am new and i need fast help please...

Discussion in 'Malware Help (A Specialist Will Reply)' started by mistyme, Oct 21, 2006.

  1. mistyme

    mistyme Private E-2

    i am new and with my pc questions i always surf your site...It is so helpful...so i decided to post my problem here as i need the fastest help ....before i totally crash i guess...i started rebooting when i was chatting with friends in a conference ....then got lsass.exe cannot be found...and i had my pc reformatted....now am back to rebooting continuously.....what can possibly be wrong...i even get messages now about having corrupt files when i used to be clean ....please help...here is my hijack this logfile...

    EDIT: Removed inline HJT log for guide to be run
     
    Last edited by a moderator: Oct 22, 2006
  2. Novice

    Novice MajorGeek

    Hello, and Welcome to Major Geeks!

    Just by looking at your log, I didn't see an antivirus app. running! Please go to this link, http://forums.majorgeeks.com/showthread.php?t=35407, which is in the Malware Removal section of the forum and follow the procedures listed! Have a nice day!:)
     
  3. Toni_1947

    Toni_1947 Command Sergeant Major

    The OP has antivirus: It's part of the Zone Alarm program.
    O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe

    This can go:
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    These are NOT good:
    C:\WINDOWS\vsnpmi03.exe
    O4 - HKLM\..\Run: [SNPMI03] C:\WINDOWS\vsnpmi03.exe

    Unless windows messenger is used, these can go:

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    and HijackThis! is not properly installed to begin with.
    Go HERE: http://forums.majorgeeks.com/showthread.php?t=35407
    Follow all the steps and then go HERE and post: http://forums.majorgeeks.com/forumdisplay.php?f=35
     
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    HI mistyme

    To rule out malware as the cause.....

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    Downloading, Installing, and Running HijackThis

    Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.


    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
      • CounterSpy - ONLY IF you were not able to run Windows Defender
      • Bitdefender - from step 6
      • Panda Scan - from step 6
      • runkeys.txt - the log from GetRunKey.bat
      • newfiles.txt - the log from ShowNew.bat
      • HijackThis
    NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!
     
  5. mistyme

    mistyme Private E-2

    Hello and thanks for being so accomodating...I appreciate every help ...but after I posted my log then, i rebooted and lost my desktop icons...all was just blue...so I have no way then but to have it reformatted...I will see and follow what Halo advised and sorry if I may have posted it the wrong way ....It was a time then I experienced when the best thing I can do is ask help...Thank you so much...and it's nice to be a part of this helping community....love you guys!!!....
     
  6. matt.chugg

    matt.chugg MajorGeek

    Sorry you had to resort o formatting.

    Once you get your computer up and running again have a read of this thread and lets see if we can keep it from happening again!

    How to Protect yourself from malware!
     
  7. mistyme

    mistyme Private E-2

    thanks for a warm response...i followed what you advised so as to prevent it somehow in the future...But i am a little lost if what i have now is okay...at present i have ANTIVIR...ADAWARE SE PERS...EWIDO...AND SPYBOT which i hope you can help me deactivate the TeaTimer since i enabled it when i installed Spybot...And are all those 4 okay to have?...plus I plan to follow it with an installation of CCleaner....just a piece of advice..am i on the right track?...because a friend of mine also had rebooting problems followed by a reformatt and he said that everytime he has Spybot in his system he crashes..well i guess just a mere coincidence...anyway,having you all makes this world a safer place...thanks!
     
  8. matt.chugg

    matt.chugg MajorGeek

    You look like your in the right direction.

    What about firewall ? Personally I use Zone ALarm. Also spywareblaster is a must have tool. You can find both of these in the link above.

    Personally I don't use spybot at all, if you can install windows defender I would use that. MS has just released the final version of it so its out of beta now and it pretty stable and a good resident andtispyware program.
     
  9. mistyme

    mistyme Private E-2

    Please help .....

    My head has been spinning since i reformatted my pc....the webcam i use is NB300 V1.1 and has been using it for couple of years...But after my reformat it displays an error and a black screen...i tried to uninstall it from the add/remove but many times it installs rather than uninstalls...I tried in safe mode but in my normal window it is still there...what will i do...I even tried uninstalling from the device manager but it is still here yet when i try to use it it says...This device is not configured correctly. (Code 1)

    To reinstall the drivers for this device, click Reinstall Driver.....now am like lost in oblivion...the cam window opens but blank image appears....

    Please help meeeeeee......:confused:
     
  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Re: Please help .....

    I would post this over in the Software forum since it's not malware related.
     
  11. mistyme

    mistyme Private E-2

    Thank you very much....but doing so will prove futile as my pc crashed already then after a day or two...again my sincerest thanks and God bless you...have nice days ahead!!!
     
  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Likewise! :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds