Hi, I recently had my hard drive replaced on my gateway desktop computer, and now instead of being drive C: it is now the I: drive. I was just curious if it possible to rename the I drive back to C,...

That's what I was afraid of, but if the hard drive is still good couldnt I just connect it to another computer as a secondary hard drive and retrieve data that way?, and then reformat/partition and...

I didnt see an option to repair except for the recovery console? When does it give me an option to repair, when I go to install it just gives the option to partition etc..?

When I tried CHKDSK /f it is an invalid command, so I tried CHKDSK /r and it finished 25% and failed to go any further.

So now when I boot I am getting "A Problem with the Hard drive has been...

Ok this computer is about 1 year old and I have noticed that the hard drive would make some weird grinding and clicking noises at time's and sometimes the computer would just shut down out of no...

Ok this computer is about 1 year old and I have noticed that the hard drive would make some weird grinding and clicking noises at time's and sometimes the computer would just shut down out of no...

Party poker is basically the largest online poker room, where most people play texas hold em for money anywhere from 20-200$ No limit or 1/2$-30/60$ limit hold em. There's usually at least 50,000...

Ok fixed those thing's you mentioned with Hijack this and deleted viewpoint. As for the things I deleted with killbox is was just the 5 thing's that came up in the dll compare log and everything...

Bumpie.. can anyone interprit these logs for me ? please :)

Crunchie I need your help again this is my g/f's mom's computer. :)

Find it log just finished:


Warning! This utility will find legitimate files in addition to malware.
Do not remove anything unless you are sure you know what you're doing.

Find.bat is...

Ran Adaware and Spybot S&D as well as trojan remover, everything seems to be coming up clean now but when I run VX2 finder it finds this:


Log for VX2.BetterInternet File Finder (msg126)

Files...

I enabled them all like you suggested and went to town with hijack this, and then from the log I used killbox to make sure all of the files were still gone on reboot. After I rebooted ran hijack...

Some of them are the vx2 baddies and I don't know if I should do that?

I downloaded msconfig for win2k...

got the site to work just needed to be opened in a new window for some reason.

Looks very good :)


Logfile of HijackThis v1.99.0
Scan saved at 4:44:48 AM, on 12/31/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
...

Will check that registry key and post another log. Thanks so much...

btw.. some reason I could not load the daniweb forums index so I had to download mozilla because I am not in front of my other...

Yerp worked perfect... So do you think we are good after these instructions?


THANK YOU SOO MUCH!!! You ARE the MAN!

Did you create that reg file I just merged?

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows...

Only thing is that !Submit folder that was in my C:\ drive will not empty from the recycle in.

Nevermind I removed it.

I think the recycle bin is fine


"Silent Runners.vbs", revision 28, launched at: 23:43
Output limited to non-default values, except where indicated by "{++}"
Operating System: Windows 2000

...

I do understand and sorry again, I don't know how you can do this every day looking at all the logs and I know I made a lot of reading for you, but basically I followed through deleting all those...

Crunchie I understand that I was only supposed to do as instructed but I am under time constraints to get this back to my uncle. I went ahead and searched other threads for similar issues and just...

Here's the most recent silent runner log

"Silent Runners.vbs", revision 28, launched at: 19:44
Output limited to non-default values, except where indicated by "{++}"
Operating System: Windows...

I went ahead and ran Adaware and it only found two item's which it successfully got rid of (cookies), and then Spybot S&D came back totally CLEAN!!!.. The hiackthis log is totally clean, and same...

I ran housecalls online virus scan and it found these things:

TROJ AGENT.CAC in C:\WINNTOLD\system32\calsp.dll
TROJ NARRATOR.A in C:\WINNTOLD\system32\lzpwwl.exe

It let me delete these two...

Ok I think i made some more progress as this time when I ran killbox I killed the viyrrv.exe process first and also deleted entry's in hijack and then rebooted my logs seem to have came back semi...

Yep, VX2, Coolweb, Qoolaid is what Iv'e been struggling with on my uncle's computer for about a month now. It wasn't untill recently I decided to go for help in the forums, and it seems I get the...

Something interesting I found in my C:\ drive is a !Submit folder with 6 Dll's and the dreaded viyrrv.exe

Should I remove this folder?

I just noticed a !Submit folder in my C:\ drive which sems to oddly enough have the related VX2 files in there along with 9 DLL's.

Did you remove this !Submit folder?

When I run Qoologic I get (3) The system cannot find the file specified followed by a Checking system folder.... Please wait , which never seems to finish just as Findit did not finish... Whilst it...

Boy does what I have look almost exactly what you cought...... The only problem I am having is when I run find it and Qoollogic it never seems to finish so I have no logs.

I got the same exact crap as you Qoolaid and VX2 and CWS I'm having the hardest time getting rid of them. Let me know if you figure out how to trash the .exe file related to the VX2... Mine's...

.l* DLLCompare Log version(1.0.0.127)
Files Found that Windows does not See or cannot Access
*Not everything listed here means you are infected!
________________________________________________...

Logfile of HijackThis v1.99.0
Scan saved at 6:11:01 AM, on 12/30/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:...

Ok I booted into safe boot and tried to removed these files with killbox:

C:\WINNTOLD\System32\Guard.tmp
C:\WINNTOLD\system32\viyrrv.exe
C:\WINNTOLD\system32\lzpwwl.exe...

When I tried to remove C:\WINNTOLD\system32\Guard.tmp with normal boot it would not allow it to be deleted. Should I try to remove these thing's that came back in Silentrunner in safe boot?

"Silent Runners.vbs", revision 28, launched at: 04:16
Output limited to non-default values, except where indicated by "{++}"
Operating System: Windows 2000


Startup items buried in registry:...

Do you think I also should have removed C:\WINNTOLD\system32\ir44l5hq1.dll and when you said C:\WINDOWS\system32\guard.temp did you mean C:\WINNTOLD\system32\guard.tmp ?

When you say on the last file double check to make cetain you have them all, how can I tell that they are all entered? Also was I supposed to click Use dummy for every one of them? (I did). Am...