2,959 Posted Topics

Member Avatar for trosttc

There are still a couple of "nasties" indicated in your log, but the list of running processes in the log looks pretty short for a normal XP system. Did you run that HijackThis scan in Safe Mode? If so, please post a log generated while booted in Windows normally.

Member Avatar for DMR
0
231
Member Avatar for Kirsty

You have more than just the Aurora infection, but let's work on Aurora first. The removal process should clean up some of the other nasties as well: You will need to disconnect from the Internet for most of the cleaning procedures, so you should print out the following instructions or …

Member Avatar for DMR
0
413
Member Avatar for tomcruise3230

" PXE-E61: media test failure..." That indicates that your system is trying to do a network boot, and it's doing that because it doesn't see valid local boot drive. Given the clicking noises you're hearing, combined with the network boot attempts, there's a good chance that your drive is going …

Member Avatar for DMR
0
908
Member Avatar for AtlantaEighty8

That [i]does[/i] sound like corruption of a user profile, althought the cause might not be of a malicious nature. Do you if [i]any[/i] changes at all were made to the system just prior to the problem occurring? See if any of the information and suggestions in this thread can help: …

Member Avatar for DMR
0
164
Member Avatar for cjillson7030

Hi cjillson7030, dlh6213 has done a good job of walking you through the process of removing the obvious "nasties" that were present on your system. I would definitely do as he asked in terms of having the[b] wmiprvse.exe [/b]file scanned; that file is normally a valid Windows file, but a …

Member Avatar for DMR
0
314
Member Avatar for d-b

1. The "backups" folder is created by HijackThis automatically. It contains info to restore the changes HJT makes in case you accidentally "fix" something you shouldn't have. 2. Your latest log is clean, but if you still find your CPU usage spiking, look in the Processses tab in Task Manager …

Member Avatar for DMR
0
149
Member Avatar for deso|ate|

[QUOTE=deso|ate|]or could read my HJT log...[/QUOTE]Sure, but you'll have to post the log in order for us to read it. :p Is your current anti-virus program unable to delete the virus? If so, and if you can get online for a long enough period, try some of these free online …

Member Avatar for DMR
0
311
Member Avatar for Shandalier27

The "missing CCL30.DLL" [i]could [/i]indicate a viral infection, and your log certainly shows that you [i]are[/i] infected by a few things. Before starting any fixes though, there are a couple of things you need to take care of: 1. [b]C:\WINDOWS\TEMP\TD_0002.DIR\HIJACKTHIS.EXE [/b] The log entry above indicates that you are running …

Member Avatar for DMR
0
230
Member Avatar for dfederman

Hello dfederman, Given the fsct that I've been through these issues with many of my "real life" clients, I have to agree with Christian and Catweazle. Basically: there [i]is[/i] no technology-oriented solution that will solve your problem. While the Internet [i]is[/i] an absolutely essential tool for doing schoolwork, there is …

Member Avatar for ArtChess
0
1K
Member Avatar for Dragontra

Drpmon.dll is a component of the evil Aurora infection. However, if you have the Aurora infection, you probably have other "unwanted guests" on your system as well. Please do the following so that we can get idea of the state of your system: Download the (free) HijackThis utility: [url]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] Once …

Member Avatar for DMR
0
181
Member Avatar for bh99mh

- Do you get any error messages when the freezes occur, or does the computer just "lock up"? - Do the freezes occur when you run Windows in Safe Mode? To get to the safe mode boot menu option, start tapping the F8 key just after you power up the …

Member Avatar for DMR
0
147
Member Avatar for weslypype

Please follow the removal instructions I posted in [url="http://www.daniweb.com/techtalkforums/thread25522-cwshredder.html"]this thread[/url] and post a new HijackThis log here after that.

Member Avatar for DMR
0
148
Member Avatar for ldrjer

[QUOTE]it shows C:\Windows.....Nortonxxxx on line[/QUOTE]Is "Nortonxxxx" really what the message shows, or does it give an exact filename? Since the filename points to Norton, I'd try uninstalling and reinstalling Norton; it sounds like one of Norton's driver files got corrupted, or the installation didn't complete correctly.

Member Avatar for DMR
0
187
Member Avatar for ButterflyChaser

All in all, from what you've posted it does sound like the motherboard [i]was [/i]damaged when the power supply went south. - The BIOS beep codes you hear might help isolate the problem. Please be more precise about the number and duration of beeps you hear, and tell us the …

Member Avatar for DMR
0
223
Member Avatar for bert6801

An explanation and fix for the most common cause of what you describe can be found here: [url="http://support.microsoft.com/kb/q270008/"]http://support.microsoft.com/kb/q270008/[/url] Although the article pertains to Win 2000, I've seen the problem occur with XP as well; the fix described for Win 2000 works for XP. Please note that although the article only …

Member Avatar for DMR
0
123
Member Avatar for alfhyde

[QUOTE=kc0arf]Not certain if Win 98 will edit the Windows 2000 boot.ini file so that the second device shows up properly in the boot loader menu.[/QUOTE]Nope, it won't.

Member Avatar for DMR
0
158
Member Avatar for midnightgirl

OK- That log is looking good; finish going through the steps Crunchie posted and post one (hopefully) last log for us to review.

Member Avatar for DMR
0
224
Member Avatar for xinbic

Hi jol102001, First of all- welcome to TechTalk! We ask that members not tag their questions on to a thread previously started by another member (regardless of how similar your problem might seem). Not only does it divert the focus of the thread away from the original poster's problem, but …

Member Avatar for DMR
0
508
Member Avatar for ThalesC

Hi ThalesC, welcome to the site. :) 1. First of all, your log indicates that you don't have the most current critical fixes and security updates installed for XP/Internet Explorer. Please go to Microsoft's Windows Update site and install them now; having those patches installed will plug some of the …

Member Avatar for DMR
0
134
Member Avatar for Paraish
Member Avatar for Paraish
0
144
Member Avatar for worldboy90

I hate to have to be this frank with you, but I don't think our forums are the right place for your questions. You said: A) "im grounded, so im sneaking on to try and fix the comp". B) "I cant do a full windows restore, cause My dad has …

Member Avatar for worldboy90
0
131
Member Avatar for GerryD

Umm... knowing the name (and version) of the burning software you're using might help us. :mrgreen:

Member Avatar for GerryD
0
148
Member Avatar for Nexus Titan

[QUOTE=JJ___]And please proof read your posts. Maybe I'm just a stickler for spelling, but last time I checked 'prtect' wasn't in the dictionary...[/QUOTE]Hey now, go easy on the new members, JJ___. We all make "finger fouls" once in a while. :) Nexus Titan, As Catweazle said, your question does belong …

Member Avatar for Nexus Titan
0
306
Member Avatar for ae1

Depending on your location, there may be a Computer Users Group in your area. If so, that might be a good resource to check out. Those groups are often involved in some sort of volunteer work or another, and even if they can't help you directly they can probably at …

Member Avatar for anastacia
0
297
Member Avatar for franzq

Hi franzq, welcome to the site. :) Let's start with this: 1. Go to your Add/Remove Programs control panel and uninstall SideStep if you find it listed there. 2. Run HijackThis again and have it fix the following entries: [b] O2 - BHO: SideStep Browser Helper - {08351227-6472-43BD-8A40-D9221FF1C4CE} - C:\WINDOWS\Downloaded …

Member Avatar for DMR
0
447
Member Avatar for Prof Don

Please give us more detail concerning the [i]exact[/i] errors you get when you try to go to sites, as well as more information on your network/Internet connection (DSL? Cable? Dial-up? Is there a router involved?) Also, you said: "I have tried other things but no help". Just so that we …

Member Avatar for Prof Don
0
194
Member Avatar for pyrotaz

Unfortunately, 500' exceeds the maximum length limit (100 meters) of an Ethernet cable run, so unless you run a fiber optic cable, a wired solution isn't going to do it for you. Fiber [i]would[/i] work quite well for your situation, but it would be rather expensive. The cable itself isn't …

Member Avatar for kc0arf
0
172
Member Avatar for nickib

The smithfraud infection doesn't usually infect a computer so badly that it can't even run anything in Safe Mode. - How did you determine that smitfraud was the culprit? - Do you have any indication that there might be other infections involved? - When you say "when I open in …

Member Avatar for DMR
0
87
Member Avatar for javierjan

"Spybot" is the general name given to the family of a certain type of worm, but it has many variants and the removal procedures differ between those. What anti-virus program are you using? Are you trying to say that the program can't clean the infection? If so, what information does …

Member Avatar for DMR
0
179
Member Avatar for ncfcanna

You'll have to give us more specific information about the crashes in order for us to help you most quickly. Judging from what little info you've given, the root of your problem could be almost anywhere in hardware and/or software. - Do you get any error messages? If so, post …

Member Avatar for DMR
0
130
Member Avatar for munky79

You've got more than the Aurora infection. :( Please follow the instructions below carefully and fully; they are specifically for Aurora removal, but should also clean up some of your other "unwanted guests" as well: Download the trial version of Ewido Security Suite here: [url]http://www.ewido.net/en/download/[/url] Install it, and update the …

Member Avatar for DMR
0
127
Member Avatar for Frog0013

You're infected with a variant of the "about:blank" hijacker, as well as a couple of other nasties. Please do the following: 1. Download, install, update, and run these three about:blank removal tools; have them fix whatever they find: [url="http://www.intermute.com/spysubtract/cwshredder_download.html"]CWShredder[/url] [url="http://www.majorgeeks.com/HSRemove_d4286.html"]HSRemove[/url] [url="http://www.majorgeeks.com/AboutBuster_d4289.html"]about:Buster[/url] 2. Download, install, and run the following spyware detection …

Member Avatar for DMR
0
264
Member Avatar for joecutler

Hi Joe- thanks for reposting in this (separate) thread. The following two log entries are indicative of a trojan infection, but there may very well be other infected components in areas of your system that HijackThis does not scan: [b] O4 - HKLM\..\Run: [sysPersonalFirewall] msnmssgr.exe O4 - HKLM\..\RunServices: [sysPersonalFirewall] msnmssgr.exe …

Member Avatar for DMR
0
452
Member Avatar for DennisO

Hello Dennis, welcome to our site :) Our announcement posted at the top of this forum [i]does[/i] state that HijackThis logs should only be posted in our Viruses, Spyware, and other Nasties forum, but I've deleted your duplicate post in that forum, primarily due to the fact that your log …

Member Avatar for DMR
0
230
Member Avatar for kriskarrera

The newest variant of the VX2 infection is extremely nasty and at the moment it seems that there is no "automatic" utility which will remove it. Read our member "crunchie"'s posts in these recent threads on the subject for a bit more insight: [url]http://www.daniweb.com/techtalkforums/search.php?searchid=242139[/url] In the mean time, please download …

Member Avatar for crunchie
0
271
Member Avatar for The Unreal Wolf

[QUOTE=The Unreal Wolf]if this is in the wrong forum feel free to move it im still figuring out where to put everything[/QUOTE]No problem. :) Your question [i]is[/i] a valid technical question concerning Windows software packages, so I've moved it to our Windows Software forum.

Member Avatar for DMR
0
161
Member Avatar for pdisil

You will need to disconnect from the Internet for most of the cleaning procedures, so you should print out the following instructions or save them into a text file using Notepad. Download the trial version of Ewido Security Suite here: [url]http://www.ewido.net/en/download/[/url] Install it, and update the definitions to the newest …

Member Avatar for DMR
0
160
Member Avatar for PuntaGordaJohn

OK, it sounds like some "unwanted guests" have crept in to your system. Here are a few things you can do to help clean them out: A) Run a full anti-virus scan, making sure that your anti-virus program is using the most current virus definition updates. If you do not …

Member Avatar for DMR
0
213
Member Avatar for fausta

1. Please give us the exact name of the file that you see in Task Manager and any other specific information that you might have concerning the infection. 2. I'd suggest that you remove SpyFighter and use reputable programs like Ad Aware and SpyBot instead. SpyFighter's accuracy is questionable, and …

Member Avatar for DMR
0
212
Member Avatar for Strangr314

If you want to eliminate the possibilty of bad RAM (which you should do), run the memtest86 utility. Instructions and download link are here: [url="http://www.memtest86.com"]www.memtest86.com[/url]

Member Avatar for DMR
0
134
Member Avatar for jpa

[QUOTE=jpa]Pulled the lithium battery out. Voltage checks out at 3 volts with my voltmeter. [/QUOTE] Although this may not be the ultimate answer to your problem- testing a battery with a voltmeter doesn't say much of anything concerning its strength. A voltmeter doesn't present enough of a load on the …

Member Avatar for hittingrabbit
0
171
Member Avatar for wo0okie

Unfortunately, it could very well be a hardware problem, especially since you mentioned a power surge. Bad RAM is one hardware component that will cause the error you're getting. Was there any more info in the error message, such as a "STOP" code? If so, knowing that would help us …

Member Avatar for jwshepherd
0
120
Member Avatar for Linchey050

Blech! That log is still a right mess; you have numerous infections. :( Let's see if we can some of it cleaned up with a few automated utilities before digging in with HJT and manual removal methods 1. Run at least two or three of the following online anti-virus/anti-spyware scans …

Member Avatar for dlh6213
0
453
Member Avatar for buddyb

Try this: - Open Windows Explorer - Under the Tools menu, choose Folder Options - Click on the "File Types" tab. - In the resulting list of registered file types, hilight each type (jpeg, gif, etc.) for which you want to change the default program association and click the "Change" …

Member Avatar for Catweazle
0
276
Member Avatar for xcidius

Hi xcidius, Welcome to the site :) You are using a slightly older version of HijackThis; Please remove the version of HJT that you aqre currently using, download and install [url="http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe"]the latest version[/url] (1.99.1), and post a new log.

Member Avatar for DMR
0
117
Member Avatar for Thong_Ispector

Hey T_I, Do you have an anti-virus program doing email checking? If so, turn that option off. Since you said the problem is not confined to one particular program, I'd start there first.

Member Avatar for Real-tiner
0
153
Member Avatar for Computerkev
Member Avatar for DMR
0
224
Member Avatar for ggames

Hi ggames, welcome to our site. :) To begin with, please do the following in order for us to (hopefully) get a more specific idea of the exact cause of the problem: Open the Event Viewer utility in your Administrative Tools control panel. In the Event Viewer, look through the …

Member Avatar for ggames
0
321
Member Avatar for darktower

Your system is infected- netsync.exe is a component of a spyware program. Please do the following so that we can see if you have signs of any other malicious infections: Download the (free) HijackThis utility: [url]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] Once downloaded, follow these instructions to install and run the program: Create a folder …

Member Avatar for darktower
0
407
Member Avatar for sol4u1

[QUOTE=sol4u1]what i need to setup an ISP medium scale,all the hardware stuff[/QUOTE] A [i]heck[/i] of a lot of asprin? :mrgreen: Seriously though, you need to give us a lot more information on exactly what you're planning before we can really give you any helpful information. For instance, you didn't even …

Member Avatar for dewman
0
127

The End.