DMR 152 Wombat At Large Team Colleague

OK. No need to delve into it too deeply as long as you got it working- I was just curious...

DMR 152 Wombat At Large Team Colleague

I couldn't find anything about the 0C:04 error which relates to you particular situation. Does this occur with the same file every week it is sent, or is it just one of the weekly files that gives the error. If it's just one particular message I'd delete it, send it to her again, and see if the problem persisits.

DMR 152 Wombat At Large Team Colleague

Depends on exactly what you mean by domain name and where it was changed. If you mean that he changed the computer's name or the name of the workgroup it belongs to, that shouldn't have killed access to the Internet. Since the Mac address and probably the account name given by the ISP are now being "spoofed" by the router, changing computer or workgroup names on the LAN side of the router shouldn't prevent Net access.

Hmm... although, I'm assuming the router is performing NAT. It is, isn't it?

DMR 152 Wombat At Large Team Colleague

You're almost certainly right- adding the new partition has probably caused the partition information in grub's config file to become out of sync with the current partition layout.

Are your / (root) and boot filesystems on separate partitions, or is boot just a subdirectory on the / partition? If you can tell us that we can tell you exactly how to modify your grub config file to reflect the new partition layout. If you know exactly what the new layout is (that is: / is now on /dev/hda2, boot is now on /dev/hda3, etc.), that would help us a lot. If not though, don't sweat it; we can tell you how to determine that info if need be.

DMR 152 Wombat At Large Team Colleague

BTW- Because this is a "malware"-related issue, I'm moving this thread to our Security forum.

DMR 152 Wombat At Large Team Colleague

To begin with, follow the instructions crunchie gives in the following thread, and then post a fresh log:

http://www.daniweb.com/techtalkforums/showthread.php?p=38349#post38349

DMR 152 Wombat At Large Team Colleague

Specifically- check network-related settings and programs; the "Adapter" that the error is referring to is your network card.

DMR 152 Wombat At Large Team Colleague

Give us your detailed system specs please

The actual makes/models of your video and audio cards would be of particular help since you've said that the power-down happened during a gaming session.

DMR 152 Wombat At Large Team Colleague

In order for us to help you need to tell us the exact error message, and exactly when/where it pops up. Give us that information and we'll take it from there.

DMR 152 Wombat At Large Team Colleague

Good catch dmbfan819- let us know if the new RAM solves the problem; that could definitely be helpful information for others who might have similar problems.

DMR 152 Wombat At Large Team Colleague

Give us your detailed system specs please- this has been known to happen with certain hardware drivers Turtle Beach's Santa Cruz sound card for one).

Also- have you changed/added/removed any hardware or software just prior to this happening?

DMR 152 Wombat At Large Team Colleague

I'm moving this to the Security forum now- buckle your seatbelts...

DMR 152 Wombat At Large Team Colleague

The Internet connection won't work, or is it that the wireless connection between the computers and the router can't be established at all?

1. See if the LAN-side of things is working. The D-Link is probably acting as a DHCP server, using IPs in the 192.168.0.x range; the D-Link router's default Lan-side IP is 192.168.0.1.

- On both computers, open a DOS box and do:
ipconfig /all

Are the computers obtaining valid IP, DNS, gateway, etc. info from the router? If so, note each puter's IP addy.

2. Ping each puter's IP from the other. Ping the router's IP from both machines.

3. Try to ping an Internet site by URL and by IP:
ping www.google.com
ping 64.233.167.99

4. See if the WAN side of the router id getting proper IP info from the ISP by going to the router's setup utility (if possible, of course) and checking the status page.

DMR 152 Wombat At Large Team Colleague

Great- glad you got it.

Is everything OK now? If so, we'll mark this thread as solved.

DMR 152 Wombat At Large Team Colleague

Hey- what do you two think is, a real-time chat room?! :mrgreen:

DMR 152 Wombat At Large Team Colleague

It can take quite a while. If it does load successfully, try the Rescue option (instead of starting a new installation) and see if can automatically detect and repair the installation on your drive.

DMR 152 Wombat At Large Team Colleague

CWShredder is made by the same guy who makes HJT:

http://www.spywareinfo.com/~merijn/downloads.html

DMR 152 Wombat At Large Team Colleague

You need to be more clear in your description:

Top, sides, bottom of what kind of document?
Can you successfully print a test page from the printer's utility software?
When did this start happening?
What version of Windows are you using?
What drivers is the printer using?

DMR 152 Wombat At Large Team Colleague

I would not bother installing Windows XP on a 233MHz/128Mb system - it'd run like a 'dog' on a system with low specs like that one.

Agreed. If 2K is working well for you, stick with it.


In terms of your networking question- yes, 2K and XP will network together just fine.

DMR 152 Wombat At Large Team Colleague

In the main/general BIOS page, you might see the make/model number of your hard drive and CD-ROM. If not, look in other areas of the setup pages for something mentioning IDE devices. Different BIOSes display different information, so it's hard to tell you exactly where to look.

DMR 152 Wombat At Large Team Colleague

Ouch indeed!

Is the hard drive even being recognized by the BIOS? At the very least, does the BIOS indicate that it sees at least something on the IDE bus?

<Woops- Civilian beat me to it...>

DMR 152 Wombat At Large Team Colleague

Hi Melanie, welcome to TechTalk :)

Before we dig into the various possibilities, could you please tell us exactly what you have tried when you say that you've tried everything you can think of? By giving us as much detail as you can, we can get to the root of problem most quickly.

DMR 152 Wombat At Large Team Colleague

"but if you mean the bit that was entered when windows was installed it just says "a"

That is strange- "a" is definitely not a built-in Windows account. You are trying all of this while logged in as Administrator, right?

DMR 152 Wombat At Large Team Colleague

At the bottom of the Advanced tab in Internet Options there are a couple of options to use SSL 2.0 and 3.0, although by default those are checked, so that's probably not the issue.

Do you have any firewall software like Norton Internet Security running? If so, that might be blocking traffic on the port (443) used for secure web communications; disable any firewall software and see if that helps.

I'm assuming you're using Internet Explorer; do you have any other browser installed which you could try? If not, you might want to install Netscape, Opera, or Firefox and see if you experience the same error using one of those browsers.

DMR 152 Wombat At Large Team Colleague

Yeah, as I said- if it's a buit-in system account you won't be able to delete it. What's the exact account name?

DMR 152 Wombat At Large Team Colleague

Hopefully they are. Did removing them seem to help with the slowdown you were experiencing, or is that still an issue?

DMR 152 Wombat At Large Team Colleague

Alex younger Monster; me been eating cookie for much longer time. Want Monster to sing "If moon was cookie" song? Um, no, wait- Monster think that would be Bad Thing....

:D

DMR 152 Wombat At Large Team Colleague

The Pulse V5 entry is a reference to the AxPulse5.dll ActiveX component of the Pulse Player mutimedia player app from Pulse3d. You can delete it if you want; you probably just downloaded/viewed something that used the Pulse plug-in.

DMR 152 Wombat At Large Team Colleague

Is the xlogin.net.firms.com location at all familiar to you? If not, the errors might be the result of virus/spyware infection; error messages similar to yours seem to be linked to those nasties in some cases. I'd make sure your anti-virus program's virus definitions are absolutely up-to-date and run a full system scan. You might also want to read through many of threads in our Security forum to find out what a wide range of problems trojans, spyware, and other malicious programs can cause. Many of the threads in Security also describe how to install and use some well-recommended (and free) tools to detect and remove the pests.

DMR 152 Wombat At Large Team Colleague

Catweazle- I totally understand what you're saying, but when you're helping an end-user walk through a procedure or troubleshoot remotely, you need to see through the eyes of that user. If an action they need to perform appears on-screen as "Delete", then using any other name for that option but "Delete" is what will (as was the case here) cause the confusion.

DMR 152 Wombat At Large Team Colleague

And does it shut down normally while booted into safe mode?

DMR 152 Wombat At Large Team Colleague

Poll closed due to the totally non-technical topic.

DMR 152 Wombat At Large Team Colleague

Your log isn't complete; looks like you ran HJT in safe mode- Run it when booted into normal mode and post the resulting log.

Are you saying that you could find neither the websx folder nor the two files in safe mode? Did you set Windows Explorer's View options to display hidden and system files/folders?

DMR 152 Wombat At Large Team Colleague

It wouldn't matter then if the Local Area Connection is unplugged, as you're not using that connection. Don't remove the driver though-- it's not interfering.

Yes. The Local Area Connection will be the Ethernet (wired) network card in the laptop; the wireless connection will be a separate entry in your Network Connections setup.
Is there an entry in your Network Connections for "Wireless Network Connection:? If so, does its status show as "Enabled"?


I couldn't use because Local Area Connection is shown unpluged unless DSL line is connected.

That's a little unclear; could you please be more specific about what you mean by "unless DSL line is connected" and describe your whole Internet connection wiring configuration in more detail?

DMR 152 Wombat At Large Team Colleague

but when i ask the technician..he answered me.... "NOPE, there is no way it could"...

Your "technician" had no idea what he's talking about, and has probably never even touched a Linux box.
I've built plenty of computers that run both Windows and Linux. Heck, one of my test machines has 6 operating systems installed on it: 3 versions of Linux, Win 98, Win 2K, and Win XP Pro- and it's an old Pentium III 500!

In terms of the differences between XP and Linux, that's an extrememly broad question, and you'll get a wide variety of answers, not all of them accurate. Any version of Windows is quite different than any version of Linux/UNIX; asking about the differences between the two is like asking about the difference between a Walrus and a Petunia.


What I'd suggest is that you do a lot more reading and research to educate yourself about basic Linux concepts such as its file structure (what folders and files it uses and how they're layed out), the different desktop environments that are available (KDE, Gnome, etc.), some basic Linux commands, what Linux programs are similar to what you might use in Windows, and other areas like that. The Linux Documentation Project has a ton of online books, guides, HOT-TOs, and FAQs about many areas of the Linux environment. Some of the information is for intermediate to advanced users, but there's a lot there that can help a Linux newcomer …

DMR 152 Wombat At Large Team Colleague

The newest version wouldnt let me use it because I supposedly had an older version on IE.( I thought 6 was the newest)

Since you mentioned a lightning strike, you could definitely have bigger problems than a corrupted IE, but if not, here's some info from MS concerning the IE reinstall issue:

----------------------------------------------------------------------

When you try to reinstall the same version of Internet Explorer, you may receive the following error message:

"Setup has detected a newer version of Internet Explorer already installed on this system.
Setup cannot continue."

To avoid this error message and reinstall the same version of Internet Explorer, follow these steps:

  1. While you are logged on as an administrator, click Start, and then click Run.
  2. In the Open box, type regedit, and then click OK.
  3. Locate the appropriate registry subkey, right-click the IsInstalled (REG_DWORD) value, and then click Modify.

    To reinstall the Internet Explorer 6 browser component on Windows XP, use the following registry key:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}

    Change the value data from 1 to 0, and then click OK.

  4. Quit Registry Editor, and then install Internet Explorer 6.
DMR 152 Wombat At Large Team Colleague

Unfortunately, it sounds like the reinstall left your programs and data intact, but overwrote your Registry with a new "clean" Registry. When programs are first installed, they write information into the Registry which basically tells the operating system how to "handle" the programs. A fresh clean Registry contains none of this information, so your new Windows install is totally unaware of any of the old programs that might still exist on your drive.

If you don't have (or never had) the "Applications" disk that Dell usually ships its new computers, you're pretty much out of luck. :(

DMR 152 Wombat At Large Team Colleague

Virus and "Spyware" infections can cause those sorts of symptoms.

- If you currently have an anti-virus program, download the latest virus definitions, unplug your Internet connection, and run a full system scan. Of course, you'll need to be able to open your browser to do so- for Internet Explorer, type iexplore in the "Run..." dialog.

- If you don't have an A-V program, get one now; you're just asking for trouble if you don't.

- Read through the threads in our Security forum to find out how to get and install the recommended spyware detection/removal/prevention tools such as Ad Aware, SpyBot, HijackThis, SpywareBlaster, SpywareGaurd, etc. If you do find spyware problems and have any questions about them, please start a thread on the topic in the Security forum.

DMR 152 Wombat At Large Team Colleague

If you haven't wiped your original install yet, you can retrieve the key like so:

http://personal-computer-tutor.com/abc2/v15/vic15.htm

If you've already reformatted, you're probably out of luck. You can try giving Microsoft a call, but they'll probably charge you a fee for Win 9.x assistance.

DMR 152 Wombat At Large Team Colleague

Hi dmbfan819, welcome to TechTalk :)

We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there.

For a full description of our posting guidelines and general rules of conduct, please see this page:


http://www.daniweb.com/techtalkforu...b_faq#faq_rules

Thanks for understanding.

DMR 152 Wombat At Large Team Colleague

Still can't remove it.

You are logged on as Administrator while trying to do this, yes?
What's the name of the account? Is it just a normal user account that you created, or is it a built-in "system" account? If the later, you won't be able to delete it. Also, if the account you are trying to delete is logged on in a different session (via "fast user switching"), the delete won't work.


I'm confused about what you say about not deleting and instead "removing" ... I'm only given the option to delete the account.

In XP that is correct; the option that appears is named "Delete".

DMR 152 Wombat At Large Team Colleague

There could be a number of things which are causing that particular error. See if any of the solutions offered in the following links work for your particular problem:

http://www.google.com/search?hl=en&lr=&ie=UTF-8&q=%22internet+explorer%22+%22event+id+1000%22&btnG=Search

DMR 152 Wombat At Large Team Colleague

You're welcome, glad we could help :)

I think it's amazing that you share your time and knowledge so generously.

Actually, we only do it because the site admin bribes us with lots of chocolate chip cookies.

[img]http://www.stevewolfonline.com/Downloads/DMR/Visuals/CookieMonster.jpg[/img]

DMR 152 Wombat At Large Team Colleague

Glad we could help, and glad a learned a few new things along the way. :idea:

Now that you know how nasty this stuff can be, you want to do your best not to get infected again once you install the fresh system. Right after the installation, make sure to tighten up your system by getting your anti-virus and anti-spyware programs up and running, and then immediately installing all of the Microsoft patches, updates,bug fixes, etc.

DMR 152 Wombat At Large Team Colleague

HJT needs updating to 1.98 first.

Good catch crunchie- I missed that one.

DMR 152 Wombat At Large Team Colleague

No problem, xavierantony.

I understand that you were posting for the first and probably just weren't aware of our guidelines. I see that you've now posted your question in a new thread- thanks.

:)

DMR 152 Wombat At Large Team Colleague

Could you tell how you got it? Posting that information here could help others in the future.

Thanks.

DMR 152 Wombat At Large Team Colleague

Did you try step #2 of my above post? If so, did that give you the same error?

DMR 152 Wombat At Large Team Colleague

Hi eikrem,

Are you just posting this log for a final review, or are you still having problems? I ask because although I don't recognize all of the programs you're running, I don't see anything obviously nasty in the log.

DMR 152 Wombat At Large Team Colleague

Glad we could help, and I hope that was all of it.

Make sure to use Windows Update to keep current on MS critical fixes/security patches, and update and run your anti-virus/anti-swpyware programs regularly to keep yourself clean.

BTW- if you're sure your system is clean, you might want to re-enable System Restore again at this point. Feel free to post a new HJT log if you want us to give it a (hopefully) final review.