Re: Have I been hacked? How do I fix it?

From: Dave (noone_at_nowhere.com)
Date: 07/23/04


Date: Fri, 23 Jul 2004 15:55:25 -0000

go find the 'hosts' file... normally in system32\drivers\etc folder. edit
it with text editor and take out everything except for the line:

127.0.0.1 localhost

save and reboot, or maybe not reboot, not sure but doesn't hurt. that
should clear up the redirections that prevent you from getting to web sites.

"Gina" <anonymous@discussions.microsoft.com> wrote in message
news:2d0801c470c9$3dd34590$a401280a@phx.gbl...
> My anti virus stopped working plus I could not go to any
> anti virus websites. I managed to get another anti virus
> installed which did clear the virus's BUT still problem.
> Still can not go to any anti virus websites. Do I have
> corrupted windows reg files? What do you think I should
> do?
> 2004-07-22, 10:54:59, An error occurred while scanning
> file "C:\Documents and Settings\Administrator\NTUSER.DAT":
> Access is denied.
> 2004-07-22, 10:54:59, An error occurred while scanning
> file "C:\Documents and
> Settings\Administrator\ntuser.dat.LOG": Access is denied.
> 2004-07-22, 10:55:42, An error occurred while scanning
> file "C:\Documents and Settings\Administrator\Local
> Settings\Application Data\Microsoft\Windows\UsrClass.dat":
> Access is denied.
> 2004-07-22, 10:55:42, An error occurred while scanning
> file "C:\Documents and Settings\Administrator\Local
> Settings\Application
> Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
> 2004-07-22, 10:55:48, An error occurred while scanning
> file "C:\Documents and Settings\Administrator\Local
> Settings\Temp\IPWreg.txt": Access is denied.
>
> 2004-07-22, 11:09:48, Could not set file for reading
> on "C:\RECYCLER\NPROTECT\NPROTECT.LOG": Access is denied.
> 2004-07-22, 11:09:48, An error was detected
> on "C:\System Volume Information\*.*": Access is denied.
> 2004-07-22, 11:11:56, An error occurred while scanning
> file "C:\WINNT\system32\Perflib_Perfdata_4f8.dat": Access
> is denied.
> 2004-07-22, 11:12:11, An error occurred while scanning
> file "C:\WINNT\system32\wrhabw.exe": Access is denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\default": Access is denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\default.LOG": Access is
> denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\SAM": Access is denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\SAM.LOG": Access is denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\SECURITY": Access is denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\SECURITY.LOG": Access is
> denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\software": Access is denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\software.LOG": Access is
> denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\system": Access is denied.
> 2004-07-22, 11:12:13, An error occurred while scanning
> file "C:\WINNT\system32\config\SYSTEM.ALT": Access is
> denied.
>
> Sorry for the long list, this is what the check came back
> with, as well as a list of the virus's that it deleted.
>
> Hope somebody can help fix my system.
> Thanks
> Gina



Relevant Pages

  • Re: Temp Folder
    ... run anti malware programs and your anti virus in Safe Mode. ... Also if you just installed software you should reboot. ... good practice to always reboot after installing any software. ... Most well mannered programs will delete tmp files when you reboot. ...
    (microsoft.public.windowsxp.general)
  • Re: Trojan in Win.32 driver folder
    ... > 8) Reboot your PC. ... > | My anti virus does not find this when it dose a scan. ... > | real time when I click on Internet explorer to go on line. ... > | pops up a window giving me all the information and says it has deleted it. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Malware
    ... Despite having Norton Anti Virus ... Any thoughts on how to get rid of this? ... Install it, update it and run it now. ... Then reboot and run everything again. ...
    (uk.rec.motorcycles)
  • Re: [Error number: 0x8DDD0007] - Unable to download Windows update
    ... Do you have any security protection on like anti virus etc which could be inteferring with ... turn off/disable the anti virus and then reboot. ... |> How to back up, edit, and restore the registry in Windows XP and Windows ...
    (microsoft.public.windowsupdate)
  • Can n ot get to symantec.com or live update anti virus
    ... to set a proxy for explorer to view anti virus websites ... also updates for anti virus are nto workign. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)