Windows Theme Changed to Classic and no Internet Connection
Touch Forum Moderator Just follow the guide/instructions You have got here:
Still no antivirus - Hmm
Post the log´s in this thread
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Back to Top
weeleong87 This are all my files after I run the AVG scan
This is my HIJACKTHIS file
Post Edited (weeleong87) : 17-08-2007 13:54:45 GMT
Back to Top
Touch Forum Moderator 1. Download AVG Anti-Virus Free Edition 2. AVG Free Anti-Virus AVG website . 3. Scroll down the page and click Download Free Version . Under the Windows section, click to download the file under AVG Free for Windows installation files. Click OK to save the file to your PC.
4. Double-click the file you downloaded, and click Next on the welcome screen. Click Accept to agree to the License Agreement. Choose Standard Installation then click Next.
5. A window will now pop-up if there are any available updates. Click Update to download them. AVG will download and automatically install any updates. Click OK when finished.
6. Back on the First Run window, click Next to proceed. Leave the Daily Scanning settings as they are and click Next.
7. You now have the option to perform a scan to test your computer for viruses.
8. Click Scan computer!
Reboot, post new hijackthis log
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Back to Top
weeleong87 Logfile of Trend Micro HijackThis v2.0.2 Back to Top
Touch Forum Moderator Just curious, why will You not install a antivirus program ? If You don´t install - AVG Anti-Virus we are both wasting our time
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Back to Top
weeleong87 hmm..i did install the avg antivirus. this is the log after i did the scan. Back to Top
weeleong87 Logfile of Trend Micro HijackThis v2.0.2 Back to Top
Touch Forum Moderator Thanks for the tips, much appreciated
Please download free Trial of Superantispyware
Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it.
close the program
Please download ATF Cleaner:
Download and install DrWebCureit:
to your desktop.
Run Hijackthis and place a check beside each of the following. Close all other browser windows except HJT.
Click fix checked.
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O4 - HKLM\..\Run: [Microsoft Autorun4] C:\WINDOWS\system32\dllhost32.exe
O4 - HKLM\..\Run: [RAVMSMON] C:\WINDOWS\Fonts\RAVMSMON.exe
O4 - HKCU\..\Run: [NTService] C:\Program Files\Common Files\System\MSOSV.EXE
O23 - Service: A6049A5A - Unknown owner - C:\WINDOWS\system32\113DCAE7.EXE (file missing)
Please print out or copy this page to Notepad as you will be in Safe Mode and unable to refer to this page.
Delete the following files or folders (delete item in bold). Please do not be concerned if
any of the items are not found as they may have been automatically removed by actions I had
you take earlier in the cleaning process.
Open Folder Options in Controlpanel >view and check your settings:
Select
Show hidden files and folders
Display the contents of system folders
Uncheck: Hide protected operating system files
Delete:
Files:
C:\WINDOWS\system32\dllhost32.exe mosou.exe SMSS.exe
C:\WINDOWS\Fonts\RAVQJMON.exe
C:\Program Files\Common Files\System\MSOSV.EXE
Double click ATF-Cleaner.exe to run the program. Windows Temp Windows XP ) only.
Recycle Bin
NB . It's normal after running ATF cleaner that the PC will be slower to boot the first time.
Doubleclick the "drweb-cureit.exe" and click "ok" in the prompt window that will open , asking "start the express scan now".
It will first make a quick scan of your system, let it clean what it find, and when it says "done"
Click on the green screwdriver-
Actions Tab- Adware-Dialers-Riskware-Hacktools, use dropdown menu and select -Delete
Click on the drive(s) you want to scan . A red green arrow in lower right corner It will now scan your drive(s), say yes to all
After the scan, in the Dr.Web CureIt menu on top, click file and choose save report list
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.
Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
After reboot, post the contents of the log from Dr.Web you saved previously in your next reply.
Start Superantispyware/rightclick on the black/yellow bug in tray.
Hit - Scan Your Computer - button
Click on the drive(s) you want to scan. Put a check in - Perform Complete Scan, then next,
it will scan now. When scan have finished, put a checkmark with all items it found. Next, after cleaning, allow it to Reboot
Start Superantispyware again –
Click Preferences and then click the statistics/logs tab.
Click the dated log and press view log and a text file will appear.
Post this log along with fresh hijackthis log, Dr.Web log and tell how things are running ?
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Back to Top
weeleong87 Logfile of Trend Micro HijackThis v2.0.2 Back to Top
Touch Forum Moderator You´ve certainly get rid of som crap there
Please download Combofix:
Close all other browser windows. Double click on combo.exe & follow the prompts.
When finished, it will produce a logfile located at C:\ComboFix.txt.
Post the contents of that log in your next reply with a new hijackthis log and tell how things are running ? Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang.
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Back to Top
weeleong87 ComboFix 07-08-14.4 - "LeoNa" 2007-08-19 14:13:57.2 - NTFSx86 Back to Top
Touch Forum Moderator Ok.
Please download:
by Swandog46 to your Desktop .
You must extract avenger. zip to your desktop, before you run it.
Start up Avenger exe. Check the 'Input script manually' option. Click the Magnifying Glass icon. In the box that opens, copy,then paste all the text in the quote box below.
Quote:
Files to delete: C:\WINDOWS\system32\mydini.dll
C:\WINDOWS\system32\mydpri.dll
G:\pagefiles.pif
C:\WINDOWS\system\fOxkb.sys
G:\auto.exe
C:\WINDOWS\system32\nwizzhuxians.exe
Registry values to replace with dummy : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs
Then click on 'Done'. Click the Traffic Light icon to start the program. Then press OK at the prompts to reboot your PC. After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
Please copy/paste the content of C:\avenger.txt into your reply along with a fresh HJT log and tell if there are improvements ?
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Back to Top
weeleong87 ÿþL o g f i l e o f T h e A v e n g e r v e r s i o n 1 , b y S w a n d o g 4 6 Back to Top
weeleong87 the same problem persists again. I can use normally for like 10 mins then the classic theme came in and I losee the connection of the internet Back to Top
weeleong87
Touch Forum Moderator Oops, I have missed You - sorry
Check for corrupted/missing system files -
To do this, simply go to the Run box on the Start Menu and type in:
sfc /scannow
This command will immediately initiate the Windows File Protection service to scan all protected files and verify their integrity, replacing any files with which it finds a problem.
Reboot, post new combofix log and tell if there are any improvements ?
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Back to Top
weeleong87 ComboFix 07-08-14.4 - "LeoNa" 2007-08-25 7:25:57.3 - NTFSx86 Back to Top
Touch Forum Moderator
Open notepad and copy/paste the text in the quote box below into it:
Quote:
-----------------------------------------------------
File::
C:\WINDOWS\system32\drivers\usbine.sys
C:\WINDOWS\system32\ctfnom.exe
C:\WINDOWS\system32\dh2103.dll
C:\WINDOWS\system32\dllhost32.exe
C:\WINDOWS\system32\EBSPI.dll
C:\WINDOWS\system32\mh104.dll
C:\WINDOWS\system32\MOSOU.dll
C:\WINDOWS\system32\mosou.exe
C:\WINDOWS\system32\MsAudio.sys
C:\WINDOWS\system32\nwizdh.exe
C:\WINDOWS\system32\nwizfy.dll
C:\WINDOWS\system32\nwizfy.exe
C:\WINDOWS\system32\nwizhx2.dll
C:\WINDOWS\system32\nwizhx2.exe
C:\WINDOWS\system32\nwizqjsj.exe
C:\WINDOWS\system32\nwiztlbb.dll
C:\WINDOWS\system32\nwiztlbu.exe
C:\WINDOWS\system32\nwizwlwzs.dll
C:\WINDOWS\system32\nwizwlwzs.exe
C:\WINDOWS\system32\nwizwmgjs.dll
C:\WINDOWS\system32\nwizwmgjs.exe
C:\WINDOWS\system32\nwizzhuxians.dll
C:\WINDOWS\system32\nwizzhuxians.exe
C:\WINDOWS\system32\Ravasktao.dll
C:\WINDOWS\system32\Ravasktao.exe
C:\WINDOWS\system32\ztinetzt.dll
C:\WINDOWS\system32\ztinetzt.exe
C:\Program Files\WindowsUpdate
C:\WINDOWS\system32\mydpri.dll
Registry:
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{81716107-A10D-11cf-64CD-11115FE1CF41}]
----------------------------------------------
Save this as CFScript.txt
Referring to the picture above, drag CFScript.txt into ComboFix.exe.
Post new combofix log and tell if there improvements
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Back to Top
Forum Information Currently it is Saturday, November 21, 2009 4:14 PM (GMT +1)View Active Threads Who's Online This forum has 30334 registered members. Please welcome our newest member, sushil .Details DanLasko 5 Latest Threads
|