We're aware that some users are experiencing technical issues which the team are working to resolve. See the Community Noticeboard for more info. Thank you for your patience.
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

HELP!! My PC is broken!!

Options
12467

Comments

  • pchelpman
    pchelpman Posts: 1,275 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Photogenic
    stressedoutmumof1 wrote:
    Ref the firewall .... think that is included in the talk talk antivirus.
    Statements like this worry me. Please check this out and be certain on this issue.

    You MUST have a fully functional firewall in operation when online. You mustn't assume it is included with the AV.

    When you post next let us know if you can get back online. If not what is happening during the process? Do you see error messages etc? If so what are they?
  • Browntoa
    Browntoa Posts: 49,602 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    it does have a firewall but it's a time limited trial

    Plus it also contains a FREE 90-day trial of F-secure, the market-leading security software

    90 days and kaput !!
    Ex forum ambassador

    Long term forum member
  • stressedoutmumof1
    stressedoutmumof1 Posts: 1,483 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Hi guys, well I have followed all the advice - worryingly there were 127 infections!!! However I still can't get onto the net. If this info helps at all if I hover my mouse over the 2 little monitors on the bottom toolbar it says something like "sent 7895 b received 101 b" Now I'm no expert but that doesn't seem right to me :confused: Also I have since discovered that hubby went on net, downloaded something to fix the problem, didn't work so he installed windows xp from manufacturers boot disk (Iqon) and layed it on top of the existing installation.

    Didn't do another hijack log - will do tonight. But I did keep a copy of the ewido log - if you want me to post that :confused:
    Squares knitted for my throw ~ 90 (yes!!! I have finally finished it :rotfl: )
    Squares made for my patchwork quilt ~ 80 (only the "actual" quilting to do now :rotfl:)
  • pchelpman
    pchelpman Posts: 1,275 Forumite
    Part of the Furniture 1,000 Posts Name Dropper Photogenic
    Yes - please post both a fresh HJT log and the Ewido log.

    I am concerned that, despite the fact you say you can't go online, your machine is apparently still online and sending/receiving data.

    If you right click those little windows, then click on "Open network connections", what do you see? Is your status showing as "connected"?

    What exactly happens when you try to go online? Please describe to us.

    Are you getting any on-screen messages? If so what do they say?
  • stressedoutmumof1
    stressedoutmumof1 Posts: 1,483 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Here is the ewido log.
    ewido anti-spyware - Scan Report

    + Created at: 16:20:51 24/07/2006

    + Scan result:



    C:\WINDOWS\icont.exe -> Adware.AdURL : Cleaned with backup (quarantined).
    C:\WINDOWS\temp\bw2.com -> Adware.AdURL : Cleaned with backup (quarantined).
    C:\WINDOWS\Q2hyaXMgSGVnYXJ0eS1Td2Fpbg\asappsrv.dll -> Adware.CommAd : Cleaned with backup (quarantined).
    C:\WINDOWS\Q2hyaXMgSGVnYXJ0eS1Td2Fpbg\command.exe.bak -> Adware.CommAd : Cleaned with backup (quarantined).
    C:\Program Files\TalkTalk Online Security\FWES\program\__delete_on_reboot__f_s_d_f_w_d_._e_x_e_ -> Adware.Gator : Cleaned with backup (quarantined).
    C:\Installer.exe -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\MRCTF.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\aorsvc.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\avkctrs.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\cxyptui.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\d80m0id1e80.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\d8j00i1me8.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\dMtime.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\dnnm0151e.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\dnro0193e.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\donlobby.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\dzime.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\dzser.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\e2200cfmef2a0.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\en02l1do1.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\en06l1ds1.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\en4ol1h31.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\ennml1511.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\ennol1531.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\enrsl1971.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\f0l0la3m1d.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\fp2203foe.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\fpp4037qe.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\g6lmlg3116.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\gp8ml3l11.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\gplql3351.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\h8n00i5me8.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\hfetmon.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\hhetmon.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\i4060edseh060.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\i6nm0g51e6.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\i824lifq182e.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\ibetppui.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\ilengine.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\irnml5511.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\irpsl5771.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\irq.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\iurdbg32.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\iyetppui.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\j44oleh31h4.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\k062lajo1doc.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\k0jsla171d.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\kcdru1.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\kcdsg.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\kidsf.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\kkdcz1.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\kodbr.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\ktr6l79s1.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\l00ulad91d0.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\l46olej31ho.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\le32.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\lsadperf.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\lvno0953e.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\lvpm0971e.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\lvrm0991e.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\lwcmgr10.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\m2po0c73ef.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mbbsync.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mbdrv.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mhastmib.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mjxlegih.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mkxdm.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mqglibnt.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mrrle32.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mv42l9ho1.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mv68l9ju1.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mvacm.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mvpql9751.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\mvrle32.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\n22u0cf9ef2.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\n66q0gj5e6o.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\notmsg.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\nvj0291mg.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\o0rola931d.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\o8luli3918.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\p88qlil518q.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\phrfts.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\r2p80c7uef.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\s4rs0e97eh.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\sfmedia.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\sgell.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\smnike.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\snrrun.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\sve.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\svndmail.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\swclogon.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\sxorprop.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\szorprop.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\thflog.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\tpolhelp.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\uzrsvpia.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\vdpodbc.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\wfnbrand.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\wvaueng.dll -> Adware.Look2Me : Cleaned with backup (quarantined).
    C:\warebundle2.exe -> Adware.Look2Me : Cleaned with backup (quarantined).
    [2228] C:\WINDOWS\system32\fsntsub.dll -> Adware.Look2Me : Error during cleaning.
    [2356] C:\WINDOWS\system32\fsntsub.dll -> Adware.Look2Me : Error during cleaning.
    C:\WINDOWS\temp\i6.tmp -> Adware.SurfSide : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\iexplore.exe -> Backdoor.PoeBot.c : Cleaned with backup (quarantined).
    C:\WINDOWS\system32\loousub.exe -> Backdoor.PoeBot.c : Cleaned with backup (quarantined).
    C:\Program Files\Common Files\svchostsys\svchostsys.exe -> Downloader.Small : Cleaned with backup (quarantined).
    C:\Program Files\Common Files\svchostsys\svchostupdate.exe -> Downloader.Small : Cleaned with backup (quarantined).
    C:\Program Files\Snowball Wars\SnowballWars.exe -> Dropper.VB.mz : Cleaned with backup (quarantined).
    C:\!KillBox\netmon.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Ignored.
    Trojan.Slime : Cleaned with backup (quarantined).


    ::Report end

    Will have to do a fresh hijack log this evening and post tomorrow. When I connect to the internet it says it is connected but every web page you try and access it comes up with "cannot find server message" and it tries to locate the web page ie ebay.co.uk - ebay.com - ebay.org until it says cannot find server.
    Squares knitted for my throw ~ 90 (yes!!! I have finally finished it :rotfl: )
    Squares made for my patchwork quilt ~ 80 (only the "actual" quilting to do now :rotfl:)
  • Browntoa
    Browntoa Posts: 49,602 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    Maybe your hosts file is corrupted

    go here

    c:\windows\system32\drivers\etc\hosts

    open it with Notepad and copy and paste here
    Ex forum ambassador

    Long term forum member
  • stressedoutmumof1
    stressedoutmumof1 Posts: 1,483 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Woohoo I am at home and on the internet!! I tried reinstalling the talk talk disc - and although it wouldn't let me complete installation it has let me access the web. Anyway here is the freshest hijack log

    Logfile of HijackThis v1.99.1
    Scan saved at 20:33:53, on 25/07/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\TALKTA~1\backweb\81720\Program\SERVIC~1.EXE
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\Program Files\TalkTalk Online Security\Anti-Virus\fsgk32st.exe
    C:\Program Files\TalkTalk Online Security\backweb\81720\program\fsbwsys.exe
    C:\Program Files\TalkTalk Online Security\Anti-Virus\FSGK32.EXE
    C:\Program Files\TalkTalk Online Security\Common\FSMA32.EXE
    C:\Program Files\TalkTalk Online Security\Anti-Virus\fssm32.exe
    C:\Program Files\Prevx1\PXAgent.exe
    C:\Program Files\TalkTalk Online Security\Common\FSMB32.EXE
    C:\Program Files\TalkTalk Online Security\Common\FCH32.EXE
    C:\Program Files\TalkTalk Online Security\Common\FAMEH32.EXE
    C:\Program Files\TalkTalk Online Security\Anti-Virus\fsrw.exe
    C:\Program Files\TalkTalk Online Security\FSPC\fspc.exe
    C:\Program Files\TalkTalk Online Security\Anti-Virus\fsav32.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
    C:\Program Files\TalkTalk Online Security\FSGUI\ispnews.exe
    C:\Program Files\TalkTalk Online Security\Common\FSM32.EXE
    C:\Program Files\ewido anti-spyware 4.0\ewido.exe
    C:\Program Files\Messenger\msmsgs.exe
    A:\hijackthis2\HijackThis.exe

    O2 - BHO: (no name) - !!53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: Malicious Scripts Scanner - !!55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users.WINDOWS\Application Data\Prevx\pxbho.dll
    O3 - Toolbar: &Radio - !!8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\TalkTalk Online Security\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\TalkTalk Online Security\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\TalkTalk Online Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\TalkTalk Online Security\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
    O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - Global Startup: TalkTalk Online Security.lnk = C:\Program Files\TalkTalk Online Security\backweb\81720\Program\fspex.exe
    O8 - Extra context menu item: &Block this popup - C:\Program Files\TalkTalk Online Security\Anti-Spyware\blockpopups.htm
    O9 - Extra button: Web Filter - !!200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\TalkTalk Online Security\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - !!200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\TalkTalk Online Security\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Web Filter - !!200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\TalkTalk Online Security\FSPC\fspcmsie.dll
    O9 - Extra button: IE Shield - !!300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\TalkTalk Online Security\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE Shield... - !!300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\TalkTalk Online Security\Anti-Spyware\ieshield.dll
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = 62.24.128.17
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = 62.24.128.17
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = 62.24.128.17
    O20 - Winlogon Notify: Controls Folder - C:\WINDOWS\system32\irn6l55s1.dll
    O23 - Service: TalkTalk Online Security (BackWeb Plug-in - 81720) - BackWeb Technologies Inc. - C:\PROGRA~1\TALKTA~1\backweb\81720\Program\SERVIC~1.EXE
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\TalkTalk Online Security\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\TalkTalk Online Security\backweb\81720\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - Unknown owner - C:\Program Files\TalkTalk Online Security\FWES\Program\fsdfwd.exe (file missing)
    O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\TalkTalk Online Security\FSPC\fshttps\fshttps.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\TalkTalk Online Security\Common\FSMA32.EXE
    O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
    O23 - Service: SNMP Service (SNMP) - Unknown owner - C:\WINDOWS\System32\snmp.exe (file missing)
    O23 - Service: SNMP Trap Service (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
    O23 - Service: Windows Update Manager Tool (UpdateManagerTool) - Unknown owner - C:\WINDOWS\update\updmangr.exe (file missing)
    O23 - Service: Microsoft Windows Spooler Service (Windows Spooler Service) - Unknown owner - C:\WINDOWS\services.exe (file missing)

    Thanks
    Squares knitted for my throw ~ 90 (yes!!! I have finally finished it :rotfl: )
    Squares made for my patchwork quilt ~ 80 (only the "actual" quilting to do now :rotfl:)
  • stressedoutmumof1
    stressedoutmumof1 Posts: 1,483 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Browntoa wrote:
    Maybe your hosts file is corrupted

    go here

    c:\windows\system32\drivers\etc\hosts

    open it with Notepad and copy and paste here

    Just tried doing that and it wouldn't let me open it - although it did say that the size was 0kb
    Squares knitted for my throw ~ 90 (yes!!! I have finally finished it :rotfl: )
    Squares made for my patchwork quilt ~ 80 (only the "actual" quilting to do now :rotfl:)
  • Browntoa
    Browntoa Posts: 49,602 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    just thought, you installed Spybot which may block it being changed

    1)start Spybot

    2)click on Mode at the top and swap to "Advanced"

    3)Click on "tools" button on the bottom left of spybot Screen

    4)click on the "resident" button on the left

    5) untick the boxes next to Teatimer and SDhelper

    6)exit Spybot

    you may then be able to modify the hosts file
    Ex forum ambassador

    Long term forum member
  • Gadge_2
    Gadge_2 Posts: 92 Forumite
    hello there
    I can see from line 3 of your text output that you are running xp service pack 1, this can be confirmed by right clicking my computer and select properties it will say what version you have

    you are also running explorer v6 svc pk1 should be pk2, probably how the crap is getting into your machine

    Service pack two fixes a lot of security problems and also it opens automatic updates Something you may need!!and also installs the xp firewall which although only works on inbound attempts is not too bad for starters

    http://www.softwarepatch.com/windows/xpsp2.html

    you can down load it but it is fairly big at about 270Mb so if you have a fast pipe at work then download it there, and run it at home. It will take a while and after that you should get to the net and check for updates from microsoft

    whilst udgrading to svc pk2 then I would disconnect the internet and stand back and let the machine get to grips with it.

    when it has been done then run the spybot and all the above advice, your machine may be being reinfected until the holes are plugged

    best of luck
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 350.9K Banking & Borrowing
  • 253.1K Reduce Debt & Boost Income
  • 453.5K Spending & Discounts
  • 243.9K Work, Benefits & Business
  • 598.7K Mortgages, Homes & Bills
  • 176.9K Life & Family
  • 257.2K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture