v1.99.1
Scan saved at 12:24:35 AM, on 11/12/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ntvdm.exe
C:\WINDOWS\system32\utilman.exe
C:\WINDOWS\system32\Narrator.exe
C:\Documents and Settings\JNNN\Local Settings\Temp\Temporary Directory 1 for hijackthis-1.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.zukdhnczniwixw.com/Aw9fQ07/pljOsVPPCYN/ByWA5o0vtFryQdDxQ7y0SQ9Y7zsUJbEYHfpHyr3z44yI.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.free-popup-killer.com/ie/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.kqojoihisbovr.com/Aw9fQ07/plj5NQxvKOMGUlwGr1LWeUG7NcKVDqF6WUE.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free-popup-killer.com/ie/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.free-popup-killer.com/ie/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.free-popup-killer.com/ie/?q=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Freedom Popup Killer - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\Zero Knowledge\Freedom\pkR.dll
O2 - BHO: Freedom BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [regsvc32] C:\WINDOWS\System32\regsvc32.exe
O4 - HKLM\..\Run: [MSRegSvc] C:\WINDOWS\System32\regsvc32.exe
O4 - HKLM\..\Run: [msxct] msxct.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [Eq For Debug Audio] C:\Documents and Settings\All Users\Application Data\ListPollEqFor\deadbold.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [StopSignSsTsMon] Rundll32.exe "C:\Program Files\Acceleration Software\Anti-Virus\sstsmon.dll",VerifyStatus
O4 - HKLM\..\Run: [webscan] "C:\Program Files\Acceleration Software\Anti-Virus\stopsignav.exe" -k
O4 - HKLM\..\RunOnce: [StopSignSsTsMon] Rundll32.exe "C:\Program Files\Acceleration Software\Anti-Virus\sstsmon.dll",VerifyStatus /ro
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [person] try.exe
O4 - HKCU\..\Run: [CoalCamp] C:\DOCUME~1\JNNN\APPLIC~1\CORNSU~1\Face Plus.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/FunBuddyIconsFWBInitialSetup1.0.0.8.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2550deaf279660773423/netzip/RdxIE601.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1131755761390
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005102501/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object) - http://messenger.zone.msn.com/binary/WoF.cab31267.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O19 - User stylesheet: C:\WINDOWS\win32.bmp
O21 - SSODL: System - {A48C6B86-4EBE-47E5-BAC9-3204AB3EB902} - dgflib.dll (file missing)

:P

Oh I deleted alla 'em, now it says " no suspicious item found"...

okay, follow this properly, don't skip steps please! DO NOT SKIP any steps!
im goin to sleep after this post :-D

scan again and check these and click FIX CHECKED/b>

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.zukdhnczniwixw.com/Aw9fQ07/pljOsVPPCYN/ByWA5o0vtFryQdDxQ7y0SQ9Y7zsUJbEYHfpHyr3z44yI.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.free-popup-killer.com/ie/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.kqojoihisbovr.com/Aw9fQ07/plj5NQxvKOMGUlwGr1LWeUG7NcKVDqF6WUE.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.free-popup-killer.com/ie/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.free-popup-killer.com/ie/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.free-popup-killer.com/ie/?q=%s
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
C:\Program Files\Zero Knowledge\Freedom\pkR.dll
O2 - BHO: Freedom BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\Zero Knowledge\Freedom\FreeBHOR.dll
O4 - HKLM\..\Run: [msxct] msxct.exe
O4 - HKCU\..\Run: [person] try.exe
O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/FunBuddyIconsFWBInitialSetup1.0.0.8.cab
O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
O16 - DPF: {DA758BB1-5F89-4465-975F-8D7179A4BCF3} (WheelofFortune Object)


HOPE YOU HAVE DOWNLOADED SPYBOT SEARCH AND DESTROY BY NOW, if not then go here - http://www.download.com/Spybot-Search-Destroy/3000-8022_4-10401314.html?tag=pdp_prod

1. Please update it before you run it.
2. After you open up program, click update then select all files, including immunizations.
3. Then click search and destroy on left.
4. Then click CHECK FOR PROBLEMS!
5. After you scan, click fix checked! and make sure all boxes are checked!
6. Then OK on backup and then delete, then RUN the spybot again!

RUN HIJACK AND POST AGAIN!
ill check tomorrow!
DO NOT SKIP any steps!

View/Share this post only

make a copy of folder "Documents and Settings" ; then insert winXP installation CD , reboot .....boot from CD..... run overwrite install ................XP ready in an hour ..........;-)......... if yor lucky

lau, entropy, he/she didn't wanted to lose data, and how can u be so sure that all his/her data is in documents and settings? if it was that easy, i would've mentioned that long time ago. overwriting and not formatting copies a copy of XP in computer but will not get rid of harmful files and viruses! all that hour and half would be pointless, would it not?

jst trying to be helpful candy...u asked for help......

oh by the way i did not know this thread was only supposed to be for u and redstone ni.....u should have said it in the beginning....i would not have interfered....duh and i thought anyone can post here......;)

Redstone, did I not tell that my d drive wasn't workinggg!!! can you help me make it work too??? what do i do next??..

Well, I try to start the scanning on spybot-SD, clicking the "check for problems" button but then this error pops up in a box -- You need to install the detection updates first by using the intgrated update or the manual updater.

Doing all these will help by D DRIVE work?
Plz and tyy....

your drive could've been disabled or something might have been done to it by your virus or driver! depends on what the problem is! and last time i told you to follw this
1. Please update it before you run it.
2. After you open up program, click update then select all files, including immunizations.
3. Then click search and destroy on left.


YES UPDATE! damn! kati chohti auti kura bhannu parne!
UPDATE , thEn scan, then delete the harmfuls.
then if still your computer has spyware, scan again!

the CD drive could work after that, if driver has been messed up by your virus. if not then install driver again!

and all the viruses you had that i asked you do delete on the registry from hijack! are the MSN funnel(funner?) virus, that you get from MSN messenger.
don't accept files if you don't know what the file is.
PLEAS FOLLOW UPDATE and scan! don't ask too many questions without doing what i told you to do!

hehehe good luck!!;oP hehe...

(oi baadar a suggestion hai..last time they used to have this ..wat do u call it...errr...in msn ke..where u can 'give' control of ur pc..to the other person..if not find some programs re kya ;oP...i never tried it..nor have been in that thing for a while...so hehe why not try that re kya ;oP...might help..might not..but just givin u an opinion ;o)...pretty frustrating doing it oneself..and to give instructions and not seeing..well yap.,..good luck ;o) hehe..)

good day :oD

yes yes i know UPDATE, I did click on update but it says "No never updates
available":S
2. After you open up program, click update then select all files, including immunizations.
There is not a single file to select.. wth?
How the hell do you download updates anyway?
I honestly dont get this spybo program..:S

okay, if there is nothing to update, then run the scan!
on the SPYBOT search and destroy icon on left, click that, and click scan for problems.
then scan!

I dont see "scan for problems." thing..all i see is "check for problems" and when I click on that, it shows up this error saying " You need to install the detection updates first by using the integrated update or the manual updater" uhumm:$..

candy, please uninstall the software, then download spybot search and destroy again and install again!

and your cd drive not working! tell me if you see any hardware problem.

1. RIGHT CLICK ON YOUR MY COMPUTER ICON
2. click PROPERTIES
3. CLICK HARDWARE TAB
4. CLICK DEVICE MANAGER
5 FIND YOUR DRIVE UNDER CD/DVD DRIVE OPTION and see if you see any exclamation mark or question mark!