Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

spyware mostly gone but Internet is too - TCP/IP probelm 1

Status
Not open for further replies.

Techview

MIS
Nov 3, 2003
7
US
I'm cleaning up this XP machine - lots of adware, malware, etc. Ran Spybot, AdAware, CWShredder, got rid of a lot of junk.
So now I'm trying to restore the internet. My problem is: I can't uninstall TCP/IP - and I can't delete my network connections. I tried deleting Winsock2 anyway and creating a bogus dialup connection to recreate it, but TCP/IP is still locked up. I'm showing that I've got a connection, but can't ping, it doesn't see TCP/IP, can't get an IP address, etc.
One more thing before I post my HijackThis log - there's a program called YTAXJ - it's in c:windows\prefetch - can't find anything about it on the web...???
My Log:
Logfile of HijackThis v1.97.7
Scan saved at 1:27:42 PM, on 12/1/2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\AIM95\aim.exe
C:\Documents and Settings\Alex\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
N3 - Netscape 7: user_pref("browser.startup.homepage", " (C:\Documents and Settings\Alex\Application Data\Mozilla\Profiles\default\1um3gt7n.slt\prefs.js)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {99C332E7-E704-49AF-AE80-ACD8C50D9AB5} - (no file)
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - O16 - DPF: {9FC87BC7-7963-4B70-8485-B1A41034C9A1} (CSonyPicturesGameDownloaderCtl Object) - O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
Thanks so much for any help you can provide!
 
SYAR - Yes- I love it!!! The WinsockFix is on my little usb drive along with Kazaabegone, Spybot, HijackThis and all of my other favorites! And here I was trying to fix the winsock manually when there's this perfect little program out there...!

I'm finishing up this computer and I'll start on #3 tonight...

Thanks again!!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top