Thread: Stickies
View Single Post
Old 01-06-2008, 02:18 PM   #6 (permalink)
elf
Assistant Manager, Microsoft Support
 
elf's Avatar
 
Join Date: Jul 2002
Location: Knoxville, TN or Austin, TX depending
Posts: 6,023
OS: WinXP Pro SP2 and Slackware 10.1

My System

Send a message via AIM to elf
Very Critical! Before you install SP2 for XP!

Originally posted by: jgvernonco

There is a very serious conflict between the malware program TV Media and SP2 for XP. This conflict only occurs if TV Media is present on your hard drive at the time that you attempt to install SP2.

Apparently, there is a serious conflict between the upgraded security features of SP2 and TV Media which causes the system to crash. If the system is set to reboot after a crash (most are), the computer will be locked in a cycle of rebooting and crashing.

Microsoft has developed a patch to prevent this problem, which must be installed prior to the SP2 installation. More information on this issue, the solution to the reboot, crash cycle, and a link to the patch are all available in the MS knowledgebase article .

Before you install SP2 for XP, we recommend that you:

Download Ad-aware SE and install it if you don't have it already. Make sure it's the newest version and check for any updates before running it. Go to this site to get the plug-in for fixing VX2 variants. To run this tool, go into Ad-aware->Add-ons and select VX2 Cleaner. Then click Run Tool and OK to start it. If it's clean, it will say Status System Clean. Otherwise, you will have to click on the Clean button to remove the VX2 infection. Also make sure to customize the settings in Ad-aware for better scan results. Run the scan and fix everything that it finds.

Run an online virus scan at TrendMicro or RAV Antivirus. Select the Autoclean option if you use TrendMicro.

Install the 885523 package (patch).

Thanks!


=======================================================
Originally posted by: GeekGirl
Quote:
When you install the Adware T.V. Media Removal Tool and accept the end-user license agreement (EULA), the installation package extracts the Tvmcln.exe file to a temporary directory, and then the removal tool runs. The removal tool checks your computer for the prerequisites listed in the "Prerequisites" section. If the prerequisites are met, the removal tool does the following:
1. Examines the registry for entries added by the T.V. Media package to run Tvm.exe upon system startup. If these entries are found, the tool searches memory to determine whether Tvm.exe is running. If it is found running, the tool terminates it.
2. Examines the registry for entries referring to TvmBho.dll, which is loaded into the Explorer.exe process memory. If the tool finds these entries, then the tool searches memory for the Explorer.exe process. If the process contains TvmBho.dll, the process is restarted.
3. Terminates any instances of Internet Explorer, in order to release TvmCore.dll from memory.
4. Deletes all files associated with T.V. Media identified in steps 1 and 2.
5. Removes registry entries identified in step 1 and 2.
6. Displays a Windows message box that describes the outcome of the detection and removal process. The following list contains the messages that you may receive and what these messages mean:
• T.V. Media is not installed.– The T.V. Media program was not detected on this computer.
• Successfully removed Adware T.V. Media program. To allow removal, all instances of Internet Explorer were terminated. – The T.V. Media program was removed. No additional action is required.
• This tool must be run by an administrator. – You are not logged on with an administrator account. Log off, and log on with an account that has administrative privileges. Run the tool again.
• Fatal error, please review log file. – See %Windir%\debug\tvmcln.log for more information.
• Adware T.V. Media program was detected, but could not be removed. – Run the tool again and check the log file for errors.
• This tool requires Windows 2000 or Windows XP. – This tool is not supported on versions of Windows other than Windows 2000 and Windows XP.
• Incorrect Windows version (Win32s) – This tool is not supported on Windows 3.1 with Win32s.
When you close the message box, the removal tool quits, and Tvmcln.exe is deleted from the temporary folder. You can now delete the Windows-KB886590-ENU-V1.1.exe file manually.
7. The removal tool creates a log file named Tvmcln.log in the %Windir%\Debug folder. You can view this log file to determine if Adware T.V. Media program was detected and removed.
http://support.microsoft.com/?kbid=886590


You can also look in the Installed programs list in the Add/Remove Programs tool in Control Panel.
__________________


If TSF has helped you, Tell us about it! or Donate to help keep the site up!
I do not subscribe to threads, so if I stop replying, PM me with a link to your thread so I can find it again.

Last edited by elf : 01-06-2008 at 02:51 PM.
elf is offline