DMR 152 Wombat At Large Team Colleague

I run 98se for games, XP for some work related issues, and two different linux versions...

Sure, it's definitely "do-able". One of my systems is very happily running 98SE, XP, 2K, and three different flavors of Linux. And that box is just a lowly Pentium III 500...

If you have 12 gigs to spare on your existing system you have plenty of room to install and explore linux. Get a copy of Partition Magic...

Given that hard drives are pretty cheap, you might even want to add a second drive to dedicate to Linux. Putting Linux on a second drive will not only let you avoid the possible risks involved in repartitioning your current drive, but will make it less likely that a serious crash/error/corruption in one of the operating systems will hose both installations.


By the way: however you decide to configure the system for dual-booting, it's a good idea to create a separate FAT32-formatted partition to use as shared data storage. Windows cannot natively understand the Linux filesystem formats (ext2, ext3, reiserfs, etc.), but Linux can understand Windows formats. Linux fully supports reading from and writing to FAT/FAT32-formatted partitions; it also fully supports reading from NTFS partitions and has "experimental" support for NTFS writes (full and official NTFS support should not be far away).

By creating a FAT32 data partition, you give yourself a place to store any data that you might want access to regardless of which operating system you are currently booted …

DMR 152 Wombat At Large Team Colleague

i was informed that my house is out of limits

Groan... that's a bummer. I had the same problem when DSL was first rolled out in my area; even though I was just barely beyond the limit, they told me it was a no-go.

Unfortunately, until they decide to stick a mini-DSLAM somewhere between you and the central office, you're stuck. It took our local provider more than 4 years to get around to doing so. :(

Luckily though, digital cable rolled out well before that... :)

DMR 152 Wombat At Large Team Colleague

Were you definitely able to delete the "netdc.exe" file?

The following entry in your log shows that there's still at least a startup reference to it in your C:\Windows\system.ini file:

F2 - REG:system.ini: Shell=explorer.exe C:\WINDOWS\System32\netdc.exe

Have HJT fix the above entry again. If the entry shows up in subsequent HJT scans, open your system.ini file in Notepad and edit the "Shell=" line to read simply: Shell=explorer.exe

DMR 152 Wombat At Large Team Colleague

What happened to all my help!

Hang in, foolsfortune. We're all volunteers here, and we all have "real life" jobs, families, and other issues which can keep us from devoting every hour of our free time to this site.

DMR 152 Wombat At Large Team Colleague

Thanks.

A) sorry it took me so long to get back to this.

B) are you still having any problems, or do things seem to be OK now?

DMR 152 Wombat At Large Team Colleague

Sorry, but I can't find any useful info specific to the HA102 whatsoever. The reset procedure for netgear devices aren't all the same; try both methods I mentioned in my last post.

DMR 152 Wombat At Large Team Colleague

... and Upgrading Windows to WinXP Service Pack 2.

NOOOO!!!

It is absolutely not recommended that you upgrade to SP2 on a system which is currently infected with malware or is otherwise unstable! You stand a very good chance of magnifying your current problems if you do so.

DMR 152 Wombat At Large Team Colleague

Hello Clive, welcome to TechTalk. :)
Your log does not show any indication of outright infections, but there are a couple of things you should be aware concerning the use of HijackThis:


1. C:\Documents and Settings\Clive\Local Settings\Temp\HijackThis.exe

The log entry above indicates that you are running HJT from within a Temp/Temporary folder. Please do the following:

Create a folder outside of any Temp/Temporary folders for HJT and move it there now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

One of the normal steps in eliminating malicious programs is to entirely delete the contents of all Temp folders. Given that, if HijackThis (and other data that you care about) is living in those Temp folders, it will be erased along with everything else!
Temp/Temporary folders are just that- Temporary. They are not meant for permanent storage, as their contents are often delete in the course of troubleshooting, by running disk clean-up utilities, etc.


2. C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe

The log entries above indicate that you had at least 1 instance of your web browser as well as Windows Explorer running when you ran HijackThis.

Before fixing problems with HijackThis, you must make sure to close/quit ALL instances of your web browser! HijackThis cannot fully perform its fixes while browsers are running. It is also recommended that you close Windows Explorer as well.


There are many causes of login-related problems with …

DMR 152 Wombat At Large Team Colleague

1. Have HJT fix this one as well:

O16 - DPF: ConferenceRoom Java Client - http://pix.sexyads.net:8080/java/cr.cab


2. You have Security iGuard installed, which is a program of less than perfect reputation, to say the least. I would advise that you uninstall it now.

For more information on Security iGuard and other "bogus" anti-spyware products, please visit the following site:

http://www.spywarewarrior.com/rogue_anti-spyware.htm

DMR 152 Wombat At Large Team Colleague

1. Headphone outputs and mic/line inputs have different impedences and signal levels. Although you can usually get away with connecting a h/p out of a consumer audio device into the mic/line input of a sound card, it doesn't always work. If you have or can borrow a normal tape deck with true line-level outputs (as opposed to the boom box with only a headphone out), you might get better results by connecting the outputs of that type of deck to the line input of your soundcard. Of course, you'll need a stereo RCA->stereo mini-plug adaptor to do it, but those are cheap and easy to find.

2. However- you said that the tape sounds fine on your computer speakers when playing it in and when recording it. That's because in both cases you are listening to the source (input) to the sound card at that point, not the recorded/converted output file (yes- even in the recording phase). This might mean that the problem lies not with your wiring or connection scheme, but with your recording software. Give us more detail/info on that.

DMR 152 Wombat At Large Team Colleague

1. XP Home and Pro are slightly different beasts when it comes to networking/sharing, and getting the two versions to network correctly can be a pain sometimes. Which machine is running Home and which is running Pro? I'd assume that the ICS machine is the one running Pro, but you know what they say about assumptions....

2. When you enable ICS, Windows automatically enables the Windows firewall; make sure all/any firewalling software is entirely disabled during the course of your troubleshooting.

3. "Noone knows what the password or user name is supposed to be lol..."

The username and password should match those of a user account which exists on the machine you are trying to connect to. Remember: in a workgroup environment there's no centralized authentication (as there is in a domain); for the most trouble-free sharing, you should set up identical user accounts on both machines.

DMR 152 Wombat At Large Team Colleague

1. As far as the reset goes, you'll have to check the documentation on that particular model of AP; on some devices the reset requires that you hold the reset button in for a few seconds while the device is powered up, but others require that you hold the button as you power it up. Either way, resetting it is probably a good idea.

2. Disable WEP during the course of the troubleshoot; even if WEP isn't culprit, you'll remove the possibility.

3. I hate to say it, but even though wifi devices may say they're A/B/G compatible, that's definitely not always the case, especially if you start mixing devices made by different manufacturers.

I know the above isn't very helpful, but disable WEP, reset/reconfigure hte AP, get the firmware update for it if one exists, and let us know the results.

DMR 152 Wombat At Large Team Colleague

I recommend no-one uses Norton

Unfortunately, that advice is becoming more valid.

Norton used to make pretty good and reliable products, but it seems that all of the "features" they're adding in their new releases are bringing a lot of bugs/conflicts with them. Although in all fairness- McAfee's latest offerings suffer from the same sorts of problems.

DMR 152 Wombat At Large Team Colleague

I could'nt delete systr.dll though, not even in safemode.

Try unregistering the dll before deleting it:

- Open a DOS box by typing "cmd" (omit the quotes) in the "Run.." option under your Start button menu.

- At the command prompt in the DOS window, type the following command:

regsvr32 /u C:\WINDOWS\System32\systr.dll

Close the DOS window after the command command completes and see if you can then delete the file (you might have to reboot before you try the deletion).

DMR 152 Wombat At Large Team Colleague

Also punch blocks where the BOZO let the twists out of the ethernet cables, and we had some pairs over 12" long with no twists in them at all.

Ouch!!

Heck- at that point, the bozo should have saved you guys some money by just running silver satin telephone phone wire... :D

DMR 152 Wombat At Large Team Colleague

Glad you finally got it sorted. :)

Isn't it a wonderful thing to spend days troubleshooting your network only to find that it was the ISPs fault? I love it when they muck about and make changes without notifying their customers... Grrr!!

DMR 152 Wombat At Large Team Colleague

Glad to help :)


One important thing that I forgot to mention:

You said that hardware compatibilty and the availability of drivers can be issues with Linux, and you're right to a degree. To avoid any of those sorts of roadblocks, before you even choose a distro you should make a list of the exact makes/models/versions of your hardware components and verify that they have support under Linux.
Most, if not all, distros have some version of a Hardware Compatibility List (HCL) on their support sites, and it's highly advised that you consult those
before going ahead with your installation.

If you do have specific questions or problems as you start actually installing and using Linux (and I'm sure you will), the following two Linux support sites have knowledgeable members who are more than willing to help you out:

www.justlinux.com (both alc6379 and I work at this site)

www.linuxquestions.org

DMR 152 Wombat At Large Team Colleague

"Which distro should I start with?" questions are what start long and bloody Distro Wars. :D

Every Linux user will have an opinion as to which distro is "best", but in the end the choice is really yours. Since you specifically asked about distros that a Windows user could most easily adapt to though, I'd recommend SuSE, Fedora, or Mandrake (probably in that order, too). Those distros don't require as much user interaction to install and configure as a distro like Slackware does, and once installed their environment should feel pretty familiar to a Windows user. As a matter of fact, those distros often take hits from serious Linux users for making things too easy and being too "Windows-like", but if you're just statring out with Linux that's probably exactly what you want. Regardless of distro, once you've learned more about how Linux works, there's nothing stopping you from bypassing the automated setup wizards, graphical configuration utilities, etc. and getting your hands dirty by learing how to compile your own drivers or "hand-hack" your system files.

Thong_Inspector mentioned Knoppix and Mepis, which brings up a point that might be of interest to you: both of those distros are what are known as "Live CD" versions. That is, while they certainly can be installed to your hard drive just like any other operating system, they can also be run entirely from the installation disk, without touching your hard drive at all. This is a great feature for people who …

DMR 152 Wombat At Large Team Colleague

I have to log off for the night now, but please do check with your ISP in the mean time and see if that yields anything usefull.

I do have more questions, but as I said- I really do have to call it quits for the night; I'll be back online at some point tomorrow,

DMR 152 Wombat At Large Team Colleague

Unfortunately, USB cable/DSL modems as a whole can be a bit of a pain, and I've definitely found modems which use CAT5 Ethernet interfaces to be much less problematic. I don't think your model of modem has an Ethernet connection, but if it does, try connecting your computer to it that way instead of via USB (you may need to run the modem's install software again in the process).

DMR 152 Wombat At Large Team Colleague

Hello Hashim ,

First of all- welcome to TechTalk!

We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules


Thanks for understanding.

DMR 152 Wombat At Large Team Colleague

What you don't want to see is a hub in the cube, uplinked to a hub for the department, uplinked to a hub for the floor, uplinked to a hub in another closet, uplinked to the main computer room.

Hmm... sounds to me like you're saying that because you have seen it. :mrgreen:


Seriously though- all good advice there, and yes- "upstream" is a better term that "outside world". Hubs should be devices internal to your LAN; they should never be used as your gateway to any outside world, as they offer absolutely no protection in terms of firewalling, etc. for the computers connected to them.

DMR 152 Wombat At Large Team Colleague

As the problem has effected all of your LAN machines at the same time, I would first have a good look at the common elements upstream- the ICS machine, any hardware firewall/router, etc.

Does the ICS machine itself also exhibit the same problems?

DMR 152 Wombat At Large Team Colleague

Please download HijackThis using the link in my sig below.

Once you've downloaded HJT, create a folder outside of any Temp/Temporary folders for it and move it there now; a folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do. Unzip the "hijackthis.zip" download to that folder and then run the resulting hijackthis.exe program.

When you run HijackThis, do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...". Save the log in the folder you created for HiajckThis, open the log in Windows Notepad, and cut-n-paste the entire contents of the log here. The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.

DMR 152 Wombat At Large Team Colleague

i would like to have something that is similar to function(don't care about L&F) to windows.

Unlike Windows, almost all Linux distros come with two graphical environments (KDE and Gnome), both of which can be configured to give you an enviroment that is functionaly very similar to Windows. There are other choices available as well, but KDE and Gnome are the most prevalent.
Additionally, you can install more than one environment and switch between them until you decide which one you prefer.

Obviously though, the under-the-hood workings of Linux and Windows are quite different, so you would have to be more specific about your needs/concerns in order for us to more exactly answer your question.

For example when you buy windows you get internet explorer. Is there a distro that i can get a web browser bundled together with it. Another example is like when you get windows you also get windows explorer where you can double click on the programs to run them. Is there a linux distro with such a function??

Again- unlike Windows, Linux don't just give you one web browser and one file manager; you have choices.

Netscape, Mozilla, FireFox, Galeon, and Konqueror are the most commonly-used web browsers in "Linux Land". There are others which you can freely download as well, but distros most often come with some combination of the above five browsers. In terms of file managers, both KDE and Gnome have their own built-in managers, which operate almost exactly …

DMR 152 Wombat At Large Team Colleague

should I run hijackthis on a client computer or the main one? Will it make any difference?

HijackThis can only interrogate and fix the computer that it is running on (and in the case of multi-boot systems, it only works within the currently-booted environment). Given that, and the fact that you said the problem was network-wide, I'd run HJT on the ICS computer first.

Give us more history on the problem, though:

- When did it start?

- Had you made any software adds/removes/changes at around that time?

- Did all of the machines start exhibiting the problem at the same time, or was it something that seemed to propagate through the network over a period of time?

- What are the steps you've taken so far to try to rectify the problem?


There are a few things that can cause problems with secure sites; not all of them are related to malicious programs, and not all of them will be indicated in a HijackThis log. The threads in the following link have many suggestions and possible fixes for secure-site related problems. Give the suggestions a try and let us know the results:

http://www.daniweb.com/techtalkforums/search.php?searchid=333240

DMR 152 Wombat At Large Team Colleague

Once again- glad we could help you out flowerman :)

DMR 152 Wombat At Large Team Colleague

You're welcome; happy surfing! :)

DMR 152 Wombat At Large Team Colleague

Congratulations- that's a squeaky-clean log. :)

Those WinTools/Toolbar references in your HJT log were most likely just leftover loose ends; you probably successfully deleted the actual folders at some earlier point in our troubleshooting.

I can't remember if I suggested this before, but you should download and install SpywareBlaster and SpywareGuard from the link in my sig below. Both of those programs will give you added protection against hijackers, unwanted toolbars, and other malicious programs that can graft themselves on to Internet Explorer.

DMR 152 Wombat At Large Team Colleague

I have to log off for the night now, but please:

Don't touch that system until one of us can get back to this !!!!

You might loose everything if you muck with it at all.

DMR 152 Wombat At Large Team Colleague

Thanks for posting the additional info; it helps.

However, I have to log off for the night now as it's dinner time in my end of the world. I'll be back online here tomorrow early to mid afternoon (PST) tomorrow and will respornd then.

DMR 152 Wombat At Large Team Colleague

OK- since you've tried the general suggestions I gave you, I can't think of anything else off the top of my head right now.

Is this the only site with which you're having this access problem?

DMR 152 Wombat At Large Team Colleague

OK- to see all files in 98SE, open Explorer and:


  1. Select the View menu and then click Folder Options.
  2. After the new window appears select the View tab.
  3. Scroll down until you see the Show all files radio button and select it.
  4. Press the Apply button and then the OK button

config.sys should then be visible in your C:\ directory, and you will be able to open it in Windows Notepad. From there, just hilight all of the contents of the file and chose Copy from the Edit menu and paste the results into a new post in this thread.

Do not make any edits/changes to config.sys while you have it open in Notepad!! If you accidentally do change something, choose "No" when Notepad asks you if you want to save the changes.

DMR 152 Wombat At Large Team Colleague

1. What's the name/URL of the page that your homepage keeps trying to set itself to?

2. You said: "each time I try to change my home page and browser settings , it goes to a regisrty key...". Do you mean that this is happening when you're trying to make those changes in your Internet Options control panel?? If so, I've never seen the behaviour that you describe (being taken to a registry key).

3. Download and install SpywareBlaster and SpywareGuard using the link in my sig below. SpywareGuard actively monitors your system and alerts you when a program does try to make changes to your home page and other settings; SpywareBlaster will prevent many malicious programs which do things like that from installing themselves in the first place.

DMR 152 Wombat At Large Team Colleague

sorry to sound like a goof but how do i do that?

Config.sys is a hidden system file that lives in your main C:\ folder. In order to see it, you have to go into Windows Explorer's View options and set them to show hidden/system files and folders. Config.sys is just a simple text file that contains some command lines, so once you make the file visible, you can open it in Notepad and cut-n-paste the contents of the file here.

What version of Windows are you using? I'm asking for two reasons:

a) the way you make hidden files visible is different in Win 2000/XP than it is in 95/98/ME.

b) You've posted your question in our "Spyware" forum, which probably isn't the right forum for the particular problem you're having. When I know which version of Windows you use, I'll move it to a more appropriate forum.

DMR 152 Wombat At Large Team Colleague

1. C:\Program Files\Internet Explorer\iexplore.exe

The log entry above indicates that you had at least 1 instance of Internet Explorer running when you ran HijackThis.
Before fixing problems with HijackThis, you must make sure to close/quit ALL instances of your web browser! HijackThis cannot fully perform its fixes while browsers are running.


2. Once you are sure all browsers are closed:

- Run HijackThis again and have it fix the O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) entry.
- After HJT finishes that fix, open Windows explorer and delete the entire C:\ProgramFiles\WinPcap folder.

- Empty your Recycle Bin.

DMR 152 Wombat At Large Team Colleague

If it's just that site that you're having problems reaching, the root cause isn't likely to lie in your cabling or network devices. Here are a few suggestions:

1. The site could be experiencing intermittent problems, server overloads, etc. There's nothing you can do about that.


2. Try flushing your Cookie, Temp and Temporary Internet Files folders, and cache folders.

A) In Mozilla:
- Go to Edit->Preferences->Privacy and Security->Cookies. Open the Cookie Manager and click "Remove all cookies".

- Go to Edit->Preferences->Advanced->Cache. Click "Clear Cache".

B) Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up)

- Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files" and "Hide extentions for known file types".

- For every user account listed under C:\Documents and Settings, delete the entire contents of these folders (but not the folders themselves):

Important: One of the normal steps in eliminating malicious programs is to entirely delete the contents of all Temp folders. Given that, if any data that you care about is living in those Temp folders, you need to move it to a safe location now, or it will be erased along with everything else!


1. Local Settings\Temp
2. Cookies
3. History
4. Local Settings\Temporary Internet Files\Content.IE5

- …

DMR 152 Wombat At Large Team Colleague

Everyone's config.sys file can vary depending on their exact system configuration. Post the contents of your config.sys file here so that we can see exactly what's going on.

DMR 152 Wombat At Large Team Colleague

If you're using XP, click on the "Run.." option in your Start and in the resulting "Open:" box, type the following and then hit Enter:

msconfig

This will open the System Configuration Utility. In the General tab of the utility, make sure the "Normal Startup" option is checked; in the Boot.ini tab, make sure the "Safeboot" option is unchecked.

Another method would be to open boot.ini in Notepad and manually edit out the /safeboot option.

DMR 152 Wombat At Large Team Colleague

I've installed all of the updates for IE and I'm running 6.0.26.

Judging from the header information in your log, neither your IE nor your version of Windows itself are current.

I wouldn't suggest upgrading to XP SP2 right now, but you should at least install SP1 and all related critical fixes. Also, the current IE is 6.00.2800.1106.

Although there's nothing else obviously "nasty" in your HJT log, the following entry worries me a bit. Can you tell us more about this:

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

WinPcap is a network packet-capturing utility; in other words, a network "sniffer". If you haven't knowing installed WinPcap or some network analysis utility (such as Ethereal) which uses WinPcap, I'd get rid of it ASAP. If you can remove it through your Add/Remove Programs control panel, do so. If you can't remove it that way, or if you knowing installed it, let us know.

DMR 152 Wombat At Large Team Colleague

- Is the PC connected directly to the modem, or are you going through a router?

- If the PC is directly connected, is it an Ethernet connection or USB?

-

It is telling me that there is no signal

What exactly is telling you there's no signal; the configuration software that your ISP sent you, or some other utility? What is the exact message you're getting?

- The modem should have an indicator light labelled "LAN", "Ethernet", or somesuch. Have you ever seen that light illuminated?

- You say the modem's "DSL" light stopped flashing. Is it now lit solidly (a good thing), or has it turned off (a bad thing)?

- Have you tried connecting the PC and modem with a different cable?

DMR 152 Wombat At Large Team Colleague

First of all, you need to be more specific in your terminology and your description of your overall network setup.

A router and a hub are totally different devices. Give us the exact make/model of the wired hub/router that you are currently using, as well as the make/model of the wireless device you're trying to replace it with.

DMR 152 Wombat At Large Team Colleague

1. All of the anti-virus programs I've dealt with (including McAffe and Norton) "play nice" with Ad Aware, SpyBot, etc.; you shouldn't have a problem with that.

2. In terms of which AV program to use, you'll get many different opinions on that based on everyone's (differing) experiences with the many A-V and firewall products available. In the end, you'll have to make that choice yourself.

I've been working with the Norton and McAfee products for many years, and my experiences have been mixed with each. Neither is perfect, and the newer versions of both products have caused more headaches for my clients than earlier versions ever did. I attribute that (at least partially) to fact that the older versions did one thing, and did that pretty well: they detected and removed viruses. The newer packages, however, now include "spyware" detection, firewalls, anti-spam features, privacy features, etc. As with all software packages, the more features you try to bundle in, the more likely it is that conflicts and bugs will arise. Your mileage may vary though, and since you already have a copy of both products, you can "test drive" each one on and see if you're happy with either.

Once you do decide on an anti-vius product, install that one only. You can run into problems if you run two different AV programs on your machine at the same time- they can "step on each other's toes" so to speak.

3. A firewall is a …

DMR 152 Wombat At Large Team Colleague

Your log is clean, joal.

Was HJT able to fix the "O4 - HKLM\..\RunServicesOnce: [washindex]..."entry?

DMR 152 Wombat At Large Team Colleague

That's pretty odd- IE can chew up a lot of memory, but not usually more than 15 or 20 Megs; it also doesn't usually tax the CPU that much.

What actual numbers are you seeing for mem and cpu usage?

DMR 152 Wombat At Large Team Colleague

http://websearch.drsnsrch.com/sidesearch.cgi?id= is this somthing you use I don't know if its a tool or spyware?

It's a hijack, or the leftovers of a hijack.


mookie5381,

1. Run HijackThis and have it fix:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: DLMaxObj Class - {00000000-59D4-4008-9058-080011001200} - C:\WINDOWS\DLMAX.DLL


2. It looks like SpyBot got damaged and/or removed somewhere in this process; you should download a fresh copy of the program and reinstall it.

While you're at it, download and install SpywareBlaster and SpywareGuard as well (links are in my sig below). The two programs will give you a good measure of protection against hijackers, etc. which exploit Active X and other security weaknesses in Internet Explorer and Windows.


3. Run HJT again and see if the "websearch" entries return. Let us know if they do.

DMR 152 Wombat At Large Team Colleague

this is what it says when i check technical info

C:\DOCUME~1\Mark\LOCALS~1\Temp\WER71b0.dir00\svchost.exe.mdmp

C:\DOCUME~1\Mark\LOCALS~1\Temp\WER71b0.dir00\appcompat.txt

Hi Costa,

That's only the top portion of the info I was looking for; below those lines there should be more information which looks similar to:

szAppName : svchost.exe szAppVer : 5.1.2600.2180 szModName : unknown
szModVer : 0.0.0.0 offset : 00000000

That part of the info is the part which could tell us the exact name of the module/file which was being affected.

So is this site here for people to learn if so i would be happy to learn and maybe help people in future

Yes- we're here not only to help people solve their immediate problems, but also to help them learn about their computers so that they can help themselves (and perhaps even others) in the future.

I would guess that most of us who volunteer our help in technical support forums probably first came to the forums because we were looking for answers to problems ouselves. Now that we've learned more, we return the favor by helping others. :)

DMR 152 Wombat At Large Team Colleague

Also if it was the power supply if it didn't have enough power to run the disc... woudn't the computer shut down or something?

More likely than not, yes. However, if your supply is "on the hairy edge" of being able to support everything you have installed in your system, all sorts of strange things can happen.

If you search the web you can find sites which list the average power consumed by different components such as drives, PCI cards, memory modules, etc., and from that derive a good estimate of how large (wattage-wise) your power supply should be.

Basically though- if you've stuffed your system to the gills with components, the average 250W to 350W power supply isn't going to be able to pull the load. Your power supply should, at the very least, be able to supply about 20% or more of the wattage that the combined average load that your components will draw.

DMR 152 Wombat At Large Team Colleague

OK- let me search the knowledgebases for the error codes/numbers you posted. I'll repost here once I get more info.

DMR 152 Wombat At Large Team Colleague

I had a feeling this was the response I was going to get!...

Sorry, I know it's a bummer, but that's the real deal. I'm not going give someone a piece of "Band-Aid" advice for a problem that really requires surgery. :mrgreen: