What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Software

Need Help

8 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hello everyone, I am trying to determine wether or not my nephews laptop is infected or not. He says that it was working fine until it started slowing down and then he could not connect to the internet. The laptop is a gateway that is running XP Home. I am communicating to you from my desktop now until I can connect with the laptop to do other diagnosis to it. I have tried connecting wireless and through ethernet cable directly with no avail. When trying to connect wireless it detects my personal network but will not connect and when using ethernet cable directly it states "This connection has limited or no connectivity". I even called my router manufacturer for support and they told me that the laptop seems it does not have TCP/IP address……..Please Help. Thank You in Advance!
Post #2
On the Laptop…

Open a Command line – Start - Run - (type)cmd - Enter

This will open a DOS box

At the blinking cursor type the following, in order as listed, and waiting for each operation to complete (a few seconds each) until the blinking cursor returns.

ipconfig /release - enter <–notice the required space in front of the "/"
ipconfig /renew - enter <–notice the required space in front of the "/"
Ipconfig /flushdns - enter <–notice the required space in front of the "/"

If you are still unable to get internet access, then run WinsockXPfix.exe

Download WinSock XP Fix, here:
http://www.snapfiles.com/get/winsockxpfix.html

You can burn it to CD and then run it on the Laptop.
Post #3
Once you have the Laptop able to access the Internet….

Download and Run CleanUp! 4.52
http://www.stevengould.org/index.php?optio…9&Itemid=72
_________________


Download, install, and update, Spybot Search & Destroy
http://www.safer-networking.org/en/download/

Run Spybot and allow it to fix everything it finds
__________

download, update and run AVG AntiSpyware 7.5, from here:
http://free.grisoft.com/doc/5390/us/frt/0?prd=asf
___________

Update and Run your Antivirus (which I presume the Laptop has, but if not install the free AVG AntiVirus)

If malware (virus and/or spyware/trojans) were found, post the lists of what was found/fixed.
You may need to do additional work over in the Malware Removal Forum, but the above will be a very good start, and maybe just enough.
____________

If only tracking Cookies were detected and removed, then we'll have a look at the System Files and the machines overall performance.

Please go to http://www.pcpitstop.com
Run the Full Tests
Post your TechExpress link back into this thread for review.

Best Regards
Post #4
Doug,

Thank You for your fast replay!!

I did the following -

ipconfig /release - after hitting enter it says - No operation can be performed on wireless network connection while it has its media diconnected.
ipconfig /renew - after hitting enter it says - No operation can be performed on wireless network connection while it has its media diconnected.
Ipconfig /flushdns - after hitting enter it says - Successfully flushed the DNS Resolver Cache.

I still can not connect.

I downloaded the WinSock XP Fix to my junk drive and loaded it to the laptop then rebooted. A window popped up after reboot that states Malicious Software Removal Tool & in the box it reads "An error has occurred. Please visit the Malicious Software Removal Tool Help Page for more details.
Post #5
go to Control - Panel - Network Connections Double-click on your wireless connection item Select - Enable Next: Go back and run the series of ipconfig commands I posted earlier. Best Regards
Post #6
:thumbup: Ahh, finally able to get internet. Had to do some configurations to my router. Ok, I ran CleanUp 4.52, spybot & Avg. Here are the results. I do not know how to save reports in Spybot so I had to write them down. Spybot – AntiverminsPro AVGold Fraud.ProtectionBar Microsoft.WindowsSecurityCenter.AntiVirusDisableNotify Microsoft.WindowsSecurityCenter.FirewallDisableNotify NewDotNettoptoolbar PestTrap PSGaurd SmitFraud-C. SpywareStrike WhenU.Search.Desktoptoolbar WhenU.Search Win32.Renos Zlob.VideoAccessActiveXObject Zlob.VideoActiveXObject AVG — AVG Anti-Spyware - Scan Report ——————————————————— + Created at: 10:21:13 PM 8/21/2007 + Scan result: C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP160\A0056903.exe -> Adware.AntiVermins : Ignored. C:\Program Files\AntiviralGolden\Antiviralgolden.exe -> Adware.AVGold : Ignored. HKU\S-1-5-21-3773717104-686549976-570509602-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{67982BB7-0F95-44C5-92DC-E3AF3DC19D6D} -> Adware.Generic : Ignored. HKU\S-1-5-21-3773717104-686549976-570509602-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{67982BB7-0F95-44C5-92DC-E3AF3DC19D6D} -> Adware.Generic : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP160\A0056904.exe -> Adware.NewDotNet : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP160\A0056905.exe -> Adware.NewDotNet : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP160\A0056906.dll -> Adware.NewDotNet : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP160\A0056907.exe -> Adware.NewDotNet : Ignored. HKU\S-1-5-21-3773717104-686549976-570509602-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP155\A0055654.exe -> Downloader.Zlob.arb : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP155\A0055655.exe -> Downloader.Zlob.arq : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP149\A0052526.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP149\A0053526.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP149\A0053744.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP151\A0053772.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP151\A0054655.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP151\A0054667.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP151\A0054686.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP156\A0055877.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP156\A0055900.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP156\A0055901.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP160\A0056911.exe -> Downloader.Zlob.bni : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP160\A0056912.dll -> Downloader.Zlob.bno : Ignored. C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP160\A0056909.dll -> Not-A-Virus.Hoax.Win32.Renos.NAO : Ignored. :mozilla.153:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.2o7 : Ignored. :mozilla.63:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Advertising : Ignored. :mozilla.64:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Advertising : Ignored. :mozilla.66:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Advertising : Ignored. :mozilla.67:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Advertising : Ignored. :mozilla.68:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Advertising : Ignored. :mozilla.69:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Advertising : Ignored. :mozilla.70:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Advertising : Ignored. :mozilla.31:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Atdmt : Ignored. :mozilla.72:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Bluestreak : Ignored. :mozilla.87:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored. :mozilla.88:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored. :mozilla.89:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored. :mozilla.90:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored. :mozilla.91:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Casalemedia : Ignored. :mozilla.32:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Doubleclick : Ignored. :mozilla.33:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Fastclick : Ignored. :mozilla.42:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Fastclick : Ignored. :mozilla.43:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Fastclick : Ignored. :mozilla.44:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Fastclick : Ignored. :mozilla.45:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Fastclick : Ignored. :mozilla.141:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Hitbox : Ignored. :mozilla.142:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Hitbox : Ignored. :mozilla.143:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Hitbox : Ignored. :mozilla.144:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Hitbox : Ignored. :mozilla.145:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Hitbox : Ignored. :mozilla.147:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Hitbox : Ignored. :mozilla.149:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Mediaplex : Ignored. :mozilla.125:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Pointroll : Ignored. :mozilla.126:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Pointroll : Ignored. :mozilla.127:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Pointroll : Ignored. :mozilla.128:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Pointroll : Ignored. :mozilla.129:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Pointroll : Ignored. :mozilla.26:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored. :mozilla.27:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored. :mozilla.28:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Questionmarket : Ignored. :mozilla.110:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Realmedia : Ignored. :mozilla.111:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Realmedia : Ignored. :mozilla.112:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Realmedia : Ignored. :mozilla.113:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Realmedia : Ignored. :mozilla.114:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Realmedia : Ignored. :mozilla.115:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Realmedia : Ignored. :mozilla.116:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Realmedia : Ignored. :mozilla.117:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored. :mozilla.118:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored. :mozilla.119:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored. :mozilla.120:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored. :mozilla.121:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored. :mozilla.122:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored. :mozilla.123:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored. :mozilla.124:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Trafficmp : Ignored. :mozilla.73:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored. :mozilla.74:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored. :mozilla.75:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Tribalfusion : Ignored. :mozilla.34:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored. :mozilla.35:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored. :mozilla.36:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored. :mozilla.37:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored. :mozilla.38:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored. :mozilla.39:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored. :mozilla.40:C:\Documents and Settings\Owner\Application Data\Flock\Browser\Profiles\njk2o8fw.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignored. ::Report end
Post #7
Hi JoeCastle, Good work getting your Router set up and your machine connected to the Internet. And Good work (so far) in identifying the malware infections that have found their way into your machine. Zlob.bni SpywareStrike SmitFraud-C. Win32.Renos Zlob.VideoAccessActiveXObject Zlob.VideoActiveXObject Your Steps of Running Spybot Search & Destroy and AVG Antispyware, are "part" of the solution, but not sufficient to eradicate these Trojans. You will need to get Expert guidance in using some advanced tools over in the Malware Removal Forum to assure that all the bad-guys have been removed. Run HJT and Post your Log right away. Also beware that some of these infections have the risk of compromising your personal and financial information. You should not be using this infected machine to conduct business, until it is absolutely free of infection! Best Regards
Post #8
Doug, Thank you for your support & guidence. I will run the HJT program and post in the proper forum as soon as I get home today. Godspeed to You!!
Post #10
Sure I'll take a look JoeCastle,

Please Run the PCPitstop Full Tests, here:
http://www.pcpitstop.com
Register and create a password
Accept the ActiveX component to allow your machine to run the Full Tests
Registering and accepting the ActiveX are both SAFE and FREE.
Full Tests is the first item in the left hand column of that page.

The Full Tests take about 2-3 minutes for most machines.
Once you have your Results, please post the TechExpress Link back here into this thread for review.
TechExpress is the last item on the list in the yellow box in upper right area of any Results page.
Post the entire URL link information.

I can make a better recommendation after reviewing those results.
You'll probably be pleased to get the Full Tests Results for your use as well.

Best Regards
Post #12
Hi JoeCastle,

Just happens that I have a similar machine here on my repair bench.
TechExpress link for your current results:
http://www.pcpitstop.com/techexpress.asp?id=HFMVHWQVPDVS994V
Admittedly Differences re He has faster CPU, you have faster Video Adapter and larger HD, but both 191mb RAM, both XP Home SP2.

His machine was fully crippled with malware, system corruptions, SR failure, and a choked HD.
So I had to completely reformat/Reinstall.
(good example of why it's important to keep OS updated, and run updated Antivirus, Antispyware, Firewall.)

So just for comparison, I gave him the full load of MS Office Pro (2000)

It runs just fine on this limited resource machine, but would have a much more brisk response if he added More RAM.

Same should be true for you after you follow all of the Pit Test Tune-up Tips. :)

Consider getting more RAM. You will be glad you did.

Best Regards
Post #15
Doug, Thank You Very Much Again for your help!!! System is running great and I already installed MS Office Pro 2003 and it also is working great.. Thanks The Castle

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI