My ms server 2003, was hit by all types of viruses, i disinfected the machine, but now if log on manually, the network status shows its receiving packets but not sending, even if when i try to ping any server on the network, it says destination host unreachable, but if i log on to safe mode with networking , it sends and receives packets and pinging machines on the network replies. Please Heelllp!!!! I have installed and uninstalled the network card and drtivers and all networking components, done repair install & still doesnt help. Rebuilding is Totally out of the Question.
Below is the Hijack This Log file, anyone who knows what i might need to delete?
Logfile of HijackThis v1.99.1
Scan saved at 5:22:46 AM, on 5/15/2007
Platform: Windows 2003 SP1 (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 SP1 (6.00.3790.1830)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Dfssvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Hijackthis\HijackThis.exe
R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://shdoclc.dll/hardAdmin.htm
R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://shdoclc.dll/hardAdmin.htm
O10 – Broken Internet access because of LSP provider ‘rsvp32_2.dll’ missing
O16 – DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) – http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1176285562468
O17 – HKLM\System\CCS\Services\Tcpip\..\{38D4CE4C-9227-43CE-8B24-0761E4F4FC09}: NameServer = 213.193.43.4
O20 – Winlogon Notify: dimsntfy – C:\WINDOWS\SYSTEM32\dimsntfy.dll
O20 – Winlogon Notify: instcat – C:\WINDOWS\SYSTEM32\instcat.dll
O20 – Winlogon Notify: rpcc – C:\WINDOWS\system32\rpcc.dll (file missing)
O21 – SSODL: MSN Messenger – {280A7B65-8F00-438F-3E5A-1F039433FE60} – (no file)
O23 – Service: DHCP Clients – Unknown owner – C:\WINDOWS\DHCP.EXE (file missing)
O23 – Service: MDaemon – Unknown owner – C:\MDaemon\APP\MDAEMON.EXE (file missing)
O23 – Service: WorldClient Admin (WCAdmin) – Alt-N Technologies, Ltd. – C:\Program Files\WorldClient\WDaemon.exe
O23 – Service: WorldClient Pro (WorldClient) – Alt-N Technologies, Ltd. – C:\Program Files\WorldClient\WorldClient.exe
