Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Computer Doctor Needed!!  (Read 27459 times)

0 Members and 1 Guest are viewing this topic.

Katman_09

    Topic Starter


    Beginner

    Computer Doctor Needed!!
    « on: July 30, 2008, 11:15:18 AM »
    Hello,

    I've currently developed a problem with my computer and need a lot of assistance. 

    The other day, my computer started running slow.  All of a sudden i received a blue screen which i then wrote down the code and rebooted.  When it came back up, my Norton was not in my start up area nor did it work.  I then used my spybot which also didn't work and received a "not a valid WIN32 application".  Since i sensed a problem, i wanted to back up my files onto my external drive which hasn't been used for about 4 weeks.  My problem next was i was unable to view my local settings/application data folders.  However, if i typed in %TEMP% in the address bar, i was directed to the Temp folder and could see the path but couldn't go back to my local settings. 
    So, i decided to go into Safe Mode.  As i did this, i received the blue screen again and rebooted.  My operating system boots up but can't go into safe mode.  I ran a diagnostics test on my hard drive and everything passed. 
    I proceeded to d/l Defender and PC Doctor which i was able to but unable to execute the files. 
    I have since found a way to get to my local settings folder but i had to go into my email and go through the export option.  When i did this, i was able to see my local settings folder and application folder but i was only able to click and copy the files one at a time as i was only in that option to move my email files to a back up. 
    My other problem with email is i am unable to email myself from work to home.  If i send something home, it comes back to me as undeliverable and that i don't exist.  However, if i have someone else do it, they are able to.  Not sure if it's kicking it back since it's recognizing my name or what.  In addition to all this, my IE is running slow. 
    Can anyone please help me or direct me in the right direction? 

    Thank you.

    evilfantasy

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Calm like a bomb
    • Thanked: 493
    • Experience: Experienced
    • OS: Windows 11
    Re: Computer Doctor Needed!!
    « Reply #1 on: July 30, 2008, 01:58:50 PM »
    Download Deckard's Association File Tool (DAFT) and save it to your desktop.
    • Rename daft.exe to daft.com and double click on it to run.
    • Read the disclaimer and click OK.
    • Click on the Scan button.
    • If it finds faulty file associations, they will appear in red beside a checkbox. If this occurs, just place a checkmark (tick) in the boxes in question.
    • Click the Fix button.
    .

    Then run the scans found here and post the logs when complete.

    Katman_09

      Topic Starter


      Beginner

      Re: Computer Doctor Needed!!
      « Reply #2 on: July 31, 2008, 06:45:52 AM »
      Ok, i followed all of the steps but wasn't successful in all of them.  I have attached all the logs though. 

      Regarding the Anitspyware download, once i d/l, scanned and removed everything, i rebooted but couldn't boot to my operating system.  I had all the options from safe mode, to windows settings, etc...  I tried window settings a few times, then safe mode but it kept taking me back to the black screen.  I was forced to select return to last original settings in order to get it to reboot to my operating system. 

      As for Hijackthis, i was able to download it but it wouldn't let me rename. 

      On a bright note, my browser is working much quicker and so far my e-mail hasn't been returned that i sent to myself from work.

      Any more advice? 

      [recovering disk space -- attachment deleted by admin]

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 493
      • Experience: Experienced
      • OS: Windows 11
      Re: Computer Doctor Needed!!
      « Reply #3 on: July 31, 2008, 11:49:00 AM »
      I still need the log from HijackThis even if you couldn't rename it.

      Katman_09

        Topic Starter


        Beginner

        Re: Computer Doctor Needed!!
        « Reply #4 on: July 31, 2008, 12:25:35 PM »
        When i installed Hijackthis, it wouldn't open nor run so i was unable to get a log.

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11
        Re: Computer Doctor Needed!!
        « Reply #5 on: July 31, 2008, 12:36:44 PM »
        Download Deckard's System Scanner (DSS) from here or here to your Desktop.
        Note: You must be logged onto an account with administrator privileges.
        Vista users Right click DSS and Run as Administrator.

        • Close all applications and windows.
        • Double-click on dss.exe to run it, and follow the prompts.
        •   When the scan is complete, two text files will open
          • main.txt <- this one will be maximized
          • extra.txt <- this one will be minimized
          •   Add the contents of main.txt in your post.
          •   Also add extra.txt to your post.
          • The text from these files may exceed the maximum post length for this forum, and may need to be sent over 2 or more posts. Please ensure all text is posted.
          [/COLOR]
          What DSS will do:
          • Create a new System Restore point in Windows XP and Vista.
          • Clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
          • Check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

          Katman_09

            Topic Starter


            Beginner

            Re: Computer Doctor Needed!!
            « Reply #6 on: July 31, 2008, 07:59:43 PM »
            Ok, i did as instructed and nothing popped up.  The only thing i saw was "backing up registry hives" and after that nothing.  I waited a couple hours just in case but still nothing.

            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 493
            • Experience: Experienced
            • OS: Windows 11
            Re: Computer Doctor Needed!!
            « Reply #7 on: July 31, 2008, 08:56:03 PM »
            Run this online scan. Requires Internet Explorer

            Use the ESET Nod32 Online Scanner

            1. Check the box next to YES, I accept the Terms of Use.
            2. Click Start
            3. When asked, allow the activex control to install
            4. Click Start
            5. Make sure that the option Remove found threats and the option Scan unwanted applications is check marked.
            6. Click Scan
            7. Wait for the scan to finish
            8. Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
            9. Add the C:\Program Files\EsetOnlineScanner\log.txt log into your next reply

            Katman_09

              Topic Starter


              Beginner

              Re: Computer Doctor Needed!!
              « Reply #8 on: July 31, 2008, 09:03:03 PM »
              Ok, i tried the steps again and was able to get some things removed.  I was then able to run the dss.exe file and Hijackthis.  Attached are my logs.  Should i still complete your last posting?

              [recovering disk space -- attachment deleted by admin]

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 493
              • Experience: Experienced
              • OS: Windows 11
              Re: Computer Doctor Needed!!
              « Reply #9 on: July 31, 2008, 09:47:54 PM »
              Not yet. let me look through the DSS logs first.

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 493
              • Experience: Experienced
              • OS: Windows 11
              Re: Computer Doctor Needed!!
              « Reply #10 on: July 31, 2008, 10:05:26 PM »
                Go to Add or Remove Programs and uninstall

                • ErrorClean v4.1
                • Viewpoint Media Player
                .
                ----------

                Your SafeBoot Key is corrupted and needs to be repaired.

                Download & run this tool
              SafeBootKeyRepair-CF

              It will only take a short moment for it to finish running.
              A log will be produced at C:\SafeBoot_Repair.txt. Please post that in your next reply.

              ----------

              Download OTMoveIt2 by OldTimer
              • Save it to your desktop.
              Note: If you are running on Vista, right-click on OTMoveIt2.exe and choose Run As Administrator.

              • Double-click OTMoveIt2.exe to run it.
              • Copy the lines in the codebox below.
              [/list]
              Code: [Select]
              [kill explorer]
              C:\Documents and Settings\Frank\Application Data\m\flec006.exe
              EmptyTemp
              [start explorer]
              • Return to OTMoveIt2, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste
              • Click the red Moveit! button.
              • Copy everything in the Results window (under the green bar) and paste it in your next reply.
              • Close OTMoveIt2
              .
              ----------

              Please post the OTMoveIt2 log in the next reply.

              See if you can get HjackThis to run and post a log from it if so.

              Katman_09

                Topic Starter


                Beginner

                Re: Computer Doctor Needed!!
                « Reply #11 on: July 31, 2008, 10:58:24 PM »
                Ok, ihere we go :)   I didn't get the extra file from Hijackthis, just the main one.  Before i rebooted, though, i could see all of my folders (local settings, application data) but now i can't. 

                [recovering disk space -- attachment deleted by admin]

                evilfantasy

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Calm like a bomb
                • Thanked: 493
                • Experience: Experienced
                • OS: Windows 11
                Re: Computer Doctor Needed!!
                « Reply #12 on: July 31, 2008, 11:01:41 PM »
                Can you get this HijackThis to run now? TrendMicro HijackThis.exe

                Katman_09

                  Topic Starter


                  Beginner

                  Re: Computer Doctor Needed!!
                  « Reply #13 on: August 01, 2008, 05:13:36 AM »
                  Yep, here's the log.

                  [recovering disk space -- attachment deleted by admin]

                  evilfantasy

                  • Malware Removal Specialist
                  • Moderator


                  • Genius
                  • Calm like a bomb
                  • Thanked: 493
                  • Experience: Experienced
                  • OS: Windows 11
                  Re: Computer Doctor Needed!!
                  « Reply #14 on: August 01, 2008, 02:09:58 PM »
                  Open HijackThis and select Do a system scan only.

                  Place a check mark next to the following entries: (if there)

                  O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
                  O2 - BHO: (no name) - {A7FB032D-C184-4C17-88F4-B0AA7D9581B6} - C:\WINDOWS\system32\mp43dnod.dll (file missing)
                  O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
                  O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - C:\Program Files\SmartShopper\Bin\2.0.24\SmrtShpr.dll (file missing)
                  O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - C:\Program Files\SmartShopper\Bin\2.0.24\SmrtShpr.dll (file missing)


                  Important: Close all windows except for HijackThis and then click Fix checked.

                  Exit HijackThis and run CCleaner.

                  ----------

                  Download the Norton Removal Tool (SymNRT) to your Desktop.

                  Once downloaded please close ALL open browsers, also save any work because this may require a restart.

                  • Go to your desktop and double click on the removal tool and then click Setup.
                  • Once open Click Next
                  • Accept the license agreement and click Next
                  • Type in the letters/numbers that you see into the text box then click Next.
                  • Then click Next and the tool will start running.
                  • Once finished restart the PC and run the tool again to ensure everything has been removed.
                  .
                  ----------

                  Download Combofix by sUBs from one of the below links.Important! Combofix.exe MUST be saved to and ran from the Desktop.
                  • Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting Combofix.
                  • Important! Temporarily disable your antivirus, and any antispyware real time protection before performing a scan.
                  • Click this link to see a list of security programs that should be disabled and how to disable them.
                  • Double click combofix.exe & follow the prompts.
                  • Choose Yes to accept the Disclaimers.
                  Combofix should never take more that 20 minutes including the reboot if malware is detected.

                  If it does, open Task Manager then the Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
                  • When finished, it will produce a log for you.
                  • Post that log in your next reply.
                  Warning: Do not mouseclick Combofix's window while it is running. That may cause it to stall
                  • If Combofix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your computer.
                  If needed, see this Combofix tutorial with screenshots that will detail more thoroughly the downloading and running of Combofix and installing the Recover Console.

                  Remember to re-enable your antivirus and antispyware protection.

                  ----------

                  Please post the Combofix log in the next reply.