MyTechSupport.ca :: Your Computer Technical Resource Headquarters! MyTechSupport.ca :: Your Computer Technical Resource Headquarters!
HOME FORUMS RESOURCES & TOOLS ARTICLES ONLINE STORE ABOUT US
Computer Support Forums arrow Internet & Network Support arrow Security & Viruses arrow Topic: Big problem with My Free Space.
November 16, 2019, 12:14:39 AM
 

Home Forum Rules Help Search Mobile Version Login Register

Welcome, Guest. Please login or register.
Did you miss your activation email?
November 16, 2019, 12:14:39 AM

Login with username, password and session length
 Featured Sites:
News
New  Check out our improved Download section for tons of software....
  0 Members and 1 Guest are viewing this topic.
Pages: [1] Go Down Print
Author Topic: Big problem with My Free Space.  (Read 2308 times)
sixis
Jr. Member
**

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 20


Bookmark and Share

View Profile
« on: April 12, 2004, 10:56:54 PM »

My friend has a pc problem,plz help

Problem Application Name & Version: all of my applications
Problem Hardware Make & Model: win 2000
Error Messages:*blank.exe has generated errors and will now close


alot of my programs crash
everytiem i restart my free space has dropped greatly
normal funning functions like explorer.exe crash alot of the time
i often find my computer freezing

heres a screenshot of my space.

Logged

 
benditup
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 2105


Bookmark and Share

View Profile
« Reply #1 on: April 12, 2004, 05:29:24 PM »

Hi again, sixis

You have a new baddie on your computer
Update you virus definitions for Norton and follow the directions
supplied by Symantec
http://www.symantec.com/avcenter/venc/data/w32.hllw.gaobot.p.html

Also make sure you update CWShredder----winshow is a variant
After removing all the nasties I would also do a disk cleanup

Remove the virus
then update and run CWShredder with ALL other windows closed
RESTART your computer----Post back a Fresh Hijackthis log afterwards!
Let's make sure we get it all.....
Be careful in the registry....
P.S CWShredder should only be ran when it is confirmed you have
CW trojan infection
Logged

 
benditup
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 2105


Bookmark and Share

View Profile
« Reply #2 on: April 12, 2004, 05:31:43 PM »

My post went above yours, ahhhhhh!

I just realized it was your friends computer
Here's a link to CWShredder, the latest version
Get rid of that other virus first.....

http://www.spywareinfo.com/~merijn/files/CWShredder.exe
Logged

 
benditup
Hero Member
*****

Karma: +2/-0
Offline Offline

Gender: Male
Posts: 2105


Bookmark and Share

View Profile
« Reply #3 on: April 12, 2004, 09:37:36 PM »

Are you able to run Norton's in Safe Mode?
Were you able to run CWShredder (did you try this in Safe Mode?)

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2001052409420406?OpenDocument&ExpandSection=2#_Section2

Can you do an online virus scan?
http://housecall.trendmicro.com/


If CWShredder won't start either try it in safe mode
If that doesn't work try running this fix first and then try it
Unzip it and run it
http://www.safer-networking.org/files/delcwssk.zip

We can try and do this manually, I would prefer you at least try
the online scan before doing it this way.

First go into Task Manager and end the processes on these if found
svchosl.exe
winshow.exe
msupdater.exe

Next try and unregister this file
copy and paste this into the Start----Run command or write this down
regsvr32 /u c:\winnt\winshow.dll    

Next:
Make a folder for Hijackthis----Right click an empty spot on the
desktop-----Select NEW----Folder----name it HJT and copy and paste Hijackthis.exe into that new folder
Don't delete the backups until everything is okay

Do another scan with Hijackthis and put a check next to these entries
and then Fix Checked:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
O2 - BHO: WinShow module - {6CC1C918-AE8B-4373-A5B4-28BA1851E39A} - C:\WINNT\winshow.dll

O4 - HKLM\..\Run: [Config Loader] svchosl.exe
O4 - HKLM\..\RunServices: [Config Loader] svchosl.exe
 
Restart your computer in SAFE MODE
and follow Symantec's advice (try doing another system scan)
and editing the registry
Not all registry entries may exist anymore, don't be alarmed

Next you will want to delete these folders
They may have hidden attributes. This link will instruct you on how
to Show hidden files and folders
http://www.xtra.co.nz/help/0,,4155-1916458,00.html

C:\WINNT\System32\svchosl.exe <---- this file
C:\WINNT\System32\WINHL32.EXE <----- this file

NOTICE the spelling   svchosl.exe
"NOT" svchost.exe

Restart back in Normal mode and post another Fresh hijackthis log.
Remember to follow Norton's advice about backing up when in the
Registry....
I'll be back on in a couple days, maybe tomorrow... Good luck
« Last Edit: April 12, 2004, 10:17:13 PM by benditup » Logged

 
sixis
Jr. Member
**

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 20


Bookmark and Share

View Profile
« Reply #4 on: April 12, 2004, 10:59:29 PM »

Logfile of HijackThis v1.97.7
Scan saved at 7:00:04 PM, on 4/12/2004
Platform: Windows 2000  (WinNT 5.00.2195)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\explorer.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINNT\loadqm.exe
C:\WINNT\System32\rundll32.exe
C:\Documents and Settings\Victor\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tagmonkey.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: 209.66.114.130 sitefinder.verisign.com
O2 - BHO: WinShow module - {6CC1C918-AE8B-4373-A5B4-28BA1851E39A} - C:\WINNT\winshow.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [Config Loader] svchosl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\RunServices: [Config Loader] svchosl.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - Global Startup: Watch.lnk = C:\WINNT\twain_32\S6U12BX\WATCH.exe
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
« Last Edit: April 12, 2004, 11:02:13 PM by sixis » Logged

 
sixis
Jr. Member
**

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 20


Bookmark and Share

View Profile
« Reply #5 on: April 12, 2004, 11:54:01 PM »

thanks man!
Logged

 
sixis
Jr. Member
**

Karma: +0/-0
Offline Offline

Gender: Male
Posts: 20


Bookmark and Share

View Profile
« Reply #6 on: April 13, 2004, 12:55:04 AM »

he cant use norton anti virus anymoreis any other solutions?

norton crashes everytime ihetry to scan
Logged

 
Pages: [1] Go Up Print 
 
Jump to:  

Powered by MySQL Powered by PHP

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines

Valid XHTML 1.0! Valid CSS!

Disclaimer
This site is NOT responsible for any damage that the information on this site may cause to your system. Everything you try, whether inspired by the response given from this site or not, is entirely at your own risk. All product names and company names used herein are for identification purpose only and may be trademarks or registered trademarks of their respective owners. We are in no way affiliated or representing any of the companies on this site unless specified.
Back to Top
Stop Spam Harvesters, Join Project Honey Pot Fight Back Against Spammers! Get Firefox! Get Thunderbird! View Sylvain Amyots profile on LinkedIn
Back to Top
Google visited last this page July 28, 2018, 01:25:17 AM