Lost Control Panel and More

W

Windsor371

Joined
Aug 22, 2007
Messages
2
Reaction score
0
Current issue it seems, need help.

i'm experiencing all the known problems with this virus:
-no control panel
-no add or remove programs
-loss of processor speed
-much longer response time
-startup problem " C:\WINDOWS\system32\printer.exe program not found


I will attach a .txt of my ComboFix and HijackThis files.

Thanks in advance!!!



 

Attachments

Some anomalies going on here ... is this a Dell or a Toshiba laptop ?


Remember that Hijackthis must be run in an own folder. Only if Hijackthis is run in its own folder will it create backups!

I suggest you go get Symantec (Norton) clean-up tool ... you have leftovers that may cause conflict.

Please turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Once you have applied all fixes ... Restart your computer, turn System Restore back on and create a restore point.


Suggest you get HJT to fix ...

O4 - HKLM\..\Run: [Dell QuickSet] C:\PROGRA~1\Dell\QuickSet\quickset.exe
Not dangerous, but unnecessary. Dell taskbar icon allowing you to quickly change settings

O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
Not dangerous, but unnecessary. InstallShield Update Service related; Automatically searches for and performs any updates to the software. Not required.

O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
Not dangerous, but unnecessary.

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
Not dangerous, but unnecessary. QuickTime is not permitted on my PCs ... I don't have an Apple. (sarcasm intended for Apple)

O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
Not dangerous, however, you ain't using Norton/Symantec, but this is loading ... see note above about the clean-up tool

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
Not dangerous, but unnecessary.

O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
Not dangerous, but unnecessary.

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Not dangerous, but unnecessary. I would uninstall Adobe Reader & go get Foxit

O4 - Global Startup: Bluetooth Manager.lnk = ?
The entry is unnecessary and can be fixed.

O4 - Global Startup: Digital Line Detect.lnk = ?
The entry is unnecessary and can be fixed.

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
To be fixed if not done intentionally

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
This entry should be safe. This entry should not be fixed! Your best bet to repair it is to try the LSPFix from Cexx.org.

O16 - DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} (get_atlcom Class) - http://apps.corel.com/nos_dl_manager_dev/plugin/IEGetPlugin.ocx
Looks like a legit plugin for/from Corel ... Check if you know this site and fix it if you do not. Unknown ActiveX-Objects, or ActiveX-Objects from unknown sites should always be fixed.

O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/install/gtdownls.cab
Check if you know this site and fix it if you do not.

O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - https://a248.e.akamai.net/f/248/5462/2h/www.symantecstore.com/v2.0-img/operation s/symbizpr/xcontrol/SymDlBrg.cab
This don't look right at all ... Should be fixed. This entry is possibly nasty.

O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
Strange ... I would fix it.

O23 - Service: Security Center (wscsvc) - Unknown owner - C:\WINDOWS\C:\WINDOWS\C:\WINDOWS\System32\svchost.exe (file missing)
Should be fixed. This entry is possibly nasty.


Disclaimer: Modifying the registry can cause serious problems that may require you to reinstall your operating system. I cannot guarantee that problems resulting from modifications to the registry can be solved. Use the information provided at your own risk.


Nothing jumps out at me screaming real nastie ... good luck!


:user:
 
Thanks for your reply.

It is a Dell MX170 laptop.

I will try these things tonight and report back tomorrow...

Cheers
 
Back
Top