Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93124 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

[Resolved] please help


  • This topic is locked This topic is locked
124 replies to this topic

#31 sUΒs

sUΒs

    Authentic Member

  • Malware Expert
  • 189 posts

Posted 16 October 2007 - 05:35 PM

Platform: Windows XP (WinNT 5.01.2600)

According to the logs, your machine is not SP2. It has no service packs. Did you copy the tcpip.sys from an SP2 machine?

Please verify which version of XP the troubled machine is.

For the moment., rename tcpip.sys_old back to it's original name

    Advertisements

Register to Remove


#32 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 16 October 2007 - 05:45 PM

When right clicking on my computer then going properties & in the general tab it says Windows XP Pro Version 2002. I believe that is a SP1. I remember when my freind gave this machine to help him clean it up. When I first started it up windows update was trying to update to SP2 but could not at time due to viruses..The search results found a copy of tcpip in the C:\WINDOWS\SoftwareDistribution\Download\16b2c96a0c41f4dfdb4d3cc228a4f819.

#33 sUΒs

sUΒs

    Authentic Member

  • Malware Expert
  • 189 posts

Posted 16 October 2007 - 05:47 PM

The search results found a copy of tcpip in the C:\WINDOWS\SoftwareDistribution\Download\16b2c96a0c41f4dfdb4d3cc228a4f819.


Try copying that.

#34 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 16 October 2007 - 05:53 PM

Should I delete the other one (tcpip.sys-old)?

#35 sUΒs

sUΒs

    Authentic Member

  • Malware Expert
  • 189 posts

Posted 16 October 2007 - 06:00 PM

No necessary to delete it.. We may have need for it later. When it's renamed, it poses no danger

#36 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 16 October 2007 - 06:13 PM

OK,

I copied it & pasted it then restarted the computer. A window popped up stating Windows - Virtual Memory Minimum Too Low In the box below it says Your system is low on vitual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications maybe denied. For more information, see help. Then a second box popped up WLAN_Cfg & in the box is Win32 Error. Code: 2. There were 2 other windows that popped up but could not see what they said.

Sorry.. After clicking ok in the first window another popped up that says. Microsoft Visual C++ Runtime Library in the box it says Runtime Error! Program C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\gaurd.exe R6016 - not enough space for thread data

Edited by Joecastle, 16 October 2007 - 06:22 PM.


#37 sUΒs

sUΒs

    Authentic Member

  • Malware Expert
  • 189 posts

Posted 16 October 2007 - 06:21 PM

Sounds like it objects to the other tcpip.sys. Let's use back tcpip.sys_old. WLAN_Cfg is related to Wireless Lan. Is this is a laptop?

#38 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 16 October 2007 - 06:30 PM

Yes, it is a laptop. How do you want me to proceed?

#39 sUΒs

sUΒs

    Authentic Member

  • Malware Expert
  • 189 posts

Posted 16 October 2007 - 06:35 PM

Have you renamed tcpip.sys_old back to tcpip.sys ?

My first priority it to get the machine stable.

#40 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 16 October 2007 - 06:46 PM

No, I copied it from C:\WINDOWS\SoftwareDistribution\Download\16b2c96a0c41f4dfdb4d3cc228a4f819.
Then pasted it to C:\Windows\System32\drivers\. Then restarted the computer . In the drivers folder there is now tcpip6, tcpip.sys_old & tcpip. I will rename tcpip.sys_old to tcpip.sys. But I have to do it in safemode.

    Advertisements

Register to Remove


#41 sUΒs

sUΒs

    Authentic Member

  • Malware Expert
  • 189 posts

Posted 16 October 2007 - 06:50 PM

Not necessary to go to safe mode.

Rename the current copy of tcpip.sys to tcpip.sysB

Then rename tcpip.sys_old to tcpip.sys


#42 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 16 October 2007 - 07:37 PM

Sorry,

I had already renamed it back to tcpip.sys and left the other one as tcpip as it shows now. The Windows - Virtual Memory Minimum Too Low window popped up again as well as the WLAN_Cfg but now says Out of memory.

#43 sUΒs

sUΒs

    Authentic Member

  • Malware Expert
  • 189 posts

Posted 16 October 2007 - 07:50 PM

Well, that shows it wasn't related to tcpip.sys. Launch Task Manager & look at the processes running. Do you see any that references WLAN_Cfg? If you do not see WLAN_Cfg, how about WLService.exe? End Process on it & see if that stops all these error messages.

#44 Joecastle

Joecastle

    Authentic Member

  • Authentic Member
  • PipPip
  • 215 posts

Posted 16 October 2007 - 07:59 PM

Task manager is unresponsive. I click on it and nothing happens.

#45 sUΒs

sUΒs

    Authentic Member

  • Malware Expert
  • 189 posts

Posted 16 October 2007 - 08:10 PM

Go to Start > Run - type in CMD.EXE to bring up the command prompt

Type in this line & press enter

SC STOP WUSB54GSCSVC

Then type this ...

SC CONFIG WUSB54GSCSVC START= DEMAND

See if that helps

Related Topics



1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users