Devi's -lovely- computer adventure. ( Help? D: )

[Ceramic Smile]

So, I'm assuming from what my brother just said, I'm going to have to go to the .cab links, and have them download or whatever? Then put the files in the correct directories.

He better not be wrong, because it'll be a hell of a lot more irritating for him to be.

[DopplerZero]

Yeah. LoadQM is legit...Just google the ones you're unsure about..

[Hypnos]

From what I can see you've got a couple of viruses and a bunch of adware; I'll compile a list in a sec. and try get some removal instructions and stuff.

[Ceramic Smile]

To my knowledge, they've ALL been removed, thanks to this program.

hence why I can't access some applications.

[Hypnos]

Post a new HiJack this log and let us take a look at it.

[Ceramic Smile]

Logfile of HijackThis v1.99.0
Scan saved at 12:09:03 AM, on 12/28/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\PROGRAM FILES\WINRAR\WINRAR.EXE
C:\WINDOWS\DESKTOP\SFAUYHN\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.gaiaonline.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gaiaonline.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gaiaonline.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.gaiaonline.com
O4 - HKLM\..\Run: [Zone Labs Client] "C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE"
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O4 - HKCU\..\Run: [Windows Registry Repair Pro] C:\PROGRAM FILES\3B SOFTWARE\WINDOWS REGISTRY REPAIR PRO\REGISTRYREPAIRPRO.EXE 4
O4 - HKCU\..\RunServices: [msnmsgr] "C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE" /background
O4 - HKCU\..\RunServices: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O4 - HKCU\..\RunServices: [Windows Registry Repair Pro] C:\PROGRAM FILES\3B SOFTWARE\WINDOWS REGISTRY REPAIR PRO\REGISTRYREPAIRPRO.EXE 4

[Evre]

I assume safemode worked, then? Scans showing clean? Are your programs still not working? Have you tried reinstalling?

[Ceramic Smile]

Evre, safemode doesn't work with CWShredder, and the rest of the programs I'm not worried about. I scanned BEFORE I used the Hijackthis, which deleted some important files, apparently. :/

[Hypnos]

You should try re-installing now.

The only file that should be removed now is: LoadQM.exe
Or if you don't want to delete it, then it can simply be taken off the startup list via typing msconfig in the run menu.

[Ceramic Smile]

I've tried reinstalling.

What I'm asking is, the links provided in the log I showed FIRST, in the small text - do I just go to those, get the files, and then put them in the right directory for everything to be fine again?

[Hypnos]

Sorry, I'm feeling a bit stupid right now. *_*

You mean like this?

"O16 - DPF: Word Whomp Whackdown by pogo - http://whackdown.pogo.com/applet/whackdown/whackdown-ob-assets.cab "

It's probably best not to put some of that back on; I posted a registry recovery method just a sec ago, but due to Gaia's "Uber-Lag" it didn't post...

1. F8
2. Command Prompt Only
3. scanreg /restore
4. restore the earliest completed backup, unless you think that was after you screwed the comp up.

[MalikTous]

Search4U, multiple resident antivirus, WildTangent, those HK-whatever DLL or EXE (not the HK registry keys, the spyware prog), and anything resident from RealMedia should be fixed. Run either AVG or AVAST resident, not both. WinXPSP2 firewall should NOT appear in Win98SE, and ZoneAlarm, Sygate, or Kerio should be running as a single firewall. And get rid of WeatherBug, Nextup WeatherAloud doesn't have the spyware WeatherBug comes with.

[[drakan]]

from what ive seen, u still have problems???? if ur running windowsxp
startup in safemode (f cool AND run spybots&d and virus scan, housecall. then if it still dont work, just format ur hdd, take a crappy one out of an old compy... 4gb or anything with win95 or higher..... and format ur other one as a slave. then take out ur backupdrive and install windows on the main drive, (this ordeal may include going into ur case and changing jumper settings on your hdd's) and finally try doing a final virus scan on startup of your new system.