File opening problem

[Joe_90]

Hope this problem doesn't sound too basic but I've recently installed W2K on a Dell PC with a P2 processor, when I try to open files in Paint I get a message saying the format is not currently supported, the files are jpgs, usually Paint opens them okay doesn't it ? The files were previously on a PC running Windows 98.

[Geekgirl]

Did you do a fresh install or an upgrade?

You may be getting this error because the JPEG graphics filter is missing or damaged or the registry entries are missing or damaged.
And yes usually you can open those file types with Paint.

[Joe_90]

Did a fresh install. I'd been getting a problem with a virus ( the Sasser one ) which could still be a problem though I thought I'd dealt with that. I've done another install since ( changed the size of the partition slightly ) but still getting the problem. I guess it's quite and old PC in today's terms, I gather the Bios on machines older than about 3 years aren't protected against virus's. I think the machine is running slower than it normally does.

[Cactus]

If you F-Disked and Re-Formatted your HDD then all traces of the Sasser worm was removed.

To start with I would like you to do this:
Please delete your temporary files by deleting all files and folders that are in those folders (do not delete the temp folder itself) like for example
C:\WINDOWS\Temp\
C:\Temp\
C:\Documents and Settings\username\Local Settings\Temp\
Also delete your Temporary Internet Files, be sure to also select delete all offline content.


Do a virus scan here: http://housecall.trendmicro.com/
If you get report of files that can’t be cleaned / deleted please write down the filenames and locations and post that in your reply.

Then please do this since it’s better to use automated tools to get rid of the bad stuff use these 2 programs first before doing the final cleaning with HJT

First use Spybot S&D. (Version 1.3) http://www.safer-networking.org/index.p ... e=download
Spybot
Unzip, and update. Install the updates and run. Delete all that it marks in red.
Reboot

Then it’s time for Ad-Aware
Ad-Aware http://www.lavasoftusa.com/software/adaware/
Install and update by using the globe icon. Restart your computer and run Ad-Aware.
Press scan now and select drives and/or partitions to be scanned. When done select all and click next. Remove all checked items and then reboot your computer.

Please go to this page and read the instructions for how to configure Spybot S&D & Ad-Aware
http://www.zerosrealm.com/scanning.php


Then post back lets us know how its going.

Cactus

[Ranger Bob]

Take a look at this link to see if it helps:

http://www.geocities.com/one_human/adva ... spaint_fix

[Joe_90]

Ok Cactus, I've run everything, nothing was found by housecall but half a dozen or so files were found by Spybot and Ad-aware which I've dealt with.

Also sorted the JPEG problem by re-loading Office.

Couldn't look at the erosrealm site, just got an error 404 message, page doesn't exist.

I think the PC is a bit quicker but not sure it's full speed. Anything else need doing ?

[Cactus]

I'm not sure this is really needed but it will tell us if your pc is clean.

**(Always create a Folder for HiJackThis anywhere but your Temp/Temporary Internet Folders. This is where it will save the backup files needed if there's a problem.)**

Download Hijackthis---Important---Create a permanent
folder
EG---- Open MyDocuments----Right click an empty spot and select NEW---Folder----Name the new folder HJT ---this is where you will want to save Hijackthis too, also, backups will be stored there.
Download from here
http://www.spywareinfo.com/~merijn/files/HijackThis.exe
or here
http://aumha.org/downloads/hijackthis.exe

Do a SCAN----Scan will change to SAVE LOG----copy and paste the WHOLE contents of the log
here... Don't try and fix anything yet----It is all important

Cactus

[Joe_90]

Ok, here's what I got.




Logfile of HijackThis v1.98.0
Scan saved at 10:26:45, on 11/07/2004
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\pctspk.exe
C:\WINNT\system32\PV92Tray.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Tesconet\Tesconet.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\Anthony Harrington\My Documents\HJT\HijackThis.exe
C:\WINNT\System32\mspaint.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tesco.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.tesco.net
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [PV92TRAY] PV92Tray.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.tesco.net
O15 - Trusted Zone: http://register-tesco.qa.business.ntl.com
O15 - Trusted Zone: http://memberservices.tesco.net
O16 - DPF: NTLSignup - https://tesco.autoregister.net/tesco/NTLSignup.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004 ... scan53.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7A44FD8D-D473-4CDC-8D21-6081745405D9}: NameServer = 194.168.4.100 194.168.8.100

[Geekgirl]

I honestly dont think you needed to run HJT but of course I may be wrong.

You never gave us your specs of the computer. It seems you were having some issues but you stated you cleared them up. We know you are running Win2K on a pc that supports no more than a 333MHz CPU. (Pentium II - 233-333MHz processor speeds.) If you have less than 128MB ram then a memory upgrade will increase your speed. The CPU is no doubt large enough to support but Win2K needs the memory.

This is for Win2K:
CPU: 133MHz or faster Pentium-compatible
RAM: 256MB recommended minimum (though Microsoft will support 128MB)
HD: 2GB with a minimum of 1GB free

*Edit
Make sure you visit Windows Update site

[Cactus]

Your HJT logfile is clean.

Do what Geekgirl suggested and do the MS Updates.


Cactus