Dr Tweak
64 Guests, 0 Users
Welcome, Guest. Please login or register.
October 22, 2018, 12:48:13 pm

Login with username, password and session length

Problem after using SpyBot S&D and Ad-aware

plaidlesspez

Problem after using SpyBot S&D and Ad-aware
« on: May 09, 2005, 05:30:58 pm »
Hi, I have a problem.  I downloaded and used both of these programs, all following the directions listed on this site.  The then was downloading SpywareBlaster and installing it when it froze at the end.  I restarted my computer, then a black screen came up saying something like "Windows protection error.  You need to restart your computer."  So I did that and it just brought me to safe mode.  I did the recovery on both of the programs to put the files back that I removed, but I am still getting the same message when I restart my computer.  The computer runs on Windows 98.  I am on our other computer right now.  Please help!
« Last Edit: May 09, 2005, 05:39:35 pm by plaidlesspez »

Offline Dr Tweak

  • Dr Tweak
  • *****
  • 1924
  • Gender: Male
  • Dr Tweak
    • View Profile
    • www.drtweak.com
Re:Problem after using SpyBot S&D and Ad-aware
« Reply #1 on: May 09, 2005, 06:11:02 pm »
It sounds as if you had some malware that corrupted some Windows files. I would suggest letting Ad-Aware & SpyBot remove what they find then use the Windows system file checker to replace the needed files. To use it insert your 98 cd then follow the directions HERE.

Once you have done that please post a HijackThis 1.99.1 as shown HERE and post a log here in this forum for me to look at.

 8)

plaidlesspez

Re:Problem after using SpyBot S&D and Ad-aware
« Reply #2 on: May 09, 2005, 06:35:22 pm »
Thanks for the help, but before I could read your post, I tried something different and actually fixed it!  In Safe Mode, I deleted SpywareBlaster, then reinstalled it because before I had to restart my computer when it froze at the end of installation.  This time it finished installing, but it gave me and error message when I tried to run it.  I figured I needed the Microsoft Visual Basic Run Time files, so I downloaded them on another computer, put them on a floppy, then installed them onto this computer.  Luckily, when I restarted my computer, it didn't give me the error message and everything was fine!

Would you still like me to download HijackThis and post a log?

Offline Dr Tweak

  • Dr Tweak
  • *****
  • 1924
  • Gender: Male
  • Dr Tweak
    • View Profile
    • www.drtweak.com
Re:Problem after using SpyBot S&D and Ad-aware
« Reply #3 on: May 09, 2005, 06:44:37 pm »
Yes if you would post a HijackThis log, just to make sure you are clean.

 :)

plaidlesspez

Re:Problem after using SpyBot S&D and Ad-aware
« Reply #4 on: May 09, 2005, 07:03:35 pm »
I'm sorry, it's not letting me post the Log File.  Is it because the post would be too big?  Sorry, I'm new to this kind of stuff.  How should I post it?

Offline Dr Tweak

  • Dr Tweak
  • *****
  • 1924
  • Gender: Male
  • Dr Tweak
    • View Profile
    • www.drtweak.com
Re:Problem after using SpyBot S&D and Ad-aware
« Reply #5 on: May 09, 2005, 08:11:41 pm »
I just upped the max size of an attachment, so if you would try posting it again.

 ;D

plaidlesspez

Re:Problem after using SpyBot S&D and Ad-aware
« Reply #6 on: May 14, 2005, 11:21:32 pm »
Hi Craig,

I finally got my computer working again.  Basically, what I did was restore all the files I had removed with Spybot and everything, uninstall all those programs, then reinstall all of them.  I don't now why that worked, but it did.  

I would appreciate if you could check my logfile again to see if there is anything wrong causing my problems:

Logfile of HijackThis v1.99.1
Scan saved at 12:18:28 AM, on 5/15/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\EASY INTERNET\ENCMONTR.EXE
C:\PROGRAM FILES\KERIO\PERSONAL FIREWALL\PERSFW.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\WINDOWS\SYSTEM\USBMMKBD.EXE
C:\WINDOWS\SYSTEM\LTDAEMON.EXE
C:\PROGRAM FILES\DIRECTCD\DIRECTCD.EXE
C:\SCANJET\HPSJBMGR.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\COMMON FILES\KODAK\KODAK_DR\KODAKCCS.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\PROGRAM FILES\AIM\AIM.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\MY DOCUMENTS\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/p/hp/?http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.comcast.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/ext/hp/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
F1 - win.ini: run=hpfsched
O2 - BHO: (no name) - {004A5840-FF59-11d2-B50D-0090271D3FD4} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [HPScanPatch] C:\WINDOWS\SYSTEM\HPScanFix.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [USBMMKBD] usbmmkbd.exe
O4 - HKLM\..\Run: [InstallAurealDemos] C:\windows\temp\InstallAurealDemos.js //b
O4 - HKLM\..\Run: [TCASUTIEXE] TCAUDIAG.EXE -off
O4 - HKLM\..\Run: [LT DAEMON] "C:\WINDOWS\SYSTEM\ltdaemon.exe"
O4 - HKLM\..\Run: [Keyboard Manager] C:\Program Files\Netropa\One-touch Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [Adaptec DirectCD] C:\Program Files\DirectCD\DIRECTCD.EXE
O4 - HKLM\..\Run: [hpsjbmgr] C:\SCANJET\hpsjbmgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [KodakCCS] C:\Program Files\Common Files\KODAK\KODAK_DR\KodakCCS.exe --pdr: "C:\Program Files\Common Files\KODAK\KODAK_DR\dcmnter.pdr"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [URLLSTCK.exe] c:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [Hidserv] Hidserv.exe run
O4 - HKLM\..\RunServices: [Encompass_ENCMONTR] C:\Program Files\Easy Internet\ENCMONTR.EXE
O4 - HKLM\..\RunServices: [PersFw] "C:\Program Files\Kerio\Personal Firewall\persfw.exe" /hide
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKCU\..\Run: [Spyware Doctor] "C:\PROGRAM FILES\SPYWARE DOCTOR\SPYDOCTOR.EXE" /Q
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRAM FILES\AIM\AIM.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net/

Offline Dr Tweak

  • Dr Tweak
  • *****
  • 1924
  • Gender: Male
  • Dr Tweak
    • View Profile
    • www.drtweak.com
Re:Problem after using SpyBot S&D and Ad-aware
« Reply #7 on: May 15, 2005, 07:22:40 am »
Have HijackThis fix the following:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/p/hp/?http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/ext/hp/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.comcast.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: (no name) - {004A5840-FF59-11d2-B50D-0090271D3FD4} - (no file)
O4 - HKLM\..\Run: [URLLSTCK.exe] c:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O14 - IERESET.INF: START_PAGE_URL=http://www.comcast.net/

Do you still have Norton Internet Security installed? If so uninstall it, you really need to reformat and do a clean install of 98 if you are having so many problems. Just back all of your data up to a cd or slave your hard drive on another pc and back it up that way.

 :)

plaidlesspez

Re:Problem after using SpyBot S&D and Ad-aware
« Reply #8 on: May 15, 2005, 09:32:27 am »
We had it installed, but when we uninstalled it, it had problems uninstalling.  In Add/Remove Programs, it lists Norton Anitspam 2x and Norton Internet Security 2x.  I downloaded something from the Norton site to uninstall them too, but it didn't work.  Also, I think LiveUpdate is still on there too for some reason.

I am also having trouble uninstalling Quicktime.  I want to use Quicktime Alternative, but every time I uninstall Quicktime, it comes back.  When I unistall it, should I select Uninstall Everything (which removes the system extensions) or just plain Uninstall?  

The computer wasn't really having any problems until I starting installing the anti-spyware programs and everything.
« Last Edit: May 15, 2005, 09:41:31 am by plaidlesspez »

 

Recent

Members
  • Total Members: 21
  • Latest: vojay
Stats
  • Total Posts: 547
  • Total Topics: 192
  • Online Today: 67
  • Online Ever: 148
  • (December 04, 2012, 10:34:33 am)
Users Online
Users: 0
Guests: 64
Total: 67
Google (3)