Help- Coded text...part 4

Question

******************************* Message Edited by barbieblonde on 10-26-2005 07:35 PM

ky331 · Answer

barbie, while someone might be able to sift-through all the info you've included in your 4 threads [and by the way, it would be preferable for you to have kept it all in one thread, breaking it up into pieces (as necessary), by continually REPLYing to your previous post in that thread],  if you want to get optimal help here, the preferred analysis tool used is HiJackThis' Download the latest version of HJT(hijackthis) (version 1.99.1) from http://majorgeeks.com/download3155.html you must create a separate folder and place it there.... people commonly use C:\HJT.   Note:  Please do *NOT* use a TEMP (temporary) folder, *NOR* your DESKTOP, as HJT will be generating log files and backup files in the folder from which it is run... you risk accidentally losing these if you use a TEMP folder, and you will generate extreme clutter if you use your DESKTOP. The file above comes as a compressed .ZIP file... you have to UNzip it (hopefully, you have an UNzip utility built into your Windows Explorer.   If for any reason, you're unable to UNzip it, you can download the already-unzipped .EXE file from http://downloads.malwareremoval.com/HijackThis.exe ) After Unzipping, double click on HiJackThis.EXE Click on  Do a System Scan and Save a LogFile This will automatically open NotePad Copy the entire file from NotePad:  EDIT/SelectAll, EDIT/Copy Then go to the new forum dedicated for HiJack This logs (**NOT** back here), and  PASTE the results there: http://forums.us.dell.com/supportforums/board?board.id=si_hijack Be sure to include a detailed description of any problems/errors/warnings you are encountering. Hopefully, one of the HJT experts will get to it as quickly as possible.   WARNING:  HiJack This is a VERY POWERFUL tool.  Do *NOT* do anything else (in particular, do NOT use it to delete any entries) until you are advised to do so!!   Improper use of this tool can severely damage your system.     Supplemental note:  The procedure as worded above has been carefully edited over time, so as to expedite the process of helping people.   Nevertheless, it seems that many individuals try to be 'creative', and make some variations.  It really would be to your benefit if you follow these directions EXACTLY as stated... because certain changes on your part can result in slowing-down the help process.  Specifically, the following are 3 very common BAD deviations which will cause delays: a)  BAD:  using an older/outdated version of HiJackThis... The experts only work with the current version.   So if you make a post with an older version, you'll simply be advised to get the latest version, re-run it, and re-post your log. b) BAD:  using a TEMP directory or your DESKTOP for HJT.... Some experts may insist you move HJT before they'll begin working with you.   Others will start the repair process, advising you to move HJT as one of the very first steps.   Failure to do so can result in losing potentially critical information.   So please,  just use the suggested  C:\HJT  directory, rather than try to be creative. c) BAD:  posting your log in the wrong forum... if you post your log back here, in the Virus/SpyWare forum, it will 'sit idly', either until the forum moderator gets around to move it for you... or until you decide to repost your log...  in the HiJackThis forum.

secured2k · Answer

Hello,   The message you are seeing from McAfee is a part of it's scriptstopper technology. When it refers to the Help and Support Binary (as you posted in the first post), this is normal/safe. You should allow this script execution since it is from a trusted and expected source (Windows Help and Support).   You are seeing this message because one of the custom script instructions being issued to the Help and Support Center is from a custom OEM computer manufacturer. The instructions are suspicious and may appear to be dangerous or virus-like, so McAfee ScriptStopper (VirusScan) will alert you.   I will review your McAfee Virtual Tech. log and add more if there are any issues detected.   Edit: I have checked your MVT log and it appears there are no McAfee software issues. Based on your description, it sounds like a configuration problem, specifically dealing with fonts. To test this, please try going to Right-Clicking on the Desktop (background picture) and choosing Properties. Change your theme to Windows Classic or Windows XP. Make sure the 'modified' one is not selected. Click Apply and see if the Fonts return to normal. If this has no effect, Please let us know and follow the advice in the previous reply about HiJackThis logs.       Message Edited by secured2k on 10-25-2005 09:14 AM

barbieblonde · Answer

secured2k, Thanks for your help, it didn't work but I appreciate your respectful reply, I did manage the copy of HJT and posted it in the correct forum. So I will wait & see what happens, thanks again.  Kindest regards, barbieblonde

secured2k · Answer

Another option you can try is to make sure your Windows System files are in tact. This will require your Windows XP Installation/Reinstallation CD.   To perform this check and restore of Windows System files, please follow these directions.   Click Start. Click Run Type in SFC /SCANNOW If/When prompted, insert your Windows XP Installation CD. Wait until the program reports it is done. Restart your computer.   For more information on the SFC (System File Checker) and Windows File Protection, please see Microsoft's Official support documentation here: SFC.EXE => http://support.microsoft.com/?kbid=310747 WFP => http://support.microsoft.com/kb/222193/EN-US/

barbieblonde · Answer

secured2k, Hey just wanted to say thank you for your help, everything is working great- your advice was very helpful, I went to the web site and found more tips & I ended up restoring back to a previous date, which I did not know you could do.  So, thanks again.  Kindest regards, barbieblonde

Virus & Spyware

Help- Coded text...part 4

Was this post helpful?