Computer Hope

Software => Computer viruses and spyware => Topic started by: vicki on March 18, 2008, 06:01:28 PM

Title: do I have a virus ...or worse?
Post by: vicki on March 18, 2008, 06:01:28 PM

What brought me here is a problem reinstalling my adobe CS1 - I had problems with acrobat and had to uninstall the entire suite.  I was unable to reinstall...it got just so far and then just 'hung'.  I spoke the the Dell cust. svc person who insisted I had to reinstall windows (which is a last resort).  I thought I may have an intruder on my computer so I followed all the directions or what to do BEFORE I post my question...all the downloads, scans and logs.  I am currenly running windows xp professional on a dell laptop.  I am posting my logs and hope someone can HELP ME!!

[recovering space - attachment deleted by admin]

Title: Re: do I have a virus ...or worse?
Post by: evilfantasy on March 18, 2008, 06:32:46 PM

Open Hijackthis and select Do a system scan only.

Place a check mark next to the following entries: (if there)

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)
O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)
O3 - Toolbar: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - (no file)

Important: Close all windows except for Hijackthis and then click Fix checked.

Exit Hijackthis.

I don't see anything malicious, have you tried to do any repairs to windows?

Here are a few methods to try.

Do you have an XP CD?

If so, place it in your CD ROM drive and follow the instructions below:

• Click on Start > Run and type sfc /scannow then press Enter (note the space between scf and /scannow)
  • Let this run undisturbed until the window with the blue  progress bar goes away

SFC - Which stands for System File Checker, retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file.

If you want to see what was replaced, right-click My Computer and click on Manage.
In the new window that appears, expand the Event Viewer (by clicking on the + symbol next to it) and then click on System.

----------

1. Download IEFix.zip (http://windowsxp.mvps.org/utils/IEFix.zip) and run it.
2. Click the Apply button.
3. You'll be prompted for the Operating System CD or the Service Pack Files location.
4. Once finished Restart Windows.
 
If you're using Windows XP, insert the Operating System CD. For OEM systems, point to the Operating System source path when prompted. If you've applied a Service Pack separately, you need to insert the Slipstreamed Operating System CD (if you have one) or point the installer to the ServicePack source path when prompted (see example below). Mention the path as "C:\Windows\ServicePackFiles\i386" or "C:\Windows\ServicePackFiles"
 
If you don't have the Windows installation CD, and if the installation source files are not present in the hard disk, you may click Cancel when you see a dialog similar to the example below. IEFix will continue with DLL registration part.

(http://i154.photobucket.com/albums/s258/evilfantasy69/Tutorials/iefix.png)




 Also, do these have anything to do with yoyur ISP?

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = landfnet.longandfoster.com
O17 - HKLM\Software\..\Telephony: DomainName = landfnet.longandfoster.com

If not then you can fix the entries with Hijackthis also.