Screen Resolution Won't Change

My friend's machine gets no attention unless I use it; no updates, no
maintenance routines. zip. I persuaded him to install Norton SystemsWork
(NSW) to at least protect against virus and straight out whatever effects
improper shutdowns might cause.



There's something running that prevents NSW from completing a disc scan.
Using MSCONFIG, I unchecked a few things that looked practical and was
successful in getting the scan disc program to run in safe mode. I left his
house with the machine running and told him to follow instruction to shut it
off when completed.



The following day I got a call that the picture he has as wallpaper looks
"ghostly". I figured it was still in safe mode or the resolution got changed
somehow. When next saw the machine (he's since turned it off), the desktop
came up with the ghostly photo but most of the icons appeared normal. I
suspected resolution setting (WINDOWS 98 SE 128meg 688mzh). I changed
resolution from 16 colors to 256, moved the bar to 800x, and restarted. It
wouldn't hold the setting. I tried at least 10 times restarting the machine
each time.



What's more, the NSW won't execute anymore. When clicked, it's as though
there's not enough memory and everything slows to a crawl. I restarted in
safe mode, inserted the original NSW program thinking I could run a virus
scan from there, but the CD ROM drive would show as an active device. I don't
think that's common under safe mode but it may be.



Anyone have a clue as to were to go next. and perhaps a comment about the CD
ROM no-show?

"John Gregory" wrote in message
...
My friend's machine gets no attention unless I use it; no updates, no
maintenance routines. zip. I persuaded him to install Norton SystemsWork (NSW)
to at least protect against virus and straight out whatever effects improper
shutdowns might cause.



There's something running that prevents NSW from completing a disc scan. Using
MSCONFIG, I unchecked a few things that looked practical and was successful in
getting the scan disc program to run in safe mode. I left his house with the
machine running and told him to follow instruction to shut it off when
completed.

I wouldn't use NSW as a maintanenece app due to it more than not, being wrong
about what it reports.

Second, using msconfig may have added to the issue if you unchecked any needed
entries. As well, if you uncheck an entry that was placed their by an app as
needed to start, the app will add a new checked entry. The way to prevent the
app from re-adding an entry is to disable any startup option from within the app
itself. When Safe Mode loads it uses the minumal drivers needed and IIRC no apps
should be starting, any that do can be stopped by ctrl+alt+del End Task unless
it happens to be one of the tougher spyware or viruses put out in todays times.
You should not need to use msconfig to get to or use Safe Mode, although it may
be necessary at certain times.

Third, why in the world would you leave an app running that may report
something that requires user input with a person that does/knows very little?




The following day I got a call that the picture he has as wallpaper looks
"ghostly". I figured it was still in safe mode or the resolution got changed
somehow. When next saw the machine (he's since turned it off), the desktop
came up with the ghostly photo but most of the icons appeared normal. I
suspected resolution setting (WINDOWS 98 SE 128meg 688mzh). I changed
resolution from 16 colors to 256, moved the bar to 800x, and restarted. It
wouldn't hold the setting. I tried at least 10 times restarting the machine
each time.

This is a very good indication that your video drivers are disabled, corrupt or
missing. You need to reinstall the latest updated drivers from the manufacturer
per their instructions. Before doing so, are you sure you haven't anything still
unchecked in msconfig that is related to the video.




What's more, the NSW won't execute anymore. When clicked, it's as though
there's not enough memory and everything slows to a crawl. I restarted in safe
mode, inserted the original NSW program thinking I could run a virus scan from
there, but the CD ROM drive would show as an active device. I don't think
that's common under safe mode but it may be.

Uninstall NSW.

The CD drivers do not load in Safe Mode, as mentioned above Safe Mode loads the
minumal drivers to allow operation. Norton products can be run in DOS which is
moot if you do not have the latest virus definitions.

I suggest downloading/running F-Prot for DOS using it's latest up to date
defs.
http://www.f-prot.com/products/home_use/dos/




Anyone have a clue as to were to go next. and perhaps a comment about the CD
ROM no-show?


Once you regain the ability to boot to Windows:
**It is very important to run the update for each program before running the
app/s to be sure you have the latest definitions.**
Run the programs in Safe Mode after assuring you have shut down all running
tasks except explorer or systray and all apps are fully up to date.
Download/run Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search variants:
http://www.richardthelionhearted.com...hronicles.html

Then download/install/run Ad-Aware SE to detect/rid of any other
parasites/spyware that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the latest
up-to-date ref file, then run Ad-Aware and delete everything it finds.

And/or download/install/run:
Spybot - Search & Destroy:
http://security.kolla.de/index.php?l...&page=download
Run it at it's default settings until you learn an know more about it. Spybot
S&D is more of an advanced users tool and changing from the default settings can
be dangerous to the novice user. Items found in the default settings that are
RED can usually be safely removed. If you are unsure of a found item, do not
remove it and ask for help.

If you still have problems, download/run HijackThis from:
http://www.richardthelionhearted.com...downloads.html
http://majorgeeks.com/downloads31.html

Copy HJT to it's own folder, this is where the log files will be saved. Run HJT
in Normal Mode.
Do not remove anything with it until you get advice on what to remove, HJThis
will list many apps that are needed along with the bad ones. Removing items
listed hap-hazardly without knowing what they are can/will create a royal mess.
Read the quick start here on how to create a log file that can be copied/pasted
into a forum that can provide assistance on removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate forum where they specialize in
spyware/hijacker removal. Please read any sticky notes for proper posting which
are most commonly posted first at the top in each specific forum. Read any
information under each forum category name for information on what that
particular one is used for, look for the proper one that you post logs to.
http://forums.spywareinfo.com/

http://forum.aumha.org/

After running the above and assuring you have a clean machine:
It's also a good idea to have a HOSTS file to block bad sites, scroll to HOSTS
File Manager he
http://www.mvps.org/PracticallyNerded/Software.htm

Another good app is SpywareBlaster which stops the badboys before they even get
a chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

See all of the above.


--

Brian A. Sesko
{ MS MVP_Shell/User }
Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

...if you uncheck an entry that was placed their by an app as needed to
start, the app will add a new checked entry.

Then little harm could have come from unchecking such programs because they
would have added themselves back in if needed?

"Brian A." gonefish'n@afarawaylake wrote in message
...
"John Gregory" wrote in message
...
My friend's machine gets no attention unless I use it; no updates, no
maintenance routines. zip. I persuaded him to install Norton SystemsWork
(NSW) to at least protect against virus and straight out whatever effects
improper shutdowns might cause.



There's something running that prevents NSW from completing a disc scan.
Using MSCONFIG, I unchecked a few things that looked practical and was
successful in getting the scan disc program to run in safe mode. I left
his house with the machine running and told him to follow instruction to
shut it off when completed.

I wouldn't use NSW as a maintanenece app due to it more than not, being
wrong about what it reports.

Second, using msconfig may have added to the issue if you unchecked any
needed entries. As well, if you uncheck an entry that was placed their by
an app as needed to start, the app will add a new checked entry. The way
to prevent the app from re-adding an entry is to disable any startup
option from within the app itself. When Safe Mode loads it uses the
minumal drivers needed and IIRC no apps should be starting, any that do
can be stopped by ctrl+alt+del End Task unless it happens to be one of
the tougher spyware or viruses put out in todays times. You should not
need to use msconfig to get to or use Safe Mode, although it may be
necessary at certain times.

Third, why in the world would you leave an app running that may report
something that requires user input with a person that does/knows very
little?




The following day I got a call that the picture he has as wallpaper looks
"ghostly". I figured it was still in safe mode or the resolution got
changed somehow. When next saw the machine (he's since turned it off),
the desktop came up with the ghostly photo but most of the icons appeared
normal. I suspected resolution setting (WINDOWS 98 SE 128meg 688mzh). I
changed resolution from 16 colors to 256, moved the bar to 800x, and
restarted. It wouldn't hold the setting. I tried at least 10 times
restarting the machine each time.

This is a very good indication that your video drivers are disabled,
corrupt or missing. You need to reinstall the latest updated drivers from
the manufacturer per their instructions. Before doing so, are you sure you
haven't anything still unchecked in msconfig that is related to the video.




What's more, the NSW won't execute anymore. When clicked, it's as though
there's not enough memory and everything slows to a crawl. I restarted in
safe mode, inserted the original NSW program thinking I could run a virus
scan from there, but the CD ROM drive would show as an active device. I
don't think that's common under safe mode but it may be.

Uninstall NSW.

The CD drivers do not load in Safe Mode, as mentioned above Safe Mode
loads the minumal drivers to allow operation. Norton products can be run
in DOS which is moot if you do not have the latest virus definitions.

I suggest downloading/running F-Prot for DOS using it's latest up to date
defs.
http://www.f-prot.com/products/home_use/dos/




Anyone have a clue as to were to go next. and perhaps a comment about the
CD ROM no-show?


Once you regain the ability to boot to Windows:
**It is very important to run the update for each program before running
the app/s to be sure you have the latest definitions.**
Run the programs in Safe Mode after assuring you have shut down all
running tasks except explorer or systray and all apps are fully up to
date.
Download/run Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search variants:
http://www.richardthelionhearted.com...hronicles.html

Then download/install/run Ad-Aware SE to detect/rid of any other
parasites/spyware that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the
latest up-to-date ref file, then run Ad-Aware and delete everything it
finds.

And/or download/install/run:
Spybot - Search & Destroy:
http://security.kolla.de/index.php?l...&page=download
Run it at it's default settings until you learn an know more about it.
Spybot S&D is more of an advanced users tool and changing from the default
settings can be dangerous to the novice user. Items found in the default
settings that are RED can usually be safely removed. If you are unsure of
a found item, do not remove it and ask for help.

If you still have problems, download/run HijackThis from:
http://www.richardthelionhearted.com...downloads.html
http://majorgeeks.com/downloads31.html

Copy HJT to it's own folder, this is where the log files will be saved.
Run HJT in Normal Mode.
Do not remove anything with it until you get advice on what to remove,
HJThis will list many apps that are needed along with the bad ones.
Removing items listed hap-hazardly without knowing what they are can/will
create a royal mess. Read the quick start here on how to create a log file
that can be copied/pasted into a forum that can provide assistance on
removal of unwanted pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate forum where they specialize in
spyware/hijacker removal. Please read any sticky notes for proper posting
which are most commonly posted first at the top in each specific forum.
Read any information under each forum category name for information on
what that particular one is used for, look for the proper one that you
post logs to.
http://forums.spywareinfo.com/

http://forum.aumha.org/

After running the above and assuring you have a clean machine:
It's also a good idea to have a HOSTS file to block bad sites, scroll to
HOSTS File Manager he
http://www.mvps.org/PracticallyNerded/Software.htm

Another good app is SpywareBlaster which stops the badboys before they
even get a chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

See all of the above.


--

Brian A. Sesko
{ MS MVP_Shell/User }
Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm

"John Gregory" wrote in message
...
...if you uncheck an entry that was placed their by an app as needed to
start, the app will add a new checked entry.

Then little harm could have come from unchecking such programs because they
would have added themselves back in if needed?

None to cause a problem except now it would show one enrty unchecked and one
checked. Usually rechecking the unchecked one gets it back to a single entry.
There are a few that are needed and will have 2 entries checked such as the ones
for the power profile.


--

Brian A. Sesko
{ MS MVP_Shell/User }
Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm





"Brian A." gonefish'n@afarawaylake wrote in message
...
"John Gregory" wrote in message
...
My friend's machine gets no attention unless I use it; no updates, no
maintenance routines. zip. I persuaded him to install Norton SystemsWork
(NSW) to at least protect against virus and straight out whatever effects
improper shutdowns might cause.



There's something running that prevents NSW from completing a disc scan.
Using MSCONFIG, I unchecked a few things that looked practical and was
successful in getting the scan disc program to run in safe mode. I left his
house with the machine running and told him to follow instruction to shut it
off when completed.

I wouldn't use NSW as a maintanenece app due to it more than not, being
wrong about what it reports.

Second, using msconfig may have added to the issue if you unchecked any
needed entries. As well, if you uncheck an entry that was placed their by an
app as needed to start, the app will add a new checked entry. The way to
prevent the app from re-adding an entry is to disable any startup option from
within the app itself. When Safe Mode loads it uses the minumal drivers
needed and IIRC no apps should be starting, any that do can be stopped by
ctrl+alt+del End Task unless it happens to be one of the tougher spyware or
viruses put out in todays times. You should not need to use msconfig to get
to or use Safe Mode, although it may be necessary at certain times.

Third, why in the world would you leave an app running that may report
something that requires user input with a person that does/knows very little?




The following day I got a call that the picture he has as wallpaper looks
"ghostly". I figured it was still in safe mode or the resolution got changed
somehow. When next saw the machine (he's since turned it off), the desktop
came up with the ghostly photo but most of the icons appeared normal. I
suspected resolution setting (WINDOWS 98 SE 128meg 688mzh). I changed
resolution from 16 colors to 256, moved the bar to 800x, and restarted. It
wouldn't hold the setting. I tried at least 10 times restarting the machine
each time.

This is a very good indication that your video drivers are disabled, corrupt
or missing. You need to reinstall the latest updated drivers from the
manufacturer per their instructions. Before doing so, are you sure you
haven't anything still unchecked in msconfig that is related to the video.




What's more, the NSW won't execute anymore. When clicked, it's as though
there's not enough memory and everything slows to a crawl. I restarted in
safe mode, inserted the original NSW program thinking I could run a virus
scan from there, but the CD ROM drive would show as an active device. I
don't think that's common under safe mode but it may be.

Uninstall NSW.

The CD drivers do not load in Safe Mode, as mentioned above Safe Mode loads
the minumal drivers to allow operation. Norton products can be run in DOS
which is moot if you do not have the latest virus definitions.

I suggest downloading/running F-Prot for DOS using it's latest up to date
defs.
http://www.f-prot.com/products/home_use/dos/




Anyone have a clue as to were to go next. and perhaps a comment about the CD
ROM no-show?


Once you regain the ability to boot to Windows:
**It is very important to run the update for each program before running the
app/s to be sure you have the latest definitions.**
Run the programs in Safe Mode after assuring you have shut down all running
tasks except explorer or systray and all apps are fully up to date.
Download/run Cool Web Shredder from:
http://www.intermute.com/products/cwshredder.html

For Info on Cool Web Search variants:
http://www.richardthelionhearted.com...hronicles.html

Then download/install/run Ad-Aware SE to detect/rid of any other
parasites/spyware that may be installed. It can be obtained free from:
http://www.lavasoftusa.com/
After installing Ad-Aware, open it and click on the ref update to get the
latest up-to-date ref file, then run Ad-Aware and delete everything it finds.

And/or download/install/run:
Spybot - Search & Destroy:
http://security.kolla.de/index.php?l...&page=download
Run it at it's default settings until you learn an know more about it. Spybot
S&D is more of an advanced users tool and changing from the default settings
can be dangerous to the novice user. Items found in the default settings that
are RED can usually be safely removed. If you are unsure of a found item, do
not remove it and ask for help.

If you still have problems, download/run HijackThis from:
http://www.richardthelionhearted.com...downloads.html
http://majorgeeks.com/downloads31.html

Copy HJT to it's own folder, this is where the log files will be saved. Run
HJT in Normal Mode.
Do not remove anything with it until you get advice on what to remove, HJThis
will list many apps that are needed along with the bad ones. Removing items
listed hap-hazardly without knowing what they are can/will create a royal
mess. Read the quick start here on how to create a log file that can be
copied/pasted into a forum that can provide assistance on removal of unwanted
pests.
http://mjc1.com/mirror/hjt/#quick

Then post the logs to an appropriate forum where they specialize in
spyware/hijacker removal. Please read any sticky notes for proper posting
which are most commonly posted first at the top in each specific forum. Read
any information under each forum category name for information on what that
particular one is used for, look for the proper one that you post logs to.
http://forums.spywareinfo.com/

http://forum.aumha.org/

After running the above and assuring you have a clean machine:
It's also a good idea to have a HOSTS file to block bad sites, scroll to
HOSTS File Manager he
http://www.mvps.org/PracticallyNerded/Software.htm

Another good app is SpywareBlaster which stops the badboys before they even
get a chance to install:
http://www.javacoolsoftware.com/spywareblaster.html

See all of the above.


--

Brian A. Sesko
{ MS MVP_Shell/User }
Conflicts start where information lacks.
http://www.dts-l.org/goodpost.htm