BleepingComputer.com: I need help Urgently

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

I need help Urgently Sytem Tool infection

#16 User is offline   rnr67 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 58
  • Joined: 02-February 08
  • Location:Mississauga, Ontario, Canada

Posted 11 February 2011 - 08:48 PM

Thanks, I will do this. I beleive this is where I was updating from with my pop up baloons informing me of updates. The one that infected me looked exactly the same. Still, will delete and download as recommended.

As for still having Service Pack 2, I have an HP AMD procesor and know that Service Pack 3 can cause some serious problems with and endless start up loop. Just haven't found were to get a fix before I download it. I will search again and do the update.

If that is all then I want to say thank you for the help. It was fast and you know what you were doing. Thank you.

#17 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,761
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 11 February 2011 - 09:43 PM

Hi, yes we are good here, Clean and you are welcome. If you do not use IE as you are on 7 not 8 then you may be OK. If you want to get to SP and IE 8 then you should ask about your AMD issue in the XP forum and I am certain one of those advisors can help.

Have fun out there,
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#18 User is offline   rnr67 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 58
  • Joined: 02-February 08
  • Location:Mississauga, Ontario, Canada

Posted 22 February 2011 - 11:28 PM

Hope you're still there. Since we rid the computer of this virus, I have been having nothing but problems.

Everything Windows seems to be randomly crashing and can't be shut down. In the past week I have had Outlook Express, Windows Media Viewer, Internet Explorer, The disc Cleanup tool, the Defrag, etc all crash while loading. I try to End Task and that immediately crashes as well. They can only be shut down by holding in the power button. This started right after we finished.

Not only that, but I am able to create a Restore Point, but tells me it can't be restored when I try to do one. I am about ready to kick my 'puter across the room lol!!

Some other things I noticed. Firefox does not crash, but sometiems when I double click the icon, nothing happens. It is started acording to the task manager, but doesn't load.
Also, took a few things out of the Start up in case it would help (it didn't), but noticed some blank unnamed entries in the start up. Could this be the problem?

Just not sure if it was something we did, or the virus did, that made things worse. I have done a scan with Avast, Malwarebytes, Superantispyware, and Spybot and all seems to be clean.

If you are still there, can you tell me if this is linked to the last problem. If so...any ideas?

#19 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,761
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 22 February 2011 - 11:36 PM

Let's try running SFC
These are usually from the malware's prescence in the registry.


Please run SFC (System File Checker)
Please run System File Checker sfc /scannow... For more information on this tool see How To Use Sfc.exe To Repair System Files

NOTE for Vista/WIN 7 users..The command needs to be run from an Elevated Command Prompt.Click Start, type cmd into the Start/Search box,
right-click cmd.exe in the list above and select 'Run as Administrator'


You will need your operating system CD handy.

Open Windows Task Manager....by pressing CTRL+SHIFT+ESC

Then click File.. then New Task(Run)

In the box that opens type sfc /scannow ......There is a space between c and /

Click OK
Let it run and insert the CD when asked.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#20 User is offline   rnr67 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 58
  • Joined: 02-February 08
  • Location:Mississauga, Ontario, Canada

Posted 23 February 2011 - 06:00 AM

Not sure I can do this since I don't have an Operating System CD. This computer came pre loaded with XP. Is there another way?

#21 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,761
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 23 February 2011 - 01:42 PM

Run and see if it asks for it.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#22 User is offline   rnr67 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 58
  • Joined: 02-February 08
  • Location:Mississauga, Ontario, Canada

Posted 25 February 2011 - 07:05 PM

Sorry for the delay, had no time.

I did this task and it did ask me for a disk. Had to cancel.

It said I may need to insert a disk later. Does this mean I will have a problem booting up after my next shut down?

What's next since I don't have a disk?

#23 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,761
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 25 February 2011 - 08:15 PM

No iy should just stopo what is was doing and leave you where you were at.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#24 User is offline   rnr67 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 58
  • Joined: 02-February 08
  • Location:Mississauga, Ontario, Canada

Posted 09 March 2011 - 07:44 PM

I think you have forgotten me. Waited for a continuation and none came. I will try one more time and then try elsewhere if you can't help me. All the help so far IS greatly appreciated.

Some more info since we got rid of the virus...

Besides the constant random crashes, problems shutting down, etc, I am getting this error message randomly, but daily,

"HPBOOTOp.exe - The intruction at "0X00402f04" referenced memory at "0X01cbdeaf"

Also, finding that shutting down is only possible if I shut down Zonealarm, wait 10 minutes until the "Zonealarm not responding end now" message comes up. I end it and 10 minutes later the computer will shut down.

I feel this is bigger than a Zone Alarm problem.

One last possible relevent issue...Tried to upgrade to Service Pack 3. With an AMD processor I am assuming there will be boot up problems. Found a fix at Hewlett Packard "SP37394" sofware. I downloaded, but it won't install saying I don't have the resourses. So If you are going to suggest an upgrade to SP3, it would seem I can't do that either. Is this related?

Thanks again. I hope you can help. This virus has really screwed this thing up.

#25 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,761
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 09 March 2011 - 08:17 PM

Hello, sorry to have somehow missed you. Tho, I see here are issues you will have to take to the XP forum. They are more capable than I with those errors you just posted and the SP3 issue. They can trace the crashes for you.
Very sorry.

In the event any of us lose you,always feel free to send a PM.
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

#26 User is offline   rnr67 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 58
  • Joined: 02-February 08
  • Location:Mississauga, Ontario, Canada

Posted 09 March 2011 - 08:26 PM

No problem. Thank you for the help. At least that virus is gone. Scanned with Avast, Malwarebytes, Super Antivirus and Spybot on Sunday. Still clean.

I will try the XP forum

Much apreciated. Thanks again.

#27 User is offline   boopme 

  • To Insanity and Beyond
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Global Moderator
  • Posts: 48,761
  • Joined: 10-September 04
  • Gender:Male
  • Location:NJ USA

Posted 09 March 2011 - 08:37 PM

You're welcome,yes the malware is gone..
When all is done then you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Go to Start > Run and type: Cleanmgr
  • Click "Ok". Disk Cleanup will scan your files for several minutes, then open.
  • Click the "More Options" tab, then click the "Clean up" button under System Restore.
  • Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"
  • Click Yes, then click Ok.
  • Click Yes again when prompted with "Are you sure you want to perform these actions?"
  • Disk Cleanup will remove the files and close automatically.
Vista Users can refer to these links: Create a New Restore Point and Disk Cleanup.

Tips to protect yourself against malware and reduce the potential for re-infection:Avoid gaming sites, pirated software, cracking tools, keygens, and peer-to-peer (P2P) file sharing programs. They are a security risk which can make your computer susceptible to a smörgåsbord of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users. The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications. Read P2P Software User Advisories and Risks of File-Sharing Technology.

Keeping Autorun enabled on USB and other removable drives has become a significant security risk due to the increasing number of malware variants that can infect them and transfer the infection to your computer. To learn more about this risk, please read:
How do I get help? Who is helping me?
Staying Updated Calendar of Updates.
For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....
Become a BleepingComputer fan: Facebook

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users