Computer Help

[Ixistant]

*Glomps SyNiX*

Thank you so much!!!! But now I have a different problem. My computer has Sassers. But I DO know how to fix that.

[ZH!]

I am about to go insane.

AOL Instant Messenger has decided to die on me. I don't like this. It opens fine, and I can look at people's profiles; however, if I attempt to IM someone (or someone tries talking to me), the program freezes and closes. Is there any way I can fix this?

[everconfused]

ZH, I can only offer 2 suggestions. First, try contacting AOL - this is an AOL help page address: http://help.channels.aol.com/topic.adp?catId=2&sCId=201 and that page deals with IM. The only other thing I can think of is to uninstall and reinstall your AIM. These programs can get "funny" sometimes!

[DM was on fire!]

Eh, I'm having some problems with GIMP. It ruins the quality of some of my screenshots when I use GIF as the format. What's the best format I should use for screenies? Thanks.

I would say PNG. JPGs make everything fuzzy, but PNGs are basically GIFs, except they don't reduce your image to 256 colours.

Hope that helps!

[halfbakedbliss]

Some buddies and I are trying to set up a retro Linux system, complete with Grey Cat and Slack 3.0. Unfortunately, the 486 is in great need of repair so cannot be used. I'm trying to find some way to test Grey Cat, but the only system available is running XP Pro. Is there any hack available that can tweak XP to where it can boot into DOS mode?

[Illumination]

I've got spyware that keeps coming back.
I got it yesterday for the first time, ran Ad-aware and Spybot and it was gone.. but it came back later that night, so I did the same thing.. Ad-aware and Spybot, but it came back this morning. So.. once again, I ran the 2 programs but this time it was as if I did nothing, the spyware remained. I just tried again.. and yea.. the spyware's still here. I've got popups, and despite my homepage being about:blank, I get some type of weird search engine thing even though in my Address bar it says about:blank.
Can somebody help?

HijackThis log:
Logfile of HijackThis v1.97.7
Scan saved at 2:17:16 AM, on 11/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\aimwwu.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\ntdtcsetup.log:onvac
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\winne32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Bruno\Local Settings\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\biljc.dll/sp.html#11111
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {F2F8BB31-B33F-D00C-790B-C929FA43DD0F} - C:\WINDOWS\sysdf32.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [winne32.exe] C:\WINDOWS\winne32.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [JavaUpdate0.07] C:\WINDOWS\System32\aimwwu.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar2.dll/cmtrans.html
O16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\setup.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://C:\foo.mht!http://82.179.166.145/x15.chm::/trs15.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/sh ... wflash.cab

[ZH!]

Ugh...the Shopping Wizard/Home Search Assistant/Search Extender thing. That's the spyware that crashed AIM for me. It took me three hours to fix x.x. Here's a guide to fixing the problem: http://www.short-media.com/review.php?r=259

It's really evil.

[SyNiX]

get a spyware removal program called SpySweeper, one of the best progs in my opinion... there's also pest patrol but I don't think they have a trial version

and if youre gonna use p2p progs, I suggest Ares Lite Edition.

[Tailseh]

I've got spyware that keeps coming back.
I got it yesterday for the first time, ran Ad-aware and Spybot and it was gone.. but it came back later that night, so I did the same thing.. Ad-aware and Spybot, but it came back this morning. So.. once again, I ran the 2 programs but this time it was as if I did nothing, the spyware remained. I just tried again.. and yea.. the spyware's still here. I've got popups, and despite my homepage being about:blank, I get some type of weird search engine thing even though in my Address bar it says about:blank.
Can somebody help?

HijackThis log:
Logfile of HijackThis v1.97.7
Scan saved at 2:17:16 AM, on 11/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\aimwwu.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\ntdtcsetup.log:onvac
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\winne32.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Bruno\Local Settings\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\biljc.dll/sp.html#11111
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {F2F8BB31-B33F-D00C-790B-C929FA43DD0F} - C:\WINDOWS\sysdf32.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [winne32.exe] C:\WINDOWS\winne32.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [JavaUpdate0.07] C:\WINDOWS\System32\aimwwu.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar2.dll/cmtrans.html
O16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\setup.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://C:\foo.mht!http://82.179.166.145/x15.chm::/trs15.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/sh ... wflash.cab

First, get the new HijackThis!, extract it to a permanent location (etc c:\hjt) and then.. check these:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\biljc.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\biljc.dll/sp.html#11111
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\biljc.dll/sp.html#11111
O2 - BHO: (no name) - {F2F8BB31-B33F-D00C-790B-C929FA43DD0F} - C:\WINDOWS\sysdf32.dll
O4 - HKLM\..\Run: [winne32.exe] C:\WINDOWS\winne32.exe
O4 - HKCU\..\Run: [JavaUpdate0.07] C:\WINDOWS\System32\aimwwu.exe
O16 - DPF: {10000000-1000-0000-1000-000000000000} - file://C:\Program Files\Internet Explorer\setup.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://C:\foo.mht!http://82.179.166.145/x15.chm::/trs15.exe

Last edited by Tailseh on Wed Nov 24, 2004 3:02 pm, edited 1 time in total.

[ZH!]

get a spyware removal program called SpySweeper, one of the best progs in my opinion... there's also pest patrol but I don't think they have a trial version

and if youre gonna use p2p progs, I suggest Ares Lite Edition.

I had SpySweeper on my computer with that spyware; it attached itself to the program and caused my computer to restart every time I opened it [SpySweeper].

[Universal Senja]

get a spyware removal program called SpySweeper, one of the best progs in my opinion... there's also pest patrol but I don't think they have a trial version

Correct me if I'm wrong, but didn't Spysweeper change it from the trial version (with deletion) they used to have to a version where you can only scan (no deletion)?

Yeah, I'm pretty sure you're right; Pestpatrol doesn't have a trial version (scan only, no option for deletion).

When I had Home Search Assistant, I used the HijackThis/AboutBuster method like in the link ZH provided (I never used that HSRemove.exe though).

[SyNiX]

I'm not sure Universal Senja, I have the full version of SpySweeper. I've never heard of that Home Assistant sypware thing....seems like one of the worse kinds out there...yikes.

[Soujiro]

Trial programs and partially functional spyware removal programs are no good to use. If the program is not fully functional, it's not worth using. Free fully functional programs are Ad-Aware and Spybot.

[Articfox]

Ugh, I'm trying to spruce up an older laptop, and I need a upgrade for the old VGA Gaphics Video Adaptor, but can't find a upgrade anywhere. Do they even have upgrades for it anymore, just need to know.

[SyNiX]

Even if they didn't have any new updates for the driver, I'm sure there are older ones on the net somewhere. What brand is your card?