Sysclean

[Guest]

I run the Sysclean in safe mode and I am gertting 'Access is denied' at many
locations such as
c:\docs & setting\system32\config\system32.log
c:\ \software.log
c:\ \security


c:\ \NTUSER.DAT
C:\ \ntuser.dat.LOG

So whats wrong with my pc which seems to work ok

Please advice what can I do next which I suspect the pc is infected with
malware, thanks

 

[Guest]

WHY do you think it is infected with malware???
whats wrong with my pc which seems to work ok?

 

[Guest]

I have another pc which I cannot get to internet, always page cannot display
and (before that browser redirected) so i clean it with Sysclean. Out of
curiosity I decided to do Sysclean on this computer (which seems to run ok)
but I get almost similar denial access. The not-working pc scan does not
detect anything at all.

 

[Guest]

so your NOT even asking about the "problem" computer!!
you want to fix the one that's NOT broken.

good move!!

why don't you try and fix the computer that has a "real" problem?

 

[Guest]

Cos I am trying to fix the 'problem' pc but cannot figure whats wrong since
one is ok and the other is not. Any suggestion where do I look then I have
set the security setting as default, clear whatever virus is there using
Adware, NAV with all the latest definition, applied WIN XP SP2..... thanks

 

[David H. Lipman]

From: "compro" <[email protected]>

| I run the Sysclean in safe mode and I am gertting 'Access is denied' at many
| locations such as
| c:\docs & setting\system32\config\system32.log
| c:\ \software.log
| c:\ \security
|
| c:\ \NTUSER.DAT
| C:\ \ntuser.dat.LOG
|
| So whats wrong with my pc which seems to work ok
|
| Please advice what can I do next which I suspect the pc is infected with
| malware, thanks

There are anti virus News Groups specifically for this type of discussion.

microsoft.public.security.virus
alt.comp.virus
alt.comp.anti-virus

I could have sworn I answered this question earlier..

Normal operation and it should NOT be construed as a problem.

 

[Guest]

So you have run Adware, NAV, and applied Win XP w/SP2 BUT found no signs of
viruses etc. OR you have already cleaned the system of viruses etc.
What did yuo find? anything?

You repost with your "exact" problem AND let the experts(?) here try to help
you. Instead of you going off on a side issue!!
I have a pc which I cannot get to internet, always page cannot display and
(before that browser redirected) HELP!!!!!

 

[PA Bear]

Ignore it. See http://aumha.net/viewtopic.php?t=10610

 

[Guest]

In case you wish to respond further, this is not the real problem!!

See their other responses!!

 

[Guest]

In case you wish to respond further, this is not the real problem!!

See their other responses!!

 

[Guest]

The status is I cannot go to internet. So I am following whatever it says in
this link
http://www.claymania.com/removal-trojan-adware.html
I have just scan it, nothing found. I just did a google of whatever I think
is not "kind' in the msconfig and delete it like "dluxjp". All done in safe
mode for all users. Also run the NAV scan in safe mode, nothng found .
Prior to my OP, I have also deleted mrjj exe and other viruses etc.

 

[David H. Lipman]

From: "compro" <[email protected]>

| The status is I cannot go to internet. So I am following whatever it says in
| this link
| http://www.claymania.com/removal-trojan-adware.html
| I have just scan it, nothing found. I just did a google of whatever I think
| is not "kind' in the msconfig and delete it like "dluxjp". All done in safe
| mode for all users. Also run the NAV scan in safe mode, nothng found .
| Prior to my OP, I have also deleted mrjj exe and other viruses etc.
|

Tell us more about "...I cannot go to internet...".

How do you access the internet, ?
Cable, DSL, Dial-Up, etc

What have you done to diagnose the problem ?
IPConfig, Ping, Tracert, etc...

Do you have WinXP SP2 installed ?

 

[Guest]

From: "compro" <[email protected]>

| The status is I cannot go to internet. So I am following whatever it says in
| this link
| http://www.claymania.com/removal-trojan-adware.html
| I have just scan it, nothing found. I just did a google of whatever I think
| is not "kind' in the msconfig and delete it like "dluxjp". All done in safe
| mode for all users. Also run the NAV scan in safe mode, nothng found .
| Prior to my OP, I have also deleted mrjj exe and other viruses etc.
|

Tell us more about "...I cannot go to internet...".

How do you access the internet, ?
Cable, DSL, Dial-Up, etc

What have you done to diagnose the problem ?
IPConfig, Ping, Tracert, etc...

Do you have WinXP SP2 installed ?

 

[Guest]

with reference to this link, http://aumha.net/viewtopic.php?t=10610
in safe mode, i run the sysclean again (with Ipt138.zip) and found 2 viruses
which I presume it will automatically be cleared.
in safe mode again, i run the nav2005 with the latest definition but nothing
found.

then try to connect to internet, the ie6sp1 still fail to display. i am
using the adsl broadband modem (Aztech 206u). according to my isp, i am
connected. the funny thing is that my ip address and the gateway address are
the same each time, meaning each time i boot up, the number will be different
but both ip add and gateway will have the same number which does not means to
be right.
i try to ping my isp, it says cannot find the host name.

one thing i noticed is that my cursor after you type in the add, instead of
a blinking line, its a blinking black square box. (both pc have the same
setting on the cursor).
where can i gp from here. i dont think its the xpsp2 that i applied to it
because the problem exist before that.

at command prompt, i try to "ipconfig retsh winsock reset", still it does
not work.
just wondering whats next...... thanks and "Happy New Year to all"

 

[David H. Lipman]

From: "compro" <[email protected]>

| with reference to this link, http://aumha.net/viewtopic.php?t=10610
| in safe mode, i run the sysclean again (with Ipt138.zip) and found 2 viruses
| which I presume it will automatically be cleared.
| in safe mode again, i run the nav2005 with the latest definition but nothing
| found.
|
| then try to connect to internet, the ie6sp1 still fail to display. i am
| using the adsl broadband modem (Aztech 206u). according to my isp, i am
| connected. the funny thing is that my ip address and the gateway address are
| the same each time, meaning each time i boot up, the number will be different
| but both ip add and gateway will have the same number which does not means to
| be right.
| i try to ping my isp, it says cannot find the host name.
|
| one thing i noticed is that my cursor after you type in the add, instead of
| a blinking line, its a blinking black square box. (both pc have the same
| setting on the cursor).
| where can i gp from here. i dont think its the xpsp2 that i applied to it
| because the problem exist before that.
|
| at command prompt, i try to "ipconfig retsh winsock reset", still it does
| not work.
| just wondering whats next...... thanks and "Happy New Year to all"
|

OK -- You gave DSL.

Is that with or without a Cable/DSL Router ?
Is that a DSL account using PPPoE ?

You were able to run sysclean. That means you went to the Internet and obtained the Trend
Micro sysclean.com file and the latest Patter Files.

I need *more* information please.

Open a Command Prompt...

Type..

IPCONFIG /all

Copy and Paste your result in your reply...


Now type...

ping yahoo.com

What are your results ?


Type ...

ping 66.94.234.13

What are your results ?

 

[Guest]

adsl modem with tel line connected into modem and usb into pc (ppp, windows
95/98/nt/2000 internet
sysckean and definitions were copied from another working pc

ipconfig /all >
host name: home
pri dns :-
mode type: unknown
ip routing : no
wins proxy: no
ppp adaper dsl206u adsl usb modem dialup
connection specific dns :-
description: wan <ppp/slip> interface
phy address : 00-53-......
dlcp enabled; no
ip add: 219.74.17.133
subnet: 255.255.255.255
gateway : 219.74.17.133
dns servers: 165.21.83.99
165.21.100.88

ping yahoo.com > ping cannot find host name ...
ping 66.94.234.13> its ok as lost=0

thanks for your help.....

 

[David H. Lipman]

From: "compro" <[email protected]>

| adsl modem with tel line connected into modem and usb into pc (ppp, windows
| 95/98/nt/2000 internet
| sysckean and definitions were copied from another working pc
|
| ipconfig /all >
| host name: home
| pri dns :-
| mode type: unknown
| ip routing : no
| wins proxy: no
| ppp adaper dsl206u adsl usb modem dialup
| connection specific dns :-
| description: wan <ppp/slip> interface
| phy address : 00-53-......
| dlcp enabled; no
| ip add: 219.74.17.133
| subnet: 255.255.255.255
| gateway : 219.74.17.133
| dns servers: 165.21.83.99
| 165.21.100.88
|
| ping yahoo.com > ping cannot find host name ...
| ping 66.94.234.13> its ok as lost=0
|
| thanks for your help.....
|
|

First I highly suggest getting a Cable/DSL Router such as the Linksys BEFSR41. It has many
adavantages such as acting as a simplistic FireWall. Additionally, if you use PPPoE then
the Router, not the PC will intitiate the PPPoE connection and it will also alow upto 253
computers or game Boxes to share the one Internet connection.

You can ping and IP address but you can't resolve a host name. That means it is a DNS
issue.

You posted - 219.74.17.133 as wil as your posting host is; 165.21.154.128

Both point to being in Singapore using SINGNET PTE LTD with the Internet Domain
"singnet.com.sg"

That's means the following are DNS servers are for your network...

165.21.83.11
195.13.10.226
165.21.100.11


Your IPconfig output shows..
165.21.83.99
165.21.100.88

I don't know why the above are not working. But I suggest replacing those two with the
three addresses I provided with the Domain of; singnet.com.sg

If you use a Cable/DSL Router you would enter this data into the Router and then enable DHCP
Daemon on the Router and enable DHCP on the PC (or PCs) and that information would be
obtained from the Router.

We'll see how that works and we'll go from there...

 

[PA Bear]

If WinXP SP2:

Start > Run > (type in) cmd > OK

In the Command window, type

netsh winsock reset

Press Enter key, close Command window & reboot.

If WinXP (SP1):

Download WinsockXPFix from
http://www.spychecker.com/program/winsockxpfix.html using another machine,
transfer the executable to the problem machine and run it.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE, Shell/User, Security), Aumha.org VSOP, DTS-L.org


compro wrote:

 

[Guest]

No such luck.Think something in the pc is redirecting it or prevent the IE
from displaying.

 

[David H. Lipman]

From: "compro" <[email protected]>

| No such luck.Think something in the pc is redirecting it or prevent the IE
| from displaying.
|



This was posted by Robear Dyer and it is suggested for you next try...

In WinXP SP2 open a Command Prompt and execute...

netsh winsock reset

Press Enter key, close Command window & reboot.

If WinXP (SP1):

Download WinsockXPFix from
http://www.spychecker.com/program/winsockxpfix.html using another machine,
transfer the executable to the problem machine and run it.