2,959 Posted Topics
Re: 1. Symantec has a recently-updated descripition of the Pynix VX2 infection and a download link to their stand-alone removal utility [url="http://securityresponse.symantec.com/avcenter/venc/data/adware.betterinternet.html"]here[/url]. Try the utility and let us know the results. 2. Download [url="http://download.ewido.net/ewido-setup.exe"]Ewido[/url] and install it, and then open the program. If you initially receive a warning message saying "Database … | |
Re: Open the Event Viewer utility in your Administrative Tools control panel and see if there are any helpful error/warning messages in your System and Application logs. | |
Re: Just to clarify: is this the primary (boot) drive, or is it a second drive you've added to the system? | |
Re: Your log still shows indications of a full-blown Aurora infection. Please follow the instructions below [i]carefully and fully[/i]: You will need to disconnect from the Internet for most of the cleaning procedures, so you should print out the following instructions or save them into a text file using Notepad. * … | |
Well, OK... a happy "System Administrator Appreciation Day" to the rest of you who do this thankless job for a living. (For those of you who [i]aren't[/i] sysadmins, all you need to read is the "Gift Ideas" section in the link below. ;) ) [url="http://www.sysadminday.com/"]http://www.sysadminday.com/[/url] | |
Re: The counter.cab file itself is indicative of the infection; it also indicates that you may have other infections. Please do the following so that we can get a "snapshot" of possible problem areas on your computer: Download HijackThis: [url="http://www.majorgeeks.com/download3155.html"]http://www.majorgeeks.com/download3155.html[/url] Once downloaded, follow these instructions to install and run the program: … | |
Re: First of all- uninstall the "Content Delivery Module" through your Add/Remove Progams control panel. If you're still experiencing problem after that, please do the following: Download the (free) HijackThis utility: [url]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] Once downloaded, follow these instructions to install and run the program: Create a folder outside of any Temp/Temporary folders … | |
Re: No signs of Aurora, but there are some other leftovers to deal with: 1. Uninstall WeatherBug via your Add/Remove Programs control Panel. "The Bug" contains adware/spyware components. 2. Uninstall AdwareAlert; it has a questionable reputation at best. You can read more about AdwareAlert and other disreputable and outright bogus "anti-spyware" … | |
Re: There are no obvious signs of malicious activity (or anything else overtly wrong) in your HijackThis log, although I do have a question about this proxy setting: [b] R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 80.3.96.40:8080 [/b]Is that proxy server setting related to/required by your ISP? Since you're going through a proxy, … | |
Re: Hi AuctionMan, welcome to DaniWeb! :) Have a browse around our web design, site building, etc. forums; I'm sure you'll fing lots of helpful info there. ![]() | |
Re: Hi amelia, First of all- welcome to our site. :) We don't troubleshoot technical problems in our Community Introductions forum, so I've moved your question to a forum which is more appropriate and will hopefully get you more responses from our other members. | |
Re: [QUOTE=FLYN]how do i prevent any more infestations on the pc if i go back to kazaa.[/QUOTE]That's like asking how you can go back to a poker table but not lose money this time. There are measures that you can take to minimize the chances that malicious programs will be downloaded … | |
Re: As the others have said- get a small switch. Although you [i]can [/i]use a router as a switch, routers are made to do more than simple switching functions; a router would be overkill both cost-wise and complexity-wise in your case. As Christian said, you should (depending on your location) be … | |
Re: [QUOTE=dlh6213]I don't see anything in your log that would cause this problem.[/QUOTE]Agreed- Log is clean. :) | |
Re: Your log is clean, although there are a number of other (non-infection related) reasons for HotMail, MSN, etc. access problems. To see many of the previously suggested fixes for Hotmail-related access problems, go to to [url="http://www.daniweb.com/techtalkforums/forumdisplay.php?f=1"]this page[/url], click on the "Search this Forum" button at the top right-hand side of … | |
Re: [QUOTE=xonicide]how can a half-geek find a decent gf???[/QUOTE]Umm... get a life? :mrgreen: | |
Re: And thank [i]you[/i] for the the kind words of appreciation, crazyquilter. :) As you said, we are all volunteers here, so the warm fuzzy feeling that comes with knowing that we've helped make someone a "Happy Camper" is our pay. But [i]No[/i] Cookie??? ... Monster sad now. Monster LOVE Cookie!! … | |
Re: Hi warrenforty, 1. Your HJT log is clean, and the "transform" errors and " set path" messages you're seeing most likely aren't related to malicious infections: * The [b]ulead[/b] and [b]muveet[/b] entries that you see at startup are additions made to your system (and more specifically, probably your autoexec.bat file) … | |
Re: Hi berlyniki, First of all- welcome to our site :) 1. Buffer overrun errors in rundl32.exe do not [i]necessarilly[/i] mean that infections are at the root of the problem, although they certainly can be. Please do the following to see if we can find more specific info on the exact … | |
Re: If you can't physically install the drive [i]in[/i] the computer, then yes- an external enclosure is certainly an option. | |
Re: Hello fizankhan, welcome to the DaniWeb! Have a browse around, get familiar with our layout, and as always- feel free to ask if you have any questions at all about the site. :) | |
Re: Hi SunRunner- welcome! Don't worry about being here to get answers to problems; that's why we're here- to here to help you get those answers. :) In terms of your question regarding exactly [i]where[/i] to post questions, that depends on the nature of the questions. This particular forum is just … | |
Re: Welcome to the site, Karen! :) Have a browse around the forums, get familiar with site, and always feel free to ask if you have any questions about how our particular forums work. | |
Re: From what you've described, it [i]does[/i] sound like a hardware problem, but the exact culprit could obviously be difficult to pinpoint. [QUOTE=Strider]Even stranger, is that everything works fine for about 45 minutes to an hour and a half, then the freezes happen[/QUOTE]That may indicate that heat has something to do … | |
Re: Hi webempress, First of all- welcome to the site! :) This particular forum is just a casual place for new members to say "Hi" if they'd like, but not a forum where technical questions are asked and answered. If you can give us more info on which specific application/project you're … | |
Re: Hi saibaba, welcome to our site! :) In terms of your laptop screen problem, we don't work on technical problems in this particular forum; it's just a place for new members to say "Hi" and introduce themselves. If you'd like our help, what you should do is start a new … ![]() | |
Re: Hi Chintz, 1. You're running a slightly older version of HJT (v 1.99.0); you should get the latest version (1.99.1), do a scan with it, and post the new log. 2. Your current log definitely has some "nasties" in it. Before posting a log from the new HJT version, please … | |
Re: - What is the make/model of the laptop? - If you look in Device Manager, what inforamtion do you see there for the built-in wireless card? | |
Re: Hi Essence22, First of all- welcome to our site! We don't work on technical problems in this [i]particular[/i] forum, but I'll move your post to our Troubleshooting Dead Machines forum so that our technical troubleshooters can help you out :) | |
Re: Hi santfekuss, 1. There's nothing suspicious in your HJT log. That being the case, can you give specific information about the symptoms you're seeing, error message you may be getting, etc.? 2. Please download and install the free trial version of [url="http://www.ewido.net/en/download/"]ewido Security Suite[/url]. * Run the program (the first … | |
Re: There's nothing in your log which looks directly related to the problem you're having, but there are some "leftover" entries from a previous infection or two which we should clean up. 1. You need to take care of one thing before we continue: [b] C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe … | |
Re: Given everything you've described and tried, it sounds like the drive's electronics have failed. :( However, you never said what the specific problem was that caused you to take the drive out of your friends computer in the first place. Was it originally doing the same sorts of things in … | |
Re: Hi KingSix, 1. [b]Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) [/b] The above entries in your log indicate that you are [i]quite[/i] behind on your Windows and IE updates. Please use the Windows Update utility to install the most current security patches and bug fixes; installing those … | |
Re: Hi crazyquilter, Your latest HijackThis log is incomplete; it shows only your running processes, but nothing else. Can you please run another scan with the program and post a full log? | |
Re: Hi Raelin, Your HijackThis log shows no signs of infections, incorrect settings, or any thing else that would account for your connection problems. Which websites in paticular are you having trouble accessing? We've had a lot of previous threads on problems with connecting to Hotmail, MSN, etc. accounts and or … | |
Re: Hi jn2004, First of all- welcome to TechTalk! We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but … | |
Re: Hi rocker16x, First of all- welcome to our site. :) We don't troubleshoot technical problems in our Community Introductions forum, so I've moved your question to a forum which is more appropriate and will get you more responses from our other members. | |
Re: Hi rocker16x, First of all- welcome to our site. :) We don't troubleshoot technical prolems in our Community Introductions forum, so I've moved your question to a forum which is more appropriate and will get you more responses from our other members. A couple of things to start with: 1. … | |
Re: [QUOTE=Tom Wade]... is this a bad thing that i don't even have it? if it is... how would i get it back? or a new shiney one.[/QUOTE]Oh no, you definitley don't want it back- nail.exe is a component of the Aurora infection. The error regarding nail.exe is due to a … | |
Re: <EDIT> Hmm... looks like swatkat and I are posting at the same time again. </EDIT> | |
Re: [QUOTE=JANINE]... i am getting is the IBM startup screen... the screen is then going dark again but i can see the microsoft windows NT loader screen and can log into windows itself. i cannot see to alter any settings to troubleshoot it though.[/QUOTE]What exactly are you saying there? Does the … | |
Re: Your thread won't get buried, but please bear with us. We're a bit shorthanded helper-wise in this this forum right now, and the flood of "spyware"-related problems posted here are a rising at a pretty fast rate. | |
Re: [QUOTE=sennetor]I don't recommend deleting the file as it may be critical to your systems function.[/QUOTE]That file is dropped/created by the trojan; it should be deleted. Simply deleting the file will not, however, remove the infection itself. Infections usually drop several different components and make several modifications to your Registry in … | |
Re: [QUOTE=chameleon]It's definitely not spyware as this computer is fairly new and has been cleaned of anything it had on it using HiJack This, Spybot S&D, etc[/QUOTE]Don't rule out the possibility of malicious infections; I've seen perfectly clean systems get infected after less than 30 minutes of being online. When you … | |
Re: Knowing which [i]exact [/i]version of Office you currently have installed would help. :o | |
Re: 1. I see nothing in your log which indicates that malicious infections are the source of the problem. 2. In terms of the hosts file, you can restore it to its original state with a utility called [url="http://www.funkytoad.com/hoster.htm"]Hoster[/url] (although I can't remember if it's designed to work on Win 98). | |
Re: Good work on your part- your latest log is very clean. :) Are you still seeing any symptoms of infections? If so, give us some specific info on that. | |
Re: That error can definitely be indicative of a spyware/virus infection; please start a new thread in our Security forum stating the full and exact text of the error as well as the contents of the logfile generated by HijackThis. [i]Do not post your log in this thread[/i]; HJT logs belong … | |
Re: Hi civic, 1. Your current log definitely does show signs of infections, but you're using an older (1.98.0) version of HijackThis which does not examine all areas of possible infections on an XP system. Please download the most current version of HJT (1.99.1) from teh link in my sig below … |
The End.