DMR 152 Wombat At Large Team Colleague

...before receiving an error message about checking web settings

Please give us the exact text of the error message; the more specifics we have, the faster we'll be able to help you.

Is this correct going via av.rds.yahoo.com??

Possibly; av.rds.yahoo.com is a valid Yahoo address, so it may or may not be part of your problem. Again, some specifics will help:

- Give us the URLs of some of the sites that exhibit the problem.

- Do you have anything Yahoo-related in your browser setup (the Yahoo tool bar, using Yahoo as your home page, etc.), or does your Internet Service Provider have some sort of affiliation with Yahoo?

DMR 152 Wombat At Large Team Colleague

Is it just that site that you're having trouble viewing, and is hte problem just with one computer?

If so, try flushing out your Temp and Temporary Internet Files folders. You can empty your Temporary Internet Files folder from the Internet Options control panel, but I prefer to delete everything manually just to make sure I've completely flushed things out:

- Reboot into safe mode (you get to the safe mode boot option by hitting the F8 key as your computer is starting up)

- Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files".

- For every user account listed under C:\Documents and Settings, delete the entire contents of these folders:

1. Local Settings\Temp
2. Cookies
3. History
4. Local Settings\Temporary Internet Files\Content.IE5

- Delete the entire content of your C:\Windows\Temp folder (in Win XP) or C:\WINNT\Temp folder (in Win 2000)

Note- If you get any messages concerning the deletion of system files such as desktop.ini or index.dat, just choose to delete those files; they'll be automatically regenerated by Windows if needed. Windows will allow you to delete the versions of those files which exist in sub-folders within the main Temp/Temorary folders, but might not let you delete the versions of those files that exist in the main Temp folders themselves; this is normal and OK.


- Empty your Recycle …

DMR 152 Wombat At Large Team Colleague

The word "conflict" in PCI device error messages refers to incorrectly assigned PCI resources. The problem usually lies with the system assigning a single Interrupt Request (IRQ) line or I/O address space to two different devices at the same time. Although current PCI specifications require that drivers be able to handle "shared" IRQs, it doesn't always work out that way.


If that's what is happening on your system, here are three things you can do to try to eliminate the conflict(s):

1. If the devices are actual PCI cards (that is, not built into the motherboard) you can put one of the devices into a different physical PCI slot; doing so can force the system to reallocate IRQ and I/O resources at the next boot-up. If your video card is an AGP card, the possibility of an IRQ conflict still exists, because the AGP slot is usually hard-wired to share an IRQ line with one of the PCI slots (exactly which slot is shared depends on the model of motherboard).

2. If your BIOS' setup program has a setting to enable/disable Plug-N-Play (PNP), sometimes toggling to the alternate setting will clear things up.

3. In Device Manager, you can manually configure resources for each device, although this method can take a bit of "trial and error" to find a non-conflicting configuration.

DMR 152 Wombat At Large Team Colleague

Is dis gonna affect the effectiveness of the rest?

It should be OK; not all of the .dlls listed in antioed's solution will be present on every Windows installation. In the particular case of msjava.dll, if you have Sun's version of Java installed (instead of Microsoft's), msjava.dll probably isn't registered on your system.

DMR 152 Wombat At Large Team Colleague

Are eBay and MS the only sites you can't reach, or do you have trouble with some other sites as well?

Are the exact sites that you can't access the same across all browsers?

DMR 152 Wombat At Large Team Colleague

I tried SpyBot before, I prefer it.

SpyBot and Ad Aware should both be used. One isn't a replacement for the other, but a compliment to the other, and one of them will often catch things the other misses. You should run them consecutively (order doesn't matter), rebooting after each has finished its fixes.

As for HijackThis, it is very helpful, but it can be dangerous if not used correctly. HijackThis doesn't really differentiate between the good and the bad; it simply reports the current state of certain areas of your system which are known to be vulnerable to malicious exploits. In other words, it's up to you to know which entries are valid, and which entries indicate malicious infections. If you have HJT "fix" a setting which is actually valid, you can seriously cripple parts of Windows.

DMR 152 Wombat At Large Team Colleague

- Is the problem limited to Firefox, or does it happen with other browsers as well?

- What exact version of Firefox are you using?


The error you're encountering seems to be fairly well-reported in Firefox, but this is about all the Mozilla support site has to say about it:

Error message: The document contains no data. This could be due to a problem with the cache. Solutions:


  • Clear your cache - Edit -> Preferences -> Advanced -> Cache (Tools -> Options -> Privacy -> Cache on Firefox)
  • If you are using the software Peer Guardian, switch it off.
  • Try disabling any firewall or proxy server you have, if you can. If the problem is resolved, it's probably because of the firewall or proxy.

Cache corruption seems to be one of the main causes for the error, which isn't too surprising. What is surprising is that there isn't an option to have Firefox automatically flush the cache when you close the program (or at some chosen interval)...

DMR 152 Wombat At Large Team Colleague

The error you're getting is not specific to Samba; it's a Windows network error message.

1. Temporarily disable any firewall software that you might have running on the XP box; XP's built-in firewall as well as third-party firewalls from Norton, McAfee, Zone Alarm, etc. can all cause problems such as you describe. If you are using a third-party firewall, make sure to totally shut it down; sometimes simply exiting the program or clicking its "Disable" option doesn't stop the firewall entirely.

2. Check this Microsoft knowledgebase article: http://support.microsoft.com/?kbid=318030

3. Also look at the suggestions given for similar issues involving "network path was not found" errors:

http://www.google.com/search?hl=en&q=%22The+network+path+was+not+found%22&btnG=Google+Search

DMR 152 Wombat At Large Team Colleague

Your log is clean; there's nothing there at all to indicate that a virus/spyware/etc infection is the cause of the problem.

Since there's no indication of "foul play" in the log and you said that Norton, SpyBot, etc. found nothing, I'll move this thread to the networking forum and we'll take it from there...

DMR 152 Wombat At Large Team Colleague

1.

Logfile of HijackThis v1.97.7

You somehow downloaded/ran an older version of HijackThis; please download the latest version (1.98.2) and post the log that version generates.

2.

C:\Program Files\Internet Explorer\iexplore.exe

It looks like you still had IE running when you ran HJT; please open Windows' Task Manager and do an "End Task" on all instances of "iexplore.exe" that you find listed.

DMR 152 Wombat At Large Team Colleague

any help on this matter would be appreciated. i got a new computer and 2 days later my internet just randomly went off. i tried everything i knew to do and restarted with no resolution. finally it started working again, but my internet isn't the same. i'm using a linksys wireless adapter to connect to a cable modem. it said i'm still online, but i can't open internet explorer. then the worst thing was when i tried to reinstall the wireless adapter just in case something had happened, when i clicked on "My Computer" and then on the F: drive the linksys application opened and closed very quickly. i was able to install a game as a test with no problem. also when i would open certain rundll apps they would also open and close immediately. i ran all the spyware, adware, etc. programs i know to run and they found nothing as did norton. PLEASE HELP!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!111

Sounds like it's time for a HijackThis log, then; that should at least give us an indication of whether this is a "spyware" issue or not.

A download link to the program is in my sig below; do the following:

The downloadable file is a zipped (.zip) file; create a new folder on your drive for the file, save the file into that folder, unzip it, and run it from there. (Don't run HJT from within any Temp or Temporary Internet folder, and don't run it directly from your desktop.) Do …

DMR 152 Wombat At Large Team Colleague

Can you give us the full and exact text of the error message please?

DMR 152 Wombat At Large Team Colleague

Have you tried repairing the system by booting into the Recovery Console from the installation CD?

Recovery Console info:

Win 2000: http://support.microsoft.com/kb/229716/EN-US/

Win XP: http://support.microsoft.com/kb/314058/EN-US/

DMR 152 Wombat At Large Team Colleague

I do have lots of strange phrases about cellphones that refuse to be deleted.

Can you be more specific about that? Telling us exactly what the phrases/messages are will give us some clue as to what's gotten into your system.

DMR 152 Wombat At Large Team Colleague

Hi Smith555,

First of all- welcome to TechTalk!

We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules


Thanks for understanding.

DMR 152 Wombat At Large Team Colleague

Cool. Keep us posted....

DMR 152 Wombat At Large Team Colleague

Check your router's firewall settings with its web-based configuration utility. Also, if you have any software firewall program running, temporarily disable that and see if you can connect. If so, you'll have to adjust your firewall rules to allow traffic on the ports that your particular games need to use.

DMR 152 Wombat At Large Team Colleague

If you can reach sites by IP address but not by URL, that usually indicates a DNS issue:

1. Open a DOS box and type the following command at the prompt:

ipconfig /all

Do the results of the command return the correct IP addressing information, including valid DNS server IPs?

2. Can you even ping sites by URL? Try the following command:

ping www.google.com

Do you get positive responses from the command?

DMR 152 Wombat At Large Team Colleague

I recommend you post a Hijack This Log on the Viruses, Spyware, and other Nasties board HTH

Yes, please do the above; it sounds as though you inherited some "nasties" with the computer. :(

DMR 152 Wombat At Large Team Colleague

Pre-98SE USB support was a kludge at best; if you had it working before, count yourself as one of the lucky ones.

There definitely are 98->98SE upgrade disks out there, but at this point they may be hard to find. You might try eBay, or perhaps post a request in our "Geek's Lounge" forum; one of our members might have a copy they don't need any more.

DMR 152 Wombat At Large Team Colleague

As this is definitely a malware issue, I've moved this thread to the appropriate forum.

j4s[p],

Have a read through these previous threads on some of the "Search Assistant"-related problems. Try some of the suggestions given and repost here if you have any questions:

http://www.daniweb.com/techtalkforums/search.php?searchid=225396

DMR 152 Wombat At Large Team Colleague

Obviously, a boot time measured of several minutes indicates some problems, but:

1.

I recently upgraded my AOL to 9.0 security version. I also downloaded their McAfee antivirus software.

Both of those programs usually add very noticeable amount of time to your system startup, especially if you loaded McAfee's full "Interenet Security" package. Personally I'd dump AOL (for all of the bloat it brings to your system, it doesn't really give you anything useful).

2. Did you make absolutely sure that your system was free of viruses, "spyware", and any other problems before you upgraded to SP2? The application of SP2 can greatly magnify problems that might have existed before upgrade. It's sometimes suggested that you treat the upgrade to SP2 in the same way you would a brand new Windows installation: back up your data, reformat your drive, reinstall Windows, and upgrade to SP2 directly after that (that is, before installing any other programs.

3. Did you do some research to verify that the current versions of your installed programs are 100% compatible with SP2? You might have to upgrade some of your software.

4. Go to your Administrative Tools folder and open up Event Viewer. Look through all of the log files for messages/warnings/errors which might help pinpoint the reason(s) for the slowdown.

DMR 152 Wombat At Large Team Colleague

Glad we could help you banish the Gremlins! :)

There are a few things you can/should do to minimize your chances of future virus/malware infections. The firewall is a good start; here are some other suggestions:


1. Use Windows Automatic Update function to keep your system as up-to-date as possible with the most current Microsoft security and bug fixes.

2. Stop using Internet Explorer as your web browser. Because IE is so closely tied into the Windows operating system itself and contains so many security flaws, switching to another browser such as Netscape, Firefox, or Opera will greatly reduce the avenues through which spyware/adware/hijackers/etc. can infect your computer.

3. Install preventative utilities such as SpywareBlaster and SpywareGuard (links are in my sig below), especially if you absolutely have to continue using Internet Exploder. These utilities protect areas of your system known to be vulnerable to malicious attacks.

4. Tighten up some of Internet Explorer's existing, default settings to make it more secure. Some info on that can be found here.


5. Obviously-install a good anti-virus program and enable its "auto-protect" and email-scanning features.

6. None of your utilities are of much good if you don't check for updates frequently; updates for anti-spyware/anti-virus programs can be released as often as ever two or three days.

DMR 152 Wombat At Large Team Colleague

With older versions of Windows you needed a third-party program to deal with .zip files, but Windows XP has that ability built-in now.

Just right-click on the zipped file or folder and choose the "Extract" or "Extract All" option. This will start the Compressed Folders Extraction Wizard; it's pretty straight-forward from there.

DMR 152 Wombat At Large Team Colleague

Hi DerelictThreat,

First of all- welcome to TechTalk!

We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules


Thanks for understanding.

DMR 152 Wombat At Large Team Colleague

Unless you take steps to close up some of Windows' security holes after cleaning your system, you will get infected again.

1. Use Windows Automatic Update function to keep your system as up-to-date as possible with the most current Microsoft security and bug fixes.

2. Stop using Internet Explorer as your web browser. Because IE is so closely tied into the Windows operating system itself and contains so many security flaws, switching to another browser such as Netscape, Firefox, or Opera will greatly reduce the avenues through which spyware/adware/hijackers/etc. can infect your computer.

3. Install preventative utilities such as SpywareBlaster and SpywareGuard, especially if you absolutely have to continue using Internet Exploder. These utilities protect areas of your system known to be vulnerable to malicious attacks.

4. Tighten up some of Internet Explorer's existing, default settings to make it more secure. Some info on that can be found here.

5. Install a software firewall program. Firewalls can be configured to block or allow Internet/network access on a per-program basis, and this can keep certain malicious programs from doing their job. Zonealarm is a free firewall program, and both McAfee and Norton (Symantec) include a firewall in their commercial "Internet Security" software packages.

6. Remember that none of your utilities are of much good if you don't check for updates frequently; updates for anti-spyware/anti-virus programs can be released as often as ever two or three days.

DMR 152 Wombat At Large Team Colleague

You're welcome :)

Do the steps we listed above and get back to us with a new HJT log after that.

DMR 152 Wombat At Large Team Colleague

1. Your version (1.97.7) of HijackThis is out of date; please download the latest version (1.98.2), run it, and post the log from that version.

2. You should take caperjack's advice and run Ad Aware before you post the new log; Ad Aware will be able to clean out some of the infections indicated in your HijackThis log. Along with Ad Aware you should also run SpyBot (download link in my sig below); it's a good compliment to Ad Aware. Run them consecutively (the order doesn't matter); rebooting after each has finished its fixes.

DMR 152 Wombat At Large Team Colleague

Hmm... I see that caperjack beat me to some of this while I went off for a cup of tea- quick bugger, isn't he?

:mrgreen:


Also:

Your copy of HijackThis needs to be in a folder of it's own...

True; I missed that one.

click on AdAware 6

Ad Aware 6 is old now; the latest version is Ad Aware SE Personal.

DMR 152 Wombat At Large Team Colleague

You've got a few different "nasties" in you log, so let's get to it:

1. Have HijackThis fix:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IE Agent - {00000000-0000-0000-0000-000000000221} - C:\Program Files\ClearSearch\CSIE.DLL (file missing)
O2 - BHO: LocalNRDObj Class - {00320615-B6C2-40A6-8F99-F1C52D674FAD} - C:\WINDOWS\localNRD.dll
O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll (file missing)
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)
O4 - HKLM\..\Run: [Antivirus] C:\WINDOWS\av.exe
O4 - HKLM\..\Run: [bafqn] C:\WINDOWS\bafqn.exe
O4 - HKLM\..\Run: [wdskctl] C:\WINDOWS\wdskctl.exe
O4 - HKLM\..\Run: [BCPC] "C:\Program Files\Bcpc\bcpc.exe"
O4 - HKLM\..\Run: [Breg] "C:\Program Files\Common Files\Java\bcre.exe"
O4 - HKLM\..\Run: [Xcpy1] "C:\Program Files\Common Files\Java\Xcpy1.exe"
O4 - HKLM\..\Run: [uqfogkatqsq] C:\WINDOWS\system32\zdbwki.exe
O4 - HKLM\..\Run: [satmat] C:\WINDOWS\satmat.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\IEExtension.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\IEExtension.dll
O16 - DPF: {31932A5C-9234-4377-A920-72E7DD340DB4} (Snapfish File Upload ActiveX Control) - http://www.snapfish.com/SnapfishUpload.cab
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} (WildTangent Active Launcher) - http://install.wildtangent.com/Acti...iveLauncher.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {70522FA2-4656-11D5-B0E9-0050DAC24E8F} - http://download.iwon.com/ct/pm3/iwonpm_8_1,0,2,5.cab

DMR 152 Wombat At Large Team Colleague

Unfortunately, most variants of the Home Search Assistant (HSA) are very difficult to remove. The methods of infection used by HSA variants are constantly evolving/changing, and they have the ability to "morph" the names of the malicious files they use in such a way that the names of those files can change every time you reboot your computer.That being the case, there are no "simple steps" for 100% assured removal.

1. The free utilities "about:buster" and "HSRemove" can remove some of the HSA variants. Download the programs from the following site and run them. Read the instructions on the download pages carefully:

http://www.majorgeeks.com/download4289.html
http://www.majorgeeks.com/download4286.html

2. At the above site there is also a "spyware" removal tutorial which has more information on general prevention/removal techniques and tools; you should give it a read:

http://forums.majorgeeks.com/showthread.php?t=35407


2. Download HijackThis:

http://www.majorgeeks.com/download3155.html

Once downloaded, follow these instructions to install and run the program:

Create a new separate folder on your drive for HijackThis, move the program into thids folder, and run it from there. (Don't run HJT from within any Temp or Temporary Internet folder, and don't run it directly from your desktop.) Do not have HJT fix anything yet, only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...". Save the log in the folder you created for HiajckThis, open the log in Windows …

DMR 152 Wombat At Large Team Colleague

Did I do everything right?

Unfortunately, no; but that was my fault. The "services.exe" program in the inetdata folder is root of the problem, and you do need to delete it.

You couldn't delete it (or the inetdata folder itself) because the services.exe program was still running, and that was because I forgot one crucial instruction in my last post:

After having HijackThis fix the entries I mentioned, I should have had you do the following; please do this now:

- Reboot into safe mode (you get to the Safe Mode boot option by hitting the F8 key as your computer is starting up).

- Open Windows Explorer, and in the Folder Options->View settings under the Tools menu, select "show hidden files and folders", and uncheck "Hide protected operating system files".

- Delete the entire C:\WINDOWS\inetdata folder.

- For every user account listed under C:\Documents and Settings, delete the entire contents of these folders:

1. Local Settings\Temp
2. Cookies
3. History
4. Local Settings\Temporary Internet Files\Content.IE5

- Delete the entire content of your C:\Windows\Temp folder.

(If you get any messages concerning the deletion of system files such as desktop.ini or index.dat, just choose to delete those files; they'll be automatically regenerated by Windows if needed.)

- Empty your Recycle Bin.

- Reboot normally.

- Run HJT again; if the problem still persists, post a new log.

DMR 152 Wombat At Large Team Colleague

I didn't think it would, but flushing your local DNS cache is just one of those standard troubleshooting steps with problems like this.

I'm finishing up here for the night, but hopefully one of our members will pick this up before long. If not, I'll come back to this tomorrow.

DMR 152 Wombat At Large Team Colleague

Hi jn2004,

First of all- welcome to TechTalk!

We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules


Thanks for understanding.

DMR 152 Wombat At Large Team Colleague

This may not do the trick, but it's something to at least get out of the way up front:

Close any/all browsers, open a DOS box, and type the following command at the prompt:

ipconfig /flushdns

Fire up a browser again and see if the error persists.

DMR 152 Wombat At Large Team Colleague

C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

1. You are still running HJT from within a Temporary folder; please move it to its own folder which does not live within/under any Temp or Temporary folder. The contents of Temp folders aren't permanent, and often get deleted in the course of routine system clean-up and/or troubleshooting.

Create a new folder such as C:\HijackThis, C:\Downloads\HijackThis, or C:\Spyware Tools\HijackThis and move the program to that folder.


2. Temporarily disable System Restore. Info and instructions are here.


3. Once you've moved HJT into the new folder, make sure to close all Internet browsers (Internet Explorer, AOL, etc.) and run HJT again. Have HTJ fix these entries:

F3 - REG:win.ini: run=C:\WINDOWS\inetdata\services.exe
O2 - BHO: (no name) - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - (no file)
O2 - BHO: (no name) - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)
O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inetdata\services.exe
O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inetdata\services.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

(Note those last two "04" entries: they look the same in the log, but they're really two different registry entries; make sure you fix both.)


4. Delete the entire C:\WINDOWS\inetdata folder.

5. Empty your Recycle Bin and reboot your computer.

Let us know if that does the trick.

DMR 152 Wombat At Large Team Colleague

D-oh! Me and my feeble brain...

[img]http://www.stevewolfonline.com/Downloads/DMR/Visuals/HeadBash.gif[/img]

I actually read that link while I was at Tenebril's site, but totally missed the fact that (because your HJT log indicated that you used AOL) the info would apply to you...


Glad you caught that; good job!

DMR 152 Wombat At Large Team Colleague

Hello everyone.

I'm having the same problem than Corduroy...

Hi ndoliveira,

First of all- welcome to TechTalk!

We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but it also makes it less likely that you yourself will get the individual attention that you need.

Please start your own thread and post your question there. When you do, please try to give us as much specific info as possible regarding the problem (exact error messages, system specs, etc.).

For a full description of our posting guidelines and general rules of conduct, please see this page:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules


Thanks for understanding.

DMR 152 Wombat At Large Team Colleague

The most likely cause is a malicious alteration to your Hosts file, or the addition of another, bogus Hosts file.

1. Open Windows Explorer, click the Search button, and:

- In the box where you specify a filename to search for, type "hosts" (without the quotes).
- In the "Look in:" box, select My Computer.
- Make sure the search options are set to search subfolder, system folders, and hidden folder.
- Perform the search.

2. The only valid Windows Hosts file are:

Windows XP = C:\WINDOWS\SYSTEM32\DRIVERS\ETC\Hosts
Windows 2K = C:\WINNT\SYSTEM32\DRIVERS\ETC\Hosts
Windows 98\ME = C:\WINDOWS\Hosts

Open the Hosts file which corresponds to your version of Windows in Notepad and examine its contents. Be sure to scroll through the entire file! Some infections try to hide their modifications at the very end of the file by padding the middle of the file with blank lines.

3. The only entries in the default Hosts file are the following:

# Copyright (c) 1993-1999 Microsoft Corp. 
     # 
     # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 
     # 
     # This file contains the mappings of IP addresses to host names. Each 
     # entry should be kept on an individual line. The IP address should 
     # be placed in the first column followed by the corresponding host name. 
     # The IP address and the host name should be separated by at least one 
     # space. 
     # 
     # Additionally, comments (such …
DMR 152 Wombat At Large Team Colleague

Hi miked- welcome to TechTalk :)

I've split your post into its own separate thread in the "Viruses, Spyware, and other Nasties" forum; you can find it here:

http://www.daniweb.com/techtalkforums/showthread.php?t=14536


I moved your post for 2 reasons:

1. HijackThis logs belong only in the Viruses, Spyware, and other Nasties" forum; sorry if caperjack's advice mislead you on that one.

2. We ask that members not add their questions to a thread previously started by another member. Members need to start their own threads for their questions, regardless of any possible similarity to questions already asked in other members' threads.


As you are a new member, please have a read through the following for a full description of our posting policies and rules of conduct:

http://www.daniweb.com/techtalkforums/faq.php?faq=daniweb_faq#faq_rules


Thanks for understanding.

DMR 152 Wombat At Large Team Colleague

A few things to start with:

- Was the printer functioning properly at some point in the past?

- How is the printer connected to the computer (USB or Parallel cable)?

- What is the make/model of the printer?

- Have you tried the "Add Printer" wizard under Printers and faxes in your Start Menu?

DMR 152 Wombat At Large Team Colleague

You're welcome :)


Just keep in mind that like anti-virus programs, anti-spyware utilities are only fully effective if you check for and install updates on a regular basis...

DMR 152 Wombat At Large Team Colleague

Glad we could help (again) :)

I found langwrbk.dll but no .exe.
Landwrbk.dll was something from Microsoft called English Wordbreaker.

Yup- that's the legit Microsoft file; I still can't find anything on the .exe version though. If deleting its entry didn't seem to do any harm, you're probably good to go.

DMR 152 Wombat At Large Team Colleague

Actually the latest version of hijackthis will create a folder called Backups ,in the folder its ran from

You're right, my bad- HJT does do that now... :o

I still agree with putting HJT in its own folder though, as the backup folder HJT creates is named just "backups"; a folder with such a non-descriptive name floating around loose in another folder could easily get chucked in the bin by mistake.

DMR 152 Wombat At Large Team Colleague

QuickTime and MusicMatch are not Windows Services mate, they're software applications!

Services are Windows functions, which run in the background and are called on by software applications in order for tasks to be performed.

True- and therein lies one of the differences between the use of msconfig and services.msc: while services.msc gives you finer control over Windows services, it is not responsible for controlling Windows applications which may put auto-start entries in the Registry, Startup Items folder, etc.; msconfig is more the tool for that.

DMR 152 Wombat At Large Team Colleague

DMR -- I know this was in the wrong forum, but the spyware forum is where people were recommending the use of msconfig so I thought they would respond and explain why. Didn't work out that way though.

That's along the lines of my reasons for the move. While the use of msconfig is suggested in the course of some malware troubleshoots, both msconfig and services.msc are tools which are more often used in other/wider areas of Windows administration. I felt your question concerning a comparison of the two utilities in general to be of a broader nature and deserving of a wider audience; hence the move to a general Win forum.

:)

DMR 152 Wombat At Large Team Colleague

Definitely- given that the box came to you with problems, you should start over. Do as Catweazle suggests: reformat and do a full, fresh installation of Win 98. Win 98 SE would be advised if you can get a copy of it.

DMR 152 Wombat At Large Team Colleague

1. Sorry- I made a cut-n-paste error in my previous post:

Below where I posted "The explanation is here:", I meant to paste a link to the article which describes the GhostSurf proxy settings. Here's the right link:

http://www.tenebril.com/kb/showitem.php?faq_id=117

In the LAN Settings window decribed in the above article, delete the entries in the "Address:" and "Port:" boxes, and make sure the "Use a proxy server..." and "Bypass proxy server..." boxes are unchecked. Click OK in the LAN Settings and Internet Properties windows to apply the changes.

2. Leave your DNS server IPs as they are (at least for now).

3. Do steps 2 & 3 in my previous post.

4. See if your browsing instability is fixed after doing all of the above. Let us know if it worked or not.

DMR 152 Wombat At Large Team Colleague

No problem... :)

DMR 152 Wombat At Large Team Colleague

Great- glad we could help you get it sorted out :)