Yrag I need your help.

Published on January 21, 2006 By kona0197 In Personal Computing

I'm having a few problems with XP. Here is a list of the issues:

* System restore had been disabled
* AVG Anti Virus has been disabled
* Device Manager will not work
* No sound at all
* Internet Explorer will not connect
* Firefox will not connect

So I guess I might have got a Virus somehow even though I'm careful. I guess the question is how do I repair or scan for a virus If I can not connect to the net? I'm using Linux right now but I have a floppy drive and a CDRW drive at my disposal. Any help would be appreciated.

Comments (Page 1)

Bichur

on Jan 21, 2006

hello....

I have no idea on the correct answer(s) for this...but I firmly believe that as I type this, somewhere Yrag's "spidey sense" is tingling and he is about to drop everything to answer the call to 'set straight Troll misinformation'.

So....here's what you need to do - unplug everything and take your harddrive to nearest junk yard or construction site that uses an electromagnet......

Now...we wait....

Jafo

on Jan 21, 2006

Kona...obviously you are still accessing the net...so dl hijackthis and Stinger ....both are small enough to fit on a floppy...and can be run on an offline computer.

Post the results of 'hijackthis' on here....they 'should' show what's going on....and Stinger will scan and remove the most common current threats/pests....

yrag

on Jan 22, 2006

unplug everything and take your harddrive to nearest junk yard or construction site that uses an electromagnet......

Actually...........that was my first thought too......

The first two items definitely appear to be vermin related, but the last four make no sense. No gremlin has any vested interest in a computer that is dead or cannot connect to the net and they certainly don't care if you can hear them smacking your system around.

Kona, besides doing what was mentioned in the above posts, you need to look in Taskmgr or Services to see if any strange process(es) is running. If you actually have a virus, trojan, whatever, it has to be running. If you get a name, we can get rid of it. Failing that, I'm confident a shiny new install is in your future.

I'll save the lecture about service packs for another time.

Bichur

on Jan 22, 2006

yrag

on Jan 22, 2006

.....I forget...who's night is it to be on top.....??

Bichur

on Jan 22, 2006

kona0197

on Jan 22, 2006

'll save the lecture about service packs for another time.

I got a new Dell so I have been using SP2 for months now.

Fuzzy Logic

on Jan 22, 2006

Just before xmas I switched back from AVG to Norton AV because twice in a week AVG let a virus through which frelled my pc totally. The only way out was to restore from back-up. Note I said Norton AV, not Norton NIS which is a POS.

Think (for the future) about back-ups. I have two 250Gb drives and Drive Image 7 which is set to do back-ups daily (alternate days for each drive). If I get hit I can use the NAV CD to scan, or simply take 10 mins to restore from back-up.

kona0197

on Jan 22, 2006

OK here is the deal:

Stinger scan: all clean
Ad Aware scan: all clean
Spybot: all clean
System File Checker using the /scannow key: all files are intact

Don't have a clue what is wrong with the system.

IMPORTANT QUESTION: Can I reinstall XP without wiping out the drive and have all my documents still be there after I reinstall or am I in need of another hard drive or DVD RW drive to backup my stuff then reinstall?

Here is the Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 1:53:07 AM, on 1/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Rainlendar\Rainlendar.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\Terry\My Documents\Hoster\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/mywaybiz
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - Startup: OpenOffice.org 1.1.5.lnk = C:\Program Files\OpenOffice.org1.1.5\program\quickstart.exe
O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_SRCV02.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/qtinstall.info.apple.com/tramper/us/win/QuickTimeInstaller.exe
O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1451/ftp.coupons.com/r3302/cpbrkpie.cab
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/download/bin/actxcab.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O20 - AppInit_DLLs: wbsys.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll
O20 - Winlogon Notify: WB - C:\Program Files\Stardock\Object Desktop\WindowBlinds\fastload.dll

Jafo

on Jan 22, 2006

The R3 ....and the BHOs...and anything with Google in it....you can afford to lose ALL of those....for starters...

PurrBall

on Jan 22, 2006

You could try doing a Windows XP Repair instead of complete reinstall.

Corky_O

on Jan 22, 2006

IMPORTANT QUESTION: Can I reinstall XP without wiping out the drive and have all my documents still be there after I reinstall or am I in need of another hard drive or DVD RW drive to backup my stuff then reinstall?

If the system is a Dell, and the OS was supplied by them, you may be limited here - depending on whether or not they gave you the OS on disc, or supplied you with a "Restore Partition". If the latter, then you would be trying to use the restore partition to fix the issue, which will wipe the drive and restore the OS and software to the factory settings.

Alternatively, you can contact Dell and request the OS disc, and then do a repair or clean install with that disc. The repair should leave the programs installed and your documents intact, but of course MS does not guarantee this - so "back-up" is the way to go.

Just for kicks, can you load "msconfig" and select "Diagnostic Startup" > Apply > Reboot > click OK a couple times, and then "Exit without restarting" to load diagnostic. After successfully loading into diagnostic, run "msconfig" again, and select "Normal Startup" > Apply > Reboot.

Then, "Start > Control Panel > Network and Internet Connections > Network Connections > right-click the icon for the LAN you are using, and then select "Repair" > attempt to connect to the internet.

If the internet connection is good, go to Dell's site and download the current "Audio" drivers, and install to attempt to fix the sound issue.

If these work, then the top three issues are left.

kona0197

on Jan 22, 2006

Corky - Dell supplied me with a standard XP disc. I'll try your suggestions.

kona0197

on Jan 24, 2006

Problem solved. A friend was kind enough to let me use a spare HD as a backup drive to store my music and stuff on while I performed a reinstall of XP. I finished up reinstalling all my third party apps today. Thanks everyone.

DaRkFuSsIoOn

on Jan 24, 2006

I'm lost

Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:

Richer content, access to many features that are disabled for guests like commenting on the forums.
Access to a great community, with a massive database of many, many areas of interest.
Access to contests & subscription offers like exclusive emails.
It's simple, and FREE!