Hondaswap.com | Honda Technical & JDM styling Forums

endlesszeal · 12-09-2008, 11:56 PM

looks like your system is infected with a worm and the computer is restarting to prevent the worm from attaching your network/devices.

your log looks normal, with just left over crap and installs.

try install and running this from symantecs, but before you do, disconnect yourself from internet ie unplug Ethernet wire or wireless device:
W32.Blaster.Worm Removal Tool - Symantec.com

then install and run this:
SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware!

i found it to be much better than adaware and spybot. if it doesnt install, rename the file "S_A_S.exe" and it should install.

After the two scans from mentioned programs, let me know. Good luck.

Gnarphantom · 12-10-2008, 04:44 AM

Like he said^^^^. I had the same thing happen to me when I was running Adaware.

YBLEGAL · 12-10-2008, 04:50 AM

Screw all that. Installing more things to remove things is never a good solution. Back up what you need, scan those files you need (with another different clean computer) with ad-aware and avg and trend micro and maybe something else just to be safe. Reinstall. Restore important files. Call it a day.

Or, get an external hard drive adapter and connect it to another computer. Scan it without booting windows off of it. It's a whole lot easier than trying to fight with crippled tools.

Best tool in the world, if you want to fight them, process explorer from sysinternals, now available under/from microsoft. I'm not taking the time to explain the ins and outs of that program but it has the capabilities you need to track the infection/problem down and freeze it in it's path to allow time to remove.

CRX-YEM · 12-10-2008, 09:46 AM

try updating the adaware definitions today and then run the program again.

Also in highjackthis, select
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
and chose to fix it.

I would also ditch McAfee and use AVG for an anti virus program it's a hell of a lot better.

Another thing to do, in add/remove programs uninstall myway search assistant. you can thank Dell for that one being installed by the factory.

to test if you actually have this virus "Win32.Trojan.KillAV"
click start> run > and type "regedit"

if regedit opens that's not the problem. if regedit won't open or crashes the system look into finding a virus removal tool for the Win32.Trojan.KillAV removal tool

if your using XP, maybe we can set up a remote assistance for me to log in and take a peak around.

eg6sir · 12-10-2008, 10:37 AM

Quote:

Originally Posted by endlesszeal

looks like your system is infected with a worm and the computer is restarting to prevent the worm from attaching your network/devices.

your log looks normal, with just left over crap and installs.

try install and running this from symantecs, but before you do, disconnect yourself from internet ie unplug Ethernet wire or wireless device:
W32.Blaster.Worm Removal Tool - Symantec.com

then install and run this:
SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware!

i found it to be much better than adaware and spybot. if it doesnt install, rename the file "S_A_S.exe" and it should install.

After the two scans from mentioned programs, let me know. Good luck.

didnt fint that worm.... and i'm doing the SAS scan now

Quote:

Originally Posted by CRX-YEM

try updating the adaware definitions today and then run the program again.

Also in highjackthis, select
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
and chose to fix it.

I would also ditch McAfee and use AVG for an anti virus program it's a hell of a lot better.

Another thing to do, in add/remove programs uninstall myway search assistant. you can thank Dell for that one being installed by the factory.

to test if you actually have this virus "Win32.Trojan.KillAV"
click start> run > and type "regedit"

if regedit opens that's not the problem. if regedit won't open or crashes the system look into finding a virus removal tool for the Win32.Trojan.KillAV removal tool

if your using XP, maybe we can set up a remote assistance for me to log in and take a peak around.

tried teh "regedit" thing and it pulled up the page.. no crashing..
i have netmeeting or whatever it is.. my friend in SD had to look around the computer before

whiterabbit06 · 12-10-2008, 11:38 AM

Did you try the tool I posted?

eg6sir · 12-10-2008, 12:46 PM

well, the SAS scan finished and found 169 things...
3 Adware-MyWebSearch
165 Adware-tracking cookies or somethin like that
1 i dont remember what it was .. lol

but now when i restart the computer i get 2 pop up messages

Quote:

AirGCFC.exe - Entry point not found
The procedure entry point apsSearchInterface could not be located in the dynamic link library wlanapi.dll

Quote:

WZCSLDR2.exe - Entry point not found
The procedure entry point apsSearchInterface could not be located in the dynamic link library wlanapi.dll

i'm gonna remove spybot and ad-aware from my programs list now

Quote:

Originally Posted by whiterabbit06

Did you try the tool I posted?

which one was that?? i dont remember

CRX-YEM · 12-10-2008, 01:04 PM

Those are both files associated with a wireless network card. Do you have on installed ??

I doubt removing spybot or ad-aware is going to help

3 Adware-MyWebSearch, that's from the myway search assistant. add/remove programs and uninstall any program with the name myway, mywayserach in the title.

YBLEGAL · 12-10-2008, 01:13 PM

I don't know why you don't just reinstall. Is this a production server? If it's just a desktop workstation, screw it... I'm tellin ya. Read what I said above...

Wasting time and effort....

MthaFuknGreen · 12-10-2008, 01:18 PM

Quote:

Originally Posted by YBLEGAL

I don't know why you don't just reinstall. Is this a production server? If it's just a desktop workstation, screw it... I'm tellin ya. Read what I said above...

Wasting time and effort....

i second that.
thats what i usually do.
improves performance, solves problems and gets everything running like it should again.

YBLEGAL · 12-10-2008, 01:19 PM

Quote:

if your using XP, maybe we can set up a remote assistance for me to log in and take a peak around.

Download SCVNC if you do a lot of tech support. No settings necessary. They (the client) downloads that tiny preconfigured app, it connects out to you, and ur good. When your done, it completely removes from the client's system.

Aleaf.CRX · 12-10-2008, 03:06 PM

My mom's had a Trojan virus before. I don't know much about computers, and I had to reinstall everything when I couldn't figure it out.

Shit, my ex was into computers, I'm not sure but I could've swore he said most Trojans were similar or the same type of virus.

I found this. Don't know if it'll help at all.
PC Hell: Bymer Trojan - wininit.exe trojan

It might lead you to something helpful anyway.

I could've sworn the virus came about from too much downloaded porn....sigh. Courtesy of my brother.

eg6sir · 12-10-2008, 04:14 PM

Quote:

Originally Posted by whiterabbit06

Did you try the tool I posted?

didnt find it.. but it did make McAfee pop up with a trojan detected .. the other worm program i ran did the same thing but a different trojan

done tons of scans.. i'll try ad-aware again to see if it shuts me down...

Quote:

Originally Posted by YBLEGAL

I don't know why you don't just reinstall. Is this a production server? If it's just a desktop workstation, screw it... I'm tellin ya. Read what I said above...

Wasting time and effort....

home desktop

i'd rather not have to download all my music, programs, etc again... this will be the last resort if all else fails

whiterabbit06 · 12-10-2008, 04:44 PM

Go to the run command type regedit and then navigate to:
HKEY_LOCAL_MACHINE\Software\Microso ft\Windows\CurrentVersion\Run
show a screenshot if you can.

eg6sir · 12-10-2008, 04:52 PM

Quote:

Originally Posted by whiterabbit06

Go to the run command type regedit and then navigate to:
HKEY_LOCAL_MACHINE\Software\Microso ft\Windows\CurrentVersion\Run
show a screenshot if you can.

here ya go

caboose · 12-10-2008, 06:56 PM

Quote:

Originally Posted by MthaFuknGreen

i usually just reinstall the operating system if i have a problem that i cant figure out.
i have all my files, like music and shit on a second harddrive so i can format the c drive when reinstalling.
itll make your computer faster and it should solve your problem.
the only downside is you have to reinstall all the programs you had again.
i usually keep every install .exe file i ever download on the second harddrive too.

you should get windows all setup how you like it, with all of the programs that you use, then download Ping. It's a freeware program that will create a ghost of your hdd partition. This way whenever you hit a "snag" you can restore the ghost image from an external or other media and within 15 minutes you will have a fresh working install that has all of your programs already installed and activated. My ghost file is only like 2 gb too.

http://ping.windowsdream.com/

eg6sir · 12-10-2008, 06:57 PM

i'm gonna look around for an external hard drive to keep everything on.. then the computer is getting reset

Luis998 · 12-10-2008, 07:00 PM

Sorry that I haven't had any time to look for info on this, Clint. I've been trying to multi-task between work and the web, which is the only place I have access nowadays and haven't been able to look up much. That and my brother has been working his ass off lately and not available.

Me = Epic Fail.

eg6sir · 12-10-2008, 07:01 PM

you didnt fail... just too busy.. i appreciate it though... rep given to whomever helped

YBLEGAL · 12-10-2008, 09:31 PM

Good stuff. I hope the backups go smoothly.

ps newegg has 1tb green power hard drives (slow but good for backing up to) for 100 bucks.

eg6sir · 12-10-2008, 09:38 PM

thanks... i'm gonna look around for the best price.. .doesnt need to be fast, its just to hold files.. i think a buddy of mine might have one laying around, i'll see if can borrow it just to reset Windows

YBLEGAL · 12-10-2008, 11:23 PM

If your data is important to you, a backup would still be recommended.

eg6sir · 12-10-2008, 11:24 PM

yea... i'm saying i'd put all my shit on it and reset windows.. then transfer the stuff back to my computer and give him his hard drive back..

YBLEGAL · 12-10-2008, 11:43 PM

this i hear. xmas time, good time to catch a sale on a backup drive to keep

is what i'm saying.

endlesszeal · 12-11-2008, 12:44 AM

it looks whatever infected your system latched onto your dlink adapater and SAS just nuked it. try uninstalling and reinstalling all you dlink product and updating the drivers. is there anything else wrong with the system?

and agreed with setting up windows and imaging it. makes restoring much easier. and btw, before you install windows, make sure to get one with sp3 slipstreamed and all other major updates or be prepared to spend 2 hrs installin gthem and rebooting.

12-10-2008, 04:50 AM	#28
YBLEGAL Regular Member w/ Cheese Join Date: Aug 2006 Location: NW Indiana Posts: 2,746 iTrader: 0 / 0% Ride: 2000 EJ8 w/ SiR-II Rep Power: 72	Screw all that. Installing more things to remove things is never a good solution. Back up what you need, scan those files you need (with another different clean computer) with ad-aware and avg and trend micro and maybe something else just to be safe. Reinstall. Restore important files. Call it a day. Or, get an external hard drive adapter and connect it to another computer. Scan it without booting windows off of it. It's a whole lot easier than trying to fight with crippled tools. Best tool in the world, if you want to fight them, process explorer from sysinternals, now available under/from microsoft. I'm not taking the time to explain the ins and outs of that program but it has the capabilities you need to track the infection/problem down and freeze it in it's path to allow time to remove. __________________ YBLEGAL.NET → Profile • Projects • Parts For Sale → Steel Braided Brake Lines • Front Camber Kit (Price Drop) • Manual Brake Pedal Last edited by YBLEGAL; 12-10-2008 at 04:53 AM.

12-10-2008, 09:46 AM	#29
CRX-YEM Super Moderator Join Date: Sep 2002 Location: Wallingford, CT Age: 32 Posts: 4,430 iTrader: 0 / 0% Ride: 91 CRX Rep Power: 86	try updating the adaware definitions today and then run the program again. Also in highjackthis, select O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) and chose to fix it. I would also ditch McAfee and use AVG for an anti virus program it's a hell of a lot better. Another thing to do, in add/remove programs uninstall myway search assistant. you can thank Dell for that one being installed by the factory. to test if you actually have this virus "Win32.Trojan.KillAV" click start> run > and type "regedit" if regedit opens that's not the problem. if regedit won't open or crashes the system look into finding a virus removal tool for the Win32.Trojan.KillAV removal tool if your using XP, maybe we can set up a remote assistance for me to log in and take a peak around. __________________ Dennis Buy my stuff plz... Mondaswap For Sale - MPFI, 88-91 CRX, 92-95 Civic Parts Please don't PM/Email/IM me for technical support. Make a Post!!! 91 CRX DX, 03 Civic EX "There are 10 kinds of people in the world: those who get binary and those who don't." "Of all my imaginary friends I don't think there was one I didn't end up having to kill"

12-10-2008, 01:04 PM	#33
CRX-YEM Super Moderator Join Date: Sep 2002 Location: Wallingford, CT Age: 32 Posts: 4,430 iTrader: 0 / 0% Ride: 91 CRX Rep Power: 86	Those are both files associated with a wireless network card. Do you have on installed ?? I doubt removing spybot or ad-aware is going to help 3 Adware-MyWebSearch, that's from the myway search assistant. add/remove programs and uninstall any program with the name myway, mywayserach in the title. __________________ Dennis Buy my stuff plz... Mondaswap For Sale - MPFI, 88-91 CRX, 92-95 Civic Parts Please don't PM/Email/IM me for technical support. Make a Post!!! 91 CRX DX, 03 Civic EX "There are 10 kinds of people in the world: those who get binary and those who don't." "Of all my imaginary friends I don't think there was one I didn't end up having to kill"

12-10-2008, 01:13 PM	#34
YBLEGAL Regular Member w/ Cheese Join Date: Aug 2006 Location: NW Indiana Posts: 2,746 iTrader: 0 / 0% Ride: 2000 EJ8 w/ SiR-II Rep Power: 72	I don't know why you don't just reinstall. Is this a production server? If it's just a desktop workstation, screw it... I'm tellin ya. Read what I said above... Wasting time and effort.... __________________ YBLEGAL.NET → Profile • Projects • Parts For Sale → Steel Braided Brake Lines • Front Camber Kit (Price Drop) • Manual Brake Pedal

12-10-2008, 03:06 PM	#37
Aleaf.CRX Hates Cunts! Join Date: Jan 2008 Posts: 2,025 iTrader: 0 / 0% Blog Entries: 2 Rep Power: 72	My mom's had a Trojan virus before. I don't know much about computers, and I had to reinstall everything when I couldn't figure it out. Shit, my ex was into computers, I'm not sure but I could've swore he said most Trojans were similar or the same type of virus. I found this. Don't know if it'll help at all. PC Hell: Bymer Trojan - wininit.exe trojan It might lead you to something helpful anyway. I could've sworn the virus came about from too much downloaded porn....sigh. Courtesy of my brother. Last edited by Aleaf.CRX; 12-10-2008 at 03:10 PM.


Welcome, Guest! Please Register or Login: User Name Password Members have access to more features, better search, and see fewer ads! It's free, what are you waiting for?

12-09-2008, 11:56 PM	#26
endlesszeal Senior Member Join Date: Nov 2002 Posts: 2,068 iTrader: 0 / 0% Rep Power: 68	looks like your system is infected with a worm and the computer is restarting to prevent the worm from attaching your network/devices. your log looks normal, with just left over crap and installs. try install and running this from symantecs, but before you do, disconnect yourself from internet ie unplug Ethernet wire or wireless device: W32.Blaster.Worm Removal Tool - Symantec.com then install and run this: SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware! i found it to be much better than adaware and spybot. if it doesnt install, rename the file "S_A_S.exe" and it should install. After the two scans from mentioned programs, let me know. Good luck.

12-10-2008, 04:44 AM	#27
Gnarphantom Member Join Date: Mar 2008 Location: Mankato, MN Posts: 68 iTrader: 0 / 0% Ride: LS Swapped CRX Rep Power: 4	Like he said^^^^. I had the same thing happen to me when I was running Adaware.

12-10-2008, 09:31 PM	#45
YBLEGAL Regular Member w/ Cheese Join Date: Aug 2006 Location: NW Indiana Posts: 2,746 iTrader: 0 / 0% Ride: 2000 EJ8 w/ SiR-II Rep Power: 72	Good stuff. I hope the backups go smoothly. ps newegg has 1tb green power hard drives (slow but good for backing up to) for 100 bucks. __________________ YBLEGAL.NET → Profile • Projects • Parts For Sale → Steel Braided Brake Lines • Front Camber Kit (Price Drop) • Manual Brake Pedal

12-10-2008, 11:23 PM	#47
YBLEGAL Regular Member w/ Cheese Join Date: Aug 2006 Location: NW Indiana Posts: 2,746 iTrader: 0 / 0% Ride: 2000 EJ8 w/ SiR-II Rep Power: 72	If your data is important to you, a backup would still be recommended. __________________ YBLEGAL.NET → Profile • Projects • Parts For Sale → Steel Braided Brake Lines • Front Camber Kit (Price Drop) • Manual Brake Pedal

12-10-2008, 11:43 PM	#49
YBLEGAL Regular Member w/ Cheese Join Date: Aug 2006 Location: NW Indiana Posts: 2,746 iTrader: 0 / 0% Ride: 2000 EJ8 w/ SiR-II Rep Power: 72	this i hear. xmas time, good time to catch a sale on a backup drive to keep is what i'm saying. __________________ YBLEGAL.NET → Profile • Projects • Parts For Sale → Steel Braided Brake Lines • Front Camber Kit (Price Drop) • Manual Brake Pedal

12-11-2008, 12:44 AM	#50
endlesszeal Senior Member Join Date: Nov 2002 Posts: 2,068 iTrader: 0 / 0% Rep Power: 68	it looks whatever infected your system latched onto your dlink adapater and SAS just nuked it. try uninstalling and reinstalling all you dlink product and updating the drivers. is there anything else wrong with the system? and agreed with setting up windows and imaging it. makes restoring much easier. and btw, before you install windows, make sure to get one with sp3 slipstreamed and all other major updates or be prepared to spend 2 hrs installin gthem and rebooting.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
b16 in 97ex = problem after problem	terribl3jon	HYBRID -> EG-EK / DC	3	03-23-2009 03:42 PM
computer help	nootrac22	Computers, Games, Electronics etc	19	03-26-2008 12:53 PM
pm6 computer	broadway7272	Parts: For Sale/Trade/Wanted	1	10-28-2006 09:50 PM
Computer help	swanny	Members' Lounge	3	04-21-2004 04:52 PM
computer problem	deejay	Members' Lounge	3	12-03-2003 04:14 AM

Hondaswap.com | Honda Technical & JDM styling Forums

problem w/ my computer, help!