Member Avatar for avi09041984

First of all unhide all the programs. if u have a broad band or dial up connection jst get off the Ethernet connection.then restart the computer and press F7.you got in safe mode and run the computer with network there you search where the unauthorized folder are there or not if then just delete all unauthorized folder.then put the xp-cd on cd-rom and install it.after installing put the firewall on.Now ur computer is safe....

  • 2 Contributors
  • 1 Reply
  • 133 Views
  • 8 Hours Discussion Span
  • Latest Post Latest Post by Bob_180_Bob

Dani AI

Generated

As and note, a compromised Windows XP machine needs a careful, staged response rather than a quick "format and reinstall" reflex. First, understand the platform risk: Windows XP no longer receives security updates and remains inherently vulnerable, so long‑term recovery should include planning an upgrade to a supported OS (Windows XP end of support).

Practical cleanup workflow:

  • Isolate the PC from networks to stop lateral spread and data exfiltration. Use a known-clean machine to download any rescue tools you need.
  • Create and boot from a trusted, up-to-date antivirus rescue disk or USB (vendor rescue media boots offline and can find rootkits that run under Windows).
  • Back up only personal data files (documents, photos, email stores). Do not copy .exe, .msi, or unknown script files. Scan the backup media from a clean system before reuse.
  • If system files or the boot sector are suspect, prefer a full clean install: format the system partition, reinstall Windows, then install drivers and security software. Collect drivers and any installation media before wiping.

Post-reinstall cautions and tips:

  • Reinstall supported security software and update definitions immediately. Change all account passwords from a different, clean device after cleanup.
  • When restoring data, scan every archive and document first; avoid restoring programs or installers from the compromised image.
  • If the machine will remain on XP, accept the residual risk: use layered protections (third-party AV, strict firewall rules, limited user accounts) and isolate the PC from sensitive networks.

If the infection persists, a deep infection (rootkit or firmware compromise) or ransomware may be present. In those cases document the problem, preserve logs, and consider professional incident response rather than repeated reinstall attempts.

Member Avatar for Bob_180_Bob

Hi and welcome to Daniweb,
You give a good scenario, but unfortunately it is a lot more involved.
Go to, Viruses, Spyware and other Nasties in Daniweb and read about removing malware there. Thank you for your input.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.