[Wingfan191]

Ok, this is a problem that's happening on my friend's computer, but since he's not computer savy, I'm helping him out.

Alright, first he was having problems with Windows shutting down all by itself radomly. It would pop up a box saying Windows Will Shut Down in 20 seconds, and there was nothing he could do to stop it.

Well I figured it was spyware or something, so I sent him ad-aware, spybot, and hijackthis to find out what was going on.

We ran hijackthis first so I could see his log file. Then we ran ad-aware and spybot and got rid of all his spyware and crap. But now when he starts up his computer he gets 6 error boxes poping up saying that Windows cannot find the following files...

TFTP2280
TFTP2284
TFTP2984
TFTP3208
TFTP368
TFTP916

He also could not get on his AIM, and his IE would not load any webpages. Then all of a sudden he says he opened his DIVX player and AIM suddenly worked as did his IE.

Well we did another hijackthis to compare log files, but I don't know what's good and what's bad. So if anyone can help us out with this problem, that'd be great.

Attached is the first log file before we ran anything. And in my reply, will be the 2nd log file.

 

[Wingfan191]

Here's the 2nd log file

 

[V0lt]

Does it have anything to do with this?

Also, have you scanned for viruses? This may be something that Ad-aware cannot detect.

A side note: TFTP is Trivial File Transfer Protocol. You may want to search his registry for entries of the files the error message refers to

 

[Deadlus]

He needs to repair his windows. Go to BIOS and make your Boot Sequence to CD-Rom first. Now, pop in the windows XP CD and choose repair. Follow the rest of the instructions.

 

[PenDragoN]

hi!

Does your friend run MS IIS? Normally those TFTP-files are located in %hdd0%\inetpub\ftproot and are normally not needed as long as your friend doesn't host a microsoft IIS based FTP-Server.
So if he doesn't use MS IIS for FTP , those files are comlpletely useless and may be deleted.
The problem with those files is that the scripts within the tftp-files are often used by attackers who try to gain acces to the computer using normally the cmd.exe, tftp.exe, ftp.exe... to gain access and expand administrative rights on this computer in order to hack your system.
Simply delete those files, run a repair as Deadlus said and everything will be great...

Greetz

Pen