Urgent help needed

nickson2 · Jul 25, 2004

Could you take a look at this HJT log for me, its for my relatives....
Thanx

Edit by chaslang: HijackThis log removed
- No Reason given for requesting help.
- Do not post logs without being asked to post them.
- Do not double space them
- And only post them as an attachment. See: http://forums.majorgeeks.com/showthread.php?t=35407

I added your log back in this time as an attachment (single spaced). Next time it will be deleted.

NeoNemesis · Jul 25, 2004

Please read the the rules in the sticky on how to post HJT logs. This can be located in the spyware section near the top.

To help with the problem though the only line I can point out is:

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

chaslang · Jul 25, 2004

So what's your problem? Is it lack of Internet access? See this line:
O10 - Broken Internet access because of LSP provider 'ypclsp.dll' missing

Try LSP-fix downloadable here: http://www.cexx.org/lspfix.htm

nickson2 · Jul 26, 2004

chaslang said:

So what's your problem? Is it lack of Internet access? See this line:
O10 - Broken Internet access because of LSP provider 'ypclsp.dll' missing

Try LSP-fix downloadable here: http://www.cexx.org/lspfix.htm
Click to expand...

Done an online virus scan (trend micro house call) and it found 2 x netsky.P viruses and said they were uncleanable. Other problems include....
dial up connection keeps popping up
pc is running very slow and wont defrag

pc specs as follows

Microsoft Windows 98 4.10.2222 A
Clean install using OEM Preinstall Kit /T:C:\WININST0.400 /SrcDir=C:\WINDOWS\OPTIONS\CABS /IS /IW /IQ /ID /IV /IZ /II /NR /II /C /U:xxxxxxxxxxxxxxxxx
IE 5 6.0.2800.1106
Uptime: 0:02:24:05
Normal mode
On "OEMCOMPUTER" as "fran lockyer"
Flatrock Systems Limited
AuthenticAMD AMD-K6(tm) 3D processor
384MB RAM
57% system resources free
Windows-managed swap file on drive C (11853MB free)
Available space on drive C: 11853MB of 19083MB (FAT32)
Available space on drive D: 5575MB of 8040MB (FAT32)

using norton system works, spybot search and destroy.

Major Attitude · Jul 26, 2004

Odds are you need to try and clean or delete them from safe mode. Have you tried this yet?

nickson2 · Jul 26, 2004

Major Attitude said:

Odds are you need to try and clean or delete them from safe mode. Have you tried this yet?
Click to expand...

i havent tried from safe mode... i have downloaded the W32.netsky.p removal tool from symantec and it said that the netsky virus was not found on the system.... Do i run this removal tool from safe mode? and if so how, im not used to working with Windows 98 and im sorting this pc for my relatives if i can.... Thanx for any help.

chaslang · Jul 26, 2004

For the Netsky problem, try this: http://www.pandasoftware.com/virus_info/encyclopedia/overview.aspx?lst=sol&idvirus=45740#ELIMINARPANDA

Let me know if it helps.

For the slow down, have you run CWShredder: http://www.majorgeeks.com/download4086.html

nickson2 · Jul 27, 2004

chaslang said:

For the Netsky problem, try this: http://www.pandasoftware.com/virus_info/encyclopedia/overview.aspx?lst=sol&idvirus=45740#ELIMINARPANDA

Let me know if it helps.

For the slow down, have you run CWShredder: http://www.majorgeeks.com/download4086.html
Click to expand...

was following the above link for pandasoftware and while the system was scanning the whole pc froze resulting in me having to reboot....on reboot the following appeared on the screen...
Microsoft Windows 98 Start up Menu
1 Normal
2 Logged (\BOOTLOG.TXT)
3 Safe Mode
4 Step-by-step confirmation
5 Command prompt only (which it highlighted))
6 Safe mode command prompt only

Warning:- Windows has detected a registry/configuration error. Choose, Command prompt only, and run SCANREG.

The following file is missing or corrupted
C:\WINDOWS\HIMEN.SYS
C:\WINDOWS\DBLBUFF.SYS
C:\WINDOWS\IFSHLP.SYS
Cannot find WIN.COM, unable to continue loading windows

PLEASE HELP ME SORT THIS, IM ONLY HERE FOR A FEW MORE DAYS AND IVE GOTTA SORT IT BEFORE I GO HOME

maybe this thread will need moving now from this forum as its got more complicated and moved away from the virus problem for the time being.

Thanx in advance,

Major Attitude · Jul 27, 2004

Follow all these steps and from safe mode. Easy way into safe mode is to reboot, after the first black and white screen, but before the Windows splash screen just start tapping the f8 key. Choose "Safe mode without netwrking support" when the option screen appears, then wait a few minutes. Now, your in safe mode.

http://forums.majorgeeks.com/showthread.php?t=35407

chaslang · Jul 27, 2004

If those files are truly corrupted or missing you will need to copy them off your Win98 CD and back on to you hard disk. Some of these files may be on the Win98 CD in compressed form. The compressed form of the file will always show the same as the original file name except the last character will be an underscore (_). For example: himem.sys would be himem.sy_ if it is compressed. There is a program named expand.exe which is part of the OS and it is used to expand the files.

I would expect that if win.com is missing the PC does not boot into Windows at all. So where are you at currently?

nickson2 · Jul 27, 2004

thanx major and chaslang, ive been posting this problem in the software forum, as i felt it no longer belonged in here,and thought u guys may have moved it for me....but i got sooooo desperate that i had to start a new thread in software sorry..... im on my hols and im trying to sort this problem before i go back home.... im following kodo's advice in software thread at the moment. sorry if im being a nuisance, i kinda get myself all stressed out and you guys are so helpfull in sorting all the problems that get posted on geeks

nickson2 · Jul 27, 2004

chaslang said:

If those files are truly corrupted or missing you will need to copy them off your Win98 CD and back on to you hard disk. Some of these files may be on the Win98 CD in compressed form. The compressed form of the file will always show the same as the original file name except the last character will be an underscore (_). For example: himem.sys would be himem.sy_ if it is compressed. There is a program named expand.exe which is part of the OS and it is used to expand the files.

I would expect that if win.com is missing the PC does not boot into Windows at all. So where are you at currently?
Click to expand...

cant get into safe mode or anything, so ive posted the where im upto in the software forum.

chaslang · Jul 27, 2004

nickson2 said:

cant get into safe mode or anything, so ive posted the where im upto in the software forum.
Click to expand...

Since this problem is now being worked in the Software Forum, I have closed this thread.

Log in or Sign up

Urgent help needed

nickson2 Master Sergeant

Attached Files:

hjtlog.txt

NeoNemesis Moutharrhea

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nickson2 Master Sergeant

Major Attitude Co-Owner MajorGeeks.Com Staff Member

nickson2 Master Sergeant

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nickson2 Master Sergeant

Major Attitude Co-Owner MajorGeeks.Com Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nickson2 Master Sergeant

nickson2 Master Sergeant

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Log in or Sign up

Urgent help needed

nickson2 Master Sergeant

Attached Files:

hjtlog.txt

NeoNemesis Moutharrhea

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nickson2 Master Sergeant

Major Attitude Co-Owner MajorGeeks.Com Staff Member

nickson2 Master Sergeant

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nickson2 Master Sergeant

Major Attitude Co-Owner MajorGeeks.Com Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

nickson2 Master Sergeant

nickson2 Master Sergeant

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

Useful Searches