PCTech Forums

Last night, I installed a newer version of Kazaa. I hadn't had Kazaa or any antivirus software for months and wanted to check how my computer was doing. I found that I had some 213 infected files, most from the same virus (W23.Jeefo.) Anyway, then Kazaa decided to tell me it didn't work probably and I couldn't access quarntene to delete the virus. So, I did it the hard way, I deleted the virus info stored and all stored in quarentine via Kazaa's folder. And then, it all started to go wrong after I found out I'd deleted key compenants to various programs big abd small all over my computer, not just the virus. Nothing worked, I had to reinstall near to everything I could think of. I did, but it's obvious I've deleted stuff that's not so easy to get back...I sometimes get warnings about "Win32 Generic host needing to close" or "Windows Explorer needing to close". Still, I can take a few annoying pop up error boxes...what I can't put up with is Windows Media Player telling me "An internal application error has occured", which started not long ago today after I'd finished watching ep 108 of Naruto. Even my recycle bin has been fecked due to my managing to delete the Norton uninstaller and trying to remove everything Norton myself. Oh yeah, and I can't use IE for my hotmail due to me now being unable to click links and get them to open, some anyway...I think it's Java related.

Now, what the hell can I do?
I can't reformat since I have no XP disc since XP came with the comp, and even if I did I'd lose most my anime (I can't burn most file types to DVD's.)

Edit: Oh, and my WMP issue started when I tried to play a AH 104/105th Naruto ep. I lost all my codecs and have tried to reinstall most, apprantly not enough...how can one Naruto ep feck up my machine more than it already is!? Same result with WMP even if a uninstall and reinstall...

visit http://www.recovermyfiles.com/ , if the information on your harddrive is worth saving spend 67$ and get a copy of this software

another suggestion....buy a second harddrive and a copy of windows. transfer all you files from your now damaged harddrive over to the new harddrive.

otherwise i might be able to get some of your stuff working again... first thing i want you to do is post a hijackthis log... run adaware 6.. delete the full verision of kazza and get kazza lite (no spyware) . this will require you send me a list of files in every directory of every program that is not working. that relly truely is the only way i can tell what files are missing.

as far as all those virus's the next time you do not have antivirus visist housecall.antivirus.com .... they provide free virus scans. or get the latest free version of avg anti-virus.... with those 2 free alternitives to being unprotected youd be foolish not to use them.

what types of files did you delete?

and on one more side note... depending on how many files and what types of files you got rid of.... you may have no other option but to reformat if you ever want everything to work again. i will do my best to help you if you can provide some additional information.

ps 213 virus's im surprised your pc is still running at all

Well, I deleted the virus. Only problem being that I also deleted everything else on my PC. =/

I do have Kazaa Lite...had it for ages mate.

Sorry, but what's a hijackthis log when it's at home?
How do I send you a list of files that aren't working if I don't know myself?

Sorry again, I'm a newbie. Do you have MSN? My MSN = Rpgplanet@msn.com.

And I deleted every type of file - From codecs to windows system stuff (well, that's obvious how bad my comp is).

well ... hijackthis is a free program off of download.com ..
http://www.download.com/HijackThis/3000 ... ag=lst-0-1

there the link to it if you download it run the program and get a list of the proccess's running and post them in this forum i can take a look at that...

not looking for so much the exact files..... i was thinking more in the lines of what programs are not working and what files you do have... i might be able to get in contact with the makers of all the software not working and obtain a list of files for there programs and compare the two lists.

unfortunitally i do not have msn if you wish to contact me on aim = o0obrian
you can keep in contact with me via this forum as well i am on here almost 24/7

if you could pickup a copy of windows it would relly help you out here.. then you could run a repair and possibly recover all of the system files you have scrapped.

did you have any trouble removing any of the virus's.... cause with such a high volume of them on your drive you could still have alot of registry keys ext still present on your machine.....

codecs for WMP are no problem to repair... you can obtain that here...
http://www.microsoft.com/windows/window ... nload.aspx

ps. If you have any restore points....... we might be able to restore all the files that way... unfortunitally this might also restore some of those virus's but... if they were all succesfully removed....we could restore back to a point where you did have all the virus's but you also had all your files and remove only what we need to this time around.... let me know if this is a possibility.

so here is a list of what i need from you to try and help.....

1.A list of all programs that are not working , and a list of all the files that you still HAVE for those programs

2. a hijackthis log.

3.to run adaware and check for spyware

4. the exact error messages you are recieving upon startup

5. some luck

Well, here goes:

Logfile of HijackThis v1.98.2
Scan saved at 22:01:56, on 12/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\altsvc.exe
C:\WINDOWS\system32\service.exe
C:\WINDOWS\system32\lssas.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\msthost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Daniel\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.timecomputers.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.timecomputers.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - Default URLSearchHook is missing
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.timecomputers.com
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b28578.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://imgfarm.com/images/nocache/funwe ... .0.0.6.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b30149.cab
O16 - DPF: {42F2D240-B23C-11D6-8C73-70A05DC10000} - http://64.156.31.70/058574uk.exe
O16 - DPF: {5C3A9EA6-4068-46B8-8B5A-692FB10607B1} (IntDialerData Class) - http://www.grupomarineda.net/auto/DialerData.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200 ... taller.exe
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b28578.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b28578.cab

I don't think you are getting me about Windows Media Player...It won't even open, all I get is an error message whiich I put in first post. Doesn't fix when reinstalled.

I used Ad-aware before this, nothing found. I also used something called registery repair.

How much would Windows XP cost, and will any Windows XP disc work?

I had no real trouble removing the virus, although I read it needs to be deleted in registery. It hasn't come back anyway, yet...

And sadly, I had systom restore turned off. I turned it back on and can't see any option to return to any previous points.

The messages don't appear at startup...they appear at random for the most part so far. I'll write down what they say exactly next time they show up.

About point umber one...that sounds hard to do. Is there any easy way to go about this? IE in general seems to have nothing working which it did.

Edit: Prettty sure I've deleted Windowsupdate, DirectX/ActiveX and my search computer gog thing. I'd be able to tell you more if I knew more. >.<

Remove these items by scanning using hijackthis putting a check next to the and clicking the fix button.....

O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)

R3 - Default URLSearchHook is missing


Rescan after completing that step and post your new hijackthis log.

unfortunitally on windows xp there is absolutly no current way to remove windows media player without corrupting the os or having a restore point set to before you installed it.....

locate this folder.... C:\Program Files\Windows Media Player

here is a list of files i have...

wmplayer.exe
wmpvis.dll
setup_wm.exe
npwmsdrm.dll
npdsplay.dll
npdrmv2.dll
mplayer2.exe
dlimport.exe
Folder- Visualizations
Folder - Skins
( npds.zip )
( npdrmv2.zip )


if you do not have any of these files please post which ones.... and i will post a temp copy for you to download off of a geocities site.

Quotes from amazon.com

Windows Xp Proffesional.
Price: $279.99

Windows Xp Home Edition
Price: $199.99

the version you have now would be the version you would need to run a repair.

my files for IE (note: i do not use internet exsplorer i use firefox so you could have a few MORE files than i do.... but check if u atleast have these ones....)

navigate to :
C:\Program Files\Internet Explorer

Files listed:
iexplore.exe
hmmapi.dll
Q867801.cat (secuirty catalog)
Q823353.cat (secuirty catalog)

navigate to :
C:\Program Files\Internet Explorer\Connection Wizard

Files listed:
isignup.exe
trialoc.dll
inetwiz.exe
icwutil.dll
icwtutor.exe
icwrmind.exe
icwres.dll
icwhelp.dll
icwdl.dll
icwconn.dll
icwconn2.exe
icwconn1.exe

for the windows update problem... sence you cannot access IE you cannot get to there update site ... however using firefox you can obtain updates here...
http://www.microsoft.com/downloads/sear ... laylang=en

ps . have you tried downloading the new windows media player 10 and see if that fix's it? ... if not give it a shot ... probably will not work but i wouldent know havent tried it yet.

Direct x 9.0 download
http://www.microsoft.com/windows/direct ... efault.htm

Active X downloads...
http://www.download.com/2001-2206-0.html
(no idea if that will help you)

if you want you can try this free trial download ... it is suppose to fix alot of errors
ERRORS THAT PC RESCUE FIXES:
* File Not Found errors
* All .dll file errors
* All Windows socket (winsock) errors
* Computer is slow or nonresponsive
* Internet Explorer errors
* Runtime errors
* Applications shut down
* Much, much more

get that here - http://www.healthycomputerclub.com/Software/PCRescue/

i talked with him online ... just for everyone else's reference

Problem :
An internal application error has occurred (with Windows Media Player)

Solution:
Click Start>Run> type regsvr32 jscript.dll >click OK.
Click Start>Run> type regsvr32 vbscript.dll >click OK.

This also seemed to fix his Internet Exsplorer problem he had going on.

And as far as you if there is anymore problems occuring let me know.


( we know the pc just needs the tlc )

You had some entries in your logfile above that need to be removed.
Can you run HJT again and post a fresh logfile.

Cactus