|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Virus/Trojan/Spyware Help Get Rid Of Malware With Help From Our Analysts. Follow the "First Steps" link at the top right of each page before posting for help. |
 |
|
|
LinkBack | Thread Tools |
08-23-2009, 12:31 PM
|
#1 (permalink) |
|
Registered User
Join Date: Aug 2009
Posts: 8
OS: xp
|
Is there anyone out there? I just screwed up a computer
Okay, posted on 8/18/09 and still no help, so I decided to run spybot anyway and now cannot get online. It says that it cannot make a connection. I suspect that the problem is in the DNS. Problem is, I am going out of town for a week and this is a friends computer. If anyone can help me to just get this darn computer online so he can check his email, I can wait for the other stuff until I get back.
Please respond so I know that someone has looked at this. DDS (Ver_09-07-30.01) - NTFSx86 Run by Owner at 12:46:14.34 on Sun 08/23/2009 Internet Explorer: 8.0.6001.18702 ============== Running Processes =============== ============== Pseudo HJT Report =============== uSearch Bar = hxxp://www.google.com/ie uSearch Page = hxxp://www.google.com uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 uLocal Page = \blank.htm uStart Page = hxxp://www.techsupportforum.com/ mSearch Bar = hxxp://red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*http://www.yahoo.com/search/ie.html uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = 127.0.0.1 uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s mSearchAssistant = hxxp://www.google.com/ie uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll mWinlogon: Userinit=c:\windows\system32\userinit.exe BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\progra~1\yahoo!\common\yiesrvc.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.15642\swg.dll BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll TB: {5CBE2611-C31B-401F-89BC-4CBB25E853D7} - No File EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background uRun: [Yahoo! Pager] "c:\progra~1\yahoo!\messen~1\YAHOOM~1.EXE" -quiet uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe" mRun: [TrueImageMonitor.exe] c:\program files\acronis\trueimagehome\TrueImageMonitor.exe mRun: [AcronisTimounterMonitor] c:\program files\acronis\trueimagehome\TimounterMonitor.exe mRun: [Acronis Scheduler2 Service] "c:\program files\common files\acronis\schedule2\schedhlp.exe" mRun: [PeachtreePrefetcher.exe] "c:\progra~1\sageso~1\peacht~1\PeachtreePrefetcher.exe" /configfile:peachtreeprefetcher.winstart.config mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\pervas~1.lnk - c:\pvsw\bin\w3dbsmgr.exe IE: &Search IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\progra~1\yahoo!\common\yiesrvc.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - {FE54FA40-D68C-11d2-98FA-00C0F0318AFE} - c:\windows\system32\Shdocvw.dll DPF: Microsoft XML Parser for Java DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GR99D3~1.DLL Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll AppInit_DLLs: c:\progra~1\google\google~1\GOEC62~1.DLL SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GRA8E1~1.DLL ============= SERVICES / DRIVERS =============== ============== File Associations =============== JSEFile=NOTEPAD.EXE %1 VBEFile=NOTEPAD.EXE %1 VBSFile=NOTEPAD.EXE %1 =============== Created Last 30 ================ 2009-08-23 11:25 <DIR> --d----- c:\program files\Spybot - Search & Destroy 2009-08-23 11:25 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy 2009-08-19 18:11 49,152 a------- c:\windows\DBNAMES.CFG 2009-08-19 11:09 <DIR> --d----- c:\docume~1\owner~1.pas\applic~1\Malwarebytes 2009-08-19 11:09 38,160 a------- c:\windows\system32\drivers\mbamswissarmy.sys 2009-08-19 11:09 19,096 a------- c:\windows\system32\drivers\mbam.sys 2009-08-19 11:09 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Malwarebytes 2009-08-19 11:09 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware 2009-08-19 09:50 <DIR> --d----- c:\program files\ESET 2009-08-18 09:37 <DIR> --d----- c:\docume~1\owner~1.pas\applic~1\Error Fix 2009-08-18 09:37 <DIR> --d----- c:\program files\Error Fix 2009-08-17 14:42 <DIR> --d----- c:\windows\pvsw 2009-08-17 13:42 <DIR> --d----- c:\program files\Trend Micro 2009-08-17 12:50 <DIR> --d----- c:\documents and settings\owner.paschal\.housecall6.6 2009-08-17 12:49 411,368 a------- c:\windows\system32\deploytk.dll 2009-08-17 12:35 70 a------- c:\windows\wininit.ini 2009-08-13 13:42 82,944 ac------ c:\windows\system32\dllcache\ws2_32.dll 2009-08-13 13:42 32 a--s---- c:\windows\system32\895310818.dat 2009-08-06 16:19 <DIR> -cd-h--- c:\docume~1\alluse~1\applic~1\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1} 2009-08-06 08:55 93,024 a------- c:\windows\system32\IncContxMenu.dll 2009-08-06 07:46 <DIR> --d----- C:\4769565bff61579edb8f4a36d7db0ec9 2009-08-04 12:45 50 a------- c:\windows\cdplayer.ini ==================== Find3M ==================== 2009-08-20 12:18 4,610 a------- c:\docume~1\owner~1.pas\applic~1\wklnhst.dat 2009-08-14 11:14 2,102,112 a------- c:\windows\system32\Incinerator.dll 2009-07-14 18:44 902,592 a------- c:\windows\system32\drivers\tdrpm228.sys 2009-07-14 18:44 138,208 a------- c:\windows\system32\drivers\snapman.sys 2009-07-14 17:23 540,000 a------- c:\windows\system32\drivers\timntr.sys 2009-07-14 17:23 44,704 a------- c:\windows\system32\drivers\tifsfilt.sys 2009-07-14 15:38 74,703 a------- c:\windows\system32\mfc45.dll 2009-07-14 12:05 30,208 a------- c:\windows\system32\iolobtdfg.exe 2009-07-13 17:11 4,262,424 a------- c:\program files\ComodoBackUp_Setup_1.0.4.337.exe 2009-07-07 21:36 11,776 a------- c:\windows\system32\smrgdf.exe 2009-07-03 12:09 915,456 a------- c:\windows\system32\wininet.dll 2009-06-16 09:55 119,808 a------- c:\windows\system32\t2embed.dll 2009-06-16 09:55 82,432 a------- c:\windows\system32\fontsub.dll 2009-06-03 14:24 1,291,264 a------- c:\windows\system32\quartz.dll ============= FINISH: 12:47:01.96 =============== |
|
     
|
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
08-23-2009, 07:19 PM
|
#2 (permalink) |
|
Analyst, Security Team
Join Date: Feb 2006
Posts: 228
OS: 2K
|
Re: Is there anyone out there? I just screwed up a computer
A belated hello jlrice,
Goodness, but with all your thread starting, posting and bumping I had a difficult time tracking down exactly where I should post a reply. The Gmer log does show an usual likely restricted Registry key related to IE, which may be involved in your problems there. Let's get a different current view of things then go from there. To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs. Download RSIT (random's system information tool) from here to your desktop, then click on the RSIT.exe to start the scan. If necessary allow it to locate or download a copy of HijackThis as needed. Once the scan completes a textbox will open - copy/paste those contents here for review please. The log can also be found at C:\rsit\log.txt. RSIT will also create a second log, info.txt, which will be minimized to your taskbar. Post that here as well please (it will also be stored at C:\rsit\info.txt). You can break logs into parts and use separate posts here when replying and posting the log files, if needed.
__________________
|
|
|
|
|
08-24-2009, 10:51 AM
|
#4 (permalink) |
|
Analyst, Security Team
Join Date: Feb 2006
Posts: 228
OS: 2K
|
Re: Is there anyone out there? I just screwed up a computer
We'll have to switch to some other view method then. In checking the installed software log it does show some undesirable softwares installed which would cause problems, and some that are just not considered as beneficial to have or use on systems. And folders from an ErrorFix software, which really is just rogue "reg fixer" software. For some reason it also shows both IE7 and IE*, which is something I don't recall seeing before - only after IE8 is uninstalled does the IE7 install get shown as installed. Do both of these show in Add/Remove Programs on the system?
To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs. Go to Start – Settings – Control Panel. Click on Add/Remove Programs. If any of the following programs are listed there, click on the program to highlight it, and click on Remove. Then close the Control Panel. JuicyAccess Toolbar - New to me, but appears to be related to a Double D adware program. RegistryFix v7.1 0 This version of another "reg fixer" software only shows as crack/torrent downloads, but either way it is not recommended for use. More "fixer" softwares that are more often the cause of problems than provide any beneficial changes: Uniblue RegistryBooster 2009 iolo technologies' System Mechanic --------------- Download ComboFix.exe from here to your desktop, but I would like you to rename the file as you download it (do not download it directly without renaming it - use right click "Save Target/Link As" ). For this, rename the downloading file to 456out.com, then click the renamed 456out.com to run that scan. Be sure to install the Recovery Console if you are asked to do so. When the scan completes, a text window with your log will open. Please copy and paste that log back here. A caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Allow the scan to run. When completed a text window will appear - please copy/paste the contents back here. This log can also be found at C:\ComboFix.txt.
__________________
|
|
|
|
|
| Thread Tools | |
|
|
