Computing.Net > Forums > Security and Virus > Help! What is the problem now?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Help! What is the problem now?

Reply to Message Icon

Name: jcally
Date: March 8, 2006 at 03:52:28 Pacific
OS: Windows XP SP1!!
CPU/Ram: not sure
Product: Dell Inspiron 8600
Comment:

I can't figure out exactly what or where the problem is -- probably a trojan, but can't seem to find one that causes what is actually happening. The laptop does not have SP2 installed - I know that is really not good, but was due to a recent windows repair (month ago - computer ran fine following repair, but we failed to reinstall sp2 - thanks Dell!)
When connected to the internet (dail up or network) a pop up windows comes up - looks like a dos prompt? Black window - and a box with dl.exe error - says NTVDM CPU has encountered an error - 16 bit subsystem and gives a long code - there was no new hardware or software added to the computer. Installed and ran Norton Antivirus, came up with Trojan.Boxed.A (several times) and Adware.NdotNet the trojan also lists csrss.exe - but I have not been able to find this to remove. found instructions on removal, but unable to find the listed entery in regedit. Also, neither of these ever describe the problems I am experiencing.
This is extrememly important computer right now for work. I was able to get many files backed up, but absolutely do not want to wipe the drive out and start over. Too many files and programs that I can not replace. Will installing SP2 help with this? Can I install without connecting to internet? What else could be causing this problem? I have also run Adaware, Spybot, and MSN Spysweeper. Can anyone help? Is there anywhere I can take this and get it fixed? But I can't afford a fortune, I am just about to go crazy with this.
Please help!!!!



Sponsored Link
Ads by Google

Response Number 1
Name: Johnw
Date: March 8, 2006 at 05:08:31 Pacific
Reply:

Read these pages & follow the instructions, if you are still having problems, post your HiJackThis log.

First job to do, go here.
ActiveX Spyware & Adware Scanning
http://www.spywareinfo.com/xscan.php
This scanner is an ActiveX applet. After a short delay in which your browser downloads the control file, you will receive a "Warning Dialogue" requesting permission for the scanner to run. Click "Yes" and the applet will pop up and scan. You will be alerted if any spyware is found. When a spyware or malware is found, you will be alerted and asked if you want to remove it. If no spyware is found, the scanner will disappear on its own.
If nothing happens, or if you are using a browser other than Internet Explorer, click here and choose either "Open" or "Run this program from its current location". Do not choose "Download".
http://www.xblock.com/download/xclean_micro.exe
==================================
Malware Removal and Prevention: Introduction
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
Malware Removal and Prevention: Overview
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Overview
If Your PC is Infested w/ Spyware & Adware...
http://spywarewarrior.com/sww-help.htm
http://spywarewarrior.com/viewtopic.php?t=6914
http://spywarewarrior.com/viewtopic.php?t=10
http://spywarewarrior.com/viewforum.php?f=30
====================================
Important: Create a specific folder on your hard drive called HijackThis to keep its backups.
You can do this by going to My Computer (Windows key+e) then double click on C: then right click and select New then Folder and name it HijackThis. Download and unzip HijackThis.exe into this folder.
http://www.merijn.org/downloads.html
Or, http://tomcoyote.com/hjt/
===================================
If possible run HJT in Normal mode ( not Safe ) with all your normal startup's working.
HijackThis Tutorial - How to Analyse your own log.
http://spywarewarrior.com/viewtopic.php?t=3624
HijackThis log file analysis ( online )
http://hijackthis.de/index.php?langselect=english
Or,
http://startup.networktechs.com/page-68.html
http://hjt.iamnotageek.com


0

Response Number 2
Name: question (by fixit01)
Date: March 8, 2006 at 08:17:31 Pacific
Reply:

Jcally go to this site and see if it helps you. http://www.registryfix.com/?hop=account10. Yes you do need to have SP2 on your PC. You should also go to Microsofts website and download Windows Defender. Let me know what happens.


0

Response Number 3
Name: jabuck
Date: March 8, 2006 at 19:29:02 Pacific
Reply:

Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. You can download Hijack This at this link http://www.tomcoyote.org/hjt/ then place it into a folder of it's on, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed.

Once saved double click HijackThis.exe, and press "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, Ctrl-A to Select All, and copy its contents into the text editor at this forum.

Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: Help! What is the problem now?

Spyware is the problem. www.computing.net/answers/security/spyware-is-the-problem/8936.html

What is the 1394 connection? www.computing.net/answers/security/what-is-the-1394-connection/1405.html

What is the best spam stopper www.computing.net/answers/security/what-is-the-best-spam-stopper/14599.html