Guess wot

Discussion in 'Software' started by nickson2, Jun 30, 2004.

  1. nickson2

    nickson2 Master Sergeant

    my 2nd pc was playin up so i ran a hijack this log, and rather than bother you knowledgable folks - chaslang, kodo, alanc+ decided to fix wot i thought....BIG MISTAKE! cos when i boot up i get error messages, summat to do with some dll file being missing, and when i run spybot i cant fix selected cos several more dll files are missing....DONT SHOUT! and dont say SERVES YOU RIGHT....ive learnt the hard way :'( .
    Can i put it right? can anybody help?
     
  2. alanc

    alanc MajorGeek

    HijackThis makes backups of what it 'fixes' - click Config > Backups > select the one you want and click Restore.
     
  3. nickson2

    nickson2 Master Sergeant

    i already tried that, I only had one backup there, so i selected it. but the prob remains, ive tried to set back to last config that worked as well. :(
     
  4. alanc

    alanc MajorGeek

    What dlls are missing?

    If this is your XP install you
    1. can try System Restore
    2. if it's a Windows system file you can run sfc /scannow

    Other than that you'll probably have to reinstall whatever app the dlls belong to...

    Just an FYI: keep HijackThis in the same non-temp folder as that's where the backups will be.
     
  5. nickson2

    nickson2 Master Sergeant

    will try the advice, but wots an FYI
     
  6. alanc

    alanc MajorGeek

    For
    Your
    Information
     
  7. nickson2

    nickson2 Master Sergeant

    When pc has booted up, on the desktop i get an error message reading:-
    RUNDLL
    Error loading C:\Program Files\WildTangent\Apps\CDA\cda Engine 0400.dll.
    The specified module could not be found.

    When i run sfc \scannow :-
    WINDOWS FILE PROTECTION
    Files that are required for Windows to run properly must be copied to the DLL Cache.
    Insert your Windows XP Professional CD-Rom now.
    (Big probs, ive had 2 replacement cd-roms already and their both damaged)
     
  8. nickson2

    nickson2 Master Sergeant

    i was gonna say that, but didnt wanna look thick.:confused:
     
  9. alanc

    alanc MajorGeek

    Have you been playing online games? ;)

    Look for Wild Tangent in Control Panel Add/Remove to try to uninstall it.

    If it's not there let me look at your HijackThis log.
    That's a problem. Forget running that command for now.
     
  10. nickson2

    nickson2 Master Sergeant

    I dont play online games but that thing of mine called a son does...im sick o telling him to stop it, we got hijacked last week by myseach bar or summat.

    Ive looked for Wild Tangent and its not there, i remember fixing a line to do with that in my last hijack log that put me here.
    also fixed a line to do with Zango or summat.
    anyway here is the log as it stands now, just ran HJT.


    Logfile of HijackThis v1.97.7
    Scan saved at 09:02:05, on 01/07/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Executive Software\Diskeeper\DkService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Documents and Settings\marie\Desktop\Maintenance\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.chaptercheats.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O2 - BHO: (no name) - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program Files\Panicware\Pop-Up Stopper\CCHelper.dll
    O3 - Toolbar: Pa&nicware Pop-Up Stopper - {7E82235C-F31E-46CB-AF9F-1ADD94C585FF} - C:\Program Files\Panicware\Pop-Up Stopper\pstopper.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    O4 - HKLM\..\Run: [Ad-aware] "C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-aware.exe" +c
    O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
    O9 - Extra button: Messenger (HKLM)
    O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab27571.cab
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab27571.cab
    O16 - DPF: {99410CDE-6F16-42CE-9D49-3807F78F0287} (ZangoInstaller Class) - http://infinity.zango.com/gateway/resources/default/zangoinstaller.cab?productid=542
    O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} (WTHoster Class) - http://install.wildtangent.com/bgn/partners/nike/nikefz4/install.cab
    O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
     
  11. alanc

    alanc MajorGeek

    Fix these lines:
    O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
    O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} (WTHoster Class) - http://install.wildtangent.com/bgn/...fz4/install.cab

    Then reboot to Safe Mode and delete this entire folder:
    C:\Program Files\WildTangent

    This will break whatever game(s) he's been playing that installed Wild Tangent.
    You also might want to go thru these uninstall intructions Wild Tangent has so graciously provided:
     
  12. nickson2

    nickson2 Master Sergeant

    looks like ive sorted that with your help thanx.... just gotta get my upstairs pc online, but ive been trying for days all to no avail.
     
  13. nickson2

    nickson2 Master Sergeant

    right, ive checked my network places, network connections on upstairs pc and it shows gateway connection and internet connection, when i view workgroup computers it shows both upstairs pc and downstairs pc. i can see my printer connected to my downstairs pc on printers on upstairs pc. Downstairs pc shows my NIC connected to upstairs pc, and connection to standalone modem. (should i see upstairs pc on network connections?)
    when i try to sign in on msn on downstairs pc, it works no problem, but when i try on upstairs pc, it comes back with "there may not be internet connectivity" and also i cannot surf the internet, i get "the page cannot be displayed". ive run network wizard again, but to no avail, please help.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds