DMR

The inability to access secure sites is usually the result of (non-malicious) problems with certain components of IE. Specifically, security-related .dll files become disassociated or "orphaned" in the Windows Registry, leaving IE "confused" as to how to handle secure sites and other authentication issues. There [I]is[/I] a standard fix which …

Hi Emilymomof3, [COLOR=Red]**[/COLOR] Your HJT log indicates that you are running both the McAfee [I]and[/I] Norton packages simultaneously! [COLOR=Red]**[/COLOR] Running more than one antivirus or firewall program is[I] definitely not advised, [/I]as conflicts between the two will occur. Of the two programs, choose one to keep (the choice is yours; …

Hi crazy girl, welcome to DaniWeb :) While startup and/or shutdown problems can definitely be caused by non-malicious problems, I [I]do[/I] see indications of at least one malware program in your HJT log. Before we begin cleaning though, there is one thing you need to take care of: [B] C:\DOCUME~1\STEPHA~1\LOCALS~1\Temp\~AceTemp\hijackthis\HijackThis.exe[/B] …

* Was Trend able to clean/disinfect the files? You obviously don't want to restore them if they're still infected. * What antivirus program do you have installed on your computer? Run a full system scan with [I]that[/I] program (after downloading the most current updates for the program, of course) and …

[quote=charlesworth82]I now have an exe file that is always in use when i try and delete it. [/quote]What is the exact name and location of that exe? I see no signs of infections in your log.

[quote=Cain]This appears to be a shameless plug as its hit two threads.. :mrgreen:[/quote]5 threads in total, actually. Care for a Spam sandwich? :cheesy:

Hello rab512003, You might want to read [URL="http://www.daniweb.com/techtalkforums/announcement165-29.html"]the announcement at the top of this forum's main page[/URL], which states, in part: [B]Please do not post support requests here. They'll just get lost in the madness, and they won't be targeted towards the experts who can help you out. [/B]

[quote=tallgirlbc2006]...an unexpected error has occured at procedure: modmain_fixotheroneitem(sltem=01-hosts:local127.0.0.1 error#75-path/file access error[/quote]That most likely indicates that the hosts file has its "read-only" attribute set, meaning that HijackThis cannot make changes to the file. The hosts file is located in the C:\Windows\System32\Drivers\etc folder, and is a plain text file which can be …

Glad you got rid of the symptoms, but there's a good chance that pieces of the infections are still present. There were signs of infection in your last HJT log; if you would like to post a new log for us to reveiw, please do.

[quote=KeithMcL]Does anyone know of software I can download or purchase that will allow me to create partitions for each OS and use a BootUp system to allow for easy switching between them?[/quote]There's no need for separate disk and boot management utilities; they are part of the Mandriva package (and most, …

Please give us some specifics, such as: * The exact version of Windows you are using. * The Web Browser you are using. * The type of Internet conneciton you have (Cable, DSL, etc.). * The details of your physical network configuration and the devices (modem, router, etc. ) involved.

Less elaborative verbiage and more succinct detail would be good for starters; the exact circumstances of your situation get a bit lost in your telling of the tale. :mrgreen: Seriously though: 1. Please clarify why exactly, when the problematic hard drive was installed in the other computer as a slave, …

Hi teksun, welcome to Daniweb :) Your primary issue is a "Spy Falcon" infection, a variant of the Smitfraud malware. Please do the following: [COLOR=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for much of the following, so you should print out these instructions …

Hi genusarmy, welcome to DaniWeb :) To begin with, please do the following: Download the (free) [URL="http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe"]HijackThis[/URL] utility: Once downloaded, follow these instructions to install and run the program: Create a folder for HJT outside of any Temp/Temporary folders and move the HijackThis.exe file to that folder now. A folder …

[quote=tayspen]I hate to say this, but it is pretty hard to read that log, with all those lines in it...[/quote][I]What[/I] lines, T? [IMG]http://www.stevewolfonline.com/Downloads/DMR/Visuals/dunno.gif[/IMG] :mrgreen:

[quote=mikeandike22][URL="http://www.daniweb.com/blogs/entry592.html"][/URL]This should probably be moved to the marketing and promotion forum under the site management section.[/quote]Right you are- done.

[quote=Elfrejole]my computer won't even recognize the second hard drive unless I partition it and reformat it.[/quote]How do you know that if Windows doesn't even see the drive and you haven't tried a reformat? * Does the BIOS still recognize the drive? * Does the physical drive appear in Device Manager? …

Hi cre, Please try to include as much information as possible in your posts; the more we know up front, the faster we can help you solve the problem. The "khalmnpr.exe" program is a part of Logitech's mouse/keyboard software, but I can't tell you much about the error, as you've …

Please give us the [I]full and exact [/I]text of the error message. Errors related to the kernel32.dll file are fairly common, but have different causes; knowing the exact error will help us narrow down the possibilities more quickly.

Hi John7435, First of all- Welcome to DaniWeb :) Second- Don't bump your posts. [IMG]http://www.stevewolfonline.com/Downloads/DMR/Visuals/nono.gif[/IMG] [COLOR=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for much of the following, so you should print out these instructions or save them into a text file with Notepad. …

Please give us the details of your Network/Internet connection and the hardware involved.

Congratulations- you've got Nasties... :sad: You have a couple of different infections indicated in your log, but nothing that we can't get rid of. Please start by doing the following: [COLOR=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for much of the following, so …

If the "MAC spoofing" doesn't do the trick, go into the router's internal configuration utility and check the WAN/Internet settings there. What info does the router report on its utility's status page?

[quote=ages_devil]hi everybody, i was wondering if tere is a tool to know [B]my[/B] router's type... it's not in my apartment.[/quote]Sounds to me like it isn't really your router. Are we "borrowing" Internet access, perhaps? :mrgreen:

I see no signs of infections in that log :)

Can you please tell us what symptoms you're experiencing? Aside from the unusual "O1 - Hosts:" entries, I see nothing suspicious in your log.

Rusty?! Oil thyself! :D The only obvious sign of nasties that I see in the log is: [B]O23 - Service: Microsoft Networks DN (msndn) - Unknown owner - C:\WINDOWS\msndn.exe (file missing) [/B]msndn.exe is a component of one of the SDBOT variants. ewido can detect and clean the file (and it …

Registering voltage [I]where? [/I]With [I]what[/I], exactly? Obviously if you didn't have any DC voltage coming from the power supply, you wouldn't have a working system, so could you please be more specifc about the problem?

What are the items that SpyBot found? Details [I]do[/I] help... :mrgreen:

There [I]could [/I]be any of a number of things going on, but if you'd like to post a HijackThis log for us to review, you can do that: Download the free [URL="http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe"]HijackThis[/URL] utility. Once downloaded, follow these instructions to install and run the program: Create a folder for HJT outside …

Can you give us more details on exactly what you mean by "manage", please? I'm assuming that you're looking for more functionality than just knowing whether or not the router is in a working state.

You Cut-N-Pasted the majority of your post from [URL="http://www.daniweb.com/techtalkforums/thread44141.html"]another member's post[/URL]. Does this mean that you are having [I]exactly[/I] the same problem? If not, please post the specific symptoms and error codes that [I]you[/I] are experiencing.

[quote=Mushy-pea]"Is it possible to install loads of operating systems on one PC (i.e. 10 to 20)?[/quote]Yes, definitely- the number of drives you can cram into a system is probably your biggest limitation. Different bootloader programs have a limit to the number of OSes they can handle individually, but that problem …

What you've described doesn't point to an obvious suspect. Swapping the positioning of the two routers in the connection scheme is the next thing I would try.

Hi trevari, welcome to DaniWeb :) 1. I've moved your thread to the appropriate forum. 2. The problem you describe is a symptom of the SpySheriff/Smitfraud group of infections; here's the specific fix for regaining full functionality of your desktop properties: Download the smitfraud.reg file by right-clicking on [url="http://www.bleepingcomputer.com/files/reg/smitfraud.reg"]this link[/url] …

1. Please describe the [I]exact[/I] symptoms you are experiencing in as much detail as possible. 2. I'm suspicious of the [B]C:\WINDOWS\SYSTEM32\ds3m32.dll[/B] file listed in your HijackThis log, but I can't find any information on the file at all (one of the reasons for my suspicion). Please go to [URL="http://virusscan.jotti.org/"]this site[/URL] …

Hi carminae7, Thanks for starting your own thread on this and submitting the HJT log; the log [I]does[/I] show a couple of signs of the "Chod" MSN worm. The worm uses random file and folder names, so I'd like to see if we can find out exactly where it lives …

Hi BTfreek- wlecome to DaniWeb :) You've definitely got the infection, but you are also using a [I]very[/I] old version of HijackThis. Please throw away the version you're currently using, download and run [URL="http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe"]the latest version[/URL], and post the log that the new version generates.

kylethedarkn- [quote=kylethedarkn]Ping.exe is a valid process[/quote]Not when it's running from a folder named " C:\WINDOWS\system32\CROSOF~1", it isn't. :mrgreen: The entire "CROSOF~1" folder is bogus. (Besides, the ping command normally sends only 4 ping requests and then quits; it's not a persistent process.) I've [I]got[/I] to log off and get some …

* Do you mean that the computer disconnects from the router, that the router and modem lose connection, or that you lose DSL signal/sync at the modem? * If the problem is between the computer and the router, and the computer connects to the router via wireless, connect the computer …

We have an entire 12-page thread dedicated to those beasties, please confine GMail inquires to that thread: [url]http://www.daniweb.com/techtalkforums/thread10502.html[/url]

[quote=kylethedarkn]THis log looks a little bit lacking...[/quote]Don't worry about SuperSam's posts; they're essentially the same thing that you were up to in this post: [url]http://www.daniweb.com/techtalkforums/thread49029.html[/url] :cheesy:

1. You need to take care of one thing before we can begin cleaning your system: [B]C:\Documents and Settings\bec\Local Settings\Temp\HijackThis.exe [/B]The log entry above indicates that you are running HijackThis from within a Temp/Temporary folder. Please do the following: Create a folder for HJT outside of any Temp/Temporary folders and …

You may find clues in the Event Viewer utility in your Administrative Tools control panel. Open the Viewer and look through your System and Application logs for entries flagged with "Error" or "Warning". Double-clicking on such an entry will open a properties window with more detailed information on the error.

There are still a few malicious items evident in your log. Please do the following: [COLOR=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for much of the following, so you should print out these instructions or save them into a text file with Notepad.[/COLOR] …

[QUOTE=gelgel]... i couldnt update the shredder geting the message ""Unable to retrieve CWShredder update information. the server might be unavailable" which might be because of my computer problem. ( its a version 1.59.1)[/QUOTE] That particular error is not part of your problem; it seems to be an ongoing problem on …

Ah- folks... what the devil is going on here? And more importantly perhaps: what kind of a "request" for help is [I]"Fix it."[/I]?

[quote=Scottg1989]Isnt this getting a bit off-topic now?[/quote]Ahh... [I]yeah[/I]; very much so. Let's get back on track, and leave this kind of thing:[QUOTE]Let's hash it out. Debate is good and it is fun.[/QUOTE]for the Geek's Lounge, please.

Give us more info to go on: - Does it only happen while trying to go to certain site? If so, what are those sites? - When did it start happening? - Had you made any changes/upgrades to IE around the time the problem started to occur? Please keep in …

Hello jgrieco, welcome to DaniWeb :) You have a version of the "Look2Me" infection; please do the following: Download L2MFix from one of these two locations: [url="http://www.atribune.org/downloads/l2mfix.exe"]http://www.atribune.org/downloads/l2mfix.exe[/url] [url="http://www.downloads.subratam.org/l2mfix.exe"]http://www.downloads.subratam.org/l2mfix.exe[/url] Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts. …