Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

DNS redirects: jjh.exe suspected

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: DNS redirects: jjh.exe suspected

Unread postby melboy » June 11th, 2010, 7:20 am

Hi Lets see if we can reinstall it.



SystemLook

Please download SystemLook by jpshortstuff from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    Code: Select all
    :filefind
    sr.inf
    sr.sys

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK
Advertisement
Register to Remove

Re: DNS redirects: jjh.exe suspected

Unread postby phbrown » June 11th, 2010, 7:30 am

Look grayed out the "look" button, and displayed "scanning." Then displayed the "look" button again. No notepad window.
phbrown
Regular Member
 
Posts: 30
Joined: June 2nd, 2010, 9:31 pm
Location: Virginia

Re: DNS redirects: jjh.exe suspected

Unread postby melboy » June 11th, 2010, 7:34 am

Is the file not on your desktop?
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: DNS redirects: jjh.exe suspected

Unread postby phbrown » June 11th, 2010, 7:51 am

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 07:49 on 11/06/2010 by Paul (Administrator - Elevation successful)

========== filefind ==========

Searching for "sr.inf"
No files found.

Searching for "sr.sys"
C:\WINDOWS.1\ServicePackFiles\i386\sr.sys -----c 73472 bytes [06:06 04/08/2004] [18:36 13/04/2008] 76BB022C2FB6902FD5BDD4F78FC13A5D

-=End Of File=-
phbrown
Regular Member
 
Posts: 30
Joined: June 2nd, 2010, 9:31 pm
Location: Virginia

Re: DNS redirects: jjh.exe suspected

Unread postby melboy » June 11th, 2010, 12:32 pm

Do you have your Windows CD?
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: DNS redirects: jjh.exe suspected

Unread postby phbrown » June 11th, 2010, 1:51 pm

I have a microsoft windows XP CD that includes SP1, and one that I labeled slipstreamed XP lite SP3
phbrown
Regular Member
 
Posts: 30
Joined: June 2nd, 2010, 9:31 pm
Location: Virginia

Re: DNS redirects: jjh.exe suspected

Unread postby melboy » June 11th, 2010, 5:49 pm

Show Hidden Folders

  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders.
  • Uncheck the Hide protected operating system files (recommended) option.
  • Click Yes to confirm.
  • Click OK.

Then:

  1. Confirm that the folder C:\Windows.1\inf is present.
  2. Insert your Windows disk
.

Go Start > Run and copy/paste the following command:

expand X:\i386\sr.in_ C:\Windows.1\inf\sr.inf

Where X pertains to your CD_Rom Drive letter

Example. If your CD_ROM drive letter is E: the command will be:

expand E:\i386\sr.in_ C:\Windows.1\inf\sr.inf


Confirm that the above was successful before we continue.
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: DNS redirects: jjh.exe suspected

Unread postby phbrown » June 11th, 2010, 6:14 pm

Confirmed: sr.inf is now in the c:\windows.1\inf folder
phbrown
Regular Member
 
Posts: 30
Joined: June 2nd, 2010, 9:31 pm
Location: Virginia

Re: DNS redirects: jjh.exe suspected

Unread postby melboy » June 11th, 2010, 6:34 pm

Ok - Good.

With your XP CD still inserted, Go Start > Run and copy/paste the following command into the run box:

rundll32.exe advpack.dll,LaunchINFSection C:\Windows.1\Inf\sr.inf

You will be prompted for the file SR.sys. Copy/paste C:\WINDOWS.1\ServicePackFiles\i386 into the (Copy files from:) box and click OK.

You'll then see a window copying all the files over from the XP CD that are needed to reinstall System Restore.

You'll see a message "You must restart your computer before the new settings will take effect.
Do you want to restart your computer now
?"

Click Yes and allow the computer to reboot.


Let me know if you have System restore working.
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: DNS redirects: jjh.exe suspected

Unread postby phbrown » June 11th, 2010, 7:15 pm

Another box pops up requesting srframe.mmf


SystemLook doesn't find it

:filefind
srframe.mmf
phbrown
Regular Member
 
Posts: 30
Joined: June 2nd, 2010, 9:31 pm
Location: Virginia

Re: DNS redirects: jjh.exe suspected

Unread postby melboy » June 11th, 2010, 7:28 pm

Confirm that the folder C:\Windows.1\System32\Restore is present.

With your Windows disk inserted still, go Start > Run and copy/paste the following command:

expand X:\i386\SRFRAME.MM_ C:\Windows.1\System32\Restore\SRFRAME.MMF

Where X pertains to your CD_Rom Drive letter,

When you are then prompted for the file when installing System Restore copy/paste into the (Copy files from:) box:

C:\Windows.1\System32\Restore

and click OK
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: DNS redirects: jjh.exe suspected

Unread postby phbrown » June 11th, 2010, 7:56 pm

done

no request for reboot, however
phbrown
Regular Member
 
Posts: 30
Joined: June 2nd, 2010, 9:31 pm
Location: Virginia

Re: DNS redirects: jjh.exe suspected

Unread postby melboy » June 11th, 2010, 8:01 pm

Do you have a working System Restore now then?
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK

Re: DNS redirects: jjh.exe suspected

Unread postby phbrown » June 11th, 2010, 11:08 pm

I have a SR line under Accessories/System tools, but when I click on it I get a message

System Restore is not able to protect your computer. Please restart your computer and run System Restore again.

twice, now

I conclude that it isn't working.
phbrown
Regular Member
 
Posts: 30
Joined: June 2nd, 2010, 9:31 pm
Location: Virginia

Re: DNS redirects: jjh.exe suspected

Unread postby phbrown » June 11th, 2010, 11:12 pm

I checked the Computer Management system - no System Restore under Services and Applications/Services
phbrown
Regular Member
 
Posts: 30
Joined: June 2nd, 2010, 9:31 pm
Location: Virginia
Advertisement
Register to Remove

PreviousNext

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 507 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware