Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

security 2012 virus


  • Please log in to reply

#16
melint

melint

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 166 posts
I am still not able to get online I was able to merge the reg though.
  • 0

Advertisements


#17
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
Start, Run, cmd, OK then type what you see in each code box(with an Enter after each line)

net  start  ipsec

If it says the service is starting or is already started then let's see if DHCP is started or will start:

net  start  dhcp

If it starts or is already started then we should be able to get on line:

ipconfig  /release

ipconfig  /renew

Does this work?
  • 0

#18
melint

melint

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 166 posts
nope still says invalid. i forgot to mention earlier that at the permissions for root section, under group or user names, all i had listed was everyone and system. i highlighted everyone and put a check in the full control box. that is when i was able to merge the reg you requested. i did not have an administrator title to highlight. maybe this is a problem not sure, but thought you should know
  • 0

#19
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
"Everyone" should work but it's odd that administrator is not there.

I think we need to reset the permissions to default.

Unfortunately we need a program from Microsoft.

Download SubInACL.exe

http://www.microsoft...&displaylang=en

By default it installs the tool in C:\Program Files\Windows Resource Kits\Tools\

You will have to download the file then copy it to the sick PC. Save the file to C:\ on the sick pc.

Also Download and Save the attached file, reset.zip, right click on it and Extract all and copy the reset.cmd file to C:\

Start, Run, cmd, OK Type with an Enter after each line:

cd  \

reset.cmd


  • 0

#20
melint

melint

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 166 posts
still can't run it. i downloaded both files to the c drive of the sick pc, but it does nothing after i put cd \
reset.cmd
so i clicked enter again and it says subinac1 is not recognized as an internal or external command operable program or batch file ggrrrrr
  • 0

#21
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
I expect you downloaded the subinacl.msi and did not install it. Go ahead and run it on the sick PC and it will install subinacl.exe in c:\Program Files\Windows Resource Kits\Tools

If that is the case then move reset.cmd to c:\Program Files\Windows Resource Kits\Tools and

cd  \Program Files\Windows Resource Kits\Tools

reset.cmd

  • 0

#22
melint

melint

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 166 posts
you were correct i installed and save the other to c then start/run/cmd and typed what you put. it began scanning really quickly, but now a black screen with a red stripe on top is continually running is this normal?
  • 0

#23
melint

melint

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 166 posts
Ran the code scan and it ran for 10 minutes and now it says: HKEY_CLASSES_rOOT\zapfile: 6 Unable to ewnumerate subkeys 1450 Insufficient system resources exist to complete the requested service Done 1 Modified 1 failed 0 syntax errors
  • 0

#24
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
Open regedit again and see if you can take ownership of the HKEY_CLASSES_ROOT\zapfile

Don't know what a zapfile is supposed to be but it is on my XP too. Both Administrators and System should have Full Control of the key.

If you can take ownership, check the box about subkeys too while you are there.

If you are able to take ownership then run reset.cmd again see if it gets further this time.
  • 0

#25
melint

melint

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 166 posts
I went to reg edit and found the zap file I then opened The name is Default
The Type Reg_SZ
The Data Software installation Settings
If i right click it My options are Modify or Modify Binary Data and Delete
  • 0

Advertisements


#26
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
Don't think you found the right thing.

Open regedit, find

HKEY_CLASSES_ROOT click on the + in front of it.

zapfile should be in the list under HKEY_CLASSES_ROOT

Right click on zapfile and select Permissions.

If you don't see zapfile under HKEY_CLASSES_ROOT then it may be hiding. Right click on HKEY_CLASSES_ROOT and select Permissions then take ownership of HKEY_CLASSES_ROOT. Make sure the box is checked where it says Replace permission Entries on all Child Objects.
  • 0

#27
melint

melint

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 166 posts
i checked that way and yes my zapfile has full control in admin and system also has subkeys too. i didn't change anything it was already like that. i am running the scan again, but looks like the same story so far, there is a red stripe that runs for awhile and then lots of fast scrolling and then the red stripe again says syntax errors alot and regsetkeysecurity next to avast but scan just stopped and disappeared with no error code, i'm guessing this is a good sign
  • 0

#28
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
Sounds better anyway.

What does

net  start  ipsec

say now?
  • 0

#29
melint

melint

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 166 posts
net start ipsec says the requested service has already been started

net start dhcp says system error 1068 has occurred the dependency service or group failed to start

and for ipconfig /release an internal error occurred the request is not supported unable to query host name
  • 0

#30
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,001 posts
  • MVP
Check the other two dependencies:

net start afd

net start tcpip

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP