Search DaniWeb - exchangeserver2007

IE explorer starts up very slowly 19 Years Ago by Hoggy12 Hi, This is a Hijack this log from my pc. Problem is that IE 6 takes an ages to start up when clicking on icon from desktop, or through the start menu. Also windows explorer has the same problem. Was asked to get a log so here it is and hopefulyy(fingers crossed) someone can help Thanks Hoggy :cheesy: Logfile of HijackThis v1.99.1… Re: IE explorer starts up very slowly 19 Years Ago by DMR [b] O1 - Hosts: terminalserver 192.168.0.12 O1 - Hosts: fileserver 192.168.0.10 O1 - Hosts: exchangeserver 192.168.0.11 [/b]Those are actually probably valid host entries for different machines on Hoggy12's internal network. The IP addresses are all in the private, non-routable address range of a Class C network, so they aren't hijacks/redirects… Re: IE explorer starts up very slowly 19 Years Ago by Hoggy12 Thanks very much guys, even before getting CWS Shredder everything was working as normal, I really appreciate your help. please find the new HijackThis log and hope it is all ok now. Thanks again Hoggy :cheesy: Logfile of HijackThis v1.99.1 Scan saved at 16:17:58, on 23/04/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet… Possible virus/malware 16 Years Ago by Hoggy12 Hi there, I hope someone out there might be able to help me, im doing my nut in here...!!! Recently I have been getting pop-up internet explorer windows, mainly aimed at gambling. Also my pc has been running like a dog..!!!! Thirdly I now get an error message when I first log in - Error Loading C\Windows\System32\grdrjocf.dll The … Re: Possible virus/malware 16 Years Ago by Hoggy12 H there, Thanks, please find new log file below... :o) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:30:24, on 22/09/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\… Re: Possible virus/malware 16 Years Ago by Hoggy12 Hey again, OK, here is my vundo file and my new hijackthis file. Thanks again VundoFix V6.5.8 Checking Java version... Java version is 1.4.2.3 Old versions of java are exploitable and should be removed. Scan started at 09:33:31 22/09/2007 Listing files found while scanning.... C:\WINDOWS\system32\fcojrdrg.ini C:\WINDOWS\… Re: Possible virus/malware 16 Years Ago by Hoggy12 Hi there apolgy in responding, have been in hospital for a little while :o( OK, before I went everything seemed to back to normal, but since I have been out i seem to be getting similar problems as before. I also seem t get a message that pops up that says that it is from wondows c++ informing me of a buffer problem in windows\explorer... and … Re: SMTP server replied "5.7.1 Unable to relay for 14 Years Ago by freshfitz Ok if you don't want to whitelist the ip this string will authenticate to exchange [CODE]application.mailserver = DomainName.Local/DomainUserName:DomainPW@mail.exchangeserver.com:25[/CODE] Re: Error Sending an Email 13 Years Ago by dataobjx [code] Const SMTPHost As String = "Your.ExchangeServer" Public Sub SendMailMessage(ByVal from As String, ByVal recepient As String, ByVal bcc As String, ByVal cc As String, ByVal subject As String, ByVal body As String) Try 'create the mail message Dim mail As New Net.Mail.MailMessage()… Re: IE explorer starts up very slowly 19 Years Ago by dlh6213 Go to Add/Remove Programs in your Control Panel and remove (if found): [B]CxtPls[/B] [B]Media Access[/B] Scan with hijackthis and have it fix the following entries: R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url]http://ie.redirect.hp.com/svs/rdr?T...lion&pf=desktop[/url] R1 - HKLM\Software\Microsoft\… Re: IE explorer starts up very slowly 19 Years Ago by dlh6213 Oops, thanks DMR; sorry Hoggy; I edited my post so they won't get fixed accidently Re: IE explorer starts up very slowly 19 Years Ago by DMR No indications of any obvious "nasties" that I can see in that log- looks clean to me. Are things running smother now? Re: IE explorer starts up very slowly 19 Years Ago by Hoggy12 Hi DMR, Yes everything looks and works fne now. Thanks for your help Hoggy :D Re: IE explorer starts up very slowly 19 Years Ago by DMR Glad we could help, Hoggy. :) Now that your system is clean, here are a few general things you can/should do to minimize your chances of future virus/malware infections (some of which you're obviously doing already): 1. Use Windows Automatic Update function to keep your system as up-to-date as possible with the most current Microsoft security … Re: Possible virus/malware 16 Years Ago by crunchie Update hijackthis here; [url]http://www.daniweb.com/forums/thread83821.html[/url] once installed, right click on the hijackthis.exe file and select rename. Rename the file to [b]analysethis[/b] and do another scan and post the log. Re: Possible virus/malware 16 Years Ago by crunchie Thats revealed a few more entries. Please download [url=http://www.atribune.org/ccount/click.php?id=4][color=blue]VundoFix.exe[/color][/url] to your desktop.[list] [*] Double-click [b]VundoFix.exe[/b] to run it. [*]Click the [b]Scan for Vundo[/b] button. [*] Once it's done scanning, click the [b]Remove Vundo[/b] button. [*] You will receive… Re: Possible virus/malware 16 Years Ago by crunchie Can you please do the following. =============== Scan with [b]HijackThis[/b] and then place a check next to all the following, if present: [color=#9933cc][b] O2 - BHO: (no name) - {5621007F-BBEE-4674-8077-94C3591DE7C3} - C:\WINDOWS\system32\mljhgfc.dll (file missing) [/b][/color] [color=#9933cc][b] O2 - BHO: (no name) - {7E853D72-… Re: Possible virus/malware 16 Years Ago by crunchie Hope that you are feeling better :). 1. Download this file from one of the following links : [url]http://download.bleepingcomputer.com/sUBs/ComboFix.exe[/url] [url]http://www.techsupportforum.com/sectools/combofix.exe[/url] 2. Double click combofix.exe & follow the prompts. 3. When finished, it shall produce a log for you. Post that… Re: Possible virus/malware 16 Years Ago by Hoggy12 Hi there, I eventually got the combofix done, although had some serious manual work to do lol Quite reguarly through the process I kept getting 'FREEWARE IMPLEMENTATION OF REG.EXE has encountered a problem and needs to close. It gave me the options of Debug, Send Error Report and Dont Send, only by clicking debug several times everytime it … Re: Possible virus/malware 16 Years Ago by crunchie Please go to [url=http://virusscan.jotti.org/][u]Jotti's[/u][/url] or to [url=http://www.virustotal.com/en/virustotalf.html][u]virustotal[/u][/url] and have these files scanned. Post the results back here. C:\WINDOWS\tsitra1044.exe C:\WINDOWS\iun6002.exe C:\WINDOWS\system32\ihsv.dll C:\WINDOWS\system32\rqropmj.dll Re: Possible virus/malware 16 Years Ago by Hoggy12 File: tsitra1044.exe Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database) MD5: 934c08a1acd188e1fa1c6321d8c12043 Packers detected: PE_PATCH Bit9 reports: File not found Scan taken on 19 Oct 2007 07:55:05 (GMT) A-Squared Found nothing … Re: Possible virus/malware 16 Years Ago by crunchie Do you have the results for this one? [QUOTE]File: iun6002.exe Status: INCONCLUSIVE (scan still in progress) MD5: 456462905091db042141487fe030e3c9 Packers detected: Analyzing... Bit9 reports: No threat detected (more info)[/QUOTE] Re: Possible virus/malware 16 Years Ago by Hoggy12 File: iun6002.exe Status: OK(Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database) MD5: 456462905091db042141487fe030e3c9 Packers detected: - Bit9 reports: No threat detected (more info) Scan taken on 20 Oct 2007 21:23:28 (GMT) A-Squared Found nothing AntiVir … Re: Possible virus/malware 16 Years Ago by crunchie 1. Please [b]download[/b] [url=http://swandog46.geekstogo.com/avenger.zip][b][color=#CC0000]The Avenger[/color][/b][/url] by Swandog46 to your [b]Desktop[/b].[list][*]Click on Avenger.zip to open the file[*]Extract [b]avenger.exe[/b] to your desktop[/list] 2. Copy [b]all[/b] the text [i](including the[b] 'Files to delete')[/b][/i] contained in … Re: Possible virus/malware 16 Years Ago by Hoggy12 Here is the Avenger log, it only had to reply YES to one messaged before it rebooted. Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\puioyakw ******************* Script file located at: vlxsiqqp Could not open script file! Error Could not open script … Re: Possible virus/malware 16 Years Ago by crunchie I see there was an error with Avenger. Did you input the text [b]exactly[/b] as I had it in the quotes? You [b]must[/b] include the [b]Files to delete:[/b] when doing it so it looks like this; [b]Files to delete: C:\WINDOWS\tsitra1044.exe C:\WINDOWS\system32\rqropmj.dll[/b] Re: Possible virus/malware 16 Years Ago by Hoggy12 Hi there, I am pretty sure I had put the text in correctly, but having done it again I have a different response. Here is the latest avenger log and alos a new hijack log. Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\kbcppnhm ******************* Script … Re: Possible virus/malware 16 Years Ago by crunchie Can you please do the following. =============== Scan with [b]HijackThis[/b] and then place a check next to all the following, if present: [color=#9933cc][b] O2 - BHO: (no name) - {29042004-CBB5-EF1B-E7BF-B16E8AE49C91} - C:\WINDOWS\system32\ihsv.dll (file missing) [/b][/color] [color=#9933cc][b] O4 - HKCU\..\Run: [Srro] "C:\… Re: Possible virus/malware 16 Years Ago by Hoggy12 Hi there, did all that, didnt need to delete those files as they were not there, although the first one was in the quarantine of the combofix application. PC seems sweet as again now, thank you. here is the hijack log as requested. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:10:20, on 23/10/2007 Platform: Windows XP SP2 (… Re: Possible virus/malware 16 Years Ago by crunchie No worries :). [b]Congratulations![/b] [i]Your log looks clean[/i] - good work! =============== Now that your PC is clean you need to follow these easy steps to keeping it this way: Download [url=http://www.ccleaner.com/ccdownload.asp]CCleaner[/url] and install, then run it. It will clear out your temp folders. [list=1] [*][b]…