Windows ME SLOW WITH NO ACCESS

[Tech Support]

After I ran Windows update, the system was very sluggish upon reboot, so
much
to the point I have no access to any programs through the start menu. There
are icons on the lower toolbar and I can use those icons to access programs.
As soon as I try to access anything through the start menu, the system locks
up. I tried to do a system restore, but it only goes so far on teh system
reboots and then says "was not able to restore, no information is changed on
your computer." How do I go about removing the updates and/or is there a
possiblity of a virus? If so, how do I go about getting rid of the virus
with the above circumstances and user ability of the icon/start menu?

[Mike M]

Not knowing which updates you installed I would start by establishing this
(the file iuhist.xml in the Program Files\WindowsUpdatezV4 folder will
help you here) and then see if they can be uninstalled using Add/Remove
Programs. Not, however, that I think your problems are due to having
installed a critical update but one never knows.

Turning now to your query about having a possible virus and the system
restore failure you saw.

Virus:
When did you last check your system for malware using your preferred
antivirus application making sure first that you are using an updated
current set of viral reference signatures?

This might also be a good time to download yourself a copy of the free
Ad-Aware SE Personal edition from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot Search &
Destroy 1.3 (http://www.safer-networking.org/) and use them to check your
system for other commercial parasites remembering that they are only as
good as when you last updated their reference files. I also use a program
called BHODemon (http://www.definitivesolutions.com/bhodemon.htm that
checks for unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help
prevent some parasites getting a grip on your PC.

Just is case the problem is due to a new version of the CoolWebSearch
parasite you might want to download and run the CWShredder which targets
that specific parasite. Unfortunately neither AdAware or SpyBot seem to be
able as yet to fully detect all the various versions of the CoolWebSearch
parasite as it keeps changing. The latest version of CWShredder can be
downloaded (free) from
http://www.intermute.com/spysubtract/cwshredder_download.html

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html).
Create a folder called HJT on C: (not on your desktop nor in your temp
folder) and copy the file you downloaded to that folder. Close as many
applications as you can including all instances of Internet Explorer.
Enable Explorer to see all files and folders (Tools | Folder Options |
View and check "Show hidden files and folders" and uncheck "Hide protected
operating system files") and then run hijackthis.exe and post back the log
to either the HijackThis Forum at http://forums.spywareinfo.com/ or
alternatively http://forum.aumha.org/viewforum.php?f=30 and hopefully this
will enable someone to identify the cause of your problem.

See also: Dealing with Unwanted Malware, Parasites, Toolbars and Search
Engines http://mvps.org/winhelp2002/unwanted.htm and also Browser
Hijacking http://www.spywareinfo.com/articles/hijacked/

Restoration Unsuccessful:
A failure to restore to a previously created checkpoint is often a sign
that the 290700 patch for system restore wasn't installed when the
checkpoint to which you were trying to return was created. If that is the
case the checkpoint is useless.

What is the version of the file smgr.dll in the windows\system folder?
You can check this by locating this file in Windows Explorer, selecting,
right clicking and choosing Properties and then clicking the Version tab.
If not 4.90.0.3003 then that could be the cause of the problem and you
need to download and install the 290700 patch for system restore. The
easiest way to do this is from the link in the associated KB article
(KB290700 - "Checkpoints that you create after September 8, 2001 do not
restore your computer" (http://support.microsoft.com?kbid=290700).

It is also possible that at one stage you did install this patch but have
subsequently reinstalled Win Me over itself using the Win Me CD. Doing
this causes the original, broken, version of smgr.dll to be reinstalled.
If this problem is a result of your having reinstalled Win Me over itself
may I recommend you to download and use the Belarc Advisor
(http://www.belarc.com/free_download.html) which will help you in
identify which other patches also need to be reinstalled.

Finally you may want to give system restore the once over by carrying out
the following quick test.
a) Create a shortcut on your desktop to a file.
b) Create a manual checkpoint
c) Delete the shortcut
d) Restore you PC to the checkpoint you created.
Was the shortcut restored? Did you see any error messages?
--
Mike Maltby MS-MVP



Tech Support > wrote:

> After I ran Windows update, the system was very sluggish upon reboot,
> so much
> to the point I have no access to any programs through the start menu.
> There are icons on the lower toolbar and I can use those icons to
> access programs. As soon as I try to access anything through the
> start menu, the system locks up. I tried to do a system restore, but
> it only goes so far on teh system reboots and then says "was not able
> to restore, no information is changed on your computer." How do I go
> about removing the updates and/or is there a possiblity of a virus? If
> so, how do I go about getting rid of the virus with the above
> circumstances and user ability of the icon/start menu?