WinME Reinstall: Seek Advice on advisability doing this

"Shane" wrote in message
...
To quote a well-known actor....." I'll be baaaack!"

'Governor' Schwarzenegger, perhaps?

Well, it's more credible than 'actor', wouldn't you say Harry?

I'm backing off on that one, Shane, I hate 'violence'.


Shane

I'll turn this over to Noel. Since you're able to backup your data, a full
restore is a reasonable option. Or, some of the individual problems look
fixable without a clean reinstall of WinME.

Don
[MS MVP- IE]


"BrianZ" beezer000[at]gmail.com wrote in message
ups.com...
I am standing by. There is clearly a lot going on here about which I
know less than nothing. I would move data onto a flash drive and over
to a different machine, if I could get SafeMode to "see" the flashdrive
(Device Manager sees a usb wheelmouse plugged into one, but not the usb
mass storage device plugged into the other front usb port.)

Sorry to learn of Koldbear. I just today encountered his posts; but he
seemed to have a good grip of these issues back in 2002.

Brian
please email me your system.ini - from your description, it's a little
strange (my email here is valid)
Powerr~1.exe and powerr~2.exe - what are the details on those lines?
Unfortunately the names have been truncated to 8.3 format, which leaves too
many options to make even an educated guess without more details.
--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"BrianZ" wrote in message
oups.com...
More details, which may or may nothelp:

I ran msconfig in safe mode:
Under the check Selective Start:
Process system.ini file = checked
Process win.ini file = checked
Load static VxDs = checked
Load environment variables = checked
Load startup group items = gray check

System.ini tab+
top item is checked and shows only the letter "I"
then there are many blank lines, followed by numerous Password List
folders, boot folders and 386Enh folders, all of which are checked

Win.ini items are all checked
VxD items are all checked
Environment items are all checked
Startup items are partially checked, according to the scheme I have
established for this computer. However, as the end are 2 items I do
not recognize:
POWERR~2.EXE is checked
POWERR~1.EXE is not checked.

Don't know if this helps, but perhaps it doesn't hurt.

Brian

I found this
http://www.securitystronghold.com/ga...e_solution.htm
POWERR~1 indicating it's a bad thing that can be delete manually via
registry. I suspect the same is true of POWERR~2 though didn't find it at
that link. Here's my Google page for POWERR~2 .
http://www.google.com/search?sourcei...werr%7E2%2Eexe

"If at first you don't succeed, Google it"
'mo

"Noel Paton" wrote in message
...
Brian
please email me your system.ini - from your description, it's a little
strange (my email here is valid)
Powerr~1.exe and powerr~2.exe - what are the details on those lines?
Unfortunately the names have been truncated to 8.3 format, which leaves
too
many options to make even an educated guess without more details.
--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"BrianZ" wrote in message
oups.com...
More details, which may or may nothelp:

I ran msconfig in safe mode:
Under the check Selective Start:
Process system.ini file = checked
Process win.ini file = checked
Load static VxDs = checked
Load environment variables = checked
Load startup group items = gray check

System.ini tab+
top item is checked and shows only the letter "I"
then there are many blank lines, followed by numerous Password List
folders, boot folders and 386Enh folders, all of which are checked

Win.ini items are all checked
VxD items are all checked
Environment items are all checked
Startup items are partially checked, according to the scheme I have
established for this computer. However, as the end are 2 items I do
not recognize:
POWERR~2.EXE is checked
POWERR~1.EXE is not checked.

Don't know if this helps, but perhaps it doesn't hurt.

Brian

The problem is that the 8.3 filename powerr~1.exe can be expanded in any
number of ways - such as

POWER R*.EXE
POW ERR*.EXE
with the * being anything from 2 to 240-odd characters long!
We just don't have enough data to make a realistic guess as to what these
references are pointing at.

My inclination is that it's likely to be malware of some kind - but before I
advise I ;like to *know* what I'm dealing with (It makes life so much easier
in the long run!), if at all possible.

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"mogramjo" wrote in message
news:Ro0Df.24064$jR.20392@fed1read01...
I found this
http://www.securitystronghold.com/ga...e_solution.htm
POWERR~1 indicating it's a bad thing that can be delete manually via
registry. I suspect the same is true of POWERR~2 though didn't find it at
that link. Here's my Google page for POWERR~2 .
http://www.google.com/search?sourcei...werr%7E2%2Eexe

"If at first you don't succeed, Google it"
'mo

"Noel Paton" wrote in message
...
Brian
please email me your system.ini - from your description, it's a little
strange (my email here is valid)
Powerr~1.exe and powerr~2.exe - what are the details on those lines?
Unfortunately the names have been truncated to 8.3 format, which leaves
too
many options to make even an educated guess without more details.
--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"BrianZ" wrote in message
oups.com...
More details, which may or may nothelp:

I ran msconfig in safe mode:
Under the check Selective Start:
Process system.ini file = checked
Process win.ini file = checked
Load static VxDs = checked
Load environment variables = checked
Load startup group items = gray check

System.ini tab+
top item is checked and shows only the letter "I"
then there are many blank lines, followed by numerous Password List
folders, boot folders and 386Enh folders, all of which are checked

Win.ini items are all checked
VxD items are all checked
Environment items are all checked
Startup items are partially checked, according to the scheme I have
established for this computer. However, as the end are 2 items I do
not recognize:
POWERR~2.EXE is checked
POWERR~1.EXE is not checked.

Don't know if this helps, but perhaps it doesn't hurt.

Brian

I have looked into Powerr~1 and Powerr~2. They appear to be execution
files driven by PowerReg Scheduler V3 (Leader Technologies). Powerr~1
is in disabled startup (last update 16Dec04) and Powerr~2 is in Startup
(last update 28Dec04).

Clean install would be a viable option, IF I could figure out a way to
backup files. 8(

It is only in Safe Mode that I am able to get any functionality out of
my recalcitrant Compaq. In Safe Mode, I cannot access my ethernet dsl
connection or mount usb flash memory cards (Device Manager tells me
that "Status is not available when Windows is in Safe Mode.) Safe Mode
recognizes my A: floppy drive, but neither my CD nor my CD-DVD RW
drives. I don't even want to think about plugging in my external CD
burner.

I do have a functioning desktop with 80GB available HD memory sitting
just 1 meter from the Compaq. Might there be a way to create a lowbrow
direct cable connection between the 2 computers and suck the data I
need to save over to the operating computer?

I continue to be unsuccessful in getting mouse functionality when
launching in normal or selective startup modes. A mouse icon briefly
appears in the tray during bootup, but is quickly disappears and
whether I already have a mouse plugged in or whether I plug in once
boot up finishes, the system is not launching mouse function.

Thanks for everyone's continuing support.

BRian

http://www3.ca.com/securityadvisor/p...x?id=453078189
http://virusinfo.prevx.com/pxparall.asp?PXC=6639134450
http://www.bleepingcomputer.com/star...uler-4135.html


USB devices are not recognised in Win9x Safe Mode, because the device
initialisation takes place after windows loads - and Safe Mode doesn't do
that


--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"BrianZ" wrote in message
oups.com...
I have looked into Powerr~1 and Powerr~2. They appear to be execution
files driven by PowerReg Scheduler V3 (Leader Technologies). Powerr~1
is in disabled startup (last update 16Dec04) and Powerr~2 is in Startup
(last update 28Dec04).

Clean install would be a viable option, IF I could figure out a way to
backup files. 8(

It is only in Safe Mode that I am able to get any functionality out of
my recalcitrant Compaq. In Safe Mode, I cannot access my ethernet dsl
connection or mount usb flash memory cards (Device Manager tells me
that "Status is not available when Windows is in Safe Mode.) Safe Mode
recognizes my A: floppy drive, but neither my CD nor my CD-DVD RW
drives. I don't even want to think about plugging in my external CD
burner.

I do have a functioning desktop with 80GB available HD memory sitting
just 1 meter from the Compaq. Might there be a way to create a lowbrow
direct cable connection between the 2 computers and suck the data I
need to save over to the operating computer?

I continue to be unsuccessful in getting mouse functionality when
launching in normal or selective startup modes. A mouse icon briefly
appears in the tray during bootup, but is quickly disappears and
whether I already have a mouse plugged in or whether I plug in once
boot up finishes, the system is not launching mouse function.

Thanks for everyone's continuing support.

BRian

A little searching on your first link gives an insight to it's
trustworthiness.
http://www.spywarewarrior.com/rogue_anti-spyware.htm

http://www.google.co.uk/search?sourc...ritystronghold
gives a number of well-known 'rogue' sites which are trying to sell it

a whois of the site give
Hostway Whois Server Version 1.0
Domain Name: securitystronghold.com
Registrar: AAAQ.COM
Whois Server: whois.aaaq.com
Referral URL: http://www.aaaq.com
Name Server: ns39.dedicatedusa.com
Name Server: ns40.dedicatedusa.com
Status: ACTIVE
Updated Date 2005-10-06
Creation Date: 2004-06-27
Expiration Date: 2006-06-29

Registrant:

KONSTANTIN ARTEMEV
28 Army Street 16/1, flat 69

Astrakhan, Astrakhan 414056
RU
+7-851-2-546183 Fax:

Administrative Contact:
KONSTANTIN ARTEMEV
28 Army Street 16/1, flat 69

Astrakhan, Astrakhan 414056
RU
+7-851-2-546183 Fax:

Technical Contact:
Administrator DNS
1 N State Street
12th Floor
Chicago, IL 60602
US
+1.3122362132 Fax: +1.3122361958

Billing Contact:
KONSTANTIN ARTEMEV
28 Army Street 16/1, flat 69

Astrakhan, Astrakhan 414056
RU
+7-851-2-546183 Fax:

checking AAAQ.COM itself is quite interesting -
the postal adddress is a P.O.Box!!
AAAQ.COM, Inc.
P.O. Box 2404
Chicago, Illinois 60690-2404

However - the accreditation for AAAQ.COM is for Canada!

Googling for "KONSTANTIN ARTEMEV" gives some very interesting results, also

http://3d2f.com/programs/20-847-acti...download.shtml

would appear to be a fore-taste of what's on the site

I wonder what he's doing here?....

http://womans-net.com/forums/member....3b484e&u=51 2

http://www.acidfiles.com/companies/Rich-Speech.html

Now this one's interesting!

http://download-miscell.b0x.com/Down...-Terminal.html

forces an install of Zango - only to end up with the following message...

quote

Freewebsites.com error 403/404: The web site you are trying to access either
does not exist or has been terminated for violating our policies.
Please make sure you entered the web site address correctly and try again.If
you received spam advertising this web site, please do not send further
complaints about it.

/quote

http://www.technorati.com/profile/SpywareBlogger

http://spyware-telegraph.blogspot.com/

seems to be a set of personal notes as a blog - I can't quite see the point
of it, since all the links there lead to the securitystronghold site!



--
Noel Paton (MS-MVP 2002-2006, Windows)


Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"mogramjo" wrote in message
news:Ro0Df.24064$jR.20392@fed1read01...
I found this
http://www.securitystronghold.com/ga...e_solution.htm
POWERR~1 indicating it's a bad thing that can be delete manually via
registry. I suspect the same is true of POWERR~2 though didn't find it at
that link. Here's my Google page for POWERR~2 .
http://www.google.com/search?sourcei...werr%7E2%2Eexe

"If at first you don't succeed, Google it"
'mo

"Noel Paton" wrote in message
...
Brian
please email me your system.ini - from your description, it's a little
strange (my email here is valid)
Powerr~1.exe and powerr~2.exe - what are the details on those lines?
Unfortunately the names have been truncated to 8.3 format, which leaves
too
many options to make even an educated guess without more details.
--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"BrianZ" wrote in message
oups.com...
More details, which may or may nothelp:

I ran msconfig in safe mode:
Under the check Selective Start:
Process system.ini file = checked
Process win.ini file = checked
Load static VxDs = checked
Load environment variables = checked
Load startup group items = gray check

System.ini tab+
top item is checked and shows only the letter "I"
then there are many blank lines, followed by numerous Password List
folders, boot folders and 386Enh folders, all of which are checked

Win.ini items are all checked
VxD items are all checked
Environment items are all checked
Startup items are partially checked, according to the scheme I have
established for this computer. However, as the end are 2 items I do
not recognize:
POWERR~2.EXE is checked
POWERR~1.EXE is not checked.

Don't know if this helps, but perhaps it doesn't hurt.

Brian

Brian - got your system.ini file - and it's severely corrupted!!

Do a Search for files named system.* in the Windows folder, and email all
found (as attachments, please) and I'll see if I can make some sense out of
them

--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"Noel Paton" wrote in message
...
Brian
please email me your system.ini - from your description, it's a little
strange (my email here is valid)
Powerr~1.exe and powerr~2.exe - what are the details on those lines?
Unfortunately the names have been truncated to 8.3 format, which leaves
too many options to make even an educated guess without more details.
--
Noel Paton (MS-MVP 2002-2006, Windows)

Nil Carborundum Illegitemi
http://www.crashfixpc.com/millsrpch.htm

http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's
"BrianZ" wrote in message
oups.com...
More details, which may or may nothelp:

I ran msconfig in safe mode:
Under the check Selective Start:
Process system.ini file = checked
Process win.ini file = checked
Load static VxDs = checked
Load environment variables = checked
Load startup group items = gray check

System.ini tab+
top item is checked and shows only the letter "I"
then there are many blank lines, followed by numerous Password List
folders, boot folders and 386Enh folders, all of which are checked

Win.ini items are all checked
VxD items are all checked
Environment items are all checked
Startup items are partially checked, according to the scheme I have
established for this computer. However, as the end are 2 items I do
not recognize:
POWERR~2.EXE is checked
POWERR~1.EXE is not checked.

Don't know if this helps, but perhaps it doesn't hurt.

Brian

Personally, I would boot into DOS and reformat the hard drive. Also run
Scandisk on all drives. I would then reinstall Windows using a *real*
Windows CD, not that crap they call a recovery disk.

You could use DOS to back up your data files before you do it.

After rebuilding, I would learn and use INTENSE computer security so this
doesn't happen again.

HTH.
Walterius
Old but secure in Fort Lauderdale.