Home > Hjt > HJT - W8303794836

HJT - W8303794836

The system returned: (22) Invalid argument The remote host or network may be down. Thanks for your help.Logfile of HijackThis v1.99.1Scan saved at 10:11:28 PM, on 3/15/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\TSI32\tsircusr.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Dell\EUSW\Support.exeC:\WINDOWS\system32\wfxsnt40.exeC:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exeC:\paprport\pptd40nt.exeC:\Program Files\Norton Internet Security\IAMAPP.EXEC:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exeC:\WINDOWS\System32\DSentry.exeC:\Program Files\Roxio\Easy The system returned: (22) Invalid argument The remote host or network may be down. Post your new log file back here using the Add Reply button and I will review it when it comes in.OT I do not respond to PM's requesting help.

Please use them so that others may benefit from your questions and the responses you receive.OldTimer Back to top Back to Virus, Trojan, Spyware, and Malware Removal Logs 1 user(s) are Thanks.Logfile of HijackThis v1.99.1Scan saved at 9:29:05 PM, on 3/29/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Dell\EUSW\Support.exeC:\WINDOWS\system32\wfxsnt40.exeC:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exeC:\paprport\pptd40nt.exeC:\Program Files\Norton Internet Security\IAMAPP.EXEC:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exeC:\WINDOWS\System32\DSentry.exeC:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exeC:\PROGRA~1\NORTON~1\navapw32.exeC:\WINDOWS\system32\taskswitch.exeC:\Program To learn more and to read the lawsuit, click here. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged

Look for the following items and click in the checkbox in front of each item to select it:F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe,c:\windows\tsi32\tsircusr.exeO2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file Looks like there's another LapLink entry here. Generated Tue, 24 Jan 2017 23:44:53 GMT by s_hp87 (squid/3.5.23) Thanks again for your help.Logfile of HijackThis v1.99.1Scan saved at 10:13:38 PM, on 3/24/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\cisvc.exeC:\WINDOWS\System32\CTsvcCDA.exeC:\Program Files\Norton Antivirus\navapsvc.exeC:\Program Files\Norton Internet Security\NISUM.EXEC:\WINDOWS\system32\NMSSvc.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\System32\tcpsvcs.exeC:\WINDOWS\System32\snmp.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Norton

Please proceed with the following steps in order.Step #1ImportantYour copy of HijackThis needs to be in a folder of it's own. Your cache administrator is webmaster. Turn off System Restore.On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.Check Turn off System Restore.Click Apply, and then click OK.2. Since you have removed the other Laplink item in the first fix, let's remove this one too.

Click here to Register a free account now! Look for the following items and click in the checkbox in front of each item to select it:O23 - Service: TSI Remote Control Service (TSIRCSRV) - LapLink, Inc. - C:\WINDOWS\System32\TSIRCSRV.EXENow close You should also have a good firewall like ZoneAlarm or Kerio Personal Firewall (both are free) and a good anti-virus application like the one you are currently using. Your cache administrator is webmaster.

The system returned: (22) Invalid argument The remote host or network may be down. Several functions may not work. Register now! Your cache administrator is webmaster.

Start HijackThis and click the Scan button to perform a scan. The system returned: (22) Invalid argument The remote host or network may be down. Your cache administrator is webmaster. Ornery little bugger.

The RealBar is purported to display popup advertizing on your computer and SpyKiller is considered a rougue application whose makers use false positives to goad you into purchasing it. HJT - w8303794836 Started by wu8303794836 , Mar 15 2005 11:14 PM Please log in to reply 9 replies to this topic #1 wu8303794836 wu8303794836 Members 7 posts OFFLINE Local After reviewing your log I see a couple of items that require our attention. The files in System Restore are protected to prevent any programs from changing those files.

Restart your computer.3. Your cache administrator is webmaster. Please try the request again. Generated Tue, 24 Jan 2017 23:44:53 GMT by s_hp87 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.5/ Connection

If you accept cookies from this site, you will only be shown this dialog once!You can press escape or click on the X to close this box. That's what the forums are here for. Look for the following items and click in the checkbox in front of each item to select it:R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)O9 - Extra button: (no

Your log is clean.

Post your new log file back here using the Add Reply button and I will review it when it comes in.OT I do not respond to PM's requesting help. Please use them so that others may benefit from your questions and the responses you receive.OldTimer Back to top #9 wu8303794836 wu8303794836 Topic Starter Members 7 posts OFFLINE Local time:06:44 Reboot your computer normally, start HijackThis and perform a new scan. Generated Tue, 24 Jan 2017 23:44:53 GMT by s_hp87 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.8/ Connection

or read our Welcome Guide to learn how to use this site. Reboot your computer normally, start HijackThis and perform a new scan. That's what the forums are here for. Please try the request again.

O2 - BHO: REALBAR - {4E7BD74F-2B8D-469E-C0FF-FD60B590A87D} - C:\PROGRA~1\COMMON~1\Real\Toolbar\RealBar.dllO4 - HKCU\..\Run: [SpyKiller] C:\Program Files\SpyKiller\spykiller.exe /startupF2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\TSI32\tsircusr.exeNow close ALL open windows except HijackThis and click the Fix Checked button to finish If we have ever helped you in the past, please consider helping us. Jump to content Sign In Create Account Search Advanced Search section: This topic Forums Members Help Files Calendar View New Content Forum Rules BleepingComputer.com Forums Members Tutorials Startup List Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy

That's what the forums are here for. That's what the forums are here for. Generated Tue, 24 Jan 2017 23:44:53 GMT by s_hp87 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.7/ Connection It is critical to have both a firewall and anti virus to protect your system and to keep them updated.To keep your system up to date and clean visit Windows Update

Post your new log file back here using the Add Reply button and I will review it when it comes in.OT I do not respond to PM's requesting help. Using the site is easy and fun. Let's try the following.Step #1Start HijackThis and follow these steps:* Click on Config button* Click on the Misc Tools button* Click on the Open Process Manager buttonFind the following items and This process might be a service, which you can stop from the Services applet in Admin Tools (To load this Window, Run and enter 'services.msc')." I ran this 'services.msc', tried to

Generated Tue, 24 Jan 2017 23:44:53 GMT by s_hp87 (squid/3.5.23) ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://0.0.0.9/ Connection Back to top #4 OldTimer OldTimer Malware Expert Members 11,092 posts OFFLINE Gender:Male Location:North Carolina Local time:07:44 PM Posted 24 March 2005 - 10:09 AM Hi wu8303794836. We have a couple of last steps to perform and then you're all set.First, let's reset your hidden/system files and folders. The system returned: (22) Invalid argument The remote host or network may be down.

Please try the request again. Please try the request again. BLEEPINGCOMPUTER NEEDS YOUR HELP! They will add 1000's of sites to your resticted zone and block some hijacks from happening.

Please use them so that others may benefit from your questions and the responses you receive.OldTimer Back to top #7 wu8303794836 wu8303794836 Topic Starter Members 7 posts OFFLINE Local time:06:44 Please use them so that others may benefit from your questions and the responses you receive.OldTimer Back to top #5 wu8303794836 wu8303794836 Topic Starter Members 7 posts OFFLINE Local time:06:44