2,959 Posted Topics
Re: [QUOTE=kkroo]i got it wrecked[/QUOTE]How? If you physically damaged the unit, it isn't really worth trying to repair it considering the fact that the things only cost about $65 USD new. | |
Re: Do you have any third-party security/privacy software installed (Norton, McAfee, etc.)? If so, [i]that[/i] software may be blocking the images; check the program's options/settings. | |
Re: [QUOTE=chrisbliss18]What's the specific error that you get and what is giving the error?[/QUOTE]Yes. Please tell us the [i]exact[/i] error you receive; also tell us which version of Windows you are using. | |
Re: Hi JR5600, First of all- welcome to TechTalk :) We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, … | |
Re: Is it just your web browser that can't access the 'Net, or do you have no Internet access at all? The firewall component of Norton Internet Security gets "confused" sometimes, blocking some or all legitimate network traffic. First- try uninstalling the entire Norton package and reinstalling it. If that doesn't … | |
Re: Other than the fact that you have Weather Bug installed, your log is clean. The unregistered version of WeatherBug is ad-sponsored, so I'd register it if you haven't already, or uninstall it. | |
Re: A) You should download and install [url="http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/default.asp"]Service Pack 4[/url] for your version of Windows. SP4 is the most current (and last) update for Win 2K, so you should take advantage of the bug fixes and security patches included in it. B) Your log shows signs of a couple of infections; … | |
Re: Hi Adi, welcome to DaniWeb :) Your log indicates quite a few "unwanted guests", and it also indicates that you have a couple of "bogus" anti-spyware programs installed. A) SpyFighter and AdwareAlert are programs known to display false positives in an effort to coax/scare you in to paying money for … | |
Re: Hi HadYourPhil, welcome to DaniWeb :) A) To remove the "crazywinnings" references: - First, remove the site from your Trusted Zone: Start Internet Explorer, click [b]Internet Options[/b] on the [b]Tools[/b] menu, and then click the [b]Security[/b] tab. Click [b]Trusted Sites[/b], and then click [b]Sites[/b]. Click the "crazywinnings" site, and then … | |
Re: [QUOTE=JANINE]Yes you should be able to.. [/QUOTE]POP access isn't always available with the basic free accounts, though :( Yahoo - you have to subscribe to the [url="http://help.yahoo.com/mail/pop/pop-06.html"]Mail Plus[/url] service in order to have POP access to your Yahoo mail. Gmail - [url="http://gmail.google.com/support/bin/topic.py?topic=1555"]POP access[/url] is included at no charge. MSN/HotMail - … | |
Re: [QUOTE=runswit2guns]if u could even check what graphics card u are using so i know what to download[/QUOTE]Um- [i]you[/i] need to find out what graphics card [i]you[/i] are using in order to know what driver needs to be installed for that particular video card. Give us the details that Device Manager … | |
Re: 1. You should only run one anti-virus program at a time, having two AV programs active can cause conflicts. 2. There are no obvious signs of infections in your HJT log. If Norton and/or AVG give you details on the infections you have (file names, folder locations, etc.), please post … | |
Re: [color=Red][color=Black]The [/color][/color][color=Red][color=Black]"[/color][/color]red circle with a white x" is the signature symptom of the Antivirus Gold/SpySheriff/Smitfraud group of infections. Your HJT log indicates a couple of other infections as well. Your log also shows no signs of an anti-virus program running. If you really don't have an A-V program, download and … | |
Re: [QUOTE=tayspen]The other post is here [url="http://www.daniweb.com/techtalkforums/thread36670.html"]http://www.daniweb.com/techtalkforums/thread36670.html[/url][/QUOTE]Yup- and it's locked now, too. :mrgreen: | |
Re: Krikey! As if I don't have anything better to do than chase down and lock Spam threads... | |
Re: "Mmm Pie"? That wouldn't be as in [url="http://www.weebl.jolt.co.uk/comics/riot.swf"]3.14 Pie[/url], would it? | |
Re: Other than the following two "loose ends", which you should have HJT fix, the log looks clean: [b] R3 - Default URLSearchHook is missing O2 - BHO: (no name) - {301F1B2E-EBA7-430C-60B2-5DB343B2583B} - (no file)[/b] | |
Re: [QUOTE=branko]After a lot of anti-spyware and cleaning actions it seems to be solved![/QUOTE]Good work. Except for the following two entries, your last HJT log does look clean: R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R3 - Default URLSearchHook is missing | |
Re: Hi summon, Your HijackThis log is [i]very [/i]incomplete; please run HJT again and post the log according to these directions: Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to … | |
Re: Opera is another great browser: [url]http://www.opera.com/[/url] | |
Re: There are still three malicious entries in your latest log. 1. Have HijackThis fix: [b] O4 - HKLM\..\Run: [Dynamic DLL Injection] dyntopat32.exe O4 - HKLM\..\Run: [Adobe Acrobat Reader CFG] mnaetwrplj.exe O4 - HKLM\..\RunServices: [Dynamic DLL Injection] dyntopat32.exe [/b]2. Open Windows Explorer, and in the Folder Options->View settings under the Tools … | |
Re: That's a clean log, tayspen :) For future protection, I'd recommend that you install [url="http://www.microsoft.com/downloads/details.aspx?FamilyID=321cd7a2-6a57-4c57-a8bd-dbf62eda9671&displaylang=en"]Microsoft Anti-Spyware beta[/url]; it does a good job of removing "nasties" and also provides real-time protection. | |
Re: Hi Anthony, welcome to DaniWeb :) This particular forum is a place for new members to introduce themselves, but it's not a place where we handle technical questions. You should start a new thread in our [url="http://www.daniweb.com/techtalkforums/forum92.html"]Windows Software forum[/url] and post your question there; I'm sure some of our other … | |
Re: [b] Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) [/b]The above information from your log indicates that your versions of Windows XP and Internet Explorer are [i]very[/i] out-of-date, which makes your computer extremely vulnerable to malicious infections. While it is definitely [i]not [/i]advised to upgrade an infected and/or … | |
Re: Hi kstrass111, welcome to DaniWeb :) Before doing anything else, uninstall the [b]Spyware Vanisher[/b] and [b]UnSpyPC[/b] programs using your Add/Remove Programs control panel. Both programs are disreputable in that they report false positives in order to "scare" users into purchasing their full product. Before downloading/purchasing/installing [i]any[/i] supposed "anti-spyware" product, you … | |
Re: Before we dig in to the fix, please tell us if you knowingly installed (or know anything about) the "FireDaemon" program. | |
Re: 1. Are you sure you posted the [i]entire[/i] contents of the HijackThis log file? It looks light on content, even for a Win 98 system. Also- the log shows no signs of infections, but for the particular infection you have, a HJT log may [i]not[/i] give us many clues on … | |
Re: The trojan "rdriv.sys" file is delivered by a worm, which Symantec says must be removed before the trojan can be dealt with. Have you tried Symantec's removal procedures for the worm and trojan yet: W32.Spybot.NLX (worm)- [url]http://securityresponse.symantec.com/avcenter/venc/data/w32.spybot.nlx.html[/url] rdriv.sys (trojan)- [url]http://securityresponse.symantec.com/avcenter/venc/data/trojan.cachecachekit.html[/url] | |
Re: There are no signs of anything malicious or unusual in your HJT log. [QUOTE=dlsoecht]The cpu usage is getting stuck at 100%. ... [/QUOTE]Does Task Manager give you an indication of which programs/processes seem to be hogging the CPU time? | |
Re: 1. You still have one HijackThis log entry left over from the infection. Run HJT again and have it fix: [b]O2 - BHO: (no name) - {58F07DD3-924D-4141-BC74-299F523A95F1} - (no file) [/b]2. I can't tell you exactly what happened in terms of the lost space at this point, but I can … | |
Re: Eicar files aren't malicious; they're virus [i]testing [/i]tools. Think of them as "virus simulators". Here's more info from Symantec (Norton): [QUOTE]The Eicar Test String is not a real virus. It is a text file that is used to test antivirus software. By default, the file name is Eicar.com, but it … | |
Re: [color=Blue] You will need to close/quit all web browser programs and disconnect from the Internet for the following, so you should print out these instructions or save them into a text file with Notepad.[/color] Before beginning the procedures below, uninstall these programs using your Add/Remove Programs control panel if you … | |
Re: Does Norton give you any specific information such as the names and/or locations of infected files? Having that information can help us more quickly what still needs to be done to remove the infection. | |
Re: [color=Red][b]Nooooooo!!!!! [/b][/color] [b][color=Red]Don't even [i][u]THINK[/u][/i] about following the above suggestions!!! [/color][/b][color=Black]Good lord- not only will deleting the user account [i]not[/i] fix the infection, but it could easily cause you a [i]huge[/i] pile of additional problems.[/color][b][color=Red] [/color][/b][b][color=Red] [/color][/b][b][color=Red]:eek: [/color][/b][b][color=Red]:eek: [/color][/b][b][color=Red]:eek: [/color][/b][color=Red][color=Black]dork, The "[/color][/color]big red and black box" and[color=Red][color=Black] "[/color][/color]red circle with … | |
Re: Hi Ivan, This particular forum is just an informal place for new members to intruduce themselves, but it isn't a forum where actual computer-related questions are asked and answered. You should post your question in a new thread in our [url="http://www.daniweb.com/techtalkforums/forum8.html"]C/C++ forum[/url] so that our programming helpers can offer advice. … | |
Re: A. Spy Trooper is a spyware "remover" of dubious repute; uninstall it through your Add/Remove Programs control panel. You can read more about Spy Trooper and other bogus "anti-spyware" programs [url="http://www.spywarewarrior.com/rogue_anti-spyware.htm"]here[/url]. B. Your HJT log does show malicious programs running on your system. Please follow the general cleaning/removal proceedures below … | |
Re: A. [QUOTE=Tom Wade]also... what program is making random words on pages, into little green links?[/QUOTE]Those are "sponsored links", and they're done on the webserver's side. The technique is a relatively new (and pretty irritating) form of advertising. B. [QUOTE=Tom Wade]something c:/recyclers s-1-5-21-304614 blah blah blah[/QUOTE]"Recyclers" folders are where items in … | |
Re: If the disk crash is due to Windows system file corruption or the like, you might be able to access/recover the data on the drive by using an alternate operating system like Linux. I've used the "Live" (runs entirely off of a CD) version of Knoppix to do this quite … | |
Re: [QUOTE=cscgal]I like to think I'm adored anyways ;)[/QUOTE]We [i]all[/i] adore you, Dani. [img]http://www.stevewolfonline.com/Downloads/DMR/Visuals/loves.gif[/img] :mrgreen: | |
Re: Hi fili00, [QUOTE] i didn't find where to post my problem in the forum so I try it this way.[/QUOTE]We don't deal with technical questions/problems in this particular forum at all; Community Introductions is just a place for new members to say "Hello". I see that you found [url="http://www.daniweb.com/techtalkforums/showthread.php?t=36393"]an answer[/url] … | |
Re: Was the system sluggish [i]before[/i] you deleted the files you mentioned? desktop.ini and thumbs.db are two of the files you were seeing. They are valid Windows files which are normally hidden, but they got revealed in the process of removing the infections you had. I know that Windows will generate … | |
Re: Hi sebryna808, welcome to DaniWeb :) The g022lafo1d2c.dll file is malicious, and the related "Notify" Registry key is bogus. Also- the malicious file and Registry entry are components of a larger infection, and other pieces of that infection may still be present. Please do the following so that we can … | |
Re: rofl.sys is definitely a component of a rootkit infection, and Norton may not be able to delete it when Windows is booted normally. We'll deal with that in a moment, but first we need to remove a couple of other "unwanted guests". Please do the following: [color=Blue]You will need to … | |
Re: Hi osb139, welcome to DaniWeb :) Based on the contents of the log you posted, there are two issues you need to take care of before we proceed: 1. [b]Logfile of HijackThis v1.97.7[/b] The above entry indicates that you are using a [i]very[/i] old version of HijackThis. Please download [url="http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe"]the … | |
Re: We shold get a HijackThis log from you at this point. 1. Disconnect from the Internet. 2. Disable McAfee if it's still preventing HijackThis from running. 3. Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" … | |
Re: Hi funnygirl, welcome to DaniWeb :) You've got a handful of "unwanted guests" in your HijackThis log; please do the following: [color=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for the following, so you should print out these instructions or save them into a … | |
Re: Unfortunately, you are still infected. :( Please do the following: 1. Run at least two or three of the following online anti-virus/anti-spyware scans and let them fix what they can: [url]http://www.kaspersky.com/scanforvirus.html[/url] [url]http://housecall.trendmicro.com/[/url] [url]http://us.mcafee.com/root/mfs/default.asp?cid=9914[/url] [url]http://www.pandasoftware.com/active...n_principal.htm[/url] [url]http://www.ravantivirus.com/scan/[/url] [url]http://www.bitdefender.com/scan/licence.php[/url] 2. Download, install, and run the following detection and removal tools (use each program's … | |
Re: You've got a few different nasties in your log; please do the following: [color=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for the following, so you should print out these instructions or save them into a text file with Notepad.[/color] 1. Uninstall the Weather … |
The End.