find a specific file, delete it, and rename the file as 'hosts.'
when i went to start and run, i put in notepad c:\windows\system23\etc\hosts is said system could not find specified file path, but opened a blank notepad
so i went in and tried to do the run as admin, but had to go into the properties and hit change properties for all users, cause it was set to windows xp, i changed it, but didnt have the option of windows 7 so i selected vista, and checked always run program as administrator. re opened the program, and then it allowed me to run the program. this is what it generated, and im not sure what to do next. i did a system restore to factory settings last night. (f11)
what is syswow64? why do i have 2 sets of program files, one called program files and one program files (x64)and why does it say gopher prefix: and then one that looks weird is
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover"
doesnt that mean dont use hp recovery, use cyberlink power recover? so if i pull up what i think is an hp recovery, it is actually another program? wouldnt this be used to keep me from getting rid of the infected files?
If I have windows 7 why does it say unknown windows (winnt 6.01.3504)
and there are alot of missing files... also, my mac address shows up on my router twice with 2 different ip addresses, even when i turn my laptop off, one goes away but the others stay. We also have a PS3 and a desktop, and they only show up once. There is also a d-link wirless n router that shows up in my network map as connected, but i cant delete it. I called our ISP and on a day that we were not home and all nothing was done on any of our devices, over 4 megs of downloading was done under our ip address... about 9 mo ago i had someone use all my card infos and cost me over 1000.00, i had my info in an excel spreadsheet on my computer then, and the companys that it was done with said they used my IP. I have changed my numbers and they have never been entered anywhere on any of my computers, (and the laptop that the info was on crashed not a month later, so its not connected) but my computer is doing some really weird things, and it happend right when my antivirus that came with my computer expired. One thing, I had the newest full version of Office, not the student version, and I opened up my computer the other day and it was the student version. Also, when i registered my new antivirus, my screen blacked out for like 30 secs and then came back. The weird thing is that I put in my e-mail to register it and when it came back it gave me the conf listing my e-mail as [email protected] I had to contact mcafee, and they said that my account was registered with that e-mail address, and had to have it changed. I can understad a typo, but I know there is no way that I submitted that e-mail as mine. Another thing is that I had a thing pop up and tell me i was running a version of windows that was not authentic, and it flash and changed my desktop to a black page with writing telling me the same thing in type in the corner. I purchased this computer from a retailer, and it was preloaded, so i know it is authentic. I feel like im crazy, but i know im not and something is def going on. my firewall keeps haveing rules applied, i can delete them, disable them, but they always come right back. someone please if this is normal please help me understand why? I am pretty computer savy, and have never seen these things... also, can someone help me undertand snap ins and mmc? there is one running on my computer that is restricting me, I have done a system restore (f11) and it did it, but it did weird things that usually dont happen, and if i try to make recovery disks, it tells me the recovery partion is empty, but if that is the case how am i restoring to the factory shiped (first use) that is stored in the same location. I also have these other adapters connecting and transmiting info.
Edited by JSntgRvr, 04 March 2010 - 10:04 PM.
Logs not permitted in this forum