I am WAY out of my league here...

[Jabberwock]

...and I would seriously appreciate some help. I have Avast as a virus scanner, and it's been finding files that it couldn't scan. It said that one of them was a decompression bomb. My computer has been limping a little, and the User Accounts option on the control panel is dead. It opens with a white box that has forward, back, and home buttons on the top. A friend of mine tried to download an XP repair pack but it would get to about 60% downloaded and then start over. Could someone please help me out? ^_^;;

[PhilliePhan]

I have Avast as a virus scanner, and it's been finding files that it couldn't scan. It said that one of them was a decompression bomb.

AVAST! seems to detect these "decompression bombs" now and then and most often they are harmless. Just large, heavily compressed files.

I'm heading back out the door, but gave your logs a quick look and I do not see much at quick glance.

-- It does look like you came into contact with an infected usb flash drive at some point. You should be careful on that front.

-- Are you able to use System Restore to roll back your machine to an earlier point? (log shows 8-9-08 as viable).


Please hang in there for Judy to have a look and to advise you. I'm not certain when I'll be able to follow up.

Cheers
Pp

[Jabberwock]

Actually I forgot to mention that. My system restore was doing the same thing as the User Accounts option. Infected flash drive...ugh...

Thanks PhilliePhan ^_^;

[jholland1964]

User Accounts option on the control panel is dead. It opens with a white box that has forward, back, and home buttons on the top.

To resolve the problem, type these commands from Start, Run dialog:

regsvr32 jscript.dll

If that does not help, execute the following commands as well.

regsvr32 nusrmgr.cpl

A friend of mine tried to download an XP repair pack but it would get to about 60% downloaded and then start over.

Explain this a bit more...are you using the actual XP disks which came with the computer or are you speaking about some sort of "outside" program?

Did you use the program ATF-Cleaner as directed in the Read Me Before... sticky? If you did not, please do so now. Be sure to use both the IE option and the Firefox option.

-- Click on ATF-Cleaner to run it
-- Where it says Select Files To Delete, Check the Select All Option
-- Click Empty Selected > OK

If you use Firefox browser, do this also:

• Click Firefox at the top and choose Select All from the list.
• Click the Empty Selected button.
• NOTE : If you would like to keep your saved passwords, click No at the prompt.

Actually I forgot to mention that. My system restore was doing the same thing as the User Accounts option.

According to the DSS log System Restore was disabled prior to it's use. The log then says it was re-enabled. Can you check it now and see if it IS turned on, and if so, try to open it and see if it still shows blank.

If it still shows blank then try this;
Login as Administrator or equivalent. Click Start, Run and type these commands one by one:
regsvr32 jscript.dll
regsvr32 vbscript.dll

Infected flash drive...ugh...

Do you know which flash drive possibly may be the infected one or have you used many of these?
Please insert your flash drive. Hold down the Shift key when inserting the drive until Windows detects it to bypass the autorun feature and keep autorun.inf from executing automatically.

Please download Flash_Disinfector.exe by sUBs and save it to your desktop.

• Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
• The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
• Wait until it has finished scanning and then exit the program.
• Reboot your computer when done.

Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that is plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.

Take these steps above and post back with the results.

[Jabberwock]

To resolve the problem, type these commands from Start, Run dialog:

regsvr32 jscript.dll

That worked, thanks so much.

Explain this a bit more...are you using the actual XP disks which came with the computer or are you speaking about some sort of "outside" program?

He's a tech intern for the school I went to, and he used a copy of whatever support disk they have. They're XP disks, but not ones that came with my computer, because my mom didn't realize that she needed to get the disks that came with it. (sigh)

Did you use the program ATF-Cleaner as directed in the Read Me Before... sticky?

Yeah, I did.

According to the DSS log System Restore was disabled prior to it's use. The log then says it was re-enabled. Can you check it now and see if it IS turned on, and if so, try to open it and see if it still shows blank.

It wasn't blank anymore O.O

Do you know which flash drive possibly may be the infected one or have you used many of these?
Please insert your flash drive. Hold down the Shift key when inserting the drive until Windows detects it to bypass the autorun feature and keep autorun.inf from executing automatically.

Please download Flash_Disinfector.exe by sUBs and save it to your desktop.

• Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
• The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.
• Wait until it has finished scanning and then exit the program.
• Reboot your computer when done.

Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive that is plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.

I wasn't sure which one was infected, so I just used that on all of my flash drives.

Thank you so much!

[jholland1964]

Couple more things I would like you to do, first of all, Run ATF-Cleaner again. Then I would like you to run a scan with the ESET Online Scanner
Have it fix whatever it finds. Post back here with the log it produces.
Also run a new HJT scan after that and post back here with that log also.
Judy

[Jabberwock]

The ESET online scanner wouldn't work for me. I checked the box but the button to scan wouldn't work, it stayed faded.

[jholland1964]

Did you use Internet Explorer?

[Jabberwock]

Yeah, I used IE7.

[jholland1964]

Ok then, you should try HouseCall