Computer/Technical Help

quote:

Originally posted by GAT-X105 Thanks, Krang! That damn isearch is gone, but I couldn't find all of the files that I had to delete. code: 1: 2: 3: C:\WINDOWS\BTGrab.dll C:\WINDOWS\System32\toolbar.dll c:\windows\CaseyVideo[1].scr These were the ones I couldn't find. And I attached the new HijackThis log.

The new log looks almost clean except for a few details. First, although isearch is gone and completely disabled, this entry was left over and can be safely removed:

code: 1: R3 - URLSearchHook: (no name) - {1C78AB3F-A857-482e-80C0-3A1E5238A565} - (no file)

As for the files that weren't there, the first two won't cause a problem since their corresponding entries are gone, but the last one is part of spyware that is still active. I'm still looking into how to remove it (very little information about it is available), so I'll get back to you on that one.

quote:

Originally posted by Green_Bird Problem....again, they gave me no disks....not even the XP or printer disks. I might just get another computer. But I need to keep this one working until I do! I tried messing around with the curser speed like you said, and it didn't help. It still does it...

Try looking on the official web site of the mouse manufacturer for updated drivers. This almost sounds like a defective PS/2 port if the same is happening with each mouse you try and if the settings on the Control Panel don't change anything... The problem is either with the OS or the port, so the only way to narrow it down for sure would be to try another OS such as the Knoppix distro of Linux.

quote:

Originally posted by Krang Try looking on the official web site of the mouse manufacturer for updated drivers. This almost sounds like a defective PS/2 port if the same is happening with each mouse you try and if the settings on the Control Panel don't change anything... The problem is either with the OS or the port, so the only way to narrow it down for sure would be to try another OS such as the Knoppix distro of Linux.

Well the idea that the port is bad hasn't intirely excaped my mind. Because I did notice that when ever I checked the conections, they always seemed loose.

I did a little test a while ago, I pulled the desk out then checked the conections, they were loose, so I pushed them back in. I moved the desk back, making sure that no wires were cought under the wheels, I reached back behind it. and they were loose again. Even the key board conection....Could all the plugs be bad?

quote:

Originally posted by Green_Bird Well the idea that the port is bad hasn't intirely excaped my mind. Because I did notice that when ever I checked the conections, they always seemed loose. I did a little test a while ago, I pulled the desk out then checked the conections, they were loose, so I pushed them back in. I moved the desk back, making sure that no wires were cought under the wheels, I reached back behind it. and they were loose again. Even the key board conection....Could all the plugs be bad?

If the same problem happens with both the keyboard and more than one mouse, it's most likely a problem with the ports rather than the plugs. If it is a problem with the PS/2 port, the only way to fix it would be to replace the motherboard. Then again, you can also work around the problem by buying a mouse that plugs into the USB port or the serial port (most computers will have at least one of those ports).

I've notice that I have a lot of svchost's running. Is this normal?



Sorry if this is rather vague, I'm just curious.

quote:

Originally posted by R.Smith I've notice that I have a lot of svchost's running. Is this normal? Sorry if this is rather vague, I'm just curious.

I have the same amount running.


What do they do, anyway?

quote:

Originally posted by R.Smith I've notice that I have a lot of svchost's running. Is this normal?

quote:

Originally posted by Hienrich Ele What do they do, anyway?

On an NT-based OS such as XP or 2000, there will always be some necessary programs running in the background called services (which control things such as video, sound, networking, printing, etc.). In some of the more recent versions of Windows (XP for sure, and maybe 2000 also), many of the services which previously used their own programs now use one combined program called svchost.exe. So yes, it is normal to see several instances of this program running at once, since many of the services use it.

My other computer is officially hosed. One of the things it does is willy nilly going on the internet when not asked. It then takes you to some "search engine" trying to look up pills for ailments I'd rather not mention. Let me just say, having my daughter see this pop up while she's playing a game was NOT GOOD!! I have run Adaware and CWShredder and Spybot. I am attaching the zip file of my Hijackthis log. I can see what is wrong(mostly) but I need to know where to look in my system files to get rid of this ...crap.

Thanks for your help!

quote:

Originally posted by Madrona My other computer is officially hosed. One of the things it does is willy nilly going on the internet when not asked. It then takes you to some "search engine" trying to look up pills for ailments I'd rather not mention. Let me just say, having my daughter see this pop up while she's playing a game was NOT GOOD!! I have run Adaware and CWShredder and Spybot. I am attaching the zip file of my Hijackthis log. I can see what is wrong(mostly) but I need to know where to look in my system files to get rid of this ...crap. Thanks for your help!

No problem, this should help you get rid of it:

First, make sure you have a copy of this post, since you won't be able to access the internet from safe mode. Now, boot into safe mode (reset your computer, then repeatedly press F8 as it's starting up until a menu shows up that allows you to start up in safe mode) and run HijackThis again. When it displays the results, check the boxes next to these items:

code: 1: 2: 3: 4: 5: 6: 7: 8: 9: 10: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missing O2 - BHO: Explorer Class - {962F12AE-2773-4BEB-99EA-B5C3AB9A6606} - C:\WINDOWS\System32\DSMANA~1.DLL O4 - HKLM\..\Run: [ieexec.exe] ieexec.exe O4 - HKLM\..\Run: [Shell] open32.exe O4 - HKLM\..\Run: [hiden.exe] hiden.exe O23 - Service: Manageer Network Connections - Unknown - C:\WINDOWS\System32\telcmd.exe O23 - Service: Working Network Connections - Unknown - C:\WINDOWS\System32\hicom.exe

Now click "Fix checked" and exit HijackThis, but don't reboot yet. While you're still in safe mode, open Windows Explorer under Start Menu > Accessories and select Folder Options from the Tools menu. On the View tab, make sure that "Show hidden files and folders" is selected and that "Hide protected operating system files" is not checked. Apply the changes if necessary. Now delete the following files:

code: 1: 2: 3: C:\WINDOWS\System32\DSMANA~1.DLL C:\WINDOWS\System32\telcmd.exe C:\WINDOWS\System32\hicom.exe

You'll also need to delete the following files. They will most likely be in either the same directory as the files above or in C:\WINDOWS, but if you can't find them, try using Search on the Start Menu:

code: 1: 2: 3: ieexec.exe open32.exe hiden.exe

Now restart your computer again, run HijackThis again, and post the new log to make sure the spyware is gone (you can delete the one from your previous post if you want). Also, just to be safe, you'll need to download the newest version of HijackThis (1.99.1) before scanning again.

Ah that seems much better. But just in case here is the new log. I really didn't want my husband to reformat that drive.

Thank you, thank you, thank you.

Madrona

quote:

Originally posted by Madrona Ah that seems much better. But just in case here is the new log. I really didn't want my husband to reformat that drive. Thank you, thank you, thank you. Madrona

No problem. Everything looks clean now except for one more problem that HijackThis didn't notice last time. To get rid of it, boot into safe mode one more time and use the same procedure as last time to remove this line:

code: 1: O4 - Startup: winupdate04027953[1].exe

While still in safe mode, delete the file winupdate04027953[1].exe which should be in the same place as the files were last time. After that, your computer should be clean. The only other recommendation would be to make sure your virus definitions are up to date, then do a full scan of the hard drive.

I should have never dowloaded XP service pack 2! The problems I had with SP1 were not this bad. First off the pop up blocker won't let me download anything from download.com, even when I turn it off. I end up having to go to the sourse to download it because the "Would you like to download" box doesn't pop up when you click "Download now" on the site.

Then my whole computer just locked up on me, that made me have to do a cold shut off for some reason and now everything like takes a long time to load or come up ( like Paint and stuff). Not to mention that I clicked "Print by acident and for some reason nothing printed. I mean the thing was on, but all that happened was the little printer icon on the bar kept blinking and nothing would happen. Could this be because of the firewall?

The school always seems to give me the crappy computers with a load of problems it seems......

quote:

Originally posted by Green_Bird I should have never dowloaded XP service pack 2! The problems I had with SP1 were not this bad. First off the pop up blocker won't let me download anything from download.com, even when I turn it off. I end up having to go to the sourse to download it because the "Would you like to download" box doesn't pop up when you click "Download now" on the site.

I would personally recommend an alternate browser such as Mozilla or Firefox, but if you're not interested in switching, try changing the popup blocker settings on the Privacy tab under Tools > Internet Options. You can try unblocking download.com, or if that doesn't work, temporarily disable the popup blocker while you download.

quote:

Then my whole computer just locked up on me, that made me have to do a cold shut off for some reason and now everything like takes a long time to load or come up ( like Paint and stuff). Not to mention that I clicked "Print by acident and for some reason nothing printed. I mean the thing was on, but all that happened was the little printer icon on the bar kept blinking and nothing would happen. Could this be because of the firewall?

I've heard of people having problems with SP2's Security Center slowing down their computers, so you could try disabling it and see if that's what's causing the problem. Just be sure to use Windows Update on a regular basis so that you don't miss any important updates, and be sure to keep your virus scanner up to date. To disable it, open it and click the link that says "Change the way Security Center alerts me" and uncheck all the boxes. Then, go to Start > Run and type:
services.msc
After that, scroll down to "Security Center," double click it, and set it to "Disabled."

As for the printing problem, try updating your printer's drivers, since they may not be compatible with SP2.

Okay, dissabing the Security Center fixed the speed problem. Still have to dowload the updated printer drivers from the HP site. But it seems I have a few more problems now....

My screen's starting to blink. In that I mean is it gets ligter, then darker and just goes back and forth. I checked the conection and it's tight but it still blinks. I'm thinking the monitor is or is starting to bad....

Everytime I do a defrag, there's this one red line that stays on the finished defrag area (Again). The last time this happend I found out that I had spyware. I scan and find nothing. So what now? I mean I do take a look at Highjack and nothing (that I can see) is bad....

Then there are these .CABs that start downloding for no reason at all when I go to some sites. I know their spyware. I just close out when they start downloding. All I want to know is that the right thing to do?

I was wondering how do you remove a program from the right click menu?



I want to remove "Dragon UnPACKer" but I can't seem to figure out how. I've tried reinstalling it and uninstalling it but its still there?

quote:

Originally posted by Green_Bird My screen's starting to blink. In that I mean is it gets ligter, then darker and just goes back and forth. I checked the conection and it's tight but it still blinks. I'm thinking the monitor is or is starting to bad....

If the connection to the computer is fine, then one more thing you could try is to make sure the power connection is secure as well (on both ends of the cord). If it still has problems, I'd say the monitor itself has problems and would need to be repaired or replaced.

quote:

Everytime I do a defrag, there's this one red line that stays on the finished defrag area (Again). The last time this happend I found out that I had spyware. I scan and find nothing. So what now? I mean I do take a look at Highjack and nothing (that I can see) is bad....

Try updating the drivers for your graphics card, since it might just be a glitch in the drivers. If that doesn't work, try posting the HijackThis log just in case, since sometimes spyware disguises itself as legitimate-looking files.

quote:

Then there are these .CABs that start downloding for no reason at all when I go to some sites. I know their spyware. I just close out when they start downloding. All I want to know is that the right thing to do?

Yep, if you just answer No to the prompt, you won't be affected.

quote:

Originally posted by R.Smith I was wondering how do you remove a program from the right click menu? I want to remove "Dragon UnPACKer" but I can't seem to figure out how. I've tried reinstalling it and uninstalling it but its still there?

Does that item just appear for one file type, or for all file types that Winamp handles? If it's just one, which type is it?

I have a USB Modem for my laptop, it's suppoused to be a 56k but it only connects at 24k. Does anyone one know a way to fix this?

quote:

Originally posted by Grunger Kittie Version 1 I have a USB Modem for my laptop, it's suppoused to be a 56k but it only connects at 24k. Does anyone one know a way to fix this?

Look under "Phone and Modem Options" on the control panel and see if there are any options there that you can change (sorry, I don't have a computer with a modem that I can test this out on). If not, it's probably a manufacturer-specific setting. What brand modem is it?

quote:

Originally posted by Krang quote: Originally posted by R.Smith I was wondering how do you remove a program from the right click menu? I want to remove "Dragon UnPACKer" but I can't seem to figure out how. I've tried reinstalling it and uninstalling it but its still there? Does that item just appear for one file type, or for all file types that Winamp handles? If it's just one, which type is it?

Well, it appears for just about anything. It's a game archive (Quake PAK, etc..) unpacking tool. I used it a while ago, and I didn't need it anymore so I uninstalled it.

I had just selected that particular file to get a sceencap.

quote:

Originally posted by R.Smith Well, it appears for just about anything. It's a game archive (Quake PAK, etc..) unpacking tool. I used it a while ago, and I didn't need it anymore so I uninstalled it. I had just selected that particular file to get a sceencap.

Oh, ok, I was just trying to gather a little more information first. On the Start Menu, go to Run, type:
regedit
and press Enter. Now go under HKEY_CLASSES_ROOT and locate the file types that this is affecting. Under each one, click it once and look under (Default) to see the handler for each extension (for example, the default for .exe is exefile). Now go to each of these handlers (still under HKEY_CLASSES_ROOT), double click them, and look under "shell". There should be a subkey called "open," and another subkey for this unpacker. Delete the unpacker one and it should be removed from the menu.

quote:

Originally posted by Krang quote: Originally posted by Grunger Kittie Version 1 I have a USB Modem for my laptop, it's suppoused to be a 56k but it only connects at 24k. Does anyone one know a way to fix this? Look under "Phone and Modem Options" on the control panel and see if there are any options there that you can change (sorry, I don't have a computer with a modem that I can test this out on). If not, it's probably a manufacturer-specific setting. What brand modem is it?

It's a Creative Modem Blaster V.92 DE5671.
Im not really used to messing with modem settings (never had a problem before) so I'm not sure what to look for...