1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved cannot copy file log from hijackthis

Discussion in 'Malware and Virus Removal Archive' started by dtonning, 2008/09/08.

  1. 2008/09/14
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
  2. 2008/09/14
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Try a reboot again and let me know if you have to reset the taskbar.

    Thanks
     

  3. to hide this advert.

  4. 2008/09/14
    dtonning

    dtonning Inactive Thread Starter

    Joined:
    2008/09/07
    Messages:
    30
    Likes Received:
    0
    I did a reboot and did have to reset the taskbar, I did not get any other pop ups though.
     
  5. 2008/09/14
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    If you right click on the taskbar is "lock the taskbar" checked?
     
  6. 2008/09/14
    dtonning

    dtonning Inactive Thread Starter

    Joined:
    2008/09/07
    Messages:
    30
    Likes Received:
    0
    Yes, it is
     
  7. 2008/09/14
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    OK please uncheck it (Click on it)

    Then reboot reset the taskbar again if needed and reboot again and check.
     
  8. 2008/09/14
    dtonning

    dtonning Inactive Thread Starter

    Joined:
    2008/09/07
    Messages:
    30
    Likes Received:
    0
    It still has to be reset each time.In my website with comcast, when I go to my mail, does not remember my password either.
     
  9. 2008/09/14
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    OK
    I'll have to get back to you. I'll see if noahdfear has a suggestion and do some more research.

    Thanks
    Geri
     
  10. 2008/09/14
    dtonning

    dtonning Inactive Thread Starter

    Joined:
    2008/09/07
    Messages:
    30
    Likes Received:
    0
    Yes I think we have put enough effort in for this day, thanks Geri. I will check back sometime tomorrow after work.
     
  11. 2008/09/14
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi dtonning :)

    I suspect some permissions problems and recommend the following.

    Download and install SubInACL from Microsoft.

    Close out all other programs and open windows.

    Highlight and copy the contents of the code box below.
    Code:
    cd /d  "%ProgramFiles%\Windows Resource Kits\Tools "
    subinacl /subkeyreg HKEY_LOCAL_MACHINE /owner=administrators /grant=administrators=f /grant=system=f /grant=RESTRICTED=r
    subinacl /subkeyreg HKEY_CURRENT_USER /owner=administrators /grant=administrators=f /grant=system=f /grant=RESTRICTED=r
    subinacl /subkeyreg HKEY_CLASSES_ROOT /owner=administrators /grant=administrators=f /grant=system=f /grant=RESTRICTED=r
    subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f
    subinacl /subdirectories %windir%\*.* /grant=administrators=f /grant=system=f
    exit
    cls
    
    Click Start>Run and type cmd then hit enter to open a command window.
    Right click in the command window and select paste.
    It will take a while for the commands to process, so please be patient.
    The command window should close on it's own when finished.
    Reboot for the changes, if any, to take effect.
     
  12. 2008/09/15
    dtonning

    dtonning Inactive Thread Starter

    Joined:
    2008/09/07
    Messages:
    30
    Likes Received:
    0
    wow! it all went the way it is supposed to. No pop ups and the task bar worked. Should I relock the task bar now? Geri mentioned something about taking care of the quaranteed files later, is this the time, or do we have other things to do first? This is the best this machine has ever run, my hat is off to you guy's, I'll be sure to put in some glowing remarks, awesome help!
     
  13. 2008/09/15
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    Ok I believe Dave is done? If not he will let you know.

    We can do the clean up

    • Please double-click OTMoveIt2.exe to run it.
    • Click on the CleanUp! button. When you do this a text file named cleanup.txt will be downloaded from the internet. If you get a warning from your firewall or other security programs regarding OTMoveIt attempting to contact the internet you should allow it to do so. After the list has been download you'll be asked if you want to Begin cleanup process? Select Yes.
    • This step removes the files, folders, and shortcuts created by the tools I had you download and run.

    Now please run ATF Cleaner again and then one more Kaspersky scan.

    Thanks
    Geri
     
  14. 2008/09/15
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Provided the permissions reset took care of the remaining issues (taskbar, Windows Update, etc) I'm done.

    Locking the taskbar is totally user choice. It's purpose is to thwart unwanted accidental changes. ;)
     
  15. 2008/09/16
    dtonning

    dtonning Inactive Thread Starter

    Joined:
    2008/09/07
    Messages:
    30
    Likes Received:
    0
    Thanks guy's, there is a couple thimgs in the kasper scan I will post below. I appears they are in the dell musicmatch. I do not use this program at all, I use media player when needed, can I delete this?


    KASPERSKY ONLINE SCANNER 7 REPORT
    Tuesday, September 16, 2008
    Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
    Kaspersky Online Scanner 7 version: 7.0.25.0
    Program database last update: Tuesday, September 16, 2008 01:56:18
    Records in database: 1238289


    Scan settings
    Scan using the following database extended
    Scan archives yes
    Scan mail databases yes

    Scan area My Computer
    C:\
    D:\
    E:\
    I:\
    J:\
    K:\

    Scan statistics
    Files scanned 189592
    Threat name 1
    Infected objects 2
    Suspicious objects 0
    Duration of the scan 03:20:35

    File name Threat name Threats count
    C:\Program Files\MUSICMATCH\Common\ComponentMgr\HoldingArea\WebSys(3)\WebSys.mmz Infected: not-a-virus:RiskTool.Win32.Deleter.f 1

    C:\Program Files\MUSICMATCH\Musicmatch Jukebox\WebSys\offline.mmz Infected: not-a-virus:RiskTool.Win32.Deleter.f 1

    The selected area was scanned.
     
  16. 2008/09/16
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi
    Yes you can delete it.
    Then delete this folder.
    C:\Program Files\MUSICMATCH

    Is everything still running OK?
     
  17. 2008/09/16
    dtonning

    dtonning Inactive Thread Starter

    Joined:
    2008/09/07
    Messages:
    30
    Likes Received:
    0
    Yes running perfectly, in fact I cannot remember this machine working this well, again hats off to you guy's, I will be sure to tell everyone about your site, hopefully my friends are not as helpless as I. I am a commadore 64 in a quad core world:)
     
  18. 2008/09/16
    Geri Lifetime Subscription

    Geri Inactive Alumni

    Joined:
    2003/03/02
    Messages:
    4,580
    Likes Received:
    7
    Hi dtonning
    You're welcome from both of us.

    Please look at this link for some preventive recommendations, It could keep you from ending up back here to the Malware and Virus Removal Forums.
    http://www.windowsbbs.com/showthread.php?t=67958

    I'll mark this one resolved.

    Surf Safely
    Geri
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.