Posts by dlh6213

Are you able to post another HJT log now? If so, do that; if not, try it in Safe Mode. If you still aren't able to scan with HJT, try to explain why not -- what does it do?

Your bridge.dll problem should be resolved by following the steps in this thread:
http://www.daniweb.com/techtalkforums/thread7370.html

You also need an antivirus program running; you can find one in this thread:
http://www.daniweb.com/techtalkforums/thread5690.html

Also in that thread, you should run all of the tools provided. These steps will eliminate most of your problems. The tools listed here will probably do a better job then Spyware Doctor. There's even a link to a HijackThis tutorial if you want to learn more about it.

If you're still having any trouble after following these steps, post a new log.

Did this start happening right after ugrading to SP2? If so, there's a patch that may help, you can review it and then download it if you think it'll help.
http://www.microsoft.com/downloads/details.aspx?amp;displaylang=en&familyid=17D997D2-5034-4BBB-B74D-AD8430A1F7C8&displaylang=en

Another possibility... is your installation CD scratched or dirty?

hammy, when i hit your site it gets all crazy choppy and slow when I view it.
also. your counter takes about 10 seconds to update. ive got mad bandwidth and am running netscape 7.1 at home. it hurt my eyes to look dude.

makes me not wanna go back.

piracy rocks. keep the rich world payin' and the poor world playin'!

I just checked it out and everything displays fine; and the counter counts each second. I'm using IE, ver 6, maybe it has something to do with Netscape. Do you have IE on your computer to try it?

One of the experts told me what you need to do, so here it is:
Go to Add/Remove Programs and uninstall Windows SyncroAd and EliteToolBar.
Close all windows, scan with HJT, and have it fix this entry:
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/296c21b...ip/RdxIE601.cab
and these if they're still showing:
O2 - BHO: &EliteBar - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - C:\WINDOWS\EliteToolBar\EliteToolBar version 53.dll
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS\EliteToolBar\EliteToolBar version 53.dll

I think you should also do this:
Open Task Manager and end the process of pAuwru9.exe, if it's running.
Empty the contents of this Temp folder: C:\documents and settings\john\local settings\temp

That should fix your problem; to help keep it from happening again, get SpywareBlaster from here:
http://www.javacoolsoftware.com/spywareblaster.html
Update it and have it enable all protection -- keep it updated too!

Here's something that may help:
http://www.cablesnmor.com/null-modem-cable.html

This isn't something you need or even want. You are probably getting this message because an antivirus prorgam or something deleted most of it but left some remnants.

The first thing you should do is check the Add/Remove Programs section in your Control Panel to see if WildTangent is there and if it is, uninstall it. Then go to C:\Program Files and delete the WildTangent folder if there is one.

Next, to be sure you've got it all and don't have anything else lurking, follow the steps in this thread: http://www.daniweb.com/techtalkforums/thread5690.html

If you still feel like you have some intruders, you can post an HJT log in the Security forum. You can get HJT from here:
http://www.softpedia.com/progDownload/x-Download-5034.html
After you download it, put it into it's own permanent folder (like c:\hjt\ijackthis.exe).

Hope this helps! Good luck!

You can probably go ahead and use the older version of HJT until your system gets cleaned up enough to get the latest one easier. HJT has an Update feature within it or you can try to get it from here:
http://www.softpedia.com/progDownlo...nload-5034.html

First thing you should do is download sysclean from http://www.trendmicro.com/download/dcs.asp making sure to download and install the latest pattern file. There's a link to it at the lower left-hand colum of the page. Note that it will not work without the pattern file which must be unzipped into the same folder as sysclean. Let it scan and fix anything it finds; it may take awhile.

After that finishes, close all windows, scan with HJT, and have it fix the following entries:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R3 - URLSearchHook: (no name) - _{20EC3D2D-33C1-4C9D-BC37-C2D500688DA2} - (no file)
O2 - BHO: (no name) - {00000EF1-0786-4633-87C6-1AA7A44296DA} - (no file)
O2 - BHO: (no name) - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\PROGRAM FILES\SIDEFIND\SFBHO.DLL (file missing)
O2 - BHO: (no name) - {00320615-B6C2-40A6-8F99-F1C52D674FAD} - (no file)
O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:\PROGRA~1\TOOLBAR\TOOLBAR.DLL (file missing)
O8 - Extra context menu item: Web Rebates - file://C:\PROGRAM FILES\WEB_REBATES\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: Your PC is infected with Spyware - click here to fix your PC (HKLM)
O9 - Extra 'Tools' menuitem: Your PC is infected with Spyware - click here to fix your PC (HKLM)
O9 - Extra button: …

Best to wait for one of the pro's to finish this up; I see a couple of suspect things and there's still something running from your temp folder. You may also need lsp_fix but I can't help with that either.

so what should i do? should i post a HJT log in the security section? or what ?

Yes, go ahead and post your log in the Security forum along with the descripton of the problem you're having. Before posting, make sure you have the latest version of HJT (1.98.2) and have it in it's own permanent folder (like c:\hjt\hijackthis.exe).

Check the first post in this thread for links to instructions:
http://www.daniweb.com/techtalkforums/thread6632.html

Trouble with laptop hibernating after upgrading to SP2? Try this link:
http://www.dslreports.com/forum/remark,11036673~mode=flat

(Thanks to caperjack!)

Hey, did anybody catch in the last debate (10/08/04), where Kerry said he was going to add 40,000 more troops??? How is he going to do that? It's all volunteer now, so is he going to somehow get 40,000 more people to join? Or is he secretly planning to start the draft again? Well, he won't get congress to start the draft again, and he said he wasn't going to, so I'd like to know just how he plans to get another 40,000 troops. Anyone have any ideas?

voting here for bush or kerry? so intresting.........
i give my vote to kerry as he has proven himself better than bush in debates.

It would be expected that Kerry would do better in debates as he was the team captain for his debate team in college. Bush has no such history; his only education in debates is from the last election.

A president shouldn't be chosen based only on how well he debates, you should research their beliefs and how they have conducted themselves in the past. Chose the person whose values most closely match your own -- that's the way to vote!

I vote for Kerry.
i missed the presidential debate, Can somebody tell me how it went. who won?

First Bush/Kerry debate. I fell asleep. But from what I saw, Kerry did a better job, which is to be expected given his background.
Cheney/Edwards debate. I fell asleep (again!). From what I saw, I think it was pretty close, with Edwards possibly doing a little better.
Second Bush/Kerry debate. Stayed awake for this one! This one was a good debate and both did well. I can't say either one did better then the other.

[IMG]http://www.otoons.com/politics/images/Bin_Laden.jpg[/IMG]

[IMG]http://www.muchosjuegos.net/downloads/osama.gif[/IMG]

Next: terrorist

Best thing to do with a scuffed CD is stroll off down to the local Video/DVD rental outlet. It's odds-on they'll have a polishing machine, and will be able to renovate it for you for a small fee. You can get small portable machines to polish them quite cheaply, but they don't do anywhere near as good a job as a professional one.

I recently purchased one of those do-it-yourself machines and it seemed to be adding scratches rather then removing them, so I put in a CD without any scratches and sure enough, it came out with scratches! Nothing deep enough to hurt anything, but kinda useless just the same. You should try to find a professional service rather then waste money on one of those machines.

After you fix these entries, pull the plug on your computer - do not shut it down properly. After you plug it back in, turn it on and post a new log to see if you're all clean.

What was the reason for this bit of advice?

...Uninstall spykiller from add remove programs...

Find out about spykiller here:
http://www.spywarewarrior.com/rogue_anti-spyware.htm
Put this in your favorites list so you can refer to it before getting any anti-spyware programs.

To help prevent further attacks, check crunchie's signature for 'How you got infected' and 'Spywareblaster.'

Next HJT log you post, close all browser windows before scanning and please post the entire log (showing HJT version, your OS, etc.).

There have been a lot of different problems being reported about Hotmail lately, I had the one you're referring to myself last week. I think it's because Hotmail is busy upgrading their service. It should resolve itself in a few days; till then, you can copy the link and paste it into your browser.

The only temp folder i could find was C:\Windows\Temp. I'm assuming there are more. And is there a way to clear my temp internet files without opening IE? I never plan to use it again. Also should I do everything in that order, and when I download sysclean should I run it before running hjt again?

Go to C:\documents and settings\{each individual user}\local settings and empty each Temp folder and Temporary Internet folder (this will clear it without opening IE), like this:
C:\documents and settings\john\local settings\temp\ <-- Remove everything inside this folder.

Order shouldn't matter, just run sysclean before you post your next log and allow it to clean up any bad files it finds... it may take a while.

And don't forget to update HJT.

APM -- Advanced Process Manipulation
(Available here: http://www.diamondcs.com.au/index.php?page=apm)

BHO -- Browser Helper Object
(More info. here: http://www.spywareinfo.com/bhos/)

I think SaN-DeeP was suggesting that you get PestPatrol and run it.

If you post your entire HJT log, someone may be able to assist you with it.

Hi Mike, you need to first update your hijackthis; there is an Update feature within it or you can get it here:
http://www.softpedia.com/progDownload/HijackThis-Download-5034.html

Next time you scan, close all windows first (you had IE open last time), and then post a new log.

Can you boot into Safe Mode with internet access and download HJT from there?

Also, while in Safe Mode:

Clean out all the Temp folders and Temporary Internet folders for all users on your computer. There could be something lurking in there that is executing. Do a search for *.tmp and delete everything found there as well.

Rerun SpyBot, Adaware, and your antivirus program from Safe Mode too.

If you can get on the web, try the free scans from TrendMicro and Panda as well.

Hey aulakh, welcome to DaniWeb! :) I hate to be the one to tell you this, but there is a notice at the top of this forum requesting that all hijackthis logs be posted in the Security forum as this is where the malware guru's hang out.

Before you post a log there, HJT should not be run from your desktop, it should be in a permanent folder (like c:\hjt\hijackthis.exe). Also, close all windows before scanning with HJT (you had IE open in your last scan).

Good luck!

Personally, I don't use the Task Scheduler; but the only thing I can think of that should be run from there is an antivirus program. It's better to get in a habit of running the other things manually once a week or so -- only takes a few minutes when done regularly (except the full Scandisk thing).

Does the message tell you what device file no longer exists?

Does anyone here know if SFC (System File Checker) can be run from DOS? If so, that could solve the problem.

As for backing up, there are devices available that would allow the hard drive to be removed from her old laptop and hooked up through a USB port on her new laptop. Don't know if it would be worth the expense though.

Hopefully someone else here will have some more helpful ideas.

How much memory does it have and what OS?

Assuming Windows XP, the first thing I would do is click on Start, point to All Programs, point to Startup and remove anything in that list that you don't need running every time Windows is started.

Next, have a look at this site for some system configuration ideas that may help:
http://www.blackviper.com/WinXP/servicecfg.htm

If you're still having trouble, try the tips in this thread:
http://daniweb.com/techtalkforums/thread5690.html
and this one:
http://daniweb.com/techtalkforums/thread9205.html

Other then that, it could just be insuffient RAM.

Before you uninstalled SP2 did you try this?
Go to the Control Panel and open Administrative Tools; double-click on Services, scroll down to Windows Installer, right-click on it and select Properties. Change Startup Type to Automatic. Reboot and try Defrag again.

If not, give it a try next time you decide to give SP2 a shot.

...most analysts, whether they admit it, or even realize it, tend to have a negative slant...

What Alex is referring to here is called bias or 'media spin' and you can read more about it here if you're interested:
http://blogs.salon.com/0002007/2004/05/25.html , but I can give a couple of examples that I myself posted here.

In my very first post in this thread (post #1), the word Democrat doesn't really need to be there. The meaning of the post would not change at all. But by having it there, it subtly shows that it was a Democrat that started the Draft rumor that many are blaming on Republicans.

In post #7, I could have just given the link to the WMD report without comment; this would have been unbiased. But by including the comments I did, I gave the impression that I didn't agree with the prior post.

The most blatent example of this is the recent Dan Rather scandal. Now, I'm not saying that Mr. Rather knew these documents were fraudulent, be he had staff members telling him they didn't look right. He should have done more to insure their accuracy before airing them; but he had an agenda he wanted to protray and these fraudulant documents fit it perfectly.

The reason I'm posting this thread is so everyone remembers to get all the facts for themselves, not to rely on any one else's "opinion" (especially not the 'News'!) because, whether intentional or …

If you haven't done so already, try the tips in this thread:
http://www.daniweb.com/techtalkforums/thread7507.html

If you haven't done so already, you should follow the recommendations in this thread:
http://www.daniweb.com/techtalkforums/thread5690.html

Whenever you scan with HJT, make all browser windows are closed.

I eliminated xoftspy, thanks for the information, I will start a new thread.
joal

You shouldn't need to start a new thead, post your log here. That way anyone reviewing your log will know what you've already done.

I'm not an expert, but I can help you get started. First of all, if you haven't already done so, you should follow the suggestions in this thread:
http://www.daniweb.com/techtalkforums/thread5690.html
(SpywareBlaster will help prevent this from happening again)

Empty all Temp and Temporary Internet folders for all users (if anything won't delete, try booting into Safe Mode and deleting them). Also do a search for *.tmp and delete all those as well.

Next, download sysclean from http://www.trendmicro.com/download/dcs.asp making sure to download and install the latest pattern file. There's a link to it at the lower left-hand colum of the page. Note that it will not work without the pattern file which must be unzipped into the same folder as sysclean.

Then, update your HJT, it has an Update feature within it or you can get it from here:
http://www.softpedia.com/progDownload/x-Download-5034.html

Close all windows, scan with HJT and have it fix the following entries:
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://searchmiracle.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchmiracle.com/sp.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchmiracle.com/sp.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.coolsearch.biz
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.coolsearch.biz
O16 - DPF: v2cab - http://searchmiracle.com/cab/v2cab.cab

Reboot, close all windows, scan with HJT and post a new log so one of the pro's can finish cleaning it up.

Mary, you should post a new log just to make sure everything is clean. Also, look in crunchie's signature for the link to SpywareBlaster to help keep from being reinfected.

Here's the thread Alex referred to:
http://www.daniweb.com/techtalkforums/thread5690.html

If you still have problems after following the suggestions, post an HJT log (explained in that thread) in the Security forum. Good luck!

There are a few sites that you cannot access with Firefox, in particular Windows Update, so you should keep IE on your system as a backup.

To clean up your system, follow the tips in this thread:
http://www.daniweb.com/techtalkforums/thread5690.html

To help protect your system, install SpywareBlaster (link located in that thread) and keep it updated.

Hey Brian, welcome to DaniWeb. You must not have noticed the anouncment at the top of this forum requesting that all hijackthis logs be posted in the Security forum.

Before you do that, however, go through the suggestions in this thread:
http://www.daniweb.com/techtalkforums/thread5690.html

If you still need to post an HJT log, first update it (it has an Update feature, or you can get it from here: http://www.softpedia.com/progDownload/x-Download-5034.html)
Also, you should not run HJT from a Temp folder or from your desktop, it should be in it's own permanent folder (like c:\hjt\hijackthis.exe)

Remember to post the new log in the Security forum! Good luck!

Unless I misunderstand the post, I don't think jerry wants to stop any tasks, I think he wants to know why they aren't doing what they are suppose to.

http://www.rio.com.br/animation/iconstory.htm

In regards to Bull Guard, it's not in this list of rogue anti-spyware (http://www.spywarewarrior.com/rogue_anti-spyware.htm), but I'd be leary of any software of this type that you have to pay for as there are several excellent ones available for free.

As for your problem, my first thoughts would be overheating, RAM (not enough or going bad), or virus/spyware/adware.

Have you cleaned inside your computer lately to ensure there is not a collection of dust inside? Be careful when doing this and wear a wrist strap to prevent damage via static electricity.

How much RAM do you have? Is your computer showing the same amount as what is actually installed? Right-click on My Computer, click on Properties, on the General tab the amount of RAM should be shown near the bottom.

To rid your system of intruders, follow the steps in this thread:
http://www.daniweb.com/techtalkforums/thread5690.html

If you need to post a HJT log (described in that thread), do so in the Security forum along with details of any problems you're still having.

Alex, I couldn't agree with you more. But I want everyone to keep in mind that this thread was started only to allay peoples fears of the Draft. I don't know if DaniWeb is the appropriate forum for a political debate, which is where this appears to be heading.

... If Bush hadn't screwed us up in the first place, then we'd never have this issue... ...There's also the fact that Afghanistan is going to Hell, so soon we'll need another 10,000 or so troops.

Screwed up how? You should read the WMD report before making a claim like that:
http://www.cia.gov/cia/reports/iraq_wmd_2004/

Also, Afghan is to soon hold it's first democratic elections.

Make sure your firewall is enabled (instructions here):
http://www.javacoolsoftware.com/spywareblaster.html

Oops, just noticed I had the wrong link in there :o
Should be this one:
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/enableicf.mspx

[IMG]http://www.geocities.com/quadropleen2/MoLTAR3c.jpg[/IMG]

[IMG]http://www.geocities.com/quadropleen2/MoLTAR1c.jpg[/IMG]

[IMG]http://www.geocities.com/quadropleen2/MoLTAR1.gif[/IMG]

New word: Haiku

That is weird how it comes and goes. It could have a bad connection, bad ribbon cable, or even a bad molex (power) connector. Try replacing the ribbon cable and connect it to a different molex.

To format, just right-click on the 'd' drive (that's the one you want to format, right?), and in the menu that drops down, select Format. Make sure you don't format the wrong drive!

There are a few more things:
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {C31DBDF4-0AEB-6D1B-2BE2-0D389CE0889B} - C:\WINDOWS\Lhwaujpv.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)

Are you having a problem or just looking for a check-up? Post another log so the pro's can verify you're clean. :)

Deonnanicole already covered the basics, but you should have a look at this thread as well for more tips:
http://www.daniweb.com/techtalkforums/thread5690.html