Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93101 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

Hijackthis Log, Please have a look, thanks


  • This topic is locked This topic is locked
28 replies to this topic

#16 topsam

topsam

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 29 May 2006 - 04:19 AM

:) Hello Mr. Charlie, good to see you again. OK, i am pretty sure i was able to remove wild tangent. Those links were very helpful. I also ran Hoster to restore MS Hosts. With repairing IE it looks like i still have a major bug somewhere. When i try to type in any comand at start-run- then the black run window appears only a splitsecond and disapears again. I tried it with several working comands, and had the same result. So this solution mentioned here didnt work : From the Start menu, select Run. In the Open field, type sfc /scannow (Note: There is a space between sfc and /scannow) Select the OK button. Follow the prompts throughout the System File Checker process. Reboot the computer when System File Checker completes. No check, no prompts no nothing, just the window appearing a second with no files working and then poof. This one here didnt work either: From the Start menu, select Search, select All Files and Folders. Select More Advanced Options and place a checkmark beside Search Hidden Files and Folders option. Ensure that Search System Folders and Search Subfolders are also checked. In the All or Part of the File Name box, type ie.inf In the Look In drop-down menu, select C: or the letter of the hard drive that contains the Windows folder. Click the Search button. In the search results pane, find the ie.inf file located in Windows\Inf folder. Right click the ie.inf file and click Install on the context menu. Reboot the computer when the file copy process is complete. I got this far as beeing asked for the windows xp cd, which i put in and selected the right drive. Then the copying process just froze on me. Tried several times, same thing. :huh: Pretty tough eh? At this moment, i run another system scan with ewido, lets see if it finds something. Thanks again Mr. Charlie Sam

    Advertisements

Register to Remove


#17 topsam

topsam

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 29 May 2006 - 05:24 AM

EDIT: OK, i went to the prompt with start-programs-(extras is the english name after i belive) and gave in the comand scf /scannnow, but i am not sure if it scanned at all, well, the same line came again that is there at the begining when u open it, and i have no scann results. I did also an sfc /revert and i emptied the cache, now ewido is almost done, and i can restart it and try again with the second IE fix solution. Will post how i done. END EDIT

#18 topsam

topsam

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 29 May 2006 - 06:04 AM

Ok now, i got the msn explorer. Since i didnt use it for years, i kinda forgot how it looks like. They merged with hotmail right? (log in window pops up and the logo is with a butterfly?) If there still is a as always also a only IE, then i still dont have it yet. Anyway, I have a hotmail account, and when i try to start it and it asks me to log in, it always tells me that its unable and that they dont find and internet connection. Wich is bullocks, since i am connected. I also get the same error when trying to connect with a file sharing program. Impossible to make it run. I wonder if i have a 'port' issue. The ewido scann found nuffin. Till later, Sam :wavey: btw. this time with the second solution, the install window from the xp cd came up. there was also a IE to pick, but it was 0 bites! so i took the browser below, i think it was msn explorer. gosh...

Edited by topsam, 29 May 2006 - 06:05 AM.


#19 MrCharlie

MrCharlie

    SuperMember

  • Malware Team
  • 2,949 posts

Posted 29 May 2006 - 09:24 AM

Ok now, i got the msn explorer. Since i didnt use it for years, i kinda forgot how it looks like.
They merged with hotmail right? (log in window pops up and the logo is with a butterfly?)
If there still is a as always also a only IE, then i still dont have it yet.


There's a way to reinstall IE but no guarantees, if you want to try it, let me know.

I would use FireFox A more secure browser! Easy to make the change!
FireFox Tutorial

MrC


#20 MrCharlie

MrCharlie

    SuperMember

  • Malware Team
  • 2,949 posts

Posted 29 May 2006 - 10:21 AM

Question - do you have a good restore point? another option. MrC

#21 topsam

topsam

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 29 May 2006 - 10:53 AM

Well, i think my restore point wont get much better than the one i have now. And i dont have one that goes back as far as when i still had IE. You know, i already use firefox, and Opera. I dont care for the IE as a browser, and i know its not the safest anyway. But for windows security updates it says many if not all the times that i need the I Explorer to download any windows security updates and service packs. And for those i actually wanted the IE. Do you know any other way of getting windows security updates without IE? And to my question on the file-share programs connection problems, how do i check that i have the right ports open and still am not to open for attacks? I tried it with closing ALL of my firewalls and it still didnt work. cheers mate Sam

#22 topsam

topsam

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 29 May 2006 - 11:07 AM

"Setup could not verify the integrity of the files needed for installation. Make sure the Cryptographic service is running on this computer. " This is the error message i receive after clicking on download IE 7 beta on the microsoft page. I had a successful "Genuine Check" b4 that. I also just seen that when i go to start-programs-windows update, and i click it, i get that freaking casino del rio setup window again. So, its still here, and its where ever i try to update an windows update.

Edited by topsam, 29 May 2006 - 11:17 AM.


#23 MrCharlie

MrCharlie

    SuperMember

  • Malware Team
  • 2,949 posts

Posted 29 May 2006 - 11:29 AM

But for windows security updates it says many if not all the times that i need the I Explorer to download any windows security updates and service packs. And for those i actually wanted the IE.
Do you know any other way of getting windows security updates without IE?


You can probably do a search for them and download them, I wouldn't install IE7 - better of with IE6 for now. You have to tweak the registry first before you can install it though.


And to my question on the file-share programs connection problems, how do i check that i have the right ports open and still am not to open for attacks?
I tried it with closing ALL of my firewalls and it still didnt work.


I'm not sure on this.

"Setup could not verify the integrity of the files needed for installation. Make sure the Cryptographic service is running on this computer. "

This is the error message i receive after clicking on download IE 7 beta on the microsoft page. I had a successful "Genuine Check" b4 that.


Start the Administrative Tools utility in Control Panel.
Double-click Services. (this will open the services window)
Right-click Cryptographic Services, and then click Properties.
Click Automatic for Startup type, and then click Start.
Remote Procedure Call (RPC) <--- make sure this is running also

info here:
http://www.updatexp....ic-service.html
http://www.tech-pro.net/howto_014.html
http://www3.telus.ne...ar/updatinf.htm

MrC


#24 topsam

topsam

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 30 May 2006 - 03:12 AM

:D G' Morning Mr. Charlie, Guess what, today i got greeted by the windows automatic updates on my right corner taskbar. What a fantastic feeling!! This is what i have done, again of course, with your superbe help of one of the three sites. I clicked the first one. this is what i did: If it fails with the 0x800B0004 error again try Step 4 ( i remember getting that error as well) Step 4) It is likely that a component of the Windows XP digital signatures process is damaged - so lets re-register some DLL files. sounds like fun, eh? Onwards and upwards! Click Start menu, and then click the Run icon. In the small box that Opens, type the three letters: cmd then click the OK button. In the command prompt window that just opened (a black background and white text), type the following commands, pressing the ENTER key on your keyboard after each line: net start cryptsvc regsvr32 softpub.dll regsvr32 wintrust.dll regsvr32 initpki.dll regsvr32 dssenh.dll regsvr32 rsaenh.dll regsvr32 gpkcsp.dll regsvr32 sccbase.dll regsvr32 slbcsp.dll regsvr32 cryptdlg.dll :lol: then i shut down and went to bed, since its only workable after a restart. And this morning i got greeted by the windows download icon in the right hand lower corner of my pc. How cool B) I call that a great success so far, lemme check the rest out as well and i get back to you. Just couldnt wait to let you know the good news. cheers Sam

#25 MrCharlie

MrCharlie

    SuperMember

  • Malware Team
  • 2,949 posts

Posted 30 May 2006 - 05:20 AM

That's good news :thumbup:

Let me know how the rest of it is when you're done, MrC

    Advertisements

Register to Remove


#26 MrCharlie

MrCharlie

    SuperMember

  • Malware Team
  • 2,949 posts

Posted 07 June 2006 - 07:31 PM

topsam, are we done? Can I close this post? MrC

#27 topsam

topsam

    New Member

  • Authentic Member
  • Pip
  • 16 posts

Posted 08 June 2006 - 12:53 AM

:D Hi Mr.Charlie Sorry for my absence, i was away for a few days. Yes, i think we are done, i did a last full scan with spy sweeper and that didnt find a thing. Also besides that, my puter is acting pretty normal. :lol: With all my heart i wanna thank you, for putting in so much effort and your time. You have helped me tremendously and i am very very grateful for that Mr. Charlie. Thanks Man. If you ever are in Switzerland, let me know aight? I found after over a year a new job finally, and now i have to learn Cisco network IOS. Can you imagine? lol. Well, maybe when i am learning hard enuff i can one day make the CCNA certificate. Again, thanks a lot Mr. Charlie TopSam

#28 MrCharlie

MrCharlie

    SuperMember

  • Malware Team
  • 2,949 posts

Posted 09 June 2006 - 06:10 PM

OK!

I'll leave you with........

Some preventive maintenance:

------------------Must have or do:-----------------

Now that you're clean: <----Important Step!!!!
Delete your system restore files and create a new restore point:
(ME and XP users only)

XP system restore

ME system restore

Visit Windows Update and install all the lastest critical updates.

Install these two free programs, they sit in the backround and protect your system from spy and adware being installed on your system, also from your browser being hijacked.

SpywareBlaster Check for updates weekly.

SpywareGuard

IE-SPYAD
Puts over 5000 sites in your restricted zone, so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
or try the new ZonedOut

Blocking Unwanted Parasites with a Hosts File

Need a free anti virus?
AVG*free
(check for updates - daily)
Avast free

How about a firewall? The front door to your computer.
ZoneAlarm*free

Other free firewalls

Keep those temp files off your system use
CCleaner
Uncheck "Cookies" under "Internet Explorer".
or
ATF Cleaner - hit "select all" then just uncheck "cookies" (uncheck cookies is optional - leave it checked if you want to delete all cookies) then "empty selected" That will clear out all the temp files on the system.


IMPORTANT!!
Keep your Sun Java up-to-date
Download page
Delete ALL old versions from add/remove programs if listed!

----------Free malware removal programs:----------

SpyBot
AD-Aware
CW-Shredder

Ewido trojan scanner<---VERY GOOD! (XP and 2K only)

Please consider using FireFox instead of Internet Explorer. A more secure browser! Easy to make the change!
FireFox Tutorial


Pop-up stoppers:
GoogleToolBar
Pop-upStopperFree

Disable Windows MessengerXP - 2K (stops pop-up ads -etc):
Disabling Messenger Service in Windows XP
How to Remove Windows Messenger on Windows XP
How to Remove Windows Messenger on Windows XP
Shoot The Messenger

Don't open e-mail attachments without first scanning them with an up-to-date
anti virus program, even after doing that I would be very careful. Don't click on any executables in e-mails or any other links that you're not sure of.
Watch your surfing habits, don't click on or download anything you're not sure of. Don't install a program that hasn't been recommended by a reputable organization.

Good luck and thanks for using the forum - MrC


#29 MrCharlie

MrCharlie

    SuperMember

  • Malware Team
  • 2,949 posts

Posted 09 June 2006 - 06:11 PM

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoy...showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Related Topics



1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users