Posts by mikeandike22

Logfile of HijackThis v1.98.2
Scan saved at 9:17:26 PM, on 8/26/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\w32usb2.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\System32\CTHELPER.EXE
C:\WINDOWS\System32\winprocessor.exe
C:\WINDOWS\System32\Systmesy.exe
C:\WINDOWS\System32\syscfg32.exe
C:\WINDOWS\System32\Microsoftx.exe
C:\WINDOWS\System32\winxp32.exe
C:\WINDOWS\System32\Rlstard\Anti.exe
C:\WINDOWS\System32\Rlstard\mosso.exe
C:\WINDOWS\System32\wuauclt.exe
C:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://cgi.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=5.1.5&bm=ho_search
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cgi.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=5.1.5&bm=ho_home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [winprocessor Update] winprocessor.exe
O4 - HKLM\..\Run: [Cryptographic Service] C:\WINDOWS\System32\uwllem.exe
O4 - HKLM\..\Run: [Systmesy] Systmesy.exe
O4 - HKLM\..\Run: [Configuration Loader] syscfg32.exe
O4 - HKLM\..\Run: [System Update] C:\WINDOWS\System32\vcgpnk.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Win32 USB2.0 Driver] w32usb2.exe
O4 - HKLM\..\Run: [Microsoft Update] Microsoftx.exe
O4 - HKLM\..\Run: [WinXp Updater] winxp32.exe
O4 - HKLM\..\Run: [Win Updater] winupdater.exe

ok new problem i need this one answered first.
how do install these files using rawwrite floppies and the img files given to me.

Ok i want to install fedora core 1 on my computer along side winxp so how can i partition the drive using the built in partitioner so that i dont destroy my windows xp because then my family would kill me. Should i just setup the partion with something like partition amgic or what is the proper way to set it up using the fedora core partitioner. And I've been to redhats site but they where no help and i have FC 1 because cant waste my time downlaoding FC2. Also it is not really the option of choosing which one to boot (I already have osl2000 boot manager) but how to partition it. someone help or just give me a link to a good tutorial that someone with not a lot of linux experience can actually understand.

run registry mechanic then post your hijack this log in the security forum. And if know one can tell you what to fix on ur log then try a system restore to before this problem happened.

post you hijack this log and try running registry mechanic it will fix some problems in the registry itself. But make sure to post your HJT log here. Why did you name this "please read this hijack this log and advise" if you didnt post the log.

sorry about double posting but post your log in security

download hijackthis then scan and post your log here.

that place is just selling things like sot and openoffice for a dollar so you can have it on a cd.

that is for linux i think that he is using some version of windows os. I would definitley say if you want it fro free openoffice.org is the way to go.

make a backup of your registry first using system restore.
first here are some of your processes that look a little odd and maybe you could clarify what they are:
C:\Documents and Settings\Jon Svaleson\Application Data\oeet.exe
C:\WINNT\UP9ASP.INI:flcyy
O4 - HKLM\..\RunOnce: [flcyy] C:\WINNT\UP9ASP.INI:flcyy
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [Brct] C:\Documents and Settings\Jon Svaleson\Application Data\oeet.exe
these entries look like spyware:
O4 - HKLM\..\Run: [WebRebates0] C:\Program Files\Web_Rebates\WebRebates0.exe
O4 - HKLM\..\Run: [uzuwiqhmtnqtd] C:\WINNT\System32\dpekpqt.exe
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINNT\Downloaded Program Files\bridge.dll",Load
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchmiracle.com
O16 - DPF: v2cab - http://searchmiracle.com/cab/v2cab.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yah...utocomplete.cab

So make a backup then check these entries and fix them If this doesnt work then do a system restore to that point that u just made. If those selected entries get rid of the problem then post your new hijack this log so someone can tell you to get rid of things i missed.

when loading the xp cd did you make sure that your bios was set to boot from cd. And if you have another had drive then take out the one with windows in it boot from cd and install windows onto that HD. Then put your old drive in the second slot and transfer any programs or personal data that you want then wipe it clean.

after youve done all that stuff like spyware scans with adaware and spybot and got rid of some stuff on your hard drive i would post you HJT log again maybe in a different post because i dont think anyones taken interest in this post.

oops sorry didnt read this line" cd-rom emulators parse the .iso file and create a virtual cd-rom drive allowing you to use/view the cd from your hard drive. ex program: daemon tools. http://www.daemon-tools.cc/dtcc/portal/portal.php" of your post binary i thought that you said all you could do is burn the iso's.

no if you have virtual drives like either virtual cd 6, nero image drive, or daemon tools which all setup virtual drives on your computer. a virtual drive is a non existing drive that acts like a cd/dvd drive. I use nero image drive all you have to do is right click the iso and say open with and then what ever program you decide to get. You can also use programs like isobuster, winrar, or magic iso to extract the files inside the iso and access them that way. If you want to extract Iso images i would suggest winrar because its free and opens almost any type of compressed file.

It has things like powerpoint and excel too and you can save those documents to be opened on another computer using the microsoft office products

yes you just have to save the document in either doc format or rich text format

you might just have to get rid of things on your computer like programs that you dont want then spyware scan and then defragment your drive. And if you dont do this regulary make sure to delete your temporary files.

yes i have used openoffice it is the same to use the only dislike is that it loads slowly but for free i dont mind

thanks i will tell you if it works

Logfile of HijackThis v1.98.2
Scan saved at 11:49:57 AM, on 8/24/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wms\IMish32.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\WINDOWS\system32\wms\sedv.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Verizon Online\SupportCenter\bin\mpbtn.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\Common Files\Verizon Online\SFP\vzNetSvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\DOCUME~1\OWNER~2.STE\LOCALS~1\Temp\Rar$EX00.047\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://cgi.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=5.1.5&bm=ho_search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SaveIt] C:\WINDOWS\system32\wms\seb.exe C:\WINDOWS\system32\wms\IMish32.exe
O4 - HKLM\..\Run: [3B1FA79E] C:\WINDOWS\System32\pcrodedqlm.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - HKLM\..\Run: [CTDVDDet] C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [AsioReg] REGSVR32.EXE /S …

i have fastream netfile server and i want to setup an http or ftp server with limited access can someone guide me through the setup

yes
I do i just couldnt find anything to answer and i didnt have any questions

i think it is against forum rules to ask that question for that is illegal

I know that I've said that i hate these things but i thought it might be worth it to have someone check it out.

Logfile of HijackThis v1.98.0
Scan saved at 1:50:56 PM, on 8/23/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wms\IMish32.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.EXE
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\WINDOWS\system32\wms\sedv.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Verizon Online\SupportCenter\bin\mpbtn.exe
C:\WINDOWS\System32\wuauclt.exe
C:\hijackthis\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://cgi.verizon.net/bookmarks/bmredir.asp?region=all&bw=dsl&cd=5.1.5&bm=ho_search
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Verizon Online
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SaveIt] C:\WINDOWS\system32\wms\seb.exe C:\WINDOWS\system32\wms\IMish32.exe
O4 - HKLM\..\Run: [3B1FA79E] C:\WINDOWS\System32\bpgkfej.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
O4 - …

reformat your drive if you can. Check your bios to see if your boot sequence is in the correct order. and when you try to boot from the xp cd make sure you select boot form cd in your boot selection menu. When loading your computer should tell you in the top screen what buttons to press they are usually F2 or F12 to get to your boot menu

so you cant open the windows updates program.

download on a working computer and then install it on yours.Or if you havent made any major changes to your computer while this problem occured then restore your computer back a day or two before the problem occured and then run a spyware scan, update IE, and if you want post your hijackthis log here for someone to tell you what to fix

do you have a spyware problem or do u just want someone to check if you do. Before posting this did you do an ad-aware and spybot scan so you could do a simple check of your computer. On your log I dont see anything bad but i would wait for someone else to give you a second opinion

reformat your entire drive or put into a working computer and wipe it clean

hey if you want a tool to fix your registry then try registry mechanic if you dont already have it. It costs money but it works. it scans your registry for any registry entries that dont work or dont need anymore like programs that dont exist or that u uninstall sometimes leave their registry files behind. Oh just so you know it doesnt fix spyware or i dont think so.

it might be bacuse either your drive does not read those discs or because the dvd content if a movie is in the wrong format it is either ntsc(U.S) pal(everywhere else) even though most players playback both depending on how old your laptop is it might only play one

yeah that would be a good idea

i mean that i dont know how to look at someones hijackthis log and remove only things i just dont like looking at the logs but your right about adaware and spybot not getting everything

plus your link mentions the free tools and says if you have problems with those specific spyware bugs that you should switch from IE to Mozilla firefox which i agree with but thats not the point. also with spyware blaster it has a databases of thousands of websites and programs that contain spyware and it blocks them perfectly.

why not just get spybot search and destroy, lavasofts's ad-aware, hijckthis, and spyware blaster which are all free spyware cleaning and blocking tools. I like spybot S&D more because if you scan at least once a week then you know you always have a lot restore points to choose from when your computer gets messed up. I dont think you should have to pay some company 39.99 to keep spyware under control when if you have the free tools and a little knowledge of your registry you can do it for free.

reinstall IE download any update (sp2 should be out by now or coming out soon in its beta versions it has A better IE). The usual ad-aware and spybot S&D scan. try zilla connection accelerator. I know some people dont like mozilla but switching is always an option.(LAST RESORT) System restore to a day or 2 before this problem occured then do a spyware scan and post your new hijackthis log.

Sorry i couldnt just read your log and tell you what to do but those things are ridiculous

try browsing this site http://www.flashkit.com/tutorials/ for a tutorial on how to set play times for flash movies or something like that

do you know what you are missing to properly set up iis because that could be the problem. I didnt have xp pro very long so i never used a server on it. If you can manually config the server maybe the port is wrong i hate ftp but i have had luck with http

so how did you get these programs from what you say they sound like they could be somesort of malware or virus.

Tip:consider posting this problem in either techsupport<winxp or security

i dont think so just use http://www.ipchicken.com/ to check your ip and y does it change that seems odd.

try asking this question in the security forum where i think more people could answer your question because you put yours in an odd place in less you want to know about trojans that effect .net

it spies on your network and does what any virus does i dont know actually how they make trojans so i cant explain how they work in detail

If you have alias's wavefront maya 4 or higher than i think the best place to go to get free video tutorials is Digital-tutors.com. They have a free registration and they sell training videos on cd rom.

If you have other sites that you think are helpful for 3d modeling tutorials please post them so more daniweb members have choices

i have windows xp pro but not installed i have the setup files the cd key on my pc and when i tried to upgrade my pc the blue screen of death appeared saying DRIVER_IRQL_NOT_LESS_OR_EQUAL_TO or something like that and it is follow by the usual. The problem is that i cannot get back onto my xp to fix this problem now i think this is because the setup files are on the hard drive so i have no way of shutting it off like i would if i had a cd. Now the cd key is registered for another computer and they registered it first do you think m$ will give me a new cd or throw me in jail. or can i somehow exit this setup while it is in prgress and fix the problem then try it again. last time i had to do a total system reboot.

restore IE settings to windows default. try zilla connection accelerator it fixed a problem i had where IE and mozilla would only goto one page load it really slow and then lose the connection. Or just switch to mozilla firefox. If you arent found of mozilla then try a system restore if you know at around whate date this problem occured then try to restore to a day or two before.

Oh yeah almost forgot do an ad aware/spyware search before trying anything else

upgrade/reinstall IE and if you want download sp2 which has a new IE with more features or just keep using mozilla

do an adaware/spyware scan with ad aware and spybot S&D and to get rid of spyware. you might also want to try hijackthis but dont try to repair the things yourself post the hijackthis log on this site so someone can tell you what is the best choices. If the problem still continues goto start<run<regedt32 then go into HKEY_CURRENT_USER folder the go down to software and delete the entry for quikk search bar whatever also do this in HKEY_LOCAL_MACHINE.

goto start<all programs<accessories<system tools<system restore then see if you have a restore point on the calender that is before the date when this problem occuresd but not really far behind. click the date that youve selected and click restore. Now your computer should log off maybe restart a restore progress screen will appear and when that is done your computer should work fine.

If not start in safe mode and delete whatever program is causing this problem.

If all else fails turn off your computer put the system cd which contains your windows os in the drive(make sure your bios is set to boot cd rom drive). Restart and click either F2 or F12 (might be different if you dont have a dell) and click boot from cd then the windows xp installer will launch and when asked if you want to restore say yes by pressing R this should fix all your problems. if that doesnt work then repeat the process and do a complete install.

take your system cd the one that came with the comp and has the os on it. turn on the computer and put the cd in the drive. restart and go into your boot sequence in your bios on my dell it is F2 and change the boot sequence to boot the cd drive first. Now just reinstall your os you will lose some data but keep some programs

i have had this problem where the blue screen of death comes up and says DRIVER_IRQL_NOT_LESS_OR_EQUAL or something like that how do i fix that.

I was installing windows xp pro and the blue screen keps coming up and says driver irql not less or equal. I want to get back to my normal xp to stop the xp pro upgrade installation. How do I exit set-up?