[Florida Dish]

Thank you for spending as much time as you have in trying to help me.

You are, however, way over my knowledge level and I am unable to give you what you need to help me.

Regretfully, I must sign off and allow you to help others who are much more knowledgeable. I am wasting your time due to my lack of experience.

Thanks again for going out of your way to help a novice.

[Cookiegal]

Let's continue with this. I'm attaching a couple of screen shots to better explain how to do this.

The first one shows you the three types of alerts that you will see in the Event Viewer under both "Application and "System". I only need to see the ones actually shown as "errors" with the white X in the red circle.

The second shows the icon that you click on which in essence copies the entire text of the error.

Then you open up a blank page in Notepad and click on "Edit" and "Paste" and the error will be copied there. You can also do this in Word if you prefer.

[Florida Dish]

I ran CHK disk this morning. Found Application errors, 1000 & 1024.
Found System error 20.

The below listed info doesn't look much different from I have been sending you. Hopefully it is what you need.

Application error 1000

5/18/2008 8:21:46 AM SecurityCenter Information None 1800 N/A CARAN-XPDF358PI The Windows Security Center Service has started.
5/18/2008 8:20:38 AM Winlogon Information None 1001 N/A CARAN-XPDF358PI Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 22 unused index entries from index $SII of file 0x9.
Cleaning up 22 unused index entries from index $SDH of file 0x9.
Cleaning up 22 unused security descriptors.
CHKDSK is verifying file data (stage 4 of 5)...
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.

117137947 KB total disk space.
13834012 KB in 88024 files.
35328 KB in 4899 indexes.
4 KB in bad sectors.
274367 KB in use by the system.
65536 KB occupied by the log file.
102994236 KB available on disk.

4096 bytes in each allocation unit.
29284486 total allocation units on disk.
25748559 allocation units available on disk.

Internal Info:
30 95 01 00 05 6b 01 00 ff 3f 02 00 00 00 00 00 0....k...?......
a6 02 00 00 02 00 00 00 e9 03 00 00 00 00 00 00 ................
6a 1a c4 02 00 00 00 00 c0 51 1d 3a 00 00 00 00 j........Q.:....
68 dd f3 2a 00 00 00 00 a8 ba 98 ac 02 00 00 00 h..*............
82 50 f7 49 05 00 00 00 a2 4b d6 65 08 00 00 00 .P.I.....K.e....
99 9e 36 00 00 00 00 00 88 38 07 00 d8 57 01 00 ..6......8...W..
00 00 00 00 00 70 5c 4c 03 00 00 00 23 13 00 00 .....p\L....#...

Windows has finished checking your disk.
Please wait while your computer restarts.

5/18/2008 7:13:19 AM SecurityCenter Information None 1800 N/A CARAN-XPDF358PI The Windows Security Center Service has started.


Application Error 1024

5/18/2008 8:21:46 AM SecurityCenter Information None 1800 N/A CARAN-XPDF358PI The Windows Security Center Service has started.
5/18/2008 8:20:38 AM Winlogon Information None 1001 N/A CARAN-XPDF358PI Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 22 unused index entries from index $SII of file 0x9.
Cleaning up 22 unused index entries from index $SDH of file 0x9.
Cleaning up 22 unused security descriptors.
CHKDSK is verifying file data (stage 4 of 5)...
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.

117137947 KB total disk space.
13834012 KB in 88024 files.
35328 KB in 4899 indexes.
4 KB in bad sectors.
274367 KB in use by the system.
65536 KB occupied by the log file.
102994236 KB available on disk.

4096 bytes in each allocation unit.
29284486 total allocation units on disk.
25748559 allocation units available on disk.

Internal Info:
30 95 01 00 05 6b 01 00 ff 3f 02 00 00 00 00 00 0....k...?......
a6 02 00 00 02 00 00 00 e9 03 00 00 00 00 00 00 ................
6a 1a c4 02 00 00 00 00 c0 51 1d 3a 00 00 00 00 j........Q.:....
68 dd f3 2a 00 00 00 00 a8 ba 98 ac 02 00 00 00 h..*............
82 50 f7 49 05 00 00 00 a2 4b d6 65 08 00 00 00 .P.I.....K.e....
99 9e 36 00 00 00 00 00 88 38 07 00 d8 57 01 00 ..6......8...W..
00 00 00 00 00 70 5c 4c 03 00 00 00 23 13 00 00 .....p\L....#...

Windows has finished checking your disk.
Please wait while your computer restarts.

5/18/2008 7:13:19 AM SecurityCenter Information None 1800 N/A CARAN-XPDF358PI The Windows Security Center Service has started.

System error 20

Please note that the only System error 20 I find is dated 5/13/08. Todays report show no errors so I have not included that info. We must have repaired that earler.

What I have included is all the information shown for 5/18/08 when I double click on the errors and click the 2 pcs of paper.

[Cookiegal]

Download OTScanIt.exe to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.

Leave the default settings and only change those that are specifically mentioned below.

• Close any open browsers.
• Disconnect from the Internet.
• Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of OTScanIt.
• Open the OTScanit folder and double-click on OTScanit.exe to start the program.
• In the Drivers group click Non-Microsoft.
• In the Registry group click ALL.
• In the File String Search group select ALL.
• In the Rootkit Search group select YES.
• In the Files Created Within group click 30 days.
• In the Files Modified Within group select 30 days.
• In the Additional Scans section please press Select ALL.
• On the toolbar at the top select "Scan All User Accounts" then click the Run Scan button.
• The program will be scanning huge amounts of data so depending on your system it could take a long time to complete. Let it run unhindered until it finishes.
• When the scan is complete Notepad will open with the report file loaded in it.
• Save that notepad file and then upload it here as an attachment (do not copy and paste the report).

[Florida Dish]

The good news is that I am back up. I am sending this message from the desk top that had the problem.

I had a visit from a friend who is much more experienced than I. Showed him what we had done thus far and he completed it.

Many, many thanks for your help during this long process.

Ray

[Cookiegal]

Can you tell me what he did?

[Florida Dish]

I haven't the slightest idea what he did. He did it and rushed off to a prior appointment.

Sorry

[Cookiegal]

Here are some final instructions for you.

The following program will remove the tools we've used and their associated files and backups and then it will delete itself.

Please download OTMoveIt2 by OldTimer.

• Save it to your desktop.
• Make sure you have an Internet Connection.
• Double-click OTMoveIt.exe to run it. (Vista users, please right-click on OTMoveIt2.exe and select "Run as an Administrator")
• Click on the CleanUp! button
• A list of tool components used in the cleanup of malware will be downloaded.
• If your firewall or real-time protection attempts to block OTMoveIt2 to reach the Internet, please allow the application to do so.
• Click Yes to begin the cleanup process and remove these components, including this application which will delete itself.
• You will be asked to reboot the machine to finish the cleanup process. If you are asked to reboot the machine choose Yes.

Now you should turn system restore off to flush out all previous system restore points, then turn it back on and create a new restore point:

To turn off system restore, on the Desktop, right click on My Computer and click on Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply and then click OK.

Restart your computer, turn System Restore back on and create a restore point.

To create a new restore point, click on Start – All Programs – Accessories – System Tools and then select System Restore.

In the System Restore wizard, select Create a restore point and click the Next button.

Type a name for your new restore point then click on Create.


I also recommend downloading SPYWAREBLASTER for added protection.

Read here for info on how to tighten your security.


Delete Temporary Files:

Go to Start - Run and type in cleanmgr and click OK.
Let it scan your system for files to remove.
Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.
Press OK to remove them.