Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: pc problems  (Read 41107 times)

0 Members and 1 Guest are viewing this topic.

Filip.dahlberg

    Topic Starter


    Rookie

    Re: pc problems
    « Reply #45 on: April 09, 2009, 12:12:20 PM »
    and the log we created a few moments ago are the items i need to find and change?

    evilfantasy

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Calm like a bomb
    • Thanked: 493
    • Experience: Experienced
    • OS: Windows 11
    Re: pc problems
    « Reply #46 on: April 09, 2009, 12:13:53 PM »
    Yes, under each key you need to change the fystemROOT to read systemROOT.

    Filip.dahlberg

      Topic Starter


      Rookie

      Re: pc problems
      « Reply #47 on: April 09, 2009, 12:14:43 PM »
      okey will do that, then perform another scan with the regsearch 

      edit: em i have tried the first two entries, but i get an error message when trying to change the `f` to an `s` and it wont change it. it says an error occurred when the new value was going to be written

      edit: tried all..none work
      « Last Edit: April 09, 2009, 01:44:05 PM by Filip.dahlberg »

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 493
      • Experience: Experienced
      • OS: Windows 11
      Re: pc problems
      « Reply #48 on: April 09, 2009, 02:59:13 PM »
      I haven't forgotten you. I'm looking into some possible solutions to this. :-\

      It's a know problem but so far there is no clear solution.

      Filip.dahlberg

        Topic Starter


        Rookie

        Re: pc problems
        « Reply #49 on: April 09, 2009, 03:10:39 PM »
        no worries, didnt think u had forgotten me. *crosses fingers* that u find a solution because it really is annoying. havent had any crashes of firefox lately, tho some programs crash. Also it feels very insecure to be using the computer when its not updated..

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11
        Re: pc problems
        « Reply #50 on: April 09, 2009, 03:12:53 PM »
        Hopefully I will hear something soon.

        For now using Firefox go here http://windizupdate.com/ and see if you can install the updates that way.

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11
        Re: pc problems
        « Reply #51 on: April 09, 2009, 03:20:29 PM »
        OK found a new solution to investigate.

        Download GMER and save it your desktop.

        * Extract it to your desktop and double-click GMER.exe
        * Click the rootkit tab and then scan.
        * Don't check the Show All box while scanning in progress!
        * When scanning is finished click Copy.
        * This copies the log to clipboard
        * Post the log in your reply.

        Filip.dahlberg

          Topic Starter


          Rookie

          Re: pc problems
          « Reply #52 on: April 09, 2009, 03:54:09 PM »
          tried that firefox thing, didnt work got the following error:

          Firefox could not install the file at

          http://windizupdate.com/files/windizupdate.xpi

          because: Install script not found
          -204
          running the other scan as we speak

          edit: here is the scan attached

          [attachment deleted by admin]
          « Last Edit: April 09, 2009, 04:14:20 PM by Filip.dahlberg »

          evilfantasy

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Calm like a bomb
          • Thanked: 493
          • Experience: Experienced
          • OS: Windows 11
          Re: pc problems
          « Reply #53 on: April 09, 2009, 09:27:36 PM »
          Download and run this tool to try and regain the ability to edit the registry. http://www.dougknox.com/security/scripts_desc/regtools.htm

          Now try to edit the fystemROOT keys again.

          Here is a brief description on how to do it. Obviously you will need to follow each registry key that was listed in the previous post. http://www.computerhope.com/forum/index.php/topic,80867.msg534151.html#msg534151

          Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS

          In the right Window pane look for Imagepath.

          In the data column it should have the %fystemRoot%\system32\svchost.exe -k netsvcs

          Doubleclick on Imagepath and change it to %SystemRoot%\system32\svchost.exe -k netsvcs.

          Filip.dahlberg

            Topic Starter


            Rookie

            Re: pc problems
            « Reply #54 on: April 09, 2009, 09:31:32 PM »
            em what do i download? there is no file to download it simply gives me a list of code, and the regedit instruction is exactly what i was doing

            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 493
            • Experience: Experienced
            • OS: Windows 11
            Re: pc problems
            « Reply #55 on: April 09, 2009, 09:35:27 PM »
            Read the instructions on this page -> http://www.dougknox.com/security/scripts_desc/regtools.htm

            You might also try changing the keys and running the .vbs file in Safe Mode for a better chance at it working.

            Filip.dahlberg

              Topic Starter


              Rookie

              Re: pc problems
              « Reply #56 on: April 09, 2009, 09:40:53 PM »
              regtools.vbs - Disable/Enable Registry Editing tools in Windows
              © Doug Knox - rev 01/10/2000
              This code may be freely distributed/modified.

              Usage: Download regtools.vbs Save the file to the folder of your choice. Double click the VBS file. The VB Script file will check for the appropriate value and if not found will create it. If the value was found, it will be toggled to its opposite state and you will be informed that you need to log off/back on or restart your computer. One note. This change is made in HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System. Disabling the tools takes effect immediately. Enabling requires a restart.  This script can be viewed in Notepad or any text editor, as to the specific Registry key and value that are updated. Your antivirus software may report this script as potentially malicious, or a possible virus. This is because the script writes to the System Registry.

              This page last updated 11/25/2005 21:17
              All material © Doug Knox

              i cant `download regtools.vbs clicking the link at the top gives me a page of code, clicking the `download button` gives me a page of code:

              'Enable/Disable Registry Editing tools
              '© Doug Knox - rev 12/06/99

              Option Explicit

              'Declare variables
              Dim WSHShell, n, MyBox, p, t, mustboot, errnum, vers
              Dim enab, disab, jobfunc, itemtype

              Set WSHShell = WScript.CreateObject("WScript.Shell")
              p = "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\"
              p = p & "DisableRegistryTools"
              itemtype = "REG_DWORD"
              mustboot = "Log off and back on, or restart your pc to" & vbCR & "effect the changes"
              enab = "ENABLED"
              disab = "DISABLED"
              jobfunc = "Registry Editing Tools are now "

              'This section tries to read the registry key value. If not present an
              'error is generated.  Normal error return should be 0 if value is
              'present
              t = "Confirmation"
              Err.Clear
              On Error Resume Next
              n = WSHShell.RegRead (p)
              On Error Goto 0
              errnum = Err.Number

              if errnum <> 0 then
              'Create the registry key value for DisableRegistryTools with value 0
                 WSHShell.RegWrite p, 0, itemtype
              End If

              'If the key is present, or was created, it is toggled
              'Confirmations can be disabled by commenting out
              'the two MyBox lines below

              If n = 0 Then
                 n = 1
              WSHShell.RegWrite p, n, itemtype
              Mybox = MsgBox(jobfunc & disab & vbCR & mustboot, 4096, t)
              ElseIf n = 1 then
                 n = 0
              WSHShell.RegWrite p, n, itemtype
              Mybox = MsgBox(jobfunc & enab & vbCR & mustboot, 4096, t)
              End If

              that i get from both links on that page, am i doing something wrong? am i meant to copy that code into a file or something?

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 493
              • Experience: Experienced
              • OS: Windows 11
              Re: pc problems
              « Reply #57 on: April 09, 2009, 09:46:36 PM »
              Ahh, I see what you mean now. You need to use IE to download .vbs files.

              Filip.dahlberg

                Topic Starter


                Rookie

                Re: pc problems
                « Reply #58 on: April 09, 2009, 09:59:57 PM »
                okey download of the tool worked better in IE :), however it didnt help still cant edit the `f` to an `s` gives the same error message as described earlier. Even tried it in safemode

                ps. dentist went well ? :)

                evilfantasy

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Calm like a bomb
                • Thanked: 493
                • Experience: Experienced
                • OS: Windows 11
                Re: pc problems
                « Reply #59 on: April 09, 2009, 10:29:16 PM »
                Yea the dentist was OK. I had a tooth pulled and then developed dry socket so this week has been a painful one...

                I'm done for tonight. Tomorrow I will have to get into the registry on another computer and look at those keys and try to come up with something. Others are working on this also so maybe an automated fix will be available soon. Everyone else has been able to edit the keys so this is a real head twister as to why you can't.