Jump to content


Photo

Com.org and Your.com, can't reset clock


  • This topic is locked This topic is locked
16 replies to this topic

#1 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 19 May 2004 - 01:20 AM

Well...it seems I lost all my posts...but my computer clock isn't working and lately I've been getting pop ups asking me if it isn't working and if so they'll fix it...suspicious, huh?

And sometimes the computer acts like it's offline, and it isn't, and it stops showing pictures and just degrades from there until it won't show anything at all, and tells me that it's unavailable, or cannot connect to server. And then, sometimes, I log onto something and it tells me it couldn't or "are you sure you're connected to the internet?" And I am.

Any help?

#2 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 19 May 2004 - 01:22 AM

And I forgot to mention. When the computer stops showing pictures and the page itself, com.org or your.com will pop up all of a sudden showing, for example, the web page as "www.www.cnn.com.com" or .org. And those pages show up perfectly fine, pictures there, text there, not a problem at all. Which is why I believe that they're related. How do I get rid of this com.org and your.com?

#3 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 19 May 2004 - 01:24 AM

Confusing, when I say those pages show up fine I mean the Com.org and Your.com pages, not the www.www.cnn.com.org, that shows nothing or it shows the Your.com and Com.org

#4 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 19 May 2004 - 01:30 AM

This thing didn't even show what I wrote?? Dang it...Okay, what I posted originally was that: The computer clock cannot be set and it freezes the "clock properties". And I've been getting pop ups asking "are you having clock problems?" and then offering to fix them. Gee, suspicious, huh?

And then at times, actually all of the time, the computer decides not to show pictures and then everything degrades from there and won't show the page at all and tells me it could not "connect to server" or the page is "unavailable". And then when I shut down the computer it always tells me that "this program is not responding" and you know how it shows you the name of the program at the top, but this is just blank. So I think it's some virus or bug someone sent out and it's masked itself, it's messing with the clock and the web pages.

When the web pages won't show it'll show, for example, again, "www.www.cnn.com.org" and then Your.com and Com.org will pop up with no problems, everything is showing, all the pictures and text, while everything else will not. And if I press refresh a million times it'll start showing a regular web page somewhat normally, but it never stays for long.

Any ideas about what my problem is?

#5 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,317 posts

Posted 19 May 2004 - 08:47 AM

Please do this.
Download 'Hijack This!'. http://www.spywarein.../HijackThis.exe
Save it in a convenient permanent folder such as C:\HJT\, double click HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log, Ctrl-A to Select All, and copy its contents here. Most of what it lists will be harmless or even essential, don't fix anything yet.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#6 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 19 May 2004 - 01:24 PM

Okay, thanks. Last night I wrote out everything and then when I went back to look at the post it was never posted, I even shut down the computer, went back to the site and it still wasn't showing it. Thanks for fixing it. Here's the HJT log:

Logfile of HijackThis v1.97.7
Scan saved at 11:17:54 AM, on 05/19/2004
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\WINDOWS\SYSTEM\SNCNTR.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\HPHSTSC0.EXE
C:\WINDOWS\SYSTEM\HPZSTATX.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\MY DOCUMENTS\JEFFREY\HIJACKTHIS.EXE

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [hpppta] C:\Program Files\Hewlett-Packard\HP PrecisionScan\PrecisionScan\hpppta.exe /ICON
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [sncntr] c:\windows\system\sncntr.exe /nocomm
O4 - HKLM\..\Run: [API16T] C:\WINDOWS\SYSTEM\API16T.exe
O4 - HKCU\..\Run: [MsnMsgr] "c:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...8080.8447916667
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macr...director/sw.cab
O16 - DPF: {BB47CA33-8B4D-11D0-9511-00C04FD9152D} (ExteriorSurround Object) - http://autos.msn.com...ior/Outside.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...StatsClient.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zon...MineSweeper.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab

#7 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,317 posts

Posted 19 May 2004 - 06:27 PM

Tick and fix this one, it's a virus.
O4 - HKLM\..\Run: [sncntr] c:\windows\system\sncntr.exe /nocomm

Run this online virus scan.
http://www.pandasoft...n_principal.htm

Reboot
See if you can delete c:\windows\system\sncntr.exe if it's still there.
And post another log.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#8 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 19 May 2004 - 11:52 PM

Here's the new log...

Logfile of HijackThis v1.97.7
Scan saved at 9:45:43 PM, on 05/19/2004
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\HPZSTATX.EXE
C:\PROGRAM FILES\AIM95\AIM.EXE
C:\MY DOCUMENTS\JEFFREY\HIJACKTHIS.EXE

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [hpppta] C:\Program Files\Hewlett-Packard\HP PrecisionScan\PrecisionScan\hpppta.exe /ICON
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [API16T] C:\WINDOWS\SYSTEM\API16T.exe
O4 - HKCU\..\Run: [MsnMsgr] "c:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...8080.8447916667
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macr...director/sw.cab
O16 - DPF: {BB47CA33-8B4D-11D0-9511-00C04FD9152D} (ExteriorSurround Object) - http://autos.msn.com...ior/Outside.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...StatsClient.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zon...MineSweeper.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoft.../as5/asinst.cab

#9 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,317 posts

Posted 20 May 2004 - 12:20 AM

Good work, looks ok to me now. :)
But is the problem still happening?

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#10 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 20 May 2004 - 12:41 AM

I'm still waiting for the Panda thing to finish...it's been going on for a long time now...How long is it supposed to take? I'll shut down once it's done and then see if everything works.

#11 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 20 May 2004 - 12:43 AM

I did the check for the entire computer...maybe that's why it's taking so long.

#12 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,317 posts

Posted 20 May 2004 - 12:45 AM

If you have trouble with Panda, you can try HouseCall. http://housecall.trendmicro.com/
Some think Panda is more thorough.

Scans always do take a longish time - but more than say 20 minutes would be bad.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE


#13 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 20 May 2004 - 12:49 AM

Oh, well it's taken well over 20 minutes. I put it on scan "All of My Computer". And it's half done, or so it says, and it's scanned 50,000 things...

#14 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 20 May 2004 - 12:52 AM

I think there's something wrong with the progress bar...it's been at halfway for quite a while now...

#15 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 20 May 2004 - 01:07 AM

Okay, I think it fixed it. I reset the clock without anything happening, and I haven't gotten weird messages. I'll shut down and see again...

#16 spielwaren

spielwaren

    Member

  • Full Member
  • Pip
  • 12 posts

Posted 21 May 2004 - 06:07 PM

CNM thank you so much for helping me, for the last month or so I've been trying to figure out how to fix this thing. I've had no problems now for however many days it's been, thanks.

#17 cnm

cnm

    Mother Lion of SWI

  • Administrators
  • PipPipPipPipPip
  • 25,317 posts

Posted 21 May 2004 - 06:23 PM

Glad we could help, spielwaren. :)

If you need this topic reopened, please request this by sending the moderating team an email with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.

Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button