Please help!

I installed Spyware Blaster version 3.2 on my computer. Now, when I try to open it on my desktop, I get the following message:

Error! This program has been damaged possibly by a bad sector of the hard drive or a virus. Please reinstall it. (then you click ok)

I've tried reinstalling it many times, including the newer Spyware Blaster 3.3 version, but I still get the same Error! message. I have McAfee Virus scan installed on my computer and I've scanned all of my C drive with no infected files. How do I correct this problem in order for Spyware Blaster to work?

 

Hi Sharmoogle,

Welcome to Wilders'

This Quote from the Javacool Knowledge Base will provide you some direction

Javacool KB Article

HTH,

Steve

 

I tried the fresh download links and installed Spyware Blaster, and I still got the same Error.

So, I went to the Hijack this forum, downloaded the program, scanned my computer, saved the log, and posted at the forum, copied and pasted the log, and nobody replied.

What do I do now?

 

Don't worry, they're very busy @ Castle Cops, and they process a lot of HJT logs.

An answer will come in a day or two, as they will thoroughly examine your log, before providing advice.

Steve

 

Are you sure? I couldn't even find my post today! I had to go back three pages. My post only had 7 views and no replies.

 

Yes

Don't worry ... if you haven't heard anything in 2 days, check back in here.

Castle Cops provides some of the best HJT log analysis available, and as you can see how busy they are, being a new post and three pages back. Don't bump your post as they'll look at the older unanswered ones first.

Steve

 

Okay and thanks for the confidence. I hope I'll be able to find the reply to my post! (trying to be cool..)

 

Hi Sharmoogle,

Here's a link to your post @ Castle Cops - http://castlecops.com/postt113202.html

So you won't have to search for it. ... you can also use the "Your Posts" link at the top of the Castle Cops forum to find it.

Here you can click on your user name, and check the "forum info" box (lower right) where you can see your last post, or look up/see the last 300 posts or threads, it will also be listed in your subscriptions if you have that option checked in your user cp.

Steve

 

I suggest you also go back to the initial CastleCops link in Dog's Post # 2 above and download the proper HJT version....v1.99.1. Then repost a new HJT log or you will be delayed and the fine helpers will be delayed asking you to do the same.

Your HJT log info....Logfile of HijackThis v1.98.0

 

Good Catch Bubba

The direct DL link in Castle Cops instructions post ... hasn't been updated an is for version 1.98.0 ...

@ Sharmoogle - Please Download version 1.99.1 from this page - http://castlecops.com/downloads-cats-14-10-10.html - and follow Bubba's instruction

Steve

 

@Sharmoogle

Just an update in regards to the above - Please see/read this post at Castle Cops regarding their policy for HJT log postings to make sure you have fully complied, as there have been some changes/updates made.

Castle Cops New HJT Posting Policy - http://castlecops.com/postt102301.html

And please also follow Bubba's advice and Download HJT version 1.99.1 from the link above, or the link in the New HJT policy which does DL version 1.99.1.

Steve

 

Just an Update:

The Javacool Knowledge Base Article - Error message: "This program has been damaged..." Has been updated to reflect the New Castle Cops - HJT Posting Policy

Thanks Javacool

 

I downloaded the latest version and posted the new log file as a response to my first post. (with the old log file scan). Hopefully, I used the right protocol and they will notice my message. Thanks for your help.

 

Hi,

Norbie answered your thread at Castlecops

Good luck

 

Thanks for the prompt response! I followed Norbie's instructions and posted the new logfile that he requested.

 

Hi Sharmoogle,

Thanks for Updating us, Please continue to do so, and let us know when all is well.

Thanks for you're assistance Claire ... it's nice that's there's good communication and help between Forums in the Security Community.

Best Wishes,

Steve

 

You're quite welcome Dog

Have a great day

PS the link in the download section at CC refers to version 1.99.1

 

Despite following all of the instructions and a fresh download of Spyware Blaster, I'm still getting the damaged error. Since Spybot Search and Destroy and McAfee recently added some updates, could one of these programs be blocking Spyware Blaster?

 

Hi,

I run SB and Spybot together without any problem.I cannot speak for McAfee
since I don't use this product

HTH

 

While following this thread from day one....I have not wanted to post the below link until the expert HJT folks finished with your log. Now that it appears you are clean....I am wondering if you would now take a look at the below post that helped a user fix this same type problem....even tho it does require one to grasp what the poster is describing.

Anyway....this post---> https://www.wilderssecurity.com/showpost.php?p=383241&postcount=9

Good luck

 

Thanks for more help.. I found the Regmon download and copied and pasted the lines with Spyware Blaster. Sorry, if the pasting takes up a lot of space. Can you explain any of this to me? I'll also post at Castle Cops. Thanks for any help!

Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1062 34.03534080 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1063 34.03536000 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1064 34.07131600 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1065 34.07135040 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1066 34.07136960 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1067 34.07274480 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1068 34.07277760 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1069 34.07279600 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1070 34.08088960 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS hKey: 0xC18A7620
1071 34.08097920 Spywareb:FFF89161 EnumValue HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
1072 34.08113600 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1073 34.13165920 Spywareb:FFF89161 OpenKey HKCU\Control Panel\Desktop SUCCESS hKey: 0xC29AE060
1074 34.13170000 Spywareb:FFF89161 QueryValueEx HKCU\Control Panel\Desktop\SmoothScroll NOTFOUND
1075 34.13172320 Spywareb:FFF89161 CloseKey HKCU\Control Panel\Desktop SUCCESS
1076 34.13179920 Spywareb:FFF89161 OpenKey HKCU\Control Panel\Mouse NOTFOUND
1077 34.14435360 Spywareb:FFF89161 QueryValueEx 0xC18A3330\WSOCK32 NOTFOUND
1078 34.14557280 Spywareb:FFF89161 QueryValueEx 0xC18A3330\WS2_32 NOTFOUND
1079 34.14730960 Spywareb:FFF89161 QueryValueEx 0xC18A3330\MSVCRT SUCCESS "MSVCRT.DLL"
1080 34.14830720 Spywareb:FFF89161 QueryValueEx 0xC18A3330\WS2HELP NOTFOUND
1081 34.15109360 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1082 34.15113600 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1083 34.15115680 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1084 34.15272960 Spywareb:FFF89161 OpenKey HKLM\System\CurrentControlSet\Services\Winsock\Autodial SUCCESS hKey: 0xC29AE060
1085 34.15277920 Spywareb:FFF89161 QueryValueEx HKLM\System\CurrentControlSet\Services\Winsock\Autodial\AutodialDllName32 SUCCESS 75 72 6C 2E 64 6C 6C 0
1086 34.15282160 Spywareb:FFF89161 QueryValueEx HKLM\System\CurrentControlSet\Services\Winsock\Autodial\AutodialFcnName32 SUCCESS 41 75 74 6F 64 69 61 6C ...
1087 34.15288560 Spywareb:FFF89161 QueryValueEx 0xC18A3330\URL NOTFOUND
1088 34.15445920 Spywareb:FFF89161 QueryValueEx 0xC18A3330\SHLWAPI SUCCESS "SHLWAPI.DLL"
1089 34.15659520 Spywareb:FFF89161 QueryValueEx 0xC18A3330\SHELL32 SUCCESS "SHELL32.DLL"
1090 34.15901360 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1091 34.15904800 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1092 34.15906720 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1093 34.15921760 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Performance NOTFOUND
1094 34.15927600 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1095 34.15930720 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1096 34.15932480 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1097 34.16019520 Spywareb:FFF89161 OpenKey HKCR\CLSID SUCCESS hKey: 0xC18A6610
1098 34.16024560 Spywareb:FFF89161 CreateKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS hKey: 0xC18A6580
1099 34.16028880 Spywareb:FFF89161 CreateKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS hKey: 0xC18A59D0
1100 34.16063040 Spywareb:FFF89161 CloseKey HKLM\System\CurrentControlSet\Services\Winsock\Autodial SUCCESS
1101 34.16104480 Spywareb:FFF89161 QueryValueEx 0xC18A3330\MSWSOCK NOTFOUND
1102 34.23194880 Spywareb:FFF89161 QueryValueEx 0xC18A3330\COMDLG32 SUCCESS "COMDLG32.DLL"
1103 34.23350880 Spywareb:FFF89161 OpenKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Documents SUCCESS hKey: 0xC29AE060
1104 34.23353920 Spywareb:FFF89161 QueryValueEx HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Documents\DisableStartInMyDocs NOTFOUND
1105 34.23356320 Spywareb:FFF89161 QueryValueEx HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Documents\HideMyDocsFolder NOTFOUND
1106 34.23358640 Spywareb:FFF89161 CloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Documents SUCCESS
1107 34.24595680 Spywareb:FFF89161 QueryValueEx 0xC18A3330\OLEAUT32 SUCCESS "OLEAUT32.DLL"
1108 34.24623040 Spywareb:FFF89161 QueryValueEx 0xC18A3330\OLE32 SUCCESS "OLE32.DLL"
1109 34.25230480 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1110 34.25234160 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1111 34.25236080 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1112 34.28660720 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1113 34.28665440 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1114 34.28667520 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1115 34.28681760 Spywareb:FFF89161 QueryValueEx 0xC1884E80\C:\PROGRAM FILES\SPYWAREBLASTER\SPYWAREBLASTER.INI NOTFOUND
1116 34.28711520 Spywareb:FFF89161 QueryValueEx 0xC1884E80\C:\PROGRAM FILES\SPYWAREBLASTER\SPYWAREBLASTER.INI NOTFOUND
1117 34.32685920 Spywareb:FFF89161 QueryValueEx 0xC1884E80\c:\windows\media\chord.wav NOTFOUND
1118 34.34011840 Spywareb:FFF89161 QueryValueEx 0xC18A3330\C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSKT NOTFOUND
1119 34.34284800 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1120 34.34294080 Spywareb:FFF89161 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1121 34.34296800 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1122 34.34437760 Spywareb:FFF89161 QueryValueEx 0xC1884E80\C:\PROGRAM FILES\SPYWAREBLASTER\appinit.ini NOTFOUND
1123 34.34465200 Spywareb:FFF89161 QueryValueEx 0xC1884E80\C:\PROGRAM FILES\SPYWAREBLASTER\appinit.ini NOTFOUND
1124 37.81998560 Spywareb:FFF89161 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS hKey: 0xC18A7620
1125 37.82007600 Spywareb:FFF89161 EnumValue HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
1126 37.82010080 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS
1127 37.83929680 Spywareb:FFF89161 CloseKey HKCR\CLSID SUCCESS
1128 37.83932320 Spywareb:FFF89161 CloseKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS
1129 37.83934480 Spywareb:FFF89161 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer SUCCESS
1130 38.27242560 Rundll32:FFFEB5A5 EnumValue 0xC18A7620 SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
1131 39.70342960 Regmon:FFF8DE41 OpenKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS hKey: 0xC29A6390
1132 39.70346800 Regmon:FFF8DE41 QueryValueEx HKLM\Software\Microsoft\Windows\CurrentVersion\SubVersionNumber SUCCESS 20 0
1133 39.70348800 Regmon:FFF8DE41 CloseKey HKLM\Software\Microsoft\Windows\CurrentVersion SUCCESS
1134 47.64555360 Rundll32:FFFEB5A5 EnumValue 0xC18A7620 SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"
1135 67.70131280 Rundll

 

Holy guacamole....I reckon I asked for that....but I was hoping you read the part in my post above concerning....even tho it does require one to grasp what the poster is describing.

In anycase....I'm not sure posting that at CastleCops would be of any benefit to those folks. They have their hands full just assisting with all them HJT logs

As far as that log goes....would you attempt to locate the below file on your hard drive and posts it's contents....if it's not to big of a file ?

C:\WINDOWS\NETWOQK.TXT

I can not get to CastleCops at the moment to look at your HJT log....but I do not recall the below entry being there when I looked at it a few days ago

HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce SUCCESS *reb: "rundll32 C:\WINDOWS\NETWOQK.TXT,DllGetClassObject"

 

I've checked Windows, checked and finished a search for files and folders, and I cannot find this text file. The only file I could find was a NETWORK.TXT file under Windows. Now what do I do?

Just for the record, I disabled McAfee virus scan, then reinstalled Spyware Blaster yet again, and I still get the damaged error. Do you have any more ideas?

 

Well....I'm not exactly sure. I'm kind of winging it and hope we stumble on something.

The file was NETWOQK....with a Q....did you not find that one ?

Also....how comfortable are you in going into the registry(regedit.exe)....or do you know what the registry is ?

 

No, I didn't find the file with a Q. However, I did fix some things in Hijack This that I felt were not needed. One was a radio toolbar (don't know how I got that one) and the other was some type of Qualifier.

I'll check into the Registry, but I hope I don't crash the computer or something like that. Tell me what I should do next, and I'll see what happens.