Posts by caperjack

Thanks Crunchie .Boy you are Fast !

Hi ,I put in a request to Chrunchie for help with you problems,please stand by ,thanks

Ok lets follow the direction in this thread seems to be working .
Unistall hotoffers

Your copy of HijackThis needs to be in a folder of it's own. When HJT fixes anything, it makes backups of the original files in the folder it is in. Since Temporary folders are emptied now and then (the files are DELETED), it would not be a good idea to have your backups there. Those backups would be VITAL to restoring your system if something went wrong in the FIX process!

1. Please go to you're 'My Documents' folder, right-click and select 'New > Folder' then name the folder 'HJT'.

2. Copy and paste HijackThis.exe to the new folder.

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.
You might want to print out or copy & paste to notePad , these instructions as you will need to close this browser window to fix with hijackthis !

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotoffers.info/192/

R3 - Default URLSearchHook is missing

F2 - REG:system.ini: Shell=explorer.exe C:\WINDOWS\System32\netdc.exe

O1 - Hosts: 69.50.173.3 lycos.com www.lycos.com
O1 - Hosts: 69.50.173.3 lycos.com www.lycos.com
O1 - Hosts: 69.50.173.3 lycos.com www.lycos.com
O1 - Hosts: 69.50.173.3 lycos.com www.lycos.com
O1 - Hosts: 69.50.173.3

Hi ,welcome to DaniWeb ,not much wrong in you log all i see are these
,
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/28c1f8c...ip/RdxIE601.cab

O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)

O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)

Make sure you have all browser windows closed,wit hjust hijackthis open , run hijack and scan an check it and hit fix .

Well you got a few thinks need fixing , do the following first .
,,,,,,,,,,,,,,,,,,,

Go
Here and Get Trojan-Hunter Fully working trial! and run a full scan
,,,,,,,,,,,,,,,,,,,,,
To remove trojans there is a tool which needs to be downloaded and run.

1. Please download Stinger and save it to your desktop

2. Double-click on the stinger.exe file and open the tool

3. Choose your entire hard drive to scan.

4. Choose Scan Now

5. Stinger will fix anything that it finds

6. Click the File menu and select Save report to file

7. Post the log file results here in this thread.

STINGER

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Reboot to SAFE mode to delete files
How to start computer in safe mode

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan Please do an online scan, 2 would be better,

Micro World http://www.mwti.net/antivirus/free_utilities.asp
Trend Micro http://housecall.trendmicro.com/housecall/start_corp.asp

Make sure that you choose "fix" or "clean".

.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up …

I have to go to work for a bit but will check back later and do some looking

here's the new log:

BTW would it be alright if i got rid of the yahoo pager and stumbleupon crap? I don't want any of it on my system.

Yes ,i would think maybe you should go to add and remove programs in the control panel ,and look there and uninstall from there and then run hijack and fix anything releated to the two in the log .
also you could fix this .

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://channels.aimtoday.com/search/aimtoolbar.jsp

And these ,the good ones will come back when you visit the site again.

O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe

O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/act...l_v1-0-3-18.cab

O16 - DPF: {6FDB0065-2787-11D6-B1D8-0001023916FC} (CLOActiveXInstaller Control) - http://www.igl.net/clo/install/CLOA...tallerProj1.cab

O16 - DPF: {95844941-7934-4693-92D9-8202EA7B20ED} - http://www.stumbleupon.com/stumble.cab

O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yah...utocomplete.cab

can you please post a new hijackthis log .

Have you checked this bit of Microsoft info .

Go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties
,,,,,,,,,,,,,,,,,,,,,,,,
Please Don't post the hijackthis log in this section Thanks .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Please do this.
Download 'Hijack This!'. HijackThis
Save it in a convenient permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

Or HERE if that link fails to work or you don't have a zip program installed .

Your copy of HijackThis needs to be in a folder of it's own. When HJT fixes anything, it makes backups of the original files in the folder it is in. Since Temporary folders are emptied now and then (the files are DELETED), it would not be a good idea to have your backups there. Those backups would be VITAL to restoring your system if something went wrong in the FIX process!

1. Please go to you're 'My Documents' folder, right-click and select 'New > Folder' then name the folder 'HJT'.

2. Copy and paste HijackThis.exe to the new folder.

3. Close ALL windows except HJT

4. SCAN with HJT

5. POST the new log in this thread using 'Add Reply'

DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS SOME OF THE FILES ARE LEGIT AND VITAL TO YOUR COMPUTER'S HEALTH

I am trying to do an Fdisk/format on my friend's laptop. There is no floppy drive available. Is there a way I can use the CD Rom to do the procedure? In the past I have always used a WIN98 Start up disk - am unsure how to proceed since no floppy drive present.
Any advice would be greatly appreciated!
Regards,
Georgia

If you Are just trying to format and reload winxp ,just bootto the wixxp cd and format and reload winxp .
If you have a burner and NERO software you can create a bootcd using the content of the win98 boot floppy .in nero choose create bootcd and copy the content of the floppy to the cd and burn it ,it will boot computer just like a bootfloppy

Hi not much in you log ,Not thats causing you problem with shortcuts i dont think .you missed my request to move to the security section wuth you log ,I'll get someone to move it over maybe .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Also you have a proxi server setup correct ,the ip address belongs to the folowing ,this is your ISP .
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 218.25.35.199:80

OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU

ReferralServer: whois://whois.apnic.net

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.
You might want to print out or copy & paste to notePad , these instructions as you will need to close this browser window to fix with hijackthis !
<<<
you can fix these unless you want to use the yahoo redirect for home and search .most fix them .

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus...rch/search.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cus...://my.yahoo.com

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cus...//www.yahoo.com

O3 - Toolbar: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)

O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\sysupd.exe

Now reboot into safe mode and delete the following files and folders …

You may have seen this ,I have never done this, so not sure how it works ,

Hi,Marc M Welcome to DaniWeb,
This problem could occur because of Spyware , go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties
,,,,,,,,,,,,,,,,,,,,,,,,
Please Don't post the hijackthis log in this section Thanks .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Please do this.
Download 'Hijack This!'. HijackThis
Save it in a convenient permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

Or HERE if that link fails to work or you don't have a zip program installed .

Your copy of HijackThis needs to be in a folder of it's own. When HJT fixes anything, it makes backups of the original files in the folder it is in. Since Temporary folders are emptied now and then (the files are DELETED), it would not be a good idea to have your backups there. Those backups would be VITAL to restoring your system if something went wrong in the FIX process!

1. Please go to you're 'My Documents' folder, right-click and select 'New > Folder' then name the folder 'HJT'.

2. Copy and paste HijackThis.exe to the new folder.

3. Close ALL windows except HJT

4. SCAN with HJT

5. POST the new log in this thread using 'Add Reply'

DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, …

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

this indicates you are using msconfig ,and we need for you to go to msconfig ans check , normal startup to, load all device drives and services ,so we can see all what in startup,thnaks ,run hijack again and post a new log

Hi,
I tried to scan with trendmicro.com but there 's a pop up message :
Your current security settings prohibit running ActiveX controls on this page. As a result this page may not display correctly.
And nothing got downloaded.
Thanks,

OK ,did you download and run CWShredder and then scan with hijack again do the fixes suggested .

lets start with this .
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from HERE

Then it’s time for Ad-Aware
Ad-Aware
Install and update by using the globe icon. Restart your computer and run Ad-Aware.
Press scan now and select drives and/or partitions to be scanned. When done select all and click next. Remove all checked items and then reboot your computer.

Please go to this page and read the instructions for how to configure Spybot S&D & Ad-Aware
How To Setup Spybot SD and Ad-Aware

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.
You might want to print out or copy & paste to notePad , these instructions as you will need to close this browser window to fix with hijackthis !

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL (file missing)

O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)

O2 - BHO: (no name) - {0547E87F-AAC0-97FE-0FE4-FE099C732FDB} - C:\WINDOWS\system32\nwlohvxj\sciwvwwa.dll (file missing)

O2 - BHO: (no name) - {221672FF-375B-4A2D-11CD-EF162050B0CF} - C:\WINDOWS\system32\knyicbio\rpefbsvg.dll (file missing)

O2 - BHO: (no name) - {2427E087-83FF-8B63-74A8-EA2BE57BA6C1} - C:\WINDOWS\system32\udhabvby\xgsdbfyb.dll (file missing)

O2 - BHO: (no name) - {24753D53-C339-2EE6-ACBE-4720F038BDE3} - C:\WINDOWS\system32\ultikesg\ntwqdmop.dll (file missing)

O2 - BHO: (no name) - {2ACCB4DA-AB30-966B-DC03-8FF0862940F3} - C:\WINDOWS\system32\lhksvvbc\wyjafihm.dll (file missing)

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)

O2 - BHO: (no name) - {7080746F-2C59-27A5-846E-DA843F768E11} - C:\WINDOWS\system32\cetywdcp\gsmpbjcb.dll (file missing)

O2 - BHO: SDWin32 Class - {8761538E-DE6C-44AD-BBB6-5DCC92E25052} - C:\WINDOWS\system32\dtohb.dll (file missing)

O2 - BHO: (no name) - {A025B920-B8B6-F629-C6A5-81FACBBDC8B5} - C:\WINDOWS\system32\vlauxqxj\vdytsfui.dll (file missing)

O2 - BHO: (no name) - {B4BE4E49-4A17-04E5-7E17-152D23673F64} - C:\WINDOWS\system32\ibvymkcp\qhgwrrvu.dll (file missing)

O2 - BHO: (no name) - {B53A39A9-608A-3781-429D-002D37288C1F} - C:\WINDOWS\system32\xhvnmudu\pqcrehav.dll (file missing)

O2 - BHO: (no name) - {D13B7F44-3014-DB5B-DA8B-287F392A9C3F} - C:\WINDOWS\system32\inhwetlq\wgptnntk.dll (file missing)

O2 - BHO: (no name) - {E1A1AE48-6EFA-3856-B99F-A968805D48D3} - C:\WINDOWS\system32\btknbyun\bcewusnq.dll (file missing)

O2 - BHO: (no name) - {E73BB602-AC91-A115-74A5-C92128D820D4} …

http://www.pcbuyerbeware.co.uk/Sound2.htm
Check that link for info on you problem .remember when editing the registry be sure to make a backup first ,to do so go to file in the open regedit program and click export and name it and save it to you harddrive .

Thanks for that Caperjack. Actualy, it's not my PC, it's a lady on one of the MSN groops I'm with, so will let you know how she does. Many thanks, Bob.

Your welcome :)

it is a mp3/cd player and not the digital one. i put the batteries in right. I did not drop it down..any suggestions...

No .not really ,it is strange when something works and just stopes working ,for no aparent reason .give the bugger a shake !

First of all, thanks to both of you for such prompt replies. I am in the process of doing what you two suggested, and will post the results.

There is something that I ran into earlier, and it is happening again. When I ws downloading the new version of HJT, it would download the zipped file, but when I would try to extract the exe file, it would run the Winzip, but the file is not extracted. It tells me that the exe file does not exist. I tried 4-5 different sites. Finally, it did extract the file, but by mistake I deleted it after runnnig the fist scan. Now, when I am trying to download it again, it is doing th same thing. The older version did not give me any problem...Any idea?

I will do what you two suggested in the meantime.

Thanks again for prompt replies!

HijackThis direct download: HIJACKTHIS.EXE

Crunchie I get a 404 error with that link ,try this one
fix for winxp
http://members.shaw.ca/techcd/WinsockXPFix.exe

EDIT: My link no longer works also .

EDIT #2 Lets Try this one .
http://www.softpedia.com/get/Tweak/Network-Tweak/WinSockFix.shtml

Hi,
I seem to have lost my recycle bin on my desktop, I can see it in windows explorer, but how do I restore it to the desktop??????? OS is windows XP home.
Any help would be most appreciated. Thanks. Bob.

Hi ,I found this with our friend www.Google.com.
http://support.microsoft.com/?kbid=810869&sd=RMVP

my coby mp3 player does not turn on (no lcd display) when I turn it on. I tried conneting the mp3 player to dc adapter and also tried using batteries. But no use. The player requires 2 batteries or a adapter 4.5 v dc. But does not turn on..please help me...my warranty period expired too (90 day warranty)...

Ramesh Natesan :-|

is it the disk mp3 player or digital one ,did you drop it maybe ,,how long did you own it,did you put the batteries in right.

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan Please do an online scan, 2 would be better,

Micro World http://www.mwti.net/antivirus/free_utilities.asp
Trend Micro http://housecall.trendmicro.com/housecall/start_corp.asp

Make sure that you choose "fix" or "clean".

.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from :-
HERE
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Then please do this since it’s better to use automated tools to get rid of the bad stuff use these 2 programs first before doing the final cleaning with HJT

First use Spybot S&D. (Version 1.3)
Spybot
Unzip, and update. Install the updates and run. Delete all that it marks in red.
Reboot

Then it’s time for Ad-Aware

Yup, also tried installing drivers that I had downloaded off their website (burned a cd while at work). The computer knows the name of the card (Intel Pro 100+ Management Adapter) but puts it under the category "unknown" with a yellow exclaimation point. The WAN Miniport (ATW) does this as well (aol's version of adapater). My system is clean in the way of viruses and spyware. All I did was move my comptuer from one room to another and now it doesn't work. :cry:

I agree with ThongInspector , it seems to be a matter of the wrong drivers or even a dead nic card .they do give up the ghost like all computer parts .

also the title of you post ,reformat or buy a new computer ! not really a good reason to buy a new computer ,unless that is someone else is going to buy it for you !lol then any excuse is a good one .:)

I have a ATI Radeon 9200se VGA and I have connected my TV to its output and selected "Extend my windows desktop on to this monitor" for the second recognized monitor (TV)
now my question is that how can I keep the screen playing (in the TV cause it become black) while I start playing a full screen game cause when I start the game the program's screen that is playing the movie becomes black and only the sound is played.

You need a video card with 2 monitor connections to do this not just a card with tv out .

How do I update IE and XP......is it just through the Microsoft update????
Thanks
G

Yes .get the critical updates for xp up to sp1 .you allready have ie sp1

after you empty temp folders do the folowing
make sure all browsers are close ,only hijackthis open and run scan and fix the following
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u

This process will clean out your Temp files and your Temporary Internet Files. Please do both steps:

Step 1:Delete Temp Files
To clean out your temp files, click on Start and then run, and type %temp% and press the ok button.

This should open up the temp directory that your machine uses. Please delete all files that are found there. If you get an error when deleting a file, skip that file and delete all the others. If you had trouble deleting a file, reboot into Safe Mode and follow this step again. You should now be able to delete all the files.

Step 2: Delete Temporary Internet Files
Now I want you to open up Internet Explorer, and click on the Tools menu and then Internet Options. At the General tab, which should be the first tab you are currently on, click on the Delete Files button and put a checkmark in Delete offline content. Then press the OK button. This may take quite a while, so do not be alarmed with how long it takes. When it is done, your Temporary Internet Files will now be deleted.

just reposting you log ,change format a bit for easier read.
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\Mixer.exe
C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\The Weather Channel\The Weather Channel.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\DataViz\DvzIncMsgr.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dwwin.exe
C:\Program Files\Brownie\brstswnd.exe
C:\Program Files\Brownie\Brcdcmon.exe
C:\Program Files\Blaze Audio\RipEditBurn 2\REB32.exe
H:\My Documents\HiJack This\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.nyt.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title =
Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,AutoConfigURL = http://localhost:8080/proxyconf
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyServer = localhost:8080
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} -
C:\Program Files\DAP\DAPBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} -
C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: Ipswitch.WsftpBrowserHelper -
{601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\Program Files\WS_FTP
Pro\wsbho2k0.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7}
- c:\windows\downloaded program files\googletoolbar2.dll
O2 - BHO: …

thanks for that better log :)

Hi

Hopefully someone can help - I am trying to insert a Real Player video clip into a Powerpoint presentation. I understand that I need to convert the file before I can do this. I have downloaded several free converters, but am still struggling with this..

:sad:

Can anyone help out a complete berk??!!

Cheers

Jimmy

what file type dose it need to be converted to .

in fax viewer there is a icon down the bottom next to the help icon ,to close and open image for editing .
Not sure where Alohabob PC Relocator put it but if you go to start /search and type in the name someting should come up
in add remove programs in control panel you will find on the left an option to manage defaults ,not sure if it will be in the list though .
If you find the program you are looking for take note of where it is ,and then right click on a image and go to open with and select the program from the list ,it might not be in the list so you will have to navagate to where you found the program !lost I' am

Your copy of HijackThis needs to be in a folder of it's own.
Yours need to be unzipped first ,
When HJT fixes anything, it makes backups of the original files in the folder it is in. Since Temporary folders are emptied now and then (the files are DELETED), it would not be a good idea to have your backups there. Those backups would be VITAL to restoring your system if something went wrong in the FIX process!

1. Please go to you're 'My Documents' folder, right-click and select 'New > Folder' then name the folder 'HJT'.

2. Copy and paste HijackThis.exe to the new folder.

3. Close ALL windows except HJT

4. SCAN with HJT

5. POST the new log in this thread using 'Add Reply'

DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS SOME OF THE FILES ARE LEGIT AND VITAL TO YOUR COMPUTER'S HEALTH
,,,,
go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties
,,,,,,,,,,,,,,,,,,,,,,,,

1. Please go to you're 'My Documents' folder, right-click and select 'New > Folder' then name the folder 'HJT'.

2. Copy and paste HijackThis.exe to the new folder.right click on the file to copy it then go to the newley created folder and right click on and paste it

3. Close ALL windows except HJT

4. SCAN with HJ

do not post a log in this section ;
go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties

Is there a way to choose a System Restore date from the previous month? I had had SR turned off for a few weeks so the earliest date I would have would be Feb. However, even though the pointer turns into a "hand" when I try and click on the << to back up a month, nothing happens.

thx

if you had it turned off for a few weeks all restore points before you turned it off are gone !! latest goback date would be the day you turned it back on.

I plug the usb in, it says new hardware installed, and then in the bottom right i get the icon to connect/disconnect it, but I cant find the drive so I can copy things to it...

so there is no icon to the device in mycomputer.
what if you right click on a file,go to send to ,does it show up a device to send the file to.

I've tried everything I know and searched all kinds of message boards and talked to all kinds of tech support people on the phone. I still cannot connect to the internet. The NIC and the modem are coming up under "Unknown" with a yellow exclaimation mark.

Someone on another board (who had the same issue) did an FDisk and reloaded. My question is, should I bother attempting this on a 3 year old computer? I've always run Windows XP, but I can't imagine all the updates that I would have to d/l if I restored using my original factory XP disk. Not to mention, everything else works fine right now, music, games, word processing, Excel - I would hate to do all this work and not gain anything (ie, still not get the NIC to connect).

Also, if I do decided to reformat, are there any good articles out there for non computer people that will walk me through the process?

can't answer you question on to format or leave it the way it is that would hwve eto be your decision .
as for if the nic /modem will it work after format ,it won't if its broke now ,but it most likely will ,if it not working now because of spyware /trojans /or a virus .
have you tried in device manager right clicking on the nic and modem and deleting them and rebooting and let windows reinstall drivers .

Go
Here and Get Trojan-Hunter Fully working trial! and run a full scan
,,,,,,,,,,,,,,,,,,,,,
To remove trojans there is a tool which needs to be downloaded and run.

1. Please download Stinger and save it to your desktop

2. Double-click on the stinger.exe file and open the tool

3. Choose your entire hard drive to scan.

4. Choose Scan Now

5. Stinger will fix anything that it finds

6. Click the File menu and select Save report to file

7. Post the log file results here in this thread.

STINGER

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Reboot to SAFE mode to delete files
How to start computer in safe mode

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan Please do an online scan, 2 would be better,

Micro World http://www.mwti.net/antivirus/free_utilities.asp
Trend Micro http://housecall.trendmicro.com/housecall/start_corp.asp

Make sure that you choose "fix" or "clean".

.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

No, but i'll give it a shot as soon as i get home to my computer. I honestly dont think that will do it. I think when i was using hijack this i accidentally ticked the wrong box. What might have been in there that i messed up?

dont know .when you used hijackthis if you did it right it creates backups ,you could restore the changes .in hijack go to config/backups /check all all an restore ,
that is if you still have the orginal hijackthis .
Highjack thisis a good tool but is to be used with the help of someone who knowes the program and is helping you with the log .'try this .
,,,,,,,,,,,,,,,,,,,,,,
go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties
,,,,,,,,,,,,,,,,,,,,,,,,
Please Don't post the hijackthis log in this section Thanks .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Please do this.
Download 'Hijack This!'. HijackThis
Save it in a convenient permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

Or HERE if that link fails to work or you don't have a zip program installed .

DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS SOME OF THE FILES ARE LEGIT AND VITAL TO YOUR COMPUTER'S HEALTH

This problem could occur because of Spyware , go on over to the Security section of this fourm and post you problem along with a hijackthis log .
Spyware & Trojans and Other Nasties
,,,,,,,,,,,,,,,,,,,,,,,,
Please Don't post the hijackthis log in this section Thanks .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Your copy of HijackThis needs to be in a folder of it's own. When HJT fixes anything, it makes backups of the original files in the folder it is in. Since Temporary folders are emptied now and then (the files are DELETED), it would not be a good idea to have your backups there. Those backups would be VITAL to restoring your system if something went wrong in the FIX process!

DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL WE CHECK THE LOG, AS SOME OF THE FILES ARE LEGIT AND VITAL TO YOUR COMPUTER'S HEALTH

Caper, you are a lifesaver. The problem is fixxed. After doing the fix from HJT and before deleting those other 2 items in Safe Mode it was running again as it should. Thank you for all your help.

your welcome .

the svchost in the system32 folder is legit and needed don't delete it... the one in the windows folder is the bad one .

Yes- The C:\Windows\system32\svchost.exe program is the valid Microsoft program; don't delete that one.

to fix the missing file message try this .
missing Dll

first thing, you are running hijackthis from within the zip program pelase unzip it to your hard drive ,in a foler name it C:\hjk,.also what did you fix with hijackthis , hijack is a tool that is use to show people who know how to decipher the log ,and instruct you on what is safe to remove ,it looks like you have removed quite a bit .!
if hijack saved backups of what you removed you should open hijack,go to config/backups and check off all and restore ,then unzip it to harddrive as suggested and rescan and post a new log .

I dont know something just sounds wrong in that sentence.

lol ,i seen it worded wrong so many time,i just assumed the poster means removal tools .

Hi ,Welcome to DaniWeb ,try some of the programs listed below !
.................................
Google results error message
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Go
Here and Get Trojan-Hunter Fully working trial! and run a full scan
,,,,,,,,,,,,,,,,,,,,,
To remove trojans there is a tool which needs to be downloaded and run.

1. Please download Stinger and save it to your desktop

2. Double-click on the stinger.exe file and open the tool

3. Choose your entire hard drive to scan.

4. Choose Scan Now

5. Stinger will fix anything that it finds

6. Click the File menu and select Save report to file

7. Post the log file results here in this thread.

STINGER

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Reboot to SAFE mode to delete files
How to start computer in safe mode

Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.

Do a virus scan Please do an online scan, 2 would be better,

Micro World http://www.mwti.net/antivirus/free_utilities.asp
Trend Micro http://housecall.trendmicro.com/housecall/start_corp.asp

Make sure that you choose "fix" or "clean".

.
,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip …