Search
Forum Home | Login
kona0197
kona0197
Join Date 02/2003
+86

Yrag I need your help.

January 21, 2006 6:06:27 PM from WinCustomize ForumsWinCustomize Forums
I'm having a few problems with XP. Here is a list of the issues:

* System restore had been disabled
* AVG Anti Virus has been disabled
* Device Manager will not work
* No sound at all
* Internet Explorer will not connect
* Firefox will not connect

So I guess I might have got a Virus somehow even though I'm careful. I guess the question is how do I repair or scan for a virus If I can not connect to the net? I'm using Linux right now but I have a floppy drive and a CDRW drive at my disposal. Any help would be appreciated.
Locked Post
Search this post
Advanced Search
Subscription Options
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
Bichur
Join Date 10/2003
+253
Reply #1 January 21, 2006 7:22:34 PM
from WinCustomize ForumsWinCustomize Forums
hello....

I have no idea on the correct answer(s) for this...but I firmly believe that as I type this, somewhere Yrag's "spidey sense" is tingling and he is about to drop everything to answer the call to 'set straight Troll misinformation'.

So....here's what you need to do - unplug everything and take your harddrive to nearest junk yard or construction site that uses an electromagnet......


Now...we wait....
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
Jafo
Join Date 03/2001
+1842 sdemployee
Reply #2 January 21, 2006 8:05:37 PM
from WinCustomize ForumsWinCustomize Forums

Kona...obviously you are still accessing the net...so dl hijackthis and Stinger ....both are small enough to fit on a floppy...and can be run on an offline computer.

Post the results of 'hijackthis' on here....they 'should' show what's going on....and Stinger will scan and remove the most common current threats/pests....

Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
yrag
Join Date 08/2001
+393
Reply #3 January 22, 2006 12:34:09 AM
from WinCustomize ForumsWinCustomize Forums
unplug everything and take your harddrive to nearest junk yard or construction site that uses an electromagnet......


Actually...........that was my first thought too......

The first two items definitely appear to be vermin related, but the last four make no sense. No gremlin has any vested interest in a computer that is dead or cannot connect to the net and they certainly don't care if you can hear them smacking your system around.

Kona, besides doing what was mentioned in the above posts, you need to look in Taskmgr or Services to see if any strange process(es) is running. If you actually have a virus, trojan, whatever, it has to be running. If you get a name, we can get rid of it. Failing that, I'm confident a shiny new install is in your future.

I'll save the lecture about service packs for another time.
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
Bichur
Join Date 10/2003
+253
Reply #4 January 22, 2006 12:37:27 AM
from WinCustomize ForumsWinCustomize Forums
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
yrag
Join Date 08/2001
+393
Reply #5 January 22, 2006 12:40:43 AM
from WinCustomize ForumsWinCustomize Forums
.....I forget...who's night is it to be on top.....??




Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
Bichur
Join Date 10/2003
+253
Reply #6 January 22, 2006 1:13:16 AM
from WinCustomize ForumsWinCustomize Forums
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
kona0197
Join Date 02/2003
+86
Reply #7 January 22, 2006 3:56:02 AM
from WinCustomize ForumsWinCustomize Forums
'll save the lecture about service packs for another time.



I got a new Dell so I have been using SP2 for months now.
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
Fuzzy Logic
Join Date 05/2002
+493
Reply #8 January 22, 2006 5:02:15 AM
from WinCustomize ForumsWinCustomize Forums

Just before xmas I switched back from AVG to Norton AV because twice in a week AVG let a virus through which frelled my pc totally. The only way out was to restore from back-up. Note I said Norton AV, not Norton NIS which is a POS.

Think (for the future) about back-ups. I have two 250Gb drives and Drive Image 7 which is set to do back-ups daily (alternate days for each drive). If I get hit I can use the NAV CD to scan, or simply take 10 mins to restore from back-up.

Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
kona0197
Join Date 02/2003
+86
Reply #9 January 22, 2006 5:43:42 AM
from WinCustomize ForumsWinCustomize Forums
OK here is the deal:

Stinger scan: all clean
Ad Aware scan: all clean
Spybot: all clean
System File Checker using the /scannow key: all files are intact

Don't have a clue what is wrong with the system.

IMPORTANT QUESTION: Can I reinstall XP without wiping out the drive and have all my documents still be there after I reinstall or am I in need of another hard drive or DVD RW drive to backup my stuff then reinstall?

Here is the Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 1:53:07 AM, on 1/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Rainlendar\Rainlendar.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\Terry\My Documents\Hoster\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - Startup: OpenOffice.org 1.1.5.lnk = C:\Program Files\OpenOffice.org1.1.5\program\quickstart.exe
O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_SRCV02.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/qtinstall.info.apple.com/tramper/us/win/QuickTimeInstaller.exe
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1451/ftp.coupons.com/r3302/cpbrkpie.cab
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/download/bin/actxcab.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O20 - AppInit_DLLs: wbsys.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll
O20 - Winlogon Notify: WB - C:\Program Files\Stardock\Object Desktop\WindowBlinds\fastload.dll
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
Jafo
Join Date 03/2001
+1842 sdemployee
Reply #10 January 22, 2006 6:25:04 AM
from WinCustomize ForumsWinCustomize Forums
The R3 ....and the BHOs...and anything with Google in it....you can afford to lose ALL of those....for starters...
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
PurrBall
Join Date 02/2003
+23
Reply #11 January 22, 2006 7:24:58 AM
from WinCustomize ForumsWinCustomize Forums


You could try doing a Windows XP Repair instead of complete reinstall.
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
Corky_O
Join Date 04/2004
0
Reply #12 January 22, 2006 12:46:11 PM
from WinCustomize ForumsWinCustomize Forums

IMPORTANT QUESTION: Can I reinstall XP without wiping out the drive and have all my documents still be there after I reinstall or am I in need of another hard drive or DVD RW drive to backup my stuff then reinstall?

If the system is a Dell, and the OS was supplied by them, you may be limited here - depending on whether or not they gave you the OS on disc, or supplied you with a "Restore Partition". If the latter, then you would be trying to use the restore partition to fix the issue, which will wipe the drive and restore the OS and software to the factory settings.

Alternatively, you can contact Dell and request the OS disc, and then do a repair or clean install with that disc. The repair should leave the programs installed and your documents intact, but of course MS does not guarantee this - so "back-up" is the way to go.

Just for kicks, can you load "msconfig" and select "Diagnostic Startup" > Apply > Reboot > click OK a couple times, and then "Exit without restarting" to load diagnostic. After successfully loading into diagnostic, run "msconfig" again, and select "Normal Startup" > Apply > Reboot.

Then, "Start > Control Panel > Network and Internet Connections > Network Connections > right-click the icon for the LAN you are using, and then select "Repair" > attempt to connect to the internet.

If the internet connection is good, go to Dell's site and download the current "Audio" drivers, and install to attempt to fix the sound issue.

If these work, then the top three issues are left.

Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
kona0197
Join Date 02/2003
+86
Reply #13 January 22, 2006 2:34:24 PM
from WinCustomize ForumsWinCustomize Forums
Corky - Dell supplied me with a standard XP disc. I'll try your suggestions.
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
kona0197
Join Date 02/2003
+86
Reply #14 January 24, 2006 5:17:59 AM
from WinCustomize ForumsWinCustomize Forums
Problem solved. A friend was kind enough to let me use a spare HD as a backup drive to store my music and stuff on while I performed a reinstall of XP. I finished up reinstalling all my third party apps today. Thanks everyone.
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
DaRkFuSsIoOn
Join Date 04/2004
+6
Reply #15 January 24, 2006 5:50:00 AM
from WinCustomize ForumsWinCustomize Forums
I'm lost
Reason for Karma (Optional)
Successfully updated karma reason!
kona0197
Chris TH
Join Date 02/2003
+2
Reply #16 January 24, 2006 6:53:39 AM
from WinCustomize ForumsWinCustomize Forums
OK, maybe for future reference, make youself one of a CD from these guys: http://www.ubcd4win.com/

I was able to completely recover the hosed registry on my machine (from a backup).

Posted via WinCustomize Browser/Stardock Central
Reason for Karma (Optional)
Successfully updated karma reason!
View all recent posts
Mark all posts as read Delete cookies created by the forum Return to Top
Stardock Forums v        Server Load Time:   Page Render Time:

Stardock Magazine | Register | Online Privacy Policy | Terms of Use

Copyright © 2025 Stardock Entertainment and Gas Powered Games. Demigod is a trademark of Stardock. All rights reserved. All other trademarks and copyrights are the properties of their respective owners. Windows, the Windows Vista Start button and Xbox 360 are trademarks of the Microsoft group of companies, and 'Games for Windows' and the Windows Vista Start button logo are used under license from Microsoft. � 2012 Advanced Micro Devices, Inc. All rights reserved. AMD, the AMD Arrow logo and combinations thereof are trademarks of Advanced Micro Devices, Inc.