HELP!! My PC is broken!!

Browntoa

or ignore the above post until we have fixed you current problem as there is no point in installing SP2 on a badly infected machine

it is fine with SP1 as you have at the moment

as before, only follow advice from me, Pchelpman or Alfonso

Browntoa

incidently that log is looking pretty good, as we can get the internet working again then we can do the SP2 updates

go to www.Windowsupdate.com and choose the SP2 updates, then keep doing windows updates until there are no more to do

if you cannot do the hosts file thing then leave it for now and just do the updates

I will then advise you about installing a REAL firewall, not that nasty Windows one (I think the Talk Talk one is a 90 day free trial )

Browntoa

incidently this will give you a modifed hosts file that blocks spyware sites

http://www.mvps.org/winhelp2002/hosts2.htm

full instructions on the site

pchelpman

Hi BT ... when you get round to looking at everything in more detail that last 023 service in the log is BAD.

O23 - Service: Microsoft Windows Spooler Service (Windows Spooler Service) - Unknown owner - C:\WINDOWS\services.exe (file missing)

Needs to be stopped and deleted. Also the associated file to be deleted as well.

Usual Ewido/Panda/Housecall scans will help remove/reveal other things too.

Browntoa

showed file missing so assumed it had gone ??

stressedoutmumof1

Have deleted that error now

Tried to download SP2 updates and it had an error message saying it couldn't download

Just wanted to say thanks guys for all your help - you're being incredibly patient - thanks

Browntoa

try the link in Gadge's post above

pchelpman

Browntoa wrote:

showed file missing so assumed it had gone ??

Possibly ... but you must stop/disable/delete the service and check the system to see it the file really HAS gone.

Contrary to popular belief HJT can sometimes be wrong. Especially with its use of "(file missing)". Sometimes it's present even though HJT says it isn't. That's why I always ask users to check and see if the file is still present.

In this case ... if it is present ... delete it after the 023 is stopped.

Gadge_2

I must admit to not being an expert in HJT and would appreciate any decent pointers in it's use.

However this machine is running software without patches and therefore making it vunerable to reinfection, especially if it has no or a questionable firewall.

I would have thought that the correct path for dealing with an infected machine that is being unstable, would be to ISOLATE, STABILISE, PROTECT.

This machine will need the updates, now or in the near future, it could be that SP2 will plug the holes that are causing the problems.

I have to say that this will probably not let you know exactly what was causing the problem, But should get to the root of the problem quicker.

stressedoutmumof1

Hi guys

Have downloaded SP2, but am getting absolutely hundreds of pop ups - grrrr

Do you need me to post another HJT log?