HI,
Yesterday I used my computer in the morning and everything seemed to be OK. I turned it off and then on again in the evening. There was a comment in the bottom tray saying that my computer was no longer secure because I had Windows XP1. I have had Windows XP Pk2 now for a couple of years. I was in shock. I checked MY Computer Properties and sure enough the computer had regressed to XP Pk1. I went to Microsoft updates and re-downloaded Pk2. Now a lot of things do not seem to work. The Network Diagnostics Tool under Help and Support goes to 99% after scanning and stops there. When I click on the Advance System Information I get error 126. I am at a total loss. I have Norton Antivirus. Cyber Crime, free Ad-Aware. I scan almost everyday on or the other or all of them. Have I been Hijacked. Do I have some kind of bug or Trojan?. I have the Hijackthis Log. I have A Dell Dimension 2400 that is three and a half years old. Windows XP Home Pak2. I would really appreciate all of the help. Amy

check the errors in eventviewer logs
http://support.microsoft.com/kb/308427


Cudni

Use the instructions under the "How to Filter log events" to filter for errors only in your log.

Then use the instructions under the "How to Archive a log" section to save the errors to a *TEXT* file.

Save that text file to your desktop (when you try to save it it will open a standard Windows Save Box, use the drop down menu at the top to change the location to your desktop, then enter a name if one is not already entered for you and click save).

Now, post that file you just saved here so folks here can take a look at what is going on and get your ailing machine back on its feet.

Hi,
I was able to do the event log and filter it etc. It took me a while to figure it out. I also saved it on the desktop but I cannot figure out how to save to Text. Note Pad looks like a bunch of things thrown in together and Word Pad is just symbols. What next?
Thanks, Amy

Hi,
I was able to figure it out by searching the internet for clues. I would attach the log. My Norton is working OK right now. I was able to download Live Update from their website so I was able to update and scan. The "Shock" for me was to see that my computer had gone from Windows XP Pk2 to Pk1 by itself. How did that happen? Then when I panicked and reloaded Pk2 from the Microsoft Website I think things got worse and I lost some important files or got them corrupted. I really hope you can help me fix this mess.
Thanks in advance again, Amy

Event log File 2.txt
Description:		Download
Filename:	Event log File 2.txt
Filesize:	440.65 KB
Downloaded:	141 Time(s)

Hi,
I have been doing some investigating on my own and I still think some kind of file was corrupted. Also one of my drivers was not able to start.SAVRTPEL. Whatever that is. I got into another place in my computer and pulled this other Error log. Maybe this can help you to figure out what is wrong.
Thanks , Amy

Dell eror log.txt
Description:		Download
Filename:	Dell eror log.txt
Filesize:	42.84 KB
Downloaded:	167 Time(s)

Amy,

Sorry for such a late reply - I spent the last day moving, and would come on here, only to have my connection die in the middle of reading things - I am finally semi-stabilized and can get to your logs.

Looking at the first log, I see that it looks like you are running a Symantec (Norton) product, *and* running Panda Antivirus. Are you by chance running 2 different antivirus programs on your computer? That, in and of itself, is not necessarily a bad thing, but NAV / SAV / SEP have a feature called Real Time Protection, which is a live scan of files (usually set to scan files as they are created, accessed, or modified) and this could be a problem if you are running Panda and scanning for viruses *while* the Realtime protection is running. I am not saying it *is* a problem, but that it could be a problem.

I noticed in the first log that Panda tends to terminate irregularly, and in the second log I see the same thing, along with references to Norton AntiVirus (NAV) - so I am guessing you have both products and that quite possibly they have conflicted with each other.

Basically, from what all seems to be going on,. the re-installation of Service Pack 2 has flubbed your Anti Virus programs, and quite possibly other programs as well. I'd start out by re-installing Norton AntiVirus to get that fixed. Once we get that fixed, then we'll move to Panda AV and re-install it. After that We'll look at other programs, like that InCD (which is a packet writing software that comes with Nero Burning ROM and *may* be incompatible with SP2).

One thing is a bit puzzling, though - you said you were running Windows XP Service Pack 2 (SP2) for over a year and that it all of a sudden 'reverted' to SP1? Only 1 way that would happen - if something manually uninstalled it - so, either a user at your computer uninstalled it, or else....something else uninstalled it for some reason, and we'll need to investigate that eventually.

So, start with re-installing NAV (or whatever the Norton Product that you have installed is) and then we'll progress.

Hi John
Yes, I am running or was running both Norton and Panda which is under the name Cyber-Crime Professional. The reason I did is that the for about two years I was running Norton and SpywareXterminator concurrently with no problems whatsoever. Spyware decided to terminate their services so I got Cyber-Crime. When you install it, it tells you to delete Norton but I did not. Instead I made the Norton firewall rules to allow Cyber Crime. I have had them both for about a month and a half apparently with no problems.
Norton is doing fine right now. I really do not want to reinstall it. The only thing that was not working was the Live Update and I reloaded it from their website. It is working fine. The Panda antivirus I took out because I was not able to update either. I have the CD but when I originally got it I had to talk to one or their technician and he help me download it straight from their website. The Cd did not take all the info. I might have to do that again.
About my computer going from XP PaK2 to PaK1 by itself, it is a mystery, unless "MY DOG" got hold of the computer. HA! This is a home computer and it just me and my dog, that is why I thought I had some kind of virus, worm or trojan. I was in complete shock.
It has been one thing after the other. My Yahoo modem stopped working about a two weeks ago and My Outlook Express was not working either. AT&T fixed both things. On Dec 24 in the morning I used the computer with no problem. I turned it off and went out. When I came back in the evening I turned it on and at the bottom, on the information tray was the Microsoft Star Icon saying that my computer was not safe because I had Pak1. I panicked, went to their website and downloaded Pak2. Because the Yahoo -ATT&T had changed my POP and SMTP from SBC to AT&T I went in into the System information-Tools-Network Diagnostics to get the correct information on paper. I print everything so that I know what I have in case something happens. That was another sign that something was wrong. The Network Diagnostics Tool would work until 99%, then say the system info is formatting and stay there. The info would never come up.
About Nero. I got it about a year ago with a DVD-RW drive that I installed in the computer. I came with Nero 6 and I have been upgrading along. I downloaded Nero 8 in the middle of November. After the reloading of Pk2 I also downloaded an update for Nero 8. Again I went into the Nero Info Tool to print all of the new information. Everything was cool except that when I checked on my DVD-RW and CD-ROM it said that the Cd-ROM drive was not working. So I went into the Sonny website and tested both drives. Perfect score. I tested them also by playing CDs in both of them and they worked fine. So again there is something in the computer that is missing and would not let Nero get some of the information either. I have always had InCD and has never been a problem.
I have to continue below.

Hello again John
By the way, thank you VERY MUCH! for getting back to me in the middle of your move.
I think that the Panda antivirus and Norton really do not get along and has caused all of this havoc. Norton, I just renewed, I want to keep. Anti-Cyber I paid $30 for a year. I would rather not use it if it is causing problems.
What do you think about deleting PAk2 and reloading it again?
In general the computer is working fine except for not been able to get the information I want from the Network Diagnostics Tool and the Nero Info Tool.
I would like to know if there is a corrupted file and how to fix it. I have been searching the internet with no luck. I found an article about how to checked corrupted files in the System File Checker but it was for Windows 98. Is there a way to check for Windows XP? I am sorry If I am boring you. I just want to get my computer up to part. I look forward to hearing what you have to say.
Thanks, Amy

removing and reinstalling Service Pack 2 will probably cause you more problems than you are ready to deal with.

The System File Checker also applies to Windows XP - see This Microsoft article to learn how M$ tells you about SFC.

Then, see this nicely written article on how to use SFC to check your system.

Since you have Norton working OK, you're correct - no need to install it again. RE: Panda - that is up to you - it doesn't *hurt* to have both, just be sure that you're well aware of the consequences that may result if you try to use both products simultaneously.

Finally, your original suspicion may, in fact, be correct. You may have gotten infected, as I seriously doubt that your dog could have accomplished anything resembling an uninstallation of SP2. In light of that,

PCBruiser wrote:

Considering the nature of the problem, I strongly recommend that you follow CastleCops' Malware Removal and Prevention procedure, a system CastleCops devised to enable users to either partially, or fully clean their systems without the direct aid of an expert. Please read these instructions carefully. You will find the Malware Removal and Prevention Procedure here: http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction If that doesn't fix the problem, then go to this Forum, read the instructions at the top of the page carefully: /f67-Hijackthis_Spyware_Viruses_Worms_Trojans_Oh_My.html Follow these instructions: /t102301-Hijackthis_Guidelines_Read_Before_Posting.html and one of CC's trained 1st Responders or Security Experts will help you. Note to everyone: You must be a CastleCops member to post for help in the HJT forum.

Hi John,
Thanks for all the info. Things are getting worse. I loved the article about the File Checker but could not anything with it. The computer would not let me go into the sfc. The window just does not come up. I flashes for a millisecond and disappears. I tried to save the article with Adobe Reader and it is not working either. I have spent hours trying to remove and reinstall Adobe with no success. Removing old versions from the registry, following instructions on articles I found. ITunes is not working either. System restore would not let me restore. It seems that everything has to do with executable commands. I have to go back and do the Hijack process tomorrow. I am burned out.
Thanks for all the help, Amy