As already advised disconnect the problem from the www. Go thru' the assorted references in this post (as you seem to have www access via another safe/clean PC this should be no problem...): http://www.computing.net/windows95/wwwboard/forum/157536.html Take note of input from SVG, The Count Mesich, Davin Caps etc. (they know more about these irritants than I). The above post includes a reference to another post here with input from the above mentioned folks. Using the following utils: CWShredder, SpyBot, AdAware (and possibly BHO Demon) you should be able to remove most (perhaps all) of the pests you seem to have acquired on the PC in question... SVG etc also suggest a couple of others to try; but the above trio/quartet may be all that's need (+ a "good" virus scanner). Also do a full virus scan (perhaps download/use the freebie version of AVG - it's somewhat better than Norton...) If you can't manage to actually get the problem PC to access the AVG site (because of the infections etc.) then perhaps download the freebie version to another safe/clean PC, transfer util to a CDR/RW and load on to the problem PC; also the latest definitions - then run a FULL (every file) scan. Once you have managed to clean out the mess, maintain the utils listed above (update reference data-bases at least weekly - perhaps twice weekly - and maintain AVG(?) updates; also install a decent firewall (ZoneAlarm is the usual recommended freebie). If all else fails then it's probably a reformat/re-install...?

0

Now we are getting somewhere.This is exactly my problem. I have done what you have suggested already.I have had my comp in 2 shops. I have had my isp server change the password. In my setup logs.. they change everything..could I show u an example..that is why I can't download or they make my files unaccessable.. This sounds crazy.. I need someone who can write text I guess..I could show u my config files ..or setup logs so you get an idea..Doing all the above does not help..please trust me .. how this is done ..I have no idea.would u just read a few things and tell me what u think? any former "hackers" out there? My comp has been hijacked and I can't get it.. They are very clever.This is gonna take a brill mind.

0

"I could show u my config files ..or setup logs so you get an idea.." This is a good idea. For ~starters~, post copies of your; c:\msdos.sys c:\config.sys c:\autoexec.bat

0

Hi tootie, jack, OtheHill, trvlr, Dan, hi everyone Posting the contents of your msdos.sys, config.sys and autoexec.bat is a good idea to start with and make sure there isn't anything fishy in there. You can open the files with notepad, copy and paste the contents here. Although, reading the above it may be unlikely that you will be able to, but I would like you to try and run a online virusscan from here: Trend Micro - Free online virus scan on your trouble computer. (http://housecall.antivirus.com/housecall/start_corp.asp) Your next step is to download, onto your clean computer, Spybot - Search and Destroy to check for any Spyware. You also want to grab a copy of Ad-aware to clear out what Spybot misses and vice versa. And while you are downloading the files above also download, HijackThis 1.97.7 Burn the files onto a CD-ROM or CD-ReWritable, to transfer and install them on to your problem computer. (http://security.kolla.de) (http://www.lavasoftusa.com) (http://www.softpedia.com/public/cat/10/17/10-17-69.shtml) Run the three programs on your problem computer, after installing them of course from the CD-ROM. The last one to run is HijackThis, you need to save the log file and post it. As you don't wish to violate the rules of this forum, post them here, Spyware Warrior Forums ran by suzi and her mods, or here at mesich's forum ran by Mesich and me. (http://www.spywarewarrior.com) (http://com1.runboard.com/bmesichsforum) Best Regards and Wishes, The Count, Co-webmaster of mesich.com

0

@ECHO OFF C:\PROGRA~1\NETWOR~1\MCAFEE~1\SCAN.exe C:\ @IF ERRORLEVEL 1 PAUSE REM To make a DOS Boot Diskette; See the file C:\DOSBOOT\DOSBOOT.TXT path C:\WINDOWS;C:\WINDOWS\COMMAND REM To make a DOS Boot Diskette; See the file C:\DOSBOOT\DOSBOOT.TXT [common] dos=high,umb buffers=40 device=c:\windows\himem.sys /testmem:off DEVICE=C:\WINDOWS\EMM386.exe NOEMS rem The below DOS CD ROM driver is not required to run Windows 98. DEVICE=c:\cdrom\OakCdRom.SYS /D:IDECD000 [windows] load= run= NullPort=None device=QuickLink III,QL,FAX: [Desktop] Wallpaper=C:\WINDOWS\PERSON~1.BMP TileWallpaper=1 WallpaperStyle=0 [intl] iCountry=1 ICurrDigits=2 iCurrency=0 iDate=0 iDigits=2 iLZero=1 iMeasure=1 iNegCurr=0 iTime=0 iTLZero=0 s1159=AM s2359=PM sCountry=United States sCurrency=$ sDate=/ sDecimal=. sLanguage=enu sList=, sLongDate=dddd, MMMM dd, yyyy sShortDate=M/d/yy sThousand=, sTime=: [Fonts] [FontSubstitutes] Helv=MS Sans Serif Tms Rmn=MS Serif Times=Times New Roman Helvetica=Arial MS Shell Dlg=MS Sans Serif [Compatibility] _3DPC=0x00400000 _BNOTES=0x224000 _LNOTES=0x00100000 ACAD=0x8000 ACT!=0x400004 ACROBAT=0x04000000 AD=0x10000000 ADW30=0x10000000 ALARMMGR=0x0040000 ALDSETUP=0x00400000 AMIPRINT=0x04000000 AMIPRO=0x04000010 APORIA=0x0100 APPROACH=0x0004 BALER=0x08000000 BMAPP=0x0004 CASMONEY=0x00200000 CAVOIDE=0x00200000 CCMAIL=0x00200000 CCMCWFY=0x80 CHARISMA=0x2000 CONFIG=0x00400000 CORELDRW=0x48000 CORELPNT=0x08000000 COSTAR=0x0004 CP=0x0040 CROSSTIE=0x00000400 DARCH=0x80 DESIGNER=0x00002000 DIRECTOR=0x00800000 DPLANNER=0x00200000 DRAW=0x2000 DS40=0x8000 DTWIN20=0x00000400 EAP=0x0004 ED=0x00010000 EXCEL=0x1000 EXPASTRO=0x04000000 EXTYPWND=0x00200000 FAXVIEW=0x04000000 FAXWORKS=0x00000400 FH4=0x00E08000 FLW2=0x8000 FMPRO=0x00200000 FREEHAND=0x8000 FULLTEXT=0x20000000 GIFTMAKE=0x20000000 GUIDE=0x1000 HDW=0x04800000 HGW=0x8000 HGW2EXE=0x8000 HGW3EXE=0x8000 HJDRAW=0x00400000 IDAPICFG=0x00400000 IDRAW=0x04008000 ILLUSTRATOR=0x8000 IMPROV2=0x00000000 INFOCENT=0x04000000 INSIGHT=0x00000400 INSTAL1=0x00400000 INSTALL=0x00400000 INTERMIS=0x10000000 IS20INST=0x00000000 IVIHEALT=0x00400000 JEOPARDY=0x00200000 JW=0x00000000 KALOAD2=0x00400000 KEYCAD=0x8000 LE_ADMIN=0x00400000 LUI=0x20000000 MAILSPL=0x10000000 MAKER=0x00200000 MAPS1=0x04008022 MATH=0x00000001 MAVIS=0x00200000 MCOURIER=0x0800 MFWIN20=0x02000000 MILESV3=0x1000 MILESV40=0x4 MOZART=0x40000000 MSARTIST=0x00100000 MSBHUMAN=0x4 MSREMIND=0x10000000 MVIEWER2=0x40200000 MYINV=0x00200000 MYST=0x08000000 NAFTA1=0x4008022 NBAMW4V4=0x04000000 NETSET2=0x0100 NOTES=0x200000 NOTSHELL=0x0001 OPERATOR=0x02000000 OUTPOST=0x00000000 OWLAPP=0x00400000 PACKRAT=0x0800 PAINTER=0x00000000 PAWC8DC3=0x00400000 PAWIN=0x4 PEACHW=0x04800004 PIXIE=0x0040 PLANIT=0x0004 PLANNER=0x2000 PLUS=0x1000 PM4=0xA000 PM5APP=0x8000 PP4=0x00000000 PR2=0x2000 PRINTHLP=0x0004 QAPLUSW=0x0004 QLIIFAX=0x00400000 QUAKE=0x80 QW=0x08000000 RELAY=0x20000000 REM=0x8022 RR2CD=0x00200000 RX=0x00000400 RXL=0x00000400 SETUP=0x00000000 SIDEKICK=0x0004 SLEEPER=0x10000000 SOL=0x00400000 SPCB=0x04008000 SPORTJEP=0x00200000 SPWIN20=0x00400000 ST2=0x4008022 STRAUSS=0x40000000 STRAV=0x40000000 SCHUBERT=0x40000000 SSBWIN=0x00200000 SWCWIN=0x00800004 TCVWIN=0x00200000 TCW=0x00400000 TCWIN=0x0004 TERRAIN=0x00400000 TISETUP=0x00200000 TL6=0x08000000 TME=0x0100 TMSWIN=0x20000000 TMTWIN=0x00200000 TMTWINCD=0x00200000 TOUCHUP=0x00400000 TURBOTAX=0x00080000 VB=0x0200 VEWINFIL=0x00400000 VISIO=0x00000004 VISIOHM=0x00000004 VISION=0x0040 W4GL=0x4000 W4GLR=0x4000 WGW=0x00440000 WIN2WRS=0x1210 WINCIM=0x4 WINLINK=0x20000000 WINPHONE=0x0004 WINSIM=0x2000 WINTACH=0x00200000 WORDSCAN=0x02200000 WPWINFIL=0x00000006 WPWIN60=0x00000400 WPWIN61=0x02000400 WSETUP=0x00200000 XPRESS=0x00000008 ZETA01=0x00400000 ZIFFBOOK=0x00200000 [Compatibility32] CLWORKS=0x00A00000 MCAD=0x00600000 PHOTOSHP=0x00208000 PODW=0x00200000 SPSSWIN=0x00200000 TYPSTRY2=0x00200000 V32VM20=0x02000000 VISIO=0x00000000 VISIOHM=0x00000000 WINPHONE=0x00000004 WRDART32=0x00400000 SHELL=0x80000000 USTATION=0x80000000 [Compatibility95] CHAOS OV=0x80000000 CONF=0x00000002 MSDEV=0x00000002 IMAGE32=0x80000000 INST32=0x80000000 [ModuleCompatibility] ACEROOBE=0x0004 AIRNFM=0x0002 ALDNCD=0x0002 AMRES=0x0002 ATM=0x0002 ARCHANGEL=0x0002 CSNOV=0x0002 DEFDEMO=0x0002 DIBWND=0x0002 DIB=0x0002 DS=0x0001 EMLIB=0x0002 EMSAVE=0x0002 FH4=0x0002 GEDIT=0x0002 GEORGE=0x0002 GVBSETUP=0x0002 HRWCD=0x0002 ISLFAXPR=0x0002 KIDDESK=0x0002 KIDSTYPE=0x0000 KNPS=0x0002 LIONKING=0x0002 MAUI_DRV=0x0002 MGXWMF=0x0002 MEMMAP=0x0002 MSARTIST=0x0002 MSCRWRTR=0x0002 MSCUISTF=0x0001 MVIEWER2=0x0002 MWAVSCAN=0x0002 MYINV=0x0002 OLESVR=0x0002 PDOXWIN=0x0002 PLANIT=0x0002 PP3=0x0002 PP4=0x0002 PPPP=0x0002 PXDSRV2=0x0002 REVIEWRT=0x0002 ROULETTE=0x0002 RRIRJ=0x0002 RR1=0x0002 RR2CD=0x0002 STL_DLG=0x0002 TECO=0x0001 TER=0x0002 TLW0LOC=0x0002 TMSWIN=0x0002 USA=0x0002 VOICE=0x0002 WFXVIEW=0x0004 WINFORM=0x0002 WPWIN61=0x0002 [TrueType] FontSmoothing=1 [mci extensions] mid=Sequencer rmi=Sequencer wav=waveaudio avi=AVIVideo cda=CDAudio aif=MPEGVideo aifc=MPEGVideo aiff=MPEGVideo au=MPEGVideo m1v=MPEGVideo m3u=MPEGVideo midi=MPEGVideo mov=MPEGVideo mp2=MPEGVideo mp3=MPEGVideo mpa=MPEGVideo mpe=MPEGVideo mpeg=MPEGVideo mpg=MPEGVideo mpv2=MPEGVideo qt=MPEGVideo snd=MPEGVideo [MCICompatibility] QTWVideo=0x0001 MCIXSND=0x0001 GDAnim=0x0001 [mciavi] [Desktop_Shell] Current=Win [Pscript.Drv] ATMWorkaround=1 [Ports] LPT1:= LPT2:= LPT3:= COM1:=9600,n,8,1,x COM2:=9600,n,8,1,x COM3:=9600,n,8,1,x COM4:=9600,n,8,1,x FILE:= FAX:= [embedding] Package=Package,Package,packager.exe,picture midfile=MIDI Sequence,MIDI Sequence,c:\windows\mplayer.exe /mid,picture SoundRec=Wave Sound,Wave Sound,c:\windows\sndrec32.exe,picture mplayer=Media Clip,Media Clip,c:\windows\mplayer.exe,picture PBrush=Paintbrush Picture,Paintbrush Picture,C:\Progra~1\Access~1\MSPAINT.EXE,picture Paint.Picture=Bitmap Image,Bitmap Image,C:\Progra~1\Access~1\MSPAINT.EXE,picture Wordpad.Document.1=WordPad Document,WordPad Document,C:\PROGRA~1\ACCESS~1\WORDPAD.EXE,picture ComicChat.Room.2=Microsoft Chat Room,Microsoft Chat Room,C:\PROGRA~1\Chat\CChat.exe,picture Imaging.Document=Image Document,Image Document,c:\windows\KodakImg.Exe,picture WangImage.Document=Image Document,Image Document,c:\windows\KodakImg.Exe,picture avifile=Video Clip,Video Clip,c:\windows\mplayer.exe /avi,picture [Extensions] [Mail] MAPI=1 MAPIX=1 [Devices] QuickLink III=QL,FAX: [PrinterPorts] QuickLink III=QL,FAX:,15,45 [Sounds] SystemDefault=, [MCI Extensions.BAK] aif=MPEGVideo aifc=MPEGVideo aiff=MPEGVideo au=MPEGVideo m1v=MPEGVideo m3u=MPEGVideo midi=MPEGVideo mov=MPEGVideo mp2=MPEGVideo mp3=MPEGVideo mpa=MPEGVideo mpe=MPEGVideo mpeg=MPEGVideo mpg=MPEGVideo mpv2=MPEGVideo qt=MPEGVideo snd=MPEGVideo boot] oemfonts.fon=vgaoem.fon shell=Explorer.exe system.drv=system.drv drivers=mmsystem.dll power.drv user.exe=user.exe gdi.exe=gdi.exe sound.drv=mmsound.drv dibeng.drv=dibeng.dll comm.drv=comm.drv mouse.drv=mouse.drv keyboard.drv=keyboard.drv *DisplayFallback=0 fonts.fon=vgasys.fon fixedfon.fon=vgafix.fon 386Grabber=vgafull.3gr display.drv=pnpdrvr.drv [keyboard] keyboard.dll= oemansi.bin= subtype= type=4 [boot.description] system.drv=Standard PC keyboard.typ=Standard 101/102-Key or Microsoft Natural Keyboard mouse.drv=Standard mouse aspect=100,96,96 display.drv=SiS 530 [386Enh] ebios=*ebios woafont=dosapp.fon mouse=*vmouse, msmouse.vxd device=*dynapage device=*VCD device=*vpd device=*int13 device=*enable keyboard=*vkd display=*vdd,*vflatd EMMExclude=C000-CFFF [NonWindowsApp] TTInitialSizes=4 5 6 7 8 9 10 11 12 13 14 15 16 18 20 22 [power.drv] [drivers] wavemapper=*.drv MSACM.imaadpcm=*.acm MSACM.msadpcm=*.acm wave=mmsystem.dll midi=mmsystem.dll [iccvid.drv] [mciseq.drv] [mci] cdaudio=mcicda.drv sequencer=mciseq.drv waveaudio=mciwave.drv avivideo=mciavi.drv videodisc=mcipionr.drv vcr=mcivisca.drv MPEGVideo=mciqtz.drv [vcache] [Password Lists] DEFAULT=C:\WINDOWS\DEFAULT.PWL HP AUTHORIZED CUSTOM=C:\WINDOWS\Hpauthor.pwl [drivers32] msacm.lhacm=lhacm.acm VIDC.VDOM=vdowave.drv MSACM.imaadpcm=imaadp32.acm MSACM.msadpcm=msadp32.acm MSACM.msgsm610=msgsm32.acm msacm.msg711=msg711.acm MSACM.trspch=tssoft32.acm vidc.CVID=iccvid.dll VIDC.IV31=ir32_32.dll VIDC.IV32=ir32_32.dll vidc.MSVC=msvidc32.dll VIDC.MRLE=msrle32.dll msacm.msg723=msg723.acm vidc.M263=msh263.drv vidc.M261=msh261.drv VIDC.IV50=ir50_32.dll msacm.iac2=C:\WINDOWS\SYSTEM\IAC25_32.AX msacm.l3acm=C:\WINDOWS\SYSTEM\L3CODECA.ACM msacm.msaudio1=msaud32.acm [MSNP32] 0 22=13 22 [TTFontDimenCache] 0 4=2 4 0 5=3 5 0 6=4 6 0 7=4 7 0 8=5 8 0 9=5 9 0 10=6 10 0 11=7 11 0 12=7 12 0 13=8 13 0 14=8 14 0 15=9 15 0 16=10 16 0 18=11 18 0 20=12 20 0 22=13 22 ndishlp$] DriverName=ndishlp$ Bindings= [protman$] DriverName=protman$ [data] version=v4.10.2222 netcards= [NETBEUI$] DriverName=NETBEUI$ sessions=10 ncbs=12 ndishlp$] DriverName=ndishlp$ Bindings= [protman$] DriverName=protman$ [data] version=v4.10.2222 netcards= [NETBEUI$] DriverName=NETBEUI$ sessions=10 ncbs=12 any former "hackers" out there? My comp has been hijacked and I can't get it.. They are very clever.This is gonna take a brill mind.

0

; SETUPC.INF ; This is the Setup information file for the base ; components for the Windows 1 product. ; Copyright 1993-1997, Microsoft Corporation [version] LayoutFile= Layout.inf, Layout1.inf, Layout2.inf signature="$CHICAGO$" SetupClass=BASE [DestinationDirs] msdbl.files = 13 ; LDID_CMD del.old.msdos.files = 34 ; LDID_OLD_DOS ren.old.msdos.files = 34 ; LDID_OLD_DOS del.premsdos5.files = 34 ; LDID_OLD_DOS del.old.msdos.root = 30 ; LDID_BOOT (root of boot drive) dxxspace.bat.files = 34 ; LDID_OLD_DOS ren.dxxspace.utils = 34 ; LDID_OLD_DOS del.dxxspace.utils = 34 ; LDID_OLD_DOS del.oldwinboot = 32 ; LDID_OLD_WINBOOT ; Review: not needed in future products del.cmd = 13 ; LDID_CMD del.oldnet = 11 ; LDID_SYS del.oldnet.win = 25 ; LDID_SHARED del.win.reboot = 25 ; LDID_SHARED del.bootroot = 30 ; LDID_BOOT ; Root dir of boot drive NewWin.Shared = 25 ; LDID_SHARED NewWin.Ren = 30 ; LDID_BOOT NewWin.Mapi = 11 ; LDID_SYSTEM PidGen.Files = 10 ; LDID_WIN PidSet.Files = 10 ; LDID_WIN un.copy = 13 ; LDID_CMD un.del = 13 ; LDID_CMD un.del.w95undo.boot = 30 ; LDID_BOOT un.del.w95undo.host = 31 ; LDID_BOOT_HOST un.del.w98undo.Gold.boot = 30 ; LDID_BOOT un.del.w98undo.Gold.host = 31 ; LDID_BOOT_HOST Win95Upg.Vmm.Files = 22 ; LDID_VMM32 NotWin95Upg.Sys.Files=11 ; LDID_SYS Awfax.Copy.Sys = 11 Awfax.Copy.Inf = 17 UpgradeWIN.DelFile.IOSubSys = 12 ; IOSUBSYS UpgradeWIN.Delfile.Inf = 17 ; LDID_INF UpgradeWIN.Delfile.InfOther = 17,other UpgradeWIN.DelFile.System = 11 ; LDID_SYS [Win95Upg] ; Used to handle specific Win95 upgrade handling CopyFiles = Win95Upg.Vmm.Files, Win95Upg.Sys.Files UpdateInis= Win95Upg.Inis [NotWin95Upg] ; Called when not Win95 upgrade [Win95Upg.Inis] [Win95Upg.Vmm.Files] [Win95Upg.Sys.Files] [SetupNewWIN] ; Used to cleanup/do stuff when doing a new/clean installation CopyFiles = NewWin.Shared, NewWin.Mapi RenFiles = NewWin.Ren DelReg = NewWin.DelReg, Temp.DelReg AddReg = NewWin.AddReg, NewWin.AddReg.HKCU ; Currently used to order sections in INI files similar to that in Win 3.1 UpdateInis = Setup.Init.Inis PerUserInstall = NewWin.pui [SetupUpgradeWIN] ; Used to cleanup/do stuff for an upgrade case DelReg = Temp.DelReg UpdateInis = SU.Update.Inis AddReg = UpgradeWIN.AddReg DelFiles = UpgradeWIN.DelFile.IOSubSys, UpgradeWIN.Delfile.Inf, UpgradeWIN.Delfile.InfOther, UpgradeWIN.DelFile.System [Temp.DelReg] ; Temp.DelReg is only for cleanup of keys from previous builds ; Last five Keys Added By swami to Clean Up CSP HKLM,"%KEY_OPTIONAL%","RPlay.Install" HKLM,"%KEY_OPTIONAL%","SwDir" HKLM,"%KEY_OPTIONAL%","SwFlash" HKLM,"%KEY_OPTIONAL%","NetShow" HKLM,"%KEY_OPTIONAL%\RPlay.Install" HKLM,"%KEY_OPTIONAL%\SwDir" HKLM,"%KEY_OPTIONAL%\SwFlash" HKLM,"%KEY_OPTIONAL%\NetShow" HKLM,"%KEY_CURRENT%\App Paths\nsplayer.exe" HKLM,"%KEY_CSP%" HKLM,"Software\Microsoft\Windows\CurrentVersion\Setup\Updates","Windows 98 Consumer Update" HKLM,"Software\Microsoft\Active Setup\Installed Components\{91d67b80-5482-11d2-bcc5-0000f83002c6}" HKLM,"Software\Microsoft\Windows\CurrentVersion","Update Completed Backup" HKLM,"Software\Microsoft\Windows\CurrentVersion","UpdateVersion" HKLM, "Enum\Root\OBOE" HKLM, "System\CurrentControlSet\Services\Class\Serial_T" HKLM,"Software\Microsoft\Windows\CurrentVersion\RunServices","HDDPwd" [SetupNewDOS] ; This section will be installed if the user is doing new/clean install and ; the new DOS (CMD) dir is different from the prev. one. ; Use LDID 34 as the old dos dir. ; backup d??space utilities and replace w/ stub batch files RenFiles = ren.dxxspace.utils CopyFiles = dxxspace.bat.files [SetupUpgradeDOS] ; Used to nuke files from their old DOS dir, if it is an upgrade and the ; new DOS(CMD) dir is different from prev. one, we GenInstall() this section. ; Use 34 as LDID for old dos dir (LDID_OLD_DOS) when adding DelFiles= ; delete d??space utilities and replace w/ stub batch files ; and delete ms-dos utils that are updated w/ Win 95 versions CopyFiles = dxxspace.bat.files DelFiles = del.old.msdos.files, del.dxxspace.utils, del.old.msdos.root RenFiles = ren.old.msdos.files [SetupCleanupOldDOS] ; Used to cleanup/do stuff when prev. DOS version < 5.0 DelFiles = del.premsdos5.files [Setup.RetailSKU] CopyFiles = PidSet.Files AddReg = RetailSKU.Reg UpdateInis = Oeminfo.inis [Oeminfo.inis] ; remove Line1 to prevent Support Information from showing up in sysdm %11%\oeminfo.ini, "Support Information", "Line1=*" [Setup.OEMSKU] CopyFiles = PidGen.Files,PidSet.Files [Setup.OEMUpgradeSKU] CopyFiles = PidSet.Files AddReg = RetailSKU.Reg [Setup.Upgrade.FaxIsAnOC] ; This is an upgrade install and Fax is an available OC CopyFiles = Awfax.Copy.Inf [Setup.Upgrade.FaxInstalled] ; This is an upgrade install and Fax is installed. CopyFiles = Awfax.Copy.Sys AddReg = AwFax.Addreg ; These files are needed for IE4 and Win98 if Fax is installed. ; Update these files if Fax is installed [Awfax.Copy.Sys] awfxex32.exe,,,1 awfxcg32.dll,,,1 awkrnl32.dll,,,1 [AwFax.Addreg] HKLM,%KEY_UNINSTALL%\msawfax,"DisplayName",,"%FAXDesc%" HKLM,%KEY_UNINSTALL%\msawfax,"UninstallString",,"rundll setupx.dll,InstallHinfSection FAXuninstall 132 %17%\awfax.inf" [Awfax.Copy.Inf] awfax.inf [UpgradeWIN.DelFile.IOSubSys] ideatapi.mpd,,,1 piixvsd.vxd,,,1 [UpgradeWIN.Delfile.Inf] ideatapi.inf,,,1 [UpgradeWIN.Delfile.InfOther] intelideatapi.inf,,,1 [UpgradeWIN.DelFile.System] serial_t.vxd,,,1 oboe.vxd,,,1 hddpwd.drv,,,1 [Lexmark_Remove] DelReg = Lexmark.delreg [Lexmark.delreg] ; remove LexStart from Run branch of registry HKLM,"%KEY_RUN%",LexStart HKLM,"System\CurrentControlSet\Control\Print\Monitors\Lexmark Network Printer Monitor" [PidGen.Files] pidgen.dll [PidSet.Files] pidset.exe [RetailSKU.Reg] HKLM,%KEY_RUNONCE%,"RunPidSet",,"PIDSET" [NewWin.DelReg] ; REVIEW: check this list and add/del as appropriate. Some of ; these branches that are removed are relevant only to interim releases ; where these obsolete keys were added. This might not be an issue for ; future products. Also, we might be able to move these to [SetupInit] section. ; Warning: if you del the HKLM,SOFTWARE\CLASSES branch, OLE 2 apps might not run ; and will have to be re-installed. HKLM,SOFTWARE\FONTS HKLM,SOFTWARE\PRODUCTS HKLM,SOFTWARE\MICROSOFT\WINDOWS\4.0 HKLM,SYSTEM\CURRENTCONTROLSET\CONTROL HKLM,SYSTEM\MEDIAEXTENSIONS [NewWin.AddReg] ; Set default wallpaper to nothing for clean install: ; (runonce.exe sets the wallpaper to these values when it's done) HKLM,%KEY_CURRENT%\Setup,"WallPaper",,"" HKLM,%KEY_CURRENT%\Setup,"TileWallpaper",,"0" ; Run once wrapper entry to run time zone control panel: HKLM, %KEY_RUNONCE%\Setup,"%SetTimeZone_Desc%",,"RUNDLL32.EXE SHELL32.DLL,Control_RunDLL TIMEDATE.CPL,,/f" ;RunOnceEx group 101 for clean installs only HKLM,"Software\Microsoft\Windows\CurrentVersion\RunOnceEx\101","006",,"%11%\browseui.dll|DllInstall|I,ForceAssoc" HKLM,"Software\Microsoft\Windows\CurrentVersion\RunOnceEx\101","011",,"%11%\shdocvw.dll|DllInstall|I,ForceAssoc" [NewWin.AddReg.HKCU] HKCU,"Control Panel\Appearance",Current,,"%WINDOWS_DEFAULT%" [SetupcPerUser] AddReg = NewWin.AddReg.HKCU [NewWin.pui] GUID = "SetupcPerUser" DisplayName = %PUI_DESC_SETUPC% Version = %PUI_VERSION% IsInstalled = 1 StubPath = "rundll.exe %11%\setupx.dll,InstallHinfSection SetupcPerUser 64 %17%\setupc.inf" [UpgradeWIN.AddReg] [NewWin.Shared] dosprmpt.pif [NewWin.Mapi] mapi32.dll [NewWin.Ren] ;rename win.bat in root if clean install win_bat.bak,win.bat [SetupBeforeReboot] ; This section is GenInstall-ed just before we update the root files, etc. ; This is the place where you can delete more stuff like C:\WINBOOT files, ; DBLSPACE.* if applicable, etc. DelFiles = del.oldwinboot, del.cmd, del.oldnet, del.win.reboot, del.oldnet.win, del.bootroot DelReg=del.oldnetreg, DelCspReg UpdateInis = msdos.sys.reboot.inis, DelBackup [DelCspReg] HKLM,Software\Microsoft\Windows\CurrentVersion\Setup\Preserve [DelBackup] wininit.ini, Rename,,"NUL=%11%\PreCopy\csp.cab" wininit.ini, Rename,,"DIRNUL=%10%\$win98~1" [del.bootroot] ;These would be left over from a single-msdos-app mode session: autoexec.app autoexec.wos config.app config.wos [del.oldwinboot] ; REVIEW: this section not needed in future products ndishlp.sys net.exe net.msg neth.msg netstart.bak netstart.bat odihlp.exe protman.dos protman.exe protocol.bak protocol.ini [del.cmd] COMMAND.COM ; REVIEW: Not needed in future releases. [del.oldnet] am1500t.386 ee16.386 elnk3.386 elnkii.386 ibmtok.386 declan.386 ne1000.386 ne2000.386 nice.386 ubnei.386 elnk16.386 elnkmc.386 ne3200.386 pppmac.386 proteon.386 snip.386 wsock.386,,,32 ; suppress version conflicts wstcp.386 wsipx.386 vserver.386 nwserver.386 vredir.386 nwredir.386 ndis.386 ndis2sup.386 msodisup.386 filesec.386 mssp.386 nscl.386 nwlink.386 nwnblink.386 nwsp.386 nwsup.386 snapshot.386 nw416.dll nwlogin3.exe lscon.exe vnetsup.386 vnetbios.386 netbeui.386 netcp.cpl netlib32.dll wfwnet.drv [del.oldnet.win] admincfg.exe admincfg.adm [del.oldnetreg] HKLM,System\CurrentControlSet\Control\NetworkProvider\Order,SCRSAVE [msdos.sys.reboot.inis] ;Add lines to msdos.sys to make it >1024B for compatibility w/ other apps. ;(Done right before we reboot) %31%\msdos.sys,Options,,"WinVer=" %31%\msdos.sys,Options,,";" %31%\msdos.sys,Options,,";The following lines are required for compatibility with other programs." %31%\msdos.sys,Options,,";Do not remove them (MSDOS.SYS needs to be >1024 bytes)." %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxa" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxb" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxc" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxd" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxe" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxf" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxg" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxh" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxi" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxj" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxk" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxl" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxm" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxn" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxo" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxp" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxq" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxr" %31%\msdos.sys,Options,,";xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxs" [Setup.Init.Inis] ; THIS IS ONLY EXECUTED ON A CLEAN INSTALL ; Use a non-existent line spec. to delete from the INI files ; For Boot and 386Enh we use lines that need to be added anyway ;Create System.ini entries for Machine (only done for Clean Install-- ;on an upgrade we leave whatever the user has installed in place) system.ini,boot, ";DelMe" system.ini, keyboard, ";DelMe" system.ini, boot.description, ";DelMe" system.ini,386Enh,,"ebios=*ebios" wininit.ini, CombineVxDs,,"%22%\ebios.vxd=%11%\vmm32.vxd" win.ini, windows, ";DelMe" win.ini, Desktop, ";DelMe" win.ini, intl, ";DelMe" win.ini, fonts, ";DelMe" win.ini, FontSubstitutes, ";DelMe" win.ini, Compatibility, ";DelMe" win.ini, Compatibility32, ";DelMe" ;make ghost entries in msdos.sys to get order of sections correct: %31%\msdos.sys,Paths, ";DelMe" %31%\msdos.sys,Options,,"BootMulti=1" [SU.Update.Inis] ; copy over standard screen savers system.ini,boot,"scrnsave.exe=%25%\bezier.scr","scrnsave.exe=%11%\%BEZIER%.scr",1 system.ini,boot,"scrnsave.exe=%25%\ssmarque.scr","scrnsave.exe=%11%\%SSMARQUE%.scr",1 system.ini,boot,"scrnsave.exe=%25%\ssmyst.scr","scrnsave.exe=%11%\%SSMYST%.scr",1 system.ini,boot,"scrnsave.exe=%25%\scrnsave.scr","scrnsave.exe=%11%\%SCRNSAVE%.scr",1 system.ini,boot,"scrnsave.exe=%25%\ssflywin.scr","scrnsave.exe=%11%\%SSFLYWIN%.scr",1 system.ini,boot,"scrnsave.exe=%25%\ssstars.scr","scrnsave.exe=%11%\%SSSTARS%.scr",1 ;make ghost entries in msdos.sys to get order of sections correct: %31%\msdos.sys,Paths, ";DelMe" %31%\msdos.sys,Options, ";DelMe" [del.win.reboot] ; Delete all CMD files from the windows dir just before the reboot since these are ; in the Windows\Command dir and shouldn't be in the Windows dir. ; NOTE: THIS SECTION SHOULD BE AN EXACT COPY OF the [cmd.files] section. ansi.sys attrib.exe chkdsk.exe choice.com country.sys dblspace.sys Debug.exe deltree.exe diskcopy.com display.sys doskey.com drvspace.bin drvspace.sys ;ok to delete this--it's copied in applets.inf edit.com edit.hlp ega.cpi extract.exe fc.exe fdisk.exe find.exe format.com keyb.com keyboard.sys label.exe mem.exe mode.com more.com move.exe mscdex.exe nlsfunc.exe scandisk.exe scandisk.ini share.exe sort.exe start.exe subst.exe sys.com xcopy.exe xcopy32.exe,,,4 ;Force it xcopy32.mod [del.old.msdos.files] ansi.sys attrib.exe chkdsk.exe choice.com country.sys Debug.exe DEFRAG.HLP deltree.exe diskcopy.com display.sys doskey.com drvspace.bin edit.com edit.hlp ega.cpi fc.exe fdisk.exe find.exe format.com keyb.com keyboard.sys label.exe mem.exe mode.com more.com move.exe mscdex.exe MWUNDEL.EXE MWUNDEL.HLP nlsfunc.exe scandisk.exe scandisk.ini share.exe sort.exe start.exe subst.exe sys.com xcopy.exe ;others not copied in the [cmd.files] section emm386.exe networks.txt os2.txt ramdrive.sys readme.txt setver.exe smartdrv.exe ;Compaq DOS 5.0 cache.exe cemm.exe cemmp.exe dos5help.chd fastart.exe fsedit.exe help.exe tu.exe upcu.exe ;Non MS-DOS Operating Systems: delpurge.exe delwatch.exe diskmap.exe diskopt.exe dosbook.exe hidos.sys lock.exe login.exe memmax.exe password.exe rendir.exe setup.exe sulfnbk.exe sys.com taskmax.exe taskmax.ini touch.exe uninstal.exe xdel.exe xdir.exe [ren.old.msdos.files] mode_dos.com, mode.com [del.old.msdos.root] WINA20.386 [ren.dxxspace.utils] ; backup ms-dos 6.x disk compression tools (only done on clean install) DRVSPACE.EX~, DRVSPACE.exe DBLSPACE.EX~, DBLSPACE.exe DEFRAG.EX~, DEFRAG.exe SCANDISK.EX~, SCANDISK.exe [del.dxxspace.utils] ; Delete ms-dos 6.x disk compression tools (only done on upgrade install) DRVSPACE.EXE DBLSPACE.EXE DEFRAG.EXE SCANDISK.EXE [dxxspace.bat.files] ; copy over dummy stubs for ms-dos 6.x disk compression tools DRVSPACE.BAT DBLSPACE.BAT DEFRAG.BAT SCANDISK.BAT ; If user has MS compression installed and he has MS DBLSPACE.BIN ; the foll. section is GenInstalled. [SetupMSDblSpace] CopyFiles = msdbl.files UpdateCfgSys = config_dummy [msdbl.files] dblspace.sys,drvspace.sys,,32 ;32 flag suppresses ver conflict dlg ; empty section -- guarantees path fixup for any DBLSPACE.SYS in config.sys! [config_dummy] ; If user has MS compression installed but he has a non MS DBLSPACE.BIN ; the foll. section is GenInstalled. ; [SetupNonMSDblSpace] [del.premsdos5.files] append.com asgnpart.com backup.exe bootf.com cache.sys cemm.exe cemmp.exe chkdsk.exe cmpqadap.com compact.exe configur.com Debug.exe detect.com diskcomp.exe diskcopy.exe diskinit.com diskinit.exe dosutil.meu dskscan.exe dsksetup.com edlin.exe emm386.sys enhdisk.sys fastopen.exe fastart.exe fdisk.com filesys.exe for150.exe format.exe gdu.exe graftabl.exe graphics.exe hardrive.sys hpcache.com hpdcache.com ifsfunc.exe indskbio.sys install.exe keyb32.com keybchf.com keybchg.com keybda.com keybfr.com keybfr.exe keybgk.com keybgr.com keybgr.exe keybit.com keybit.exe keybno.com keybsp.com keybsv.exe keybsw.com keybuk.com keybuk.exe keybus.com label.exe mode.exe mvbuild.exe pamcode.com paminstl.com part.exe password.exe prep.exe recover.exe restore.exe select.com select.dat select.exe select.hlp select.prt select1.dat select2.dat setup.exe shell.clr shell.hlp shell.meu shellb.com shellc.exe tree.exe vdisk.sys xmaem.sys zcache.sys zspool.com ; These will be called before setup queued any files to copy [PreQueueProviders] netdi.dll,SBSTREECOPYNWBOOTDISK ; ; IrDA Infrared devices were Ports (or Infrared) class in OSR2, ; but are Net class in Win98. ; Setupx/Netdi do not deal well with upgrading a device from another ; class to Net class. ; So we call this entrypoint during setup to delete all PnP Infrared devices. ; This will allow them to cleanly PnP during 1st boot. ; (Note, do this before file copy, because setup's copy of the registry ; may already be cached when file copy is done). ; ; infrared.dll,CleanUpPnPIrDevices ; These are called before any files are copied. [BeforeProvider] msprint.dll, SETUPENTRY ; These are called once all the files (.infs etc) ; have been copied. Also the directory hierarchy is there. Also, we are ; about ready to reboot after flushing TP cache. [AfterProvider] netdi.dll,NDICLEANUPB4REBOOT ;The SURPLSETUP must be the last afterprovider to get things in the rpl image. setupx.dll,SURPLSETUP ; These are all the keys that are not deleted in HKLM if doing a ; clean install. [CleanoutReg] HARDWARE SOFTWARE SYSTEM CONFIG ENUM REGISTRY [SetverEntries] APPEND.EXE BASIC.COM BASICA.COM DISKCOMP.EXE EXTDISK.SYS GRAPHICS.COM FASTOPEN.EXE MODE_DOS.COM PRINT.EXE REPLACE.EXE RESTORE.EXE SCPLUS.EXE SCSIC710.SYS TREE.COM VDISK.SYS [SetupUnInstallYes] CopyFiles = un.copy AddReg = Un.AddReg DelReg = Un.DelReg DelFiles = un.del, un.del.w95undo.boot, un.del.w95undo.host, un.del.w98undo.Gold.boot, un.del.w98undo.Gold.host [SetupUnInstallNo] DelReg = Un.DelReg, Un.Win98Gold.DelReg DelFiles = un.del, un.del.w95undo.boot, un.del.w95undo.host, un.del.w98undo.Gold.boot, un.del.w98undo.Gold.host [un.copy] uninstal.exe [un.del] uninstal.exe [un.del.w95undo.boot] w95undo.dat,,,1 w95undo.ini,,,1 [un.del.w98undo.Gold.boot] winundo.dat,,,1 winundo.ini,,,1 [un.del.w95undo.host] w95undo.dat,,,1 w95undo.ini,,,1 [un.del.w98undo.Gold.host] winundo.dat,,,1 winundo.ini,,,1 [Un.AddReg] HKLM,%KEY_UNINSTALL%\Windows,DisplayName,,"%Win_DESC%" HKLM,%KEY_UNINSTALL%\Windows,UninstallString,,"%13%\uninstal.exe" HKLM,%KEY_UNINSTALL%\WindowsCleanup,DisplayName,,"%Win_Cln_DESC%" HKLM,%KEY_UNINSTALL%\WindowsCleanup,UninstallString,,"%13%\uninstal.exe /delete" ; remove the ability to uninstall Win95 to get back to Win31 [Un.DelReg] HKLM,%KEY_UNINSTALL%\Windows95 HKLM,%KEY_UNINSTALL%\Windows95Cleanup ; remove the ability to uninstall Win98 gold [Un.Win98Gold.DelReg] HKLM,%KEY_UNINSTALL%\Windows HKLM,%KEY_UNINSTALL%\WindowsCleanup [Setup.Source.Files] base4.cab base5.cab base6.cab catalog3.cab catalog4.cab driver10.cab driver11.cab driver12.cab driver13.cab driver14.cab driver15.cab driver16.cab driver17.cab driver18.cab driver19.cab driver20.cab driver21.cab driver22.cab driver23.cab driver24.cab ebd.cab mini.cab mini1.cab mini2.cab mini3.cab net6.cab net7.cab net8.cab net9.cab net10.cab net11.cab net12.cab precopy1.cab precopy2.cab precopy3.cab suhelper.bin win98_21.cab win98_22.cab win98_23.cab win98_24.cab win98_25.cab win98_26.cab win98_27.cab win98_28.cab win98_29.cab win98_30.cab win98_31.cab win98_32.cab win98_33.cab win98_34.cab win98_35.cab win98_36.cab win98_37.cab win98_38.cab win98_39.cab win98_40.cab win98_41.cab win98_42.cab win98_43.cab win98_44.cab win98_45.cab win98_46.cab win98_47.cab win98_48.cab win98_49.cab win98_50.cab win98_51.cab win98_52.cab win98_53.cab win98_54.cab win98_55.cab win98_56.cab win98_57.cab win98_58.cab win98_59.cab win98_60.cab win98_61.cab win98_62.cab win98_63.cab win98_64.cab win98_65.cab win98_66.cab win98_67.cab win98_68.cab win98_69.cab win98_70.cab win98_71.cab win98_72.cab win98_73.cab win98_74.cab win98_75.cab win98_76.cab win98_77.cab win98_78.cab win98_79.cab win98_ol.cab channels chl99.cab content deltemp.com dossetup.bin extract.exe ols save32.com scandisk.exe scandisk.pif scanprog.exe scanreg.exe setup.exe setup.txt setup0.wav setup1.wav setup2.wav smartdrv.exe suback.bin subackbb.bin sucatreg.exe tour w98setup.bin wb16off.exe xmsmmgr.exe oemsetup.bin oemsetup.exe ;This is for the Disk Cleanup applet when it removes the Windows Uninstall files [DiskCleanup.Uninstall] DelReg=DCUninstall.DelReg [DCUninstall.DelReg] HKLM,%KEY_UNINSTALL%\Windows HKLM,%KEY_UNINSTALL%\WindowsCleanup [Bad_BIOS_List] [Data] ;#ifdef CCP_ON ; CCP=1 ;#else CCP=0 ;#endif [Strings] ;Non-Localizable strings: KEY_CURRENT = "Software\Microsoft\Windows\CurrentVersion" KEY_UNINSTALL = "Software\Microsoft\Windows\CurrentVersion\Uninstall" KEY_OPTIONAL = "SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\OptionalComponents" KEY_RUNONCE = "Software\Microsoft\Windows\CurrentVersion\RunOnce" KEY_RUN = "Software\Microsoft\Windows\CurrentVersion\Run" KEY_CSP = "Software\Microsoft\Windows\CurrentVersion\Uninstall\Windows 98 Consumer Update" ;Localizable strings: WINDOWS_DEFAULT = "Windows Standard" ; must match name of default color scheme FAXDesc = "Microsoft Fax" SetTimeZone_Desc= "Time zone" BEZIER = "Curves~1" ; short (8 char) version of "Curves and Colors" SSMARQUE = "Scroll~1" ; short (8 char) version of "Scrolling Marquee" SSMYST = "Mystif~1" ; short (8 char) version of "Mystify Your Mind" SCRNSAVE = "BlankS~1" ; short (8 char) version of "Blank Screen" SSFLYWIN = "Flying~1" ; short (8 char) version of "Flying Windows" SSSTARS = "Flying~2" ; short (8 char) version of "Flying Through Space" Win_DESC = "Uninstall Windows 98 Second Edition" Win_Cln_DESC = "Delete Windows 98 Second Edition uninstall information" PUI_VERSION = "4,10,1,1" PUI_DESC_SETUPC = "Windows Setup - Setup" any former "hackers" out there? My comp has been hijacked and I can't get it.. They are very clever.This is gonna take a brill mind.

0

thks for your help... and hope u can bust these guys!!! If you need anything else.. I hope I'm posting this correctly? any former "hackers" out there? My comp has been hijacked and I can't get it.. They are very clever.This is gonna take a brill mind.

0

goto windows update and download the (mydoom) remove software tools, and be done with all this.

0

Hi tootie, jack, OtheHill, trvlr, Dan, video, hi everyone You have provided, better say overwhelmed, us with more than we ask for. :-) That's okay, it's better to provide more information as required other than that we have to try and drag it out of you. :-) On the other hand, I truly hope you aren't so free giving all the time cause it would make you a easy victim of those with improper intentions. Like hackers, those writing viruses etc. Your Autoexec.bat, Config.sys, System.ini and Win.ini don't contain any traces of that they have been tampered with. The first two could use some optimization, if you really need them, but other than that they are untouched. The System.ini and Win.ini seem to be alright, on first sight, to me. If response #12 represents your Setuplog.txt, not exactly sure, it's of no interest to me or anyone in this case. Sorry. Could you post the contents of your msdos.sys, to be found in the root of your C:\ drive? Just to make sure that hasn't been tampered with. It's normally a hidden, system, read-only file, so you might need to adjust Explorer settings. (View -> Options -> Show all, hidden, system files or Tools -> Folder Options -> View, Show hidden files and folders, uncheck Hide protected operating system files) Have you tried to run the online virusscan and the other suggestions made earlier? Best Regards and Wishes, The Count, Co-webmaster of mesich.com

0

[Paths] WinDir=c:\windows WinBootDir=c:\windows HostWinBootDrv=c [Options] BootMulti=1 BootGUI=1 DoubleBuffer=1 ; ;The following lines are required for compatibility with other programs. ;Do not remove them (MSDOS.SYS needs to be >1024 bytes). ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxa ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxb ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxc ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxd ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxe ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxf ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxg ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxh ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxi ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxj ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxk ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxl ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxm ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxn ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxo ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxp ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxq ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxr ;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxs AutoScan=1 WinVer=4.10.2222 any former "hackers" out there? My comp has been hijacked and I can't get it.. They are very clever.This is gonna take a brill mind.

0

my config.sys fileREM To make a DOS Boot Diskette; See the file C:\DOSBOOT\DOSBOOT.TXT [common] dos=high,umb buffers=40 device=c:\windows\himem.sys /testmem:off DEVICE=C:\WINDOWS\EMM386.exe NOEMS rem The below DOS CD ROM driver is not required to run Windows 98. DEVICE=c:\cdrom\OakCdRom.SYS /D:IDECD000 and I have tried all of the above.. I can't get anywhere.. I just get these error messages :done but with script errors .. timesout.. this page cannot be displayed, cannot verify signature and more.thks for looking at this .. hopefully you will be able to see what is going on? any former "hackers" out there? My comp has been hijacked and I can't get it.. They are very clever.This is gonna take a brill mind.

0

Hi tootie, jack, OtheHill, trvlr, Dan, video, hi everyone Okay, tootie, the msdos.sys looks fine to. :-) Now since you aren't able to run a online virusscan, let's skip it for now and proceed with downloading Ad-Aware, Spybot Search & Destroy and HijackThis on to your clean computer. For the links to the programs see response #10. When you have downloaded the files, burn them onto a CD-ROM or CD-RW, put the CD-ROM in the CD-ROM drive of the troubled computer and install the programs. Run Ad-Aware, have clean all the nasty things it finds. Do the same with Spybot. When you are done running both programs, run HijackThis and save the Log file to a floppy disk. Take out the floppy disk from the troubled computer and put it into your clean computer, run a virusscan on the floppy. Open the Log file with notepad, and post it here: mesich's forum or at suzi her Spyware Warrior Forums, ASAP* member. And while you post the Log in either forum, refer to this thread to give those over there a idea of the situation. (http://com1.runboard.com/bmesichsforum) (http://www.spywarewarrior.com) * Alliance of Security Analysis Professionals (http://www.a-sap.org) Best Regards and Wishes, The Count, Co-webmaster of mesich.com

0