my dad needs help with his computer

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by MOUMANTAI, Sep 27, 2005.

  1. MOUMANTAI

    MOUMANTAI Specialist

    i hope i posted this in the right area

    my dad needs help i tryed to help fix the problem but i coulnt

    ok heres the problem

    my dads net zero refuses to get to the internet but its my fault i tryed to fix my dads computer when he told me it was running very slow

    dads computer uses windows me edition so i think its an old 95 computer

    anyway i got rid of viewpoint media player and wild tangent they were on there cause dad triued aol

    anyway my brother has some p2p program i think it was called warez on there so i deleted it and the other junk including something called zango

    and when i ran antivir i had the settings on catch security privacy risk it caught wild tangent so i removed it and it caufght something called i think new.dot or something like that i removed that too

    i think thats what caused net zero to freak out

    i tried uninstalling net zero and installing it again but that didnt help
     
    MOUMANTAI, Sep 27, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Are you referring to the PC in the below thread that was working fine a couple days ago?

    http://forums.majorgeeks.com/showthread.php?t=73063

    You may have broken the LSP chain if you did not uninstall newdot.net properly.

    Did you follow the directions in the READ ME FIRST sticky thread? Especially the part with how to setup Spybot to fix the Ignore products problem?

    You may need to do something like the below. However your problem file from newdot.net may not be named exactly the same. (Note do not remove other items you see using LSP-fix, most are valid and necessary. Only fix items that refer to newdot. If not sure, ask first.)

    Download LSP - Fix

    Run LSP-Fix.

    Check the Box labeled "I know what I'm doing" and then click on the newdotnet6_38.dll file (in the “Keep” section) to select it.

    Then, Select the >> button to move newdotnet6_38.dll into the Remove section.

    Now, click the Finish Button. When the Repair Summary box appears, click OK.
    If it is already in the Remove section, just click Finish.
     
    chaslang, Sep 27, 2005
    #2
  3. MOUMANTAI

    MOUMANTAI Specialist

    i forgot to read that sticky ill read it now

    and i didnt use spybot

    but the newdot thing is that just a netzero thing
     
    MOUMANTAI, Sep 27, 2005
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No newdotnet is not from NetZero. It is malware and it often hooks into the LSP chain. If items like this are removed improperly the LSP chain can be broken and this can result in no Internet connection.
     
    chaslang, Sep 27, 2005
    #4
  5. MOUMANTAI

    MOUMANTAI Specialist

    oh no how can i fix this i dont understand tech talk at all it confuses me

    oh i forgot to mention when you start the computer up and it finally gets everything up the desktop piccy ect a message in a little box in the middle of the screen appears that says i think rendal on the title bar and something like cant find newdot inside it

    the newdot i deleted was in the add/remove programs do you think there might be a folder i need to delete or something i sure hope there is
     
    MOUMANTAI, Sep 28, 2005
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You probably need to use LSP-fix like I said in message number 2.

    Do you have a way of getting files onto this PC? As I asked in message # 2, is this the same PC you were previously working on? Do you have any of the tools from the READ ME FIRST on it? Do you have HJT 1.99.1 on it?
     
    chaslang, Sep 28, 2005
    #6
  7. MOUMANTAI

    MOUMANTAI Specialist

    i cant get on the internet at dads place at all so i dont know how ui can fix this problem
     
    MOUMANTAI, Sep 28, 2005
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please answer my other questions?

    Also can you burn files to a CD elsewhere (or any other media) and then copy to this PC?
     
    chaslang, Sep 28, 2005
    #8
  9. MOUMANTAI

    MOUMANTAI Specialist

    no i dont have any of those programs

    and i dont have any disks but im going to my dads tonight so i can get one from him
     
    MOUMANTAI, Sep 28, 2005
    #9
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    What good is that? I thought your DADs PC was the infected one.

    What do you mean "disks"? CDs or floppies? Floppies are to small to copy many of the tools too. Some stuff will fit on them but others will not.
     
    chaslang, Sep 28, 2005
    #10
  11. MOUMANTAI

    MOUMANTAI Specialist

    no no i mean ill have to get a disk and download those programs and save them to the disk then next time i go to dads house ill be prepaered

    ill write down what you tell me to do too
     
    MOUMANTAI, Sep 28, 2005
    #11
  12. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Do you mean floppy disk or do you mean CD?

    If floppy, do both PC's have a floppy drive? Some new PCs do not.
     
    chaslang, Sep 28, 2005
    #12
  13. MOUMANTAI

    MOUMANTAI Specialist

    yes i have a smkall disk drive and i think my dads computer has a small disk drive too but ill check to make sure
     
    MOUMANTAI, Sep 28, 2005
    #13
  14. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    See message number 2 and get LSP-Fix and also get HijackThis 1.99.1

    Extract both of them from the ZIP files and copy them to your floppy and take them to your dads.
    Check for what I said in message # 2 about using LSP-fix to fix newdotnet. Then do the below on your dads PC.

    - copy hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file back to your floppy.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    chaslang, Sep 28, 2005
    #14
  15. MOUMANTAI

    MOUMANTAI Specialist

    ok ill do that thanks so much i hope this works or dads not gonna be very happy lol
     
    MOUMANTAI, Sep 28, 2005
    #15
  16. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay! Post that HJT log as an attachment as soon as you can and let me know if you found any newdot.net items with LSP-fix.
     
    chaslang, Sep 28, 2005
    #16
  17. MOUMANTAI

    MOUMANTAI Specialist

    um do i make a folder in my program files for hijack this

    or can i use hijack this from the floppy
     
    MOUMANTAI, Oct 2, 2005
    #17
  18. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Creating the C:\Program Files\HJT folder:

     · Click START and select Explore.
    · Select the drive where Windows is installed (normally drive C)
     · Navigate to the C:\Program Files folder and select it.
     · Now click the on the top menu where it says File and then select New.
     · Then select Folder
     · A new folder is created and highlighted.
    · Just type HJT to overwrite the default name (New Folder)


    To extract hijackthis.exe on WinXP systems without WinZip:

    · locate the HijackThis.zip file you downloaded and right click on it
     · Select Extract All and click Next
     · Browse your way to the C:\Program Files\HJT folder created above
     · Select the folder and click Next

    Using WinZip(assuming it is installed):

     · locate the HijackThis.zip file you downloaded and right click on it and select Extract to. This will open Winzip.
     · Use the Folders/drives navigation pane to locate and select the C:\Program Files\HJT folder you previously created. After selecting it, make sure it shows in the Extract to: box.
     · Click the Extract button
     
    Shadow_Puter_Dude, Oct 2, 2005
    #18
  19. MOUMANTAI

    MOUMANTAI Specialist

    ok i wrote everything down i just hope thiis works or dads gonna kill me lol
     
    MOUMANTAI, Oct 2, 2005
    #19
  20. MOUMANTAI

    MOUMANTAI Specialist

    i did it i fixed dads computer the lspfix worked im on dads computer posting this right now thanks for the help chaslang

    um i tryed to used hijack this but it came up with lots of diffrent things and i didnt wanna mess something up by removing the wrong thing so i need some help

    can anyone help me
     
    MOUMANTAI, Oct 4, 2005
    #20
  21. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Now that you can connect, follow standard cleaning processes first!

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    chaslang, Oct 5, 2005
    #21
  22. MOUMANTAI

    MOUMANTAI Specialist

    this is what i found on hijack this

    i hope this is the right log cause i ran it again to get rid of warez after i got rid of newdot

    i havnt done the tutorials yet though ill try to do them before i go home tomorrow

    but right now i gotta go to bed cause im bushed

    thanks again for the help chaslang
     

    Attached Files:

    MOUMANTAI, Oct 5, 2005
    #22
  23. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to follow the steps in my previous post to run all of the READ ME FIRST. Make sure you follow the directions on fixing Spybot's Ignore product but properly.
     
    chaslang, Oct 5, 2005
    #23

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds