XP Service Pack 2 Uninstalled?

XP Service Pack 2 Uninstalled?

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
XP Service Pack 2 Uninstalled? Lance 06-13-2006
Posted by Lance on June 13, 2006, 10:30 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
My niece, bless her heart, just doesn't get it and her laptop is
infected repeatedly. No firewall or AV can protect a user who finds "OK"
buttons or email links irresistible.

This time around was the worst - the computer was obviously no longer
under her control. A Norton AV scan found about 40 viruses before it
crashed into a sobbing heap.

The outstanding characteristics that I haven't seen before is that XP
Service Pack 2 was uninstalled from her computer and all permissions
were removed from her "My Documents" folder and subfolders. An old
version of Java 1.4.2 was installed next to Java 1.5.0.6

Two months ago the same laptop left my hands in perfect up-to-date and
protected condition. Now it sits repartitioned and reformatted waiting
for a new OS.

My question to the group is does anyone know of a virus that can do this
on it's own or is this something a hacker has to do himself?

Lance
*****

Posted by Malke on June 13, 2006, 10:54 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Lance wrote:

> My niece, bless her heart, just doesn't get it and her laptop is
> infected repeatedly. No firewall or AV can protect a user who finds
> "OK" buttons or email links irresistible.
>
> This time around was the worst - the computer was obviously no longer
> under her control. A Norton AV scan found about 40 viruses before it
> crashed into a sobbing heap.
>
> The outstanding characteristics that I haven't seen before is that XP
> Service Pack 2 was uninstalled from her computer and all permissions
> were removed from her "My Documents" folder and subfolders. An old
> version of Java 1.4.2 was installed next to Java 1.5.0.6
>
> Two months ago the same laptop left my hands in perfect up-to-date and
> protected condition. Now it sits repartitioned and reformatted waiting
> for a new OS.
>
> My question to the group is does anyone know of a virus that can do
> this on it's own or is this something a hacker has to do himself?

There is no way for people who can't see the machine to tell you
definitely what happened. Various viruses and malware can certainly
remove permissions and install programs. The reason for the old Java
install was to allow more Bad Stuff to come in through the Java
vulnerability.

If you are the tech support for your niece - and you want to continue in
this position (%deity% knows why) - then after you get everything
installed image it with True Image or Ghost so you can slap that image
back on the next time and not mess around with it.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by Leythos on June 14, 2006, 8:12 am
If you were  Registered and logged in, you could reply and use other advanced thread options
lltbhill@link_earth.net says...
> My niece, bless her heart, just doesn't get it and her laptop is
> infected repeatedly. No firewall or AV can protect a user who finds "OK"
> buttons or email links irresistible.
>
> This time around was the worst - the computer was obviously no longer
> under her control. A Norton AV scan found about 40 viruses before it
> crashed into a sobbing heap.
>
> The outstanding characteristics that I haven't seen before is that XP
> Service Pack 2 was uninstalled from her computer and all permissions
> were removed from her "My Documents" folder and subfolders. An old
> version of Java 1.4.2 was installed next to Java 1.5.0.6
>
> Two months ago the same laptop left my hands in perfect up-to-date and
> protected condition. Now it sits repartitioned and reformatted waiting
> for a new OS.
>
> My question to the group is does anyone know of a virus that can do this
> on it's own or is this something a hacker has to do himself?

In extreme cases like this, it's time to setup a secure Linux distro on
her laptop. Since most of the things she needs to do can be done with
Linux, I would suggest Fedora Core 5 as a stable platform for her to
use.

She can browse, email, chat, IM, use Open Office, etc... and you won't
have to worry about her clicking on things.

--

spam999free@rrohio.com
remove 999 in order to email me

Posted by Malke on June 14, 2006, 8:38 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Leythos wrote:

> In extreme cases like this, it's time to setup a secure Linux distro
> on her laptop. Since most of the things she needs to do can be done
> with Linux, I would suggest Fedora Core 5 as a stable platform for her
> to use.
>
> She can browse, email, chat, IM, use Open Office, etc... and you won't
> have to worry about her clicking on things.

Success in using Linux depends greatly on 1) tech support available to
the end user; 2) what the end user needs to run on his/her machine; 3)
the end user's willingness to learn the rudiments of a new operating
system.

If the OP knows Linux and is willing to support his niece and she is
savvy enough to be able to choose Save As (unlikely) in OpenOffice,
then Linux might work for her. If not, a better solution might be to
use the free VMWare Player with the Browser Appliance for surfing. The
niece's machine must be beefy enough to handle it since the VM service
runs in the background.

Otherwise, the OP should just do as I suggested and image the niece's
machine because the likelihood that she will change is slight.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by Leythos on June 14, 2006, 1:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
notreally@invalid.invalid says...
> Leythos wrote:
>
> > In extreme cases like this, it's time to setup a secure Linux distro
> > on her laptop. Since most of the things she needs to do can be done
> > with Linux, I would suggest Fedora Core 5 as a stable platform for her
> > to use.
> >
> > She can browse, email, chat, IM, use Open Office, etc... and you won't
> > have to worry about her clicking on things.
>
> Success in using Linux depends greatly on 1) tech support available to
> the end user; 2) what the end user needs to run on his/her machine; 3)
> the end user's willingness to learn the rudiments of a new operating
> system.
>
> If the OP knows Linux and is willing to support his niece and she is
> savvy enough to be able to choose Save As (unlikely) in OpenOffice,
> then Linux might work for her. If not, a better solution might be to
> use the free VMWare Player with the Browser Appliance for surfing. The
> niece's machine must be beefy enough to handle it since the VM service
> runs in the background.
>
> Otherwise, the OP should just do as I suggested and image the niece's
> machine because the likelihood that she will change is slight.

I disagree. Fedora Core 5 can be installed by a novice as well as the
apps that most home users needing are included. If it doesn't install
they are no worse off.

If it does install, as I suspect it might, then there are no more issues
- they even provide a GUI for doing OS/App updates.

Anything Windows, for the user the OP describes, would be a waste of
time as they won't be able to lock it down enough to allow the user to
use it without also being compromised.

--

spam999free@rrohio.com
remove 999 in order to email me

Similar ThreadsPosted
*sobbing quetly* trojan in my winxp pro service pro serv. pack 1 December 10, 2007, 10:32 pm
Sevice Pack 3 - virus ?? October 25, 2008, 8:28 am
"Messenger Service" pop up box July 31, 2006, 11:27 pm
Messenger Service Popups July 19, 2005, 5:33 am
Diskmanager service is it a virus September 25, 2008, 11:46 am
how to remove "service manager" virus? May 11, 2006, 10:30 pm
Where does AVG's Resident Shield 'service' run? November 27, 2007, 10:58 am
System Service Inspector shows an ID/String January 9, 2008, 11:07 am
McAfee virus removal service - Genuine? February 27, 2008, 3:19 am
Virus create an unknown user, service, enccrypted files August 9, 2006, 5:42 am

The site map in XML format XML site map

Contact Us | Privacy Policy