CrimsonTwilight 0 Light Poster

Blackberry --> Crackers

CrimsonTwilight 0 Light Poster

poker --> casino

CrimsonTwilight 0 Light Poster

fingers ---> opposable thumbs

CrimsonTwilight 0 Light Poster

small ---> atom

CrimsonTwilight 0 Light Poster

yeah its checked,thanks ne ways. I'll keep tryin stuff

CrimsonTwilight 0 Light Poster

If caperjacks link didn't help you can..

Try downloading Hijackthis

http://www.spychecker.com/program/hijackthis.html

Run the program and save the log file somewhere easy to find. Open the log file and copy the entire thing into one of the threads or areas helping to analyze hijackthis logs... if no one can help you decipher the log copy your log file to the box here..

http://www.help2go.com/modules.php?name=HJTDetective

.. and click submit, it will show you any malicious and suspicious entries and you can go from there.

CrimsonTwilight 0 Light Poster

System:

Windows XP home edition (version 2002) - SP2
Intel pentium 4 - 1.6Ghz
Videocard - Radeon 9200
512MB of DRAM
ASUSTek motherboard
Cable modem - terayon
Internal modem - lucent win

I connect to the internet with Rogers high-speed. I can surf the net, use email, download things etc. just fine but whenever windows needs to access the net through a troubleshooter or when windows media player needs to download a codec or something it shows an error message saying that i need to connect to the internet. Windows update service works fine so I don't know why other parts of the system can't recognize that I'm connected. :?: :?:

CrimsonTwilight 0 Light Poster

doh --> OOPS!

CrimsonTwilight 0 Light Poster

nuclear --> meltdown

CrimsonTwilight 0 Light Poster

If the automatic update is not working you can try manually downloading the files you need from Microsoft Downloads . Also check in your firewalls that you do not have the automatic update service blocked from acessing the internet.

CrimsonTwilight 0 Light Poster

Better then bronze --> Shiny sword

CrimsonTwilight 0 Light Poster

THANKS ALC !! you've been a great help... yeah it kinda went woosh but im gonna be checking out the link. I'll report back to tell everyone how it went

CrimsonTwilight 0 Light Poster

Oh ok, thanks for the info

CrimsonTwilight 0 Light Poster

Hey everyone. I was thinking of setting up two monitors, with a seperate keyboard for each running off the same computer. I want to be able to have seperate programs running on each and control them each seperatly from their respective keyboards. first of all I was wondering if this was possible. And second of all if anyone could give me some pointers on where to start.

CrimsonTwilight 0 Light Poster

First try loading into safe mode, press f8 after the post screen (power on self test, its the black screen when u first boot up with your system info on it) and then select safe mode from the advanced system options list. Then run your anti-spyware programs and antivirus programs. If you havent already done this, then I would suggest

Spybot S&D - http://www.safer-networking.org/en/mirrors/index.html
Ad-aware - http://www.download.com/Ad-aware/3000-8022-10214379.html?tag=lst-0-1

After you have done this, or if you have already done this try deciphering some of the log yourself by using these links

HijackThis tutorial - http://hjt.wizardsofwebsites.com/
Deciphering - http://www.spywareinfo.com/%7Emerijn/htlogtutorial.html

After all of this then try asking for some more help

CrimsonTwilight 0 Light Poster

If you can't manually find it ( it should be in C:\boot.ini previously mentioned) then just go to start and then run, and type C:\boot.ini and it should open with notepad you can edit it from there.

Be careful editing system files, and have fun!

CrimsonTwilight 0 Light Poster

Load your computer in safe mode (press f8 after POST or power on self test ... its the black screen when the computer detects the hard drive(s) and such right when you turn on the computer) and then run ad-aware / spybot / cwshredder again along with whatever antivirus you have installed and then run hijackthis again. You will probably have a much smaller log file after this and perhaps someone would be more eager to assist you.

CrimsonTwilight 0 Light Poster

If neither of the above work, make a copy of your edited boot file and save it somewhere you will remember. Restart the computer in safe mode and then replace the original boot.ini file. However the above mentioned fixes should work fine. Booting in safe mode is a good way to replace changed system files such as ntoskrnl.

CrimsonTwilight 0 Light Poster

While optional, the multimedia keys probably won't work without it.

Yeah the keyboard is HP and the multimedia keys on the keyboard are still working with KBD disabled thankfully. Looks like this ones all wrapped up. I'm relaxing now lol , thanks guys. Maybe now I can switch to offering help on the forums instead of needing it for a while.

CrimsonTwilight 0 Light Poster

The problem is... well.. was :) . KBD.exe , not sure what that is but everything works fine now that its disabled and i put the sledge hammer away from the computer :eek:

CrimsonTwilight 0 Light Poster

I no longer need this interpreted. This thread may be removed if desired. Thanks guys.

CrimsonTwilight 0 Light Poster

After following the steps heres the new log

Logfile of HijackThis v1.98.0
Scan saved at 4:41:01 PM, on 7/8/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
F0 - system.ini: Shell=
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ohb - {086CEFD5-A88D-4981-8915-D51F04360ED1} - C:\WINDOWS\System32\winhot32.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: HotSearchBar.com Bar - {8B224779-3B0E-4FEA-8AE1-B66C20DD840F} - C:\WINDOWS\System32\winhot32.dll
O4 - HKLM\..\Run: [WordPerfect Family Pack 519] C:\Program Files\Common Files\Corel\Registration\EN\Registration.exe /title="WordPerfect Family Pack 5" /date=071904 serial=FP05WRD-0120447-BTR
O4 - HKLM\..\Run: [MSConfig] …

CrimsonTwilight 0 Light Poster

Thanks to QT for you ideas on start up items and thanks to DMR for your ideas on conflicts with plug and play and not necessarily plug and play itself. I disabled all start up items and left plug and play enabled and the system ran fine. I will now go through the list and find out what is causing the problem and conflicting with plug and play. Thanks for all the help. :cheesy:

CrimsonTwilight 0 Light Poster

yeah, it works fine from other computers, and works fine with my netscape. it is just my IE that needs to be refreshed

If you cannot fix the problem in IE I would suggest just trying another browser such as Mozilla Firefox.

http://www.mozilla.org/products/firefox/

CrimsonTwilight 0 Light Poster

Logfile of HijackThis v1.98.0
Scan saved at 3:10:42 PM, on 7/8/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
F0 - system.ini: Shell=
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ohb - {086CEFD5-A88D-4981-8915-D51F04360ED1} - C:\WINDOWS\System32\winhot32.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: HotSearchBar.com Bar - {8B224779-3B0E-4FEA-8AE1-B66C20DD840F} - C:\WINDOWS\System32\winhot32.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"

CrimsonTwilight 0 Light Poster

Logfile of HijackThis v1.98.0
Scan saved at 3:10:42 PM, on 7/8/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://static.vpptechnologies.com/playfulsearch/results.html?s=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
F0 - system.ini: Shell=
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ohb - {086CEFD5-A88D-4981-8915-D51F04360ED1} - C:\WINDOWS\System32\winhot32.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: HotSearchBar.com Bar - {8B224779-3B0E-4FEA-8AE1-B66C20DD840F} - C:\WINDOWS\System32\winhot32.dll
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"

CrimsonTwilight 0 Light Poster

Hey again all. I know I already posted a problem about my computer "freezing" when windows is booted up (on June 30) but it is now July 8 and I have still not fixed the problem.

I am running windows xp home edition version 2002 w/ service pack one(1). Intel pentium 4 cpu and 512 MB of ram.

Ok after having this problem manifest itself I entered selective startup to figure out what was wrong. I found out that if plug and play was enabled under services the computer would slow to a snails pace when I loaded windows. So slow that it would appear to be frozen. However I could still move the mouse around. Normal icons and keyboard functions were null however.

In my last post it was suggested that a recently installed driver (keyboard) could be to blame but I have since restored all drivers to previous states and the problem is still occurring. I also thorougly checked the machine after that and found the backdoor trojan 'subseven' but have removed all of its spawn such as msr.exe (I think so) and STILL have the problem.

When loading the computer in safe mode everything works fine and there are no problems, BUT when I check in msconfig and services plug and play is running... if plug and play is what is causing the problem and its running when I load in safe mode shouldn't safe mode not function as well?

I know …

CrimsonTwilight 0 Light Poster

Thanks that did work but after enabling it again i got back my old problems that I thought I had fixed *sigh* lol thanks anyways guys I'll try and sort this one out myself. Be back in the posts in a few days !

CrimsonTwilight 0 Light Poster

Thanks DMR i'll try that right now

CrimsonTwilight 0 Light Poster

Currently running windows XP with service pack 1. I had previously disabled plug and play through msconfig becuase the computer would freeze on start up with plug and play enabled. Now after I think I have finally solved the problem I go back into msconfig to re-enable it and its gone. No joke. It is completely off of the list. The hide microsoft services box is unchecked. Does anyone know whats going on ?

CrimsonTwilight 0 Light Poster

Ok I just noticed something else, rundll32.exe was running as soon as I started to download and install the new driver and i know thats for installing new things on the computer and it extracts things from a temporary folder ( i think ne way :-| ) but I was looking in the task manager and it keeps randomly coming on and off since the keyboard problem. Is this related ? I thought rundll was supposed to disable itself after installation was complete?

CrimsonTwilight 0 Light Poster

So anybody with any more helpful ideas would be greatly appreciated, I have to sign off soon but if someone has even a partial solution I would be very happy to hear it.

CrimsonTwilight 0 Light Poster

DMR had said that plug and play was related to USB devices tho. I don't know why trying to install a new driver for the keyboard would mess up plug and play if its only for USB. And the keyboard is still working somehow.

CrimsonTwilight 0 Light Poster

There was originally but I had a severe hard drive problem about a month ago and had to send it in to get repaired, they had to replace the hard drive and they said they reinstalled the OS and everything required.. perhaps something was missed

CrimsonTwilight 0 Light Poster

Actually wait come to think of it.. none of my internet buttons or music buttons worked and i couldnt open the keyboard options from the control panel, thats why i downloaded the driver

CrimsonTwilight 0 Light Poster

don't think you should have downloaded that driver. Perhaps it was for a different model? Was there anything wrong with your keyboard previously?

Lol yeah definatly having that sentiment right now ! And no ... no there wasnt.. feeling kinda stupid at the moment actually... and missing plug and play cuz it seems my speakers dont work without it enabled lol

CrimsonTwilight 0 Light Poster

Plug-N-Play would definitely be part of the picture if the keyboard is USB; is it?

Also- it isn't usually necessary to add drivers for a keyboard. What make/model is the keyboard and what exact software for it did you install?

Sorry DMR i should have included that information. The keyboard is HP PS2 keyboard (2K - 3). So the keyboard is PS/2 and the software I installed was .. well im not exactly sure, I was on the HP site and stumbled across a keyboard driver update and i thought since i had never updated my keyboard driver before that I should and once I did all that happened. Could I have downloaded the wrong driver or could it have gotten corrupted somehow? But you also said that a USB keyboard would affect plug-n-play but what about, PS/2 ? Thanks for your time.

CrimsonTwilight 0 Light Poster

Hey everyone this is my first post and unfortunatly its about me needing help. I am currently running Windows XP home edition version 2002 service pack 1, with intel pentium 4 cpu at 1.6GHz and 512 MB of ram. After installing a new driver for my keyboard the system would freeze and lock up upon startup. I went through a huge multitude of steps and eventually ended up in msconfig under services, I enabled and disabled every service (except required services) until i found plug and play was causing the system to lock up. I am not sure if the attempt at a new keyboard driver has anything to do with that or not, and im still in highschool so dont know enough about computers to understand how plug and play is related or can freeze up the system. I know this is a long post but any help would be appreciated. :o