I appreciate your help. Thank you.
Type: Posts; User: bucksboy; Keyword(s):
I appreciate your help. Thank you.
Can't change the display. I can change it and it will go to the new selection during startup, but just before the icons appear the screen turns first blue and then white.
A right-click on desktop...
Here it is. Not much to it. I thouight it'd be longer.
smitRem © log file
version 2.8
by noahdfear
Microsoft Windows XP [Version 5.1.2600]
The current date is: Sun 12/18/2005
Sorry, but I don't understand exactly what you want me to do. Just run Smitrem and send you the log?
Are you sure we ran it in safemode last time?
Cannot change display at control panel. It clicks like it wants to change...but background stays white.
Right clicking on the desktop itself gives me no properties...only five of six title...
Lonny
Won't let me into properties. I used this string of commands:
control panel>display?desktop>customize desktop>web>
Also no 'security info' present
Removed spyware doctor and ewido. Fix-desktop did nothing. Have a screenshot of desktop, but don't know how to send...sorry. Can you please tell me?
Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Windows User Mode Driver Framework: C:\WINDOWS\system32\wdfmgr.exe (autostart)
Microcode Update Driver:...
Server: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Workstation: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
TCP/IP NetBIOS Helper: %SystemRoot%\system32\svchost.exe -k...
Enumerating Windows NT/2000/XP services
Microsoft ACPI Driver: system32\DRIVERS\ACPI.sys (system)
Microsoft Kernel Acoustic Echo Canceller: system32\drivers\aec.sys (manual start)
AFD:...
Verifying REGEDIT.EXE integrity:
- Regedit.exe found in C:\WINDOWS
- .reg open command is normal (regedit.exe %1)
- Company name OK: 'Microsoft Corporation'
- Original filename OK:...
Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*
--------------------------------------------------
Autorun...
Listing of startup folders:
Shell folders Startup:
[C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Startup]
SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
Shell...
I did make and merge the registry...received a successful message.
Here's startup list
StartupList report, 12/17/2005, 10:49:04 AM
StartupList version: 1.52.2
Started from : C:\Documents and...
Desktop not back to normal.
no exclamation marks
besktop background is white and unable to change it.
and it still whirs like a sewing maching when I start up.
no other obvious problems.
I'm not familiar. Maybe we should move on...but I'll try it if you think that's best.
Lonny
Log turned out to be very small
HKLM\SOFTWARE\WinHound.com\WinHound\WinHound\License* 12/10/2005 8:24 PM 0 bytes Key name contains embedded nulls (*)
D: 0 bytes Error mounting volume
...
Lonny,
I've run backlite. It shows nothing hidden...and I know you must find this frustrating, but I can't get the process log to copy and paste.
I believe the commands you gave me were...
Can't figure out how to add two missing files with Hijackthis. Am wondering if some of the programs I've installed to get rid of winhound are running in the background and causing the 6 min. startup...
Lonny,
Panda turned up nothing...but still taking forever to boot up. Have not yet fixed the files throgh Hikackthis.
Thanks.
Lonny
Here are the two kaspersky files. Have the Panda to go...but thought would go ahead and send these. Thanks!
KASPERSKY ON-LINE SCANNER REPORT
Thursday, December 15, 2005 21:24:53
...
Hey, Lonnie
Winhound appears to be gone...but I time it this AM and it took over five minutes to boot up and sign on to IE (cable modem). It's never taken this long before... What's up?
Thanks
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 10:31:03 PM, 12/14/2005
+ Report-Checksum: 3F98F605
+ Scan result:
...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q404&bd=presario&pf=desktop
R1 -...
Logfile of HijackThis v1.99.1
Scan saved at 11:02:26 PM, on 12/14/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:...
Believe the hijacked destop is fixed. Thanks! However...when I start up, I bet it took three minutes for the destop to load. The wheels just kept spinning. Any reason for this?
New logs to...
sorry to be so dumb...but can't seem to create a shortcut for eTrust AV Web Scanner
My desktop is hijacked...and things sure are moving slower than usual. Neither Spybot nor Ad-aware nor Spywareguard show it. It doesn't show on Norton, either...except in the threat log. When I...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q404&bd=presario&pf=desktop
R1 -...
Thanks. Here's first part
Logfile of HijackThis v1.99.1
Scan saved at 12:01:15 PM, on 12/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
...
Thanks for reply. I can't get the log to post here...says too many characters. I've got the log ready to go...and have run all the preliminaries...bit Defender and Spybot. Please tell me what to...
Got Winhound. Can you help?
Think I've done all the prelims...but can't figure out how to send logfile.