Author Topic: plz help (Read 14099 times)

hateing · « **on:** October 25, 2008, 09:03:58 AM »

hi i have a problem i try to goto the microsoft update page but it won't let me the page that comes up says that internet explorer can't display this page. this is my hijackthis report.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:57:59 AM, on 10/25/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\brastk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\GetModule\GetModule24.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.CPL,CMICtrlWnd
O4 - HKLM\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe
O4 - HKLM\..\Run: [AntiSpywareXP 2009] "C:\Program Files\AntiSpywareXP2009\AntiSpywareXP2009.exe" /hide
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [GetModule24] C:\Program Files\GetModule\GetModule24.exe
O4 - HKCU\..\Run: [GetPack23] "C:\Program Files\GetPack\GetPack23.exe"
O4 - HKCU\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB

patio · « **Reply #1 on:** October 25, 2008, 11:30:05 AM »

Looks like an incomplete log to me...try again.

hateing · « **Reply #2 on:** October 25, 2008, 01:21:15 PM »

nope it gave me the same thing.

kpac · « **Reply #3 on:** October 25, 2008, 01:23:43 PM »

Usually it says "-- End of file --" at the end of file.

Broni · « **Reply #4 on:** October 25, 2008, 01:25:43 PM »

Your computer IS infected, but to see better what's going on, rename hijackthis.exe to computerhope.exe, and run the scan again.

kpac · « **Reply #5 on:** October 25, 2008, 01:27:12 PM »

You might also want to read this: http://www.computerhope.com/forum/index.php/topic,46313.0.html

hateing · « **Reply #6 on:** October 25, 2008, 02:26:44 PM »

ok i tried everything and i can't update any thing i can't install spy bot because it says it can't connect with the server. same with everything else.

Broni · « **Reply #7 on:** October 25, 2008, 05:34:41 PM »

Did you read my reply #4?

hateing · « **Reply #8 on:** October 25, 2008, 09:33:35 PM »

it gave me this log now.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:32:39 PM, on 10/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\brastk.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\GetModule\GetModule24.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.CPL,CMICtrlWnd
O4 - HKLM\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [GetModule24] C:\Program Files\GetModule\GetModule24.exe
O4 - HKCU\..\Run: [GetPack23] "C:\Program Files\GetPack\GetPack23.exe"
O4 - HKCU\..\Run: [brastk] C:\WINDOWS\system32\brastk.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/betapit/PCPitStop.CAB
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {5852F5ED-8BF4-11D4-A245-0080C6F74284} - http://cache2.vuze.com/files/Azureus_Java_Installer.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe (file missing)

--
End of file - 4289 bytes

Broni · « **Reply #9 on:** October 25, 2008, 10:10:18 PM »

See? It's different. Another sign of infection.

Start here: http://www.computerhope.com/forum/index.php/topic,46313.0.html
Start new topic here: http://www.computerhope.com/forum/index.php/board,7.0.html

kpac · « **Reply #10 on:** October 26, 2008, 03:56:32 AM »

How come there you have XP SP3 on the first log, and SP2 on the second log?

patio · « **Reply #11 on:** October 26, 2008, 09:33:26 AM »

Possibly because he's attempting fixes without letting us know what he's doing ? ?

hateing if you expect assistance we need to know everything...incomplete/modified logs will get you nowhere but in more trouble.
We are also a bit understaffed at the time and we don't have time to repeat instructions and/or advice so please understand and follow all instructions.

patio.

hateing · « **Reply #12 on:** October 26, 2008, 04:18:58 PM »

ok srry

patio · « **Reply #13 on:** October 26, 2008, 09:39:58 PM »

No Problem...
Carry on.

hateing · « **Reply #14 on:** October 27, 2008, 11:31:51 AM »

ok i turned off my computer because it was time for bed when i woke up and turned it on it won't start and it says,

couldn't open drive multi (0) disk (0) rdisk (0) partation (1)
ntldr: couldn't open drive multi (0) disk (0) rdisk (0) partation (1)

i did nothing but turn it off.

Broni · « **Reply #15 on:** October 27, 2008, 06:10:26 PM »

Did you play with BIOS lately?

hateing · « **Reply #16 on:** October 28, 2008, 11:19:23 AM »

nope all i did was shut it down and when i got and turned it on thats what it said

Broni · « **Reply #17 on:** October 28, 2008, 05:46:02 PM »

How far can you boot?
Did you try Safe Mode?

hateing · « **Reply #18 on:** October 28, 2008, 08:44:41 PM »

no i can't use safe mode and i don't even get to were it says windows xp.

Broni · « **Reply #19 on:** October 28, 2008, 09:20:14 PM »

I don't know, if this situation is connected to your computer infection, or not, but try Windows repair: http://www.michaelstevenstech.com/XPrepairinstall.htm

hateing · « **Reply #20 on:** November 10, 2008, 11:54:44 AM »

i cant even get in to windows would a new hard drive fix this problem?

patio · « **Reply #21 on:** November 10, 2008, 12:48:38 PM »

A new hard drive and a clean install of Windows will cure an awful lot of issues....

Broni · « **Reply #22 on:** November 10, 2008, 06:32:52 PM »

Quote

i cant even get in to windows

You're not listening.
Did you read info from my link? If you did, you'd know, that you don't have get to Windows to perform repair.

hateing · « **Reply #23 on:** November 10, 2008, 09:03:22 PM »

ok now i can get into windows i restored the bios to its normal default settings and now it works but i still have all the rest of the problems.

Broni · « **Reply #24 on:** November 10, 2008, 09:27:37 PM »

What exactly did you do?

hateing · « **Reply #25 on:** November 10, 2008, 10:22:03 PM »

i went to the bios when i could and clicked on restore to default settings.

Broni · « **Reply #26 on:** November 10, 2008, 11:09:37 PM »

Did you read my reply #19?
You need to run Windows repair.

hateing · « **Reply #27 on:** November 12, 2008, 11:05:12 AM »

ok i did that now it says
Stop:COOOO218 Unknown Hard Error
Unknown Hard Error.

on a blue screen

hateing · « **Reply #28 on:** November 12, 2008, 11:13:45 PM »

ok i reformated my hard drive a installed windows xp sp2 now when i try to get on the internet i have not network connections. whats wrong?

Computer Hope Forum

News:

Author Topic: plz help (Read 14099 times)

hateing

patio

hateing

kpac

Broni

kpac

hateing

Broni

hateing

Broni

kpac

patio

hateing

patio

hateing

Broni

hateing

Broni

hateing

Broni

hateing

patio

Broni

hateing

Broni

hateing

Broni

hateing

hateing