![]() |
![]() |
![]() |
|||||
![]() |
![]() |
![]() |
![]() |
![]() |
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| HijackThis Log Help Get Rid Of Malware With Help From Our Analysts. Follow the "First Steps" link at the top right of each page before posting for help. |
![]() |
|
|
Thread Tools |
|
|
#1 (permalink) |
|
Registered User
Join Date: Mar 2008
Posts: 8
OS: Windows 2000 Pro NT
|
Frusrated with compromised computer (Moved from Win2k)
Hi,
I ran across this forum when I was searching for info on pop up that give the following text: Message from Local System to User on 3/30/2008 12:53 AM. CRITICAL ERROR MESSAGE!-REGISTRY DAMAGED AND CORRUPTED To FIX this problem: Open Internet Explorer and type: www.registrycleanerxp.com Once you load the web page, close this message window After you install the cleaner program you will not receive an more reminders or pop-ups like this. VISIT www.registrycleanerxp.com IMMEDIATELY! I have researched and I know it is a scam and probably some sort of malware, virus, etc., but I have done a lot. Nothing seems to stop it. The computer I have was given to me in 2004 and I finally got it running and realized it was infected. It crashes after multiple messages like this come up and eventually many strange redirections to websites will occur. I ran antivirus and anti-rootkit programs. I managed to destroy or quarantine many viruses, but there is still a problem because I am getting this pop up. I am exhausted and feel like destroying the computer. I was thinking of doing a trial of Trend Micro's product(s), because I don't want to get stuck with something I don't like at a high price. It hasn't done it yet, but my computer will probably eventually lock up and prevent me from using it at all. Any ideas would be appreciated. One last thing. When I ran the anti-virus program, it quarantine many virus or suspect files. I restarted my computer and got a message that a system file (Windows\system 32\qaucxrlq.dll) could not be found. This is because it was one of the infected quarantined files. Is there anything I can do about this. What an annoyance. I don't like email so I am hoping I can just check the thread for response. Thanks in advance ![]() |
|
|
|
|
|
#2 (permalink) |
|
Registered User
Join Date: Mar 2008
Posts: 8
OS: Windows 2000 Pro NT
|
Re: Frusrated with compromised computer (Moved from Win2k)
I wish someone would recognize this and give some advice. I am thinking of trying some free software called RegCare to try to resolve this.
|
|
|
|
|
|
#3 (permalink) |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,542
OS: Windows XP Pro
|
Re: Frusrated with compromised computer (Moved from Win2k)
Hello foursavages,
Have you taken the time to familiarize yourself with the following sticky before posting? (Updated!) IMPORTANT - Read This Before Posting A Log Please go through the 5 steps outlined in the link below and post back the requested logs in this thread. -------------------------------------------------------------- Also, please refrain from using any registry cleaners as they only create more problems down the long run... Thanks.
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum |
|
|
|
|
|
#4 (permalink) | |
|
Registered User
Join Date: Mar 2008
Posts: 8
OS: Windows 2000 Pro NT
|
Re: Frusrated with compromised computer (Moved from Win2k)
Quote:
Hi, I appreciate the 5 steps. I have done the majority of what is in them. I tried to use a free registry cleaner mainly because I didn't hear back. However, I ended up not actually being able to use it since it wasn't free. They just wanted me to pay money and I didn't bite. I ended up giving the computer back for a reformat and reinstallation. The problem is bigger than I am. I spent over 20 hours doing most of what was in the 5 steps. While about 60 viruses were found and some quarantined, it did not stop the continuous pop-ups with "Critical system errors" and I was prevented from accessing AVG's website to update the free software. I thought perhaps somebody would have run across these Windows that talk about Critical errors and might recognize or have answers about the particular issues in the first post. I am still interested, but I would have to collect information to give to the person who will be taking over. I have never had anything like this happen to me on any computer. It came that way. Thanks for any additional info relating to the first post. ![]() |
|
|
|
|
|
|
#5 (permalink) |
|
Registered User
Join Date: Mar 2008
Posts: 8
OS: Windows 2000 Pro NT
|
Re: Frusrated with compromised computer (Moved from Win2k)
One more thing. I am a little confused about the mention of Microsoft support for Windows 2000 Pro, because I didn't think it was supported anymore. I would like to know if it is at least for security. I am temporarily running 98 and know that there is some security support through Microsoft. Where do you find that type of support. I will also look on the forum.
thanks |
|
|
|
|
|
#6 (permalink) |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,542
OS: Windows XP Pro
|
Re: Frusrated with compromised computer (Moved from Win2k)
Hi foursavages,
Sometimes it is just best to reformat and start fresh when there are too many problems with the machine. There sure are some nasty virus' out there :( Also, about your question about supported Operating Systems. Microsoft still offers support for Windows 2000. I think the only OS they dropped was Win95 and earlier. We have an excellent support team here for Windows 2000: http://www.techsupportforum.com/micr...ation-support/ Also, you can visit Microsoft's website for support: http://support.microsoft.com/ph/1131
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum |
|
|
|
|
|
#7 (permalink) |
|
Registered User
Join Date: Mar 2008
Posts: 8
OS: Windows 2000 Pro NT
|
Re: Frusrated with compromised computer (Moved from Win2k)
Hi,
I agree with the reformat. I had trouble doing that as well. I will have to find out the exact error, but I couldn't do it. Perhaps someone would know a way around it. The error mentioned that something was locked, but I can't remember specifics. I know Microsoft quit supporting Windows 98, because I couldn't do it and the site told me that it wasn't supported. I wrote them today to ask for security updates even if they are old. It is better than nothing. I am going to install one of the free programs. That is where I am having a problem deciding. Avast caught 42. Then, about 27 were caught by AVG. I hadn't connected to the internet. I thought about Trend Micro. I don't think they offer support for Windows 98/2000 Pro, but I think the software will work. I even thought of a free trial to see how it works. No decisions yet. If I ever by a computer again, it will be a Mac. Not a fan of Microsoft products. But I never had any problems myself until that computer. Somebody was downloading like crazy. Any more thoughts about the Windows 98/2000 Pro support appreciated. I searched their site, but I couldn't find anything. Thanks, foursavages |
|
|
|
|
|
#8 (permalink) |
|
Registered User
Join Date: Mar 2008
Posts: 8
OS: Windows 2000 Pro NT
|
Hi again,
I have been using my old computer with Windows 98 on it. I am not having major problems, but a couple of small things are bothering me. One--I sometimes cannot go to the website http://www.google.com. It says that the window cannot be displayed. I can go to gmail and my internet account though. This computer hasn't been used for awhile, but that is the reason I stopped using it. Any thoughts? Also, a toolbar suddenly came onto my computer at the top of the screen. It only appear when I place the mouse at the top to open folders. Then, it disappears. I also downloaded a file, just a jpg, that I sent through my email which checks for viruses. The computer will not allow me to delete this file, which I also can't open. Why would that happen? I don't think it is likely that this computer is infected. I only used it for email. I never downloaded except that one file. Nothing really bad is happening, but you never know. I also know there is no support for Windows 98, but this forum has it. Is that right? Sorry for the long message. I did a defrag tonight just because it sometimes helps. It was in obvious need of it. Does anyone know anything about CCleaner? I have not used it and won't until I get feed back. Thanks, foursavages |
|
|
|
|
|
#9 (permalink) |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,542
OS: Windows XP Pro
|
Re: Frusrated with compromised computer (Moved from Win2k)
Hello,
Its hard to say why sometimes google would work and other times it wont. It could be your network connectivity to that machine is bad? About the toolbar.. Is it possible to capture a screenshot of this, so that I have an idea of what your talking about? Please capture a screenshot and attach it in your next reply. In Windows a screenshot of the entire monitor, complete with taskbar, can be copied to the system clipboard by pressing the Print screen key (normally located in the top row on the right-hand side of the keyboard).. You can then paste the clipboard into a program like MS Paint to save it as an image file or paste it directly into a document. 1. Press the Print screen key 2. Click the "Start" button (normally located in the bottom left of your screen). 3. Click "Run" & type "mspaint" (without quotes) & click the "OK" button. 4. Wait while the application "Paint" opens. Once it is open, proceed to the next step. 5. Click the "Edit" menu and select "Paste". 6. Click the "File" menu and select "Save As...". A dialog box will appear. 7. In the "File name" field, enter a name of your choice. 8. Click the "Save as type" drop-down and select "JPEG (*.JPG;*.JPEG;*.JPE*;.JFIF)". 9. Click the "Save" button. Please attach the screenshots to your post. To attach a file to a new post, simply:
Sometimes when files are in use they become locked and are unable to be deleted. Another possibility is that your Anti-Virus software has tied up the file. You can try to delete it in safe mode. Enter Safe Mode
Note: Some systems, this may be the F5 key, so try that if F8 doesn't work. ------------------------------------------------------------- We can always do a few scans to see if anything is present. Please download HijackThis. This program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded. Click on the "Install" button. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis Double click on HijackThis.exe to run the program. 1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'. 2. If you don't get the intro screen, just hit Scan and then click on Save log. 3. Post the hijackthis.log file here. Do not fix anything in HijackThis since they may be harmless. -------------------------------------------- Yes, this forum has a Windows 98 support section located at the following link: http://www.techsupportforum.com/micr...98-me-support/ CCleaner is a very wonderful tool, which we sometimes use to clean temp files and cookies.
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum |
|
|
|
|
|
#10 (permalink) |
|
Registered User
Join Date: Mar 2008
Posts: 8
OS: Windows 2000 Pro NT
|
To ForHockey (hope I got that right) and all others that have been so helpful and nice. I really love this forum and I wanted to thank you for being so polite. Often, I have been mistreated, because I will admit I am not as technically inclined when it comes to the Windows OS or any OS for that matter.
I am going to go everything you suggested. It might take me a couple of days, but thanks for the clear directions. It is so hard to find that these days (especially without arrogance). One more question about CCleaner. I read that it can delete critical files by mistake. Is there a way to set that up so it backs up everything? And should I wait to do that until I do everything else you recommended first? Thanks again, foursavages ![]() ![]() |
|
|
|
|
|
#11 (permalink) |
|
Analyst, Security Team
Join Date: Sep 2006
Location: Ontario, Canada
Posts: 2,542
OS: Windows XP Pro
|
Re: Frusrated with compromised computer (Moved from Win2k)
Hi foursavages,
CCleaner doesn't touch critical files. Please visit the website below, which highlights the features of what this tool does. http://www.ccleaner.com/features It wouldn't hurt to run ccleaner first to see if you notice any improvements. Below is the set of instructions I give for downloading and running the program: Download and install CCleaner..http://www.ccleaner.com/ccdownload.asp *Note* On the install please uncheck the option "Add CCleaner Yahoo! toolbar and use CCleaner from your browser" 1. Open the program and the "Cleaner" button should be active. 2. Click on "Run Cleaner" 3. Once thats done it will clean out the TEMP folder. 4. Now click on "Registry" and then "Scan for Issues" 5. Once it's done checkmark ALL it finds and click "Fix Selected Issues" 6. It will ask you if you want to back up the registry entrys it's removing so please do so. If it removes anything important..just locate the .reg file you saved...double click on it to add the entrys back. Close the program. Next, you can carry on with my previous instructions.
__________________
![]() Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum Last edited by forhockey : 04-09-2008 at 08:08 PM. |
|
|
|
|
|
#12 (permalink) |
|
Registered User
Join Date: Mar 2008
Posts: 8
OS: Windows 2000 Pro NT
|
Re: Frusrated with compromised computer (Moved from Win2k)
Thank you for the information. I am planning on working on this over the weekend. I already was able to use some info provided here to delete a file. Thanks so much!
|
|
|
|
![]() |
| Thread Tools | |
|
|