#61
Member
Profile: Join Date: Aug 2008
Location: Toronto, Canada
Posts: 49
Computer Experience:
Hi. Here's the log:Dhcp atapi HTTP PCI atapi .syshttp .syspci .sys
#62
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Not quite what I wanted in that output. Lets run another variation and have a look at it's log.
Code:
@echo off
sc query state= all | findstr /i "service_name state">query.txt
echo.>>query.txt
dir C:\WINDOWS\system32\drivers\*.sys /a h >>query.txt
start notepad query.txt
exit
cls
#63
Member
Profile: Join Date: Aug 2008
Location: Toronto, Canada
Posts: 49
Computer Experience:
Ok, here it is:Dhcp UPS atapi .syshttp .syspci .sys
#64
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Hmmm ...... do you have a cd burner, and a blank cd?
#65
Member
Profile: Join Date: Aug 2008
Location: Toronto, Canada
Posts: 49
Computer Experience:
yes, but that's what started this whole thing. I just got it and have not been able to use it yet. a lite copy of Nero came bundled with the device but I have a complete copy of Roxio although I've only used it for data backup at work.
#66
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
You won't need Nero or Roxio. As long as the drive is installed and working, you're good to go.ISO Recorder version for your operating system. (after selecting the XP SP2 link, click the red text labled Here is the current 32 bit build ). Microsoft Diagnostics and Recovery Toolset , choosing the Typical installation during setupright click erd50.iso , then select Copy image to CD . Follow the instructions in the following link to finish creating the bootable cd.http://isorecorder.alexfeinman.com/HowTo.htm (note - only a cd-rw disc need be or can be erased)
#67
Member
Profile: Join Date: Aug 2008
Location: Toronto, Canada
Posts: 49
Computer Experience:
ok, this sounds like a dumb question even to me but how do I boot to the CD? I restarted windows and it looks the same as ever. In the old days I remember you had to set the bios to boot first from the floppies and then the hard drive if you wanted to boot from the floppy. Is it not like that anymore? It's been awhile
#68
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
The BIOS must be set to boot to CDROM first, and upon startup/restart, with the disk in the drive, it should automatically boot to the cd. If you do get a prompt Press any key to boot from cd , press any key.connect to an operating system , or connect to no operating system . Select the no operating system . Restart when verified it works and eject the cd immediately upon restart to prevent booting to the cd again.
#69
Member
Profile: Join Date: Aug 2008
Location: Toronto, Canada
Posts: 49
Computer Experience:
Ok, fixed the bios and was able to boot from the cd. I'm posting the log and then off to bed since I have an early day tomorrow - well today. I'll have a look at your instructions when I get home. Again, thanks for everything you're trying to do here. You guys are amazing.RAM : 767 MB (62% free)SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)http://www.google.ca/ig?hl=en http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://www.pogo.com/cdl/launcher/Pog...rInstaller.CAB http://upload.facebook.com/controls/...toUploader.cab http://update.microsoft.com/windowsu...?1177939433945 http://cdn2.zone.msn.com/binFramewor...o.cab56649.cab HD ---- C:\$AVG8.VAULT$
#70
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
It's late for me too. I'll get the instructions written up and posted tomorrow evening. Since you're leaving it on, best disable the internet connection till you're back on tomorrow.
#71
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Some updated info. I think we can stop the hunt. I've no doubt that service or file is not to be found, because they don't exist. They are created (randomly) at boot-time by the Daemon Tools driver sptd.sys (which is legitimate), and the sys file is automatically deleted when the operating system loads. My apologies for the goosechase. I'm sure Geri will be around tomorrow to finish up.
#72
Member
Profile: Join Date: Aug 2008
Location: Toronto, Canada
Posts: 49
Computer Experience:
Wow, that's good news. Firefox still crashes sometimes (mostly when I log onto WindowsBBS) so I'm going to uninstall-reinstall it since I'm not a fan of Explorer even though I'm using it at the moment. Other than that I haven't noticed anything off for a couple of days now. Can I have your permission to private message you about the membership options here?
#73
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,632
Computer Experience:
WOW, Well, I'll be dog gone. Unlocker, If this is not causing you any problems you can keep it...My Firewall kept sending up flags with it when ever I tried to do things.RSIT.exe and this folder. C:\rsit Now do this. ComboFix /u then hit Enter to uninstall ComboFix and remove the files/folders it created. This action will also reset the System Restore points, removing any infected files there as well.Now this. Download OTMoveIt2 OldTimer to your Desktop. Please double-click OTMoveIt2.exe to run it.
Click on the CleanUp! button. When you do this a text file named cleanup.txt will be downloaded from the internet. If you get a warning from your firewall or other security programs regarding OTMoveIt attempting to contact the internet you should allow it to do so. After the list has been download you'll be asked if you want to Begin cleanup process? Select Yes.
This step removes the files, folders, and shortcuts created by the tools I had you download and run.
Now lets get a On-line scan. ATF Cleaner by Atribune and save it to your Desktop.Windows Temp Now the scan. Kaspersky WebScanner Click on “Accept” If your pop –up blocker blocks any windows from opening. Click Run on the window that opens .Windows Vista users you must open the web browser using the Run as Administrator command.The program will launch and then begin downloading the latest definition files:
Under Scan on the left side.Click on My Computer
This will start the program and scan your system.
Click the “Scan Report” On the left side.
The scan will take a while so be patient and let it run.
Once the scan is complete it will display if your system has been infected. Click the Save Report As button, and in the Browse dialog box, type a name for the scan report file that you want to create and select its type Text file . Click OK to save the file.:
Save the text file to your desktop.
Copy and paste that information in your next post.
#74
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Shirt is on. I don't think anyone even noticed it was off.
Quote:
Originally Posted by
Nokanda
Can I have your permission to private message you about the membership options here?
By all means, yes. %userprofile% then hit enter, you will see them (query.txt was 1 of them I remember).
#75
Member
Profile: Join Date: Aug 2008
Location: Toronto, Canada
Posts: 49
Computer Experience:
had some problems here with the scan. When I got up the scan had finished but the browser crashed when I was saving the file. I reloaded the browser and restarted the scan but it got hung on 15:44 into the scan so I had to reboot. The first scan reported there were infections but I don't remember how many there were. I couldn't see the folder names because the window was too small. .........and then CRASH! anyway, I'm rerunning it now.
All times are GMT +1. The time now is 12:39 .
