Go Back  DVD Talk Forum > General Discussions > Tech Talk
Reload this Page >

Whats going on with my computer?

Tech Talk Discuss PC Hardware, Software, Internet and Other Technology

Whats going on with my computer?

Old 08-10-05, 09:25 PM
  #1  
DVD Talk Platinum Edition
Thread Starter
 
Join Date: Feb 2001
Location: New Brunswick, Canada
Posts: 3,161
Likes: 0
Received 0 Likes on 0 Posts
Whats going on with my computer?

So some wierd things have been going on my computer within the last 24 hours.

I booted it up this morning and a Blue screen with a grey background came up with a message saying "NAV auto protect, unable to utilize the cirus scanning engine database files" After that you just hit OK, and it starts as normal

Everything seems fine. However, the start menu is now pretty small. My home page which was set at msn.ca is back to my isp home page.

Also, in my address bar for IE, it is showing websites in the drop down menu that I havent been to in over a year. Why is all that coming back now

Strange.

I ran housecall, adaware and spybot and nothing out of the ordinary.

Also, I tried to watch a video on WMP and it said Internal Error

Any suggestions

Last edited by ElementZ; 08-10-05 at 09:41 PM.
Old 08-10-05, 09:50 PM
  #2  
Retired
 
Join Date: May 1999
Posts: 27,449
Likes: 0
Received 0 Likes on 0 Posts
Very strange.

If you have system restore enable, jump back to the most recent one. Probably the easiest solution.
Old 08-10-05, 09:56 PM
  #3  
DVD Talk Platinum Edition
Thread Starter
 
Join Date: Feb 2001
Location: New Brunswick, Canada
Posts: 3,161
Likes: 0
Received 0 Likes on 0 Posts
Its windows 98 btw, does that have sys restore
Old 08-10-05, 10:22 PM
  #4  
Retired
 
Join Date: May 1999
Posts: 27,449
Likes: 0
Received 0 Likes on 0 Posts
It's been too long since I had a computer with 98 so I'm not sure.

But I'm guessing no. I want to say ME or 2000 was the first to have it.

I did a google search and it didn't come up with any instructions, so that makes me a little more confident that 98 doesn't have built in system restore.

Hopefully some more knowledgeabale techies here can give you a hand.
Old 08-10-05, 11:28 PM
  #5  
DVD Talk Gold Edition
 
Join Date: Jun 2004
Location: Houston, Tx.
Posts: 2,713
Likes: 0
Received 0 Likes on 0 Posts
Sounds like you may have some kind of parasite on your system. Have you visited theSpyware/Popup section?
Empty the contents of your temp folders (Windows and IE's).
Have you installed, intentionally or not, any software latley?

The Start Menu should be able to be englarged via Start>Settings>Taskbar & Startmenu. It should be in there somewhere. I don't remember the exact location on a 98 system, though.

Re-Install NAV and see if the error goes away..
In IE, clear the History and reset the home page to your liking. If the home still reverts back to the ISP, then you may have some Homepage hijacker messing with IE. Again, visit and go through the Spyware/popup sticky. If problems persist., post the contents of your HiJackThis log and we will see if there is anything there that can be causing this problem.


The closest to the System Restore in Windows 98 is "scanreg". You must use it from the command prompt.
Command-Line Switches for the Registry Checker Tool
Scanreg and System Restore do not always take care of problems, though
Old 08-11-05, 08:58 AM
  #6  
DVD Talk Platinum Edition
Thread Starter
 
Join Date: Feb 2001
Location: New Brunswick, Canada
Posts: 3,161
Likes: 0
Received 0 Likes on 0 Posts
Does anything look out of the ordinary

Logfile of HijackThis v1.98.2
Scan saved at 10:00:36 AM, on 8/11/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ALIANT\HIGH-SPEED CONNECTION MANAGER\APP\ENTERNET.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\HOMEKEYLOGGER\KEYLOGGER.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\ULTIMATEZIP 2.7\UZIP.EXE
C:\WINDOWS\TEMP\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.ca/
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ALIANT\NETASS~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [$EnterNet] C:\PROGRA~1\ALIANT\HIGH-S~1\APP\ENTERNET.EXE -AutoStart
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Startup: Net Assistant.lnk = C:\Program Files\Aliant\Net Assistant\bin\matcli.exe
O8 - Extra context menu item: Download with NetPumper - C:\Program Files\NetPumper\AddUrl.htm
O16 - DPF: Yahoo! Cribbage - http://download.games.yahoo.com/game...ts/y/it1_x.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
Old 08-11-05, 09:17 AM
  #7  
DVD Talk Godfather
 
DVD Polizei's Avatar
 
Join Date: Jan 2002
Posts: 52,603
Received 1 Like on 1 Post
ENTERNET.EXE looks suspishy. Maybe even KEYLOGGER as well, and hopefully you are aware it's running on your PC.
Old 08-11-05, 03:34 PM
  #8  
DVD Talk Legend
 
Join Date: Jul 2000
Location: chokin' you out in less than 30 seconds
Posts: 10,634
Likes: 0
Received 0 Likes on 0 Posts
that wucrtupd.exe may be funny as well

http://www.boredguru.com/modules/art...php?item_id=83
Old 08-11-05, 07:28 PM
  #9  
DVD Talk Gold Edition
 
Join Date: Jun 2004
Location: Houston, Tx.
Posts: 2,713
Likes: 0
Received 0 Likes on 0 Posts
The Keylogger needs to be removed
ENTERNET.EXE is related to your connection manager
CriticalUpdate could be legit or not. Navigate to C:\WINDOWS\SYSTEM in Windows Explorer and locate the file, right click and select Properties. In one of the tabs, there may be a version tab. Look and see who the company is, it should say Microsoft Corporation if it is a legit file.

While in Windows Explorer, navigate to the C:\PROGRAM FILES\HOMEKEYLOGGER\ folder
and delete the folder. This will delete the contents also.

Reboot

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Thread Tools
Search this Thread

Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service - Do Not Sell My Personal Information

Copyright 2018 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.