Hello
Anychance of getting my PC back to normal. I don't have great knowledge of PC's sorry

I can not add or remove programmes at this time.

But i have search and destroy and have run it.

I also have avg and spyware blaster and
spyware doctor ( of which I am positive i have clicked to change this system 32 ) as it was fine before i got a read box with a cross init..... :-(

The hijack this log is with only these to run as i cant get to change or upload anything.



many thanks


Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\hijackthis\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = www.google.com
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O15 - Trusted Zone: www.ebay.co.uk
O15 - Trusted Zone: www.msn.co.uk
O15 - Trusted Zone: www.rock.com
O15 - Trusted Zone: www.yahoo.co.uk

THANK YOU FOR ANY HELP
Jules

If you are uncomfortable with any of the following, suggest you take your PC to a local repair shop.


Have you tried to restore the operating system to a previous state in Windows XP?:

http://support.microsoft.com/default...;EN-US;Q306084

1. Log on to Windows as Administrator.
2. Click Start, point to All Programs, point to Accessories, point to System Tools, and then click System Restore. System Restore starts.
3. On the Welcome to System Restore page, click Restore my computer to an earlier time (if it is not already selected), and then click Next.
4. On the Select a Restore Point page, click the most recent system checkpoint in the On this list, click a restore point list, and then click Next. A System Restore message may appear that lists configuration changes that System Restore will make. Click OK.
5. On the Confirm Restore Point Selection page, click Next. System Restore restores the previous Windows XP configuration, and then restarts the computer.
6. Log on to the computer as Administrator. The System Restore Restoration Complete page appears.
7. Click OK.

NEXT, if needed:

Most of the programs that you have used (SpyBot, HijackThis) have 'backup' areas to reinstate any fixes which you have made. If possible, you need to backtrack on your most recent steps taken.


Even your HijackThis (HJT) log is unusually short:

Run HJT.
Click 'Open Misc Tools section'.
Click 'Backups' BUTTON.
Check off all recent dated fixes, as appropriate.
Click the 'Restore' BUTTON.
REBOOT.



Post your latest HJT log. Let us know if things have improved.

couldnt work any of it that way , had no back ups turned on and winows wanted rundll 32. to turn them back on.

downloaded rundll off net.

couldnt find Windows cad to place file into. as advised.

so i made a cad file in windows.

unzipped contents into Windows file.

NOW i can open only from the strat and then programme selection, so i have turned back up back on.

I also was able to turn on firewall from teh same window ( phew)

but i still can not open from the control pane. add and remove programmes and many more.
Also if i right click my clock on bottom of screen it asks still for rundll.


Im more relaxed now as i had NO! fire wall active before.

but anychance knowing why it wont work in control panel.

Am i on the right track thinking rundll is being looked for but i have it now but in the wrong place,?

many thanks

jules

Suggest you now take those operating system configuration and repair issues to the

Windows XP Help FORUM
http://www.d-a-l.com/help/forumdisplay.php?f=2


It is entirely possible that you have unknowingly removed more critical components than you realize. You may need to install the operating system on top of itself. Such steps I am not yet intimately familiar with. Seek guidance there, please.

I spent 4 hours on your site last night I now have 3 new programmes to protect my computer and found loads of nasty things.

I have learnt alot here.

I looked in many places on the net before coming here, but none where as easy to read and understand.

I am very greatfull for your help and forum.
jules

Thank you for the feedback and kind words.


Some useful PC troubleshooting survival strategies are:

• Never guess (looks like a bad item) or take uniformed chances.
• Measure twice - cut once (research thoroughly). There can be many contrary opinions out there - the first opinion you see may be completely wrong or ill-informed and ultimately disasterous. Seek multiple confirming sources or trustworthy sources on unfamiliar issues with successful outcomes.
• Discuss and/or research complex issues with others on forums such as this.
• When in doubt - ask. Many hands make for lighter work and a better outcome.