Posts by Joanna

Joanna 0 Newbie Poster

16 Years Ago

Hi TCBW & itdupuis

Great news ! I uninstalled symantec (I had an updated download ready to go but couldn't install to to a windows installer fax error), fixed my fax error, installed the updated AV and now Java and Flash are working!

THANKS SO MUCH FOR YOUR HELP !!!!!

Joanna 0 Newbie Poster

16 Years Ago

I've had this issue in the past on a few machines and it nearly always related to the Antivirus Software. (Usually happened with Symantec's product.) I found removing and re-installing the AV product resulted in the problem going away.

Hi TCBW

I'm willing to try anything! How do I go about re-installing after removing? I have symantecs on an annual subscription and don't want to have to pay again when I reinstall. Will it remain on my pc but inactive or do I need to go back to the symantec site and start again ?

Thanks
Joanna

Joanna 0 Newbie Poster

16 Years Ago

Hi there :confused:

Further to my below message, I have tried:

Installing and re-installing Sun Java, made sure that it is enabled on the java control panel, Run RegCure
Downloaded script from Microsoft
Installed IE7
Tried viewing sites in firefox
Restored original websettings.

I have tested Java here but it stil doesn't work :http://www.java.com/en/download/help/testvm.xml

I have tried downloading Flash but can't download (due to issue with using buttons on websites).

Is it likely that all of my web problems (see below re buttons and links) are due to a Java error ?

I do hope someone can help because I'm totally stuck now !

Thank you! :confused:

Hello All
I apologise in advance for my very basic understanding. I do hope you can advise me.
I am experiencing problems with IE. When I am on my social networking page any links I click on are highlighted in blue and 'Done' is displayed in the bottom left of screen but nothing happens.
Today when trying to view videos online I am told to download flash but when clicking on the link the page simply refreshes. Similarly when viewing a list which runs over several pages, if I click on 'next page' it just refreshes the page I am viewing.
I have cleared history / cookies / temp etc.
Fingers crossed there is a simple explanation! Thanks for reading and hope you can help.

Joanna 0 Newbie Poster

16 Years Ago

It sounds like an issue I have had with a few computers on my network (I do network admin for a school). I will go to those computers and try to pull up what I did to make them work. I think it is a simple fix, but I did this a few months ago and cannot remember exactly what I had to do. I will check on it and write back hopefully before the end of my workday. If I do not respond by 4pm (central) I will get back with you on Monday.

Hi itdupuis

Hope you had a good weekend. Did you get an opportunity to have a look at how you resolved the problem on your network?

Many thanks

Joanna 0 Newbie Poster

16 Years Ago

It's 8.05pm here! So I think you finish work 10pm my time !!!!

Joanna 0 Newbie Poster

16 Years Ago

It sounds like an issue I have had with a few computers on my network (I do network admin for a school). I will go to those computers and try to pull up what I did to make them work. I think it is a simple fix, but I did this a few months ago and cannot remember exactly what I had to do. I will check on it and write back hopefully before the end of my workday. If I do not respond by 4pm (central) I will get back with you on Monday.

Thanks so much. I am trying to fix the problem but don't really have the knowledge. Your help is invaluable. What time zone are you in? I'm UK GMT. I don't want to remind you too soon and appear to be pestering.

Thanks again.

Joanna 0 Newbie Poster

16 Years Ago

What version of IE do you have?

Hi itdupuis

Thanks for your reply. I think I had version 6 but chenged to version 7 in a bid to fix the problems. I have also downloaded Script form mircosoft, tried using firefox browser, run RegCure and deleted all history / coookies etc ! The problem is still the same !!

Joanna

Joanna 0 Newbie Poster

16 Years Ago

Internet explorer HELP!!!

Hello All

I apologise in advance for my very basic understanding. I do hope you can advise me.

I am experiencing problems with IE. When I am on my social networking page any links I click on are highlighted in blue and 'Done' is displayed in the bottom left of screen but nothing happens.

Today when trying to view videos online I am told to download flash but when clicking on the link the page simply refreshes. Similarly when viewing a list which runs over several pages, if I click on 'next page' it just refreshes the page I am viewing.

I have cleared history / cookies / temp etc.

Fingers crossed there is a simple explanation! Thanks for reading and hope you can help.

Re: purityscan\clickspring location C:\crash.txt

Joanna 0 Newbie Poster

17 Years Ago

Re: PC Monitor 'no signal'

Well "no signal" on a the monitor would point to either a bad connection, or that the gfx card overheats and the system shuts down. To find out what gfx card you have simply open up the side of your case and look for a card where you plug your monitor into, if this card turns out to be very big covering the entire side of your computer showing that you have motherboard graphics. Normally on the video card (gfx card) it would say who makes it and what it is. Such as: ATi Radeon X300SE, for example. While your have your computer open give it a good clean, because a large build up of dust can suffocate your computer and cause an overheating issue.

Thank you Serunson

I haven't opened it up yet (just read that I can do more damage!) but have found docs that say it's an ATI Radeon 9200

Joanna

Hardware display

Joanna 0 Newbie Poster

17 Years Ago

Re: PC Monitor 'no signal'

ps, it has a 7 - in - 1 graphics card, if that helps, and is approx 4 years old.

Thanks again

Hardware display

Joanna 0 Newbie Poster

17 Years Ago

PC Monitor 'no signal'

Hello there

My monitor only displays an image for a few minutes (if at all) and then freezes and then says 'no signal' and switches off.

I don't have much hardware knowledge, but assume this may be something to do with overheating, the video board or cooling fan?

I don't know how to check or locate these parts. Sorry to be vague. I have a HP Pavilion
t340.

Any advice would be appreciated !

Thanks
Joanna:confused:

Hardware display

Joanna 0 Newbie Poster

19 Years Ago

I have just used the Purityscan untinstaller and deleted file crash.txt. I then re-ran Xoftspy. This time it only found tracking cookies (won't allow me to save a log) so I have deleted cookies within internet options.

Do I need to do anything else to be sure its gone?

Here is my hijack, if it helps:

Logfile of HijackThis v1.99.1
Scan saved at 16:03:12, on 31/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
c:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\BT Broadband\Help\bin\mpbtn.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gb10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-gb10.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search …

Re: purityscan\clickspring location C:\crash.txt

Joanna 0 Newbie Poster

19 Years Ago

Hi swatkat

I have followed the advice you gave. Here are the logs;

Xsoftspy is still picking up Purityscan in the smae location.

Sysclean:

/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/

2005-07-31, 11:05:50, Auto-clean mode specified.
2005-07-31, 11:05:50, Running scanner "C:\Documents and Settings\Owner\Desktop\Sysclean\TSC.BIN"...
2005-07-31, 11:07:34, Scanner "C:\Documents and Settings\Owner\Desktop\Sysclean\TSC.BIN" has finished running.
2005-07-31, 11:07:34, TSC Log:

Damage Cleanup Engine (DCE) 3.9(Build 1020)
Windows XP(Build 2600: Service Pack 2)

Start time : Sun Jul 31 2005 11:05:51

Load Damage Cleanup Template (DCT) "C:\Documents and Settings\Owner\Desktop\Sysclean\tsc.ptn" (version 631) [success]

Complete time : Sun Jul 31 2005 11:07:34
Execute pattern count(4165), Virus found count(0), Virus clean count(0), Clean failed count(0)

2005-07-31, 11:07:37, An error was detected on "C:\9d8b1fce8cafeb0fbbeac65329af\sp2\*.*": Access is denied.
2005-07-31, 11:07:41, Could not set file for reading on "C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp": Access is denied.
2005-07-31, 11:19:10, An error occurred while scanning file "C:\Documents and Settings\NetworkService\NTUSER.DAT": Access is denied.
2005-07-31, 11:19:10, An error occurred while scanning file "C:\Documents and Settings\NetworkService\NTUSER.DAT.LOG": Access is denied.
2005-07-31, 11:19:10, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2005-07-31, 11:19:10, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2005-07-31, 11:19:10, An error occurred while scanning file "C:\Documents and Settings\Owner\ntuser.dat": Access is denied.

purityscan\clickspring location C:\crash.txt

Joanna 0 Newbie Poster

19 Years Ago

I have the above adware on my pc, picked up by free XoftSpy software. :evil:

Could anyone please advise how to remove it?

Thank you
Joanna

Joanna 0 Newbie Poster

19 Years Ago

Hi Swatkat

I have not been able to get rid of the below:

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

I tried to unistall it from the Control Panel and my pc restarted with all the pixels and colours messed up and won't allow me to change them back in properties.

Can you help and should I start a new thread?

Thanks

Joanna 0 Newbie Poster

19 Years Ago

Thanks for all your help!

I think i will go on a course and try to learn a bit more about fixing my pc!

all the best
Joanna ;)

Joanna 0 Newbie Poster

19 Years Ago

hi swatkat

I have deleted the rest of the files you have highlighted.

I hope that its gone for good! Do you think its safe to enable system restore now?

Thanks for your time and your advice. :cheesy:

Joanna

Joanna 0 Newbie Poster

19 Years Ago

I have deleted the entry as advised.

Panda found:

Incident Status Location

Adware:Adware/CWS No disinfected
C:\Documents and Settings\Owner\Favorites\Fun & Games
Adware:Adware/Atlas No disinfected C:\WINDOWS\switpc.dat
Virus:Bck/Webdor.AL Disinfected
C:\Documents and Settings\Owner\d_cat.exe
Adware:Adware Program No disinfected C:\WINDOWS\Downloaded Program Files\WildApp.inf
Adware:Adware/Atlas No disinfected C:\WINDOWS\switpc.dat
Adware:Adware/Atlas No disinfected C:\WINDOWS\switps.dat

Latest Hijack:

Logfile of HijackThis v1.99.1
Scan saved at 10:47:41, on 03/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\HPPAVI~1\Pavilion\XPHWWBP4\plugin\bin\PCHButton.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\BT Broadband\Help\bin\mpbtn.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Documents and Settings\Owner\Desktop\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.co.uk/

Joanna 0 Newbie Poster

19 Years Ago

swatkat

Thank you for taking the time to help.

I have followed your instructions.

The scans did not find anything. System search could not locate

video_32D.exe
rtdkz.exe
smsc.exe
C:\Documents and Settings\Owner\Application Data\eber.exe

The new log is below:

Logfile of HijackThis v1.99.1
Scan saved at 00:32:50, on 03/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.freeserve.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search …

svchos1at.exe // svchoms1at.exe

Joanna 0 Newbie Poster

19 Years Ago

Hi there

My norton keeps alerting me to the above trojan. So far I have tried:

deleting the file from where I am told it is located C:\WINDOWS\ but it cannot be found even with hidden files shown.

ending the process in task manager but cannot see it.

locating it in HKEY_LOCAL_MACHINE again it is not shown.

Have run Spybot S&D, Norton and Ad Aware, all in normal and in safe mode, but to no avail. Noron does locate and delete the file in safe mode but it returns when I connect to the net. Killbox cannot find the file to delete it.

Can you advise how to get rid of this???

Many thanks

I have posted my hijackthis log below:

Logfile of HijackThis v1.99.1
Scan saved at 16:38:44, on 02/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslstat.exe
C:\Program Files\BT Voyager 105 ADSL Modem\dslagent.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE