Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Strange Behavior  (Read 31147 times)

0 Members and 1 Guest are viewing this topic.

Fed

  • Moderator


  • Sage
  • Thanked: 35
    • Experience: Experienced
    • OS: Windows XP
    Re: Strange Behavior
    « Reply #45 on: May 30, 2005, 09:41:21 PM »
    Go to
    Start>Settings>Control Panel>AdminTools>Services
    and compare your startup services with
    http://www.codecavalier.com/blackviper/WinXP/servicecfg.htm
    This is a cached copy of BlackViper's default list along with recommendations but just stick to the XP defaults given.
    You will need to scroll down to get to the list and if possible print it out for ease of comparison.

    Look for disabled things that should set to Automatic or Manual.
    « Last Edit: May 30, 2005, 09:54:26 PM by Fed »

    Sapphire

    • Guest
    Re: Strange Behavior
    « Reply #46 on: May 30, 2005, 10:16:52 PM »
    I compared to black viper, and everything matched.

    Fed

    • Moderator


    • Sage
    • Thanked: 35
      • Experience: Experienced
      • OS: Windows XP
      Re: Strange Behavior
      « Reply #47 on: May 30, 2005, 10:26:42 PM »
      Make a new directory (folder) called c:\aaa then download this file http://www.comcen.com.au/~fed/regedit.exe
      and place it in the c:\aaa directory.
      Then Dclick it & see what happens.
      You will have to trust me that it's not a virus.
      After you have tried it, delete the directory so my regedit.exe cannot possibly get mixed with yours.

      A leap of faith is needed here. :D

      Sapphire

      • Guest
      Re: Strange Behavior
      « Reply #48 on: May 30, 2005, 10:52:01 PM »
      I tried it, nothing happened, so I deleted the directory.

      dl65

      • R.I.P.


      • Prodigy

        Thanked: 18
        Re: Strange Behavior
        « Reply #49 on: May 30, 2005, 11:10:09 PM »
        Sapphire......  Ok , I see a few things which should be fixed ......So ....the first thing to do is close up anything thats open ......
        Now open hijack this ......

        Click on scan system and save log file ...

        Click on the config button .....when the config window opens ....in the 4 URL boxes Type ........
        http://www.msn.com    .... ( you can change these later if you wish ).

        Click the back button in hijackthis ( lower right corner )

        Now mark for removal the following :

        R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.begin2search.com/sidesearch.html

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://scottstapp.com/

        N3 - Netscape 7: user_pref("browser.startup.homepage", "scottstapp.com"); (C:\Documents and Settings\user\Application Data\Mozilla\Profiles\default\b18nhr40.slt\prefs.js)

        N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5 CSBWeb_01.src"); (C:\Documents and Settings\user\Application Data\Mozilla\Profiles\default\b18nhr40.slt\prefs.js)

        O2 - BHO: (no name) - SOFTWARE - (no file)

        O2 - BHO: (no name) - {41601034-0A76-34BC-12E0-AD2A13FF3339} - C:\WINDOWS\Bsxuthmp.dll (file missing)

        O3 - Toolbar: Search - {9CD7F666-9462-3EC2-341B-C0708821D4A4} - C:\WINDOWS\Bsxuthmp.dll (file missing)

        O4 - HKCU\..\Run: [Ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe

        O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

        O9 - Extra button: (no name) - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing)

        Ok .......Now click on fix marked .....
        Then reboot into safe mode and run your Panda Antivirus .......   when finished .....reboot back into normal and see how things are ....( check to see if you can get into the control panel .

        Then I would go to M/S update page ........
        http://v5.windowsupdate.microsoft.com/v5consumer/default.aspx?ln=en-us   .......   click on the express scan and then select whichever updates are listed as priority.... and make sure you get SP2 .......unless you have some reason that you dont want it ......... It provides good additional security protection as well as a firewall which you can turn on or off as you see fit .

        Let us know

        dl65  ::)

        If you don't know the answer, it isn't a dumb question.

        dl65

        • R.I.P.


        • Prodigy

          Thanked: 18
          Re: Strange Behavior
          « Reply #50 on: May 30, 2005, 11:20:31 PM »
          Sapphire..... Almost forgot .......regedit file ....in C\Windows       143kb

          dl65  ::)
          If you don't know the answer, it isn't a dumb question.

          Sapphire

          • Guest
          Re: Strange Behavior
          « Reply #51 on: May 31, 2005, 12:10:05 AM »
          I did everything you told me to do, and everything is still the same.




          dl65

          • R.I.P.


          • Prodigy

            Thanked: 18
            Re: Strange Behavior
            « Reply #52 on: May 31, 2005, 12:14:28 AM »
            were you able to get the win updates ?

            dl65  ::)
            If you don't know the answer, it isn't a dumb question.

            dl65

            • R.I.P.


            • Prodigy

              Thanked: 18
              Re: Strange Behavior
              « Reply #53 on: May 31, 2005, 12:15:43 AM »
              Did anything show up when you ran your anti virus ?


              dl65  ::)
              If you don't know the answer, it isn't a dumb question.

              Sapphire

              • Guest
              Re: Strange Behavior
              « Reply #54 on: May 31, 2005, 12:21:55 AM »
              Yep, I got the updates. Nothing came up on the virus scan.

              dl65

              • R.I.P.


              • Prodigy

                Thanked: 18
                Re: Strange Behavior
                « Reply #55 on: May 31, 2005, 12:26:56 AM »
                Have you been able to get into the registry ......?
                Start/run .....  type in regedit  

                Do you have any sort of registry cleaner ?

                dl65  ::)  
                If you don't know the answer, it isn't a dumb question.

                Sapphire

                • Guest
                Re: Strange Behavior
                « Reply #56 on: May 31, 2005, 12:33:54 AM »
                If I go Start/Run/Command, when the window opens, I type
                cd\windows, enter
                regedit, enter

                the registry opens that way


                No, I don't have any kind of registry cleaner.

                dl65

                • R.I.P.


                • Prodigy

                  Thanked: 18
                  Re: Strange Behavior
                  « Reply #57 on: May 31, 2005, 12:55:29 AM »
                  ok ...you can get to the registry .

                  Can you get into the add/remove programs in the control panel ..?

                  I'll get you a link to a registry cleaner ........ it will take me a few mniutes .

                  dl65  ::)
                  If you don't know the answer, it isn't a dumb question.

                  dl65

                  • R.I.P.


                  • Prodigy

                    Thanked: 18
                    Re: Strange Behavior
                    « Reply #58 on: May 31, 2005, 01:05:13 AM »
                    Here's a link to a good one .......

                    I sent the link to you and registration info to you via instant message .


                    dl65 ::)



                    « Last Edit: May 31, 2005, 01:11:33 AM by dl65 »
                    If you don't know the answer, it isn't a dumb question.

                    Fed

                    • Moderator


                    • Sage
                    • Thanked: 35
                      • Experience: Experienced
                      • OS: Windows XP
                      Re: Strange Behavior
                      « Reply #59 on: May 31, 2005, 01:25:17 AM »
                      Quote
                      Yes, I have Admin. rights, and am still operating as the Admin. account.


                      How do you know this?