Dan

Members
  • Content Count

    742
  • Joined

  • Last visited

Posts posted by Dan


  1. A Comcast tech came, and they said that it was the actual modem's problem (something about the firmware not being upgraded or something). So he switched out the modem. So far everything has been running alright. I haven't had to restart the router, however, there are periods of about 1 or 2 minutes when the internet just seems like it stops, and then it works again.

    Its weird. Do you have any ideas?


  2. Hi,

    Its a Linksys WRV200. Its not compatible with the DDWRT.

    Yes, I've tried updating the firmware, and yes I've put it back to factory settings. I've also turned off all securities and it still just disconnects all the computers. Its weird, because what happens is that I'm still connected to the router, but there is no Internet access, and I can't ping the router. I will try to connect straight to the modem.


  3. Hey everyone,

    Its been a long time since I posted here!

    So basically, I have a problem with my router. What happens is that my router disconnects from all of the laptops on it at random intervals. To get it working again, I need to unplug the router and wait for it to reset. This happens quite frequently...at least twice per night. It can sometimes get very annoying, especially when I'm doing something on the internet that requires and internet connection.

    I have tried many things to remedy this problem, and none of them have worked. It is a linksys router, but I also had the same problem with a netgear router that we had before.

    Thanks for your help!

    Danny


  4. Hey everyone!

    I'd like to put out a request for a verizon phone. Something that doesn't look like it has too much wear, and that is fairly modern.

    Also, the charger and a working battery should be included please! Also, a picture or two would be very helpful.

    I'd like to spend at most $30 on it...And I'll pay for shipping or whatever. I need a phone to either give to my grandparents, or get a cooler phone than the one that I currently have, and give that one to my grandparents.

    So let me know, through PM if you have a spare phone that you would be willing to give away or sell.

    I appreciate it!

    Danny

    Approved by Besttechie


  5. *Also, to learn more about how to protect yourself while on the internet read this article by Tony Klein:

    So how did I get infected in the first place?

    This article includes important ways of how to keep safe, and has links to programs that you should download to keep spyware free!

    Some programs that I recommend:

    • Google Toolbar - Free google toolbar that allows you to use the powerful Google search engine from the bar, but also blocks pop up windows
    • CleanUP! - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
    • Internet Explorer is not the most secure and best browser. There are safer and better alternatives available. I recommend Firefox, however Opera and SlimBrowsers are good as well.

    If you wish to submit a complaint about malware, please click on the following image:

    mwcsmall.gif

    Finally, one of the main reasons for your infections is P2P programs, such as Limewire, or Kazaa. You downloaded a few infected files from there, probably thinking that they were clean. I do not encourage the use of P2P programs, because they go against the Besttchie.net Terms of Use and can easily infect you like that.

    Have a good day and stay clean!

    Danny :)


  6. Hi,

    Everything looks fine now :)

    Take care and I hope this is not the end of our communication but also hoping the next topic is not so much about virus infections. You're welcome to dine at my restaurant anytime you are down under....

    Haha I appreciate that.

    We have a couple of last steps to perform and then you're all set.

    First, let's reset your hidden/system files and folders. System files are hidden for a reason and we don't want to have them openly available and susceptible to accidental deletion.

    • Click Start.
    • Open My Computer.
    • Select the Tools menu and click Folder Options.
    • Select the View tab.
    • Under the Hidden files and folders heading UNSELECT Show hidden files and folders.
    • CHECK the Hide protected operating system files (recommended) option.
    • Click Yes to confirm.
    • Click OK.

    Next, let's clean your restore points and set a new one:

    Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs from changing those files.

    This is the only way to clean these files: (You will lose all previous restore points)

    1. Turn off System Restore.

    On the Desktop, right-click My Computer.

    Click Properties.

    Click the System Restore tab.

    Check Turn off System Restore.

    Click Apply, and then click OK.

    2. Restart your computer.

    3. Turn ON System Restore.

    On the Desktop, right-click My Computer.

    Click Properties.

    Click the System Restore tab.

    UN-Check Turn off System Restore.

    Click Apply, and then click OK.

    System Restore will now be active again.

    After System Restore is turned back on, create a Restore Point:

    Go to: 'Start > All Programs > Accessories > System Tools', and select System Restore.

    In the System Restore Wizard, select: 'Create a restore point'.

    Click: Next

    Give a description to the new Restore Point. (Something like: Clean PC)

    Click: Create


  7. We just have to delete one more file and we'll be done :)

    Open HiJackThis. It should open to a "New users quickstart" menu

    Click "Open the Misc Tools section"

    Click "Delete a file on reboot..."

    In the "Enter file to delete on reboot..." window, navigate to:

    C:\Documents and Settings\HP_Owner\Shared\

    And select the file

    [LiveStream] my hair looks feirce 13.wma

    Then click Open. After you click Open, HiJackThis will ask you if you want to restart your computer now. You do, so click Yes.

    Then after you reboot, run another Kaspersky scan for me please.

    Danny


  8. Hi,

    Happy Easter to you as well.

    Please download ATF Cleaner by Atribune.

    This program is for XP and Windows 2000 only

    • Double-click ATF-Cleaner.exe to run the program.
      Under Main choose: Select All
      Click the Empty Selected button.

    If you use Firefox browser

    • Click Firefox at the top and choose: Select All
      Click the Empty Selected button.
      NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    If you use Opera browser

    • Click Opera at the top and choose: Select All
      Click the Empty Selected button.
      NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    Click Exit on the Main menu to close the program.

    For Technical Support, double-click the e-mail address located at the bottom of each menu.

    Next, please reboot your computer in Safe Mode by doing the following:

    1) Restart your computer

    2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.

    3) Instead of Windows loading as normal, a menu should appear

    4) Select the first option, to run Windows in Safe Mode.

    For additional help in booting into Safe Mode, see the following site:

    http://www.pchell.com/support/safemode.shtml

    Go to the Start Menu, and click on "Control Panel". Choose "Add/Remove Programs" and remove any of the following that are listed:

    InternetProgram

    PlayMP3z

    Next, please enable viewing of hidden files as follows:

    1) Go to My Computer, and click on the "Tools" menu

    2) Click "Folder options"

    3) Select the "View" tab

    4) Make sure "Show hidden files and folders" is selected

    5) Make sure "Hide extensions for known file types" is unchecked

    6) Make sure "Hide protected operating system files (recommended)" is unchecked

    Next, please locate and delete the following files/folders (if present):

    Files:

    C:\Documents and Settings\HP_Owner\Shared\- presented by M0e - my hair looks feirce 29.wma

    C:\Documents and Settings\HP_Owner\Shared\[Full] fusion fall with Bonus.zip/setup.exe

    C:\Program Files\Mozilla Firefox\components\nsBrowserOpt.dll

    Folders:

    C:\Program Files\InternetProgram

    C:\Program Files\PlayMP3z

    Next reboot into normal mode, and run another Kaspersky Online Scan, and tell me if you are still having problems.

    Danny


  9. Hi,

    Please run HijackThis and click "Scan." Place checks next to the following entries:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm

    R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: InternetProgram - {88C9B3C7-06B6-5C05-CFEC-C09DBC10CC30} - (no file)

    O4 - HKLM\..\Run: [CHIN PING PHONE PILE] C:\Documents and Settings\All Users\Application Data\Proxy Long Chin Ping\OBJ CHIN.exe

    O4 - HKCU\..\Run: [GrimBall] C:\DOCUME~1\HP_Owner\APPLIC~1\BARBFA~1\Idletitle01.exe

    Close all windows browsers except HijackThis, and click the "Fix Checked" button. Close HijackThis.

    Next, please reboot your computer in Safe Mode by doing the following:

    1) Restart your computer

    2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.

    3) Instead of Windows loading as normal, a menu should appear

    4) Select the first option, to run Windows in Safe Mode.

    For additional help in booting into Safe Mode, see the following site:

    http://www.pchell.com/support/safemode.shtml

    Next, please enable viewing of hidden files as follows:

    1) Go to My Computer, and click on the "Tools" menu

    2) Click "Folder options"

    3) Select the "View" tab

    4) Make sure "Show hidden files and folders" is selected

    5) Make sure "Hide extensions for known file types" is unchecked

    6) Make sure "Hide protected operating system files (recommended)" is unchecked

    Next, delete the following files/folders (if they exist):

    C:\Documents and Settings\Hp_owner\Application Data\Barb Face Help << This folder

    C:\Documents and Settings\All Users\Application Data\Proxy Long Chin Ping << This folder

    Now restart your computer into normal mode.

    Now please do an online scan with Kaspersky WebScanner (Internet Explorer only)

    Click on Kaspersky Online Scanner

    You will be promted to install an ActiveX component from Kaspersky, Click Yes.

    • The program will launch and then begin downloading the latest definition files:
    • Once the files have been downloaded click on NEXT

    • Now click on Scan Settings
    • In the scan settings make that the following are selected:
      • Scan using the following Anti-Virus database:

      • Extended (if available otherwise Standard)

      • Scan Options:

      • Scan Archives
        Scan Mail Bases

      [*]Click OK

      [*]Now under select a target to scan:

      • Select My Computer

      [*]This will program will start and scan your system.

      [*]The scan will take a while so be patient and let it run.

      [*]Once the scan is complete it will display if your system has been infected.

      • Now click on the Save as Text button:

      [*]Save the file to your desktop.

      [*]Copy and paste that information in your next post as well as another HijackThis log.

    Danny


  10. Alright, lets run another scan to make sure your system is clean.

    Download ComboFix from one of the locations below, and save it to your Desktop.

    Double click combofix.exe and follow the prompts. Please, never rename Combofix unless instructed.

    When finished, it shall produce a log for you. Post that log and a HijackThis log in your next reply

    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

    Danny


  11. Looks like we're making progress :)

    Please do an online scan with Kaspersky WebScanner (Internet Explorer only)

    Click on Kaspersky Online Scanner

    You will be promted to install an ActiveX component from Kaspersky, Click Yes.

    • The program will launch and then begin downloading the latest definition files:
    • Once the files have been downloaded click on NEXT

    • Now click on Scan Settings
    • In the scan settings make that the following are selected:
      • Scan using the following Anti-Virus database:

      • Extended (if available otherwise Standard)

      • Scan Options:

      • Scan Archives
        Scan Mail Bases

      [*]Click OK

      [*]Now under select a target to scan:

      • Select My Computer

      [*]This will program will start and scan your system.

      [*]The scan will take a while so be patient and let it run.

      [*]Once the scan is complete it will display if your system has been infected.

      • Now click on the Save as Text button:

      [*]Save the file to your desktop.

      [*]Copy and paste that information in your next post.

    Danny


  12. Hi,

    There appears to be nothing wrong with your HijackThis log. To make sure, please do an online scan with Kaspersky WebScanner (Internet Explorer only)

    Click on Kaspersky Online Scanner

    You will be promted to install an ActiveX component from Kaspersky, Click Yes.

    • The program will launch and then begin downloading the latest definition files:
    • Once the files have been downloaded click on NEXT

    • Now click on Scan Settings
    • In the scan settings make that the following are selected:
      • Scan using the following Anti-Virus database:

      • Extended (if available otherwise Standard)

      • Scan Options:

      • Scan Archives
        Scan Mail Bases

      [*]Click OK

      [*]Now under select a target to scan:

      • Select My Computer

      [*]This will program will start and scan your system.

      [*]The scan will take a while so be patient and let it run.

      [*]Once the scan is complete it will display if your system has been infected.

      • Now click on the Save as Text button:

      [*]Save the file to your desktop.

      [*]Copy and paste that information in your next post.


  13. Hi,

    Please download the Killbox by Option^Explicit and save it to your desktop.

    Note:In the event you already have Killbox, this is a new version that I need you to download.

    Please run HijackThis and click "Scan." Place checks next to the following entries:

    O2 - BHO: (no name) - {3DE17103-AC5E-4059-A348-DFF8C0CF30E7} - C:\WINDOWS\system32\ddaya.dll

    O2 - BHO: {86228fef-8e12-270b-3f24-b12a36c2861d} - {d1682c63-a21b-42f3-b072-21e8fef82268} - C:\WINDOWS\system32\icmbeltg.dll

    O2 - BHO: Google Module - {E1290342-AAFF-4f7c-9F45-D665E4BF1A00} - ktask.dll (file missing)

    O4 - HKLM\..\Run: [bM73fe8d8a] Rundll32.exe "C:\WINDOWS\system32\tdrajndv.dll",s

    Close all windows browsers except HijackThis, and click the "Fix Checked" button. Close HijackThis.

    Now,

    • Please double-click Killbox.exe to run it.
    • Select
      • "Delete on Reboot
      • then Click on the "All Files" button.

      [*]Please copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C

      C:\WINDOWS\system32\ddaya.dll

      C:\WINDOWS\system32\icmbeltg.dll

      C:\WINDOWS\system32\tdrajndv.dll

      [*] Return to Killbox, go to the File menu, and choose "Paste from Clipboard".

      [*]Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "OK" at any PendingRenameOperations prompt.

    If your computer does not restart automatically, please restart it manually.

    After your computer restarts, please post a new HijackThis log.

    Danny


  14. Hi,

    Please run HijackThis and click "Scan." Place checks next to the following entries:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/myway

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.co.uk/myway

    O4 - HKLM\..\Run: [70cdbe16] rundll32.exe "C:\WINDOWS\system32\lldxnxgr.dll",b

    O4 - HKLM\..\Run: [bM73fe8d8a] Rundll32.exe "C:\WINDOWS\system32\tdrajndv.dll",s

    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    Close all windows browsers except HijackThis, and click the "Fix Checked" button. Close HijackThis.

    Next, please reboot your computer in Safe Mode by doing the following:

    1) Restart your computer

    2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.

    3) Instead of Windows loading as normal, a menu should appear

    4) Select the first option, to run Windows in Safe Mode.

    For additional help in booting into Safe Mode, see the following site:

    http://www.pchell.com/support/safemode.shtml

    Next, please enable viewing of hidden files as follows:

    1) Go to My Computer, and click on the "Tools" menu

    2) Click "Folder options"

    3) Select the "View" tab

    4) Make sure "Show hidden files and folders" is selected

    5) Make sure "Hide extensions for known file types" is unchecked

    6) Make sure "Hide protected operating system files (recommended)" is unchecked

    Next, delete the following files/folders (if they exist):

    C:\WINDOWS\system32\tdrajndv.dll << This file

    C:\WINDOWS\system32\lldxnxgr.dll << This file

    Then restart your computer into normal mode, and then please post a new HijackThis log.

    Danny


  15. Hi,

    I have moved your topic into the proper forum :)

    Click here to download HJTInstall.exe

    • Save HJTInstall.exe to your desktop.
    • Doubleclick on the HJTInstall.exe icon on your desktop.
    • By default it will install to C:\Program Files\Trend Micro\HijackThis .
    • Click on Install.
    • It will create a HijackThis icon on the desktop.
    • Once installed, it will launch Hijackthis.
    • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
    • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
    • Come back here to this thread and Paste the log in your next reply.
    • DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

    Danny


  16. Thanks.

    Please download VundoFix.exe to your desktop

    • Double-click VundoFix.exe to run it.
    • Click the Scan for Vundo button.
    • Once it's done scanning, click the Remove Vundo button.
    • You will receive a prompt asking if you want to remove the files, click YES
    • Once you click yes, your desktop will go blank as it starts removing Vundo.
    • When completed, it will prompt that it will reboot your computer, click OK.
    • Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.

    Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.

    Danny


  17. Hi,

    A malicious .DLL file is disrupting the LSP chain on your computer. We need to get rid of it.

    1. Please download LSPFix from here.
    2. Run the LSPFix.exe that you have just finished downloading.
    3. Check the I know what I'm doing box.
    4. In the Keep box you should see one or more instances of wsock3.dll.
    5. Select every instance of wsock3.dll and move each one to the Remove box by clicking the >> button.
    6. When you are done click Finish>>.

    Reboot, and post a new HijackThis log for me.

    Danny


  18. Hi,

    Welcome to Besttechie.net.

    First of all, I notice that you have Spybot's TeaTimer running. While this is normally a wonderful tool to protect against hijackers, it can also interfere with HijackThis fixes. So please disable TeaTimer by doing the following:

    1) Run Spybot-S&D

    2) Go to the Mode menu, and make sure "Advanced Mode" is selected

    3) On the left hand side, choose Tools -> Resident

    4) Uncheck "Resident TeaTimer" and OK any prompts

    5) Restart your computer.

    You can reenable TeaTimer once your system is clean.

    Next, please Download NoLop to your desktop from one of the links below...

    Link 1

    Link 2

    Link 3

    • First close any other programs you have running as this will require a reboot
    • Double click NoLop.exe to run it
      • Carefully type or copy and paste this series of characters into the lower text area labelled Insert CLSID Here. Include the {}:
        {88C9B3C7-06B6-5C05-CFEC-C09DBC10CC30}

      [*]Now click the button labelled "Search and Destroy"

      <<your computer will now be scanned for infected files>>

      [*] When scanning is finished you will be prompted to reboot only if infected, Click OK

      [*] Now click the "REBOOT" Button.

      [*] A Message should popup from NoLop. If not, double click the program again and it will finish Please Post the contents of C:\NoLop.log along with a fresh HijackThis log

    --If you receive an error, "mscomctl.ocx or one of its dependencies are not correctly registered," please download mscomctl.ocx to your system32 folder then rerun the program.--

    Danny


  19. Hi,

    Download ComboFix from one of the locations below, and save it to your Desktop.

    Double click combofix.exe and follow the prompts. Please, never rename Combofix unless instructed.

    When finished, it shall produce a log for you. Post that log and a HijackThis log in your next reply

    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

    Danny


  20. Hi,

    Please go to UploadMalware to upload a suspicious file for analysis.

    • Enter your username from this forum
    • Copy and paste the link to this thread
    • Type the following in the box labled "1": C:\DOCUME~1\Peter\LOCALS~1\Temp\YUUZR.exe
    • In the comments, please mention that I asked you to upload this file
    • Click on Send File

    Now, please do an online scan with Kaspersky WebScanner

    Click on Kaspersky Online Scanner

    You will be promted to install an ActiveX component from Kaspersky, Click Yes.

    • The program will launch and then begin downloading the latest definition files:
    • Once the files have been downloaded click on NEXT

    • Now click on Scan Settings
    • In the scan settings make that the following are selected:
      • Scan using the following Anti-Virus database:

      • Extended (if available otherwise Standard)

      • Scan Options:

      • Scan Archives
        Scan Mail Bases

      [*]Click OK

      [*]Now under select a target to scan:

      • Select My Computer

      [*]This will program will start and scan your system.

      [*]The scan will take a while so be patient and let it run.

      [*]Once the scan is complete it will display if your system has been infected.

      • Now click on the Save as Text button:

      [*]Save the file to your desktop.

      [*]Copy and paste that information in your next post.

    Danny