Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Avg And Tweakui


  • This topic is locked This topic is locked
5 replies to this topic

#1 Jove

Jove

  • Members
  • 2,739 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Very South Jersey
  • Local time:11:43 PM

Posted 31 August 2007 - 09:25 AM

I scanned my computer with Ad-Aware 2007, a mishap occured when emptying files and a message to send to Lavasoft appeared I clicked to send but I was not on line.

There seemed to be no detection by the message sending software and where the message went I do not know I am not a Registered user, so I could not contact Lavasoft.

However,

I installed Tweak UI on my desk top and when I opened it I got a message.
The procedure entry point GetDirectoryW could not be located in the dynamic link library Kernel32.dll

I searched Start-up data and found this,


kernel32 kernel32.dll.vbs X Added by the W32/Wekode-A worm.

Any comments or suggestion would be very helpful as I am greatful to share this with you.


Jove

When you don't have to worry about your computer anymore, you can start
living again !

vrwqzc.gif
Success is a result, not a goal. . . . Flaubert


BC AdBot (Login to Remove)

 


m

#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,560 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:43 PM

Posted 31 August 2007 - 11:01 PM

Please read and follow all instructions in the pinned topic titled "Preparation Guide For Use Before Posting A Hijackthis Log". You may have performed some of these steps already. If you can't perform a step, then skip and continue with the next. In step #9 there are instructions for downloading HijackThis and creating a log. (This is a self-extracting version which will automatically install HJT in the proper location.)

When you have done that, post your log in the HijackThis Logs and Analysis Forum, NOT here, for assistance by the HJT Team Experts. A member of the Team will walk you through, step by step, on how to clean your computer. If you post your log back in this thread, the response from the HJT Team will be delayed because your post will have to be moved. This means it will fall in line behind any others posted that same day.

Start a new topic, give it a relevant title and post your log along with a brief description of your problem, a summary of any anti-malware tools you have used and a summary of any steps that you have performed on your own. Please include the top portion of the HijackThis log that lists version information. An expert will analyze your log and reply with instructions advising you what to fix. After doing this, we would appreciate if you post a link to your log back here so we know that your getting help from the HJT Team.

Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Jove

Jove
  • Topic Starter

  • Members
  • 2,739 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Very South Jersey
  • Local time:11:43 PM

Posted 01 September 2007 - 10:12 AM

Did I say I was sorry that I still have SP1, and I still have to upgrade my ram, I have a couple of computer opened up and I may find a stick compatible and with the experience and knowledge I gain I will upgrade if not it is the very next thing I will do, I have been having a lot of problems downloading spyware and malware, and when I wanted to use one of the reccommended dowloads, it asked to check off many other ad ons that I just did not attempt it, but I did clean with Ad Aware and I did Restore, to earlier version, that seemed to get me up and running again. I guess I'll be real lucky, if this wasn't a Trojan that keeps multiplying when a restoring.

In any case, for the time being can I post a HJT, since I have skipped some steps ?

I want to enable my Windows firewall for SP1, according to this,

To enable Internet Connection Firewall feature using the Network Setup Wizard in Windows XP or Windows XP SP1: 1. Run the Network Setup Wizard. To access this wizard, point to Control Panel, double-click Network and Internet Connections, and then click Setup or change your home or small office network.
2. The Internet Connection Firewall is enabled when you choose a configuration in the wizard that indicates that your computer is connected directly to the Internet.


In the Wizard I got this message;



Posted Image


Can anyone direct me as to the true meaning of this ?


Jove

P.S. Istill don't know how to donate because I can use only checks ? !

When you don't have to worry about your computer anymore, you can start
living again !

vrwqzc.gif
Success is a result, not a goal. . . . Flaubert


#4 Jove

Jove
  • Topic Starter

  • Members
  • 2,739 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Very South Jersey
  • Local time:11:43 PM

Posted 01 September 2007 - 12:18 PM

I still have a problem, the system works ok after I scan with Ad Aware, and restart,

Prior to this it seems to freeze up for example when I went to HJT post I could not get the curser to work in the title box etc and it froze up.

When scaned there are 48 objects ignored I have the free version of Ad Aware but can not access the ignored objects to find out what they are, I may have in previous scans accidentally hit the ignore instead of move.

God, !! what else !!

This is about my computer from scan log;


Number of processors: 1
Processor type: Intel® Celeron™ CPU 1400MHz
Memory Available: 26%
Total Physical Memory: 132562944 Bytes
Available Physical Memory: 34050048 Bytes
Total Page File Size: 320122880 Bytes
Available On Page File: 111427584 Bytes
Total Virtual Memory: 2147352576 Bytes
Available Virtual Memory: 2003324928 Bytes
OS: Microsoft Windows XP (Build 2600)


This is what it removed;
MRU Object MRU Registry Key: S-1-5..
5 Tracking Cookies

Since I can not utilize the regular malware and spyware removale such as Spybot and others,

I am thinking about a full restore, will this make available to me the process of downloading WXP SP2,

where I might get a fresh start or is my Harddrive RAM going to prevent that from happening,
since there may not be enough RAM to install WXP SP2 ?

I have the HJT and I am going to Post it if possible, I have not taken the essential Malware and Spyware removal.

I think that this all started when I made the Dumb mistake of being the 10,000,000 on Photbucket !

DAMN !!

Any help will be greatfiully appreciated.

Jove

When you don't have to worry about your computer anymore, you can start
living again !

vrwqzc.gif
Success is a result, not a goal. . . . Flaubert


#5 Jove

Jove
  • Topic Starter

  • Members
  • 2,739 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Very South Jersey
  • Local time:11:43 PM

Posted 01 September 2007 - 12:26 PM

Each Time I go to HJT log to post the page freezes !!

Will you please take my post and post it for me, let me know !!

JOve

When you don't have to worry about your computer anymore, you can start
living again !

vrwqzc.gif
Success is a result, not a goal. . . . Flaubert


#6 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:09:43 PM

Posted 01 September 2007 - 01:18 PM

Jove,

I moved your HijackThis log to the appropriate forum.
Here is the link:
Jove's HJT log

NOTE:
Please, DO NOT make another post in the HijackThis Logs and Analysis forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might think someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.

Also, don't make any changes to your system, as that could change the results of the posted log, making it more difficult to properly clean your system.

Since you now have a HJT log posted, I'm going to close this topic.

At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

If, after your log has been cleaned, you still need help, please PM a Moderator and we will re-open this topic.
If you have any questions, don't hesitate to send me a PM.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users