Windows XP repair tools

Manual procedure to clean malware:

During a normal Windows session, it is impossible to manually delete these if they are active.

If you want to try and do this then you will either see an error message or you will be successful, except that they will once again be loaded with Windows XP the next time it boots.

• Install Spybot or Ad-Aware and update their definitions. Start the scan and if anything is found you should clean it.

• Install Hijackthis and read this tutorial on how it can be used to delete BHO keys.

• The system restore system is accessible via: Start – All Programs – Accessories – System Tools – System Restoration.
• This tool allows you to put Windows back to a previous known good state. Malware programs generally use this option so that they can reactivate themselves after being deleted in normal mode. Follow this link to read a more detailed explanation.

• Start Hijackthis with this link, copy the hijackthis log to this page to see an evaluation.
• Identify and name the different .exe or .dll files that are not correct. You should also note their location on the hard drive from the Hijackthis logs.
• You can also see the active processes by right clicking in the open space on the taskbar, choose Task Manager and click on the Processes tab.

• With this link, or with Google, search for these processes so that you can find out exactly what they do and if they need to be removed.

• Click Start, Run, and type msconfig. Press Enter.

• In the Services tab, check the Hide Microsoft Services and look in the list of remaining files to see if there are any names of malware listed above
  



• Uncheck them!

• In the Start up section, perform the same operation as above.

  
  

• Click on Apply.

• You will notice in the Start up tab that the name and location of the executable are visible. You should write these down.

In summary, try to get as much information as possible:

• Restart Windows in safe mode and start your removal operations of registry keys and/or BHO with Hijackthis. Next, delete the malware files (.exe or .dll).

• Reboot Windows normally and check to see that all traces of these programs are now gone with Hijackthis. If necessary you may have to repeat the previous operation.

• The best is to now delete all the Windows XP restore points.

• You can do this by going: Start – All Programs – Accessories – System Tools – Disk Cleanup, select the C: and press OK. You may have to wait a while for the analysis to be done.
• In the Other Options section, under System Restoration, click on the Clean and press OK. You may have to wait a while.

 

• Perform a registry and temporary files clean with CCleaner. You should do this at least twice and perform a copy before deleting anything.

  
  
  
  

• You can now turn your system restore service back on and reboot your PC one last time.

You should take care as these days the malware programs are becoming smarter and smarter.