Posts by caperjack

i am currently downloading the engine of the online scan, would stand by till i've finished, thank you.

Sure Ill be here fo awhile yet .im working on a reply to you next log now ,picking all the bad stuff from the last log and we;ll fix whats left after the scan ,

Edit .I suscribe to post i respond to and will be watching ,or you can pm me .

where would i find the " online scan " ? Do you have MSN messenger/AIM? It'll be easier to talk to you

the links to them are in post #5

Sorry I don't use any of the messenger programs .

please run the online scans first as there is some stuff that the scans will fix and make it easier to fix with hijack. thanks.

Edit : you have trojanhunter installed ,you log showes known trojans ,Have you used Trojan hunder to do a full scan of your computer .

actuall i errored in my first post .i just wanted to tell you to close all browser and Ecplorer windows before fixing with hijackthis ,Yes you can fix the things in Mikeandikes post .then post back a new log .sorry to confuse you .
Also I could be wrong but I think if you ran spy-Bot and Ad-aware it would fix a lot of the bad stuff in you log ,be sure to click to fix the things both programs find .also a couple of online scan to run too.

,,,,,,,,,,,,

Please run these free online Virus scan

Be sure to Check off Auto Fix on this site

http://housecall.trendmicro.com/housecall/start_corp.asp
please run this one also to be sure .

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Actually before you post a new log run these online virus scans please .

Please run these free online Virus scan
be sure to check Auto Fix
http://housecall.trendmicro.com/housecall/start_corp.asp

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

this shows me you have IE open when running hijackthis please close all browser windows and window explorer windows ,Run hijack again and post another log ,only hijackthis should be open thanks .
C:\Program Files\Internet Explorer\iexplore.exe.

Your welcome >:)

Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.

O4 - HKLM\..\Run: [Sys29] C:\WINDOWS\SYSTEM\WINPDN32.EXE

Now reboot into safe mode and delete the following files and folders if found .

C:\WINDOWS\SYSTEM\WINPDN32.EXE.............delete thid file

to delete the above files and folder you will need to do the following
go to
Show hidden files & folders

"Fix Checked"...Reboot to SAFE mode to delete files
How to start computer in safe mode

reboot computer and post a new log

I was running Win98SE, and upgraded to XP last week ==upgrades are not recommended ,neve have been except by Microsoft.do a full install of XP ,you should be able to do this if you xp is a upgrade disk ,you will just need to insert the win98 disk when asked .!note you will loose everything so make backups of important things .
Also make sure you have the SP2 befor you go online to avoid getting known viruses.
download the full version here if you have a burner to copy it to disk and install it before you go online after install of XP
http://www.microsoft.com/downloads/details.aspx?FamilyID=049c9dbe-3b8e-4f30-8245-9e368d3cdb5a&displaylang=en

I'm running Xp Pro. I'll try scandisk and see what happens thanks

Go to MY computer and right clikc on you hardrive and go to properties .tool and check of to checkdisk ,reboot .

Will this program find anything that Ad-adware couldn't?
Thanks

The 2 programs are recommended, as one will find things the other doesn't .

svmhost.exe’ is left by a Worm.
http://www.sophos.com/virusinfo/analyses/w32forbotch.html
Check the Advance tab
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Run these free online Virus scan

http://housecall.trendmicro.com/housecall/start_corp.asp

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Do have SP1 or 2 install ,I use WinXP Home with SP2 ,and the windows firewall has a lot more option than the one with SP1,Is it enought ,It is for me !.I have noton2003 Anti virus ,and SpyGuard and TrojanHunter running all the time in the background ,Also IE-Spyad and Spywareblaster install .! and feel secure enough ,

These links maybe a little old i think but will still apply .
http://freepctech.com/pc/001/guide_dual_monitors.shtml

http://www.cyberinkdesign.com/dual_monitors.htm

http://www.superwarehouse.com/Dual_Monitor_Video_Cards/c3/1884

http://www.google.com/search?hl=en&q=dual+monitor+video+cards&spell=1

Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.zerosrealm.com/downloads.php
http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from here :-
http://service1.symantec.com/SUPPORT/tsgen...001052409420406

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Reboot computer and run hijackthis again and this time post the full log !!

Please do this.
Download 'Hijack This!'. http://www.spywareinfo.com/~merijn/files/HijackThis.exe
Save it in a convenient permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, Ctrl-A to Select All, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Go here and post you log ,with a explanation of you problem Here

Tea timer is known to have few bugs ,you could try disabling it and see what happens.
Any program that is using 40-50% of your resources just to run in the background wouldn't be running on my computer !

There is alot more going on in that log than the few things mentioned in the posts above ,please do the following .,,,,,,,
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

Try these programs to check for Spyware .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.zerosrealm.com/downloads.php
http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from here :-
http://service1.symantec.com/SUPPORT/tsgen...001052409420406
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

1. Downloaded and Install Spybot S&D, accepting the Default Settings
(Please ensure you have version 1.3 final.)
Home - The home of Spybot-S&D!: SpyBot download

2. Go to Start > Programs >Spybot – Search & Destroy and choose Spybot S&D

3. Close ALL windows except Spybot S&D

4. Click the button to ‘Search for Updates’ and download and install the Updates.

5. Next click the button ‘Check for Problems’

6. When Spybot is complete, it will be showing 'RED' (RED) entries ‘BLACK’ entries and ‘GREEN’ (GREEN) entries in the window

7. Unsure there is a check mark beside the RED (RED) entries ONLY.

8. …

Please do this.
Download 'Hijack This!'. http://www.spywareinfo.com/~merijn/files/HijackThis.exe
Save it in a convenient permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, Ctrl-A to Select All, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.

,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Also before you fix anything with hijackthis do the following .

,,
Make sure all browser and all Windows Explorer windows are closed before fixing.

start with this .Download and install all these first then run them following the instructions below .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Download then unzip and run CWShredder to clean up clicking "FIX" to have it remove all it finds.

CWShredder available from these places :-

http://www.zerosrealm.com/downloads.php
http://www.aluriasoftware.com/tools/cwshredder.zip
Or this as a full download without any unzipping required
http://www.downloads.subratam.org/CWShredder.exe
http://www.spywareinfo.com/downloads/tools/CWShredder.exe

We have found that some of the CWS infections can be removed better from safe mode, rather than normal mode.
To get to safe mode use the F8 key while booting the machine. Detailed instructions from here :-
http://service1.symantec.com/SUPPORT/tsgen...001052409420406

Stay in safe mode and run the other programs from there .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Then this one .

Downloaded and Install Spybot S&D, accepting the Default Settings
(Please ensure you have version 1.3 final.)
Home - The home of Spybot-S&D!: SpyBot download

2. Go to Start > Programs >Spybot – Search & Destroy and choose Spybot S&D

3. Close ALL windows except Spybot S&D

4. Click the button to ‘Search for Updates’ and download and install the Updates.

5. Next click the button ‘Check for Problems’

6. When Spybot is complete, it will be showing 'RED' (RED) entries ‘BLACK’ entries and ‘GREEN’ (GREEN) entries in the window

7. Unsure there is a check mark beside the RED (RED) entries ONLY.

8. …

not a valid win32 app errors usuall means that the download was corrupt

pretty gay ! in the same sentence,if you were gay ,being pretty and gay ,would be a good thing wouldn't it !:)

If this were my computer I would install the Google Tool bar and activate the popup stopper in options ,It stopped most all the popup when i use it before SP2,I still use the toolbar for searching ,but disabled the popup stopper ! good luck

Run onover to the viruses and spyware and other Nasties section of this fourm winsock.scr is a Nastie !!:)

Viruses and nasties

but I noticed when I installed the hardrive that my originall drive was a fat32

this confused me sorry .

Caperjack, thanks a million for your quick response. My son lives to see another day.
Irok

Your welcome ! Live on Son:)And keepa you hands of of the Puter

Sorry, change it back to what? :eek:

Sorry i thought you knew what was wrong!
go to control panel and display and change the Video screen resoulotion 680x400 and apply changes and on you way out and reboot /

click on the icon and click properties / change icon . and navagiate to this file and try changing the icon .
C:\WINDOWS\system32\shell32.dll

How many icons are we talking about maybe you could just delete them one at a time and then go to that programs folder in C:\ programs file or where ever it maybe and right click on the. EXE and send to to the desktop as a shortcut!

reboot ,keep hitting the f8 key and go into safe mde and change the display back

You say you can connect to your ISP ,does it open to a start page or just a error message !!

Try ,start /run /winipcfg/ pick you network card from the drop down ,then hit release all and then Renew all .see what happens

What does it say when you try to axcess the site .

C:\Program Files\Webroot\Mpf4\Mpf.exe /S

The above program is a spyware blocking program right! Im not familiar with it but it maybe that it has some setting changes that is blocking that page ,i don't see anything in you log that could be causing it .
also check IE tools /internet options /security and amke sure the site is not in blocked site

I didn't fix it , listen this,when I open Control Panel and mark one of the icons,let say System icon, then click up button my Desktop turn for 180 °, if I press left Desktop turn for 180° from left to right.
Lucky I am I accidentally discover this otherwise my monitor could stand vice versa , He He,now I'm loughing to this.
Interesting,people?

Speaking of couldn't resist!
Greek in English !! HeHe !! What.
Im still looking for my Up button :)

Run Scandisk ,It will fix space errors !!!

time to take the drive out and install it in another machine !and if you tried that and its still the same ,Throw the dam thing away ,

That won't work in xp unless the start menu was set to classic view!

Do you have multiple users accounts setup on you computer ,if so is it the same for all useres ,if no ,go to control panel and users and create a new acct and see if the same happens with that acct

Lets try this part again,this time run hijackthis in safe and scan and fix items below ..................
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,
Have Hijack This fix the following by placing a check in the appropriate boxes and selecting fix checked. Make sure all browser and all Windows Explorer windows are closed before fixing.

F3 - REG:win.ini: run=C:\WINDOWS\inetdata\winlogon.exe

O2 - BHO: (no name) - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)

O4 - HKLM\..\Run: [xp_system] C:\WINDOWS\inetdata\winlogon.exe

O4 - HKCU\..\Run: [xp_system] C:\WINDOWS\inetdata\winlogon.exe

stay in safe mode and delete the following files and folders if found .

C:\WINDOWS\inetdata\,,,,,,,,delete the entire inetdata folder .

to delete the above files and folder you will need to do the following
go to
Show hidden files & folders

"Fix Checked"...Reboot to SAFE mode to delete files
How to start computer in safe mode

reboot computer and post a new log

Good point !

Reboot to SAFE mode to delete files
How to start computer in safe mode
You should be able to reset them back in safe mode

I still have the same problem as I did before. I hope the experts can help. Thanks

Yeah Me to :)

I agree ,I once was called out to fix a computer that was on dialup ,because the internet wouldn't work,He could connect but he could do nothing ,Problem was that the Store where he bought comp had Auto windows updates set ,and Norton antivirus and 2 others ,all were downloading updates that would take abought 2hrs on dialup ,using about 90%CPU ,A
nd about 6 programs running in the background ,programs that they thought he might like to have quick axcess !!

MajorGeeks is another reputable site where you can download the (free) programs caperjack mentioned, as well as many others.

BTW caperjack: you said "SpyGuard"; I think you meant SpywareGuard, yes?

Yes SpywareGuard ,sorry for the typo.
MajorGeeks is a very good site ,my links go right to the maker of the software !If you can't trust them who can you trust .!:) LOL

I didn't re-read all the posts but i don't think we tried this ,go into device manager and uninstall the DVD player and rebooting windows and reloading the drive .

Mycomputer/properties/hardware/device manager,double click the dvd drive and uninstall .

You really should but hijackthis in its own folder .
,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,

please create a folder in My Documents and call it Hijack (or something similar). Then extract hijackthis into the folder you have created and run it from there. The reason for this is that Hijackthis cannot create backup files whilst it is being run from a temporary folder

I have heard of and it is said to be good .
Why buy one whem Spy-bot and ad-Aware Are Free ,and do a great job of cleaning spyware from computer ,and Spy-Bots imunize keeps them away .
,and when used along with SpywareBlasters and SpyGuard and IE-Spyad, That block spyware and ActiveX and Browser hijackers . and are also Free.
This is a link from my signature to these free programs and i use all 5 ,and have no problems with spyware ,Im on Cable and its left on all day ,and night sometime downloading Movies and Stuff!!

http://subratam.org/?page=software&part=Spyware-preventions

http://forums1.itrc.hp.com/service/forums/bizsupport/questionanswer.do?admit=716493758+1100694159037+28353475&threadId=731157

This is just a theory, so if anyone knows whether or not this is possible, please let me know.

It's possible you could have several applications set to auto-update when the computer is restarted. When you connect right away, they all fight to get their respective updates. By not connecting right away, they may stop trying to update and turn their 'update' off till the next reboot. When you do connect, some may still get their updates, but others may wait until you restart your computer. And it may not be only applications you have installed, there could also be some malware trying to connect itself amongst them. Anti-virus programs don't stop everything!

(Does this make any sense?) :confused:

Makes Sense to Me.!!!but so does most everything else when it comes to a computer !LOL

What is a runtime error !
http://www.webopedia.com/TERM/R/runtime_error.html
Others links that might help .
http://www.google.com/custom?q=runtime+errors&cof=GIMP%3Ared%3BT%3Ablack%3BLW%3A150%3BBIMG%3Agray%3BALC%3Ared%3BL%3Ahttp%3A%2F%2Fhome.eastlink.ca%2Fimages%2Felcslogo.gif%3BGFNT%3Agray%3BLC%3Ablue%3BLH%3A45%3BBGC%3Awhite%3BAH%3Aleft%3BVLC%3Apurple%3BS%3Ahttp%3A%2F%2Fhome.eastlink.ca%3BGALT%3Agreen%3BAWFID%3A4ba87f8562bc4600%3B

I my humble opinion ,you will be able to do nothing with it until you can get the bios to reconise it .
Try slaving it in another computer if possiable ,to see if it will reconise it ,If it does then transfer and needed Data to the other computer .the drive may have Died a quiet death!:)

Reguardless if you go online or not it will still only work for 30 days if not activated!
If its a legit copy of XP ,if it a pirated copy it doesn't need to be activated !also if it a pirated copy it shouldn't be on the laptop!:)