Tech Problem Aggregator

1 more replies

Exorcism for my 'puter needed...

Couldn't find any old posts with repair info. Whatever it is, Smart HDD, destroyed Avira. Was on net & Avira picked it up around 5:15 pm yesterday and I thought it took care of it but, obviously it didn't. Smart HDD installed itself and won't delete. Serious write disc messages coming. Thought I lost all my files but found them.

Microsoft security said it took out 3 versions of SHDD but it's still there. Downloaded hijack and it started, froze and started again. Froze GMER when it got to shadow hd 3. Wouldn't let Housecall run. Didn't know what to delete with Kaspersky and another scanner that said more than 8,000 files were not right.

If I copy Word files to another medium, will they bring SHDD with them?

Thank you. ST
===================

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista&#8482; Home Premium, Service Pack 2, 32 bit
Processor: Intel(R) Pentium(R) Dual CPU T2330 @ 1.60GHz, x64 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 2037 Mb
Graphics Card: Mobile Intel(R) 965 Express Chipset Family, 448 Mb
Hard Drives: C: Total - 112963 MB, Free - 34435 MB;
Motherboard: Intel Corporation, SANTA ROSA CRB
Antivirus: AVG Anti-Virus Free, Updated: Yes, On-Demand Scanner: Enabled

==========================
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-04-18 13:01:30
Windows 6.0.6002 Service Pack 2
Running: slicer.exe; Driver: C:\Us... Read more

16 more replies

Hi
Downloaded hijack but not sure how to use it. Any help will be appreciated. kcanary
Logfile of HijackThis v1.97.7

Scan saved at 10:25:53 PM, on 3/8/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\clipsrv.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\tlntsvr.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\mqsvc.exe
C:\WINDOWS\System32\mqtgsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wpabaln.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\America Online 9.0a\waol.exe
C:\Program Files\America Online 9.0a\shellmon.exe
C:\Program Files\America Online 9.0a\aolwbspd.exe
C:\Documents and Settings\Kathy Mikolas\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MsmqI... Read more

16 more replies

After downloading 'Hijack this' from http://www.greyknight17.com/spy/HijackThis.exe i noticed that i was infected by the 'bloodhound.exploit.6' virus. this virus seemed to be triggered when trying to save document files (i first noticed it when trying to save a lof file from hijack this), although symantec and microsoft knowledgebase state that it is a security issue with outlook express.
I have tried to use the microsoft patch but to no avail!
this virus may or may not have come from the hijack this file.
has anyone had this same problem, if so how did you get rid of it.

regards pyroluke

I'll betcha a paycheck that it was there, already, dormant, waiting for it's moment in the sun.

The patch will prevent the infection, but it is seldom that the patch cures the infection.

Run an online virus scan at TrendMicro or RAV Antivirus. Select the Autoclean option if you use TrendMicro.

Then, see if you can get an HJT log up, here.

2 more replies

I didn't know what I was thinking. I downloaded something and it's stuck. I kind of know what to delete, but I want to make sure before I go delete away. Plz help. TIA

Logfile of HijackThis v1.98.2
Scan saved at 5:05:54 PM, on 2/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\EzButton\CPLDBL10.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point.

Please download Ad-aware SE and install it if you don't have it already. Make sure it's the newest version and check for any updates before running it. Also go here to get the plug-in for fixing VX2 variants. To run this tool, go into Ad-aware->Add-ons and select VX2 Cleaner. Then click Run Tool and OK to start it. If it's clean, it will say Status System Clean. Otherwise, you will have to click on the Clean button to remove the VX2 infection. Also make sure to customize the settings in Ad-aware for better scan results. Run the scan and fix everything that it finds.

Download and install Spybot S&D. Run Spybot and click on the 'Search for Updates' button. Install any updates that are available. Next click on the 'Check for Problems' button. Let it run the scan. If it finds something, check all those in RED and hit the Fix Selected Problems button. Exit Spybot. If you keep getting the DSO Exploit entries, even after you updated Windows and fixed them, then download the Spybot DSO Exploit Fix and install it over the current Spybot installation.

The Temp folders should be cleaned out periodically as installation programs and hijack pro... Read more

6 more replies

When I bootup my computer it gets to where I think it is almost finished booting and it says it is loading my personal settings and takes forever to finish. Can anyone tell me how to find my personal settings on XP Home.

11 more replies

Can someone tell me what to do to get rid of POPNAV and any other things that might be harming my computer? I just downloaded HiJack This and this is what the log showed me:

Logfile of HijackThis v1.97.7
Scan saved at 10:09:19 PM, on 2/24/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\iefeatures.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = C:\WINDOWS\search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = C:\WINDOWS\search.html
R0 - HKCU\Software\Microsoft\Internet E... Read more

Hi kellyn24

Welcome to TSG!

Click here to download CWShredder. UnZip the file, close all browser windows and click on the cwshredder.exe then click "Fix" (Not "Scan only") and let it do it's thing.

When it is finished restart your computer.

To help prevent this from happening again, I strongly recommend you install the folowing patches for the vulnerabilities that this hijacker exploits:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-011.asp

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS00-075.asp

*Note: The simplest way to make sure you have all the security patches is to go to Windows update and install all "Critical Updates and Service Packs"

Install the program and launch it.

First in the main window look in the bottom right corner and click on Check for updates now and download the latest referencefiles.

Make sure the following settings are made and on -------ON=GREEN

From main window :Click Start then Activate in-depth scan (recommended)

Click Use custom scanning options then click Customize and have these options selected: Under Drives and Folders put a check by Scan within archives and below that under Memory and Registry put a check by all the options there.

Now click on the Tweak button in that same window. Under Scanning engine select Unload recognized processes during scanning and under Cl... Read more

1 more replies

I downloaded a trojan horse yesterday and now I keep getting pop ups from ie which I don't even use and firefox as well. Scotty the watch dog says this is the file that keeps trying to run C:\WINDOWS\system32\vtsqr.dll. and here is my hijack this log file please help.
Logfile of HijackThis v1.99.1
Scan saved at 1:55:32 PM, on 9/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
C:\Program Files\InterVideo\Common\Bin\WinRemote.exe
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

Hi
Lets see if this will dig it out...

Put a check next to Run VundoFix as a task.
You will receive a message saying vundofix will close and re-open in a minute or less. Click OK
When VundoFix re-opens, click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Please post the contents of C:\vundofix.txt and a new HiJackThis log.

9 more replies

I hope someone can help me and tell me whats wrong with my pc.Any help will be greatly appreciated,thanx

Logfile of HijackThis v1.96.2
Scan saved at 1:35:06 AM, on 8/28/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\pctspk.exe
C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
C:\WINDOWS\TVTMD.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\foo1\foobin.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\shasha\Local Settings\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=50108
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = htt... Read more

7 more replies

I recently download sum sort of trojan virus at gamehacks.be nd it has messed up my computer and i am no longer able to access Diablo II (Online Game). Here is my hijack this log any help would be grateful...
Logfile of HijackThis v1.99.1
Scan saved at 1:02:08 PM, on 8/29/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\SYSTEM32\Brmfrmps.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\Explorer.EXE

10 more replies

I went to a forum and next thing I knew I had goofed, it changed my homepage, I changed it back, but i still have extra toolbar here and cant get rid of it, a yallow thing flashed by saying I had tracking something or other on my comp, Plz look at log and help me.

Logfile of HijackThis v1.97.7
Scan saved at 11:43:10 AM, on 3/9/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpcc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpm.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpcc.exe
C:\WINDOWS\system32\DfrgFat.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Orbit\update.exe
C:\WINDOWS\Temp\LycosInstaller.exe
C:\Documents and Settings\Mary\Local Settings\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.orbitexplorer.com/cgi-bin/IESearch.cgi?bid=&affid=1gpp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.orbitexplorer.com/cgi-bin/IESearch.cgi?bid=... Read more

A:oops, downloaded something that changed my browser, plz look at my hijack log

6 more replies

I use Windows XP SP3 and I have Panda Antivirus Global Protection 2009. Yesterday I downloaded a file on torrents and it turns out that it was infected with adware. I tried removing it myself using Malwarebytes Anti-Malware and Spybot - Search & Destroy but when I try to run the programs the processes start but the programs don't come up, this happens in safe mode aswell. I also ran a scan with Panda thinking its adware database might find something but sadly it didn't.

In Internet Explorer or Mozilla Firefox if I search on google and click on any links or if I try going to specific sites like Spybot's site I end up getting redirected to pages showing either random ads or other pages or one constantly reoccuring ad for Stopzilla. Also not sure if this is related but since I got this my computer has totally locked up explorer.exe and all 3 times in one day causing me to have to reboot every time.

Usually when I get crap like this I just slave over my computer on Google until I get rid of it which I usually do but this time I figured i'd seek out some help and save me a few days on Google. Thanks in advance for any help you can give.

DDS (Ver_09-03-16.01) - NTFSx86
Run by Jon at 23:03:16.46 on 06/05/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1167 [GMT -4:00]

AV: Panda Global Protection 2009 *On-access scanning enabled* (Updated)
FW: Panda Personal Firewall 2009 *enabled*

Thanks anyway for any help you were going to give but I've fixed the problem on my own.

2 more replies

We use Windows ME. My wife downloaded spy stormer, and shortly there after our MSN and our Windows update no longer work.

Then, to try to fix it myself, I redownloaded msn, but now seem to have the beta version, and not the 6.2 i orgininally had.

The windows update error message is the following:
The Windows Update software did not update successfully. Below are some suggestions to help you proceed:
You may have clicked No when prompted to accept the Trust Certificate. To allow the Windows Update site software to install, click Yes when presented with the Security Warning dialog box.
Your Internet Explorer security settings may be set too high. To install the updated software and access Windows Update, Internet Explorer security must be set to medium or lower, and active scripting and the download and initialization of ActiveX controls must be enabled.

The error code I am getting for MSN is 80072f0d.

Since then, I've downloaded adaware and spybot, and have used them to try to fix my problem - and have used an online trojan finder and fixer, which did find a few on the machine.

Logfile of HijackThis v1.98.2
Scan saved at 4:52:35 PM, on 14/01/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE

A:Wife downloaded spy stormer, MSN and Windows update not working now - hijack log file

11 more replies

I was working trying to fix my DVDFab express tonight, and I was using a keygenerator... bad I know... but anyways, I ended up downloading and installing something that made my desktop wallpaper go to white and flicker... THe program initiated a msdos looking window with an error message that asked me if I wanted to abort... I couldn't choose anything and had to reboot... that's when I found it had erased my wallpaper and I couldn't get it fixed.. i knew it was some kind of malicious program...

so i came to you guys and I have followed all your steps... My wallpaper is back and I think I have gotten rid of most stuf, but my computer is still running kind of weird, slow, just not the same....

I have ran Adaware SE Personal, Spybot, Notron Anti-Virus, Kapersky Online Scanner, CWShredder, and Spyware Blaster... Please see if something else is on there...

Thanks Guys!!!!

Here is my HijackThis log...

Logfile of HijackThis v1.99.1
Scan saved at 12:32:05 AM, on 12/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you will get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on Start Update.
7. The update will start and a progress bar will show the updates being installed. The status bar at the bottom will display 'Update successful'.
8. Exit Ewido. DO NOT scan yet.

Restart your computer and boot into Safe Mode (if you d... Read more

1 more replies

Hello -It may not be unusual for a program to update itself if you are subscribed to it, like many Adobe products that Auto Update -Thank You - Detals of what Networx Can ShowText edited to show link to programs base

4 more replies

Think i accidently downloaded something or not, Over the past week it has been getting slower and ie has now been hanging up. here is a dss log and thank you:Deckard's System Scanner v20071014.68Run by Gil on 2008-06-09 22:07:02Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --28: 2008-06-10 02:07:21 UTC - RP513 - Deckard's System Scanner Restore Point27: 2008-06-10 00:51:33 UTC - RP512 - System Checkpoint26: 2008-06-04 03:16:24 UTC - RP511 - Software Distribution Service 3.025: 2008-06-03 21:13:28 UTC - RP510 - Software Distribution Service 3.024: 2008-06-03 02:32:27 UTC - RP509 - Software Distribution Service 3.0-- First Restore Point -- 1: 2008-03-13 20:18:23 UTC - RP486 - System CheckpointBacked up registry hives.Performed disk cleanup.Total Physical Memory: 448 MiB (512 MiB recommended).-- HijackThis (run as Gil.exe) -------------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:10:47 PM, on 6/9/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16640)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC: ... Read more

2 more replies

I opened a file from AIM, and now all these programs are trying to modify my computer. All help would be appreciated.

Logfile of HijackThis v1.99.1
Scan saved at 8:10:06 PM, on 9/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\BRMFRSMG.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\WINDOWS\system\wcisvc.exe
C:\Program Files\AIM\aim.exe
C:\Documents and Settings\Yolkavich\Desktop\HijackThis.exe

R3 - URLSearchHook: AOLTBSearch ... Read more

More replies

Hey.
I have had some problems with my computer, and know I have tried my best. Someone told me to download Hijack and then post my log here. Could someone please take a look at it-, If there's something more to be done, please let me know.

Thanks

Logfile of HijackThis v1.98.2
Scan saved at 21:57:56, on 11.10.2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Programfiler\Fellesfiler\Symantec Shared\ccEvtMgr.exe
C:\Programfiler\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programfiler\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Programfiler\Nokia\Nokia PC Suite 5\DataLayer.exe
C:\Programfiler\Fellesfiler\Nokia\NCLTools\NclTray.exe
C:\PROGRA~1\ELEKTR~1\OPTISK~1\Amoumain.exe
C:\Programfiler\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe
C:\Programfiler\Fellesfiler\Nokia\Services\ServiceLayer.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\bcmwltry.exe

It's a program that can restore your internet connection if it's lost after the NewDotNet uninstall.

Uninstall NewDotNet via Start-Control Panel-Add or Remove Programs.

If that fails, then follow the instructions below:

From a computer that has Internet access, click on the following link:

NewDotNet uninstaller

Insert the floppy disk into the floppy drive of the computer that needs to have our software uninstalled from.

Click on Start.

Click on Run.

In the Open window type, A:\uninstall6_22.exe.

Click on the OK button.

Re-start the computer.

http://www.newdotnet.com/

Uninstall:

MyWay or MyWebSearch

Twaintech

Restart the computer.

Download and save these freeware/donationware programs to a permanent folder. Remember to check for updates and run them weekly.
***NOTE***A new version of Ad-aware has been released.
***ALSO***A new version of SpyBot's been released (v1.3...it's no longer in beta). If you have been using 1.2 you can install right over it. If you downloaded and used 1.3 beta it is suggested you remove it and reboot prior to installing.

First in the main window look in the bottom right corner and click on "Check for updates now." then click Connect and download the latest reference files.... Read more

1 more replies

So I downloaded something and although avast said it blocked a trojan/virus, I just want to sure my PC is safe/clean. Think you guys can help me out?

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 7:10:11 PM, on 2/5/2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18163)

FIREFOX: 42.0 (x86 en-US)
Boot mode: Normal

Running processes:
C:\Users\Gene\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe

2 more replies

So far I like it. However, I do a lot of photos and cannot figure out how to set up a new folder and organize them. Any advice ? Thank you

10 more replies

system running : windows XP professional with sp3

okay, as the title implies, while surfing the internet a tab appeared in the firefox window that said "Updating..." but never showed/displayed anything. After that, I noticed the windows start/tool bar had changed from the XP theme version to the classic version. Then i noticed that there was no network connectivity. When I tried to look up what was wrong, the properties, rename, and delete options have been disabled from the right-click menu.
I received a message that there was attempt to update registry but whatever was done was restored, then my PC reboot.
what I've done so far:
I tried to boot using the windows xp CD but nothing happens. Windows eventually boots up, but I don't get any options to run repair or anything.
Used CA anti-virus for scan and found nothing (did this again in safe mode and still found nothing)
I did a search to see if I could find what was modified, it shows that all user accounts including a Helpassist?? account have been updated in some form or fashion so i don't know what else to do

I see svchost.exe, services.exe, and system taking up 50% of CPU occasionally but not sure what to make of that.

to get the internet started I tried to turn on some network services but all failed due to 'timeout'

Please let me know any ideas, or how to get started on trying to fix this problem.

thanks,
homero
other pcs are connected to the internet just fine.

any ideas? anyone? a starting point?

2 more replies

i downloaded a thing i thought was safe but turns out my mcafee site advisor and mcafee software let a trojan get on my computer. it the TrojanDownloader:WIN32/zlob.ZWC. microsoft malicious software tool detects it but wont remove it. mcafee dont detect it at all.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

1 more replies

Hello

I have setup every application to "ask me before checking for updates",

Even when I am not using any brower, email or any opther application, I notice that my lights on my modem are blinking quite fast... that is something is being downloded. It has been going on for quite sometime.

How do I find out what is being downloded (or uploaded)?

I use
toshiba laptop
window 7 prof
IE9
MS office 2010
Internet secuirity (antivirus, etc ...) from Bell
Thank you very much

And you have no browser open? And check for new email only infrequently?

You could try disconnecting from the modem and see if any program complains.

In Network Connections right click on your connection and select Status. Watch the Bytes sent and received to get an idea of the upload vs download and how much.

3 more replies

I just purchased a new HP desktop, INtel core 2 Quad processor, 64 bit performance with 8gb of ram, 1 Terrabyte hard drive. It came with Vista home premium 64 bit edition. I had previously purchased Vista Ultimate for a laptop that no longer works. When I downloaded Vista Ultimate I put in the 32 bit instead of the 64.....I am not able to do a restore to go back to the way I purchased it. I am not very computer savvy. Can anyone please help??? Thank you. And what would be the down fall for keeping the 32 bit installed (somone had told me I wouldn't be using the full capicity of the computer) Thanks again.

Originally Posted by cmb1966

I just purchased a new HP desktop, INtel core 2 Quad processor, 64 bit performance with 8gb of ram, 1 Terrabyte hard drive. It came with Vista home premium 64 bit edition. I had previously purchased Vista Ultimate for a laptop that no longer works. When I downloaded Vista Ultimate I put in the 32 bit instead of the 64.....I am not able to do a restore to go back to the way I purchased it. I am not very computer savvy. Can anyone please help??? Thank you. And what would be the down fall for keeping the 32 bit installed (somone had told me I wouldn't be using the full capicity of the computer) Thanks again.

32bit will only see 4gigs of ram and usually only be able to use abt 3.3 its also a bit slower depending on how you use it. when changing from one OS format (32bit) to another (64bit) it has to be a clean install.

Now about restoring you may have a backup there and available but since you are 32 bit and it isnt you cant use it. If you were to reinstall vista 64 it probably be available

7 more replies

Thanks

Hi cloud366, it sounds like you have done a repair install. When you pressed F10, did you choose Last Known Good Configuration from the boot menu?

Also, check in C:\Documents and Settings for a duplicate profile. It could be that your original profile has corrupted and Windows built you a new one.

All those type of "custom features" live in your local profile.

3 more replies

downloaded IE9, but cant find it did search, found an empty folder but that all thats marked IE, toshiba laptop running mozilla firefox 3.6

3 more replies

More replies

hello my coputer is windos vista and the problem is everery time that i try to downloading anything i cant because there is a box that say "you current security setting do not allow this file to be downloaded" plis i really need help michael

More replies

alright so i would say i am pretty computer literate at least for 16 you put me in my whole high school i would pry be second best, here is my HJT file i cant find nothing but i can tell you my problem the quick launch bar is messed up i open it an nothing is there it opens but just lines come and regedit says its in use by another program and task manager wont open

View attachment 32453

Clear these three items in HJT and rescan:

O2 - BHO: (no name) - {3745D43B-4A84-485D-8EE9-BC6D0401DBF6} - C:\WINDOWS\system32\vtUkIBqR.dll
O2 - BHO: (no name) - {4F96CCB9-01EC-419E-AAEA-C2C913F2A236} - C:\WINDOWS\system32\byXRkIYS.dll
O20 - Winlogon Notify: byXRkIYS - C:\WINDOWS\SYSTEM32\byXRkIYS.dll

If they are still present, then download MalwareBytes Anti-Malware and while you are there grab the RogueRemoverFree as well. FileASSASSIN is under More Tools in Anti-Malware, and can actually delete the files while in use. Run that if the files wont delete or keep showing up in HJT. Make sure you update MalwareBytes before you do a full scan

7 more replies

I downloaded a program yesterday and ran it but nothing happened. Then I read comments on a video of it and someone said it was most likely a RAT and another guy saying it was probably a virus. I can provide the file if that will help. I don't want a RAT.

1 more replies

Is there a way to find out just how much in total the Get Windows 10 app has downloaded it so far?

There's no way to know that when Windows 10 hasn't been officially released yet. Maybe at a later date.

41 more replies

I took advantage of the student offer of Windows 7 and last night downloaded windows 7. I thought that because my laptop was 64 bit capable I could do a clean install to it from the download, which I now obviously realise was a mistake.

Does anyone know how I can change this download for a 32 bit version?

Thanks

Why can't you install 64bit? Have you tried and got an error?

2 more replies

9 more replies

Hi allvery frustrating as I've trawled the forums and also tried everything but nothing happenslong story short,I have windows 8.1 on my laptop,did all the critical/updates,restarted etc..no problemsthe windows 10 pop up appears fine as well..so i follow the prompts etc ,since i don't want to wait i downloaded the windows creation tool from the official page,that downloaded fine and also ran fine..but then nothing happens,even after restartingwhat am i missing here?appreciate any help because i have run out of ideas herecheers

9 more replies

Some programs that I download don't show up in my programs. I have to enter the program in search & it appears. It's in Computer © but it's all the contents of the program. This has happened several times and I reinstall the program but get the same results.

Happy Thanksgiving to all.

Programs that have no install routines...such as those in .zip files/folders...aren't reflected in listed programs installed.  They don't use an installer so they don't appear.

http://superuser.com/questions/532460/best-practice-for-installing-small-programs-without-installers-on-windows

Louis

1 more replies

I really don't want to have to format/reinstall windows since I have quite a bit of stuff I would need to backup. Any help would be EXTREMELY appreciated. Thanks.

What antivirus are you running?

29 more replies

Hi everyone. I was wondering if someone could help me. I have had this little box on the bottom left of my computer when I first start it. It says c:\windows\odbc.hta. I think it is making my explorer crash because after about 15 minutes on the internet, I recieve a message that explorer has performed an illegal opperation and will be shut down. I end up having to restart my computer. I have run adware and spybot but they have been unable to locate it or remove it. I have also searched multiple virus webpages and didnt find anything as well. Can someone please help me and tell me how to remove this annoying thing! Thank you
Victoria

First create a permanent folder somewhere like in My Documents and name it Hijack This.

Click on Hijackthis.exe to launch the peogram.

Click the "Scan" button when the scan is finished the scan button will become "Save Log" click that and save the log.

Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required. Someone here will be glad to advise you on what to fix.

3 more replies

Sounds like, when you installed Real Player you did not select [Custom] and check your file associations. Or did not use the Real Player option to always reset file associations if another program changes it.

Actually, before installing any ADDITIONAL player, you should check what files are associated whit your current player or players, and make sure the file association of the new player are not in conflict.

I always uncheck ANY association conflict in a new player, then change them later to the player I want to be default for the file.

According to a Google hit for MPGA, = Mpeg-1 Layer3 Audio Stream and that links to Winamp. Bet you have Winamp installed and it is over-riding the file association for mpg. You need to disassociate mpg from Winamp.

2 more replies

ComboFix 09-08-10.06 - nancy bernal 16/08/2009 22:07.1.1 - NTFSx86Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.228 [GMT -7:00]Running from: c:\documents and settings\nancy bernal\Desktop\combofix.exeAV: CA Anti-Virus *On-access scanning disabled* (Updated) {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}FW: CA Personal Firewall *disabled* {14CB4B80-8E52-45EA-905E-67C1267B4160}.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\docume~1\NANCYB~1\APPLIC~1\alotc:\docume~1\NANCYB~1\APPLIC~1\DriveCleaner 2006 Freec:\docume~1\NANCYB~1\APPLIC~1\DriveCleaner 2006 Free\Logs\update.logc:\docume~1\NANCYB~1\APPLIC~1\FunWebProductsc:\documents and settings\angel\Application Data\SpamBlockerc:\documents and settings\nancy bernal\err.logc:\documents and settings\nancy bernal\ResErrors.logc:\documents and settings\scareface\Application Data\SpamBlockerc:\documents and settings\scareface\Start Menu\Programs\InternetGameBoxc:\documents and settings\scareface\Start Menu\Programs\InternetGameBox\InternetGameBox.lnkc:\documents and settings\scareface\Start Menu\Programs\InternetGameBox\Uninstall.lnkc:\documents and settings\scareface\Start Men... Read more

ComboFix logs should not be posted outside the HijackThis forums. It is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert." It is NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.Please create a new topic explaining the nature of your problem in the Am I infected? What do I do? forum. Describe pop-ups and system tray or desktop icons that have appeared. Explain what is "going wrong" with your computer. Note any tools you have used and their respective results.If needed, we will direct you to our HJT Preparation Guide.Thank you for using BleepingComputer as your malware removal source.This topic is now closed. The BC Staff

1 more replies

hello all;
heres a good one for the gurus.
i am running an hp compaq dc5850 sff. i have two hdd. one with all my America's Army stuff on it. on one i have the deploy client and game but nothing else that pertains to AA2.
so i decide to start to set up AA2 on the vista hdd as it is on xp hdd, the first thing i do is go to my maps website of choice and start to download the user created maps i like. everything looks good, i choose the correct directory and file and even hit the open folder button to make sure the map is in the right place and it is.
now the good part, i close everything up and go back to the map to make sure it will start and play correctly and it is not there, i search for it from the search window at start and search tells me the closet it could find was the same map but on the E drive, which is where the xp hdd is when i boot vista.
any ideas?

More replies

Hey started a new font thing & decided to download some new fonts. THAT was easy.... I even managed to open the zip file...but all I come up with is a page I can print. I'm running windows xp, what do I need to do to use the fonts? & once I unzip a file does it zip it's self back up/ or do I do it / or do I just leave it????

Sorry, your question is unclear to me.

The systems fonts are stored in a specific font directory, usually C:\WINNT\fonts. Often you can simply *drag & drop* the fonts into that directory and they will be automatically installed on the system and usable by most windows applications. If this fails to work, you could modify one of the MS font installation programmes to install your particular font and make the minor registry changes needed.

3 more replies

I noticed weird things on pages I visit frequently.
I belong to several groups with messege boards.
Now when I go to post a messege, the box is micro mini
and I can't see what I am typing there!
How can I change this?
I tried the Compatibility View Setting and this didn't
fix anything.
Maybe I need to go back to the older IE version....
Thank you for any help!
I took a print screen of the way the webpage looks.
If this picture doesn't show up, here's the link:
http://i28.photobucket.com/albums/c212/cleardayz/IE8.jpg

6 more replies

I ran an exe file and it took over my computer. I have no access to my drives, it locked down the administrator user, i got my regedit working and my command line back but i cant see my c or d drives

contrary to the thread rules i will post my HJT log:

*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:55: VIRUS ALERT!, on 10/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
G:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\system32\cisvc.exe
G:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\system32\PnkBstrA.exe
G:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\HijackThis.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.co.uk/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ... Read more

More replies

Hi. So about two days ago a bot on Steam added me and sent me a link. I knew it was scam but I wanted to know if I could scan the link or something so I right clicked it and that activated the download. It downloaded scr file camouflaged as screenshot. I did not open it and immediately deleted it and scanned my computer with Avira and Malwarebytes Anti-Malware. Malwarebytes didn't find anything (threat scan) but this is Avira's event log from the first detection to the last:

Exported events:

9.12.2014 19:23 [Real-Time Protection] Registry blocked
the registry.

9.12.2014 15:43 [Updater] Update successfully carried out
Update of Avira Free Antivirus on computer TAAVI-PC (192.168.1.8) successful.
The following files were updated by "http://62.44.200.170/update":
aevdf.dat 8.11.193.190
xbv00080.vdf 8.11.193.180
xbv00081.vdf 8.11.193.184
xbv00082.vdf 8.11.193.188
xbv00083.vdf 8.11.193.190
local000.vdf

9.12.2014 15:43 [Scheduler] Job started
The job "Automatic update"
was started successfully.

9.12.2014 15:38 [Real-Time Protection] Service started
Service started.

Hello there

Welcome to Bleeping Computer, I'm LighthouseParty. Let's run a couple of scans to see what could be causing this.
Double click MiniToolBox.
Select the following and then press go.
Flush DNS
Reset IE Proxy Settings
Reset FF Proxy Settings
List Installed Programs
List Restore Points
Step Two:Install and run Malwarebytes Anti-Malware
Double click mbam-setup-x.x.x.xxxx and follow the on-screen instructions.
On the dashboard, click update now.
After that, click scan now - the scan will now begin.
When the scan's completed, select apply actions - make sure the action is quarantine.
How to get the log.
On the dashboard, select the history tab and click application logs.
Select the log which has the time and date of when you did the scan.
Double click SecurityCheck and follow the on-screen instructions.
A log should open, called checkup.txt.
Thanks and good luck!

19 more replies

where in my c: drive would this update me downloaded too.? i downloaded the windows genuine advantage tool but havent installed it and dont want to. where could i find it and delete it.?

Thanks

Go to Start > Run, and type:

C:\Windows\SoftwareDistribution

1 more replies

I just downgraded from Vista SP2 to Vista SP1 and by doing so, have somehow screwed up my downloads in both Firefox and IE8. Whenever I download in either one, the download results in a file that is 0 kb.

The strange thing is, Google Chrome somehow wasn't affected by this downgrade (if that's what caused this) and I can download files fine in that browser.

Can someone tell me what's going on here and how to fix this in IE8 and FF 3.5? I've already tried reinstalling FF and it didn't help at all.

Why did you downgrade form SP2 to SP1? Try reinstalling SP2.

2 more replies

Just a little note, that IE8 came over with the latest updates from Microsoft and I downloaded it thinking that they improved it and ironed out all the previous problems with it, but they didn't! Big mistake!!!! I just recently went back to IE7 because there were too many websites that were causing me problems, plus my web printing was not working anymore for my HP printer and I found out that I could not print any of my cards in American Greetings!!!! I pay for that service and was very upset when I had a wedding to go to and could not print my card at the last min.!!!!! That was the staw that broke the camels back.....So, it was bye bye IE8, I am so disappointed in Microsoft for rushing this browser out to there knowing it has all these problems....Shame on you!!!!!

Did you try the sites in Compatibility View?

Internet Explorer 8: Faster and easier

18 more replies

We have upgraded Internet explorer to version 11. now we are not able to download pdf files from our internal web application. Error message :
****.pdf couldn't be downloaded. There is not issue while we try from IE 8.

More replies

Should I keep all these programs intalled??

FRST64

FSS

MINI TOLL BOX

SECURITY CHECK

SFCFIX

ASHAMPOO

AUSLOGICS

CCLEANER

Nir softshelle x View

Speccy

Revo uninstaller

TWEAKING.COM

WISH SOMEONE COULD HELP ME OUT!!!

Were you having help at the Malware Removal Forum. If you are finished you can remove

FRST64

FSS

MINI TOLL BOX

SECURITY CHECK

SFCFIX

TWEAKING.COM   (if this is the Repair all in one Program)

Nir softshelle x View

Speccy

You can remove some of the programs with Delfix but only check the box "Remove Disinfection Tools" What it does not remove, you can delete manually.

What is the Auslogics program called?

What is the Ashampoo program called?

Is Revo Uninstaller the Free version or a trial version of Pro?

11 more replies

Hello. Thank you for offering this forum of help! I have run Malwarebytes, Spybot, spyware doc, and Auslogics.

Downloaded new IE 9 yesterday. Click on IE 9 icon but IE 9 does not start. I read that one problem may be registry, missing files from older IE, or spyware, so saw using Hijack This as a possible option. I notice right at the start it states "MSIE: Unable to get Internet Explorer version!"

Thank you for any suggestions you can offer. I really appreciate your knowledge because I'd love to use IE 9.

Here is my log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:40:51 PM, on 3/19/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Microsoft Office\OFFICE12\GrooveMonitor.exe
C:\Users\xxx\AppData\Local\Starfield\wben.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. Please take note: If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.

3 more replies

I have some kind of software been downloaded on my computer I didn't do
the software is WinPcap 4.1.2 CACE Technologies does this need to be on my computer

6 more replies

Hello all.
I am a newbie to vista. In November I bought a Dell Inspiron 1525.
The other day i was playing an online poker game (multi player) then the sound stopped
working. After a few seconds i get a pop up saying i needed to download the latest
sound driver. and i did and the sound did come back after restarting.
I thought to myself .. this is great, vista tells ya when drivers need updating.
now spybot keeps telling me that new startup values have changed.
Startup is like Direct TV during a hurricane but only for a couple of seconds.
I chat with the Dell Techs and they wont help becouse i bought the laptop at
Ive always tried to keep things updated and drivers have been a real pain.
Should a new laptop already need driver updates? How do i know when a driver needs
updating?
I use system mechanic pro. firewall antivirus and all are up to date
spybot w/tea timer. maybe the warning signs were there but i missed it.
can someone give me some direction.
will include hjt log.
And system info. any help will be greatly appreciated.
OS Name Microsoft® Windows Vista™ Home Premium
Version 6.0.6001 Service Pack 1 Build 6001
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name OZINMYLAND-PC
System Manufacturer Dell Inc.
System Model Inspiron 1525
System Type X86-based PC
Processor Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz, 2000 Mhz, 2 Core(s), 2 Logical Processor... Read more

7 more replies

I downloaded Accelerator software and problems ensued. I removed the program, deleted files from Cache, did a Norton and a Spybot scan, thought it was going to go away. Didn't. I have since downloaded Prevx software, Ad-Aware SE, Hijack This and run these. Still problems. I get the c/documents and settings message and the about:blank message and the Prevx intercepts a ton of attempts from something called Terrabyte. Maybe I'm not doing the software right. Attached is my log of the Ad-aware scan. Please help:

Logfile of HijackThis v1.98.2
Scan saved at 6:26:18 AM, on 9/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\PREVX\Prevx Home\PXAgent.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\System32\S3tray2.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE
C:\WINDOWS\System32\IEHost.exe
C:\PROGRA~1\INTERN~2\inetmgr.exe
C:\WINDOWS\system32\pcs\pcsvc.exe

6 more replies

Apparently the new things on forums are either Rickrolling or shortly commenting "keylogger" when someone posts a link. Atleast thats the case on the WoW forums and GameFAQs.

So I am now afraid to log into WoW, or anything for that matter. I ran a virus scan using HouseCall (the first link that came up when I Google'd "free virus scan") and it ended up freezing my computer. So should I just blow this off? I'm afraid that if I do, I might wake up to the message "Your password has been changed" when I go to log into WoW tomorrow. Please let me know, and if it is something I should worry about, can you tell me of a good, reliable virus scan site that will get the job done quick and not take like 3 days...

And I'm sorry if I'm an idiot and this is completely dumb and its just some forum ... Read more

More replies

I was surfing the web and I came to a website and Windows made the noise that indicates that a download is complete and I suspect the website downloaded a virus to my computer. I ran all my anti-viruses and spyware programs and it cant find anything. I am wondering if there is some sort of thing on XP that logs all your downloads, because that would help a lot. Or maybe Im a bit paranoid?

Hi, I don't know of a specific feature like that, but you could wade through the Temporary Internet Files folder for whatever account you were using at the time...sounds easier than it is, thousands of files in there...so, since none of the scans found anything, why not just post a Hijackthis log to check?

Hijackthis does not show all malware, but it's the place to start.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log. DO NOT fix any items at this time!
You must have ALL browser windows CLOSED when you "fix" items with Hijackthis..
we will help you later to do that. Most of what HJT shows IS NEEDED!
Click Save to save the log file and then the log will open in notepad.
At the top of the Notepad HJT log screen, hit Edit then Select All, then click Edit and then click Copy, doing that copies the text to the clipboard, you won't see it yet....

3 more replies

Recently - I've been having a strange problem. when I download a photo or image, or even capture a screen shot and save it to a folder, I cannot see it in that folder. I originally thought i had not hit save properly or not saved a file that I thought I had - but when i tried to re download an image or capture it again and name it the same thing - I got a message saying there was already a file by that name in the folder.

I have tried ensuring all hidden files are shown, and refreshed the window to no avail. but when i restart the computer, I am able to see the files in the folder as the should have been displayed all along. also confusing - when i look in the folder after saving...say if I've saved 12 images into the folder from the net or screen capture, but the folder is only displaying 1 image - it was say the folder only contains one image...

how can i fix this so i do not need to reboot every time i want to see newly created images?

Sounds like a view issue on the folder itself, to be honest.

2 more replies

it's sitting right there but it WON'T OPEN
my .exe file extension went poof.
i added it again. It disappeared again.
so did .lnk

my cursor disappears on me every ten seconds as I type,
as if the window I'm not typing on needs refreshing.

i'm running gmer [the gmer window pops up to tell me] now...[popped up again]
[and again]

it's like the bird flu has hit my Sony.

HIJACK THIS

Logfile of HijackThis v1.99.1
Scan saved at 12:49:29 AM, on 4/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\svchost.exe
C:\Program Files\QuickBooks Online Backup\CBSysTray.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\QuickBooks Online Backup\AgentSrv.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe C:\WINDOWS\system32\svcho... Read more A:it all started when I downloaded IE7... 6 more replies Answer Match 29.4% HI,I've got malware problems, I'm tired of paying mac bleepty, and heard about AVG.I downloaded DDS, but can't seem to down load GMR. I have vista home premium 32 bit running on a 64 bit computer, mainly because some of my old programs wouldn't run on vista ultimate 64 bit software. I've attached the two files requested.PaulActually, I have to add that Gmer downloaded but is trying to extract and doesn't seem to be able to. I tried getting task manager up to shut it down and try again but task manager gives a file error...I'm tempted to reboot and try running gmer again.PaulEDIT: Posts merged ~BPHi,I was finally able to run gmer in safe mode, and have attached the log file. Hopefully you guys aren't too busy. For the most part, right now I think I have a malware problem, where a program comes up and tells me I have worms, or identity theft and to purchase their software to fix the problem. Thanks in advance for your help.PaulEDIT: Posts merged ~BP A:DDS downloaded but not GMER Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop. Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more 3 more replies Answer Match 29.4% Yeah... Oops.. I scanned it and it was clean, but then I used one of those online scanners (Virustotal etc) and one of the scanners picked up Mal/Generic-A I googled it and from the looks it can be nasty... I'm scanning malwarebytes right now and it's found 1 item, but i'm scared it will still be on my machine somewhere. Help me Oh and I opened the file.. So it is in fact on my machine somewhere. A:Uh oh... I downloaded something with Mal/Generic-A 9 more replies Answer Match 29.4% Hello everyone! So, I don't know when this problem started, but probably a few days back. The EXEs I already had on my laptop run perfectly fine, but whenever I download an EXE from the internet, it doesn't do anything. I double-click them, open the task manager, look at the program I ran, and it gets stuck to a specific amount of memory usage (Depending on how heavy the program is), and some seconds later it closes. I can't see it on the task manager. Examples are: "WinRAR Installer", "FIFA 14 (After I installed but the game won't run)", "FiveM installer (A multiplayer client for GTA V)". I tried one thing and transfered the FiveM installer to another laptop which was new, and it worked! It was installing perfectly on that laptop. So I transfered the installed files back to my laptop, and when I ran the EXE that was installed (Along with a lot of other DLLs and related files that were installed with the program), it had the same problem. It got stuck to a certain amount of memory usage, and closed. Now I'm totally confused, I tried the fix on Microsoft's website (First Automatically, didn't work, then manually, that also didn't work). Any help would be much appreciated. Thanks. Greetings, Pardeep. A:Downloaded Executables Won't Run Try a clean startup - Troubleshoot Application Conflicts by Performing a Clean Startup Try installing in Safe Mode (with or without Networking), you will need to run SafeMSI.exe first when in Safe Mode. Please note that, successful installation depends on which services are needed by the installer. So one can fail and other work. 9 more replies Answer Match 29.4% Since upgrading my computer and reinstalling Windows XP Home with all upgrades, I haven't been able to run executable downloaded files (most recently openoffice but also Google Earth Pro trial). The files download properly but when I try to run them them, I get the message "This application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem." I have no problem installing programs from CD. I'm using IE beta 7 but have tried the same process using Firefox. All Windows Updates are complete. Running Norton AV 2003 and NVidia firewall set to Antihacking only. Any ideas? A:Can't run downloaded files Look here: http://www.mcse.ms/archive59-2004-7-898432.html 1 more replies Answer Match 29.4% When I download files using ie the download window indicates the files are downloaded but they are not there. I've been able to see the files being deleted instantaneously after being downloaded. Thanks A:downloaded files not there Does this problem only occur in Internet Explorer, or do you have another browser that works correctly? Have you tried doing a System Restore to fix the problem? If you can, post a HijackThis scanlog: Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply http://www.thespykiller.co.uk/files/hijackthis_sfx.exe I recall a rather similar, and unfortunately unresolved, problem in this thread. You might compare notes with it, particularly in regard to the programs you see in the Scanlog: http://forums.techguy.org:80/windows-nt-2000-xp/465930-cant-complete-downloads.html? 1 more replies Answer Match 29.4% Some downloaded will not open getting message: "Thie program is blocked by group policy. For more information, contact your system administrator" I am the administrator on my own personal computer. No one else uses it. A:Some downloaded will not open... 10 more replies Answer Match 29.4% I downloaded Genuine Advantage Validation tool (KB892130) but it hasn't been installed. I'd like to find the downloaded file and delete it before it gets installed when I reboot. Right now Windows Updater is threatening to install it automatically if I don't keep telling it to "install later." I need help right away or I'll be here pushing the button like the guy on the tv program Lost. Thanks A:Getting rid of a downloaded update (XP) 13 more replies Answer Match 29.4% I downloaded 3DMark from this site. 1.6 GB When it opened it went to a 'registery fixit'. I already have one and dropped out of that. But, I lost 3DMark. AND, I came back and downloaded it again! (duh) Each time took ~18 minutes. Again, when it oped it did the same thing. I was trying to get Properties fast before anything happened and I lost it again. Well, I was just in my game and my computer is sorta humming. I can't blame it on the new program, but I've gotta find this thing and get it off my computer. Can anyone help? Pennie A:Downloaded 3D, can't find it Where do you have your browser set to put downloaded files? Go to that folder & see if it is there, if so, delete it. I hope its that easy for you. 1 more replies Answer Match 29.4% I have this annoying little thing down on the taskbar that keeps spamming this message. ------------------------------------------------------------------------------------------------------- Systam Alert: [email protected] Type: Spyware/Trojan Vulnerable: Windows 95/98/ME/NT/2003/Windows XP Description: Spyware program that sends confidential information to a remote attacker Protection: Click this balloon to download official security software. ------------------------------------------------------------------------------------------------------- Now, I have Windows Vista, but its obviously still being affected. I keep getting pop-ups for fake spyware-removal programs, and it's so obvious they're fake that it's not even funny. It also changes my homepage to http://iexplorerpage.com/. I didn't "click this balloon to download official security software" because I'm too smart for that old gag (Although not smart enough to avoid getting this virus in the first place). So first thing that comes to my mind is "Search for it on google". I found another topic on this site which said to get HijackThis and post what the log says. So here it is. Logfile of HijackThis v1.99.1 Scan saved at 9:14:52 AM, on 5/28/2007 Platform: Unknown Windows (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16386) Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\RtHDVCpl.exe ... Read more A:I Downloaded A Virus. Bump... I really need help >.< 2 more replies Answer Match 29.4% I use windows XP and I need HELP lol I was having trouble with Yahoo so I uninstalled it and now I can't get it reinstalled. Also have tried downloading different programs and can't get anything downloaded Any help would be appreciated. A:I can't get anythig downloaded 9 more replies Answer Match 29.4% Logfile of HijackThis v1.99.1Scan saved at 4:05:35 PM, on 10/19/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\system32\HPConfig.exeC:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXEC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\windows\system\hpsysdrv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\DAEMON Tools\daemon.exeC:\Program Files\Java\jre1.5.0_07\bin\jusched.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\Program Files\Microsoft AntiSpyware\gcasDtServ.exeC:\Program Files\Internet Explorer\i... Read more A:I Think I Downloaded Something For A Game Hello Deee, Please confirm that you have run the following scans or run them now. Save any logs that you generate - we may need them later.Do not post any logs unless I ask you. ***************************************************Please download, update and run (one at a time of course!) Spybot 1.4 and Adaware SE 1.06.r1 Fix whatever they suggest. If you need help running these tools, here are some helpful tutorials.Spybot Tutorial Adaware SE Tutorial Be sure to run Adaware SE with a Full Scan in the Safe Mode.How to Reboot into Safe Mode tap F8 key during reboot, until the boot menu appears...use the arrow keys to choose "Safe Mode" from the menu......,then press the "Enter" key. If that does not work this go to this site: http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/ Ad-Aware SE Setup***************************************************Please download, update and run the free A2 (A squared) anti-trojan Select the "Deep Scan" button and press the Scan button.If malware is found, click the button "Remove Selected Malware"and save the log file by clicking on "Save Report". Let it delete whatever it finds. *************************************************** I know you may have anti-virus software, but sometimes its definitions are corrupted due to malware. Online scans are the best resort in this case. Run this pc through theTrend Micro Housecall Online virus scanneror Panda Scan Online... Read more 2 more replies Answer Match 29.4% hi, i was wondering if you would be able to help me, i recently downloaded freelancer off of bittorrent (I heard that if you already bought the game it's fine to download, but my disc got scratched) In the folder the two kinds of filed are the larger .IMG file and the smaller .SUB file. I am absolutely clueless on how to actually play the game!! any help would be extremely appreciate it! A:Downloaded game I'm sorry we have to say this. We cannot help you with illegal activies because you said you download it off the torrent. 2 more replies Answer Match 29.4% I have downloaded several dvd's that my pc will not play. It plays the sound, but not the visual. It tells me I don't have the codec needed. I downloaded the suggested codec, but they still won't play. What do I do? A:Can't play downloaded DVD's 7 more replies Answer Match 29.4% Alright, so, firstly, I know nothing about computers, but I was on MSN messenger, and got one of those infected "hey, is this you" followed by some sort of link messages, and stupid me, I clicked and accepted. I've been reading forums, but I don't get what to do, I've done some research, and I'm thinking it's a trojan thingy, and a leap virus, because once I downloaded it, I automatically sent it to everyone on my contact list, and an hour later, my computer automatically restarted. So for days now, I've been trying to fix it, and I think I know the file it's in, or at least close (C:/system32 hosts, or smss), the problem is, the Hijackthis scan, skips that folder, probably because the thing controls my computer, and, If I try delete related files, it says that I need permission to do so, yet I'm on the administrative account, so I guess if anyone know's what ever is going on, that would be awesome. Here's my Hijackthis log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:08:07 PM, on 03/03/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Safe mode with network support Running processes: C:\Windows\Explorer.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Program Files\Internet Explorer\iexplore.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.ca/0SEENCA/SAOS01?FORM=TOOLBR R1 - HKCU\Software\Microsoft\... Read more A:So, I downloaded this thing. Bump! If anyone could help, I'm desperate, my computer's getting worse everyday. 1 more replies Answer Match 29.4% Last nite something tried downloading to my system. I THOUGHT I denied it permission, but immediately A squared IDE started popping alerts whenever I opened any browsers or Outlook Express. (Since I thought I had denied it access to download, I didnt really pay attention to the warning). So far nothing has tried accessing the internet (i.e., no Zone Alarm requests) but I do assume something "wrong" is here. Here is my Hijackthis log: Logfile of HijackThis v1.99.1 Scan saved at 5:17:48 AM, on 6/7/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Microsoft Hardware\Mouse\point32.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\WINDOWS\SnoopFreeUI.exe C:\Program Files\a2\a2guard.exe C:\Program Files\WinAlarm\WinAlarm.exe C:\Program Files\SpywareGuard\sgmain.exe C:\Program Files\SpywareGuard\sgbhp.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINDOWS\System32\SnoopFreeSvc.exe C... Read more A:Help! Something downloaded and Cant find it Hi and welcome to TSF. I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem a.s.a.p Please be patient with me during this time. 9 more replies Answer Match 29.4% I've recently downloaded a couple files. One is a game (from GOG.com), another a BIOS update (from Dell), among others. When trying to open either of the two above, I get the following error message: "The version of this file is not compatible with the version of Windows you're running. Check your computer's system information to see whether you need an x86 (32-bit) or x64 (64-bit) version of the program, and then contact the software publisher" Another recently downloaded program gives me a checksum fail type of error message. I've kept up to date with Microsoft updates, and have tried running them in various compatability modes, but get the same message each time. Any help or insight would be greatly appreciated, as I am rather significantly tech illiterate. Thanks! Computer: Dell Alienware M15x Processor: Intel Core i3 CPU, M350 @ 2.27GHz RAM: 3GB OS: Windows 7 Home Premium (64-bit), (Service Pack 1) A:Downloaded Software Won't Run Hello uhohspaghettios and welcome to TSF, There are certain 32 bit programs, especially binaries, that will not run in a 64 bit environment. Could you provide me the links to the programs you are attempting to run? 3 more replies Answer Match 29.4% I need to know where are the downloaded files stored in Windows 7 that are installed in background through 500kb installers. Thanks A:Where is my downloaded file Do you know what they are called? Try typing the name, or part of the name, in the box that pops up when you hit the start button, then right click on the name and click on "Open File Location" Or you could look in "Downloads" - Type that in the box and "Open File Location", you should find them there. 3 more replies Answer Match 29.4% Hi, I downloaded Windows 7 RC 64 bit and I'd love to install in on a partition on my PC ... only ... how do I make a bootable image of it? I've downloaded ISOBuster as suggested at the Microsoft site, I also have MagicISO free version and Nero 8 Ultra, none of these seems to want to work for me. I did a Nero copy of the image which apparently has nothing to do with a bootable image ... duh. The MagicISO seems like it will work if I purchase it ... first things first ... can I do it for free? The ISOBuster seems absolutely impossible to decipher it's "Simplicity"? Can Nero make a bootable image? Can anyone pray tell me what I don't know. I'm really eager to hear it. Thanks, John PS I hope my dumbness is only temporary! A:OK, I got Windows 7 RC 64 bit downloaded. Have you tried Imgburn? 10 more replies Answer Match 29.4% Ever since like 3 days ago the laptop computer has been REALLY slow. IE doesn't even open up anyone (just white screen). It takes 10minutes when I turn on the computer just to be able to click on start. A lot of error messages asking me to fix this and that keep coming up (and they are not in the form of a pop up) They look like real windows messages. here is my HTJ log Thank you for your time. A:I pretty sure something bad got downloaded Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:37:56 PM, on 2/14/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe C:\WINDOWS\eHome\ehRecvr.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Program Files\McAfee.com\VSO\oasclnt.exe C:\WINDOWS\eHome\ehSched.exe c:\program files\mcafee.com\agent\mcdetect.exe C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\Program Files\QuickTime\qttask.exe c:\PROGRA~1\mcafee.com\agent\mctskshd.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files... Read more 3 more replies Answer Match 29.4% I downloaded a game called the curse of monkey island through a torrent. i already own the game, but it was scratched. Once i finished downloading it, It was of course in image file, so i ran it through daemon tools. Autorun worked and everything, but when i clicked on install the clock showed next to the mouse for a few seconds then it stopped and nothing happened. Then i went into the main folder and clicked setup.exe and ran as administrator.. again nothing hapened.. Ive tried burning it to a disk too with no luck. A:Cant Run A Game I Downloaded. This game was released in '97. I doubt if it will even run on Vista. You can try compatibility mode 3 more replies Answer Match 29.4% i have norton antivirus 2007 and i do the scan and everything gets fix except for the downloader misleadapp, i went thru the removal process about 3 times and nothing happens to it what do i do?? thank you david A:downloaded misleadapp help!!! please!! 13 more replies Answer Match 29.4% Hi...First time here...so not really sure what I am doing...I have been reading the forums a little bit and decided to download hijackthis...this is what i got...not sure what to do now... I noticed an issue when i start my computer ...the hp invent blue screen comes up and then it goes to a black screen with a blinking cursor for about 50 secs and it never did this before...at the 50 secs it boots alright...i was just wondering if this was bad and how do i fix it... Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:20:07 PM, on 3/12/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\arservice.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\ARPWRMSG.EXE C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\Program Files\Hp\HP Software Update\HPWuSchd2.... Read more More replies Answer Match 29.4% I downloaded two viruses today. 1) VBS/Psyme and; 2) JS/IEStart.gen.d. Both were detected by McAfee but when I went to delete them, I got a message back saying that they could not be deleted. I am basically a computer novice - I need help and guidance to figure out what to do next. Can someone please give me assistance? A:Two Viruses that I downloaded 15 more replies Answer Match 29.4% Okay, somebody please correct me if I'm wrong. My main goal is I want to burn avi files onto blank DVDs files I have on my computer. If I'm not mistaken, based on all the information I've read from lots of people on this site, I assume the following is correct, but if not, somebody with experience in this subject please help! 1. i have a downloaded .avi movie from the internet around 700,000Kb or so 2. I'm thinking that I'm supposed to use VirtualDub to capture and make a file of JUST the audio from the file and make it a .WAV 3. Then I use TMPGEnc to convert ONLY the video of the original downloaded file to mpeg-2. 4. Now I'm confused. Somehow or another I guess I'm supposed to fuse the two separate files together and "shrink" the newly created mpeg-2 file. And since the complete file is going to be really big, do I have to "compress" it somehow so it will fit onto the standard DVD+R? And can I do all this with Ulead Movie Factory 2E? That's the program that came with my DVD burner. 5. If I'm leaving something out PLEASE tell me, folks! You all have helped me every time in the past, and I am really grateful for that. A:downloaded avi-->mpeg-2-->DVD+R Originally posted by NYCaztecDC: Okay, somebody please correct me if I'm wrong. My main goal is I want to burn avi files onto blank DVDs files I have on my computer. If I'm not mistaken, based on all the information I've read from lots of people on this site, I assume the following is correct, but if not, somebody with experience in this subject please help! 1. i have a downloaded .avi movie from the internet around 700,000Kb or so 2. I'm thinking that I'm supposed to use VirtualDub to capture and make a file of JUST the audio from the file and make it a .WAV 3. Then I use TMPGEnc to convert ONLY the video of the original downloaded file to mpeg-2. 4. Now I'm confused. Somehow or another I guess I'm supposed to fuse the two separate files together and "shrink" the newly created mpeg-2 file. And since the complete file is going to be really big, do I have to "compress" it somehow so it will fit onto the standard DVD+R? And can I do all this with Ulead Movie Factory 2E? That's the program that came with my DVD burner. 5. If I'm leaving something out PLEASE tell me, folks! You all have helped me every time in the past, and I am really grateful for that. Click to expand... "Minimum wage is just another way of saying, 'If I could pay you less, I would!' "Click to expand... 1 more replies Answer Match 29.4% Hi everyone - hope this is posted in the right area I am trying to download a file from this page - http://www.futuresmag.com/industry/downloads/downloads.html when I click on the blue text of my choice, a box pops up asking me whether I want to open it from its present location or save it to disk. If I choose open it, a box comes up showing the download in process - at the end, I get a WinZip box, which says that this is an 'evaluation copy' and asks me what I want to do - agree to the evaluation conditions, quit, or get ordering info. I click agree, and I get a Winzip Wizard. I start trying to click my way through this process - I get screens like - 'Would you like to Unzip or Install from optr_por[1].zip' (I say yes) and then "Click now to unzip to selected folder, C:/unzipped/optf_por[1]. I say yes - a box comes up which says the files have been successfully unzipped to this location, and then a Windows Folder called TEMP pops up with an file inside it - the file is a Winzip icon, and seems to be the file I have just downloaded - it is called "optf por".... Seems good so far. Then I click on it, hoping to see the document I have attempted to download. But I get a small box that says 'WinZip self extractor' at the top, and which says 'To Unzip all files in optf_por.exe to the specified folder, press the unzip button'. The specified folder is C:/WINNT/TEMP. I press Unzip and... a tiny box comes up which shows the p... Read more A:where is my downloaded file? mset It can be confusing trying to keep track of where downloaded programs unzip to especially using winzip. I think your first step should be to clean out the default folder winnt temp. I don't believe there is anything needed there but just to be on the safe side don't delete anything from the recycle bin until you're sure you can reboot and run programs without error messages. Next instead of letting the program run itself without installing on your hard drive create a new floder on the C drive tree or whatever your hard drive letter is and save it to that folder (save to disk, browse, choose that folder C:temp that you created.) That way if it unzips to the winnt folder it should be the only program in there, plus you have the original download on your computer so you won't have to keep downloading each time . As to what program to use to open the file that depends on what kind of program it is. Good luck 1 more replies Answer Match 29.4% I downloaded a wolf3d from utorrent it is resident on my desk top and when I click on it a command box apears and at the top it says C:\docume~1\minemi~1\desktop\wolf3d.exe. I try to delete it ands it says cannot delete wolf3d:it is being used by another person or program. Close any programsthat might be using the file and try again. here is the log from dss Deckard's System Scanner v20071014.68 Run by Mine Mine on 2008-06-13 08:00:52 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as Mine Mine.exe) ------------------------------------------- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:01:17 AM, on 6/13/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\CheckPoint\ZAForceField\ForceField.exe C:\Program Files\Godlike Developers\RAM Saver Pro\ramsaverpro.exe C:\Program Files\Spybot - Search & D... Read more A:downloaded program Thanks but i figured it out myself. Just took me a while to figure it out after being up for almost 48 hours. Brain wasn't functioning. But I got it. 1 more replies Answer Match 29.4% Hi ,I downloaded a movie and can't seem to get it to work on quick time player. Can anyone tell me the best utlity to watch a movie on. Thanks A:downloaded movies(what is the best... 7 more replies Answer Match 29.4% I was sent a file that was spose to be a APP on playstation burning, stay away from this file. Now I cant get into to my control panel I cant remove programs, my zip files are unreadable....... nothin! It doesnt seem like a virus. Its like a nonremoveable .EXE Can someone help me!!!!!!!! A:downloaded bullsh*t please help 6 more replies Answer Match 29.4% could you tell me where the downloaded updates are ? More replies Answer Match 29.4% Could I be mistaken? I downloaded this utillity, and it seems to make alot of my apps. run faster...even pageloading on the internet. Anyone know any more about this program? I got it from ZDnet. A:just downloaded pc accellerator It appears to be a pretty decent and harmless program that just gives you an interface to change some settings that you would otherwise need to know how to edit the registry. If you used it to change some settings then it may well have helped. 1 more replies Answer Match 29.4% I have a 'flash gear' card reader which works with my old SanDisk Ultra II 2.0GB camera card. My new Sony HC 4GB card returns I/O error and crashes the reader. How can I cure this please guys or do I have to upgrade the reader which i have had for years? A:SD card cannot be downloaded mazda said: do I have to upgrade the reader which i have had for years?Click to expand... Unless it is an SDHC compatible reader that you've had for years, the answer is yes, I just bought an SD card reader for$7.99 this morning.

1 more replies

I made the stupid mistake of downloading "trial" version of PCMightyMax that I saw referenced in forums. At the end of the download it told me I had 309 problems but it wouldn't "fix" them without ordering it. Which is ok; however, now I'm getting a constant popup telling me about my numerous problems and the "PC ambulance" is parked on my start bar. I hunted an uninstall (Add/Remove programs) and in Windows Explorer Programs file and it didn't have one so I just "deleted" it out of window explorer programs file. But I still have the popup and the ambulance parked on my desktop. Anyone know how to get rid of this? Did the CWS thing and it says my computer is clean. Here is my HJT file:
Logfile of HijackThis v1.97.7
Scan saved at 2:20:28 PM, on 8/31/04
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\SXGDSENU.EXE
C:\MOUSE\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\REGPROT\REGPROT.EXE
C:\WINDOWS\REALTIME.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\UNZIPPED\HIJACKTHIS[1]\HIJACKTHIS.EXE

As far as the CD-Rom goes.. Try installing a new ASPI layer.. Forceaspi is probably the easiest way to do this.. http://radified.com/ASPI/forceaspi.htm

Check the run statement in you win.ini file in your windows directory for a call to the unwanted program.. I don't see it in your log..

1 more replies

I started having problems with my computer a couple of days ago, it started with an internet screen popping up saying HTTP 404 ERROR considering i wasn't even on the internet became a reason for concern. Since my free version that came with this computer that i bought was done i needed to try and find something else. I was recommended to goggle for spybot search and destroy the free version and when i did this a lot of searches came up so i decided to try the first one with that one telling me after i had downloaded it that i needed to pay in order to fix the problems...well i was not willing to do this so instead i decided to try a different one well needless to say the same thing kept happening to me i continued to download different ones with each saying the same thing i needed to pay! well then my computer started just randomly popping up screens every few seconds. I uninstalled most everything that i downloaded but somehow it was stilling popping screens up at me. I now have this 'system security' that i downloaded but it does not give me an option to uninstall, and my computer is still unprotected. I guess my question is Can you help me?

More replies

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz, x86 Family 15 Model 4 Stepping 1
Processor Count: 1
RAM: 765 Mb
Graphics Card: Intel(R) 82865G Graphics Controller, 96 Mb
Hard Drives: C: Total - 76308 MB, Free - 45249 MB; E: Total - 381551 MB, Free - 274164 MB;
Motherboard: Dell Computer Corp., 0WC297, , ..CN70821551008X.
Antivirus: AVG Anti-Virus Free Edition 2011, Updated: Yes, On-Demand Scanner: Enabled I cannot play any games such as mass effect 1or2 without nvida wich will not work on my little pc? what do i need to download to enhance my graphics package ed