PDA

View Full Version : I'm having issues.



SpdFrk97
2007-07-17, 00:20
I seem to be having troubles. IE doesn't allow me to use links, especially those on AV software sites. It will not allow me to use online AV scans, and I just get errors when I try to install some programs like ad-aware. Spybot S&D, as well as numerous other programs, doesn't seem to detect anything. Hmmm..... the only place I know to go from here is straight to the experts, so here I am. :D:

pskelley
2007-07-17, 14:46
Welcome to Safer Networking, I wish to be sure you have viewed and understand this information. "BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read and followed these instructions so we are on the same page. If you can't run a online scan, run your own resident antivirus scan and post what it finds along with the HJT log.

It looks like Shaba just cleaned your computer a short while ago so you should know you need to post more information than you have. From this limited information there is no way I can say if I can help or not. Have you discussed these issues with your Internet Service Provider to make sure they are not causing the problems?

Thanks

SpdFrk97
2007-07-17, 17:27
Hi Yes, Shaba has helped me clean my computer recently. Unfortunately my computer started having issues again. It has me stumped for the most part so I turned to you guys again. Sorry, seeing as I have done this before, you are right I should have posted a HiJack This Log and an Online Virus Scan Log. My apologies. :oops:

SpdFrk97
2007-07-17, 17:29
Here is a fresh HiJack This Log:

Logfile of HijackThis v1.99.1
Scan saved at 9:28:09 AM, on 7/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IOGEAR\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\TrojanHunter 4.7\THGuard.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\IOGEAR\Bluetooth Software\BTTray.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\My Documents\eDonkey2000 Downloads\hijackthis\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.7\THGuard.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\IOGEAR\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://ca.com/us/securityadvisor/virusinfo/webscan.cab
O18 - Protocol: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AdobeActiveFileMonitor4.0 - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program Files\IOGEAR\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MDM - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVSvc - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

pskelley
2007-07-17, 18:40
Thanks for the HJT log and the feedback. The log provides no information, be prepared that this may be software or even hardware related and not malware. Let's look at what you posted and see what tools we have onboard we can use first. You said this:

I just get errors when I try to install some programs
We need the error messages exactly as Windows gives them to you, word for word. This is Windows telling you what the problem is, so post any and all error messages. You can get a jump on things by searching Google with the error messages on your end, that is what I do first.

IE doesn't allow me to use linksWhat do you mean by that? You appear to have Spybot S&D installed?

I see these programs onboard, do you own these programs:
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\TrojanHunter 4.7\THGuard.exe

I will post some information about things to try for Internet Explorer, but I want you to start by using the tools you have onboard. Update each program before you use it, then run Spy Sweeper and Trojan Hunter. Post the results of those scans.

Spybot S&D, make sure the program is updated and you are fully immunized. Then follow the instruction in the Before You Post information to run Spybot S&D and let me know about anything it finds that you cannot remove.

http://www.microsoft.com/windows/IE/community/columns/IEtopten.mspx

Post those error messages, the results of the scans, any information I requested and any comment you think will help.

Thanks

SpdFrk97
2007-07-17, 20:42
Thanks. Just on a quick note, when I hover over the links in IE it displays Javascript:void(0) and when I try to click the link, nothing happens. This happens on numerous webpages, it seems to be most noticiable on AV or Anti-Spyware sites. I also experience slow startups and shutdowns. For sometime, It would not let me start up in safe mode unless my modem was connected. If it was disconnected it would just automatically reboot every time I tried to startup in safe mode. I ran a few av scans and found a trojan. I removed it and the safe mode startup problem went away, but still the IE and other program issues remain.

pskelley
2007-07-17, 20:53
Have look at this information:

http://www.google.com/search?hl=en&q=javascript%3Avoid%280%29+&btnG=Google+Search

Have you checked to see if Java is running on the computer?

http://www.google.com/search?hl=en&q=startup+and+shutdown+troubleshooting&btnG=Google+Search

You might want to look at this information also:
http://www.castlecops.com/postitle175256-0-0-.html
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html
http://www.microsoft.com/atwork/getstarted/speed.mspx?wt_svl=20292a&mg_id=20292b

As a last thought, you may want to run a free diagnostic here:
http://www.pcpitstop.com/
Help with results: http://pcpitstop.invisionzone.com/index.php?showforum=6
Tutorial: http://www.pcpitstop.com/techexpress/howto1.asp

just to see if they pick up anything. Stick with the free tool and if you post a link to the test results, I may spot something.

Thanks

tashi
2007-07-26, 00:22
Due to lack of feedback this topic has been archived. :alien:

If you need it re-opened please send me a private message (pm) and provide a link to the thread. Applies only to the original poster, anyone else with similar problems please start a new topic.