Search Results

Showing results 1 to 40 of 52
Search took 0.04 seconds.
Search: Posts Made By: gerbil
Forum: Windows NT / 2000 / XP Jul 16th, 2009
Replies: 2
Views: 486
Posted By gerbil
Windows Memory mgmnt has it under its control. If you are looking at Task Manager, Available physical memory, and wondering why it is so big, possibly more than half your installed RAM, be assured...
Forum: Viruses, Spyware and other Nasties Jul 14th, 2009
Replies: 49
Views: 4,824
Posted By gerbil
Virut. Ah. You may have already taken the best option, then. A format and reinstall. Note that a format does not remove files, just loses them; the new OS will not see them. And vv.
Cheers, Nathan....
Forum: Viruses, Spyware and other Nasties Jul 13th, 2009
Replies: 49
Views: 4,824
Posted By gerbil
Just for the time being, Nathan, I am going to ignore one of the detections..... I may get spanked for it.
Anyway.... use GMER to delete all these entries [you must run it in Normal Mode]:
Reg ...
Forum: Windows NT / 2000 / XP Jul 12th, 2009
Replies: 8
Views: 397
Posted By gerbil
Norton/ symantec. The latest product seems to be performing better in the mix. Anyway, trot along to this page and get the correct removal tool for your version of Norton - use it to completely clean...
Forum: Windows NT / 2000 / XP Jun 25th, 2009
Replies: 3
Views: 910
Posted By gerbil
That sorted things out, and revealed more.
==Again please disconnect from the web, turn off your Antivirus, Antispyware and Firewall for the duration of this scan:
Copy the text in the box to a...
Forum: Windows NT / 2000 / XP Jun 17th, 2009
Replies: 25
Views: 1,401
Posted By gerbil
Okay, when you type in a URL, say http://www.bestsitetobe.com, the web does not recognise that as a valid machine address, so it is converted to one, an IP address, say 234.34.121.005 which is linked...
Forum: Viruses, Spyware and other Nasties Jun 17th, 2009
Replies: 21
Views: 1,475
Posted By gerbil
Please do not use Rapidshare for posting logs. Post them here.
Start hijackthis, select Scan Only, place checkmarks against all the entries listed below that still exist, and then press Fix Checked....
Forum: Viruses, Spyware and other Nasties May 7th, 2009
Replies: 8
Views: 1,133
Posted By gerbil
Good-oh, glad you are clean. But believe me on the RECYCLER/Recycle Bin thing... they are parts of the whole. You could have deleted those S-...com files manually from RECYCLERs, and run CCleaner to...
Forum: Windows NT / 2000 / XP Dec 15th, 2008
Replies: 10
Views: 2,105
Posted By gerbil
Why did you pick that service, Jim? And isn't it a vista service, anyway?
Have you tried making a new account on the puter to see if the svchost error occurs inside it? I note that error listed in...
Forum: Viruses, Spyware and other Nasties Dec 3rd, 2008
Replies: 23
Views: 1,482
Posted By gerbil
Sure. I use Comodo Firewall Pro [it's free... they get their money from certifying secure sites].. but it will drive the casual puter user nuts. It is very comprehensive, possibly the best; you can...
Forum: Windows NT / 2000 / XP Oct 14th, 2008
Replies: 17
Views: 3,481
Posted By gerbil
Gog, it is just this entry that I was wondering about
BITS: hxxp://auj+|Cv+@J:NGD_DQ{zcxLJS@]6A
which is a URL for the background intelligent transfer service, and really...
Forum: Windows NT / 2000 / XP Oct 11th, 2008
Replies: 6
Views: 1,238
Posted By gerbil
System Restore is limited in the amount of system file repair it can do .
If you have different icons in explorer then your shell32.dll has likely been modified along with some other changes to make...
Forum: Windows NT / 2000 / XP Oct 7th, 2008
Replies: 41
Solved: Trojan Problem
Views: 4,951
Posted By gerbil
Weasel, don't use that previous script - I missed one file to delete, so use this modified version instead. The vundo infection there appears to have rootkit capabilities. I should also point out...
Forum: Windows NT / 2000 / XP Oct 1st, 2008
Replies: 41
Solved: Trojan Problem
Views: 4,951
Posted By gerbil
Hello weasel... Okay, thanks...lessee, do you have this file by any chance?:
C:\Windows\System32\Drivers\tdssserv.sys
-delete it. There may be others like this:
C:\Windows\System32\tdsss?.dll...
Forum: Windows NT / 2000 / XP Sep 26th, 2008
Replies: 41
Solved: Trojan Problem
Views: 4,951
Posted By gerbil
You're doing fine. This should solve the redirection problem:
Use hijackthis to fix these two entries:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =...
Forum: Windows NT / 2000 / XP Sep 26th, 2008
Replies: 41
Solved: Trojan Problem
Views: 4,951
Posted By gerbil
I understand, weasel, so let's work for the moment with what you have: please start hijackthis, select Scan Only, place checkmarks against all the entries listed below that still exist, and then...
Forum: Windows NT / 2000 / XP Sep 1st, 2008
Replies: 10
Views: 840
Posted By gerbil
I aint finished yet! When you visit the Windows Update site it uses an ActiveX to detect this key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto...
Forum: Windows NT / 2000 / XP Aug 31st, 2008
Replies: 4
Views: 894
Posted By gerbil
And because you saw this msg :
"No boot sector on hard disk - No bootable devices - press F1 to retry, F2 to go to options" - you were not actually booting from the cd. DBAN obviously wiped the disk...
Forum: Windows NT / 2000 / XP Aug 29th, 2008
Replies: 22
Views: 1,389
Posted By gerbil
Hi. For the moment I will just assume that it is a problem only with an exe file link. Run this [key is an export from my machine]:
==Please copy the text in the box to a notepad [format/wordwrap...
Forum: Windows NT / 2000 / XP Aug 21st, 2008
Replies: 9
Views: 1,012
Posted By gerbil
"two errors should not throw stop errors againts his screen".... two installations? No, they should not... I wuz jus pointing out that he had two... some folks don't realize that they have em,...
Forum: Windows NT / 2000 / XP Aug 12th, 2008
Replies: 12
Views: 1,022
Posted By gerbil
No intrusion at all.... Spybot 1.6 is the latest version, just go to the homepage...
http://www.spybot.info/index2.html
and dl from a mirror close to yourself. When you install consider carefully...
Forum: Windows NT / 2000 / XP Aug 10th, 2008
Replies: 5
Views: 534
Posted By gerbil
Anne, this should do the trick. I have included some links as a way of acknowledging the author of the fix.
Home - http://www.dougknox.com/
Links - http://www.dougknox.com/xp/xp_fixes.html
The...
Forum: Windows NT / 2000 / XP Jul 27th, 2008
Replies: 29
Views: 3,707
Posted By gerbil
Symantec/S32ENIL.dll .. is there any chance you typed that incorrectly, arthas? It should be the name of a dll that exists in that Symantec S32 directory under program Files. Anyway, i notice that...
Forum: Windows NT / 2000 / XP Jul 25th, 2008
Replies: 18
Views: 2,397
Posted By gerbil
Hang amo. Just stepping thru your videos. I cannot see your IDE? drive shown as detected?
Forum: Windows NT / 2000 / XP Jul 23rd, 2008
Replies: 3
Views: 493
Posted By gerbil
It doesn't get much better than this:
http://www.dslreports.com/faq/15804
Forum: Windows NT / 2000 / XP Jul 18th, 2008
Replies: 15
Views: 1,602
Posted By gerbil
Modify boot.ini by going CP, System, Advanced tab, Startup and Recovery Settings button, Edit - boot.ini will open in Notepad. Modify it and Save.
But yeah, we could get into a lil problem with a...
Forum: Viruses, Spyware and other Nasties May 17th, 2008
Replies: 2
Views: 3,014
Posted By gerbil
Do you have Adaware 2007? Then Allow. Lsdelete.exe is a file in system32 from Adaware.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"BootExecute" ="autocheck autochk *...
Forum: Viruses, Spyware and other Nasties Apr 5th, 2008
Replies: 29
Views: 21,615
Posted By gerbil
Good-oh, tsahi.... if you're happy, I'm happy.
Cheers.
Forum: Viruses, Spyware and other Nasties Apr 2nd, 2008
Replies: 5
Views: 1,898
Posted By gerbil
Outlook.exe is the email client for M Office. RightFax is a third party extension to Outlook that invokes outlook's email client capabilities. You have RightFax as a startup, it is going to call...
Forum: Windows NT / 2000 / XP Mar 27th, 2008
Replies: 37
Views: 4,116
Posted By gerbil
Forum: Windows NT / 2000 / XP Mar 25th, 2008
Replies: 10
Views: 1,378
Posted By gerbil
That little 32MB partition was probably some sort of recovery image for the original computer. Dump it.
60GB? Put the OS into a 10GB partition, apps in another, maybe 5GB, data in a third making up...
Forum: Viruses, Spyware and other Nasties Mar 19th, 2008
Replies: 7
Views: 1,096
Posted By gerbil
Hello, ryun.
Delete this file:
C:\WINNT\System32\lgbpd.exe - if it is running just stop it in TM and then try to delete it again.
Good. Uninstall MyWebSearch via Add/Remove pgms.
Start...
Forum: Viruses, Spyware and other Nasties Feb 18th, 2008
Replies: 64
Views: 10,386
Posted By gerbil
Heya, cynikal... we'll get there....
In a standard windows installation Windows Explorer [explorer.exe] is the user's point of contact with the OS, it is the shell, the outside casing if you like,...
Forum: Viruses, Spyware and other Nasties Feb 3rd, 2008
Replies: 64
Views: 10,386
Posted By gerbil
It looks like Panda broke your mIRC - you may have to reinstall that.
Is that the BearShare installer in C:\Downloads? C:\Downloads\BSINSTALL.exe - if so, it is okay.
If MyGlobalSearch is listed in...
Forum: Viruses, Spyware and other Nasties Feb 1st, 2008
Replies: 64
Views: 10,386
Posted By gerbil
Hi, you need to remove this:
C:\WINDOWS\system32\tcpsvcs.dll
It is already running, started at boot by this key :O20 - AppInit_DLLs: tcpsvcs.dll ... If you cannot manually delete the file in normal...
Forum: Viruses, Spyware and other Nasties Jan 24th, 2008
Replies: 9
Views: 1,381
Posted By gerbil
You may have dropped through the cracks here, billy. So.... while crunchie is having a cup of tea:
Start hijackthis, select Scan Only, place checkmarks against all the entries listed below that...
Forum: Viruses, Spyware and other Nasties Dec 30th, 2007
Replies: 12
Views: 6,052
Posted By gerbil
A Bagle worm. Cool. G'day, bobby, Mcafee is one AV service it shuts down, AVG is another. You should be able to load one of them now.
Bagle uses a rootkit; if you were to start your PC in Safe mode...
Forum: Viruses, Spyware and other Nasties Nov 29th, 2007
Replies: 17
Views: 1,822
Posted By gerbil
Looks okay to me, rabbott.
Personally, I would not have file sharing pgms as startup entries, rather I would start them on demand. As they are it means your connection capability can be eaten up by...
Forum: Viruses, Spyware and other Nasties Oct 26th, 2007
Replies: 33
Views: 4,228
Posted By gerbil
DeOnna, for some reason [not your fault, it's the trojan...] that operation did not fully work, so please repeat option2 with the same block of entries [repeated below]
[We are trying to copy the...
Forum: Windows NT / 2000 / XP Oct 3rd, 2007
Replies: 7
Views: 1,045
Posted By gerbil
==Download SmitfraudFix (by S!Ri) from http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Extract the content (a folder named SmitfraudFix) to your Desktop.
- Restart your computer in Safe Mode.
-...
Showing results 1 to 40 of 52

 


About Us | Contact Us | Advertise | DaniWeb | Acceptable Use Policy | RSS Feed

©2003 - 2009 DaniWeb® LLC