Help messed up pc dont know what to do

  1. 06-08-2006  #1
    Raze
    Raze is offline Junior Member

    Help messed up pc dont know what to do

    my pc is pretty bad and i need some help. my taskbar is gone i cant copy and paste ( dont know how i copy and pasted my hjt log) i get crazy pop ups alot say ameana and winantiviruse pro Zedo and alot of other stuff i cant search for stuff in my computer its just a gray screen i cant donwload stuff and cant open links when i click on it nothing happens please help


    Logfile of HijackThis v1.99.1
    Scan saved at 10:42:28 PM, on 8/4/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Softex\OmniPass\Omniserv.exe
    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
    C:\Program Files\RealVNC\VNC4\WinVNC4.exe
    C:\Program Files\ewido anti-spyware 4.0\ewido.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\AIM\aim.exe
    E:\setup.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\DOCUME~1\Owner\LOCALS~1\Temp\Temporary Directory 3 for hijackthis.zip\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google
    F2 - REG:system.ini: Shell=Explorer.exe, C:\WINDOWS\system32\dustl.exe
    F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe,nqawvsj. exe
    O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\McUpdate.exe
    O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\McAgent.exe
    O4 - HKLM\..\Run: [McRegWiz] c:\PROGRA~1\mcafee.com\agent\mcregwiz.exe /autorun
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O20 - Winlogon Notify: SharedDLLs - C:\WINDOWS\system32\dnlq0135e.dll (file missing)
    O20 - Winlogon Notify: ShellServiceObjectDelayLoad - C:\WINDOWS\system32\gomf32.dll
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA C

  3. 06-08-2006  #2
    VopThis
    VopThis is offline Senior Member (Canada)
    Save 20% on AVG Internet Security 2012 Suite!
    Can you please perform a system restore for me to a date before any known problems or before you started performing any recent fixes?

    Click on Start>All Programs>Accessories>System Tools>System Restore.

    Check Restore my computer to an earlier date> Click Next.

    Choose the date before you performed any fixes and click Next and Next again.

    Once rebooted, please try your Internet connection and post a revised HJT log. Do not uninstall anything.






    Alternatively,
    Try running the System File Checker:


    Go to Start > Run, enter (or copy and paste) sfc /scannow (note the space between the "sfc" and "/scannow" ) and click on OK.


    This will look for and attempt to replace any corrupt system files that can be found. There are backups of some of these files on your PC and Windows will check for a copy here first. If you are prompted to insert your Windows XP disc, do so. If you don't have this disc and are asked for it, you will have to cancel at this point.

    For details on the System File Checker, click here.





    For POPUPS: Try obtaining and running the following downloads from another PC:


    Please download the latest version of Look2Me-Remover.exe to your desktop.
    http://www.atribune.org/ccount/click.php?id=7

    * Close all windows before continuing.
    * Double-click Look2Me-Remover.exe to run it.
    * Put a check next to Run this program as a task.
    * You will receive a message saying Look2Me-Remover will close and re-open in approximately 10 seconds. Click OK
    * When Look2Me-Remover re-opens, click the Scan for L2M button, your desktop icons will disappear, this is normal.
    * Once it's done scanning, click the Remove L2M button.
    * You will receive a Done Scanning message, click OK.
    * When completed, you will receive this message: Done removing infected files! Look2Me-Remover will now shutdown your computer, click OK.
    * Your computer will then shutdown.
    * Turn your computer back on.
    * Please post the contents of C:\Look2Me-Remover.txt and a new HiJackThis log.

    If you receive a message from your firewall about this program accessing the Internet please allow it.



    If you receive a runtime error '339' please download MSWINSCK.OCX from the link below and place it in your C:\Windows\System32 Directory.
    http://www.ascentive.com/support/new...b/MSWINSCK.OCX
    Last edited by VopThis; 06-08-2006 at 12:01 PM.
+ Reply to Thread
« Messenger/hotmail login virus problem | about:blank trouble (RESOLVED) »