My computer has so many problems and ive looked around on the internet and ive managed to fix some of them.
I know that i have a few viruses on my computer, but i cant get rid of them, in one case i think i have one on my ipod "boot.exe" and i cant get rid of it. All of the antivirus programs ive tried either dont pick it up or cant scan my ipod.
Den i have "copy.exe" which i dont know how to fix either.
Task manager and regedit were disabled, but i fixed that, but i still dont have the start>run option and my windows xp skin has disappeared and has opted for the outdated 95/98 skin.
My folder options is also disbled, and i tried a reg fix which i found on the internet but it doesnt work!
My other computer had the same symptoms, except i also had a problem with the process "lsass.exe" and i nothing was fixed. I tried a few antiviruses here too, but they would get rid of the virus, but it would immediately come back.
Den after a while, my computer would boot up and would get to the "logon on screen", but it was all black and all i could see was my mouse and my keyboard didnt do anything. This was the case in safe mode too.
So i managed to reinstall windows XP pro by hooking my hard drive up to another computer, since my disc drives had a problem reading the boot CS, and it started working...
So i shut down, put the hard drive back on the other computer and now when it gets to the boot screen, it jus restarts. I tried to hook it up to the other computer i used to install windows XP and the same thing happens. I also tried to install XP again, but the when i use the boot CD it wont read my hard drive. And i have a lot of valuable information on that hard drive so formatting is not an option.
I think i might have a problem with the booting sequence, cause i had a program called Boot Skin which changes the picture on the boot screen, but i dont know how to get rid of it.
I also suspect i got the virus from my friend when i gave him my ipod, cause i dont have internet on either of these computers.
PLEASE HELP ME! I havent used my computer for almost a month and i need it for school and what not. Thanks in advance.
P.S.
This is the hijackthis log from the computer which does actually load should it help...
By the way this computer, is only used for music production and theres a folder on my ipod call ".spotlight-v100" ]. I dont know what it is and i cant get rid of it.
Logfile of HijackThis v1.99.1
Scan saved at 02:16:45 PM, on 06/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180 )
Running processes:
C:\WINDOWS\Syst em32\smss.exe
C:\WINDOWS\syst em32\winlogon.e xe
C:\WINDOWS\syst em32\services.e xe
C:\WINDOWS\syst em32\lsass.exe
C:\WINDOWS\syst em32\Ati2evxx.e xe
C:\WINDOWS\syst em32\svchost.ex e
C:\WINDOWS\Syst em32\svchost.ex e
C:\WINDOWS\syst em32\spoolsv.ex e
C:\Program Files\Alwil Software\Avast4 \aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4 \ashServ.exe
C:\Program Files\Grisoft\A VG Anti-Spyware 7.5\guard.exe
C:\Program Files\Digidesig n\Drivers\MMERe fresh.exe
C:\Program Files\Analog Devices\SoundMA X\SMAgent.exe
C:\WINDOWS\syst em32\MsPMSPSv.e xe
C:\Program Files\Alwil Software\Avast4 \ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4 \ashWebSv.exe
C:\WINDOWS\syst em32\wscntfy.ex e
C:\WINDOWS\syst em32\Ati2evxx.e xe
C:\WINDOWS\Expl orer.EXE
C:\Program Files\Roxio\Eas y CD Creator 6\DragToDisc\Dr gToDsc.exe
C:\Program Files\Roxio\Eas y CD Creator 6\AudioCentral\ RxMon.exe
C:\Program Files\ATI Technologies\AT I Control Panel\atiptaxx. exe
C:\WINDOWS\syst em32\MAFWTray.e xe
C:\Program Files\SyncroSof t\Pos\H2O\cledx .exe
C:\Program Files\D-Tools\daemon.ex e
C:\PROGRA~1\ALW ILS~1\Avast4\as hDisp.exe
C:\Program Files\ATI Technologies\AT I HydraVision\Hyd raDM.exe
C:\Program Files\QuickTime \qttask.exe
C:\Program Files\iTunes\iT unesHelper.exe
C:\Program Files\Grisoft\A VG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\syst em32\ctfmon.exe
C:\Program Files\Roxio\Eas y CD Creator 6\AudioCentral\ Playlist.exe
C:\Program Files\iPod\bin\ iPodService.exe
C:\Documents and Settings\JP\Des ktop\hijackthis \HijackThis.exe
R0 - HKCU\Software\M icrosoft\Intern et Explorer\Main,S tart Page = quicknews.info - Dynadot Parking
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acr obat 6.0\Reader\Acti veX\AcroIEHelpe r.dll
O4 - HKLM\..\Run: [PtiuPbmd] Rundll32.exe ptipbm.dll,SetW riteBack
O4 - HKLM\..\Run: [RoxioEngineUtil ity] "C:\Program Files\Common Files\Roxio Shared\System\E ngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Eas y CD Creator 6\DragToDisc\Dr gToDsc.exe"
O4 - HKLM\..\Run: [RoxioAudioCentr al] "C:\Program Files\Roxio\Eas y CD Creator 6\AudioCentral\ RxMon.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\AT I Control Panel\atiptaxx. exe
O4 - HKLM\..\Run: [MAFWTaskbarApp] C:\WINDOWS\syst em32\MAFWTray.e xe
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSof t\Pos\H2O\cledx .exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.ex e" -lang 1033
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALW ILS~1\Avast4\as hDisp.exe
O4 - HKLM\..\Run: [HydraVisionDesk topManager] C:\Program Files\ATI Technologies\AT I HydraVision\Hyd raDM.exe
O4 - HKLM\..\Run: [DigidesignMMERe fresh] C:\Program Files\Digidesig n\Drivers\MMERe fresh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime \qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iT unesHelper.exe"
O4 - HKLM\..\Run: [SpyHunter] C:\Program Files\Enigma Software Group\SpyHunter \SpyHunter.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\A VG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\syst em32\ctfmon.exe
O6 - HKCU\Software\P olicies\Microso ft\Internet Explorer\Restri ctions present
O6 - HKCU\Software\P olicies\Microso ft\Internet Explorer\Contro l Panel present
O8 - Extra context menu item: Open Client to monitor &1 - C:\WINDOWS\web\ AOpenClient.htm
O8 - Extra context menu item: Open Client to monitor &2 - C:\WINDOWS\web\ AOpenClient.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger \msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger \msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4 \aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\syst em32\Ati2evxx.e xe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\syst em32\ati2sgag.e xe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4 \ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4 \ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4 \ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\A VG Anti-Spyware 7.5\guard.exe
O23 - Service: Digidesign MME Refresh Service (DigiRefresh) - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesig n\Drivers\MMERe fresh.exe
O23 - Service: digiSPTIService - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesig n\Pro Tools\digiSPTIS ervice.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\ iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMA X\SMAgent.exe
I know that i have a few viruses on my computer, but i cant get rid of them, in one case i think i have one on my ipod "boot.exe" and i cant get rid of it. All of the antivirus programs ive tried either dont pick it up or cant scan my ipod.
Den i have "copy.exe" which i dont know how to fix either.
Task manager and regedit were disabled, but i fixed that, but i still dont have the start>run option and my windows xp skin has disappeared and has opted for the outdated 95/98 skin.
My folder options is also disbled, and i tried a reg fix which i found on the internet but it doesnt work!
My other computer had the same symptoms, except i also had a problem with the process "lsass.exe" and i nothing was fixed. I tried a few antiviruses here too, but they would get rid of the virus, but it would immediately come back.
Den after a while, my computer would boot up and would get to the "logon on screen", but it was all black and all i could see was my mouse and my keyboard didnt do anything. This was the case in safe mode too.
So i managed to reinstall windows XP pro by hooking my hard drive up to another computer, since my disc drives had a problem reading the boot CS, and it started working...
So i shut down, put the hard drive back on the other computer and now when it gets to the boot screen, it jus restarts. I tried to hook it up to the other computer i used to install windows XP and the same thing happens. I also tried to install XP again, but the when i use the boot CD it wont read my hard drive. And i have a lot of valuable information on that hard drive so formatting is not an option.
I think i might have a problem with the booting sequence, cause i had a program called Boot Skin which changes the picture on the boot screen, but i dont know how to get rid of it.
I also suspect i got the virus from my friend when i gave him my ipod, cause i dont have internet on either of these computers.
PLEASE HELP ME! I havent used my computer for almost a month and i need it for school and what not. Thanks in advance.
P.S.
This is the hijackthis log from the computer which does actually load should it help...
By the way this computer, is only used for music production and theres a folder on my ipod call ".spotlight-v100" ]. I dont know what it is and i cant get rid of it.
Logfile of HijackThis v1.99.1
Scan saved at 02:16:45 PM, on 06/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180 )
Running processes:
C:\WINDOWS\Syst em32\smss.exe
C:\WINDOWS\syst em32\winlogon.e xe
C:\WINDOWS\syst em32\services.e xe
C:\WINDOWS\syst em32\lsass.exe
C:\WINDOWS\syst em32\Ati2evxx.e xe
C:\WINDOWS\syst em32\svchost.ex e
C:\WINDOWS\Syst em32\svchost.ex e
C:\WINDOWS\syst em32\spoolsv.ex e
C:\Program Files\Alwil Software\Avast4 \aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4 \ashServ.exe
C:\Program Files\Grisoft\A VG Anti-Spyware 7.5\guard.exe
C:\Program Files\Digidesig n\Drivers\MMERe fresh.exe
C:\Program Files\Analog Devices\SoundMA X\SMAgent.exe
C:\WINDOWS\syst em32\MsPMSPSv.e xe
C:\Program Files\Alwil Software\Avast4 \ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4 \ashWebSv.exe
C:\WINDOWS\syst em32\wscntfy.ex e
C:\WINDOWS\syst em32\Ati2evxx.e xe
C:\WINDOWS\Expl orer.EXE
C:\Program Files\Roxio\Eas y CD Creator 6\DragToDisc\Dr gToDsc.exe
C:\Program Files\Roxio\Eas y CD Creator 6\AudioCentral\ RxMon.exe
C:\Program Files\ATI Technologies\AT I Control Panel\atiptaxx. exe
C:\WINDOWS\syst em32\MAFWTray.e xe
C:\Program Files\SyncroSof t\Pos\H2O\cledx .exe
C:\Program Files\D-Tools\daemon.ex e
C:\PROGRA~1\ALW ILS~1\Avast4\as hDisp.exe
C:\Program Files\ATI Technologies\AT I HydraVision\Hyd raDM.exe
C:\Program Files\QuickTime \qttask.exe
C:\Program Files\iTunes\iT unesHelper.exe
C:\Program Files\Grisoft\A VG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\syst em32\ctfmon.exe
C:\Program Files\Roxio\Eas y CD Creator 6\AudioCentral\ Playlist.exe
C:\Program Files\iPod\bin\ iPodService.exe
C:\Documents and Settings\JP\Des ktop\hijackthis \HijackThis.exe
R0 - HKCU\Software\M icrosoft\Intern et Explorer\Main,S tart Page = quicknews.info - Dynadot Parking
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acr obat 6.0\Reader\Acti veX\AcroIEHelpe r.dll
O4 - HKLM\..\Run: [PtiuPbmd] Rundll32.exe ptipbm.dll,SetW riteBack
O4 - HKLM\..\Run: [RoxioEngineUtil ity] "C:\Program Files\Common Files\Roxio Shared\System\E ngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Eas y CD Creator 6\DragToDisc\Dr gToDsc.exe"
O4 - HKLM\..\Run: [RoxioAudioCentr al] "C:\Program Files\Roxio\Eas y CD Creator 6\AudioCentral\ RxMon.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\AT I Control Panel\atiptaxx. exe
O4 - HKLM\..\Run: [MAFWTaskbarApp] C:\WINDOWS\syst em32\MAFWTray.e xe
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSof t\Pos\H2O\cledx .exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.ex e" -lang 1033
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALW ILS~1\Avast4\as hDisp.exe
O4 - HKLM\..\Run: [HydraVisionDesk topManager] C:\Program Files\ATI Technologies\AT I HydraVision\Hyd raDM.exe
O4 - HKLM\..\Run: [DigidesignMMERe fresh] C:\Program Files\Digidesig n\Drivers\MMERe fresh.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime \qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iT unesHelper.exe"
O4 - HKLM\..\Run: [SpyHunter] C:\Program Files\Enigma Software Group\SpyHunter \SpyHunter.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\A VG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\syst em32\ctfmon.exe
O6 - HKCU\Software\P olicies\Microso ft\Internet Explorer\Restri ctions present
O6 - HKCU\Software\P olicies\Microso ft\Internet Explorer\Contro l Panel present
O8 - Extra context menu item: Open Client to monitor &1 - C:\WINDOWS\web\ AOpenClient.htm
O8 - Extra context menu item: Open Client to monitor &2 - C:\WINDOWS\web\ AOpenClient.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger \msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger \msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4 \aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\syst em32\Ati2evxx.e xe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\syst em32\ati2sgag.e xe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4 \ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4 \ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4 \ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\A VG Anti-Spyware 7.5\guard.exe
O23 - Service: Digidesign MME Refresh Service (DigiRefresh) - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesig n\Drivers\MMERe fresh.exe
O23 - Service: digiSPTIService - Digidesign, A Division of Avid Technology, Inc. - C:\Program Files\Digidesig n\Pro Tools\digiSPTIS ervice.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\ iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMA X\SMAgent.exe
Comment