Address book loss

Question submitted by
Ed Smith on Wednesday, August 27, 2008 at 05:17:23
---------------------------------------------------------------------------

Question: After switching from 98 se to xp I lost my address book and all my pictures . Is there any way to recover these items ?

---------------------------------------------------------------------------

Answer: Windows 98 had a different file structure than Windows XP. You're old files should be on the C: Drive in a My Documents folder. This is different than clicking on the My Documents on the Windows XP desktop. To find your lost files double click on My Computer, Double Click on C: and look for My Pictures and My Documents in the root directory. Your old files should be in those folders. (I'm making an assumption that you did a software upgrade to your old PC to make it run XP.)

Happy Hunting!
Ed Smit
Questions@JustAskEd.net
for more answers to computer questions go to JustAskEd.blogspot.com

What a Nasty Virus CNN Top 10 Stories Spam Virus

I have been spending way to much time cleaning off a virus that is spread through email and starts sending spam from your computer when it gets infected. It's hard to protect against unless you just don't open the email that says it's from CNN. The email is very convincing so beware. I have not been having any luck with standard virus protection or spyware protection with this one yet. However, if you do get infected you can manually clean it off by following these directions. Please, if you don't already own virus protection get AVG and save yourself the pain.

Find and Stop CNN.com Daily Top 10 Processes:
c:\WINDOWS\system32\CbEvtSvc.exe
c:\WINDOWS\system32\pphcjkrj0etfg.exe
c:\WINDOWS\system32\lphcjkrj0etfg.exe
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe
c:\Program Files\rhcnkrj0etfg\Uninstall.exe


Find and Unregister CNN.com Daily Top 10 DLL Files:
c:\Program Files\rhcnkrj0etfg\MFC71ENU.DLL
c:\Program Files\rhcnkrj0etfg\MFC71.dll
c:\Program Files\rhcnkrj0etfg\msvcp71.dll
c:\Program Files\rhcnkrj0etfg\msvcr71.dll

Find and Remove CNN.com Daily Top 10 registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhcnkrj0etfg
HKEY_CURRENT_USER\Software\Sysinternals\Bluescreen Screen Saver
HKEY_LOCAL_MACHINE\SOFTWARE\rhcnkrj0etfg
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CbEvtSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\54c70b2e
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CBEVTSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CBEVTSVC
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CbEvtSvc
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\54c70b2e
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "lphcjkrj0etfg"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SMrhcnkrj0etfg"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "NoDispScrSavPage"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "NoDispBackgroundPage"



Find and Delete CNN.com Daily Top 10 Files:
c:\WINDOWS\system32\CbEvtSvc.exe
c:\WINDOWS\system32\blphcjkrj0etfg.scr
c:\WINDOWS\system32\pphcjkrj0etfg.exe
c:\WINDOWS\system32\lphcjkrj0etfg.exe
c:\WINDOWS\system32\phcjkrj0etfg.bmp
c:\WINDOWS\system32\drivers\54c70b2e.sys
c:\Program Files\rhcnkrj0etfg
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe
c:\Program Files\rhcnkrj0etfg\rhcnkrj0etfg.exe.local
c:\Program Files\rhcnkrj0etfg\Uninstall.exe
c:\Program Files\rhcnkrj0etfg\database.dat
c:\Program Files\rhcnkrj0etfg\MFC71ENU.DLL
c:\Program Files\rhcnkrj0etfg\MFC71.dll
c:\Program Files\rhcnkrj0etfg\msvcp71.dll
c:\Program Files\rhcnkrj0etfg\msvcr71.dll
c:\Program Files\rhcnkrj0etfg\license.txt
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKLM
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKLM\RunOnce
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKCU
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\HKCU\RunOnce
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\StartMenuCurrentUser
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Autorun\StartMenuAllUsers
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\BrowserObjects
c:\Documents and Settings\LocalService\Application Data\rhcnkrj0etfg\Quarantine\Packages
c:\Documents and Settings\All Users\Desktop\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Register Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\How to Register Antivirus XP 2008.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\License Agreement.lnk
c:\Documents and Settings\All Users\Start Menu\Programs\Antivirus XP 2008\Uninstall.lnk

If these instructions don't make sense to you. I have found that Spybot - Search and Destroy has helped remove most of the problem. Download Spybot, clean your system, then delete all of the files from your computer in the last list titled "Find and Delete CNN.com Daily Top 10 Files:"

You can find Spybot at...Click Here

If you don't have any virus protection you can get real virus protection here...
AVG