Jump to content

Build Theme!
  •  
  • Infected?

big grin WE'RE SURE THAT YOU'LL LOVE US!

We invite you to ask questions, share experiences, and learn. It's 100% free. Did we mention that it's free. It is. It's free. Join 91517 other members! Anybody can ask, anybody can answer. Consistently helpful members with best answers are invited to staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

I need help fixing "buffer overrun detected"


  • This topic is locked This topic is locked
95 replies to this topic

#46 LDTate

LDTate

    Forum God

  • Root Admin
  • 57,164 posts

Posted 24 February 2007 - 09:12 PM

How can I get back into windows? I'm sending this from my blackberry. I can't get any access.

Did you power it off and restart? Are you saying it will only boot in safe mode?

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

    Advertisements

Register to Remove


#47 Perk

Perk

    Authentic Member

  • Authentic Member
  • PipPip
  • 104 posts

Posted 24 February 2007 - 09:12 PM

How can I get back into windows? I'm sending this from my blackberry. I can't get any access.

#48 Perk

Perk

    Authentic Member

  • Authentic Member
  • PipPip
  • 104 posts

Posted 24 February 2007 - 09:17 PM

Yes. It will only boot in safe mode. Either as administrator or myself. But both will only load in safe mode.

#49 LDTate

LDTate

    Forum God

  • Root Admin
  • 57,164 posts

Posted 24 February 2007 - 09:22 PM

Run msconfig.
Look under General > make sure Normal Startup is selected
Look under Boot.ini > make sure under boot options nothing is selected

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#50 Perk

Perk

    Authentic Member

  • Authentic Member
  • PipPip
  • 104 posts

Posted 24 February 2007 - 09:35 PM

Ok. I'm back.

#51 LDTate

LDTate

    Forum God

  • Root Admin
  • 57,164 posts

Posted 24 February 2007 - 09:37 PM

OK. Try updating your video driver

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#52 Perk

Perk

    Authentic Member

  • Authentic Member
  • PipPip
  • 104 posts

Posted 24 February 2007 - 09:43 PM

How do i do that? By the way, it was pretty scary not knowing how to get back into Windows. I appreciate your help.

#53 LDTate

LDTate

    Forum God

  • Root Admin
  • 57,164 posts

Posted 24 February 2007 - 09:49 PM

It looks like you have a ATI video card. I don't know the model though.

Belarc Advisor - Free Personal PC Audit (Version 7.2k)
Download Belarc Advisor
http://www.belarc.co...e_download.html

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#54 Perk

Perk

    Authentic Member

  • Authentic Member
  • PipPip
  • 104 posts

Posted 24 February 2007 - 11:34 PM

I ran the Belarc Advisor. What am I supposed to do additionally? Does it just scan and that's it? I received no prompts for anything so I'm lost.

#55 LDTate

LDTate

    Forum God

  • Root Admin
  • 57,164 posts

Posted 25 February 2007 - 04:40 AM

It will show you what hardware you have, like what ATI video card you have so you can go to ATI's website and update the drivers.

Lets make sure you don't have any hidden bad guys.

Download Systemscan.exe and save it to the desktop.

http://www.suspectfi.../systemscan.exe

Double click it to run.
Check the following items:

- suspicious files: compressed with UPX, FSG, Polycrypt, Upack and others
All the rest are already checked.
OK the prompt.
Click "scan now"
OK the prompt.

**Note
This scan will take a while so please be patient.
This tool does not fix anything. it just does a scan and generates a log.
Once done the log should pop up.

C:\suspectfile\report.txt

Post log please. It may take 3 posts to get whole logs in.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

    Advertisements

Register to Remove


#56 Perk

Perk

    Authentic Member

  • Authentic Member
  • PipPip
  • 104 posts

Posted 25 February 2007 - 12:59 PM

As soon as I pressed "Scan now," a notepad popped up titled "ctrld." The Systemscan is blank so I don't know if it is scanning or frozen. The popup said: Option Explicit on error resume next Dim oWS : Set oWS = CreateObject("WScript.Shell") Dim oFSO : Set oFSO = CreateObject("Scripting.FileSystemObject") Dim sRegTmp, sOutTmp, eRegLine, aRegFileLines, sSearchFor, sSearchdll, sSearchdll2, sSearchdll3 sRegTmp = oWS.Environment("PROCESS")("SYSTEMDRIVE") & "\suspectfile\files.row " sOutTmp = oWS.Environment("PROCESS")("SYSTEMDRIVE") & "\suspectfile\report.row" With oFSO.OpenTextFile(sOutTmp, 8, True) With oFSO.GetFile(sRegTmp) aRegFileLines = Split(.OpenAsTextStream(1, 0).Read(.Size), vbcrlf) End With For Each eRegLine in aRegFileLines if left (eregline,1) ="" then .writeline(eregline) if datediff("d",left(eregline,10),date()) < 60 then .WriteLine(eregline) end if Next Erase aRegFileLines .Close End With oFSO.DeleteFile(sRegTmp) Set oWS = Nothing Set oFSO = Nothing WScript.Quit

#57 LDTate

LDTate

    Forum God

  • Root Admin
  • 57,164 posts

Posted 25 February 2007 - 01:06 PM

Try this one.

For users running Windows 2000, XP or Vista

Download ComboScan to your Desktop.
  • Close all applications and windows.
  • Double-click on comboscan.exe to run it, and follow the prompts.
  • When the scan is complete, a text file will open - ComboScan.txt
  • Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of ComboScan.txt in your thread in the HijackThis Log Help Forum.
  • A folder, C:\ComboScan, will also open. In it will be another text file, Supplementary.txt.
  • Please attach Supplementary.txt to your post.
Note: some firewalls may warn that sigcheck.exe is trying to access the internet - please ensure that you allow sigcheck.exe permission to do so.

To attach a file to a new post, simply
  • Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
  • copy and paste the following into the "Upload File from your Computer" box:

    C:\ComboScan\Supplementary.txt

  • Click Upload.
What ComboScan will do:
  • create a new System Restore point in Windows XP and Vista.
  • clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
  • check some important areas of your system and produce a report for your analyst to review. ComboScan automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#58 Perk

Perk

    Authentic Member

  • Authentic Member
  • PipPip
  • 104 posts

Posted 25 February 2007 - 01:10 PM

LDTate, The bottom of Systemscan reads "step 1 of 11 in progress." But it seems there is no activity at all. Should I shut this down and follow your above instructions?

#59 LDTate

LDTate

    Forum God

  • Root Admin
  • 57,164 posts

Posted 25 February 2007 - 01:17 PM

LDTate,

The bottom of Systemscan reads "step 1 of 11 in progress." But it seems there is no activity at all. Should I shut this down and follow your above instructions?

Yes :thumbup:

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 


#60 Perk

Perk

    Authentic Member

  • Authentic Member
  • PipPip
  • 104 posts

Posted 25 February 2007 - 01:18 PM

Nevermind my last comment. Step 2 is now in progress so I will let Systemscan run until it's complete.

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users