Options

i'm pretty sure i have a virus and its tough

Unknown
edited July 2005 in Spyware & Virus Removal
man oh man this thing is giving me hell.. heres the problems i've been having. I notice windows has a unusually longer load time to start windows. for a while i had no start menu or taskbar. windows wont load nor can i activate my ant-virus software, i get a not enough resources error when tries it to load even though i have plenty ram (512mb). if i personally click the hour glass icon appears for a while but nothing happens. windows player gives a out if memory error when clicked. outlook express gives a out of memory error when reply or creating a messege. and my cut and paste dont work. the paste is whited out after cuting or copying. and i just recently noticed that when i tried to down load the software on this site "highjack this" the download box appeared for a second and then disappeared. i get Rpc and Ikernel errors when i try to uninstall software. i cant search among other simple windows functions. i cant even move files to other folders. and bearshare disappeared from my desktop and program files. i think its where the problem started.... and i tried houscall twice but it doesnt detect anything. i also tried a couple symantec fixes but they didnt work either...


i wont be able to post one of the long log files because i cant down load the software or cut and paste but heres my specs the best i can present them off my head.

ram: 512
os: windows xp (home)
hd: 72g

Comments

  • Shadow2018Shadow2018 Northwest Missouri
    edited July 2005
    Get Hijack This from here:

    http://majorgeeks.com/HijackThis_d3155.html

    Save this to your desktop. Then move this folder to your C: directory before you extract the files.
  • magnus
    edited July 2005
    Heres my log file.. thanks much for the help so far...





    Logfile of HijackThis v1.99.1
    Scan saved at 10:15:19 AM, on 7/30/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\MXOALDR.EXE
    C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\Program Files\Creative\SBLive 24-Bit External\Surround Mixer\CTSysVol.exe
    C:\Program Files\Netopia\C3kWepN.exe
    C:\WINDOWS\system32\BacsTray.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Apoint\Apoint.exe
    C:\Program Files\Dell Support\DSAgnt.exe
    C:\PROGRA~1\AIM\aim.exe
    C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Apoint\Apntex.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
    R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
    O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll
    O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
    O4 - HKLM\..\Run: [VirusScan Online] c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
    O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOALDR.EXE
    O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
    O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
    O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
    O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\McAfee.com\Agent\McUpdate.exe
    O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
    O4 - HKLM\..\Run: [MaxtorOneTouch] C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
    O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBLive 24-Bit External\Surround Mixer\CTSysVol.exe /r
    O4 - HKLM\..\Run: [C2kWep] C:\Program Files\Netopia\C3kWepN.exe
    O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
    O4 - HKLM\..\Run: [bacstray] BacsTray.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
    O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup
    O4 - HKCU\..\Run: [AIM] C:\PROGRA~1\AIM\aim.exe -cnetwait.odl
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol\aol toolbar 2.0\aoltbhtml.dll/search.html
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
    O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar3.dll/cmtrans.html
    O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
    O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
    O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} - http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
    O16 - DPF: {A82C3A33-5C0E-466C-B020-71585433A7E4} (PhxStudent.OeSetup15) - https://ecampus.wintu.edu/secure/PhxStudent15.CAB
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
    O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
    O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
  • Shadow2018Shadow2018 Northwest Missouri
    edited July 2005
    Run these online scans and save then post the results:

    http://www.pandasoftware.com/products/activescan/com/activescan_principal.htm

    http://www.bitdefender.com/scan8/ie.html
  • magnus
    edited July 2005
    I've tried both before and tried again just now. The virus isnt allowing me to click on the links to start the scaning. panda just freezes and bitdefender cant even be clicked. the only thing i could use to scan was housecall and i had to get in through some sort of skip over...
  • Shadow2018Shadow2018 Northwest Missouri
    edited July 2005
    Download panda's trial version of titanium anti-virus. You must shut down McAfee in order to run panda's program. Let me know the results.
  • magnus
    edited July 2005
    I cant download the software. ive tried many different methods. if i click on anything that isn't a direct download link it does nothing. is there a way i can get the file off the site?
  • magnus
    edited July 2005
    finally found a way to download panda but when i tried to install i got an RPC not available error.
  • magnus
    edited July 2005
    its like this thing has all its corners covered.
  • magnus
    edited July 2005
    does my log file not show anything that could possibly be wrong with my computer? i cant get any anti-virus programs to work other than housecall witch finds nothing. ima have to reformat aint i?
  • Shadow2018Shadow2018 Northwest Missouri
    edited July 2005
    Nothing in your log is showing any infection but it doesn't mean that you don't have an infection.

    Download ewido security suite:

    http://www.ewido.net/en/download/

    Run ewido and let me know the results.
  • Shadow2018Shadow2018 Northwest Missouri
    edited July 2005
    Do you have a windows XP cd?
  • magnus
    edited July 2005
    yes i have a xp cd...
  • Shadow2018Shadow2018 Northwest Missouri
    edited July 2005
    You may try to do a repair of your windows installation before considering a reformat.
  • magnus
    edited July 2005
    i got ewido to run. its found 36 virus so far. i'll post the final results...
  • magnus
    edited July 2005
    ewido security suite - Scan report

    + Created on: 10:47:30 AM, 7/31/2005
    + Report-Checksum: 5F3CF823

    + Scan result:

    HKLM\SOFTWARE\Classes\CLSID\{2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} -> Spyware.MiniBug : Cleaned with backup
    HKLM\SOFTWARE\Classes\CLSID\{FF8DA190-3574-11D4-8068-0060082AE372} -> Spyware.BingoFun : Cleaned with backup
    HKU\S-1-5-21-2298342077-3887965478-4283518547-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0494D0D1-F8E0-41AD-92A3-14154ECE70AC} -> Spyware.MyWay : Cleaned with backup
    HKU\S-1-5-21-2298342077-3887965478-4283518547-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0494D0D9-F8E0-41AD-92A3-14154ECE70AC} -> Spyware.MyWay : Cleaned with backup
    HKU\S-1-5-21-2298342077-3887965478-4283518547-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-90F0-F66AB581A933} -> Spyware.MyWebSearch : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@advertising[2].txt[/email] -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@atdmt[2].txt[/email] -> Spyware.Cookie.Atdmt : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@blp.valueclick[2].txt[/email] -> Spyware.Cookie.Valueclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@doubleclick[1].txt[/email] -> Spyware.Cookie.Doubleclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@fastclick[1].txt[/email] -> Spyware.Cookie.Fastclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@fl01.ct2.comclick[1].txt[/email] -> Spyware.Cookie.Comclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@ivwbox[1].txt[/email] -> Spyware.Cookie.Ivwbox : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@mediaplex[1].txt[/email] -> Spyware.Cookie.Mediaplex : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@mt.valueclick[2].txt[/email] -> Spyware.Cookie.Valueclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@mv.valueclick[2].txt[/email] -> Spyware.Cookie.Valueclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@overture[2].txt[/email] -> Spyware.Cookie.Overture : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@servedby.advertising[1].txt[/email] -> Spyware.Cookie.Advertising : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@statse.webtrendslive[1].txt[/email] -> Spyware.Cookie.Webtrendslive : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@test.coremetrics[1].txt[/email] -> Spyware.Cookie.Coremetrics : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@valueclick[2].txt[/email] -> Spyware.Cookie.Valueclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@web2.realtracker[1].txt[/email] -> Spyware.Cookie.Realtracker : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@web4.realtracker[1].txt[/email] -> Spyware.Cookie.Realtracker : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@www1.paypopup[1].txt[/email] -> Spyware.Cookie.Paypopup : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Cookies\eric [email]smalls@xxxcounter[1].txt[/email] -> Spyware.Cookie.Xxxcounter : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@2o7[2].txt[/email] -> Spyware.Cookie.2o7 : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@ads.pointroll[1].txt[/email] -> Spyware.Cookie.Pointroll : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@atdmt[2].txt[/email] -> Spyware.Cookie.Atdmt : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@doubleclick[1].txt[/email] -> Spyware.Cookie.Doubleclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@ehg-apollogroup.hitbox[2].txt[/email] -> Spyware.Cookie.Hitbox : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@fastclick[1].txt[/email] -> Spyware.Cookie.Fastclick : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@hitbox[2].txt[/email] -> Spyware.Cookie.Hitbox : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@mediaplex[1].txt[/email] -> Spyware.Cookie.Mediaplex : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@questionmarket[1].txt[/email] -> Spyware.Cookie.Questionmarket : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@trafficmp[2].txt[/email] -> Spyware.Cookie.Trafficmp : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@tribalfusion[2].txt[/email] -> Spyware.Cookie.Tribalfusion : Cleaned with backup
    C:\Documents and Settings\Eric Smalls\Local Settings\Temp\Cookies\eric [email]smalls@z1.adserver[1].txt[/email] -> Spyware.Cookie.Adserver : Cleaned with backup
    C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Spyware.Wheaterbug : Cleaned with backup


    ::Report End
  • magnus
    edited July 2005
    it still didnt get it. do u do a windows repair just by inserting the disk? i've never done one before...
  • Shadow2018Shadow2018 Northwest Missouri
    edited July 2005
    Try running Panda software's online scan again.
  • magnus
    edited July 2005
    tried, same results. just pauses. there aren't many links i can click with this virus..
  • Shadow2018Shadow2018 Northwest Missouri
    edited July 2005
    Do a repair install of windows.

    Place the disk in the cd-drive>click install windows> shortly after you will see a menu appear asking if you want to do a fresh install of windows or a repair of the current installation>Choose repair of current windows installation.

    This will reload windows. It will not wipe out your drive.

    When you complete the repair try running panda's online scan again.

    let me know the results.
  • magnus
    edited July 2005
    ok, i cant do it right now but i will inform you when i do. And thanks for the help so far, you've been very helpful...
Sign In or Register to comment.