JacquiM
-
Posts
10 -
Joined
-
Last visited
Posts posted by JacquiM
-
-
I downloaded and started using RegCleaner - as my Add/Remove Programs did not always work as it should - however, I have come across VB and VBA Program Settings - and as I did not know what it was - searched the web - now it appears it is a TROJAN and attaches itself to programs - and one of those programs is CCleaner - can you please tell me - if this TROJAN is really bad as some of the "websites" say - or can i leave it alone. The reason I ask is that i did delete VB and VBA as it was attached to CCleaner and I subsequently lost all my settings when i next went to use CCleaner
-
Hi JackieM
Sorry for the delay I just noticed the reply,
Now Im out of idea's and the script didnt work at all
the keys it cannot find were also not in the export and it seems unable to remove the other keys even after allowing full control to Admin and System, Lets try it a different way
Download Reglite from Here
Install and run Registrar lite
on the Address bar at the top copy and paste
HKEY_CLASSES_ROOT\idcfile
then press GO on the right of the address bar, this will locate the folder and highlight it on the menu to the left in blue.
Right click the idcfile folder on the menu to the left and choose Properties, then click Take Ownership and press OK twice to exit the properties pane, then attempt to remove the folder by right clicking it and choosing Delete
Repeat the steps for these
HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost
HKEY_CLASSES_ROOT\ComPlusMetaData.MsCorHost.2
HKEY_CLASSES_ROOT\MailFileAtt
HKEY_CLASSES_ROOT\mapifvbx.object
HKEY_CLASSES_ROOT\mapifvbx.object.1
HKEY_CLASSES_ROOT\SymWriter.pdb
Let us know if you can remove them after taking ownership.
Andy
Andy
IT WORKED!!!!!!!!!!
Many, Many Thanks - I followed your instructions to the Letter, had a few "hiccups" to start with - had to "delete" the CLSID's first, then the main item. Once I discovered that, I was "home and hosed".
I cannot thank you enough for your patience and understanding and your easy to follow instructions.
Have a lovely day today and everyday.
JacquiM
-
Hi JacquiM
The export missed a couple of keys but we can export that information abit later if needed, Can you do the same with this attached file, Save it to your desktop, extract and double click RunThis.cmd to start the script. It will reset the permissions to allow full control to Admin, System and Users on those keys then attempt to remove them. It will then check if the keys still remain and write the info into a notepad file which will open when its finished (And save into the RemoveKeys folder) . Please copy and paste the contents of the text file back.
Cheers
Andy
Thanks for your prompt replies - here's the requested result from "RemoveKeys"
Resetting Permissions and Removing Registry Keys...
Checking if Reg Keys still Remains....
idcfile FOUND!
IPodService.iPodManager NOT FOUND!
IPodService.iPodManager.1 NOT FOUND!
ComPlusMetaData.MsCorHost FOUND!
ComPlusMetaData.MsCorHost.2 FOUND!
MailFileAtt FOUND!
mapifvbx.object FOUND!
mapifvbx.object.1 FOUND!
SymWriter.pdb FOUND!
Resetting Permissions and Removing Registry Keys...
Checking if Reg Keys still Remains....
idcfile FOUND!
IPodService.iPodManager NOT FOUND!
IPodService.iPodManager.1 NOT FOUND!
ComPlusMetaData.MsCorHost FOUND!
ComPlusMetaData.MsCorHost.2 FOUND!
MailFileAtt FOUND!
mapifvbx.object FOUND!
mapifvbx.object.1 FOUND!
SymWriter.pdb FOUND!
I am not too sure how to read this - but for me - it looks as though - if I did a CCleaner "Issues" scan I (Hopefully) should find that IPODService at least should have "gone"
Thanks again
JacquiM
-
Welcome
And thank you for attempting other solutions before replying.Which OS are you using and are you logged on as the administrator?
My Operating System is "Windows XP Professional" and I have been keeping it up todate with Automatic Updates. I am a One Women Band - with my Computer, so I am always logged on as the "Administrator".
Thanks a lot
Jacqui M
-
Hi JacquiM
Can you download the attached file and save it to your desktop, right click the folder then choose Extract All, open the folder and double click CheckKeys.bat, It will export the information from your registry and open the results in Notepad, Please post the contents of the Notepad file that opens back on here,
When you say you tried to delete them manually, what happened ? Does it display any error messages
Cheers
Andy
Many thanks for your help - sorry but apart from using attachments - I do not know how to send you the file - but have attached it - in the hope you read it.
In answer to your query about 'Manual Deletion" it comes up with "Cannot delete ????? - error while deleting key" - hope this means something to you.
Thanks
JacquiMResult_of_CheckKeys_.txt
-
Eh, it's an image guys, here it is.
JacquiM, next time you run a scan, Fix selected issues.
Then repeat several times. I think they keep appearing because the 'issues' are currently being used by programs or being accessed by the computer in some way.
In my opinion, I think registry cleaning does nothing or very little to your computer's performance.
Thanks for answering, however, I have on several occasions done as you suggested, having seen "other people's issue problems" and answers, I did all my checks in "Safe Mode" in the hope that this would help. I ran "Antivirus, Spyware, Adware" etc in the hope that something would pick up and correct the problems.
However, I was wrong. The only other way that appears open to me, is to take it to a "Computer Repairer" and have it cleaned by him.
Thanks anyway
JacquiM
-
I first inquired about this problem some weeks ago, and have subsequently, tried numerous ways to clear these "issues" including "Dial-a-Fix" downloading "Registry Cleaners" checking the "Web" but nothing works. I have even tried to "Manually Delete" but they are not deletable this way either. I am very much a 'Novice" in the computer field - so very "plain English" replies would be appreciated.
I attach my "Issues" in the hope that this may be easier for someone to help me clear these problems up.
Thank you for your time
JacquiMCCleaner_Issues.doc
-
When I scan for issues - the normal problems appear - so no problem there, but, when I press Fix Selected Issues - I have all the normal repair windows come up and I say "Fix". Still, you would say not a problem, however, I can sit at the computer, and repeat this action over and over and I will get the same problems come up each and every time. They don't seem to be fixed properly. I am too afraid to touch the "Registry" myself - so can I attack this problem from a different angle. Thank you
the keys it cannot find were also not in the export and it seems unable to remove the other keys even after allowing full control to Admin and System, 
And thank you for attempting other solutions before replying.
VB and VBA Program Settings
in The Lounge
Posted
http://www.sophos.com/security/analyses/trojpadminc.html
- another on the net which states its regarding VB and VBA but does not when the site is opened mention "these particular words" is
http://us.mcafee.com/virusInfo/default.asp...;virus_k=135579
there was another one but it pointed to the McAfee site
Many thanks for your prompt reply - I won't worry about it in future.
JacquiM