gerbil 216 Industrious Poster

Please rename hijackthis.exe to imabunny.exe, start it, do a Scan only and place checkmarks against the following for fixing, and press Fix Checked.

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = prosearching.com
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {69DC2C3D-BE96-4FEF-9878-E037F4090FB3} - C:\WINDOWS\system32\tjffrcyb.dll
O2 - BHO: (no name) - {721E3FFB-25B3-4CF7-A5DF-53D14BAE4183} - C:\WINDOWS\system32\vtsqr.dll (file missing)
O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - (no file)
O4 - HKLM\..\Run: [InfoData] rundll32.exe "C:\WINDOWS\system32\xsapvtde.dll",realset
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\-Raven-\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O20 - Winlogon Notify: winclk32 - winclk32.dll (file missing)

Post a new HijackThis log. While I enjoy scanning your combofix log. Cynical swine.
-actually, these are my "crossword puzzles"

-could I see your old vundofix log also, please... combofix shows some files as once being there.. i cannot tell if they are still there without your log.

gerbil 216 Industrious Poster

I gotta get a rubber stamp made up.....
Welcome, Slappey...oops, Growler...:).. let's start -
Either: go Control panel > folder options OR: in an explorer window > tools>folder options; - then view tab, and press
Show hidden files and folders.
==Download fixwareout from http://www.bleepingcomputer.com/file...Fixwareout.exe - and save it to your desktop.
Double click Fixwareout.exe to start the Fixwareout Setup Wizard, click next and then install. Ensure that Run fixit is checked, and click on Finish. After the fix follow the prompts. You will be asked to reboot your computer, and it may take longer than usual to load - this is normal.

Next check some settings....In control panel select the Network and Internet Connections , rclick on your default connection, usually local area connection for cable and dsl, and lclick on properties. Click the Networking tab. Dclick on the Internet Protocol (TCP/IP) item and select Obtain DNS servers automatically. Press OK twice to get out of the properties screen and reboot if it asks.

Now we have to flush the DNS cache: Go Start > Run, type cmd and click OK.
In the command screen, type in cd\ and then press Enter. Now type in ipconfig /flushdns and then Enter. [space after ipconfig]. Type Exit.

FIX CHECKED ENTRIES....!!
Start Hijackthis, do a Scan Only and place checkmarks against all of the following, and then press Fix Checked:

O17 - HKLM\System\CCS\Services\Tcpip\..\{20689ED6-9A8C-480D-8D42-438F6CEA161D}: NameServer = 85.255.116.104,85.255.112.229

gerbil 216 Industrious Poster

I'm not sure we should encourage self-help..tsk... we'll be outta business. Nice work... :). Now get this combofix n run it also...
http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exe
-- to run it dclick combofix.exe and follow the prompts to start it. When finished, it will produce a log - post that log in your next reply.
A word of caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop.

gerbil 216 Industrious Poster

Go to add/remove pgms and remove a program with a name like MyWay [searchbar, whatever..]; delete the folder from Program Files.
Either: go Control panel > folder options OR: in an explorer window > tools>folder options; - then view tab, and press
Show hidden files and folders.
==Download fixwareout from http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe - and save it to your desktop.
Double click Fixwareout.exe to start the Fixwareout Setup Wizard, click next and then install. Ensure that Run fixit is checked, and click on Finish. After the fix follow the prompts. You will be asked to reboot your computer, and it may take longer than usual to load - this is normal.

Next check some settings....In control panel select the Network and Internet Connections , rclick on your default connection, usually local area connection for cable and dsl, and lclick on properties. Click the Networking tab. Dclick on the Internet Protocol (TCP/IP) item and select Obtain DNS servers automatically. Press OK twice to get out of the properties screen and reboot if it asks.

Now we have to flush the DNS cache: Go Start > Run, type cmd and click OK.
In the command screen, type in cd\ and then press Enter. Now type in ipconfig /flushdns and then Enter. [space after ipconfig]. Type Exit.

==Download Lspfix.exe from http://cexx.org/lspfix.htm -start it by dclicking the .exe, and press Finish.
==Start Hijackthis, do a Scan Only and place checkmarks against all of …

gerbil 216 Industrious Poster

I would have thought that if you opened C: you would have \program files and \WINDOWS folders, plus \Docs n Setts, [as well as others....]. These are the ones u use as your OS. So open H:\ and just delete H:\Windows [it won't fit in the bin..] and H:\Program Files folders. Check thru docs for files that you may wish to keep. I wouldn let Norton do anything.. If you are concerned post a pic of your explorer window with a bit of tree expansion...C:\ and H:\ .Or two pics...

gerbil 216 Industrious Poster

..there is a setting in your profile re notifications..

gerbil 216 Industrious Poster

couldn't you just start up in the C: volume and then simply delete all the windows OS folders n files in the second volume? That would leave your other stuff untouched, wouldn't it? [I've never tried it... :)]
Last, or other, step would be to cut the last line from your boot.ini file.
I mean, who [an OS] would know?

gerbil 216 Industrious Poster

Titans, I'm just wordy...
And Anita, be very careful of the spelling of that file if you type the name instead of doing a copynpaste..... LSASS.exe is a very necessary windows file, LSASSS.exe is the pest.

gerbil 216 Industrious Poster

Heya, titans.. you beat me this time.. could you handle a bit of help with this one? Yeah? Really? Cool... :)
Anita, lessee... AVG left a lot, not to be desired....
==First, dump that hijackthis and get a new one from http://216.180.233.162/~merijn/files/HijackThis.exe
-install it to a new folder alongside your program files and then rename the Hijackthis.exe to imabunny.exe.
==Please download VundoFix.exe to your desktop from http://www.atribune.org/ccount/click.php?id=4
Double-click VundoFix.exe to run it, and click the Scan for Vundo button.
When the scan completes click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files - click YES
Your desktop will then go blank as the process of removing Vundo starts.
When completed it will prompt that it will shutdown your computer - click OK.
Restart your computer.
==Download this temp file cleaner from http://www.atribune.org/ccount/click.php?id=1 --click in the download window to run it, and when ATF Cleaner opens go Select all, and then Empty Selected.
Next click Firefox [if you have that browser..] at the top, Select All again, and Empty Selected again. Follow that procedure also if you have Opera.
Close ATF.
[If you wish, save ATF Cleaner to your desktop or a cleaning folder somewhere as it is a fairly useful tool for occasional use.]
==Start HijackThis by dclicking imabunny.exe; now close ALL other applications and any open windows including the …

gerbil 216 Industrious Poster

well, that log is clean. So the file problems being reported look like being all due to improper shutdown. I'd ask you to do a Panda online scan for viruses [a few of which have are known to periodically shut down computers] but seven minutes would barely get the scan under way. It's really looking like a hardware problem, but 7 mins to shutdown is a rather catastrophic component failure mode. The sort of thing a power supply is good at doing [various outputs are monitored by the ps itself -they go out of range it shuts down immediately]. I'm afraid that i'm not being much help.... I hope someone else comes in with ideas. Good luck...

gerbil 216 Industrious Poster

" ...see if something got me...." -chances are it did. Do this for a start...
===hijackthis: http://216.180.233.162/~merijn/files/HijackThis.exe
-install it to a new folder alongside your program files
-in that folder start HijackThis by dclicking the .exe; now close ALL other applications and any open windows including the explorer window containing HijackThis.
-Click the Scan and Save a Logfile button. Post the log here.

gerbil 216 Industrious Poster

Ok. It's neat that you can use a USB CDrom, and that you have the install disk. I want you to insert the disk and start Recovery Console [when you are prompted to repair or recover, press R].
First run checkdisk to see if there are any repairable errors - type and enter...
chkdsk /r -if any errors are reported then ...
chkdsk /f - and when it finishes restart your puter to see if it runs.
No? Then go back into Recovery Console. Let's start with the file that is mentioned in your error msg:-
C:\Windows\system32\config\software - we must first make a copy of this with another name, and then delete the original from its folder, so in recovery console type

cd C:\Windows
md regtemp
copy system32\config\software regtemp\software.bak
delete system32\config\software
copy repair\software system32\config\software
exit

-which will take you out of recovery console. See if your computer will start.
No? Then you must follow the same procedure by removing these other 4 files from \config into regtemp: system, sam, security and default; and then copy the originally saved files from \repair folder also [these are all the registry files saved by your system when you first installed it - if you have not since updated them. Most folks don't...]
...so just substitute those filenames for software in the above. You can try a restart after each substitution, or better still do them all at once.

gerbil 216 Industrious Poster

tricky. see if you can boot into safe mode with command prompt.
No? Then now is the time to visit a friend with your harddrive under your arm, cos we have to copy a few files from a backup repository in your sys.
[what the error msg is saying is that your registry is a bit corrupted, and a bit is usually quite enough.... when you installed windows xp a couple of files were automatically stored as backup - these are the ones we wish to use to replace your corrupt \software file [and others..]. Naturally your sys will be taken back in time, but it will/should work, however a few applications will need to be reinstalled]
There is no simple fix if you cannot get into safe mode... you gotta be able to get hold of a cd drive, or another xp OS in another puter.

gerbil 216 Industrious Poster

Click this:
http://activex.microsoft.com/controls/vb6/vbrun60.cab
POW!! and you're there, and ready to download. :) I could have given you this link straight off, but generally if it is at all useful i prefer to give the page the link is on.... to show what is happening, what you are getting, and if it's a small co, to expose you to their ads...

gerbil 216 Industrious Poster

Go to this page and download the visual basic 6 service pack [link is just under the More Information subhead]- save it to a download folder. Dclick the file vbrun60.cab to extract its content [to the same folder will do], then dclick that vbrun60.exe - it self-installs files into your system.
http://support.microsoft.com/kb/823746
Then try to run HT again.

gerbil 216 Industrious Poster

Heh... OK, then. These next steps are to kill two birds... we may be able to see if you have any infections which might also be the cause of your intermittent shutdowns [some viruses do that], and may be able to guide you in ways to unburden your pc of unnecessary processes which slow things down.
If and when that XP disc turns up, try running a scan which checks the integrity of many windows processes.
Insert the cd, and go Start, run, type sfc /scannow ...and OK. Be prepared to hit Enter many times while it runs.
Meantime, get hijackthis: http://216.180.233.162/~merijn/files/HijackThis.exe
-install it to a new folder alongside your program files.
-in that folder start HijackThis by dclicking the .exe; now close ALL other applications and any open windows including the explorer window containing HijackThis.
-Click the Scan and Save a Logfile button. Post the log here.
And how is the pc performing so far? Still shutting down? That can be temperature induced - unplug the power, whip the sides off the case and gently go to work with a vacuum cleaner and soft, long-bristled brush. Get the fan on the processor board clean.

gerbil 216 Industrious Poster

There is no need to worry about going in to safe mode to run chkdsk, because you are getting in to normal mode. chkdsk makes that offer to run on restart! It then runs before the Operating System [windows] loads. It will do checks of your volumes [volumes are the partitions represented by your drive letters eg c:, d: are volumes] while windows is running, but will not do fixes.


for your info..:
===To restart your computer in Safe Mode:- press F8 several times while POST is running and before IDE detection completes.
- On the Windows Advanced Options Menu, select Safe Mode[ with Command Prompt, or other options] and press Enter.
- When the Boot Menu appears again, select Microsoft Windows XP and press Enter.
- Log in by using your account [if it is an admin account] or the Administrator account and password. NOTE: The password is blank by default unless you set a password.

gerbil 216 Industrious Poster

Oops, i've confused you.....
Just for a start, you don't need Vista if you like having $150 in your pocket. XP works fine for me; I cannot see myself changing to Vista - what would the reason be? And it needs more RAM than XP. Think bloat.....
IE7? hand me that bargepole and the garlic. IE6 works; so do Firefox and Opera, and better...
Now to the chkdsk problem.
To check your system drive you have to be not running the OS, so start chkdsk any way you prefer - easiest is Start > run, and type
chkdsk c: /f and OK, and answer Yes to the question about running it on restart. Restart.
[another is to rclick on the drive you wish to test, eg Local Disk (C), properties, tools tab, press Check Now, and then Start. You will be given a report. If it finds stuff, tick both boxes and Start again. You will face the same question about checking on restart, answer Yes.]
...and at restart, chkdsk should run before windows loads...
Running it from the XP cd was just another option.... :). But yeah, if when your mum comes good with it, and if you think the puter is full of junk, well go ahead and reinstall - set the thing up the way you want it.

gerbil 216 Industrious Poster

You are doing nothing wrong... the two parameters /f and /r are parameters that instruct chkdsk to fix different things on your drive - chkdsk by itself just reports errors but will not fix them. It's my error; you can't run chkdsk on the system volume while the OS is using it, and even in safe mode it is still in use. Which is why you are asked if when you try to check the c: drive if you wish to run it on restart. I should have told you to say Yes.
[ To work properly chkdsk needs to have a volume locked, or not in use. [volume = drive, eg c:, or d:] which is why i got you to run it in safe mode, but that is not enough... :(]
By any chance do you have IE7?
Okay. If it will not run on restart, then do you have a XP install cd? Because from recovery console on that you can run
chkdsk /p which is a check only, and
chkdsk /r which repairs errors.

gerbil 216 Industrious Poster

cool. I should have gone further and said that if chkdsk /f found problems then to run chkdsk /r. This may take a while.... let it finish! And then check completeness of repairs by running /f again. And if it still finds problems.. /r. You get the picture. One cycle sometimes is not enough.

gerbil 216 Industrious Poster

To sort out if it is a hardware related problem, restart your pc, and then hit delete to enter BIOS. Let it sit there for a while to see if it is an overheating/power problem. If it works ok, then go to safe mode and run chkdsk /f.
===Restart your computer in Safe Mode:- press F8 several times while POST is running and before IDE detection completes.
- On the Windows Advanced Options Menu, select Safe Mode with Command Prompt and press Enter.
- When the Boot Menu appears again, select Microsoft Windows XP and press Enter.
- Log in by using the Administrator account and password. NOTE: The password is blank by default unless you set a password.

gerbil 216 Industrious Poster

Hey!! you're sposed to be on this side of the fence!!
Anyway, ur prob getting cmd showing a:\> cos your sys just is not seeing the boot drive, which is normally c. Can you get to recovery console with that emachines disc? Get it to do a chkdsk /p first off. if it finds a prob do a chkdsk /r to repair, n then a /p to check it, an then...
ntldr is about the first thing read of your boot disc [from the boot sector]... it then reads the boot.ini file to see where your OS lies. So your c drive could be in trouble, or just the boot sector...
"Im posting this in the mod section because i think this is where the smartest of each forum gather."--- sorry, i jump about. heh heh...

gerbil 216 Industrious Poster

hey, Oded, i'm glad you got the context menu problem sorted also [I'm just going through catching up on things..]. The Identify button? - you would not see that unless you had a video card capable of handling multiple displays, so nothing missed there [all Identify does is show you which screen driver/channel number you're watching..]. And i guess Acronis just were not IE7 ready.

gerbil 216 Industrious Poster

I just KNEW i would learn stuff by hanging around in here... so i googled AGP aperture size. I think i will go to some effort to forget about it now.
Tweak-3D helped me come to that conclusion.

gerbil 216 Industrious Poster

.. to quote"Hi Gerbil,
I followed your suggestion in the edited version of your reply and found three instances of the file desktop.htt. The search highlighted them in blue and when I tried to delete them, the system froze! I had to go to Windows Task Manager, delete and reinstate Desktop.exe." which is from post #9.
-which is the bit i am wondering about..... So, was it really desktop.exe? Ill assume you meant explorer.exe [desktop.exe is from a nasty trojan...]. But i think i cannot carry through on this problem - someone with more knowledge on shells and contextmenuhandlers etc [if that is the problem] had better pick it up for me.

gerbil 216 Industrious Poster

hmmm... what, no install option? Cos if you go down the install road to do a fresh install windows will detect your old installation and ask if you would like to repair it...

gerbil 216 Industrious Poster

Jumping straight into msconfig and selecting normal startup does not work? Or does it not give you the chance? Then you will have to either boot from your install CD, or download a floppy boot disc. And from there run chkdsk /F /R.
Cos SPTD fools around with kernel files? i think then you have a good reason to run sfc /scannow to repair anything that may be amiss with system files.
Also stop that auto restart if it is happening by typing sysdm.cpl and under the advance tab, startup settings, uncheck the auto restart box so you can get some error messages.

gerbil 216 Industrious Poster

Some settings that you apply when using msconfig conveniently delete system restore files. So neat. A couple are :-
Diagnostic startup, and
Selective startup - if you clear the Load system services box.
It's just a pity that that little thing is not mentioned in the Help file....
Now. Did SPTD deleter work? Search for SPTD files in Windows/system32/drivers.... a couple o files could be there under SPTD. There is a regkey also - once you delete the files you will be able to read and delete this cfg subkey. Delete them and then try to reinstall DT 4.03.
And via rclick on start button, and also rclick on desktop blank space and using defaults, cannot you rebuild your desktop?
As for what you just put up... i'm out. Sorry.

gerbil 216 Industrious Poster

ah... since you're online.. another little thing and it's> ... WHOA!! did you really mean desktop.exe? no spelling error in a previous post, no 9?

gerbil 216 Industrious Poster

Groan.... is that a new problem?, one that surfaced since we forced the creation of a new desktop.htt file? If so, by any chance do you know at which stage? I'm sure it would not be due to this though.... If it is, try system restore and then work through again to pinpoint its first occurrence. For your peace of mind you could try resetting that dword from the key above to what it was [0x110], but that should not fix anything.
I have no solution yet, but i suspect an old contextmenuhandler file left over from from IE6 ....
[when you rclick on a file you open a context menu shell extension; the handlers add the various command files that you normally see - eg undo, copy, paste, select, various other contextual commands like scan..]

gerbil 216 Industrious Poster

strange that it froze, oded.... you would have seen that there was an instance of desktop.htt for each user; deleting them should not have caused a problem. The particular .htt file for a user would be recreated when that user made a change to his desktop subsequently, say changing the colour, or the picture. But if your system is working fine already then the desktop file will still be rebuilt when you make any change.

gerbil 216 Industrious Poster

Wow!! you were hot on the job, Oded!! Glad it worked... however i edited that post to provide what i consider to be a better fix, a true one, involving deleting any old desktop.htt files and letting windows create a new one.. The edited post has a fix which is a proper fix, not a hash job to tide you over. Explorer would rebuild a compatible desktop.htt file. Cheers..

gerbil 216 Industrious Poster

desktop.htt pretty much controls the size and position of your desktop and the wallpaper you have on it, plus it includes a little activeX control to allow you to reshape it..... IE7 is a little bit incompatible with the old profile you may have had already.
Since this file is automatically generated by windows, the best fix is to delete the old one[s] and let windows create a new one. To do this open an explorer window and go to tools > folder options > view, and uncheck hide protected opsys files. Apply and ok. Then do a search in your sys drive [usually c: ] for desktop.htt. It will be in Docs and Settings\User\Application Data\Microsoft\Internet Explorer.
Delete them [it, whatever...]. Close the explorer window, rclick your desktop and click Refresh, and then go back and RECHECK that box. you really don't want those special files exposed all the time!!

gerbil 216 Industrious Poster

are you using IE7 ?

gerbil 216 Industrious Poster

but read this site first!!!
http://www.lockergnome.com/nexus/it/2004/12/15/get-it-done-recover-a-damaged-windows-xp-user-profile/
..it may help with instructions for normal recovery. you have not lost the pictures, it's just that the profile which displays them is inactive.

gerbil 216 Industrious Poster

sarah, here is a lil file, REST2514.exe, which may help. don't use your normal pc on the net until you recover your lost files.... this file has the advantage of being downloadable onto a floppy, can be unzipped to the same floppy, and run from the floppy - no installation is necessary. And put sys restore back ON. you only need to clear old entries if you get infected in a certain way.... and sys restore can make avilable old files occasionally.
http://www.snapfiles.com/get/restoration.html
[it's called restoration in this page..]

gerbil 216 Industrious Poster

sjb, pls move hijackthis to a new folder, D:\HiackThis [reason being is that it makes automatic backups, and on your desktop is the best place to lose them, or not get them at all], make a new log and post it in a new thread.

gerbil 216 Industrious Poster

Cool, we're done then? Glad it worked out. Cheers!

gerbil 216 Industrious Poster

ideas? not me, no.. sorry.... does sound as if it's not the driver's fault, but the card's. Temperature? is the fan clean? Post that issue in the hardware forum for more focussed help. They may help on the boot issue also if changing the boot order as i suggested does not work....

gerbil 216 Industrious Poster

hello kaye, this should not be difficult. Did you run CCleaner before you did the Panda scan? Because it would have cleaned your cookie folder...
Anyway, if you have since reset this then go to control panel, folder options, view tab and select "show hidden files and folders".
Navigate to C:\windows\ss3unstl.exe and delete this file.
Open CCleaner and click the cleaner [top] icon. With Windows tab selected, uncheck Internet Explorer, then check both Temp Inet Files and Cookies.
Uncheck Windows Explorer, uncheck System, then check Empty Recycle bin.
Uncheck Advanced. Press Run Cleaner and OK.
[that is a good way to leave Ccleaner for general, occasional cleaning..]
Now go to Issues icon and uncheck Registry Integrity, then check Applications and Application Paths.
Uncheck File Integrity. Press Scan for Issues and then Fix Issues if it finds any.
Did you already fix those 3 HT log entries i mentioned? You must.
Finally, for safety's sake, please go to control panel, folder options, view tab and recheck "hide protected opsys files".
You may like to make a new restore point also.
Fine, let us know how you get on, and if there are any further problems.

gerbil 216 Industrious Poster

Sorry for the delay, but sleeping must be done.
kaye, run HT again and then check those three entries i posted above and fix them.
I would like you to download CCleaner from http://www.ccleaner.com/ and put it in a new folder. You should aim to keep this one for general use. I set it using the install checkboxes to only open from the recycle bin. It's just a neater thing.
Run it by dclicking recycle bin icon and clicking on CCleaner.
[Investigate its options and settings... then perhaps keep it with altered settings for general cleanup work, to empty temp files, the recycle bin, clearing cookies, histories... you choose.]
Finally try this scan online:- http://www.pandasoftware.com/products/activescan? Give them some details, and follow the scan buttons. If it finds anything then post the log here.
Btw, get Adaware SE Personal from http://www.lavasoft.de/software/adaware/
- install it. Update it. Explore what settings you can change in it [via the cogwheel icon up top, if you are comfortable with that... you won't hurt anything]. Put an icon on your desktop for regular use. It's a very competent scan that you can run every 2 weeks or so, or whenever you suspect foul play.
Cheers.

gerbil 216 Industrious Poster

Do you recognise these three entries?

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\uk.htm

O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\uk.htm

O17 - HKLM\System\CCS\Services\Tcpip\..\{5B05B66B-D653-469F-A3A8-467C148C0BC2}: NameServer = 205.188.146.145

basically i am asking what is this file:- C:\APPS\IE\offline\uk.htm
and do you know this IP :- 205.188.146.145 -is it anything to do with your office network?

gerbil 216 Industrious Poster

klaura, i just looked down the list and saw an earlier post by you - am examining that log now.

gerbil 216 Industrious Poster

it was a long shot. ok, go to this link, download the file into its own folder [ i suggest a folder in C: alongside program files]. Be in an administrator login, close everything, all applications etc and open the folder, dclick hijackthis.exe, close the explorer window and then click the "scan and save a logfile" button.
When it finishes a notepad with the log results will open; post it here.

http://216.180.233.162/~merijn/files/HijackThis.exe

gerbil 216 Industrious Poster

just guessing here... restart your puter, when in windows the countdown will start, so go Start > run, and type
shutdown -a
Then control panel, folder options, view tab and select "show hidden files and folders"; uncheck "hide protected opsys files".
Right. now go into C:\windows\system32\drivers and see if you have a file sysbus32.sys - here i am guessing...
post back the answer.....

C:\.. or the root of the drive where windows is installed..

gerbil 216 Industrious Poster

dortz, thank you very much for providing that link - it led on via a whole tree of links to some fascinating and useful reading. Brilliant.

gerbil 216 Industrious Poster

steve, if you're trying to boot off a LAN, then the falsh image aint in your puter, it's in the server your puter tries to boot from, ie at your place of work. You will not be able to touch it. Unless you are booting from a LAN at work, change your boot order to HDD first.
An GWA, well, it's up to you. Anyway, i'm glad that worked to get you back on the net. Cheers.

gerbil 216 Industrious Poster

..the pxe error code. There is a problem with your network interface card [nic]. First check in BIOS that it is set to boot from HDD first > FDD > LAN[pxw?] last. IF that doesn't fix it then update your BIOS, failing that it is prob a new NIC card....
Bit of info:
PXE-E05
EEPROM checksum error
This message is displayed if the NIC EEPROM contents have been corrupted. This can happen if the system is reset or powered down when the NIC EEPROM is being reprogrammed. If this message is displayed, the configured bootstrap type (Int I8h, I9h, PnP/BEV) has been lost and a default bootstrap type is selected. The default bootstrap type will be set to PnP/BEV if the system supports the PnP/BBS runtime functions. If the PnP/BBS runtime functions are not supported, Int I8h is the default bootstrap.
This poss makes more sense:-...
PXE-E05: The LAN adapter's configuration is corrupted or has not been initialized. The Boot Agent cannot continue.
The adapter's EEPROM is corrupted. The Boot Agent determined that the adapter EEPROM checksum is incorrect. The agent will return control to the BIOS and not attempt to remote boot. Try to update the flash image. If this does not solve the problem, contact your system administrator or Intel Customer Support.
You should be able to find a driver file that creates a bootable floppy to upgrade the nic boot manager. Try tosh, intel..
And the S3 …

gerbil 216 Industrious Poster

.. course, i could well be wrong, but i'm trying... :) Anyway... GWA is a bandwidth waster.. at your expense. When you visit a page, GWA downloads to you all the stuff linked from that page and hides it while you read the first page. If you click a link, well, GWA probably already has that new content cached on your machine. The linked pages you don't click on are a waste of dl time and units. Still more, GWA ignores the javascript that may come with a button click [cos it cannot read or interpret the written instructions in the javascript code - a "do you really want to do this" looks no different to "press enter to confirm" to a puter... so you can get some bad stuff happening.

gerbil 216 Industrious Poster

Hi steve, you did not specifically set up a proxy, but you have google web accelerator on your machine. The way it works is that your net connections go thru one of its servers which stores pages that you visit frequently, updates them if needs be, and makes them available to you so that your connection is more local and faster than a connection to the actual website - you get the pages from google even though you are connected to that remote website. Problem is, for you, you are showing a connection to a busted gooogle server [or proxy]. Google web accel has left you with a permanent link to a dud proxy when you first installed it. You could get a new proxy by uninstalling GWA and reinstalling it. But i think i would just leave it uninstalled. Anyway, it only speeds up loading of webpages you have visited plus a few it thinks you may visit - it doesn't speed up new sites, data downloads or mp3's etc.
So, try uninstalling GWA from control panel; there is no need to use HT to fix anything... tell me how it goes?