Computer Hope

Software => Internet browsers => Topic started by: hateing on October 25, 2008, 09:03:58 AM

Title: plz help
Post by: hateing on October 25, 2008, 09:03:58 AM: hi i have a problem i try to goto the microsoft update page but it won't let me the page that comes up says that internet explorer can't display this page. this is my hijackthis report.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:57:59 AM, on 10/25/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\brastk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\GetModule\GetModule24.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.CPL,CMICtrlWnd
O4 - HKLM\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe
O4 - HKLM\..\Run: [AntiSpywareXP 2009] "C:\Program Files\AntiSpywareXP2009\AntiSpywareXP2009.exe" /hide
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [GetModule24] C:\Program Files\GetModule\GetModule24.exe
O4 - HKCU\..\Run: [GetPack23] "C:\Program Files\GetPack\GetPack23.exe"
O4 - HKCU\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
Title: Re: plz help
Post by: patio on October 25, 2008, 11:30:05 AM: Looks like an incomplete log to me...try again.
Title: Re: plz help
Post by: hateing on October 25, 2008, 01:21:15 PM: nope it gave me the same thing.
Title: Re: plz help
Post by: kpac on October 25, 2008, 01:23:43 PM: Usually it says "-- End of file --" at the end of file. ::)
Title: Re: plz help
Post by: Broni on October 25, 2008, 01:25:43 PM: Your computer IS infected, but to see better what's going on, rename hijackthis.exe to computerhope.exe, and run the scan again.
Title: Re: plz help
Post by: kpac on October 25, 2008, 01:27:12 PM: You might also want to read this: http://www.computerhope.com/forum/index.php/topic,46313.0.html
Title: Re: plz help
Post by: hateing on October 25, 2008, 02:26:44 PM: ok i tried everything and i can't update any thing i can't install spy bot because it says it can't connect with the server. same with everything else.
Title: Re: plz help
Post by: Broni on October 25, 2008, 05:34:41 PM: Did you read my reply #4?
Title: Re: plz help
Post by: hateing on October 25, 2008, 09:33:35 PM: it gave me this log now.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:32:39 PM, on 10/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\brastk.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\GetModule\GetModule24.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.CPL,CMICtrlWnd
O4 - HKLM\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [GetModule24] C:\Program Files\GetModule\GetModule24.exe
O4 - HKCU\..\Run: [GetPack23] "C:\Program Files\GetPack\GetPack23.exe"
O4 - HKCU\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {5852F5ED-8BF4-11D4-A245-0080C6F74284} - http://cache2.vuze.com/files/Azureus_Java_Installer.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)

--
End of file - 4289 bytes
Title: Re: plz help
Post by: Broni on October 25, 2008, 10:10:18 PM: See? It's different. Another sign of infection.

Start here: http://www.computerhope.com/forum/index.php/topic,46313.0.html
Start new topic here: http://www.computerhope.com/forum/index.php/board,7.0.html
Title: Re: plz help
Post by: kpac on October 26, 2008, 03:56:32 AM: How come there you have XP SP3 on the first log, and SP2 on the second log?
Title: Re: plz help
Post by: patio on October 26, 2008, 09:33:26 AM: Possibly because he's attempting fixes without letting us know what he's doing ? ?

hateing if you expect assistance we need to know everything...incomplete/modified logs will get you nowhere but in more trouble.
We are also a bit understaffed at the time and we don't have time to repeat instructions and/or advice so please understand and follow all instructions.

patio.
Title: Re: plz help
Post by: hateing on October 26, 2008, 04:18:58 PM: ok srry
Title: Re: plz help
Post by: patio on October 26, 2008, 09:39:58 PM: No Problem...
Carry on.
Title: Re: plz help
Post by: hateing on October 27, 2008, 11:31:51 AM: ok i turned off my computer because it was time for bed when i woke up and turned it on it won't start and it says,

couldn't open drive multi (0) disk (0) rdisk (0) partation (1)
ntldr: couldn't open drive multi (0) disk (0) rdisk (0) partation (1)

i did nothing but turn it off.
Title: Re: plz help
Post by: Broni on October 27, 2008, 06:10:26 PM: Did you play with BIOS lately?
Title: Re: plz help
Post by: hateing on October 28, 2008, 11:19:23 AM: nope all i did was shut it down and when i got and turned it on thats what it said
Title: Re: plz help
Post by: Broni on October 28, 2008, 05:46:02 PM: How far can you boot?
Did you try Safe Mode?
Title: Re: plz help
Post by: hateing on October 28, 2008, 08:44:41 PM: no i can't use safe mode and i don't even get to were it says windows xp.
Title: Re: plz help
Post by: Broni on October 28, 2008, 09:20:14 PM: I don't know, if this situation is connected to your computer infection, or not, but try Windows repair: http://www.michaelstevenstech.com/XPrepairinstall.htm
Title: Re: plz help
Post by: hateing on November 10, 2008, 11:54:44 AM: i cant even get in to windows would a new hard drive fix this problem?
Title: Re: plz help
Post by: patio on November 10, 2008, 12:48:38 PM: A new hard drive and a clean install of Windows will cure an awful lot of issues.... ::)
Title: Re: plz help
Post by: Broni on November 10, 2008, 06:32:52 PM: Quote
i cant even get in to windows
You're not listening.
Did you read info from my link? If you did, you'd know, that you don't have get to Windows to perform repair.
Title: Re: plz help
Post by: hateing on November 10, 2008, 09:03:22 PM: ok now i can get into windows i restored the bios to its normal default settings and now it works but i still have all the rest of the problems.
Title: Re: plz help
Post by: Broni on November 10, 2008, 09:27:37 PM: What exactly did you do?
Title: Re: plz help
Post by: hateing on November 10, 2008, 10:22:03 PM: i went to the bios when i could and clicked on restore to default settings.
Title: Re: plz help
Post by: Broni on November 10, 2008, 11:09:37 PM: Did you read my reply #19?
You need to run Windows repair.
Title: Re: plz help
Post by: hateing on November 12, 2008, 11:05:12 AM: ok i did that now it says
Stop:COOOO218 Unknown Hard Error
Unknown Hard Error.

on a blue screen
Title: Re: plz help
Post by: hateing on November 12, 2008, 11:13:45 PM: ok i reformated my hard drive a installed windows xp sp2 now when i try to get on the internet i have not network connections. whats wrong?