|
| Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free! |
Help! What is the problem now?
|
Original Message
|
Name: jcally
Date: March 8, 2006 at 03:52:28 Pacific
Subject: Help! What is the problem now?OS: Windows XP SP1!!CPU/Ram: not sureModel/Manufacturer: Dell Inspiron 8600 |
Comment: I can't figure out exactly what or where the problem is -- probably a trojan, but can't seem to find one that causes what is actually happening. The laptop does not have SP2 installed - I know that is really not good, but was due to a recent windows repair (month ago - computer ran fine following repair, but we failed to reinstall sp2 - thanks Dell!) When connected to the internet (dail up or network) a pop up windows comes up - looks like a dos prompt? Black window - and a box with dl.exe error - says NTVDM CPU has encountered an error - 16 bit subsystem and gives a long code - there was no new hardware or software added to the computer. Installed and ran Norton Antivirus, came up with Trojan.Boxed.A (several times) and Adware.NdotNet the trojan also lists csrss.exe - but I have not been able to find this to remove. found instructions on removal, but unable to find the listed entery in regedit. Also, neither of these ever describe the problems I am experiencing. This is extrememly important computer right now for work. I was able to get many files backed up, but absolutely do not want to wipe the drive out and start over. Too many files and programs that I can not replace. Will installing SP2 help with this? Can I install without connecting to internet? What else could be causing this problem? I have also run Adaware, Spybot, and MSN Spysweeper. Can anyone help? Is there anywhere I can take this and get it fixed? But I can't afford a fortune, I am just about to go crazy with this. Please help!!!!
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: Johnw
Date: March 8, 2006 at 05:08:31 Pacific
|
Reply: (edit)Read these pages & follow the instructions, if you are still having problems, post your HiJackThis log. First job to do, go here. ActiveX Spyware & Adware Scanning http://www.spywareinfo.com/xscan.php This scanner is an ActiveX applet. After a short delay in which your browser downloads the control file, you will receive a "Warning Dialogue" requesting permission for the scanner to run. Click "Yes" and the applet will pop up and scan. You will be alerted if any spyware is found. When a spyware or malware is found, you will be alerted and asked if you want to remove it. If no spyware is found, the scanner will disappear on its own. If nothing happens, or if you are using a browser other than Internet Explorer, click here and choose either "Open" or "Run this program from its current location". Do not choose "Download". http://www.xblock.com/download/xclean_micro.exe ================================== Malware Removal and Prevention: Introduction http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction Malware Removal and Prevention: Overview http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview If Your PC is Infested w/ Spyware & Adware... http://spywarewarrior.com/sww-help.htm http://spywarewarrior.com/viewtopic.php?t=6914 http://spywarewarrior.com/viewtopic.php?t=10 http://spywarewarrior.com/viewforum.php?f=30 ==================================== Important: Create a specific folder on your hard drive called HijackThis to keep its backups. You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HijackThis. Download and unzip HijackThis.exe into this folder. http://www.merijn.org/downloads.html Or, http://tomcoyote.com/hjt/ =================================== If possible run HJT in Normal mode ( not Safe ) with all your normal startup's working. HijackThis Tutorial - How to Analyse your own log. http://spywarewarrior.com/viewtopic.php?t=3624 HijackThis log file analysis ( online ) http://hijackthis.de/index.php?langselect=english Or, http://startup.networktechs.com/page-68.html http://hjt.iamnotageek.com
Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: question (by fixit01)
Date: March 8, 2006 at 08:17:31 Pacific
|
Reply: (edit)Jcally go to this site and see if it helps you. http://www.registryfix.com/?hop=account10. Yes you do need to have SP2 on your PC. You should also go to Microsofts website and download Windows Defender. Let me know what happens.
Report Offensive Follow Up For Removal
|
|
Response Number 3
|
Name: jabuck
Date: March 8, 2006 at 19:29:02 Pacific
|
Reply: (edit)Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. You can download Hijack This at this link http://www.tomcoyote.org/hjt/ then place it into a folder of it's on, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed. Once saved double click HijackThis.exe, and press "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log, Ctrl-A to Select All, and copy its contents into the text editor at this forum. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.
Report Offensive Follow Up For Removal
|

Post Locked
This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
Go to Security and Virus Forum Home
|
|
|