Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

HJT help..but even more on deep end now :(


  • This topic is locked This topic is locked
1 reply to this topic

#1 smileymoo22

smileymoo22

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:05:50 PM

Posted 23 September 2005 - 12:54 AM

okay, so i was originally goin to post a log of HJT..but ran into even more complications. so u know all the details and maybe this will help as well, a while back ago i downloaded something and it gave me aze search toolbar. i looked up how to rid it etc..and i think it is perty much gone..i deleted different extensions of it and got rid of the toolbar. readin up on it, i think i discovered some how that i could have CWS , coolwebsearch. and found out to look in my trusted zone or stumbled across it. so i downloaded cws shredder, and i think it dind't find anything. i also got rid of istsvc.exe, mediaacess, manually in safe mode, did a search n all in hidden files, etc. so i think that mite be completly gone. but the trusted zone websites would not go away, even when i removed them and placed them in restricted..so i knew there is sumthin more involved than that. so i downloaded a ton of things! LOL! spybot, spyware blaster, (had ad aware), and trend micro, istfixbar??, and cws shredder. ad aware had detected one of the sites (searchmeup), but it came back again. well, i was going to post a HJT log onto here, but did hte steps first. I scanned ad aware and that website was back again! grr..(in the past i tried to remove it from *trusted zone in HJT, but that dind't work), so i know there is another file involved but din'dt know what it was. i tried lookin up bootconf.exe in search for files, etc, ..and even hidden folders, but nothing showed up..now granted, i did it in normal mode..so i dn't know if this might affect some things. so i did a search with just boot in the word, and tons of files came up. one even said BOOT, but dindt say what the extension was..however, it did have a pic of a notebook with a yellow gear and it said next to it configuration settings..but wasn't sure if that was something different than bootconf.exe but the same word caught my eye..it just says BOOT configuration settings then the picture icon. thats just a side note bc i heard bootconf.exe has to do with cws in some way...back on track we go! lol..so i scanned with ad aware, and it showed up (searchmeup) again..and somethin else..but two of them showed up(i think it said they were reg key and somethin else reg something..it was under the folder current user/software/microsoft(i forget if micro or software was first)/windows/internet settings/zonemap/domains/searchmeup.com. When i went to domains, i noticed it listed all the websites that were restricted in i think spyware blaster. (now in spyware blaster, u can go to protect, internet explorer, and it lists all of these websites to protect u from them..and i click them all, but the two that r in trusted zone keep comin back(searchmeup and coolwebsearch) ..so it even changes it in the program..it like unclicks them and makes them safe in the program itself.) do i need to remove those folders listed under domain since that is where that one was under?? wasn't sure, so i didn't mess with the others. so i let ad aware delete them like the other time it did, but came back. i ran spy bot and it added 200, and i immunized them. it seems that every time i run it, that it finds 200 more. i ran cws shredder and it hasn't picked somethin up yet, but it did this time. it was a cws xplug in and somethin else from cws..so i deleted those. and then, trend micro popped up their venus fly trap thing, when something has changed? i don't know if it means somethin just now had changed, or it can be way later and just then detected it and is lettin u know..but the things it listed said that they were from a program or software and if u delete it , it may or may not affect the software..so u may or may not want to delete it. i looked at them and some looked familiar..i had seen them somewhere before..perhaps HJT, but wasn't sure if i needed to keep them or not..but trend micro detected them just then. one was somethin from the internet i think..somethin that normally it notifies me of..but then the other was xplug ins..one was like {88IJ97} thats an example..but it was just numbers..and the other was like pictures06.aim.com and there was more to that file name(this is all from top of head), and somethin from Yahoo! Inc. but it had some kinda file name with like y in it..but other stuff was in it too of course..so i wasn't sure if that was from yahoo and aim or some file tryin to make u think it was..but trend micro brought it up, so i denied those access to my computer. *breath* :thumbsup: soo, i decided to restart it to take affect on my computer, hte new changes..and i hit start, turn off, restart..just sat there..did it again..nothin..so i manually rebooted..held hte button and turned it off. then when it came back on, it went to the blue screen(i have windows xp)..where normally the usernames come up u can choose which to log in under...but instead it showed windows xp on the far right and small, and no usernames..nuttin. i tried ctrl alt del..all kinds of buttons..nothin..so i turned it off manually again..and tried it oever and over..then i tried it in safe mode..still the blue screen with no choice of usernames to sign into..i even tried it in goin to original configuratoni mode where it was last good and workin..i even tried goin in debuggin mode..but nothin..and this sucks too bc i was JUST rebootin my computer so then it was fresh and new..and then scan with HJT and post it and see what i needed to delete..but now that issue is, well, still at hand, yes, but more importantly, i can't even get onto my computer, lol..let alone to post that, lol..so i'm a wreck bc i've been tryin to figure, read how to rid files etc and doin that, and as well tryin to figure out what is STILL on my computer that redirects pages that i have clicked on here in this website, to a porn site instead. so i was bout to see if yall could help me, when i had researched and got rid of what i could before askin, and now i can't even do that bc i have a bigger bigger problem at hand :flowers: and oh yah! almost forgot to add..ctl alt del.. i have that svchost.exe?? i heard it is okay to have that i think and sometimes not/?? not sure..but there were like i think 3-4..last i checked there were like 5??! and i think 2-3 of them were like 1,000 and 5,000 memory..what is it like kb?? but it was really high..but my CPU usage wasn't 100 percent..so i dno't know if that has anythin to do with anything..but if u could please please help me, i would soo greatly appreciate it :trumpet: sorry for the long email and details, but i wnated to tell u everything that i've encountered, in case it helps :inlove: thanks soooo much!!

melissa

BC AdBot (Login to Remove)

 


#2 smileymoo22

smileymoo22
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:05:50 PM

Posted 26 September 2005 - 02:34 PM

A friend emailed me and told me how to be able to get back into my computer. In case anyone else has this problem, where they can't go through the whole bootup..like it boots up, but won't let u log in at the username page. this is what he had me do: He had me put in the windows xp cd and reboot the computer, and go through on the cd as if I were going to reinstall until it comes up and says, there is a windows program already detected. At that point, he had me not reinstall everything, but instead go with the repair option at that point on. THen, it restarts the computer, and u let it do its thing and install stuff. after that , u will be able to get on the computer.

OKAY, this problem is closed. you can close this one up...not sure how to do that :thumbsup:

thanks
melissa :flowers:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users