1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Problems after using anti trojan software

Discussion in 'Windows XP' started by glynmaggs, 2005/12/31.

  1. 2005/12/31
    glynmaggs

    glynmaggs Inactive Thread Starter

    Joined:
    2002/01/14
    Messages:
    9
    Likes Received:
    0
    I used Ewido free version a few days ago on my Toshiba laptop (Win XP home). It found many infections which I deleted. I'm now having problems when I insert items onto the USB. It detects the item (sound bing-bong) but does not bring up the options window "windows can perform the same action each time you......). The device on the usb can be accessed in explorer so it must be loaded. In particular I have a built in memory card reader which I use for my camera card and it used to come up with the Scanner and Camera Wizard each time I inserted the card. I've tried for 2 days with various setting with no success. Did Ewido delete something vital? I noticed some dll’s were deleted possibly in the system32 folder. Your help would be greatly appreciated.
    Regards, Glyn
     
    Last edited: 2005/12/31
  2. 2005/12/31
    Arie

    Arie Administrator Administrator Staff

    Joined:
    2001/12/27
    Messages:
    15,174
    Likes Received:
    412
    Arie,
    #2

  3. to hide this advert.

  4. 2005/12/31
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Hello glynmaggs,

    If the System file checker doesn't work:

    Do you have System Restore enabled? If so, restore back to prior running Ewido.

    Ewido by defualt puts deleted items into quarentine - can be restored, and creates a log - there is an option to save as a Notepad file in the \Program Files\Ewido folder.

    Regards - Charles
     
    Last edited: 2005/12/31
  5. 2005/12/31
    glynmaggs

    glynmaggs Inactive Thread Starter

    Joined:
    2002/01/14
    Messages:
    9
    Likes Received:
    0
    Still struggling

    Thanks for contributions- I ran sfc /scannow successfully with no reported files missing, corrupted or restored. I’m afraid 3 days ago I was so annoyed with Ewido that I deleted the whole program and files so restoration is no longer possible. System restore to a date before Ewido also has no effect.
    The problem seems to be the inability to save my settings for the removeable (internal sd card reader) drive. If I right click on the drive and select autoplay I’m able to select "copy pictures…. Scanning wizard" and check the box "always do…" and this brings up the wizard perfectly just as it always did. However on exiting and coming back to autoplay the settings are lost.
    I’m also able to select properties, autoplay and select the actions for each type of media, again they are lost on exiting.
    So far I've spent most of the day with this one and running out of ideas and patience!!
    Regards, Glyn
     
  6. 2005/12/31
    McTavish

    McTavish Inactive

    Joined:
    2005/06/24
    Messages:
    576
    Likes Received:
    1
  7. 2005/12/31
    charlesvar

    charlesvar Inactive Alumni

    Joined:
    2002/02/18
    Messages:
    7,024
    Likes Received:
    0
    Then un do that Restore - this is a seperate problem. If indeed you did have infected .dll files, they are now back. And if you didn't, no harm done.

    Regards - Charles
     
  8. 2006/01/01
    glynmaggs

    glynmaggs Inactive Thread Starter

    Joined:
    2002/01/14
    Messages:
    9
    Likes Received:
    0
    No Autoplay

    Happy new year to all and thanks for the help again. I’ve followed the advice and run Autofix but still no luck with the card reader.
    The log from Autofix may throw some light.


    AutoFix [V5.2.3790.67]
    Time [2005-12-31 22:01:26]
    Microsoft Windows Version [5.1 (Service Pack 2) <2600>]

    Test [The Shell Hardware Detection service is running.] - Instance [N/A]:
    Result [AutoStart Setting]: OK
    Result [The Shell Hardware Detection service is running.]: OK

    Test [Policies] - Instance [G:\, Drive Type: 2]:
    Result [HKCU\...\Policies!NoDrives]: OK {Absent}
    Result [HKCU\...\Policies!NoDriveAutorun]: OK {Absent}
    Result [HKCU\...\Policies!NoDriveTypeAutorun]: OK {Present}
    Result [HKLM\...\Policies!NoDrives]: OK {Absent}
    Result [HKLM\...\Policies!NoDriveAutorun]: OK {Absent}
    Result [HKLM\...\Policies!NoDriveTypeAutorun]: OK {Absent}
    Result [Driver level policies]: OK {
    HKLM\...\Services\!Autorun (Absent) <Allows>
    HKLM\...\Services\\Parameters!Autorun (Absent) <Allows>
    HKLM\System\CCS\Enum\...!AlwaysEnable (Absent) <Not set>
    HKLM\System\CCS\Enum\...!AlwaysDisable (Absent) <Not set> }

    Test [Drive Notification] - Instance [G:\, Drive Type: 2]:
    Status: {
    01 00 01 00 00
    01 00 DF DF 5F
    DF 5F 5F 5F 5F
    DF DF 5F 5F 5F
    DF DF DF 5F 5F
    5F DF DF DF 5F
    5F DF 5F 5F 5F
    5F 5F 00 5F 5F
    5F 5F 5F CF CF
    5F 5F 5F 5F 01
    00 FF FF FF FF
    FF FF FF FF FF
    FF
    DT: [0xFFFFFFFF], CT: [0x00FFFFFF] }
    Result [Legacy Notification]: OK
    Result [AutoPlay V2 Notification]: OK {
    Service (Fired)
    Shell (Triggered) }

    Test [User Settings] - Instance [G:\]:
    Result [User preferences are set to the factory default (failure is OK).]: OK

    >> Required action: No problems were found -> None

    I had a look as suggested in the registry as follows with the SD Card labelled as G Drive
    ]HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
    (Default) REG_SZ (value not set)
    NoDriveTypeAutorun REG_DWORD 0x00000091 (145)



    As another test, after connecting the camera via a cable to a USB port, I have the following log.

    AutoFix [V5.2.3790.67]
    Time [2006-01-01 08:31:02]
    Microsoft Windows Version [5.1 (Service Pack 2) <2600>]

    Test [The Shell Hardware Detection service is running.] - Instance [N/A]:
    Result [AutoStart Setting]: OK
    Result [The Shell Hardware Detection service is running.]: OK

    Test [Policies] - Instance [G:\, Drive Type: 2]:
    Result [HKCU\...\Policies!NoDrives]: OK {Absent}
    Result [HKCU\...\Policies!NoDriveAutorun]: OK {Absent}
    Result [HKCU\...\Policies!NoDriveTypeAutorun]: OK {Present}
    Result [HKLM\...\Policies!NoDrives]: OK {Absent}
    Result [HKLM\...\Policies!NoDriveAutorun]: OK {Absent}
    Result [HKLM\...\Policies!NoDriveTypeAutorun]: OK {Absent}
    Result [Driver level policies]: OK {
    HKLM\...\Services\!Autorun (Absent) <Allows>
    HKLM\...\Services\\Parameters!Autorun (Absent) <Allows>
    HKLM\System\CCS\Enum\...!AlwaysEnable (Absent) <Not set>
    HKLM\System\CCS\Enum\...!AlwaysDisable (Absent) <Not set> }

    Test [Drive Notification] - Instance [G:\, Drive Type: 2]:
    Status: {
    01 00 01 00 00
    01 00 DF DF 5F
    DF 5F 5F 5F 5F
    DF DF 5F 5F 5F
    DF DF DF 5F 5F
    5F DF DF DF 5F
    5F DF 5F 5F 5F
    5F 5F 00 5F 5F
    5F 5F 5F CF CF
    5F 5F 5F 5F 01
    00 FF FF FF FF
    FF FF FF FF FF
    FF
    DT: [0xFFFFFFFF], CT: [0x00FFFFFF] }
    Result [Legacy Notification]: OK
    Result [AutoPlay V2 Notification]: OK {
    Service (Fired)
    Shell (Triggered) }

    Test [User Settings] - Instance [G:\]:
    >> Repair << [Removing user preferences...]

    >> Required action: The wizard found problems but cannot fix them -> None


    Perhaps the HKLM reg key set at always disable needs a tweek? I’m happy to edit in with regedit, if needed. It seems odd that my external HDD works ok when plugged into the same USB port as was occupied by the camera. I’ve re-formatted the card but still no joy. Even tried another SD card. Just realised it can't be the card as it works in my wife's laptop.

    Regards, Glyn
     
    Last edited: 2006/01/01

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.