also @ TechSpot: Dell announces trio of all-in-one desktops, challenges 27-inch iMac

TechSpot

Disabled by pdf attack gadcom.exe

Discussion in 'Virus and Malware Removal' started by zronin99, Dec 14, 2008.

Thread Status:
Not open for further replies.
  1. zronin99 Newcomer, in training

    SAS

    No improvement trying to access the net from safemode with network. So now im running sas on it, When it ask to reboot just keep repairing everything I need to repair before rebooting into back into safe mode to try net again, or reboot back to safe mode after every fix that requires a reboot?

    Ok ran all the SAS repairs and afterwards rebooted back into normal boot. No luck on fixing the problem there, I
    ll put up a new post when I get the logs from the command prompt.
  2. mflynn Newcomer, in training

    Just like it says do the SAS operation and reboot, if no joy then continue with the copy paste operation.

    Back to Safe Node Networking.

    Reboot again to test for fix.

    Mike
  3. zronin99 Newcomer, in training

    Still not working

    Ok did the command prompt stuff, but I didn't reboot after netsh winsock reset catalog
    like it asks instead I entered the last three commands then rebooted. After reboot it still l didn't work same error message. Should I do it again rebooting after netsh winsock reset catalog then reopening the command prompt and entering the last two commands then testing it?

    Heres the tcp log cause each time I tried uploading it it said " tcpreset.txt:
    You have already attached this file in thread : Disabled by pdf attack gadcom.exe " Even when I renamed it to tcpreset2.txt.... :/

    One or more essential parameters were not entered.
    Verify the required parameters, and reenter them.
    The syntax supplied for this command is not valid. Check help for the correct syntax.

    Usage: reset [name=]<string>

    Parameters:

    Tag Value
    name - The name of a file to which to append information
    regarding what settings were reset.

    Remarks: Resets TCP/IP and related components to a clean state.

    Examples:

    reset resetlog.txt


    Oh one last question with ipconfig /release and ipconfig /renew am I supposed to be putting something where that * is or just leave the *?
  4. mflynn Newcomer, in training

    There was a typeo in the following line so Paste the below to the comand prompt and get me the tcpreset.txt

    Mike

    EDIT:

    OK lets do 1 connection at a time. So plug up the Wired network cable.

    Confirm you have a light on the router for the cable by plugging and unplugging. This confirms the cable is OK and is connecting.

    Then do the below.

    Start-Run
    type
    Services.msc
    click OK or hit enter

    Maximize to see better.

    Confirm the following services are set to Automatic and started.

    Computer Browser
    DHCP Client
    DNS Client
    Server
    Wired Autoconfig
    Wireless Zero configuration
    Workstation

    Let me know which ones were off.

    Mike
  5. mflynn Newcomer, in training

    Dupe post. Deleted.
    Mike
  6. zronin99 Newcomer, in training

    Wired autoconfig

    Wired autoconfig was the only one not started and not automatic it is on manual and its status is blank.

    Seems I see all your new posts real late cause ever 10 or twenty minutes I refresh to see if there's a update if someone is on, but I normally only see them if I leave for an hour and when I refresh it says there is new messages from before that hour or however long i left. :/

    Ok I turned the Wired autoconfig on auto startup and ran winsockfix, then restarted plugged the wire in and tried testing it, still not working.... But I have relized when I leave the wire plugged into that laptop for awhile and try repairing it again and again. My router bottoms out, it disconnects form the internet (Its internet icon starts flashing yellow) so I have to unplug the laptop and then the router for a couple seconds before I can get the internet on my other computers again.
  7. rf6647 Newcomer, in training

    I am not sure if the network connection problem was finally answered.

    Your specific question was for using /bootlog
    boot ini switches

    To edit boot ini, I suggest
    Start > run > control sysdm.cpl,,3 > Advance tab > Settings > edit >

    I would duplicate the entry that matches the same one referenced by "default" and probably begins ...
    • multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="XP Professional

    I would add switches to the dupliicate line and name it "xp with bootlog".

    This alters the boot in that you are offered choices. You can shorten the display timeout for this menu (on the 'settings' panel)

    Additional info
    DSS scanner gives info for errors detected in the events logs. After all the cleaning to-date, it would be helpful to restart the computer & run DSS for a fresh view.

  8. Lindae Newcomer, in training

    Living with Gadcom.exe

    Hello

    After becoming inflicted with this nasty little trojanesq virus - I went to google to see what I could do to get rid of it. Everything seemed too complicated. My McAfee (free with cox cable internet) couldn't even find it and remove it.
    So, I figured to mess with it myself:

    I decided to delete it. Cannot be done.

    I then decided to change its location and move it to a new folder on the desktop - since I couldn't delete it I wasn't sure I would be "allowed" to move it...but it moved to its new folder no problem. It also couldn't be "found" back in its old folder.

    Okay - I thought genius that's done...I also thought I could then do the same thing and move to a cd and just get it off the computer altogether but that didn't work. At least it was not where the program that wrote said to look for it...but my troubles were not over. It was in my registry and still working behind the scenes...so my brother comes over and decides to rename it from gadcom.exe to gadcom.wpd (or whatever) then checks it off the registry start up. This seems to work. While it is still in the computer the program has no idea how to find it to get it going.

    It only ever got in because my daughter was on with Picaboo tech support to make a wedding album and couldn’t download the program - they told her to turn off the firewall - never told her to turn it back on and she has no clue so unbeknownst to me - we were not protected in the very easiest of ways.

    We now run the firewall and an antivirus program so I hope this thing won't activate again...any idea if this is the best fix for an untechy like me?
  9. rf6647 Newcomer, in training

    Lindae - please open a new thread

    Members should begin a new thread to discuss their problems or raise their questions. You are vague about your choice of protections, and one might assume you are fishing for recommendations. If this is the essence of your post, then read this. where the discussion turns to firewalls & protections.

    Others may view this question applies to the method used to remove the infection. For this I suggest - Following the Guide: UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions creates a common beginning for an initial assessment.
  10. Lindae Newcomer, in training

    sorry I don't know how to post a new thread - I thought my input was relative to the post I was in...
  11. rf6647 Newcomer, in training

    Lindae - new thread locator

    Lindae, please begin a new thread to discus your problem. Use the link to the start page for this forum. Upper left portion of the page displays the 'new thread' . Click it & go from there. Once there look for [IMG]

    This forum on the TechSpot board tends to focus help toward the member who posted the case of trouble. Members join in to contribute experiences and information directed toward that member or the community in general. For guests visiting this board, your 'method of fix' informs the community of the risks and difficulties faced by avoiding UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions
  12. kimsland Ex-TechSpotter

Thread Status:
Not open for further replies.