Please help!

Discussion in 'SpywareBlaster & Other Forum' started by Sharmoogle, Mar 25, 2005.

Thread Status:
Not open for further replies.
  1. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    I installed Spyware Blaster version 3.2 on my computer. Now, when I try to open it on my desktop, I get the following message:

    Error! This program has been damaged possibly by a bad sector of the hard drive or a virus. Please reinstall it. (then you click ok)

    I've tried reinstalling it many times, including the newer Spyware Blaster 3.3 version, but I still get the same Error! message. I have McAfee Virus scan installed on my computer and I've scanned all of my C drive with no infected files. How do I correct this problem in order for Spyware Blaster to work?
     
  2. dog

    dog Guest

    Hi Sharmoogle, ;)

    Welcome to Wilders'

    This Quote from the Javacool Knowledge Base will provide you some direction
    Javacool KB Article

    HTH,

    Steve
     
  3. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    I tried the fresh download links and installed Spyware Blaster, and I still got the same Error.

    So, I went to the Hijack this forum, downloaded the program, scanned my computer, saved the log, and posted at the forum, copied and pasted the log, and nobody replied.

    What do I do now? :(
     
  4. dog

    dog Guest

    Don't worry, they're very busy @ Castle Cops, and they process a lot of HJT logs.

    An answer will come in a day or two, as they will thoroughly examine your log, before providing advice. ;)

    Steve
     
  5. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    Are you sure? I couldn't even find my post today! I had to go back three pages. My post only had 7 views and no replies. :(
     
  6. dog

    dog Guest

    Yes ;)

    Don't worry ... if you haven't heard anything in 2 days, check back in here. ;)

    Castle Cops provides some of the best HJT log analysis available, and as you can see how busy they are, being a new post and three pages back. Don't bump your post as they'll look at the older unanswered ones first. ;)

    Steve
     
  7. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    Okay and thanks for the confidence. I hope I'll be able to find the reply to my post! :cool: (trying to be cool..)
     
  8. dog

    dog Guest

    Hi Sharmoogle, ;)

    Here's a link to your post @ Castle Cops - http://castlecops.com/postt113202.html

    So you won't have to search for it. ;) ... you can also use the "Your Posts" link at the top of the Castle Cops forum to find it. ;)

    Here you can click on your user name, and check the "forum info" box (lower right) where you can see your last post, or look up/see the last 300 posts or threads, it will also be listed in your subscriptions if you have that option checked in your user cp.

    Steve
     
  9. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    I suggest you also go back to the initial CastleCops link in Dog's Post # 2 above and download the proper HJT version....v1.99.1. Then repost a new HJT log or you will be delayed and the fine helpers will be delayed asking you to do the same.

    Your HJT log info....Logfile of HijackThis v1.98.0
     
  10. dog

    dog Guest

    Good Catch Bubba ;) :)

    The direct DL link in Castle Cops instructions post ... hasn't been updated an is for version 1.98.0 ...

    @ Sharmoogle - Please Download version 1.99.1 from this page - http://castlecops.com/downloads-cats-14-10-10.html - and follow Bubba's instruction

    Steve
     
    Last edited by a moderator: Mar 25, 2005
  11. dog

    dog Guest

    @Sharmoogle

    Just an update in regards to the above - Please see/read this post at Castle Cops regarding their policy for HJT log postings to make sure you have fully complied, as there have been some changes/updates made.

    Castle Cops New HJT Posting Policy - http://castlecops.com/postt102301.html

    And please also follow Bubba's advice and Download HJT version 1.99.1 from the link above, or the link in the New HJT policy which does DL version 1.99.1.

    Steve
     
  12. dog

    dog Guest

  13. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    I downloaded the latest version and posted the new log file as a response to my first post. (with the old log file scan). Hopefully, I used the right protocol and they will notice my message. Thanks for your help. :)
     
  14. claire

    claire Guest

    Hi,

    Norbie answered your thread at Castlecops :)

    Good luck
     
  15. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    Thanks for the prompt response! :) I followed Norbie's instructions and posted the new logfile that he requested.
     
  16. dog

    dog Guest

    Hi Sharmoogle, ;)

    Thanks for Updating us, Please continue to do so, and let us know when all is well.

    Thanks for you're assistance Claire ;) :) ... it's nice that's there's good communication and help between Forums in the Security Community. :)

    Best Wishes,

    Steve
     
  17. claire

    claire Guest

    You're quite welcome Dog

    Have a great day :)

    PS the link in the download section at CC refers to version 1.99.1 ;)
     
  18. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    Despite following all of the instructions and a fresh download of Spyware Blaster, I'm still getting the damaged error. Since Spybot Search and Destroy and McAfee recently added some updates, could one of these programs be blocking Spyware Blaster? :doubt:
     
  19. claire

    claire Guest

    Hi,

    I run SB and Spybot together without any problem.I cannot speak for McAfee
    since I don't use this product

    HTH
     
  20. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    While following this thread from day one....I have not wanted to post the below link until the expert HJT folks finished with your log. Now that it appears you are clean....I am wondering if you would now take a look at the below post that helped a user fix this same type problem....even tho it does require one to grasp what the poster is describing.

    Anyway....this post---> https://www.wilderssecurity.com/showpost.php?p=383241&postcount=9

    Good luck :doubt:
     
  21. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    Thanks for more help.. I found the Regmon download and copied and pasted the lines with Spyware Blaster. Sorry, if the pasting takes up a lot of space. Can you explain any of this to me? I'll also post at Castle Cops. Thanks for any help!

    Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1062 34.03534080 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1063 34.03536000 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1064 34.07131600 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1065 34.07135040 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1066 34.07136960 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1067 34.07274480 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1068 34.07277760 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1069 34.07279600 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1070 34.08088960 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS hKey: 0xC18A7620
    1071 34.08097920 Spywareb:FFF89161 EnumValue HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
    1072 34.08113600 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1073 34.13165920 Spywareb:FFF89161 OpenKey HKCU\Control Panel\Desktop SUCCESS hKey: 0xC29AE060
    1074 34.13170000 Spywareb:FFF89161 QueryValueEx HKCU\Control Panel\Desktop\SmoothScroll NOTFOUND
    1075 34.13172320 Spywareb:FFF89161 CloseKey HKCU\Control Panel\Desktop SUCCESS
    1076 34.13179920 Spywareb:FFF89161 OpenKey HKCU\Control Panel\Mouse NOTFOUND
    1077 34.14435360 Spywareb:FFF89161 QueryValueEx 0xC18A3330\WSOCK32 NOTFOUND
    1078 34.14557280 Spywareb:FFF89161 QueryValueEx 0xC18A3330\WS2_32 NOTFOUND
    1079 34.14730960 Spywareb:FFF89161 QueryValueEx 0xC18A3330\MSVCRT SUCCESS "MSVCRT.DLL"
    1080 34.14830720 Spywareb:FFF89161 QueryValueEx 0xC18A3330\WS2HELP NOTFOUND
    1081 34.15109360 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1082 34.15113600 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1083 34.15115680 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1084 34.15272960 Spywareb:FFF89161 OpenKey HKLM\System\CurrentControlSet\Services\Winsock\Autodial SUCCESS hKey: 0xC29AE060
    1085 34.15277920 Spywareb:FFF89161 QueryValueEx HKLM\System\CurrentControlSet\Services\Winsock\Autodial\AutodialDllName32 SUCCESS 75 72 6C 2E 64 6C 6C 0
    1086 34.15282160 Spywareb:FFF89161 QueryValueEx HKLM\System\CurrentControlSet\Services\Winsock\Autodial\AutodialFcnName32 SUCCESS 41 75 74 6F 64 69 61 6C ...
    1087 34.15288560 Spywareb:FFF89161 QueryValueEx 0xC18A3330\URL NOTFOUND
    1088 34.15445920 Spywareb:FFF89161 QueryValueEx 0xC18A3330\SHLWAPI SUCCESS "SHLWAPI.DLL"
    1089 34.15659520 Spywareb:FFF89161 QueryValueEx 0xC18A3330\SHELL32 SUCCESS "SHELL32.DLL"
    1090 34.15901360 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1091 34.15904800 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1092 34.15906720 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1093 34.15921760 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Performance NOTFOUND
    1094 34.15927600 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1095 34.15930720 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1096 34.15932480 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1097 34.16019520 Spywareb:FFF89161 OpenKey HKCR\CLSID SUCCESS hKey: 0xC18A6610
    1098 34.16024560 Spywareb:FFF89161 CreateKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS hKey: 0xC18A6580
    1099 34.16028880 Spywareb:FFF89161 CreateKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS hKey: 0xC18A59D0
    1100 34.16063040 Spywareb:FFF89161 CloseKey HKLM\System\CurrentControlSet\Services\Winsock\Autodial SUCCESS
    1101 34.16104480 Spywareb:FFF89161 QueryValueEx 0xC18A3330\MSWSOCK NOTFOUND
    1102 34.23194880 Spywareb:FFF89161 QueryValueEx 0xC18A3330\COMDLG32 SUCCESS "COMDLG32.DLL"
    1103 34.23350880 Spywareb:FFF89161 OpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Documents SUCCESS hKey: 0xC29AE060
    1104 34.23353920 Spywareb:FFF89161 QueryValueEx HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Documents\DisableStartInMyDocs NOTFOUND
    1105 34.23356320 Spywareb:FFF89161 QueryValueEx HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Documents\HideMyDocsFolder NOTFOUND
    1106 34.23358640 Spywareb:FFF89161 CloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Documents SUCCESS
    1107 34.24595680 Spywareb:FFF89161 QueryValueEx 0xC18A3330\OLEAUT32 SUCCESS "OLEAUT32.DLL"
    1108 34.24623040 Spywareb:FFF89161 QueryValueEx 0xC18A3330\OLE32 SUCCESS "OLE32.DLL"
    1109 34.25230480 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1110 34.25234160 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1111 34.25236080 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1112 34.28660720 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1113 34.28665440 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1114 34.28667520 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1115 34.28681760 Spywareb:FFF89161 QueryValueEx 0xC1884E80\C:\PROGRAM FILES\SPYWAREBLASTER\SPYWAREBLASTER.INI NOTFOUND
    1116 34.28711520 Spywareb:FFF89161 QueryValueEx 0xC1884E80\C:\PROGRAM FILES\SPYWAREBLASTER\SPYWAREBLASTER.INI NOTFOUND
    1117 34.32685920 Spywareb:FFF89161 QueryValueEx 0xC1884E80\c:\windows\media\chord.wav NOTFOUND
    1118 34.34011840 Spywareb:FFF89161 QueryValueEx 0xC18A3330\C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSKT NOTFOUND
    1119 34.34284800 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1120 34.34294080 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1121 34.34296800 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1122 34.34437760 Spywareb:FFF89161 QueryValueEx 0xC1884E80\C:\PROGRAM FILES\SPYWAREBLASTER\appinit.ini NOTFOUND
    1123 34.34465200 Spywareb:FFF89161 QueryValueEx 0xC1884E80\C:\PROGRAM FILES\SPYWAREBLASTER\appinit.ini NOTFOUND
    1124 37.81998560 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS hKey: 0xC18A7620
    1125 37.82007600 Spywareb:FFF89161 EnumValue HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
    1126 37.82010080 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS
    1127 37.83929680 Spywareb:FFF89161 CloseKey HKCR\CLSID SUCCESS
    1128 37.83932320 Spywareb:FFF89161 CloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS
    1129 37.83934480 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS
    1130 38.27242560 Rundll32:FFFEB5A5 EnumValue 0xC18A7620 SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
    1131 39.70342960 Regmon:FFF8DE41 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
    1132 39.70346800 Regmon:FFF8DE41 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
    1133 39.70348800 Regmon:FFF8DE41 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
    1134 47.64555360 Rundll32:FFFEB5A5 EnumValue 0xC18A7620 SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
    1135 67.70131280 Rundll
     
  22. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Holy guacamole....I reckon I asked for that....but I was hoping you read the part in my post above concerning....even tho it does require one to grasp what the poster is describing.

    In anycase....I'm not sure posting that at CastleCops would be of any benefit to those folks. They have their hands full just assisting with all them HJT logs :doubt:

    As far as that log goes....would you attempt to locate the below file on your hard drive and posts it's contents....if it's not to big of a file ?

    C:\WINDOWS\NETWOQK.TXT

    I can not get to CastleCops at the moment to look at your HJT log....but I do not recall the below entry being there when I looked at it a few days ago :doubt:

    HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
     
  23. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    I've checked Windows, checked and finished a search for files and folders, and I cannot find this text file. The only file I could find was a NETWORK.TXT file under Windows. Now what do I do?

    Just for the record, I disabled McAfee virus scan, then reinstalled Spyware Blaster yet again, and I still get the damaged error. :( Do you have any more ideas?
     
  24. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Well....I'm not exactly sure. I'm kind of winging it and hope we stumble on something.

    The file was NETWOQK....with a Q....did you not find that one ?

    Also....how comfortable are you in going into the registry(regedit.exe)....or do you know what the registry is ?
     
  25. Sharmoogle

    Sharmoogle Registered Member

    Joined:
    Mar 25, 2005
    Posts:
    15
    No, I didn't find the file with a Q. However, I did fix some things in Hijack This that I felt were not needed. One was a radio toolbar (don't know how I got that one) and the other was some type of Qualifier.

    I'll check into the Registry, but I hope I don't crash the computer or something like that. ;) Tell me what I should do next, and I'll see what happens.
     
Thread Status:
Not open for further replies.