Member Panel


Sponsors and Ads

Live Tag Cloud

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Answered] HJT for Examination Please - Very Odd Happenings

[Fixed] Hijackthis! Logs - [Answered] HJT for Examination Please - Very Odd Happenings posted in the Security & Safety forums; Friends XP SP2 working fine until yesterday. No firewall in place. First symptom can't find smtp server (Orange stuff) using Outlook Express and so can't send emails. Next IE can ...

JOIN US NOW to remove these Ads

PC Help Forum, the number one FREE computer support website in the search engines
Post New Thread  Reply
  #1  
Old 12-04-2007
elpmek's Avatar
Silver Member
 
Join Date: Feb 2006
Location: Gloucestershire
Posts: 168
PC Experience: Experienced
elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page
Default [Answered] HJT for Examination Please - Very Odd Happenings

Friends XP SP2 working fine until yesterday. No firewall in place.

First symptom can't find smtp server (Orange stuff) using Outlook Express and so can't send emails.

Next IE can find Orange webmail but after logging in comes back with "Can't Find Server" etc.

Next IE can load google but can't find the pages it finds (eg HijackThis Logfileauswertung) but can load bbc.co.uk but not btinternet.com. Reset all options in IE to defaults and same problem.

Also restored Belkin router to factory defaults, set it up again, same results. (Have System Restored to last Saturday as well)

Installed Firefox, importing nothing from IE, same problems with Firefox.

Also the already installed AVG & Ad Adware can't contact servers for updates.

Loaded Ad-Aware & Spybot with latest updates from memory stick.

Now try to boot in Safe Mode (with & without networking) and fail. Can only boot in full mode.

So ran Ad-Aware & Spybot in full mode & no reported problems..

So after all that very frustrating stuff please find HJT log attached.

Appreciating your help already!!
Attached Files
File Type: log aahijackthis.log (6.7 KB, 3 views)


  #2  
Old 12-05-2007
cartandpeg's Avatar
Moderator
 
Join Date: Nov 2005
Location: Victoria,Australia
Posts: 845
cartandpeg - See this Members User comments on their Profile page cartandpeg - See this Members User comments on their Profile page
Default Re: HJT for Examination Please - Very Odd Happenings

Hi elpmek,

Sorry about the delay in getting back to you.
We have a staff of techs who have a wide variety of skills and will be able to help you with your problem, this is not my area of expertise, one of the folks who can help you should be along shortly.
Thank you
Cart


  #3  
Old 12-05-2007
valis's Avatar
Senior Security Analyst
My PC
 
Join Date: Jan 2007
Location: texas, USA
Posts: 2,574
PC Experience: PC Illiterate
valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page
Default Re: HJT for Examination Please - Very Odd Happenings

hello elpmek....obviously the first thing to do is get a firewall on the system. I'd recommend Zone Alarm, it's free, and I've been using it for a few years now. There are other options out there, you can hit majorgeeks.com and search for free firewalls there.

Now for the fixes:

Download ComboFix from Here or Here to your Desktop.
  • Double click combofix.exe and follow the prompts.
  • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix's window while its running. That may cause it to stall

Next,
print these out. please close all other applications, start hjt again, click 'perform system scan only', place a tick next to the following and click 'fix checked'

O17 - HKLM\System\CCS\Services\Tcpip\..\{BC14C859-A819-4488-A103-F8A23B3AE30B}: NameServer = 4.2.2.1,4.2.2.2

Reboot, and post both the combofix log and a new hjt log.

thanks,

v


__________________

M.C.S.A.
M.C.P.
- MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall
  #4  
Old 12-05-2007
elpmek's Avatar
Silver Member
 
Join Date: Feb 2006
Location: Gloucestershire
Posts: 168
PC Experience: Experienced
elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page elpmek - See this Members User comments on their Profile page
Default Re: HJT for Examination Please - Very Odd Happenings

Thanks for the reply. However have just recently found the answer here:

Orange Problems - View topic - Speedtouch driver for Win 98 (NOT SE) - Orange Broadband, Orange Email, Orange Mobile Phones - OrangeProblems.co.uk (formerly WanadooProblems.co.uk)


which fixed the MTU settings

thanks


  #5  
Old 12-06-2007
valis's Avatar
Senior Security Analyst
My PC
 
Join Date: Jan 2007
Location: texas, USA
Posts: 2,574
PC Experience: PC Illiterate
valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page
Default Re: HJT for Examination Please - Very Odd Happenings

no problem, I'll mark this answered and toss it on the fixed pile.

Thanks again,

v


__________________

M.C.S.A.
M.C.P.
- MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

Reply
New! Norton Internet Security 2008 – Download Now Click Here

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
[Answered] HJT Log check MadGamer [Fixed] Hijackthis! Logs 3 07-26-2007 12:58 PM
[Pending] new hjt user needs advise on log file kalderz [Fixed] Hijackthis! Logs 4 09-06-2005 08:26 PM
[Answered] Two (and a half) odd problems in Win2K Abraham Windows XP/2000 2 03-14-2005 12:18 PM


All times are GMT +1. The time now is 08:49 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top