OMG Im dyin' here! HALLLLLLLLLLP!

Discussion in 'Malware Help (A Specialist Will Reply)' started by Felinity, Feb 7, 2006.

  1. Felinity

    Felinity Private E-2

    Its taken almost 30 minutes just to register then follow the link & then load this one page.

    I run 2000 Professional on a pentium 3, with a v.90 modem thats always handled my dialup ISP very well, & at a good speed. I recently moved across town & began using a different phone company's line which runs through another phone company's lines, & I can only attain a speed of 33.6, no matter what I do. I use Firefox 1.0.7, & have even uninstalled that & re-installed it to no avail.

    I constantly get "The Operation has timed out" & "<URL> could not be found. Please check the name and try again."

    Ive run Spybot (It took days just to get that to update), and Ad-Aware (which states after running the update that the "file cannot be read", so I cant update that), both of which find no spyware which could be causing this issue. My updated AVG Free finds no virus either.

    My ZoneAlarm Pro blocks many "intrusions" from many different IP addresses that begin with the same numbers as mine (4.88.XXXX and so on) that I suspect may be necessary for me to browse, possibly being connected to my ISP. I dont know how to fix this so those contacts can be permitted to get through to my computer.

    WHAT DO I DO?? Even Housecall cant run to scan my computer. It gets frozen & hung up on me.

    Can anyone help me??
     
  2. Felinity

    Felinity Private E-2

    I should also add that pages do not load completely when they DO finally load. For instance, a chat-site I go to lists several rooms once a member logs in and goes to that chat area. In my case, Im lucky if only two out of 100 rooms show as existing, then the page stops loading, and the status bar says "Done".

    My ISP is a great dialup out of California which Ive never had one problem with. Its DSLExtreme, & uses an accelerator called Propel.exe (Propel Accelorator X Dial) using something called X25. Many executable files (upgrade to SpyBlaster, for example, which I cannot get to work now, in its latest incarnation, as a result) I try to download "cannot be read". Propel remains idle the entire time Im trying to browse, saying "Propel Accelorator is idle because you have not yet started browsing", when Im trying to browse my behind off.

    What is causing all of this, & how can I get my speed above 33.6?? Is this the cause of this excessive slowness?
     
  3. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

  4. Felinity

    Felinity Private E-2

    Gotcha, Shadow_Dude. This was excruciating because of the extreme slowness & constant time-outs, & the zipfile was refused by WinZip, which stated that it "does not appear to be a valid file & cannot be opened" by WinZip, aso I had top resort to my older Hijack This! exe file, placed in a valid Program Files folder I just made. But I did it.

    Here is the attachment, following the instructions in the link you posted. Can you see anything strange in this log file that might cause my 3-week long battle with this problem?
     

    Attached Files:

  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow the steps in the link that SPD gave to you. You did not install HJT as requested. You have it here:

    C:\Documents and Settings\Owner\Desktop\MyPrograms\Hijack This!\HijackThis.exe
     
  6. Felinity

    Felinity Private E-2

    "...the zipfile was refused by WinZip, which stated that it "does not appear to be a valid file & cannot be opened" by WinZip, aso I had to resort to my older Hijack This! exe file..."

    Chaslang, I tried downloading the current version of HJT from the link that Shadow provided. I got the zipfile downloaded, but I dont understand why WinZip wont open it, not recognizing it as a "valid file". I had no choice but to use the opened one I already had, & place it into a folder named "HJT" in my C:\Program Files.

    Any suggestions?
     
  7. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I don't know what your problem is. It works just fine for me and for everyone else. What version of WinZip do you have.

    But it does not matter since you can use the version of HJT that you have since it is the correct version 1.99.1. You just need to put it in the proper folder and run it from there. You did not do this in your last log. You ran it from:

    C:\Documents and Settings\Owner\Desktop\MyPrograms\Hijack This!\HijackThis.exe
     
  8. Felinity

    Felinity Private E-2

    The message that appears over the zipfile of Hijack This! when I mouse over it is: "No zip file, bad zip file or part of a spanned/split zip file".

    I imagine that the file didnt fully download, due to the slow connection speed, not supporting the connection with enough stability. Does this sound right?

    I did start the Hijack This! right from the Program File folder "HJT", not from the desktop folder called "MyPrograms", which is a temporary folder I keep the initial downloads in for various programs I use.

    I dont know why it would appear I started it from the latter when I didnt.

    What now?...Im thoroughly baffled at all of this. :eek:
     
  9. Felinity

    Felinity Private E-2

    The logfile is the same, gathered with the use of HJT that was run from the program File folder "HJT", not from the desktop source you see there. I had copied that hijackthis.exe from that temp folder, when the zipfile wouldnt unzip into the C:\Program Files\HJT folder and placed it into that folder manually.

    The HJT log results are correctly gathered that way, right? I sure hope so. im getting a major headache. I just want this PC nightmare to be over & a solution somehow found. *sigh*
     
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    No you did not run it from C:\Program Files\HJT. You probably ran it from a short cut or copy that you previously put on your Desktop. You must run it from the folder itself. Right click Start and select Explorer. Now navigate to C:\Program Files\HJT using Windows Explorer. Now double click on the hijackthis.exe file. What do you see in your log now.........?

    I would expect C:\Program Files\HJT\hijackthis.exe

    Now if you want to have a short cut to the proper hijackthis.exe on your Desktop, in the Windows Explorer window right click on hijackthis.exe and drag it onto your Desktop and let go of the mouse button. Select Create Shortcut here. Now if you click on the new shortcut, it will run the the hijackthis.exe that is in C:\Program Files\HJT.
     
  11. Felinity

    Felinity Private E-2

    zok chaslang, I did it the way you specified. Does this make the difference? *crossing fingers & hoping*...

    Well I tried running it the way you specified, but now when I try to attach the new hijackthis.txt file, the attachment manager wont allow me to, stating I already attached this file in the previous post. I tried to attach a "1" by renaming it, but that didnt help either. Im really frustrated with this. If the HJT file I just gathered cant post, because the faulty one is already here, how can I repair it??
     
  12. Felinity

    Felinity Private E-2

    Trying to attach this new log, but heres what the 'manage Attachments" popup said, even with the logfile renamed "hijackthis1.txt", as the contents of the 1st attachment & the 2nd were the same.

    hijackthis1.log:
    You have already attached this file in thread : OMG Im dyin' here! HALLLLLLLLLLP!
     
  13. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Well then I would say you still did not do exactly as I ask. Look in your log and paste in your next message where hijackthis.exe is running from. Is it still the same as before? If so, that's your problem.
     
  14. Felinity

    Felinity Private E-2

    OK Chaslang...I think I got it this time...Im not the swiftest deer in the forest when it comes to tech stuff, as I was all self-taught from complete 'puter ignorance 6 years ago. But I do know more than most women.

    Lets see if this hjt logfile checks out. Please dont cuss me if it doesnt. Im struggling here to follow some of these instructions, because I really want this problem done away with. Im increasingly desperate over it, & I am a recent open-heart quintuple bypass patient, so the stress is killin' me here.
     

    Attached Files:

  15. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Okay now that we have finally gotten HJT installed correctly, there are no major issues that show in your HJT log. There are only some minor things that we could tweak but none have anything to do with your problems.

    I would say that your problem is due to the phone lines you are now connected to being too noisy to get reliable connection rates. And even if you do connect at a high rate, over a period of time (which could be a short interval) the line errors that are occurring are going to cause you modem to keep retraining to lower rates in an attempt to resolve the errors. If your phone lines are noisy or have too much crosstalk or 60 cycle hum due to close vicinity of powere lines, you are just SOL unless you can get the phone company to fix the problems. Sometimes all they do is reconnect you to another pair of wires which may or may not do anything.

    None of this is anything that we can really help you with here in the Malware Forum. I would start with your phone company and ask them to measure the noise and crosstalk levels on your phone line.
     
    Last edited: Feb 9, 2006
  16. Felinity

    Felinity Private E-2

    OK Chas, that at least rules out my old computer being at fault. Ive kept it in good condition, safely secured, so any possible breach in that really inflamed me.

    What tweaks could you suggest I do to hasten it? Its pretty bit slow in performance at startup. I dont connect to a network of other computers. This thing used to belong to a government-contracted company. I bought it at an auction. Its a Micron millennia, Pentium 3. Its a workhorse, thats for sure. I know a lot of crap load up at startup that it doesnt need. id really like to clean that mess off of it so bootup is faster & cleaner.

    i depend on ZoneAlarm, AVG, Ym messenger, and of course I use my Spybot, Ad-aware, SpyBlaster, on occasion palTalk, & I chat at a specific site daily between working on my Photosuite 7.

    You guys here at MajorGeek are the best in my book. I appeciate so much the time you take to help people with these frustrating problems & the sleazoid intrusions into the privacy of their computers by the slugs out there who respect no one.

    Thanks Chas, Shadow...
     
  17. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I don't know what you use and do not use, so you have to be the judge of what to remove or not. Windows 2000 is just a slow OS to boot up.

    You definitely can uninstall Viewpoint Manager

    Do you use the Iomega stuff?
    Do you use Siber Systems AI RoboForm
    Do you use Windows Registry Repair Pro and do your really want it to run every single time you boot your PC?

    And as to whether the below are worth using or not, I cannot really say but I know I don't use them or see the need for them.
    Propel Accelerator
    FreeRAM XP Pro
     
  18. Felinity

    Felinity Private E-2

    Chaslang, Ill answer these as best I can, though my knowledge of a couple of these things is limited.

    I know that I dont use that Viewpoint thing, & I dont know where it came from. Its connected to some version of a media Player, but Ill uninstall that as you said.

    The Iomega thing supposedly was installed for the government company that used to have the computer, & it seems to be connected to running the CD & zip drives. Id like to know how to find out for sure before I alter it.

    Roboform holds all my old passwords, which I dont use often at all. I can start that as needed. But it doesnt need to bootup at startup at all. How do I stop that?

    Registry Repair Pro is a thorn in my side as I believe it was responsible for some of this mess along with my inability to understand what pathway to "fix". But anytime I run it, it resets itself to run at bootup everytime. I just stop it each time. Maybe I should just uninstall it?

    Propel Accelorator is used by my ISP to hasten my loading, but it seems to be corrupted as it remains idle when Im browsing, telling me it is idle because I havent yet started browsing...but I have...and it stays idle. Could this be because of my slow connection speed? (33.6, dialup)

    FreeRam helps when it run out of ram, but it doesnt need to startup at boot.

    Now along with this KeyLogger issue (in thread http://forums.majorgeeks.com/showthread.php?p=739128#post739128 ), Im in a quandrary.
     
    Last edited by a moderator: Feb 12, 2006
  19. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Viewpoint stuff is junk from AOL. If you install any of their software or update it, you will get this crap. Uninstall it.

    Do you still use the Iomega CD & ZIP drive? Are they internal or external drives?

    There are a load or Roboform thinks in your HJT log? If you remove them, it may not work as you need it to work. I personally would not use stuff like this but many people like them. I prefer to be safer and not let anyone else or anything else monitor or save my passwords or other private info. It is just another place that malware can try to look at to get your info.

    If you don't use Registry Repair Pro or it is causing you problems, uninstall it. The same goes for Propel Accelerator?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds