Hello Everyone,
I just ran and posted a copy of my latest HijackThis log on a tech web site somewhere. The response to my post was to repair and delete a couple of the items checked. I did this, and now I cannot connect to anything now anymore, the internet with the error-cannot find server, run certain applications like SpyBot with socket error 11004 or access any of my network or wireless things for my work, like the VPN or any of it's clients.
I tried to go back 2-3x system restore points but w/NO success. I am at a tremendous loss because this is my work computer. I don't understand sockets very well and I don't know what to do in hopes to get this repaired, or if anything can be done.
Please, please, please if anyone can help, I would really appreciate it.
I have listed the entries from the HJT log that were check for repair below.
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10
\EXCEL.EXE/3000
O20 - Winlogon Notify: atmgrtok - atmgrtok.dll (file missing)
O20 - Winlogon Notify: pcsinst - C:\WINDOWS\SYSTEM32\pcsinst.dll
O20 - Winlogon Notify: tpfnf2 - C:\WINDOWS\SYSTEM32\notifyf2.dll
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner -
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
Thanks in advance!
-Tessa
Oh I am sorry. I just saw the no HJT logs message on these forum rules. I don't know how to delete my post or move it to the proper forum but I did edit it to only show the checked entries from the HJT.
I will repost my inquiry in the proper forum.
My apologies,
-Tessa
Hi Juliet,
Thanks for the links but I can't even get to that point. Once I was able to run ipconfig before but I cannot now without getting an unable to query host error. Before localhost, default gateway, and remote host pinged. THen default gateway was not successful. Now I cannot even use ipconfig and my CPU persists at 100%.
If you have any other advice i'd sure appreciate it.
Thank you,
-Tessa
Here you can find what I have been doing to try to resolve my issues and the outcomes so far. I just did the last instructions from LDTate, so the entries he suggested I removed are removed.
My outcome is no better and all attempts at recovery have failed. My outlook is seeming pretty dim at this point.
Thank you all, very much for your concern.
Please see my other thread.
I will stay out of that thread as LD is assisting. Have you tried a system restore with XP restore to a time before you had the issues? Just a thought.
Hi,
Yes I have done system restore 2x with no luck.
Thank you for your offer of assistance. Although please feel free to post to my other thread if you are uncomfortable here.
I could use all the help I could get at this point..
-Tessa
Hi Juliet,
Oh, this is so unbelievable..
In the device manager, looking with show hidden devices, IP Network Transalator is not working properly-code 22.
There are many services, DHCP, DNS client, IPSEC, Network Location Awareness (NLA), WebClient, Windows Firewall, and probably a few others that I have been unable to start that all return error 1068.
It all seems to have something to do with TCPIP and the network adaptor of some kind.
Gosh, my networking skills are so not here.
I tried to do some research online and follow directions best I could. I don't really understand the details of these processes either but I do know if I could just get the wireless or online somehow, everything could work again. Why I can't get these services to go, I don't know. I know there are dependancies and I have checked windows for those 3 .sys files. They are all present.
In the device manager, Non-Plug and Play drivers there is a yellow circle and exclaimation mark on IP Network Address Translator and on the TCP/IP Protocal Driver. I don' t really know what these things are or do or even how I can get them reinstalled. Honestly, this is getting very painful, especially for a Sunday!
-Cheerios,
Tessa
Do you have any Windows CD's for your computer?
Usually if you go into device manager and delete a driver……..reboot……..windows will re-install the driver….But it's always suggested to have a CD in case.
Looking through many microsoft links one thing it suggest is a needed driver update….
It's been said that if you right click on a driver listed by a yellow exclaimation point you will see an option to update.
Another link I found was How to reset Internet Protocol (TCP/IP) How to reset Internet Protocol (TCP/IP) in Windows XP
Hi Juliet and Everyone,
Seems I have been exposed to some type of Trojan Virus. I have already done the diagonistic tools and tried myself to reset the VPN with no luck.
I was able to recover most of the system processes and default settings by going into safe mode and un-installing ALL 3rd party apps. Oh, at normal reboot, I was able to run ipconfig /all and the yellow marks were gone. That was a real drag but I felt I had no other alternative left. What a nightmare of a weekend.
I could not download, system processes shut down, settings reverted all by themselves, uncalled executables cropped up constantly, and CPU was hanging at 100%. Last resort was un-installing all 3rd party apps in safe mode. Windows was nuts. I was able to recover most system processes to normal just not the VPN yet. I am waiting for tier 2 support to get back with me as tier 1 was unable to help with the VPN.
I wanted to thank you for your support and all the wonderful links you passed my way. They were very helpful and I learned a lot from them and this dealing. Seems that you are very knowledgable in this sector!! Networking was not really my forte since most of the technical crew had done the hardware and drivers for me all the time. I just dealt with middleware app dev.
I was wondering if you had any suggestions as to how I can enhance security in the future to avoid things like this happening again? Is Ad-Aware, firewall, etc. a valuable asset? I do have a router already configured outside the DMV, SpyBot, CCleaner, etc.
I would really appreciate any suggestions you or anyone has with regards to software for enhancing security without it being too much of a pain to have to deal with to keep up with this ever changing world of the web.
I will post my outcome as soon as I can get issues resolved. Maybe my thread will be able to help someone else sometime. I would not wish anything like this on anyone!
Sincerely,
Tessa
Protection is very valueable…..
In the past when I see someone report CPU useage as high as that…….It's usually not a good outcome.
Once your Computer is clean here are option settings to help keep you secure.
Make your Internet Explorer more secure - This can be done by following these simple instructions:
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
a. Change the Download signed ActiveX controls to Prompt
b. Change the Download unsigned ActiveX controls to Disable
c. Change the Initialize and script ActiveX controls not marked as safe to Disable
d. Change the Installation of desktop items to Prompt
e. Change the Launching programs and files in an IFRAME to Prompt
f. Change the Navigate sub-frames across different domains to Prompt
g. When all these settings have been made, click on the OK button.
h. If it prompts you as to whether or not you want to save the settings, press the Yes button.
5. Next press the Apply button and then the OK to exit the Internet Properties page.
Use an AntiVirus Software - It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future.
Update your AntiVirus Software - It is imperitive that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
Use a Firewall ……even if you use a router use a Firewall with it….
Even one of the free Firewalls is a choice…Simply using a Firewall in its default configuration can lower your risk greatly.
Thanks Juliet,
You have been just absolutly wonderful!! I really appreciate all you have done to help me out here.
My VPN is still down and I am still waiting for an East Coast response.
I double checked all my IE settings and they were all as you stated. I already have all the software you mentioned installed. I use Avant (has some very nice features) on top of IE rather than IE, if not FireFox.
I do have a copy of the Symantec Firewall but I have never used it. It always seemed like a big hassle to configure, so I never opened it but with your suggestion I will attempt a try, an install and configure. I am big on security for work.
I run ICSA antivirus applications only (Avast), test weekly with housecall and cwShredder. NAV is a resource hog.
Take care! …till I have an update.
Tessa
✨ Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI
-Tessa