medcomputers
asked on
Recycler error message when opening hard drives
I have just formatted and partitioned my hard drive to run XP Pro and Windows 7. I was having a lot of problems with my PC, one of which was a Recycler error message, attached, every time I tried to open any hard drive. I could only open the drive by right clicking and running Explore. I thought a format would solve this problem but it has made no difference.
Also I have installed Zone Alarm for the first time. I now find I cannot access Windows Update. I ran a search for Windows Update with Google and now everytime I try to access Update, even if I type directly into the address bar it takes me back to Google and I can't get out of it. Do you think this is anything to do with Zone Alarm or something else?
Thanks
Matthew
Recycler-Error.doc
Also I have installed Zone Alarm for the first time. I now find I cannot access Windows Update. I ran a search for Windows Update with Google and now everytime I try to access Update, even if I type directly into the address bar it takes me back to Google and I can't get out of it. Do you think this is anything to do with Zone Alarm or something else?
Thanks
Matthew
Recycler-Error.doc
The above problem is due to the virus distributed via usb flash drives using autorun.inf technique. The above program should fix this issue
medcomputers--Perhaps of help concerning Windows Update problem
http://support.microsoft.com/kb/943144
Do you still have the Recycler problem? A reformat (meaning wiping the hard drive) should take care of malware. But if you still have the Recycler problem, I agree with jsbhatia that you probably still have malware on the drive. See this
http://www.bleepingcomputer.com/forums/topic199413.html
http://support.microsoft.com/kb/943144
Do you still have the Recycler problem? A reformat (meaning wiping the hard drive) should take care of malware. But if you still have the Recycler problem, I agree with jsbhatia that you probably still have malware on the drive. See this
http://www.bleepingcomputer.com/forums/topic199413.html
ASKER
Hi guys
Thanks for comments. I think Autorun eater has fixed the Recycler problem. I have also removed a 1tb external hard drive, could this have caused the autorun problem? But I'm still having real problems with the Internet which was mainly why I formatted the drive in the first place. I applied your Microsoft update resolution to no effect. If I try to go to Windows Update I'm just redirected to Google or Ask and can get nowhere. I have downloaded Malwarebytes but it won't run. SuperAntiSpyware keeps saying it has encountered a problem and needfs to close. I'm currently running a full Zone AAlarm scan but am not very hopeful. I thought formatting would remove all these problems and I would be able to start from scratch again. Any suggestions gratefully recceived.
Thanks for comments. I think Autorun eater has fixed the Recycler problem. I have also removed a 1tb external hard drive, could this have caused the autorun problem? But I'm still having real problems with the Internet which was mainly why I formatted the drive in the first place. I applied your Microsoft update resolution to no effect. If I try to go to Windows Update I'm just redirected to Google or Ask and can get nowhere. I have downloaded Malwarebytes but it won't run. SuperAntiSpyware keeps saying it has encountered a problem and needfs to close. I'm currently running a full Zone AAlarm scan but am not very hopeful. I thought formatting would remove all these problems and I would be able to start from scratch again. Any suggestions gratefully recceived.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi jcimarron:
Yes I am dual booting but my problems are all on the XP Pro partition where I'm running IE8. I will try all your suggestions and get back to you if I can get HijackThis to run. The Zone Alarm scan shows no problems at the moment but is still running. As I have said I have already formatted and partioned the drive once and this is now a completely new install of both operating systems. Do you think it would help if I zeroed the drive and started again?
Matthew
Yes I am dual booting but my problems are all on the XP Pro partition where I'm running IE8. I will try all your suggestions and get back to you if I can get HijackThis to run. The Zone Alarm scan shows no problems at the moment but is still running. As I have said I have already formatted and partioned the drive once and this is now a completely new install of both operating systems. Do you think it would help if I zeroed the drive and started again?
Matthew
medcomputers--"Do you think it would help if I zeroed the drive and started again? "
If none of the suggestions have helped, I think the answer is yes. But if you are using that external drive to restore data, recognize that you are likely to re-infect the drive.
You, unfortunately, may have to start from scratch--re-installing everything.
If none of the suggestions have helped, I think the answer is yes. But if you are using that external drive to restore data, recognize that you are likely to re-infect the drive.
You, unfortunately, may have to start from scratch--re-installing everything.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi guys
Thanks for all your suggestions. Ihave installed and run Panda vaccine as you suggest. I have also created HijackThis log which I have pasted into Word doc attached. Malwarebytes will not open and when I try to download SuperAntiSpyware or Panda Anti Rootkit I just get IE cannot display webpage. If you could give me feedback on HijackThis log I'd be very grateful.
Thanks
Matthew
I cannot attach log as file. Is there another way I could send this to you?
Thanks for all your suggestions. Ihave installed and run Panda vaccine as you suggest. I have also created HijackThis log which I have pasted into Word doc attached. Malwarebytes will not open and when I try to download SuperAntiSpyware or Panda Anti Rootkit I just get IE cannot display webpage. If you could give me feedback on HijackThis log I'd be very grateful.
Thanks
Matthew
I cannot attach log as file. Is there another way I could send this to you?
medcomputers--I think you can post it here
http://www.ee-stuff.com/accessLogin.php?returnURL=%2FExpert%2Findex.php%3F
But if that is not correct, I am sure someone will guide you.
Earlier did you click one of the "Attach" options at the bottom left of the Post Comment/Solution window? Is the HJT log in a .txt or .doc file? There could be restrictions on the type of file you can Attach.
http://www.ee-stuff.com/accessLogin.php?returnURL=%2FExpert%2Findex.php%3F
But if that is not correct, I am sure someone will guide you.
Earlier did you click one of the "Attach" options at the bottom left of the Post Comment/Solution window? Is the HJT log in a .txt or .doc file? There could be restrictions on the type of file you can Attach.
ASKER
Hi jcimarron:
I have just uploaded log uing your link. Yes I originally clicked on the Attach button and tried to upload both .doc and .txt fille but neither worked.
I now find I can access some sites like bbc, Ebay, TV guides, college where I work, etc. But when I try to access sites like SuperAntiSpyware, Windows Update, Adobe Flash Plugin, etc something always goes wrong. I have downloaded and installed Malwarebytes twice now but it just does not open. Problems seem to be selective and I have to say I'm mystified. If you see any problems in HijaxkThis log I'd be grateful if you could let me know.
Matthew
I have just uploaded log uing your link. Yes I originally clicked on the Attach button and tried to upload both .doc and .txt fille but neither worked.
I now find I can access some sites like bbc, Ebay, TV guides, college where I work, etc. But when I try to access sites like SuperAntiSpyware, Windows Update, Adobe Flash Plugin, etc something always goes wrong. I have downloaded and installed Malwarebytes twice now but it just does not open. Problems seem to be selective and I have to say I'm mystified. If you see any problems in HijaxkThis log I'd be grateful if you could let me know.
Matthew
medcomputers--I do not know all the tricks of navigating around here. :)
Please post the URL for your uploaded HiJackThis log.
Please post the URL for your uploaded HiJackThis log.
ASKER
Hi
Can't get file to upload now. Just get error message "Invalid Question Value" I've deleted Zone Alarm as I could not get it to update. I'm now running AVG 8.5 which seems to have installed and updated without any problems. I'm now going to run a full scan and will let you know the results. I could paste the HijackThis log here but I understand that is not good etiquette.
Matthew
Can't get file to upload now. Just get error message "Invalid Question Value" I've deleted Zone Alarm as I could not get it to update. I'm now running AVG 8.5 which seems to have installed and updated without any problems. I'm now going to run a full scan and will let you know the results. I could paste the HijackThis log here but I understand that is not good etiquette.
Matthew
medcomputers--Try http://www.ee-stuff.com/Expert/Upload/upload.php
I do not know the etiquette concerning pasting the HJT log here. People used to do it, but I see much less lately.
You could click the Request Attention button at the right bottom of your original post and post the problem.
Or you could to get an analysis of the HJT log yourself by copying it and then pasting into
http://www.hijackthis.de/
It is not foolproof. You can copy any key of concern and paste it into a post here.
I do not know the etiquette concerning pasting the HJT log here. People used to do it, but I see much less lately.
You could click the Request Attention button at the right bottom of your original post and post the problem.
Or you could to get an analysis of the HJT log yourself by copying it and then pasting into
http://www.hijackthis.de/
It is not foolproof. You can copy any key of concern and paste it into a post here.
ASKER
Hi
I have completed a scan with AVG 8.5 which reported some recycler problems which were quarantined. Otherwise no problems. I have also installed and run Panda AntiRootkit which also reported no problems. I no longer have Google toolbar installed but everytime I try to run Windows Update, even directly from Microsoft, I'm returned to Google. I will try again to upload HijackThis log later today.
Matthew
I have completed a scan with AVG 8.5 which reported some recycler problems which were quarantined. Otherwise no problems. I have also installed and run Panda AntiRootkit which also reported no problems. I no longer have Google toolbar installed but everytime I try to run Windows Update, even directly from Microsoft, I'm returned to Google. I will try again to upload HijackThis log later today.
Matthew
ASKER
Hi guys
Hijackthis.de have picked out the 4 lines below:
O17 - HKLM\System\CCS\Services\T
O17 - HKLM\System\CS1\Services\T
O17 - HKLM\System\CS2\Services\T
O17 - HKLM\System\CCS\Services\T
They say if I do not know this IP address it needs to be removed. Could you advise me how I should do this? Everything else was Ok except I need to apply Windows Updates which i still cannot access
I have tried to install Spybot and everything sems fine until I get to the Install box when I get an error message saying "Error sending request. The server name or address cannot be resolved" Installation then fails. I have received the same error message trying to install other programmes. Does this mean anything?
Thanks
Matthew
Hijackthis.de have picked out the 4 lines below:
O17 - HKLM\System\CCS\Services\T
O17 - HKLM\System\CS1\Services\T
O17 - HKLM\System\CS2\Services\T
O17 - HKLM\System\CCS\Services\T
They say if I do not know this IP address it needs to be removed. Could you advise me how I should do this? Everything else was Ok except I need to apply Windows Updates which i still cannot access
I have tried to install Spybot and everything sems fine until I get to the Install box when I get an error message saying "Error sending request. The server name or address cannot be resolved" Installation then fails. I have received the same error message trying to install other programmes. Does this mean anything?
Thanks
Matthew
medcomputers--Unless you live in the Ukraine ( :) ), yes, do run HJT again and Fix those items.
85.255.112.0 - 85.255.127.255
UkrTeleGroup Ltd.
Figure 6 and accompanying text in this reference will help you Fix (remove) those items
http://www.bleepingcomputer.com/tutorials/tutorial42.html
After you do that, tell us what problems remain.
85.255.112.0 - 85.255.127.255
UkrTeleGroup Ltd.
Figure 6 and accompanying text in this reference will help you Fix (remove) those items
http://www.bleepingcomputer.com/tutorials/tutorial42.html
After you do that, tell us what problems remain.
ASKER
Hi guys
Apologies for delay in posting. Good news, looks like everything is back to normal.
After deleting entries detected by HijackThis I was able to get into Windows Update. I have subsequently also been able to install and run SuperAntiSpyware which now works fine. For some reason I still cannot run Spybot even though it seems to have installed correctly.
I still notice that if I run a link directly from Google it takes me all over the place and not directly to the requested site as it used to do. I have to copy and past the address from the Google search into the address bar to get to the site. I have seen this on a friend's computer recently as well. Do you know of any reason why this should happen?
I will of course accept and reward points. I hope you don't mind if I split them as you have both been so helpful. I personally have learnt a lot. I was about to give up and try and reformat the drive again, but I'm reall glad now that I didn't follow that route.
Thanks again
Matthew
Apologies for delay in posting. Good news, looks like everything is back to normal.
After deleting entries detected by HijackThis I was able to get into Windows Update. I have subsequently also been able to install and run SuperAntiSpyware which now works fine. For some reason I still cannot run Spybot even though it seems to have installed correctly.
I still notice that if I run a link directly from Google it takes me all over the place and not directly to the requested site as it used to do. I have to copy and past the address from the Google search into the address bar to get to the site. I have seen this on a friend's computer recently as well. Do you know of any reason why this should happen?
I will of course accept and reward points. I hope you don't mind if I split them as you have both been so helpful. I personally have learnt a lot. I was about to give up and try and reformat the drive again, but I'm reall glad now that I didn't follow that route.
Thanks again
Matthew
Hi medcomputers,
Good to know that the problem is resolved.
I have no idea why you are not able to open a link directly from google.
By any chance, are you using Firefox and have installed an addon that might be interfearing with the google page, or may be a greasemonkey script
Good to know that the problem is resolved.
I have no idea why you are not able to open a link directly from google.
By any chance, are you using Firefox and have installed an addon that might be interfearing with the google page, or may be a greasemonkey script
medcomputers--"I still notice that if I run a link directly from Google it takes me all over the place and not directly to the requested site as it used to do."
It sounds like Google is taking you to random, different sites. Or is it to only one or a few? If the latter, what sites are these? I hate to say it, unwanted redirects are often a sign of continuing malware. However, if the sites to which you are redirected are not bad sites, perhaps malware is not the case.
A work around would be to use Yahoo Search. And in a few days MS will introduce Bing.
I believe you uninstalled Google Toolbar (if you had it) earlier.
It sounds like Google is taking you to random, different sites. Or is it to only one or a few? If the latter, what sites are these? I hate to say it, unwanted redirects are often a sign of continuing malware. However, if the sites to which you are redirected are not bad sites, perhaps malware is not the case.
A work around would be to use Yahoo Search. And in a few days MS will introduce Bing.
I believe you uninstalled Google Toolbar (if you had it) earlier.
ASKER
Hi guys
I am not using Firefox. When I'm redirected in Google it is not to a bad site, just somewhere completely different. I have just done a search on Bing and had the same problem, I had to copy and paste URL into address bar. I will try again with Yahoo.
Now I have another problem with my Windows 7 partition, but that is a story for another question!
Thanks again for all your help.
I'm being chased to close open questions so I will do that now.
Matthew
I am not using Firefox. When I'm redirected in Google it is not to a bad site, just somewhere completely different. I have just done a search on Bing and had the same problem, I had to copy and paste URL into address bar. I will try again with Yahoo.
Now I have another problem with my Windows 7 partition, but that is a story for another question!
Thanks again for all your help.
I'm being chased to close open questions so I will do that now.
Matthew
ASKER
Problem took a while to solve especially as I had started with a freshly formatted hard drive with a clean install of XPPro. Thanks to patient and knowledgable advice I was able to resolve the problem and learnt a lot in the process. Many thanks guys. Another PLUS for Experts Exchange.
Matthew
Matthew
medcomputers--You are most welcome!!
http://www.softpedia.com/progDownload/Autorun-Eater-Download-85585.html
it is usually part of a bigger problem, I fixed it by running Avast, Prevx, and Combifix.
No problem since.