How do I............?

[SOD'EM]

I have just took in someones laptop that is riddled with virus'. I was doing a full scan with Avast and that did find loads of worms etc. Unfortunately, the battery packed in after 75% completion as it was not on charge. After plugging in and starting again, a message said "unable to start normally, I will have to do a system restore to an earlier point in time", which I did.

 

This however has deleted the main users account and all of her files. There are 2 other accounts showing now that didn't show up in the first place and there are some pictures she wants that are on the other users account.

 

If I can't get her account back (and I make a new one for her), can I transfer the pictures and other files from the other account with the relevant stuff on it. If so, how do I?

 

Thanks

[PRBrown]

Recovering the existing user account may be difficult, but you may be able to recover any files that have "disappeared".

 

can I transfer the pictures and other files from the other account with the relevant stuff on it

I'm assuming you're using XP or Vista, with different user accounts set up.

 

1. If you know the other other account's login details, then log in as that person.

 

2. Copy the relevant files from their folders e.g. "documents" and place them into the appropriate "Public" folders. This will make them available to anyone who logs in.

 

3. Re-create the account

 

4. Copy the files in the Public folder to the personal folders of the new - or leave them where they are if you prefer.

 

That is probably the easiest way to do it if all the files you need are on the computer under another users account.

 

If you don't know the other login details then it is more difficult. Is there an "admin" account you can log into. IF there is, the same process (as above) would work.

 

 

If that isn't possible then it gets a bit more technical and you should find someone you trust who is good with PC's..maybe a local PC shop. They can boot into your laptop with a DOS or XP boot programme and copy the files you need. If you get that far you will be able to run an un-erase programme that may allow the recovery of your deleted files.

 

If you live anywhere near Edinburgh I could help you out personally as setting up, recovering, and protecting Windows Servers is my everyday job.

 

Finally, make sure your friend gets a good backup programme and runs it regularly. If the data is important, you must back it up somewhere. USB pen-drives, or external drives aren't that expensive and can be used for backup.

[SOD'EM]

Thanks PRB, I can sort things (I think) gradually. But this is important (quick one, and Tez is offline:()

 

I need to sort this now. I can't even connect it to my internet.

 

When I put the wireless p/word in. It says "The DHCP client service is not running on this computer"?

 

Come back Tez, all is forgiven.

 

Ps...Have tried Restarting the DHCP client, and that does not work and I have tried connecting it through ethernet as well as wireless.

[Conniff]

You can recover back to the point you done the restore. Then start another antivirus run using a different program if necessary.

[PRBrown]

Thanks PRB, I can sort things (I think) gradually. But this is important (quick one, and Tez is offline:()

 

I need to sort this now. I can't even connect it to my internet.

 

When I put the wireless p/word in. It says "The DHCP client service is not running on this computer"?

 

Come back Tez, all is forgiven.

 

Ps...Have tried Restarting the DHCP client, and that does not work and I have tried connecting it through ethernet as well as wireless.

You shouldn't really need a DHCP client working unless your PC is part of a network (or connected to a router that is acting as a DHCP server). If it's only set-up to use the router, you can create the network settings manually and forget about the DHCP client.

 

Do you connect to your router via a wireless or ethernet connection?

 

What is the make and model number of your router? - you will need this so you can set your network settings manually. The make and model number will allow you (or someone) to get hold of the manual and find out what the default IP settings for the router are.

[SOD'EM]

I bring peepses laptops home quite often, I normally just right click on the icon in the tray and click on connect to network. Then I find my wireless network and put the password in and it's connected. This laptop should be no different. But it won't connect. I think I have got rid of the virus through Avast and system restore, but I still can't connect to my wireless router.

[SOD'EM]

Yep, really doing my head in now. I have took the ethernet cable from the wireless router and have plugged it directly into the laptop. It still won't connect. When I try wirelessly, it says "connected but with limited access" which basically means NOT BL**DY CONNECTED:mad:. It's gonna be a looooooooong night and an even longer day as she is picking it up after work later on.

[kiptower]

just a thought have you checked the BIOS to see if the network card is turned off in the BIOS

[dx100uk]

i don't think you will find that you've ditched the trojan.

 

it will be trying for 127.0,0,1 i bet.

 

do an IPCONFIG /ALL under start/run, then type CMD

 

i'd be inclined to download two progs to a penstick

 

1st microsoft security essentials

2nd restoration.exe.

 

run MSE on the lappy then do a full scan. it will deal with any trojans/virus.

 

then run restoration.exe and look under docs/setting for the users name and rescover everything in that tree.

 

sorry i'm on 18hrs radio shifts and time is limited this month

 

dx

[SOD'EM]

 

do an IPCONFIG /ALL under start/run, then type CMD

 

 

Done that and results where there immediately.

 

Physical address .........00-00-00-00-00-00-00-E0

DHCP Enabled..............No

Autoconfig enabled.......Yes

Media State.................Media disconnected.

 

It is connected to my network, but with limited access.

 

 

Will try MSE and restoration now.

 

 

I don't suppose it could be because I already have 4 wireless devices connected to my router at the moment could it? Just a thought.

[dx100uk]

that not the network card

it has no MAC

 

you should have two with mac ad's the network card and the wireless card.

 

dx

[SOD'EM]

Just put MSE on pen drive and opened folder on infected laptop. Double clicked on Setup and got this message:-

 

The Microsoft Security Essentials Wizard can't find files that are necessary to complete the installation. To install this program please download the installation again from the Microsoft Security Essentials web sit.

 

It works fine on my laptop that I originally downloaded it to. I have to have this sorted by 4pm. I've been up all night.

[SOD'EM]

Have put Avast on infected laptop and it is asking for Reg key before it works. Got free key from site but it says invalid key?

[SOD'EM]

When I put my cursor on the two small monitors in the tray on the infected laptop. It has a red X through it and it says:-

 

Connection status: Unknown

The dependency service or group failed to start.

 

If I can just connect it to the internet, I think I can sort everything else.

Lord have mercy on my soul if I can't do it.

[PRBrown]

If the DHCP client isn't running/can't be started, then you won't be able to connect to the network.

 

When you start the laptop up, or when you attempt to connect to a network, if your network card doen't have an IP address installed the DHCP client makes a broadcast request looking for a DHCP server on your network. If it finds one it requests a temporary IP address from that DHCP server.

 

Although you're not aware of it, the router you use to connect to the internet will be providing that DHCP server service. Since you can't start the DHCP service, your laptop can't get an IP address, so it can't connect to your network.

 

However, you can set-up a network address on your laptop manually which by-passes the need for the laptop to make a DHCP request or for the DHCP service to be running.

 

Setting up a static IP address on your laptop is easy, but you need to know the network address of the router. Most routers come pre-set with an IP address so it's important to know what the IP address (and network range) of the router is. In most cases the default address of the router is 192.168.0.1 but I have seen routers use different addresses.

 

That's why I asked the router type and model. If you can find that, you can find out the default IP address of the router, and from that you can set the appropriate network addresses on your laptop.

[dx100uk]

turn off wireless encryption on your router.

that will cure the limited access.

 

as for the wired not working.

 

do an IPCONFIG /ALL again

 

it looks like the device is not there as you have no MAC

 

dx

[SOD'EM]

Sorry PRB, it is a Netgear 54mpbs WGR614-6VGUKS.

 

Dx, I'm not sure how to turn off the wireless encryption on the router.

 

Thanks both of you for helping me. I will be your slave for life if I get this sorted.

[SOD'EM]

I have got hold of a dongle which has successfully connected it to the internet. Unfortunately it is an Orange dongle which is slower than a world peace speech from Gareth Gates. It took 1 hour and 35 minutes to download Mozilla Firefox:eek:. At a whopping speed of 1.01 kbs. Surely this can be improved. I would normally have downloaded Firefox in about 3 seconds.

 

Please can anyone help me get this thing connected to my internet wireless router.

[SOD'EM]

Can someone tell me what a dependency service or group is when it comes to laptops. That is what is failing to start when I am trying for internet connection. It is connecting to my router but it is with limited access, so that is no good for the internet.

 

I think everyone has deserted the Techy forum.

Edited January 29, 2010 by SOD'EM

[SOD'EM]

Or can someone tell me how to turn off wireless encryption on my router.

[Tezcatlipoca]

Do you have a spare ethernet patch cable at all? If so, it would be best to try that as a hardware connection between your laptop and the router (remembering to switch off wireless on the laptop, of course).

If everything connects up at a good speed, the problem(s) - by definition - lie with the router hardware, or your laptop (either hardware or wireless adapter software (which may or may not include the drivers)).

 

Another test would be to put the wireless network back to absolutely basic settings first. The manual for your router can be found online HERE, if needed.

Page 3-9 covers the settings concerned with wireless network security, but, in essence, you need to access your router via the browser of a connected computer, select Wireless Settings from the lefthand menu, and change the Security Settings to Disable. Make sure your channel is set to 11, and the mode to g + b. For the moment, change the SSID to something like TEST, then click Apply. Finally, reboot both the router and laptop. Your laptop should then see the wireless network, in this case TEST, and connect to it with zero encryption. So long as the signal is clear (doing this with the laptop in the same room as the router is best), you should get a fast rate.

 

If you do, go back into your router and try changing the security settings section of the Wireless menu to WPA. Give it a key, Apply, reboot again.

[Tezcatlipoca]

Sorry, only just seen that you suspect you got infected yourself. I'm going to go out on a limb here and take a guess that if you were, you got hit by a Bagle variant.

 

You can check this by doing the following on your laptop:

 

1. Open regedit. Backup registry

2. go to HKEY_LOCAL_MACHINE / SYSTEM / CurrentControlSet / Services / Ndisuio

3. Look at the "Start" entry. If that is set to 4, change it to 3.

4. go to HKEY_LOCAL_MACHINE / SYSTEM / CurrentControlSet002 / Services / Ndisuio

5. Again, if the "Start" entry is set to 4, change it to 3.

6. Close Regedit.

7. Reboot computer

8. go into network connections. disable the wireless for a minute, then re-enable it.

 

Let me know if this works for you.

[SOD'EM]

Will try that, thanks Tez.

 

I have a couple of accounts on my laptop and have been able to connect with one of them using the ethernet cable. Had to mess about with the manage network connections bit. Unfortunately, on the main account, when I click on manage network connections, there are none there so can't connect. I have tried doing but that says it cannot do anything or something like that. Strange that one account is ok and the other one has no network adapters or connections.

 

ps. I have Davina Mcalled my wireless router up as well by resetting it. I can't connect wirelessly no more as the password I had previously used is no more, because I'm a complete eeeeejit.

 

 

[dx100uk]

ok well that shows that the profile has been screwed by the trojan.

 

why not restart in safemode, login as administrator [typically no password - or if you know it] and create new a/c with admin privs

 

then you should be laughing.

 

install mse

 

then you should have access to everyone pixs by looking under docs & settings and their name.

 

the little scroats are acting up in the town so i've got some cameras to watch. so i'll be on in the morning now

 

dx

 

dx

[SOD'EM]

I have managed to get all laptops connected wirelessly thanks. God knows how I done it, but it was a case of restarting DHCP and DNS clients and a million other things like that. Would you believe it, the password on the router once it was reset was "password":p. But even then it would only connect locally.

 

I also realised that I had a bridged connection which I had to remove to get my desktop tray icon to work properly. This was because I tested an xbox internet connection ages ago and forgot to remove the bridge.

 

The only problem I have now is on the main account. It won't show any network connections in the network manager. So I am having to use this new admin account. Is there any way I can move my Firefox bookmarks from the old account (which I can still access, but not connect to the internet) and transfer them all to this new one?

 

Thanks all