Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: clueless  (Read 6361 times)

0 Members and 1 Guest are viewing this topic.

junior

  • Guest
clueless
« on: March 17, 2006, 08:57:12 PM »
Hi guys.

I am new at this. My friend emailed me a virus and I have trouble getting rid of it. When I tried to eliminate it by going to TrenMicro and other virus checkers, my computer would crash. Help. I have a log

Logfile of HijackThis v1.99.1
Scan saved at 10:21:51 AM, on 17/03/2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\NISSERV.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\IAMAPP.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\NISUM.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\POPROXY.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\MICROSOFT MONEY\SYSTEM\MONEY EXPRESS.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\AIM\AIM.EXE
C:\PROGRAM FILES\YAHOO!\MESSENGER\YPAGER.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE
C:\WINDOWS\START MENU\PROGRAMS\STARTUP\SGETASK.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\MSOFFICE.EXE
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\FINDFAST.EXE
C:\PROGRAM FILES\BACKWEB\BACKWEB\PROGRAM\BWDELAY.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\HIJACKTHIS\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp.my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/*http://www.yahoo.com/ext/search/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
F1 - win.ini: run=hpfsched
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN2\YT.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\PROGRAM FILES\YAHOO!\COMMON\YIETAGBM.DLL
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN2\YT.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Hidserv] Hidserv.exe run
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [Delay] C:\WINDOWS\delayrun.exe
O4 - HKLM\..\Run: [mgavrtclexe] C:\WINDOWS\MCBin\AV\Rt\mgavrtcl.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\PROGRA~1\ADAPTEC\DIRECTCD\DIRECTCD.EXE
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [Norton eMail Protect] C:\Program Files\Norton AntiVirus\POPROXY.EXE
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\LOGITECH\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [KB891711] C

Fed

  • Moderator


  • Sage
  • Thanked: 35
    • Experience: Experienced
    • OS: Windows XP
    Re: clueless
    « Reply #1 on: March 17, 2006, 09:03:55 PM »
    Post the rest of the log, if you read the screen you will work out how.

    Flame

    • Moderator


    • Prodigy

    • Think, dream, see, be... Everything.
    • Thanked: 6
      • Yes
    • Certifications: List
    • Experience: Guru
    • OS: Other
    Re: clueless
    « Reply #2 on: March 17, 2006, 09:10:53 PM »
    From what you have given us so far, I don't see anything that shows to be an immediate threat.

    Flame

    Dilbert

    • Moderator


    • Egghead

    • Welcome to ComputerHope!
    • Thanked: 44
      Re: clueless
      « Reply #3 on: March 17, 2006, 09:15:42 PM »
      OK, let me look through this and see what we've got here.

      [edit]Never mind[/edit]

      Quote
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      OK, I don't have Windows ME (I use XP) but something seems wrong here. Just an intuition. I'm probably wrong myself, but...

      [edit]Never mind[/edit]

      [edit]Never mind[/edit]


      That's all I see that looks suspicious from this part of the log. I'm leaving out things that are harmless but not necessary; that's for another time. ;D In the meantime, post the rest of the log and we'll rip through that. :)
      « Last Edit: March 17, 2006, 09:32:39 PM by Timothy_Bennett »
      "The geek shall inherit the Earth."

      junior

      • Guest
      Re: clueless
      « Reply #4 on: March 17, 2006, 09:22:07 PM »
      continued..

      O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
      O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
      O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
      O4 - HKCU\..\Run: [AIM] C:\PROGRAM FILES\AIM\aim.exe -cnetwait.odl
      O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
      O4 - HKCU\..\Run: [Spyware Doctor] "C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE" /Q
      O4 - Startup: SGETask.Exe
      O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Startup: AOL 7.0 Tray Icon.lnk = C:\Program Files\AOL 7.0\aoltray.exe
      O4 - Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
      O4 - Startup: Microsoft Office Shortcut Bar.lnk = C:\Program Files\Microsoft Office\Office\MSOFFICE.EXE
      O4 - Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
      O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
      O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
      O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
      O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
      O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
      O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
      O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
      O9 - Extra button: MktBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:\NASDAQ\LMT\MarketBrowser_Launch.xpy
      O9 - Extra 'Tools' menuitem: MarketBrowser - {17A27031-71FC-11d4-815C-005004D0F1FA} - C:\NASDAQ\LMT\MarketBrowser_Launch.xpy
      O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRAM FILES\YAHOO!\COMMON\YIESRVC.DLL
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O14 - IERESET.INF: START_PAGE_URL=http://hp.my.yahoo.com
      O15 - Trusted Zone: http://www.iwon.com
      O15 - Trusted Zone: http://btrack.iwon.com
      O15 - Trusted Zone: http://monthlyprizes.iwon.com
      O15 - Trusted Zone: http://registration.iwon.com
      O15 - Trusted Zone: http://www.e.bell.ca
      O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a224.g.akamai.net/7/224/52/20010620/qtinstall.info.apple.com/qt502/us/win/QuickTimeInstaller.exe
      O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/zone/Z4/heartbeat.cab
      O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} - http://launch.gamespyarcade.com/software/launch/alaunch.cab
      O16 - DPF: {869F3BBC-A812-4D13-A93B-7B3FC816DCD5} (McAfee.com Updater) - http://download.mcafee.com/molbin/clinic/virusscan/mcasupd.cab
      O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potb_x.cab
      O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/games/clients/y/tt0_x.cab
      O16 - DPF: Yahoo! Word Racer - http://download.games.yahoo.com/games/clients/y/wt0_x.cab
      O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt0_x.cab
      O16 - DPF: Yahoo! Graffiti - http://download.games.yahoo.com/games/clients/y/grt0_x.cab
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/ClickYesToContinue/ie/bridge-c18.cab
      O16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/games/clients/y/ht1_x.cab
      O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
      O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
      O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cab
      O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
      O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
      O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
      O16 - DPF: {861DB4B6-3838-11D2-8E50-002018200E57} (MrSIDI Control) - http://data6.archives.ca/mrsidi_cab/MrSIDI.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sympatico.ca
      O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 209.226.175.223,198.235.216.134


      Flame

      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: clueless
      « Reply #5 on: March 17, 2006, 09:22:42 PM »
      The first process that you noted is not suspicious, although it may look that way. Have a look http://www.processlibrary.com/directory/files/KB891711/index.php ...

      Flame

      Flame

      • Moderator


      • Prodigy

      • Think, dream, see, be... Everything.
      • Thanked: 6
        • Yes
      • Certifications: List
      • Experience: Guru
      • OS: Other
      Re: clueless
      « Reply #6 on: March 17, 2006, 09:25:35 PM »
      Ok, based on the new information, the following looks suspicious...

      O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

      O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab


      Note sure about:

      O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/ClickYesToContinue/ie/bridge-c18.cab

      O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 209.226.175.223,198.235.216.134

      O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sympatico.ca


      Flame

      Dilbert

      • Moderator


      • Egghead

      • Welcome to ComputerHope!
      • Thanked: 44
        Re: clueless
        « Reply #7 on: March 17, 2006, 09:26:13 PM »
        Quote
        continued..

        Still not all...

        Quote
        O14 - IERESET.INF: START_PAGE_URL=http://hp.my.yahoo.com
        According to the key for what these mean, ANYTHING with O14 is a "Reset Web Settings Hijack". DEFINITELY a virus of a sort; it messes with your home page. Remove it.

        Quote
        O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = sympatico.ca
        O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer =

        It's not complete, but ALL O17's are domain hijackers. Remove them too.

        [edit]Wait, you're not sure, Flame? I thought that it went like

        Quote
        R0, R1, R2, R3 - Internet Explorer Start/Search pages URLs  
        F0, F1 - Autoloading programs  
        N1, N2, N3, N4 - Netscape/Mozilla Start/Search pages URLs  
        O1 - Hosts file redirection  
        O2 - Browser Helper Objects  
        O3 - Internet Explorer toolbars  
        O4 - Autoloading programs from Registry  
        O5 - IE Options icon not visible in Control Panel  
        O6 - IE Options access restrictions  
        O7 - Regedit access restrictions  
        O8 - Extra items in IE context menu  
        O9 - Extra buttons on main IE button toolbar or extra items in IE Tools menu  
        O10 - Winsock hijacker  
        O11 - Extra group in IE Advanced Options window  
        O12 - IE plugins  
        O13 - IE DefaultPrefix hijack  
        O14 - Reset Web Settings hijack  
        O15 - Unwanted site in Trusted Zone  
        O16 - ActiveX Objects  
        O17 - Lop domain hijackers  
        O18 - Extra protocols and protocol hijackers  
        O19 - User style sheet hijack  
        O20 - AppInit_DLL Registry value autorun  
        O21 - ShellServiceObjectDelayLoad Registry key autorun  
        O22 - Shared Task Scheduler Registry key autorun  
        O23 - NT Services
        [/edit]


        Post the rest of the log, please. :)
        « Last Edit: March 17, 2006, 09:27:34 PM by Timothy_Bennett »
        "The geek shall inherit the Earth."

        Flame

        • Moderator


        • Prodigy

        • Think, dream, see, be... Everything.
        • Thanked: 6
          • Yes
        • Certifications: List
        • Experience: Guru
        • OS: Other
        Re: clueless
        « Reply #8 on: March 17, 2006, 09:27:45 PM »
        If it makes it easier for you, just attact the .txt file to your message and we'll have a look that way. Where did you get those codes?

        Flame
        « Last Edit: March 17, 2006, 09:28:34 PM by flame »

        Fed

        • Moderator


        • Sage
        • Thanked: 35
          • Experience: Experienced
          • OS: Windows XP
          Re: clueless
          « Reply #9 on: March 17, 2006, 09:30:03 PM »
          Take it easy there Rambo. :o

          KB891711.EXE is a Windows Security update process which is installed on mainly Windows 98 machines and provides additional protection from Internet-bound threats. This program is important for the stable and secure running of your computer and should not be terminated.x

          HPFSCHED is a small TSR that will remind you to clean the cartridges in your DeskJet from time to time in order to keep print quality high. It can be removed from the run line in win.ini if you do not want that feature

          hidserv.exe provides support for USB multimedia devices with the Microsoft Windows operating system. This program is important for the stable and secure running of your computer and should not be terminated.

          delayrun.exe is a process made by Hewlett Packard. It's purpose is to prevent conflicts on HP Pavillion computers. This program is important for the stable and secure running of your computer and should not be terminated.

          Dilbert

          • Moderator


          • Egghead

          • Welcome to ComputerHope!
          • Thanked: 44
            Re: clueless
            « Reply #10 on: March 17, 2006, 09:33:08 PM »
            *Backs away... slowly...*

            I edited my posts.  :-[
            "The geek shall inherit the Earth."

            Fed

            • Moderator


            • Sage
            • Thanked: 35
              • Experience: Experienced
              • OS: Windows XP
              Re: clueless
              « Reply #11 on: March 17, 2006, 09:33:26 PM »
              I'll let you guys fight it out. ROTFLMAO!

              Fed

              • Moderator


              • Sage
              • Thanked: 35
                • Experience: Experienced
                • OS: Windows XP
                Re: clueless
                « Reply #12 on: March 17, 2006, 09:36:26 PM »
                Get back in here Dilbert!
                Just do a bit of Google on the way mate. ;)

                Dilbert

                • Moderator


                • Egghead

                • Welcome to ComputerHope!
                • Thanked: 44
                  Re: clueless
                  « Reply #13 on: March 17, 2006, 10:22:00 PM »
                  Yes, Momma Sith! :o

                  Please post the rest of your log, and we'll help with it. 8-)
                  "The geek shall inherit the Earth."

                  Backdated

                  • Guest
                  Re: clueless
                  « Reply #14 on: March 18, 2006, 04:07:33 AM »
                  IERESET is OK as long as it points to the desired page.
                  Nameserver entries are OK as long as they correlate to the ISPs DNS servers, in this case, Canada Bell.

                  I'm surprised that no-one has picked up on SGETask.Exe among a few other things.