DMR 152 Wombat At Large Team Colleague

Smartbridge and some other applications are now commonly barfing such errors due to a conflict between the version of PSAPI.DLL that those applications installed and the newer version of PSAPI.DLL that is included with recent Windows updates.

Try the following:

* Double-click on your My Computer icon and navigate to the SmartBridge folder, which is usually a folder under the Program Files folder. Note that the actual folder name can vary- it may be named "Smartbridge", "Motive", a name related to your ISP, or something else.

* Find the PSAPI.DLL in that folder and rename it to something like PSAPIOLD.DLL

* Reboot the system

The program should find the new PSAPI.DLL (located in the \Windows\System32 directory) and function normally.

DMR 152 Wombat At Large Team Colleague

Recover console overview and usage:
http://www.kellys-korner-xp.com/win_xp_rec.htm

DMR 152 Wombat At Large Team Colleague

If you're using a USB keyboard, and the computer has a serial port for a traditional keyboard, buy a USB->Serial adapter. If you're currently using a serial keyboard, you've got other problems; give us more information if possible.

DMR 152 Wombat At Large Team Colleague

it won't go wireless?

Please give us more specific information to work with if you can:

* Is it just the Internet that you can't seem to connect to, or can you not even establish a wireless connection between the laptop and the Netgear?

* Exactly
what messages/errors (if any) do you get when you try to connect?

* Open your Network Connections folder and right-click on the wireless connection's icon. Can you see the Netgear's SSID (the default is "Netgear") when you choose "View Available Wireless Networks" from the resulting drop-down menu?

* Can you achieve a working Internet connection if you connect the laptop to the router with a CAT5 Ethernet cable instead of trying to use the wireless conneciton?

* DOes a wireless connection icon appear in the system tray at the right-hand side of your Task Bar? If so, right-click on that icon and click the "Status" menu option; tell us exactly what information the status window displays.

DMR 152 Wombat At Large Team Colleague

Please give us a few more details to work with:

* The make/model of computer and wireless card.
* The version of Windows.
* The make/model of the wireless router/access point/whatever that the wifi card is connecting to.
* What kind of wireless security (WEP, WPA, etc.), if any, you are using.
* Whether you are letting Windows handle the wifi card's configuration or are using the configuration utility software supplied with the wifi card.
* Whether the wifi card is configured to obtain your TCP/IP info (IP address, subnet mask, gateway IP, etc.) automatically via DHCP, or has been manually configured with that info.

DMR 152 Wombat At Large Team Colleague

HP/Compaq do ship many of their systems with a special (and usually hidden) "recovery partition". If I remember correctly, you can access the recovery partition and perform a "from-the-factory" reinstallation by hitting the F10 key just as the computer begins to boot up.

DMR 152 Wombat At Large Team Colleague

You can try running a "Repair" installation from the XP boot disk if you haven't tried that already. Instructions are here.

DMR 152 Wombat At Large Team Colleague

Let's start by identifying exactly what kind of "nasties" you have:

Our usual preliminary drill:

You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad.

1. Download the free HijackThis utility. Once downloaded, follow these instructions to install and run the program:

* Create a folder for HJT outside of any Temp/Temporary folders and move the HijackThis.exe file to that folder now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

* Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...".

* Save the log in the folder you created for HijackThis; the saved file will be named "hijackthis.log".


2. Download ATF-Cleaner and save it to convenient location.


3. Download the free version of AVG Anti-Spyware (formerly ewido). Save the installer file to your desktop or any convenient folder.

* Run the installer, accepting the default options. Run the program once installed, click on the Update icon at the top of the main AVG window, and allow the program to download the most current components.

* Close AVG once the updates have been downloaded.


4. Reboot …

DMR 152 Wombat At Large Team Colleague

The problem may indeed be user error, or it could have been caused by some random system fault/corruption as well. If not even the default Windows groups (Main, Accessories, Games, etc.) appear under the Start Menu, here are two things I can think of that you can try:

1. In Windows 98, the default locations for the items is C:\Windows\Start Menu, or (if there are multiple users) C:\Windows\Profiles\username\Start Menu. Search the entire computer to see if the folders/groups still exist, but have been moved:

* Configure your computer to display all files and folders:

  1. Close all programs so that you are at your desktop.
  2. Double-click on the My Computer icon.
  3. Select the View menu and then click Folder Options.
  4. After the new window appears select the View tab.
  5. Scroll down until you see the Show all files radio button and select it.
  6. Press the Apply button and then the OK button and close the My Computer window.

Do a full search of your C: drive to try to locate the missing Start Menu groups:

  1. From the Start menu, select Find, then Files or Folders...
  2. Make sure you are on Name & Location tab.
  3. In the Named: field, type the name of one of the default group items ("Accessories" would be a good choice, because there shouldn't be many other files with that name on your computer).
  4. Select [C:] from the Look in: drop-down box to search your entire hard drive for files of this …
DMR 152 Wombat At Large Team Colleague

They are deletec in the format process, then new ones are brought from the restore disc set.

Err??!! There was no format, and no- Temp files are not "brought from the restore disc set". Cookies, and Temp/Temporary Internet files are accumulated in the normal usage of your computer and in normal Web surfing. The files are not deleted unless you run Windows' Disk Cleanup utility, a similar third-party program such as ATF-Cleaner or CCleaner, or if you set your system's options as caperjack suggested. Once you do delete the files, they are, as caperjack said, gone- *Poof*.

System Restore (which is not to be confused with a reformat/reinstall) may restore some of those temporary files. Specifically, it restores those files which existed on the system at the time the restore point was saved. That is, it does not restore temp (or any other) files which were created after the date/time of the restore point.

DMR 152 Wombat At Large Team Colleague

Noton won't delete it because they don't want the liability of whatever else may be destroyed.

Um... noooo- Norton can't delete it because the dll is already loaded/running, and has protected itself in such a way that Norton can't terminate it, which is what Norton would need to do before it can delete the file. This is why linux gets the "access denied" error as well. Norton is kind of limited in that way.

linux,

You may have other malicious components in addition to the winrmc32.dll file, so, as raybay suggested, it would be a good idea to do a couple of the free online virus/spyware scans, as well as to install and run AVG's free anti-spyware program.
** Please do not install a second anti-virus program if Norton is installed, because two concurrently-running antivirus programs can conflict with each other and cause you problems.

A) Online virus scans:

BitDefender Free Online Virus Scan
http://www.bitdefender.com/scan/licence.php
Make sure you tick AutoClean under Scan Options.

Panda ActiveScan
http://www.pandasoftware.com/active...n_principal.htm
Make sure you tick Disinfect automatically under Scan Options.

Housecall at TrendMicro
http://housecall60.trendmicro.com/e...orp.asp?id=scan
Make sure you tick Auto Clean.

eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx


B) Our usual preliminary drill:


1. Download the free HijackThis utility. Once downloaded, follow these instructions to install and run the program:

* Create a folder for HJT outside of any Temp/Temporary …

DMR 152 Wombat At Large Team Colleague

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 6:04:29 PM 12/8/2006
+ Scan result:

Nothing found.

Ahhh- we like that! Glad we could help, Neil- great work on your part as well :)

Now that your logs are clean and the System32 box is gone, you'll want to re-enable SpyBot's Tea Timer again, as well as Windows' System Restore feature:

SpyBot: Click on the Tools menu on the right pane, click on Resident, and check Resident "Tea timer"(Protection of over-all system settings) active. Exit SpyBot once you have finished.

System Restore: Right-click on the My Computer icon on your desktop and choose the "Properties" option. In the System Properties window, click on the System Restore tab, uncheck the box next to the "Turn off System Restore" option, and hit the "OK" button. There will be a slight delay as Restore reactivates; the Properties window will automatically close when the operation is complete.

DMR 152 Wombat At Large Team Colleague

You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad.

1. Your Norton is useless if it expired that long ago, but you do need to have a good A-V program installed. Please uninstall Norton and download/install AVG antivirus 7.5. The program (and its updates) are entirely free for personal use, and in all honesty I've found AVG to be a better program than Norton in many ways.


2. Disable System Restore. Instructions for doing so (and an explanation of why you are doing it) are given here.


3. Your latest log indicates that you have not fully disabled SpyBot's Tea Timer feature. Please do that now; Tea Timer will block the fixes we are trying to perform!:

Open SpyBot, open the Tools menu on the right pane and click on Resident and uncheck Resident "Tea timer"(Protection of over-all system settings) active. Exit SpyBot once you have finished.


4. Please download the Killbox by Option^Explicit and save it to your desktop or another convenient folder.


5. Close all running instances of Internet Explorer.


6. Run another HijackThis scan and have it fix the following entries (note that not all of the entries may be present in Safe Mode). Close HijackThis once …

DMR 152 Wombat At Large Team Colleague

OK- Install the most current updates for Norton and run a full system scan with it. Have it fix everything it finds.

There is some hidden component of the PCShield infection which is recreating the other components after we delete them, but the next step will have to wait until tomorrow- it's 11:55 PM here, and I need to sleep.................

DMR 152 Wombat At Large Team Colleague

You're welcome- I'm glad we could help :)
Given that things are working now, there's no need to post the Event Viewer details as far as I can see.

However, if you want to make sure that there are no hidden "leftovers" from the prior infections (which were indicated in the "Trusted Range" log entries), you may want to download AVG's free anti-spyware program, or perform a few of these free online scans:

http://www.kaspersky.com/scanforvirus.html
http://www.pandasoftware.com/product..._principal.htm
http://housecall.trendmicro.com/
http://www.ravantivirus.com/scan/
http://www.bitdefender.com/scan/licence.php

DMR 152 Wombat At Large Team Colleague

1. Hmm... when/why did you uninstall Norton Antivirus? It was present in your first log, but not your latest. :?:


2. I think SpyBot's "Tea Timer" function may have gotten in the way of the fixes I last posted. Please do the following:

* Open SpyBot, open the Tools menu on the right pane and click on Resident and uncheck Resident "Tea timer"(Protection of over-all system settings) active. Exit SpyBot once you have finished.


* Open AVG anti-spyware and verify that it has the most current updates installed. Don't run a scan yet; just close the program once you've verified that it is current on its updates.


* Download the attached nrp64eFix.zip file and save it to your desktop.
* Right-click on the downloaded nrp64eFix.zip folder and choose the "Extract all..." option from the resulting drop-down menu. This will start Windows' Folder Extraction Wizard. Click the "Next" button to start the wizard.
* In the next window, verify that the target extraction folder is C:\Documents and Settings\Neil Patel\Desktop\nrp46eFix. If not, click on the "Browse" button, and in the destination selection box, hilight Desktop and then click "OK".
* Click "Next", and then click "Finished"; a window dispaying the newly-extracted nrp46eFix.bat file should open; don't run the file yet; just close the window.


* Reboot the computer into Safe Mode.


* Run another HijackThis scan and have it fix the following entries …

DMR 152 Wombat At Large Team Colleague

DMR,

Thanks for the help. The problem was that none of my shortcuts would work. I ran the LNK (Shortcut) File Association Fix that you suggested and everything now works great.

Great- glad that worked for you. :)

Do you know what caused this to start with?

There are a few different causes for the disassociation between .exe files and .lnk (shortcut) files, but there isn't any definitive answer to the problem. System crashes, system file corruption, ill-behaved program installations/uninstallations, and virus infection/removal are some of the various things that I've seen cause the problem.

Also, I appoligize for the duplicate post. It was not my intention to cause problems. This is my first time to post in a forum, and I thought that since I had trouble including my Hijack This log the 1st time I posted that it might get overlooked. Do I need to do something to show that this thread has been solved?

No problem with the double-posting. It's a common thing for new members to do; I was just giving you a heads-up.

As for marking the thread solved, yes- at the top left-hand side of your thread (directly above your username/avatar in your first post) there is a "Mark as Solved" link; click that to... um... well... it sort of explains itself, now doesn't it? :D

DMR 152 Wombat At Large Team Colleague

Whew! *Dani wipes brow*

lol. :lol:

DMR 152 Wombat At Large Team Colleague

nrp46e-

I haven't forgotten the main issue here, but I'm only on my lunch break right now and don't have time to post the next steps for you; I'll do that later today.

DMR 152 Wombat At Large Team Colleague

is viewpoint manager spyware?
viewpoint media player came preinstalled on my dell...

Viewpoint is rarely knowingly downloaded and installed by the end-user; it usually comes bundled as an add-on to other sofware installations, or comes pre-installed on computers from companies with whom Viewpoint and/or its affiliates have a marketing agreement. Dell, HP/Compaq, and AOL are three such companies.
Although their FAQ states that Viewpoint is:

"Required with installation of AOL, AIM, current versions of the Netscape web browser, certain Adobe products, and some retail computers sold today."

It is not required in those instances, although it may be needed for some AOL features/extras (although not for the main AOL programs themselves). There are obvoioulsy many other programs/plug-ins capable of playing web media content.

Viewpoint Manager is the automatic online update component of the Viewpoint media player software. While Viewpoint doesn't collect personally identifying information about you via ViewMgr.exe, their privacy policy states this:

Viewpoint collects limited anonymous information in connection with its search and advertising products that your browser makes available whenever you visit a website. This information includes your browser type, browser language, referrer URL, the date and time of your search query and your operating system. We may use one or more cookies that may uniquely identify your browser.

and this:

"We may share aggregated anonymous information with others in general compliance with industry standards. An example of aggregated data that we may share in this way includes the number …

DMR 152 Wombat At Large Team Colleague

Hi nrp46e- welcome to DaniWeb :)


You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad.


1. Open your Add/Remove Programs control panel and uninstall the following programs if you find them listed:

* all Wild Tangent software
* PCShield
* Viewpoint Manager


2. Download ATF-Cleaner and save it to convenient location.


3. Download the free version of AVG Anti-Spyware (formerly ewido). Save the installer file to your desktop or any convenient folder.

* Run the installer, accepting the default options. Run the program once installed, click on the Update icon at the top of the main AVG window, and allow the program to download the most current components.

* Close AVG once the updates have been downloaded.


4. Close all running instances of Internet Explorer.


5. Scan with HijackThis again, put a check in hte box to teh left of the following entries, and then click the "Fix checked" button. Close HijackThis once it completes its fixes:

O2 - BHO: (no name) - {B33359D5-C6BC-4CDE-C58E-582CB8AE1D24} - C:\WINDOWS\system32\jboexihc.dll
O4 - HKLM\..\Run: [] c:\WINDOWS\System32\
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [PCShield] regsvr32 /s C:\WINDOWS\system32\sfg.dll
O4 - HKCU\..\Run: [] c:\WINDOWS\System32\

DMR 152 Wombat At Large Team Colleague

If the state of your system allows:

You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad.


* Uninstall the BSecure popup blocker (at least temporarilly), as the following HJT log entry indicates that a component of that software is missing or corrupt:
O10 - Broken Internet access because of LSP provider 'inetcntrl.dll' missing


* Close all open instances of Internet Explorer!


* Run another HijackThis scan, put a check in the boxes to the left of the following entries, and then click the "Fix checked" button. Close HJT once it completes the fixes:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O3 - Toolbar: Bsecure Popup Blocker - {E0019445-4C1F-414D-A70E-AD80F231C584} - C:\WINDOWS\system32\InetCntrl\PopupKil\BsafeBHO.dll
O4 - HKLM\..\Run: [InetCntrl] C:\WINDOWS\system32\InetCntrl\InetCntrl.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O10 - Broken Internet access because of LSP provider 'inetcntrl.dll' missing
O15 - Trusted Zone: http://locator.cdn.imageservr.com
O15 - Trusted Zone: http://scanner.sysprotect.com
O15 - Trusted Zone: http://*.systemdoctor.com
O15 - Trusted Zone: http://www.winantivirus.com
O15 - Trusted …

DMR 152 Wombat At Large Team Colleague

Well- you don't have an excessive number of running processes or startup applications, so it might take a bit of experimentation to find out what's causing the lag a startup. I'd start by uninstalling the Google Toolbar, as that app has been problematic for some people. Beyond that, you can fire up msconfig and start selectively disabling other startup items to see if you can narrow down the culprit(s).

Although it won't make a difference in your startup issues, you can have HijackThis fix the following entry, which is left over from a McAfee installation:

O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

DMR 152 Wombat At Large Team Colleague

Outlook Express doensn't have a lot of firepower when it comes to filtering/spam blocking, but you can create a Mail Rule which filters based on the sender's name. One common trait I saw with my client's bogus emails was that the sender was always some variation of the usual "undeliverable" mail server auto-responder, so filtering out the sender names "Mailer-Daemon" and "Delivery subsystem" should block most (if not all) of the messages.

DMR 152 Wombat At Large Team Colleague

I downloaded a KEYGEN file for a norton program(for a friend) from this site GRR damn it..

Yeah, well... that's what you get for trying to steal software, now isn't it? :mrgreen:

The "Smitfraud" malware variants are the nastiest, and are responsible for the bogus "security alert" warnings. They require the use of a specific removal utility and procedure, which can be found here. Please perform the removal procedure carefully and fully.

For the rest of the malware, please perform the following steps:


You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad.

1. Download ATF-Cleaner and save it to convenient location.


2. Download the free version of AVG Anti-Spyware (formerly ewido). Save the installer file to your desktop or any convenient folder.

* Run the installer, accepting the default options. Run the program once installed, click on the Update icon at the top of the main AVG window, and allow the program to download the most current components.

* Close AVG once the updates have been downloaded.


3. Reboot into Safe Mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up).

* Double-click ATF-Cleaner.exe to run the program.
- Click the …

DMR 152 Wombat At Large Team Colleague

Someone suggested that I copy and past the Hijack This file since I couldn't upload it. Here it is.

Thanks for doing that- we actually prefer that members paste their logs directly into their posts; it makes it easier and faster for us to review the log that way.

1. I'd suggest uninstalling the SpyHunter software, as it has a history of questionable practices and mediocre (at best) performance. See this note for more info about that.

2. Your log's contents show nothing malicious, but if your problem is just a question of "broken" shortcut associations, a HJT scan wouldn't detect that kind of corruption. If this a problem with all/any shortcuts, try running the LNK (Shortcut) File Association Fix utility found on this site. If the problem only occurs with certain shortcuts, please tell us which programs the shortcuts are associated with.

DMR 152 Wombat At Large Team Colleague

or is someone else just using my email address to generate these

I just worked through this issue with one of my clients last week, and we found that the "Mailer Daemon", "Failed Delivery", etc. messages were indeed coming from the outside, and were forged. They were not the result of malicious activity on his computer; his system was 100% clean.

If you're getting enough of these incoming emails to bother you, your only choice is to filter them as Spam; the exact method of filtering will obviously depend on your particular mail software/setup. You shouldn't have the filter software automatically delete them though, as you will occasionally get valid "undeliverable" messages in response to emails which you have knowing sent from your computer.

DMR 152 Wombat At Large Team Colleague

As our Moderator crunchie posted earlier:

We ask that members not piggy-back questions on to a thread previously started by another member here in the Viruses, Spyware & other Nasties forum, (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforum..._faq#faq_rules


Because everyone's computer is configured slightly differently, and because there are several infections which display a bogus alert warning, every member requesting malware removal assistance should start a thread of their own.

To help us help you most quickly: in your first post in the thread you start, please include the log file of a HijackThis scan of your computer by following these directions:

* Download the (free) HijackThis utility:

* Once downloaded, create a new folder for HJT outside of any Temp/Temporary folders and move the HijackThis.exe file to that folder now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

* Run HijackThis, but do not …

DMR 152 Wombat At Large Team Colleague

An obvious question: if you've searched everywhere but can't find reference to the program, what (exactly) tells you that it is running?

DMR 152 Wombat At Large Team Colleague

O17 - HKLM\System\CCS\Services\Tcpip\..\{865CA45D-5084-4BCE-BE44-1339443D036C}: NameServer = 85.255.116.86,85.255.112.157
O17 - HKLM\System\CCS\Services\Tcpip\..\{9C9BEF85-E08A-4A52-B3BA-8073FCE88FB5}: NameServer = 85.255.116.86,85.255.112.157
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.86 85.255.112.157
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.86 85.255.112.157
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.86 85.255.112.157

The IP addresses listed in the above log entries point to rogue DNS servers, which are probably responsible for the redirect. The IP addresses are added by the [search]Wareout[/search] parasite.

1. Run another HijackThis scan, put a check in the boxes to the left of the above entries, and then click the "Fix checked" button. Close HijackThis after that.

2. Click on the "Run..." option under your Start menu, type "CMD" (omit the quotes) in the resulting "Open:" window, and hit OK. This will open a DOS window.
* At the DOS prompt, type the following command and then hit Enter:

ipconfig /flushdns

* Close the DOS window after the command completes.

3. Reboot the computer. If your computer is set to automatically obtain it's network configuration info via DHCP, you should be OK. If you have manually configured your network settings, you will have go back into your network card's TCP/IP properties and re-enter the correct DNS server IP addresses (as supplied by your Internet service provider).

DMR 152 Wombat At Large Team Colleague

By the way- welcome to DaniWeb :)

DMR 152 Wombat At Large Team Colleague

Your log shows nothing out of the ordinary. If you can give us more details of the problems you were having, we might be able to offer specific suggestions.

DMR 152 Wombat At Large Team Colleague

Disabling the Norton Protected Recycle Bin should delete the items Norton has stored in the Recycler folder:

1 . On the Windows desktop, right-click the Recycle Bin icon, and then click Properties.

2 . On the Global tab, click Use One Setting for All Drives.

3 . On the Recycle Bin tab, click Standard Recycle Bin.

4 . In the Title field, type the following text: Recycle Bin

5 . On the Norton Protection tab, select a drive, and then uncheck Enable Protection.

Repeat this step for each drive.

6. Select Also Empty Protected Files.

7 . Click OK, and then click OK again.

8 . Restart the computer. The "Nprotect" folder should then no longer exist, and you should be able to do your defrag.

If you want to continue using the Norton Protected Bin and Unerase, re-enable the Norton Protected Recycle Bin after you defrag.

DMR 152 Wombat At Large Team Colleague

Sorry to see ya go Dave. :sad:

Duuuude... that was harsh!!
(Luckily though, that was just my stunt double. You don't think my agent would let me do that scene, do 'ya?)

:mrgreen:

DMR 152 Wombat At Large Team Colleague

Take care, Christian- good luck with all!

DMR 152 Wombat At Large Team Colleague

You have number of nasties there.

Yes, and that being the case, on top of Chalky's suggestion to run Spyware Doctor, please also do the following:

You will need to close/quit all web browser programs and disconnect from the Internet for some of the following, so you should print out the following instructions or save them into a text file with Notepad.

1. Download ATF-Cleaner and save it to convenient location.


2. Download the free version of AVG Anti-Spyware (formerly ewido). Save the installer file to your desktop or any convenient folder.

* Run the installer, accepting the default options. Run the program once installed, click on the Update icon at the top of the main AVG window, and allow the program to download the most current components.

* Close AVG once the updates have been downloaded.


3. Reboot into Safe Mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up).

* Double-click ATF-Cleaner.exe to run the program.
- Click the Main menu option.
- Check the Select All box. (Uncheck cookies if you do not want them removed).
- Click the Empty Selected button.

If you use Firefox browser:

- Click the Firefox menu option.
- Check the Select All box. (Uncheck cookies if you do not want them removed).
- Click the Empty Selected button.

DMR 152 Wombat At Large Team Colleague

Now I use the term wombat to describe any cute gal in my vicinity

Ouch! Those slaps across the face are really gonna hurt.... :mrgreen:

DMR 152 Wombat At Large Team Colleague

You're welcome- help is why we're here (although I'll feel a heck of a lot better about this if we can actually get it working) :mrgreen:

Your IP addressing info is correct in terms of what should be compatible with the access point, so I'm not sure why you can't ping the beast. Let's see if the RP614 router even senses that the AP is attached to it. If it does, we will also be able to determine the IP address that the AP is using:

* Open your web browser and log in to the router by going to the following address: http://www.routerlogin.net

* Enter the username and password. The default user is admin; the default password is password.

* Under the Maintenance section/option, go to the Attached Devices section and see if your can determine which IP addresses are assigned to which devices (the AP should obviously be one of those devices.)

DMR 152 Wombat At Large Team Colleague

Hmm... it's starting to look like something might be squiffy with the Access Point, but let me check at least one more thing before we consider the possibility of a faulty AP. On the computer which you ran the ping command, please do the following:

Open a DOS window again and at the DOS prompt, type the following command and hit Enter. You won't see any result from the command, but when it completes, a second prompt with a flashing cursor will be displayed; close the DOS box once that happens:
ipconfig /all >"%userprofile%"\desktop\ipconfig.txt

The above command will have created a text file on you desktop named ipconfig.txt; double-click on the file to open it in Notepad, and then cut-n-paste the file's contents in your next post here.

DMR 152 Wombat At Large Team Colleague

But the original thread starter finished his project already...

Actually, I also missed that statement, buried in a sea of code posts as it was. :) I wouldn't have added any input to this thread at all if I'd seen that.

DMR 152 Wombat At Large Team Colleague

Koalas are cool, too; they have such a tough life- hang out in tree, munch vegitation, sleep. Lather, rinse, repeat. :)

DMR 152 Wombat At Large Team Colleague

Why? Is this likely to help the OP? If you want to offer a challenge, start a new thread, don't hijack someone else's thread

Yes- responses to a thread should be directly related to the original poster's question/problem. Tangential postings only sidetrack the issue.

Let's get back on-topic.

DMR 152 Wombat At Large Team Colleague

Hi adeeniola, welcome to DaniWeb.

As ~s.o.s~ has suggested, please give specific information regarding exactly what your project is and what help you need with it. If we have that information we can move your thread to the most suitable forum.

Thanks.

DMR 152 Wombat At Large Team Colleague

Yes- the instructions on Netgear's site did use the word "router", but they apply to any of their devices which have a reset switch.

From one of the computers that is directly wired to the router, can you sucessfully ping the default IP of the Access Point?:

* Click on the "Run..." option in your Start menu.
* In the "Open:" box of the resulting window, type "cmd" (omit the quotes) and hit Enter. This will bring up a DOS window.
* At the DOS prompt, type the following commands, and then hit Enter. You should get 4 positive replies, followed by some sumary information.

ping default_IP_address_of_WG602

DMR 152 Wombat At Large Team Colleague

Interesting stuff.


Root:under-active(13%)
Sacral:open(63%)
Navel:open(44%)
Heart:open(69%)
Throat:over-active(88%)
Third Eye:open(50%)
Crown:over-active(75%)

DMR 152 Wombat At Large Team Colleague

The previous user may have changed the default IP address or some other configuration settings; you should do a hard reset of the router if you haven't done so yet.

Here are the reset instructions from Netgear:

  1. Press the reset button on the back until the test light blinks. This takes about 10 seconds. (To avoid accidental resets, the small button is recessed. Use a pen or paperclip to access it.)
  2. Release the button.
  3. Wait for the router to reboot.
  4. Log in with the default password. If the router was not cleared, try these additional steps AFTER the router has finished rebooting.
  5. Unplug the router's power.
  6. Press and hold the reset button. While the button is held down, reconnect router's power.
  7. Continue to hold the reset button for 20 seconds after reconnecting the power.
  8. Wait for the router to reboot.
  9. Log in with the default password.
DMR 152 Wombat At Large Team Colleague

Hi n00bie, welcome to DaniWeb :)


It sounds as if you've already got both computers accessing the Internet through the router, so I'm assuming your basic TCP/IP configurations are good (and correct me if I'm wrong).

If you want to share files, printers, etc. between the two computers, the rest is pretty simple:

3. They should each be given a unique name and should be assigned to the same workgroup. You assign the computer name and workgroup name through the System control panel, and you will have to reboot each computer to make the settings take effect.

4. In a workgroup setup, you should create identical user accounts on each machine for all users who will be accessing the computers over the network. If you don't do this, you will be prompted to enter a valid username and password whenever you attempt to remotely connect to the computers.

5. For sharing, right-click on the folders, printer, etc. that you want to make accessible over the network and choose the "Sharing..." option. In the sharing setup, give the item a descriptive share-name and select the "Share this folder (or printer)" option.

DMR 152 Wombat At Large Team Colleague

Hello luism, welcome to DaniWeb :)

To begin with, please do the following:

Download the (free) HijackThis utility:

Once downloaded, follow these instructions to install and run the program:

* Create a folder for HJT outside of any Temp/Temporary folders and move the HijackThis.exe file to that folder now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

* Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...".

* Save the log in the folder you created for HijackThis; the saved file will be named "hijackthis.log". The log file will open in Windows Notepad once you save it; cut-n-paste the entire contents of the file from Notepad and post it here.

The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.

DMR 152 Wombat At Large Team Colleague

Hmmm- come to think of it, I'm not sure that Win 9x keeps a separate list of the "Open with..." programs in the Registry. That is, I think the list may be generated dynamically based on Registry information for the individual applications you have installed.

I've seen this tip posted in a few places, but I haven't tried it myself:

* Open Regedit and navigate to HKEY_CLASSES_ROOT\Applications.

* Under that key, locate and hilight the name of one of the programs which you do not want to appear in the "Open with..." list. (The name will be the ".exe" name of the main program's executable file)

* Right-click in the right-hand pane of the Registry Editor and choose New->String Value from the resulting menu.

* Name the new String value NoOpenWith. Leave the Data field of the new string value blank.

* Repeat the above for each program which you want to exclude from the "Open with..." list.

* Reboot the computer.

DMR 152 Wombat At Large Team Colleague

and squirrel? :)

lol.
Nyet- Only Moose; no squirrel. Have thought about Metal Munching Moon Mice, but hard to keep Mice fed.