Hey!

Ok, so I've recently been having issues with downloading many programs, if not all. I can download skype and AIM but I can't use them. It says connection error, cannot connect to server bla bla bla.

I just don't know why, I have internet, (obviously) I've checked my firewall settings, and I've turned them off and tried using programs with to no avail.

It's really aggravating b.c I just recieved a new web cam, and of course my computer won't download the software, because of a server error.

Could it be viruses? My computer probably has some, but I don't want to blame it on just that, it has to be something I'm missing or changed to fix something in the past.

Thanks so much for the assistance!

Hello lupsided and welcome to PCHF,

You please post you're system specs by clicking on the "system Spec’s" link and posting on you're profile (details given in the link).

I'll also mark this thread open so it attracts our highly skilled tech staff.

Regards,

Clever_Duck

Plug and Play Monitor

thank youuuu!

It could be your dns not working try setting your dns to

• 208.67.222.222
• 208.67.220.220
• But if you think you have a virus we need to get rid of that first if you can complete the prework in my signature and post the result the security team can help you

ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2009/11/04 19:41
Program Version: Version 1.3.5.0
Windows Version: Windows XP Media Center Edition SP3
==================================================
Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0xF3AF9000 Size: 98304 File Visible: No Signed: -
Status: -
Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xF7AF4000 Size: 8192 File Visible: No Signed: -
Status: -
Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xF3D03000 Size: 49152 File Visible: No Signed: -
Status: -
Hidden/Locked Files
-------------------
Path: C:\hiberfil.sys
Status: Locked to the Windows API!
SSDT
-------------------
#: 031 Function Name: NtConnectPort
Status: Hooked by "<unknown>" at address 0x85f22728
#: 041 Function Name: NtCreateKey
Status: Hooked by "PCTCore.sys" at address 0xf72fde22
#: 047 Function Name: NtCreateProcess
Status: Hooked by "PCTCore.sys" at address 0xf72decdc
#: 048 Function Name: NtCreateProcessEx
Status: Hooked by "PCTCore.sys" at address 0xf72deece
#: 063 Function Name: NtDeleteKey
Status: Hooked by "PCTCore.sys" at address 0xf72fe610
#: 065 Function Name: NtDeleteValueKey
Status: Hooked by "PCTCore.sys" at address 0xf72fe8c4

ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2009/11/04 19:41
Program Version: Version 1.3.5.0
Windows Version: Windows XP Media Center Edition SP3
==================================================
Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0xF3AF9000 Size: 98304 File Visible: No Signed: -
Status: -
Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xF7AF4000 Size: 8192 File Visible: No Signed: -
Status: -
Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xF3D03000 Size: 49152 File Visible: No Signed: -
Status: -
Hidden/Locked Files
-------------------
Path: C:\hiberfil.sys
Status: Locked to the Windows API!
SSDT
-------------------
#: 031 Function Name: NtConnectPort
Status: Hooked by "<unknown>" at address 0x85f22728
#: 041 Function Name: NtCreateKey
Status: Hooked by "PCTCore.sys" at address 0xf72fde22
#: 047 Function Name: NtCreateProcess
Status: Hooked by "PCTCore.sys" at address 0xf72decdc
#: 048 Function Name: NtCreateProcessEx
Status: Hooked by "PCTCore.sys" at address 0xf72deece
#: 063 Function Name: NtDeleteKey
Status: Hooked by "PCTCore.sys" at address 0xf72fe610
#: 065 Function Name: NtDeleteValueKey
Status: Hooked by "PCTCore.sys" at address 0xf72fe8c4
#: 119 Function Name: NtOpenKey
Status: Hooked by "PCTCore.sys" at address 0xf72fcb14
#: 192 Function Name: NtRenameKey
Status: Hooked by "PCTCore.sys" at address 0xf72fed30
#: 247 Function Name: NtSetValueKey
Status: Hooked by "PCTCore.sys" at address 0xf72fe0e2
#: 257 Function Name: NtTerminateProcess
Status: Hooked by "PCTCore.sys" at address 0xf72de982
==EOF==

ok, so I tried to change my DNS setting to that but it says it's not valid. It appears the first key is suppose to be 4 digits or something.

Moved to the new hijack part. A security tech will take it from here.

Regards,

Clever_Duck