Tech Problem Aggregator

HiJack This Downloaded - Now What

Q: HiJack This Downloaded - Now What

Hello, I have followed all the instructions for downloading the HijackThis Freeware.I am now at the point where I have saved the log file to Notepad.Ok Where Do I Send it now? Here Is my LogfileLogfile of HijackThis v1.99.0Scan saved at 10:30:14 AM, on 1/18/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exec:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\WINDOWS\Explorer.EXEc:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\System32\hkcmd.exeC:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exeC:\WINDOWS\System32\hphmon05.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\WINDOWS\LTMSG.exeC:\Program Files\Common Files\Real\Update_OB\rnathchk.exeC:\WINDOWS\system32\ps2.exeC:\Program Files\QuickTime\qttask.exeC:\documents and settings\owner\local settings\temp\R.exeC:\documents and settings\owner\local settings\temp\kfGQ7Y.exeC:\documents and settings\owner\local settings\temp\wn3.exeC:\Program Files\Web_Rebates\WebRebates0.exeC:\Program Files\DeskAd Service\DeskAdServ.exeC:\temp\salm.exeC:\Program Files\DeskAd Service\DeskAdKeep.exeC:\WINDOWS\Xhrmy.exeC:\documents and settings\owner\local settings\temp\Ln.exeC:\WINDOWS\ALCXMNTR.EXEC:\WINDOWS\System32\igfxtray.exeC:\windows\system32\HmLh.exeC:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exeC:\windows\system32\6d.exeC:\WINDOWS\System32\drwtml.exeC:\Program Files\Messenger\msmsgs.exec:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\system32\HmLh.exeC:\WINDOWS\wanmpsvc.exeC:\Documents and Settings\Owner\Application Data\wtta.exeC:\PROGRA~1\COMMON~1\tsa\tsm2.exeC:\PROGRA~1\COMMON~1\tsa\ts2.exeC:\Program Files\America Online 9.0\aoltray.exeC:\Program Files\Compaq Connections\1940576\Program\BackWeb-1940576.exeC:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeC:\Program Files\Web_Rebates\WebRebates1.exeC:\Program Files\CxtPls\CxtPls.exeC:\WINDOWS\System32\wuauclt.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Windows NT\Accessories\wordpad.exeC:\WINDOWS\system32\m?iexec.exeC:\Program Files\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\WINDOWS\System32\SearchBar.htmR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://qus10.hpwis.com/R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR3 - Default URLSearchHook is missingO2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\CxtPls\cxtpls.dllO2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Common\ycomp5,1,1,0.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: Search Relevancy - {1D7E3B41-23CE-469B-BE1B-A64B877923E1} - C:\PROGRA~1\SEARCH~1\SEARCH~2.DLLO2 - BHO: Setup.Setup1 - {2E65A557-173C-4DE9-860B-28FC5CACA542} - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Setup\Setup.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: (no name) - {539857E1-9C2A-9A8A-2811-99DC493CBBB9} - C:\WINDOWS\System32\ztf.dllO2 - BHO: LinkTracker Class - {6A6E50DC-BFA8-4B40-AB1B-159E03E829FD} - C:\WINDOWS\System32\lmf32v.dllO2 - BHO: CleanMyPC Popup Blocker - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - C:\Program Files\CleanMyPC Popup Blocker\CleanBHO.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dllO2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dllO2 - BHO: Band Class - {CC378B83-9577-44D0-B4F8-0DD965E176FC} - C:\Program Files\eSyndicate\esyn.dllO2 - BHO: Search Help - {E8EAEB34-F7B5-4C55-87FF-720FAF53D841} - C:\Program Files\Middadle\Clicks10017.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dllO3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Common\ycomp5,1,1,0.dllO3 - Toolbar: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dllO3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - C:\Program Files\CleanMyPC Popup Blocker\CleanBar.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [CamMonitor] c:\Program Files\HP\Digital Imaging\Unload\hpqcmon.exeO4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exeO4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exeO4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /rO4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [LTMSG] LTMSG.exe 7O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [R] C:\documents and settings\owner\local settings\temp\R.exeO4 - HKLM\..\Run: [Bakra] C:\WINDOWS\System32\IEHost.exeO4 - HKLM\..\Run: [2P6WFAX43ZHE7C] C:\WINDOWS\System32\VmvDvb.exeO4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMainO4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\Hotbar\bin\4.4.9.0\WeatherOnTray.exeO4 - HKLM\..\Run: [kfGQ7Y] C:\documents and settings\owner\local settings\temp\kfGQ7Y.exeO4 - HKLM\..\Run: [wn3] C:\documents and settings\owner\local settings\temp\wn3.exeO4 - HKLM\..\Run: [WebRebates0] "C:\Program Files\Web_Rebates\WebRebates0.exe"O4 - HKLM\..\Run: [lHZa] C:\windows\lHZa.exeO4 - HKLM\..\Run: [Q8uepDcW] C:\windows\Q8uepDcW.exeO4 - HKLM\..\Run: [DeskAd Service] C:\Program Files\DeskAd Service\DeskAdServ.exeO4 - HKLM\..\Run: [salm] c:\temp\salm.exeO4 - HKLM\..\Run: [cbenuzib] C:\WINDOWS\cbenuzib.exeO4 - HKLM\..\Run: [otVhSkdkB] C:\documents and settings\owner\local settings\temp\otVhSkdkB.exeO4 - HKLM\..\Run: [xhrmy] C:\WINDOWS\Xhrmy.exeO4 - HKLM\..\Run: [Ln] C:\documents and settings\owner\local settings\temp\Ln.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exeO4 - HKLM\..\Run: [HmLh.exe] c:\windows\system32\HmLh.exeO4 - HKLM\..\Run: [6d] C:\windows\system32\6d.exeO4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"O4 - HKLM\..\Run: [x38O35O] drwtml.exeO4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [msisip] C:\WINDOWS\system32\msisip.exeO4 - HKCU\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\Symantec\LIVEUP~1\SNDMon.EXEO4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"O4 - HKCU\..\Run: [Notn] C:\Documents and Settings\Owner\Application Data\wtta.exeO4 - HKCU\..\Run: [Tsa2] C:\PROGRA~1\COMMON~1\tsa\tsm2.exeO4 - HKCU\..\Run: [Jlebslym] C:\WINDOWS\System32\m?iexec.exeO4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exeO4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\1940576\Program\BackWeb-1940576.exeO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exeO8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.htmlO8 - Extra context menu item: Web Rebates - file://C:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/ClickYes.../bridge-c18.cabO16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.com/turbo_lister/US/install.cabO16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EP...l_v1-0-3-17.cabO16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildtangent.com/bgn/partner...ler/install.cabO16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cabO18 - Filter: text/html - {DFAA31C8-A356-4313-9D95-5EDAB46C5070} - C:\WINDOWS\System32\lmf32v.dllO23 - Service: AOL Connectivity Service - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exeO23 - Service: Symantec Event Manager - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: Norton AntiVirus Auto Protect Service - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exeO23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exeO23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exeO23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: WAN Miniport (ATW) Service - America Online, Inc. - C:\WINDOWS\wanmpsvc.exePeggyMemphis

A: HiJack This Downloaded - Now What

You did that all perfectly. Now we get it all cleaned up.Put a checkmark next to the following entries in HijackThis. Make sure all other windows and browsers are closed before clicking on ?Fix Checked?.R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\WINDOWS\System32\SearchBar.htmR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qus10.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qus10.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qus10.hpwis.com/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qus10.hpwis.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://qus10.hpwis.com/O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\CxtPls\cxtpls.dllO2 - BHO: Search Relevancy - {1D7E3B41-23CE-469B-BE1B-A64B877923E1} - C:\PROGRA~1\SEARCH~1\SEARCH~2.DLLO2 - BHO: Setup.Setup1 - {2E65A557-173C-4DE9-860B-28FC5CACA542} - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Setup\Setup.dllO2 - BHO: (no name) - {539857E1-9C2A-9A8A-2811-99DC493CBBB9} - C:\WINDOWS\System32\ztf.dllO2 - BHO: LinkTracker Class - {6A6E50DC-BFA8-4B40-AB1B-159E03E829FD} - C:\WINDOWS\System32\lmf32v.dllO2 - BHO: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - C:\Program Files\SEP\sep.dllO2 - BHO: Band Class - {CC378B83-9577-44D0-B4F8-0DD965E176FC} - C:\Program Files\eSyndicate\esyn.dllO2 - BHO: Search Help - {E8EAEB34-F7B5-4C55-87FF-720FAF53D841} - C:\Program Files\Middadle\Clicks10017.dllO4 - HKLM\..\Run: [R] C:\documents and settings\owner\local settings\temp\R.exeO4 - HKLM\..\Run: [Bakra] C:\WINDOWS\System32\IEHost.exeO4 - HKLM\..\Run: [2P6WFAX43ZHE7C] C:\WINDOWS\System32\VmvDvb.exeO4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMainO4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\Hotbar\bin\4.4.9.0\WeatherOnTray.exeO4 - HKLM\..\Run: [kfGQ7Y] C:\documents and settings\owner\local settings\temp\kfGQ7Y.exeO4 - HKLM\..\Run: [wn3] C:\documents and settings\owner\local settings\temp\wn3.exeO4 - HKLM\..\Run: [WebRebates0] "C:\Program Files\Web_Rebates\WebRebates0.exe"O4 - HKLM\..\Run: [lHZa] C:\windows\lHZa.exeO4 - HKLM\..\Run: [Q8uepDcW] C:\windows\Q8uepDcW.exeO4 - HKLM\..\Run: [DeskAd Service] C:\Program Files\DeskAd Service\DeskAdServ.exeO4 - HKLM\..\Run: [salm] c:\temp\salm.exeO4 - HKLM\..\Run: [cbenuzib] C:\WINDOWS\cbenuzib.exeO4 - HKLM\..\Run: [otVhSkdkB] C:\documents and settings\owner\local settings\temp\otVhSkdkB.exeO4 - HKLM\..\Run: [xhrmy] C:\WINDOWS\Xhrmy.exeO4 - HKLM\..\Run: [Ln] C:\documents and settings\owner\local settings\temp\Ln.exeO4 - HKLM\..\Run: [6d] C:\windows\system32\6d.exeO4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"O4 - HKLM\..\Run: [x38O35O] drwtml.exeO4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - HKCU\..\Run: [msisip] C:\WINDOWS\system32\msisip.exeO4 - HKCU\..\Run: [Notn] C:\Documents and Settings\Owner\Application Data\wtta.exeO4 - HKCU\..\Run: [Tsa2] C:\PROGRA~1\COMMON~1\tsa\tsm2.exeO16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/ClickYes.../bridge-c18.cabO16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - http://install.wildtangent.com/bgn/partner...ler/install.cabO18 - Filter: text/html - {DFAA31C8-A356-4313-9D95-5EDAB46C5070} - C:\WINDOWS\System32\lmf32v.dll *********************************************************************** Boot into SAFE MODE by tapping the f8 key during boot up.Open My Computer. Go to Tools, Folder Options and click on the View tab. Make sure that "Show hidden files and folders" is checked. Also uncheck "Hide protected operating system files". Now click"Apply to all folders"Click "Apply" then "OK. While you still have the My Computer Window open, click on C:\. Browse to these entries and delete them:C:\WINDOWS\System32\IEHost.exeC:\WINDOWS\System32\VmvDvb.exeC:\Program Files\Hotbar\bin\4.4.9.0\WeatherOnTray.exeC:\Program Files\Web_Rebates\WebRebates0.exe"C:\windows\lHZa.exeC:\windows\Q8uepDcW.exeC:\Program Files\DeskAd Service\DeskAdServ.exeC:\WINDOWS\cbenuzib.exeC:\WINDOWS\Xhrmy.exeC:\windows\system32\6d.exeC:\Program Files\AutoUpdate\AutoUpdate.exedrwtml.exeC:\WINDOWS\system32\msisip.exeC:\PROGRA~1\COMMON~1\tsa\tsm2.exeIf you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. If it is, uncheck it and try again.************************************************************************ Open IE, then click on Tools>Internet Options> then click on delete files. This will empty out your browser cache, and it may take awhile for it to run completely.Open notepad and paste in the following lines: del c:\ *.tmp del %temp%\*.tmp /f del %windir%\prefetch\*.* del %windir%\temp\*.* /f del C:\documents and settings\owner\local settings\temp\*.* Save to desktop as 'clean.bat' , file types as 'all-files'.DoubleClick on the icon, and say yes when prompted.Reboot and post a new log.

1 more replies
Answer Match 52.5%

Exorcism for my 'puter needed...

Couldn't find any old posts with repair info. Whatever it is, Smart HDD, destroyed Avira. Was on net & Avira picked it up around 5:15 pm yesterday and I thought it took care of it but, obviously it didn't. Smart HDD installed itself and won't delete. Serious write disc messages coming. Thought I lost all my files but found them.

Microsoft security said it took out 3 versions of SHDD but it's still there. Downloaded hijack and it started, froze and started again. Froze GMER when it got to shadow hd 3. Wouldn't let Housecall run. Didn't know what to delete with Kaspersky and another scanner that said more than 8,000 files were not right.

If I copy Word files to another medium, will they bring SHDD with them?

Thank you. ST
===================

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 32 bit
Processor: Intel(R) Pentium(R) Dual CPU T2330 @ 1.60GHz, x64 Family 6 Model 15 Stepping 13
Processor Count: 2
RAM: 2037 Mb
Graphics Card: Mobile Intel(R) 965 Express Chipset Family, 448 Mb
Hard Drives: C: Total - 112963 MB, Free - 34435 MB;
Motherboard: Intel Corporation, SANTA ROSA CRB
Antivirus: AVG Anti-Virus Free, Updated: Yes, On-Demand Scanner: Enabled

==========================
GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-04-18 13:01:30
Windows 6.0.6002 Service Pack 2
Running: slicer.exe; Driver: C:\Us... Read more

A:Solved: Downloaded hijack and whatever it is froze hijack killed avira

16 more replies
Answer Match 48.3%

Hi
Downloaded hijack but not sure how to use it. Any help will be appreciated. kcanary
Logfile of HijackThis v1.97.7

Scan saved at 10:25:53 PM, on 3/8/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\clipsrv.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\tlntsvr.exe
C:\WINDOWS\System32\vssvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\mqsvc.exe
C:\WINDOWS\System32\mqtgsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wpabaln.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\America Online 9.0a\waol.exe
C:\Program Files\America Online 9.0a\shellmon.exe
C:\Program Files\America Online 9.0a\aolwbspd.exe
C:\Documents and Settings\Kathy Mikolas\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MsmqI... Read more

A:downloaded hijack - need help

16 more replies
Answer Match 47.88%

After downloading 'Hijack this' from http://www.greyknight17.com/spy/HijackThis.exe i noticed that i was infected by the 'bloodhound.exploit.6' virus. this virus seemed to be triggered when trying to save document files (i first noticed it when trying to save a lof file from hijack this), although symantec and microsoft knowledgebase state that it is a security issue with outlook express.
I have tried to use the microsoft patch but to no avail!
this virus may or may not have come from the hijack this file.
has anyone had this same problem, if so how did you get rid of it.

regards pyroluke

A:Possible virus Downloaded with Hijack this!!

I'll betcha a paycheck that it was there, already, dormant, waiting for it's moment in the sun.

The patch will prevent the infection, but it is seldom that the patch cures the infection.

Run an online virus scan at TrendMicro or RAV Antivirus. Select the Autoclean option if you use TrendMicro.

Then, see if you can get an HJT log up, here.

2 more replies
Answer Match 47.88%

I didn't know what I was thinking. I downloaded something and it's stuck. I kind of know what to delete, but I want to make sure before I go delete away. Plz help. TIA

Logfile of HijackThis v1.98.2
Scan saved at 5:05:54 PM, on 2/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Toshiba\Power Management\CeEPwrSvc.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\EzButton\CPLDBL10.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\Program Files\Common Files\Log... Read more

A:Downloaded Something Bad. HiJack Log Inside

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point.

Please download Ad-aware SE and install it if you don't have it already. Make sure it's the newest version and check for any updates before running it. Also go here to get the plug-in for fixing VX2 variants. To run this tool, go into Ad-aware->Add-ons and select VX2 Cleaner. Then click Run Tool and OK to start it. If it's clean, it will say Status System Clean. Otherwise, you will have to click on the Clean button to remove the VX2 infection. Also make sure to customize the settings in Ad-aware for better scan results. Run the scan and fix everything that it finds.

Download and install Spybot S&D. Run Spybot and click on the 'Search for Updates' button. Install any updates that are available. Next click on the 'Check for Problems' button. Let it run the scan. If it finds something, check all those in RED and hit the Fix Selected Problems button. Exit Spybot. If you keep getting the DSO Exploit entries, even after you updated Windows and fixed them, then download the Spybot DSO Exploit Fix and install it over the current Spybot installation.

The Temp folders should be cleaned out periodically as installation programs and hijack pro... Read more

6 more replies
Answer Match 47.88%

When I bootup my computer it gets to where I think it is almost finished booting and it says it is loading my personal settings and takes forever to finish. Can anyone tell me how to find my personal settings on XP Home.
 

A:downloaded Hijack please review

11 more replies
Answer Match 47.88%

Can someone tell me what to do to get rid of POPNAV and any other things that might be harming my computer? I just downloaded HiJack This and this is what the log showed me:

Logfile of HijackThis v1.97.7
Scan saved at 10:09:19 PM, on 2/24/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\iefeatures.exe
C:\Program Files\mail.com\mcalert.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = C:\WINDOWS\search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = C:\WINDOWS\search.html
R0 - HKCU\Software\Microsoft\Internet E... Read more

A:Just downloaded Hijack This, Need help with POPNAV

Hi kellyn24

Welcome to TSG!

Click here to download CWShredder. UnZip the file, close all browser windows and click on the cwshredder.exe then click "Fix" (Not "Scan only") and let it do it's thing.

When it is finished restart your computer.

To help prevent this from happening again, I strongly recommend you install the folowing patches for the vulnerabilities that this hijacker exploits:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms03-011.asp

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS00-075.asp

*Note: The simplest way to make sure you have all the security patches is to go to Windows update and install all "Critical Updates and Service Packs"

Go here and download Adaware 6 Build 181

Install the program and launch it.

First in the main window look in the bottom right corner and click on Check for updates now and download the latest referencefiles.

Make sure the following settings are made and on -------ON=GREEN

From main window :Click Start then Activate in-depth scan (recommended)

Click Use custom scanning options then click Customize and have these options selected: Under Drives and Folders put a check by Scan within archives and below that under Memory and Registry put a check by all the options there.

Now click on the Tweak button in that same window. Under Scanning engine select Unload recognized processes during scanning and under Cl... Read more

1 more replies
Answer Match 47.04%

I downloaded a trojan horse yesterday and now I keep getting pop ups from ie which I don't even use and firefox as well. Scotty the watch dog says this is the file that keeps trying to run C:\WINDOWS\system32\vtsqr.dll. and here is my hijack this log file please help.
Logfile of HijackThis v1.99.1
Scan saved at 1:55:32 PM, on 9/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe
C:\Program Files\InterVideo\Common\Bin\WinRemote.exe
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.ex... Read more

A:heres my hijack this log I downloaded a t.horse please help

Hi
Lets see if this will dig it out...


Please download VundoFix.exe to your desktop.Double-click VundoFix.exe to run it.
Put a check next to Run VundoFix as a task.
You will receive a message saying vundofix will close and re-open in a minute or less. Click OK
When VundoFix re-opens, click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
Please post the contents of C:\vundofix.txt and a new HiJackThis log.

9 more replies
Answer Match 47.04%

I hope someone can help me and tell me whats wrong with my pc.Any help will be greatly appreciated,thanx

Logfile of HijackThis v1.96.2
Scan saved at 1:35:06 AM, on 8/28/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\pctspk.exe
C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
C:\WINDOWS\TVTMD.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\foo1\foobin.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\shasha\Local Settings\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.couldnotfind.com/search_page.html?&account_id=50108
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = htt... Read more

A:I downloaded hijack this my scan inside

7 more replies
Answer Match 47.04%

I recently download sum sort of trojan virus at gamehacks.be nd it has messed up my computer and i am no longer able to access Diablo II (Online Game). Here is my hijack this log any help would be grateful...
Logfile of HijackThis v1.99.1
Scan saved at 1:02:08 PM, on 8/29/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\SYSTEM32\Brmfrmps.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Ap... Read more

A:Solved: Downloaded virus Hijack this log--HELP PLZ

10 more replies
Answer Match 46.62%

I went to a forum and next thing I knew I had goofed, it changed my homepage, I changed it back, but i still have extra toolbar here and cant get rid of it, a yallow thing flashed by saying I had tracking something or other on my comp, Plz look at log and help me.

Logfile of HijackThis v1.97.7
Scan saved at 11:43:10 AM, on 3/9/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpcc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpm.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpcc.exe
C:\WINDOWS\system32\DfrgFat.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Orbit\update.exe
C:\WINDOWS\Temp\LycosInstaller.exe
C:\Documents and Settings\Mary\Local Settings\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.orbitexplorer.com/cgi-bin/IESearch.cgi?bid=&affid=1gpp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.orbitexplorer.com/cgi-bin/IESearch.cgi?bid=... Read more

A:oops, downloaded something that changed my browser, plz look at my hijack log

6 more replies
Answer Match 46.62%

I use Windows XP SP3 and I have Panda Antivirus Global Protection 2009. Yesterday I downloaded a file on torrents and it turns out that it was infected with adware. I tried removing it myself using Malwarebytes Anti-Malware and Spybot - Search & Destroy but when I try to run the programs the processes start but the programs don't come up, this happens in safe mode aswell. I also ran a scan with Panda thinking its adware database might find something but sadly it didn't.

In Internet Explorer or Mozilla Firefox if I search on google and click on any links or if I try going to specific sites like Spybot's site I end up getting redirected to pages showing either random ads or other pages or one constantly reoccuring ad for Stopzilla. Also not sure if this is related but since I got this my computer has totally locked up explorer.exe and all 3 times in one day causing me to have to reboot every time.

Usually when I get crap like this I just slave over my computer on Google until I get rid of it which I usually do but this time I figured i'd seek out some help and save me a few days on Google. Thanks in advance for any help you can give.

DDS (Ver_09-03-16.01) - NTFSx86
Run by Jon at 23:03:16.46 on 06/05/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1167 [GMT -4:00]

AV: Panda Global Protection 2009 *On-access scanning enabled* (Updated)
FW: Panda Personal Firewall 2009 *enabled*

=======... Read more

A:Browser Hijack From An Infected Downloaded File

Thanks anyway for any help you were going to give but I've fixed the problem on my own.

2 more replies
Answer Match 45.36%

We use Windows ME. My wife downloaded spy stormer, and shortly there after our MSN and our Windows update no longer work.

Then, to try to fix it myself, I redownloaded msn, but now seem to have the beta version, and not the 6.2 i orgininally had.

The windows update error message is the following:
The Windows Update software did not update successfully. Below are some suggestions to help you proceed:
You may have clicked No when prompted to accept the Trust Certificate. To allow the Windows Update site software to install, click Yes when presented with the Security Warning dialog box.
Your Internet Explorer security settings may be set too high. To install the updated software and access Windows Update, Internet Explorer security must be set to medium or lower, and active scripting and the download and initialization of ActiveX controls must be enabled.

The error code I am getting for MSN is 80072f0d.

Since then, I've downloaded adaware and spybot, and have used them to try to fix my problem - and have used an online trojan finder and fixer, which did find a few on the machine.

I read through this forum, downloaded Hijack this - and here is my log file.
Your help is greatly appreciated.

Logfile of HijackThis v1.98.2
Scan saved at 4:52:35 PM, on 14/01/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WIN... Read more

A:Wife downloaded spy stormer, MSN and Windows update not working now - hijack log file

11 more replies
Answer Match 29.82%

I was working trying to fix my DVDFab express tonight, and I was using a keygenerator... bad I know... but anyways, I ended up downloading and installing something that made my desktop wallpaper go to white and flicker... THe program initiated a msdos looking window with an error message that asked me if I wanted to abort... I couldn't choose anything and had to reboot... that's when I found it had erased my wallpaper and I couldn't get it fixed.. i knew it was some kind of malicious program...

so i came to you guys and I have followed all your steps... My wallpaper is back and I think I have gotten rid of most stuf, but my computer is still running kind of weird, slow, just not the same....

I have ran Adaware SE Personal, Spybot, Notron Anti-Virus, Kapersky Online Scanner, CWShredder, and Spyware Blaster... Please see if something else is on there...

Thanks Guys!!!!

Here is my HijackThis log...



Logfile of HijackThis v1.99.1
Scan saved at 12:32:05 AM, on 12/31/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Intern... Read more

A:I Downloaded Something Bad!!!!

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Please download Ewido Security Suite at http://www.ewido.net/en/download/.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you will get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on Start Update.
7. The update will start and a progress bar will show the updates being installed. The status bar at the bottom will display 'Update successful'.
8. Exit Ewido. DO NOT scan yet.

If you are having problems with the updater, you can go to http://www.ewido.net/en/download/updates/ to update manually.

Download CleanUp! http://cleanup.stevengould.org/ (Alternate Link if main link don't work - http://www.greyknight17.com/spy/CleanUp.exe ) and install it. Don't run it yet.

Restart your computer and boot into Safe Mode (if you d... Read more

1 more replies
Answer Match 29.82%

Is there any utility that will tell me after the fact who downloaded anything to me? In my case, it's probably an update of some kind. But it has already happened because I see in Networx > General > Today that sometime this morning about 600 mb was downloaded to my computer. Is there any record of the source of this download in Win7, Firefox or some utility I can use to discover today's download, and to maintain a log in the future?

A:who downloaded to me?

Hello -It may not be unusual for a program to update itself if you are subscribed to it, like many Adobe products that Auto Update -Thank You - Detals of what Networx Can ShowText edited to show link to programs base

4 more replies
Answer Match 29.82%

Think i accidently downloaded something or not, Over the past week it has been getting slower and ie has now been hanging up. here is a dss log and thank you:Deckard's System Scanner v20071014.68Run by Gil on 2008-06-09 22:07:02Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --28: 2008-06-10 02:07:21 UTC - RP513 - Deckard's System Scanner Restore Point27: 2008-06-10 00:51:33 UTC - RP512 - System Checkpoint26: 2008-06-04 03:16:24 UTC - RP511 - Software Distribution Service 3.025: 2008-06-03 21:13:28 UTC - RP510 - Software Distribution Service 3.024: 2008-06-03 02:32:27 UTC - RP509 - Software Distribution Service 3.0-- First Restore Point -- 1: 2008-03-13 20:18:23 UTC - RP486 - System CheckpointBacked up registry hives.Performed disk cleanup.Total Physical Memory: 448 MiB (512 MiB recommended).-- HijackThis (run as Gil.exe) -------------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:10:47 PM, on 6/9/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16640)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC: ... Read more

A:Think I Downloaded Something, Help

Hello and welcome to BleepingComputer I don't see any malware there.Some points:Do you have a bought license for Norton? Or did you get it for free? The reason I'm asking is, it's a really heavy app for an antivirus. You can install a better antivirus that's waaaay lighter and easier for the computer, and takes less ram and actually is more efficient too.So, I recommend uninstalling Symantec's products and installing AntiVir (That's the promotion license for AntiVir Premium -- 6 months for free. You can get their free edition here) or Avast! instead.Another valid point: when did you install Service Pack 3? There has been several flaws with it.. Some people have really bad problems with SP3, I seem to be one of the lucky ones with no issues. Did you notice the problems after installing it?Also have a read through THIS TOPIC.Finally.....Click Start >> Run and paste in:"%userprofile%\desktop\dss.exe" /daftClick OK.Click OK to the prompt from Deckard's System Scanner.Click Scan.Checkmark every entry found.Click Fix.Let me know how you get on.

2 more replies
Answer Match 29.82%

I opened a file from AIM, and now all these programs are trying to modify my computer. All help would be appreciated.

Logfile of HijackThis v1.99.1
Scan saved at 8:10:06 PM, on 9/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Scansoft\PaperPort\pptd40nt.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\Program Files\Scansoft\PaperPort\SmartUI\SmartUI.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\BRMFRSMG.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_09\bin\jucheck.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\WINDOWS\system\wcisvc.exe
C:\Program Files\AIM\aim.exe
C:\Documents and Settings\Yolkavich\Desktop\HijackThis.exe

R3 - URLSearchHook: AOLTBSearch ... Read more

More replies
Answer Match 29.82%

Hey.
I have had some problems with my computer, and know I have tried my best. Someone told me to download Hijack and then post my log here. Could someone please take a look at it-, If there's something more to be done, please let me know.

Thanks

Logfile of HijackThis v1.98.2
Scan saved at 21:57:56, on 11.10.2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Programfiler\Fellesfiler\Symantec Shared\ccEvtMgr.exe
C:\Programfiler\Norton AntiVirus\navapsvc.exe
C:\Programfiler\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\ScsiAccess.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programfiler\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Programfiler\Nokia\Nokia PC Suite 5\DataLayer.exe
C:\Programfiler\Fellesfiler\Nokia\NCLTools\NclTray.exe
C:\PROGRA~1\ELEKTR~1\OPTISK~1\Amoumain.exe
C:\Programfiler\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\Programfiler\Fellesfiler\Symantec Shared\ccApp.exe
C:\Programfiler\Fellesfiler\Nokia\Services\ServiceLayer.exe
C:\Programfiler\Musikk\MUSICMATCH Jukebox\mmtask.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\bcmwltry.exe
C:\Programfi... Read more

A:Just downloaded HJ.

Download LSP Fix

LSP Fix download link

It's a program that can restore your internet connection if it's lost after the NewDotNet uninstall.

Uninstall NewDotNet via Start-Control Panel-Add or Remove Programs.

Restart your computer.

If that fails, then follow the instructions below:
PROCEDURE 4 (Download Uninstall from New.net):

From a computer that has Internet access, click on the following link:

NewDotNet uninstaller
Download and save uninstall6_22.exe to a 3-½ floppy disk.

Insert the floppy disk into the floppy drive of the computer that needs to have our software uninstalled from.

Click on Start.

Click on Run.

In the Open window type, A:\uninstall6_22.exe.

Click on the OK button.

Re-start the computer.

http://www.newdotnet.com/


Uninstall:

MyWay or MyWebSearch

Twaintech

Restart the computer.

Download and save these freeware/donationware programs to a permanent folder. Remember to check for updates and run them weekly.
***NOTE***A new version of Ad-aware has been released.
***ALSO***A new version of SpyBot's been released (v1.3...it's no longer in beta). If you have been using 1.2 you can install right over it. If you downloaded and used 1.3 beta it is suggested you remove it and reboot prior to installing.
Ad-aware SE download

Configure Ad-aware
First in the main window look in the bottom right corner and click on "Check for updates now." then click Connect and download the latest reference files.... Read more

1 more replies
Answer Match 29.82%

So I downloaded something and although avast said it blocked a trojan/virus, I just want to sure my PC is safe/clean. Think you guys can help me out? 
 
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 7:10:11 PM, on 2/5/2016
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.18163)
 
FIREFOX: 42.0 (x86 en-US)
Boot mode: Normal
 
Running processes:
C:\Users\Gene\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Gene\Downloads\HijackThis.exe
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Softwar... Read more

A:downloaded something...

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

2 more replies
Answer Match 29.82%

So far I like it. However, I do a lot of photos and cannot figure out how to set up a new folder and organize them. Any advice ? Thank you
 

A:Just downloaded W10.

10 more replies
Answer Match 29.82%

system running : windows XP professional with sp3

okay, as the title implies, while surfing the internet a tab appeared in the firefox window that said "Updating..." but never showed/displayed anything. After that, I noticed the windows start/tool bar had changed from the XP theme version to the classic version. Then i noticed that there was no network connectivity. When I tried to look up what was wrong, the properties, rename, and delete options have been disabled from the right-click menu.
I received a message that there was attempt to update registry but whatever was done was restored, then my PC reboot.
what I've done so far:
I tried to boot using the windows xp CD but nothing happens. Windows eventually boots up, but I don't get any options to run repair or anything.
Used CA anti-virus for scan and found nothing (did this again in safe mode and still found nothing)
I did a search to see if I could find what was modified, it shows that all user accounts including a Helpassist?? account have been updated in some form or fashion so i don't know what else to do

I see svchost.exe, services.exe, and system taking up 50% of CPU occasionally but not sure what to make of that.

to get the internet started I tried to turn on some network services but all failed due to 'timeout'

Please let me know any ideas, or how to get started on trying to fix this problem.

thanks,
homero
other pcs are connected to the internet just fine.

A:pop up downloaded something

any ideas? anyone? a starting point?

2 more replies
Answer Match 29.82%

i downloaded a thing i thought was safe but turns out my mcafee site advisor and mcafee software let a trojan get on my computer. it the TrojanDownloader:WIN32/zlob.ZWC. microsoft malicious software tool detects it but wont remove it. mcafee dont detect it at all.
 

A:HELP PLEASE i downloaded and cant get rid of it

* Click here to download HJTsetup.exe.
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

1 more replies
Answer Match 29.82%

Hello

I have setup every application to "ask me before checking for updates",

Even when I am not using any brower, email or any opther application, I notice that my lights on my modem are blinking quite fast... that is something is being downloded. It has been going on for quite sometime.

How do I find out what is being downloded (or uploaded)?

I use
toshiba laptop
window 7 prof
IE9
MS office 2010
Internet secuirity (antivirus, etc ...) from Bell
Thank you very much
 

A:How do I know what is being downloaded?

And you have no browser open? And check for new email only infrequently?

You could try disconnecting from the modem and see if any program complains.

In Network Connections right click on your connection and select Status. Watch the Bytes sent and received to get an idea of the upload vs download and how much.
 

3 more replies
Answer Match 29.82%

I just purchased a new HP desktop, INtel core 2 Quad processor, 64 bit performance with 8gb of ram, 1 Terrabyte hard drive. It came with Vista home premium 64 bit edition. I had previously purchased Vista Ultimate for a laptop that no longer works. When I downloaded Vista Ultimate I put in the 32 bit instead of the 64.....I am not able to do a restore to go back to the way I purchased it. I am not very computer savvy. Can anyone please help??? Thank you. And what would be the down fall for keeping the 32 bit installed (somone had told me I wouldn't be using the full capicity of the computer) Thanks again.

A:Downloaded 32 bit instead of 64 bit HELP

Originally Posted by cmb1966


I just purchased a new HP desktop, INtel core 2 Quad processor, 64 bit performance with 8gb of ram, 1 Terrabyte hard drive. It came with Vista home premium 64 bit edition. I had previously purchased Vista Ultimate for a laptop that no longer works. When I downloaded Vista Ultimate I put in the 32 bit instead of the 64.....I am not able to do a restore to go back to the way I purchased it. I am not very computer savvy. Can anyone please help??? Thank you. And what would be the down fall for keeping the 32 bit installed (somone had told me I wouldn't be using the full capicity of the computer) Thanks again.



32bit will only see 4gigs of ram and usually only be able to use abt 3.3 its also a bit slower depending on how you use it. when changing from one OS format (32bit) to another (64bit) it has to be a clean install.

Now about restoring you may have a backup there and available but since you are 32 bit and it isnt you cant use it. If you were to reinstall vista 64 it probably be available

7 more replies
Answer Match 29.82%

Hello. I downloaded the new sp3 update yesterday and followed all the instructions and i was ready to restart my computer. When i did, everything went fine until after the loading screen it gave me a blue error screen. Since i needed the computer in working order, I used a pc recovery tool (pressed F10 when it started up) and did a non-destructive recovery which took about 20 minutes. Then after that was done i had to restart and do the windows first start up thing. Then i finally finished and saw that all of my custom features and files were no where to be found! All my applications and games that i downloaded are still in shape, but all of the custom features (like background, WMP playlists, Updates) were all gone. so is there any whay which i can restore my old settings? I need to have all my original settings as soon as i can please .

Thanks

A:I really need help, downloaded SP3...

Hi cloud366, it sounds like you have done a repair install. When you pressed F10, did you choose Last Known Good Configuration from the boot menu?

Also, check in C:\Documents and Settings for a duplicate profile. It could be that your original profile has corrupted and Windows built you a new one.

All those type of "custom features" live in your local profile.

3 more replies
Answer Match 29.82%

downloaded IE9, but cant find it did search, found an empty folder but that all thats marked IE, toshiba laptop running mozilla firefox 3.6

A:ie downloaded but not there

When you say downloaded, if you've kept your Vista updates up to date you should have SP2 and IE9. Go to your Windows Updates and install and check in restore hidden updates for more installations.

3 more replies
Answer Match 29.82%

i downloaded the Quick Lanch Button but everytime after full download completed, it says network error...

More replies
Answer Match 29.82%

hello my coputer is windos vista and the problem is everery time that i try to downloading anything i cant because there is a box that say "you current security setting do not allow this file to be downloaded" plis i really need help michael

More replies
Answer Match 29.82%

alright so i would say i am pretty computer literate at least for 16 you put me in my whole high school i would pry be second best, here is my HJT file i cant find nothing but i can tell you my problem the quick launch bar is messed up i open it an nothing is there it opens but just lines come and regedit says its in use by another program and task manager wont open

View attachment 32453
 

A:Downloaded something bad help please

Clear these three items in HJT and rescan:

O2 - BHO: (no name) - {3745D43B-4A84-485D-8EE9-BC6D0401DBF6} - C:\WINDOWS\system32\vtUkIBqR.dll
O2 - BHO: (no name) - {4F96CCB9-01EC-419E-AAEA-C2C913F2A236} - C:\WINDOWS\system32\byXRkIYS.dll
O20 - Winlogon Notify: byXRkIYS - C:\WINDOWS\SYSTEM32\byXRkIYS.dll

If they are still present, then download MalwareBytes Anti-Malware and while you are there grab the RogueRemoverFree as well. FileASSASSIN is under More Tools in Anti-Malware, and can actually delete the files while in use. Run that if the files wont delete or keep showing up in HJT. Make sure you update MalwareBytes before you do a full scan
 

7 more replies
Answer Match 29.82%

I downloaded a program yesterday and ran it but nothing happened. Then I read comments on a video of it and someone said it was most likely a RAT and another guy saying it was probably a virus. I can provide the file if that will help. I don't want a RAT.

A:May have downloaded a RAT. Don't know what to do.

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scr... Read more

1 more replies
Answer Match 29.82%

Is there a way to find out just how much in total the Get Windows 10 app has downloaded it so far?

A:How much of W10 downloaded?

There's no way to know that when Windows 10 hasn't been officially released yet. Maybe at a later date.

41 more replies
Answer Match 29.82%

I took advantage of the student offer of Windows 7 and last night downloaded windows 7. I thought that because my laptop was 64 bit capable I could do a clean install to it from the download, which I now obviously realise was a mistake.

Does anyone know how I can change this download for a 32 bit version?

Thanks

A:Downloaded 64 bit but need 32 bit

Why can't you install 64bit? Have you tried and got an error?

2 more replies
Answer Match 29.4%

i tried downloading something, and when i did my computer just started going really slow, acting wierd... and now there is this dark red circle in the notification area with a white "!" in it and it says "security warning: your computer may be infected with harmful or unwanted softwear." and i keep getting random pop ups even if i don't have a window up. can anyone help? and here is my HJT log.Logfile of HijackThis v1.99.1Scan saved at 10:47:35 PM, on 6/2/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\System32\nvsvc32.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exeC:\Program Files\Linksys Wire... Read more

A:I Think I May Have Downloaded A Virus

Welcome to the BleepingComputer HijackThis Logs and Analysis forum dizz15 My name is Richie and i'll be helping you to fix your problems.Download Avenger from the link below:http://swandog46.geekstogo.com/avenger.zipUnzip/extract it to your desktop.Start up Avenger. Check the 'Input script manually' option.Click the Magnifying Glass icon.In the box that opens,copy and paste ALL the following bold blue text in the Quote box below:Files to delete:C:\Documents and Settings\All Users\Application Data\tgfglslg.exeC:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\svagent.exeC:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\monsyn.exeC:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\564265.exeC:\WINDOWS\WindowsUpdates.exeC:\WINDOWS\system32\drvrub.dllC:\WINDOWS\retadpu1000272.exeC:\WINDOWS\system32\lvnyitnk.dllThen click on 'Done'.Click the Traffic Light icon to start the program.Then press OK at the prompts to reboot your PC.Post the Avenger output.txt, which you can find at C:\Avenger\.txt into your next reply.*****************************Please download VundoFix.exe to your desktop.Double-click VundoFix.exe to run it.When VundoFix re-opens,click the "Scan for Vundo" button.Once it's done scanning,click the "Remove Vundo" button.You will receive a prompt asking if you want to remove the files, click "YES".Once you click yes, your desktop will... Read more

9 more replies
Answer Match 29.4%

Hi allvery frustrating as I've trawled the forums and also tried everything but nothing happenslong story short,I have windows 8.1 on my laptop,did all the critical/updates,restarted etc..no problemsthe windows 10 pop up appears fine as well..so i follow the prompts etc ,since i don't want to wait i downloaded the windows creation tool from the official page,that downloaded fine and also ran fine..but then nothing happens,even after restartingwhat am i missing here?appreciate any help because i have run out of ideas herecheers

A:windows 10 downloaded but nothing happens..

also i forgot to add.i receive NO error messages whatsoever...

9 more replies
Answer Match 29.4%

Some programs that I download don't show up in my programs. I have to enter the program in search & it appears. It's in Computer © but it's all the contents of the program. This has happened several times and I reinstall the program but get the same results.

Happy Thanksgiving to all.

A:Downloaded Software

Programs that have no install routines...such as those in .zip files/folders...aren't reflected in listed programs installed.  They don't use an installer so they don't appear.
 
http://superuser.com/questions/532460/best-practice-for-installing-small-programs-without-installers-on-windows
 
Louis

1 more replies
Answer Match 29.4%

Hello, I have an HP laptop running Vista Home Premium 64-bit. It's actually been relatively fine for me until the last few days. I was having some problems editing video files and couldn't figure out why, so I updated to service pack 2. Around the same time, although I honestly cannot be sure that it was because of the update, none of my downloads will work. I believe it happened once or twice before I updated my sp but now I can't download ANYTHING. It's bizarre. The entire file will download and the file will show download progress just like normal. But, once complete the file shows up as 0 kb and doesn't open. I've tried using firefox 3.5.3 and IE 8...both do the same thing. I have also checked my permissions and made sure that I am allowed access to all of the folders that the documents are saved in. Nothing seems to help.

I really don't want to have to format/reinstall windows since I have quite a bit of stuff I would need to backup. Any help would be EXTREMELY appreciated. Thanks.

A:Downloaded Files are 0 KB...Need help

What antivirus are you running?

29 more replies
Answer Match 29.4%

Hi everyone. I was wondering if someone could help me. I have had this little box on the bottom left of my computer when I first start it. It says c:\windows\odbc.hta. I think it is making my explorer crash because after about 15 minutes on the internet, I recieve a message that explorer has performed an illegal opperation and will be shut down. I end up having to restart my computer. I have run adware and spybot but they have been unable to locate it or remove it. I have also searched multiple virus webpages and didnt find anything as well. Can someone please help me and tell me how to remove this annoying thing! Thank you
Victoria
 

A:I think that I downloaded a virus, please help me!

Please do this:

First create a permanent folder somewhere like in My Documents and name it Hijack This.

Now Click here to download Hijack This. Download it and click "Save". Save it to the Hijack This folder you just created.

Click on Hijackthis.exe to launch the peogram.

Click the "Scan" button when the scan is finished the scan button will become "Save Log" click that and save the log.

Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here in a reply.

DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required. Someone here will be glad to advise you on what to fix.
 

3 more replies
Answer Match 29.4%

I recently installed Real Player. Since then, when downloading a .mp3 file in Internet Explorer, once the File Download box pops up, the filename is changed to .mpga format. If I just highlight the download link, the file will be named as .mp3. Also, I uninstalled Real Player, and this doesn't seem to have fixed the problem. Any ideas? I don't want to have to keep renaming or converting files every time I download an mp3.. I'm really looking for a solution to the entire problem so that they'll download as mp3's again. Thanks in advance for all your help!

A:Downloaded mp3 to mpga in IE6

Sounds like, when you installed Real Player you did not select [Custom] and check your file associations. Or did not use the Real Player option to always reset file associations if another program changes it.

Actually, before installing any ADDITIONAL player, you should check what files are associated whit your current player or players, and make sure the file association of the new player are not in conflict.

I always uncheck ANY association conflict in a new player, then change them later to the player I want to be default for the file.

According to a Google hit for MPGA, = Mpeg-1 Layer3 Audio Stream and that links to Winamp. Bet you have Winamp installed and it is over-riding the file association for mpg. You need to disassociate mpg from Winamp.

2 more replies
Answer Match 29.4%

ComboFix 09-08-10.06 - nancy bernal 16/08/2009 22:07.1.1 - NTFSx86Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.502.228 [GMT -7:00]Running from: c:\documents and settings\nancy bernal\Desktop\combofix.exeAV: CA Anti-Virus *On-access scanning disabled* (Updated) {17CFD1EA-56CF-40B5-A06B-BD3A27397C93}FW: CA Personal Firewall *disabled* {14CB4B80-8E52-45EA-905E-67C1267B4160}.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\docume~1\NANCYB~1\APPLIC~1\alotc:\docume~1\NANCYB~1\APPLIC~1\DriveCleaner 2006 Freec:\docume~1\NANCYB~1\APPLIC~1\DriveCleaner 2006 Free\Logs\update.logc:\docume~1\NANCYB~1\APPLIC~1\FunWebProductsc:\documents and settings\angel\Application Data\SpamBlockerc:\documents and settings\nancy bernal\err.logc:\documents and settings\nancy bernal\ResErrors.logc:\documents and settings\scareface\Application Data\SpamBlockerc:\documents and settings\scareface\Start Menu\Programs\InternetGameBoxc:\documents and settings\scareface\Start Menu\Programs\InternetGameBox\InternetGameBox.lnkc:\documents and settings\scareface\Start Menu\Programs\InternetGameBox\Uninstall.lnkc:\documents and settings\scareface\Start Men... Read more

A:Downloaded ComboFix

ComboFix logs should not be posted outside the HijackThis forums. It is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert." It is NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.Please create a new topic explaining the nature of your problem in the Am I infected? What do I do? forum. Describe pop-ups and system tray or desktop icons that have appeared. Explain what is "going wrong" with your computer. Note any tools you have used and their respective results.If needed, we will direct you to our HJT Preparation Guide.Thank you for using BleepingComputer as your malware removal source.This topic is now closed. The BC Staff

1 more replies
Answer Match 29.4%

hello all;
heres a good one for the gurus.
i am running an hp compaq dc5850 sff. i have two hdd. one with all my America's Army stuff on it. on one i have the deploy client and game but nothing else that pertains to AA2.
so i decide to start to set up AA2 on the vista hdd as it is on xp hdd, the first thing i do is go to my maps website of choice and start to download the user created maps i like. everything looks good, i choose the correct directory and file and even hit the open folder button to make sure the map is in the right place and it is.
now the good part, i close everything up and go back to the map to make sure it will start and play correctly and it is not there, i search for it from the search window at start and search tells me the closet it could find was the same map but on the E drive, which is where the xp hdd is when i boot vista.
any ideas?

More replies
Answer Match 29.4%

Hey started a new font thing & decided to download some new fonts. THAT was easy.... I even managed to open the zip file...but all I come up with is a page I can print. I'm running windows xp, what do I need to do to use the fonts? & once I unzip a file does it zip it's self back up/ or do I do it / or do I just leave it????
 

A:downloaded fonts help

Sorry, your question is unclear to me.

The systems fonts are stored in a specific font directory, usually C:\WINNT\fonts. Often you can simply *drag & drop* the fonts into that directory and they will be automatically installed on the system and usable by most windows applications. If this fails to work, you could modify one of the MS font installation programmes to install your particular font and make the minor registry changes needed.
 

3 more replies
Answer Match 29.4%

I noticed weird things on pages I visit frequently.
I belong to several groups with messege boards.
Now when I go to post a messege, the box is micro mini
and I can't see what I am typing there!
How can I change this?
I tried the Compatibility View Setting and this didn't
fix anything.
Maybe I need to go back to the older IE version....
Thank you for any help!
Madonna
I took a print screen of the way the webpage looks.
If this picture doesn't show up, here's the link:
http://i28.photobucket.com/albums/c212/cleardayz/IE8.jpg
 

A:OK so I just downloaded and installed IE8 BUT

6 more replies
Answer Match 29.4%

I ran an exe file and it took over my computer. I have no access to my drives, it locked down the administrator user, i got my regedit working and my command line back but i cant see my c or d drives

contrary to the thread rules i will post my HJT log:

*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/*/

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:55: VIRUS ALERT!, on 10/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
G:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\WINDOWS\system32\cisvc.exe
G:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\system32\PnkBstrA.exe
G:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\HijackThis.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.co.uk/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ... Read more

More replies
Answer Match 29.4%

Hi. So about two days ago a bot on Steam added me and sent me a link. I knew it was scam but I wanted to know if I could scan the link or something so I right clicked it and that activated the download. It downloaded scr file camouflaged as screenshot. I did not open it and immediately deleted it and scanned my computer with Avira and Malwarebytes Anti-Malware. Malwarebytes didn't find anything (threat scan) but this is Avira's event log from the first detection to the last: 
 
Exported events:
 

9.12.2014 19:23 [Real-Time Protection] Registry blocked
      In accordance with security guidelines, the Administrator has blocked access to 
      the registry.
 
9.12.2014 15:43 [Updater] Update successfully carried out
      Update of Avira Free Antivirus on computer TAAVI-PC (192.168.1.8) successful.
      The following files were updated by "http://62.44.200.170/update":
      aevdf.dat 8.11.193.190
      xbv00080.vdf 8.11.193.180
      xbv00081.vdf 8.11.193.184
      xbv00082.vdf 8.11.193.188
      xbv00083.vdf 8.11.193.190
      local000.vdf
 
9.12.2014 15:43 [Scheduler] Job started
      The job "Automatic update"
      was started successfully.
 
9.12.2014 15:38 [Real-Time Protection] Service started
      Service started.
      Ver... Read more

A:Possibly downloaded something bad

Hello there    
 
Welcome to Bleeping Computer, I'm LighthouseParty. Let's run a couple of scans to see what could be causing this.
 Step One:Download and run Mini Tool Box
Click here to download MiniToolBox to your desktop.
Double click MiniToolBox.
Select the following and then press go.
Post the log in your next reply.
Flush DNS
Reset IE Proxy Settings
Reset FF Proxy Settings
List Installed Programs
List Restore Points
 Step Two:Install and run Malwarebytes Anti-Malware
Click here to download Malwarebytes to your desktop.
Double click mbam-setup-x.x.x.xxxx and follow the on-screen instructions.
On the dashboard, click update now.
After that, click scan now - the scan will now begin.
When the scan's completed, select apply actions - make sure the action is quarantine.
Restart your computer.
How to get the log.
On the dashboard, select the history tab and click application logs.
Select the log which has the time and date of when you did the scan.
Click copy to clipboard and paste it into your reply.
Step Three:Download and run Security Check
Click here to download Security Check to your desktop.
Double click SecurityCheck and follow the on-screen instructions.
A log should open, called checkup.txt.
Please post the contents of it in your next reply.
Thanks and good luck!

19 more replies
Answer Match 29.4%

where in my c: drive would this update me downloaded too.? i downloaded the windows genuine advantage tool but havent installed it and dont want to. where could i find it and delete it.?

Thanks
 

A:downloaded update.?

Go to Start > Run, and type:

C:\Windows\SoftwareDistribution
 

1 more replies
Answer Match 29.4%

I just downgraded from Vista SP2 to Vista SP1 and by doing so, have somehow screwed up my downloads in both Firefox and IE8. Whenever I download in either one, the download results in a file that is 0 kb.

The strange thing is, Google Chrome somehow wasn't affected by this downgrade (if that's what caused this) and I can download files fine in that browser.

Can someone tell me what's going on here and how to fix this in IE8 and FF 3.5? I've already tried reinstalling FF and it didn't help at all.

A:Downloaded Files Are 0 KB

Why did you downgrade form SP2 to SP1? Try reinstalling SP2.

2 more replies
Answer Match 29.4%

Just a little note, that IE8 came over with the latest updates from Microsoft and I downloaded it thinking that they improved it and ironed out all the previous problems with it, but they didn't! Big mistake!!!! I just recently went back to IE7 because there were too many websites that were causing me problems, plus my web printing was not working anymore for my HP printer and I found out that I could not print any of my cards in American Greetings!!!! I pay for that service and was very upset when I had a wedding to go to and could not print my card at the last min.!!!!! That was the staw that broke the camels back.....So, it was bye bye IE8, I am so disappointed in Microsoft for rushing this browser out to there knowing it has all these problems....Shame on you!!!!!

A:If you haven't downloaded IE8 - Don't!

Did you try the sites in Compatibility View?

Internet Explorer 8: Faster and easier

18 more replies
Answer Match 29.4%

We have upgraded Internet explorer to version 11. now we are not able to download pdf files from our internal web application. Error message :
****.pdf couldn't be downloaded. There is not issue while we try from IE 8.

More replies
Answer Match 29.4%

Should I keep all these programs intalled??
 
 
FRST64
 
FSS
 
MINI TOLL BOX
 
SECURITY CHECK
 
SFCFIX
 
ASHAMPOO
 
AUSLOGICS
 
CCLEANER
 
Nir softshelle x View
 
Speccy
 
Revo uninstaller
 
 
TWEAKING.COM
 
 
 
WISH SOMEONE COULD HELP ME OUT!!!

A:About downloaded programs!!

Were you having help at the Malware Removal Forum. If you are finished you can remove
 
FRST64
 
FSS
 
MINI TOLL BOX
 
SECURITY CHECK
 
SFCFIX
 
TWEAKING.COM   (if this is the Repair all in one Program)
 
Nir softshelle x View
 
Speccy
 
 
You can remove some of the programs with Delfix but only check the box "Remove Disinfection Tools" What it does not remove, you can delete manually.
 
What is the Auslogics program called?
 
What is the Ashampoo program called?
 
Is Revo Uninstaller the Free version or a trial version of Pro?

11 more replies
Answer Match 29.4%

Hello. Thank you for offering this forum of help! I have run Malwarebytes, Spybot, spyware doc, and Auslogics.

Downloaded new IE 9 yesterday. Click on IE 9 icon but IE 9 does not start. I read that one problem may be registry, missing files from older IE, or spyware, so saw using Hijack This as a possible option. I notice right at the start it states "MSIE: Unable to get Internet Explorer version!"

Thank you for any suggestions you can offer. I really appreciate your knowledge because I'd love to use IE 9.

Here is my log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:40:51 PM, on 3/19/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Program Files\Microsoft Office\OFFICE12\GrooveMonitor.exe
C:\Users\xxx\AppData\Local\Starfield\wben.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\Windows\system32... Read more

A:IE 9 Downloaded, Not Opening

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. Please take note: If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic and do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the '... Read more

3 more replies
Answer Match 29.4%

I have some kind of software been downloaded on my computer I didn't do
the software is WinPcap 4.1.2 CACE Technologies does this need to be on my computer
 

A:downloaded software

6 more replies
Answer Match 29.4%

Hello all.
I am a newbie to vista. In November I bought a Dell Inspiron 1525.
The other day i was playing an online poker game (multi player) then the sound stopped
working. After a few seconds i get a pop up saying i needed to download the latest
sound driver. and i did and the sound did come back after restarting.
I thought to myself .. this is great, vista tells ya when drivers need updating.
now spybot keeps telling me that new startup values have changed.
Startup is like Direct TV during a hurricane but only for a couple of seconds.
I chat with the Dell Techs and they wont help becouse i bought the laptop at
Best Buy (geek squad).. I chat with them a they said the driver i downloaded was a virus.
Ive always tried to keep things updated and drivers have been a real pain.
Should a new laptop already need driver updates? How do i know when a driver needs
updating?
I use system mechanic pro. firewall antivirus and all are up to date
spybot w/tea timer. maybe the warning signs were there but i missed it.
can someone give me some direction.
will include hjt log.
And system info. any help will be greatly appreciated.
OS Name Microsoft® Windows Vista™ Home Premium
Version 6.0.6001 Service Pack 1 Build 6001
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name OZINMYLAND-PC
System Manufacturer Dell Inc.
System Model Inspiron 1525
System Type X86-based PC
Processor Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz, 2000 Mhz, 2 Core(s), 2 Logical Processor... Read more

A:might have downloaded a virus

7 more replies
Answer Match 29.4%

I downloaded Accelerator software and problems ensued. I removed the program, deleted files from Cache, did a Norton and a Spybot scan, thought it was going to go away. Didn't. I have since downloaded Prevx software, Ad-Aware SE, Hijack This and run these. Still problems. I get the c/documents and settings message and the about:blank message and the Prevx intercepts a ton of attempts from something called Terrabyte. Maybe I'm not doing the software right. Attached is my log of the Ad-aware scan. Please help:

Logfile of HijackThis v1.98.2
Scan saved at 6:26:18 AM, on 9/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\PREVX\Prevx Home\PXAgent.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\System32\S3tray2.exe
C:\WINDOWS\System32\MsgSys.EXE
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE
C:\WINDOWS\System32\IEHost.exe
C:\PROGRA~1\INTERN~2\inetmgr.exe
C:\WINDOWS\system32\pcs\pcsvc.exe
C:\Program Files\Messenger\msmsgs... Read more

A:Downloaded a problem

6 more replies
Answer Match 29.4%

Apparently the new things on forums are either Rickrolling or shortly commenting "keylogger" when someone posts a link. Atleast thats the case on the WoW forums and GameFAQs.

Well I clicked one of those links because it claimed to be a cool in-game screenshot. So I clicked the link, the whole "Blizzard is not responsible for links not supported by them" came up and I clicked to continue, then as the site was loading, I went back to the WoW forums and read some of the comments and one was a simple "Keylogger" then someone quoted the link and a conversation entailed about how you should not quote keylogger links, etc. After that, I quickly closed the site before it loaded up, it was still a blank white screen, but it was running for a good 10 seconds. Am I completely screwed over or am I just being overcautious?

So I am now afraid to log into WoW, or anything for that matter. I ran a virus scan using HouseCall (the first link that came up when I Google'd "free virus scan") and it ended up freezing my computer. So should I just blow this off? I'm afraid that if I do, I might wake up to the message "Your password has been changed" when I go to log into WoW tomorrow. Please let me know, and if it is something I should worry about, can you tell me of a good, reliable virus scan site that will get the job done quick and not take like 3 days...

And I'm sorry if I'm an idiot and this is completely dumb and its just some forum ... Read more

More replies
Answer Match 29.4%

I was surfing the web and I came to a website and Windows made the noise that indicates that a download is complete and I suspect the website downloaded a virus to my computer. I ran all my anti-viruses and spyware programs and it cant find anything. I am wondering if there is some sort of thing on XP that logs all your downloads, because that would help a lot. Or maybe Im a bit paranoid?
 

A:Downloaded spyware?? not sure

Hi, I don't know of a specific feature like that, but you could wade through the Temporary Internet Files folder for whatever account you were using at the time...sounds easier than it is, thousands of files in there...so, since none of the scans found anything, why not just post a Hijackthis log to check?

Hijackthis does not show all malware, but it's the place to start.

Click here to download HJTsetup.exe
Save Hijackthis.exe to your desktop.
Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log. DO NOT fix any items at this time!
You must have ALL browser windows CLOSED when you "fix" items with Hijackthis..
we will help you later to do that. Most of what HJT shows IS NEEDED!
Click Save to save the log file and then the log will open in notepad.
At the top of the Notepad HJT log screen, hit Edit then Select All, then click Edit and then click Copy, doing that copies the text to the clipboard, you won't see it yet....
Open a TechSupportGuy forum Reply window for this thread, to have ready to paste ... Read more

3 more replies
Answer Match 29.4%

Recently - I've been having a strange problem. when I download a photo or image, or even capture a screen shot and save it to a folder, I cannot see it in that folder. I originally thought i had not hit save properly or not saved a file that I thought I had - but when i tried to re download an image or capture it again and name it the same thing - I got a message saying there was already a file by that name in the folder.

I have tried ensuring all hidden files are shown, and refreshed the window to no avail. but when i restart the computer, I am able to see the files in the folder as the should have been displayed all along. also confusing - when i look in the folder after saving...say if I've saved 12 images into the folder from the net or screen capture, but the folder is only displaying 1 image - it was say the folder only contains one image...

how can i fix this so i do not need to reboot every time i want to see newly created images?

A:Can't See Downloaded Files

Sounds like a view issue on the folder itself, to be honest.

2 more replies
Answer Match 29.4%

now itunes is dead.
i can't install the new firefox i downloaded.
it's sitting right there but it WON'T OPEN
my .exe file extension went poof.
i added it again. It disappeared again.
so did .lnk

my cursor disappears on me every ten seconds as I type,
as if the window I'm not typing on needs refreshing.

i'm running gmer [the gmer window pops up to tell me] now...[popped up again]
[and again]

it's like the bird flu has hit my Sony.

HIJACK THIS

Logfile of HijackThis v1.99.1
Scan saved at 12:49:29 AM, on 4/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\svchost.exe
C:\Program Files\QuickBooks Online Backup\CBSysTray.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\QuickBooks Online Backup\AgentSrv.EXE
C:\Program Files\EarthLink TotalAccess\WENGINE\wmonitor.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\WINDOWS\system32\svcho... Read more

A:it all started when I downloaded IE7...

6 more replies
Answer Match 29.4%

HI,I've got malware problems, I'm tired of paying mac bleepty, and heard about AVG.I downloaded DDS, but can't seem to down load GMR. I have vista home premium 32 bit running on a 64 bit computer, mainly because some of my old programs wouldn't run on vista ultimate 64 bit software. I've attached the two files requested.PaulActually, I have to add that Gmer downloaded but is trying to extract and doesn't seem to be able to. I tried getting task manager up to shut it down and try again but task manager gives a file error...I'm tempted to reboot and try running gmer again.PaulEDIT: Posts merged ~BPHi,I was finally able to run gmer in safe mode, and have attached the log file. Hopefully you guys aren't too busy. For the most part, right now I think I have a malware problem, where a program comes up and tells me I have worms, or identity theft and to purchase their software to fix the problem. Thanks in advance for your help.PaulEDIT: Posts merged ~BP

A:DDS downloaded but not GMER

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

3 more replies
Answer Match 29.4%

Yeah... Oops.. I scanned it and it was clean, but then I used one of those online scanners (Virustotal etc) and one of the scanners picked up Mal/Generic-A I googled it and from the looks it can be nasty... I'm scanning malwarebytes right now and it's found 1 item, but i'm scared it will still be on my machine somewhere. Help me Oh and I opened the file.. So it is in fact on my machine somewhere.
 

A:Uh oh... I downloaded something with Mal/Generic-A

9 more replies
Answer Match 29.4%

Hello everyone! So, I don't know when this problem started, but probably a few days back. The EXEs I already had on my laptop run perfectly fine, but whenever I download an EXE from the internet, it doesn't do anything. I double-click them, open the task manager, look at the program I ran, and it gets stuck to a specific amount of memory usage (Depending on how heavy the program is), and some seconds later it closes. I can't see it on the task manager. Examples are: "WinRAR Installer", "FIFA 14 (After I installed but the game won't run)", "FiveM installer (A multiplayer client for GTA V)".
I tried one thing and transfered the FiveM installer to another laptop which was new, and it worked! It was installing perfectly on that laptop. So I transfered the installed files back to my laptop, and when I ran the EXE that was installed (Along with a lot of other DLLs and related files that were installed with the program), it had the same problem. It got stuck to a certain amount of memory usage, and closed. Now I'm totally confused, I tried the fix on Microsoft's website (First Automatically, didn't work, then manually, that also didn't work). Any help would be much appreciated.
Thanks.

Greetings, Pardeep.

A:Downloaded Executables Won't Run

Try a clean startup - Troubleshoot Application Conflicts by Performing a Clean Startup
Try installing in Safe Mode (with or without Networking), you will need to run SafeMSI.exe first when in Safe Mode. Please note that, successful installation depends on which services are needed by the installer. So one can fail and other work.

9 more replies
Answer Match 29.4%

Since upgrading my computer and reinstalling Windows XP Home with all upgrades, I haven't been able to run executable downloaded files (most recently openoffice but also Google Earth Pro trial). The files download properly but when I try to run them them, I get the message "This application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem."

I have no problem installing programs from CD.
I'm using IE beta 7 but have tried the same process using Firefox. All Windows Updates are complete. Running Norton AV 2003 and NVidia firewall set to Antihacking only.

Any ideas?
 

A:Can't run downloaded files

Look here: http://www.mcse.ms/archive59-2004-7-898432.html
 

1 more replies
Answer Match 29.4%

When I download files using ie the download window indicates the files are downloaded but they are not there. I've been able to see the files being deleted instantaneously after being downloaded. Thanks
 

A:downloaded files not there

Does this problem only occur in Internet Explorer, or do you have another browser that works correctly?

Have you tried doing a System Restore to fix the problem?

If you can, post a HijackThis scanlog:

Download and install HijackThis using the "self extractor". Run it and select "do a system scan and save the log file". Then copy/paste the contents of the log to a reply

http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

I recall a rather similar, and unfortunately unresolved, problem in this thread. You might compare notes with it, particularly in regard to the programs you see in the Scanlog:

http://forums.techguy.org:80/windows-nt-2000-xp/465930-cant-complete-downloads.html?
 

1 more replies
Answer Match 29.4%

Some downloaded will not open getting message:

"Thie program is blocked by group policy. For more information, contact your system administrator"

I am the administrator on my own personal computer. No one else uses it.
 

A:Some downloaded will not open...

10 more replies
Answer Match 29.4%

I downloaded Genuine Advantage Validation tool (KB892130) but it hasn't been installed. I'd like to find the downloaded file and delete it before it gets installed when I reboot. Right now Windows Updater is threatening to install it automatically if I don't keep telling it to "install later." I need help right away or I'll be here pushing the button like the guy on the tv program Lost. Thanks
 

A:Getting rid of a downloaded update (XP)

13 more replies
Answer Match 29.4%

I downloaded 3DMark from this site. 1.6 GB When it opened it went to a 'registery fixit'.
I already have one and dropped out of that. But, I lost 3DMark.

AND, I came back and downloaded it again! (duh) Each time took ~18 minutes. Again, when
it oped it did the same thing. I was trying to get Properties fast before anything happened and
I lost it again.

Well, I was just in my game and my computer is sorta humming. I can't blame it on the
new program, but I've gotta find this thing and get it off my computer.

Can anyone help?

Pennie
 

A:Downloaded 3D, can't find it

Where do you have your browser set to put downloaded files? Go to that folder & see if it is there, if so, delete it. I hope its that easy for you.
 

1 more replies
Answer Match 29.4%

I have this annoying little thing down on the taskbar that keeps spamming this message.

-------------------------------------------------------------------------------------------------------
Systam Alert: [email protected]
Type: Spyware/Trojan
Vulnerable: Windows 95/98/ME/NT/2003/Windows XP
Description: Spyware program that sends confidential information to a remote attacker
Protection: Click this balloon to download official security software.
-------------------------------------------------------------------------------------------------------

Now, I have Windows Vista, but its obviously still being affected. I keep getting pop-ups for fake spyware-removal programs, and it's so obvious they're fake that it's not even funny. It also changes my homepage to http://iexplorerpage.com/. I didn't "click this balloon to download official security software" because I'm too smart for that old gag (Although not smart enough to avoid getting this virus in the first place). So first thing that comes to my mind is "Search for it on google". I found another topic on this site which said to get HijackThis and post what the log says. So here it is.

Logfile of HijackThis v1.99.1
Scan saved at 9:14:52 AM, on 5/28/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
... Read more

A:I Downloaded A Virus.

Bump... I really need help >.<
 

2 more replies
Answer Match 29.4%

I use windows XP and I need HELP lol I was having trouble with Yahoo so I uninstalled it and now I can't get it reinstalled. Also have tried downloading different programs and can't get anything downloaded Any help would be appreciated.
 

A:I can't get anythig downloaded

9 more replies
Answer Match 29.4%

Logfile of HijackThis v1.99.1Scan saved at 4:05:35 PM, on 10/19/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\system32\HPConfig.exeC:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\HPQ\ONE-TO~1\OneTouch.EXEC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\windows\system\hpsysdrv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\Program Files\DAEMON Tools\daemon.exeC:\Program Files\Java\jre1.5.0_07\bin\jusched.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\Program Files\Microsoft AntiSpyware\gcasDtServ.exeC:\Program Files\Internet Explorer\i... Read more

A:I Think I Downloaded Something For A Game

Hello Deee, Please confirm that you have run the following scans or run them now. Save any logs that you generate - we may need them later.Do not post any logs unless I ask you. ***************************************************Please download, update and run (one at a time of course!) Spybot 1.4 and Adaware SE 1.06.r1 Fix whatever they suggest. If you need help running these tools, here are some helpful tutorials.Spybot Tutorial Adaware SE Tutorial Be sure to run Adaware SE with a Full Scan in the Safe Mode.How to Reboot into Safe Mode tap F8 key during reboot, until the boot menu appears...use the arrow keys to choose "Safe Mode" from the menu......,then press the "Enter" key. If that does not work this go to this site: http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/ Ad-Aware SE Setup***************************************************Please download, update and run the free A2 (A squared) anti-trojan Select the "Deep Scan" button and press the Scan button.If malware is found, click the button "Remove Selected Malware"and save the log file by clicking on "Save Report". Let it delete whatever it finds. *************************************************** I know you may have anti-virus software, but sometimes its definitions are corrupted due to malware. Online scans are the best resort in this case. Run this pc through theTrend Micro Housecall Online virus scanneror Panda Scan Online... Read more

2 more replies
Answer Match 29.4%

hi, i was wondering if you would be able to help me,

i recently downloaded freelancer off of bittorrent (I heard that if you already bought the game it's fine to download, but my disc got scratched)

In the folder the two kinds of filed are the larger .IMG file and the smaller .SUB file.

I am absolutely clueless on how to actually play the game!!
any help would be extremely appreciate it!
 

A:Downloaded game

I'm sorry we have to say this. We cannot help you with illegal activies because you said you download it off the torrent.
 

2 more replies
Answer Match 29.4%

I have downloaded several dvd's that my pc will not play. It plays the sound, but not the visual. It tells me I don't have the codec needed. I downloaded the suggested codec, but they still won't play. What do I do?
 

A:Can't play downloaded DVD's

7 more replies
Answer Match 29.4%

Alright, so, firstly, I know nothing about computers, but I was on MSN messenger, and got one of those infected "hey, is this you" followed by some sort of link messages, and stupid me, I clicked and accepted. I've been reading forums, but I don't get what to do, I've done some research, and I'm thinking it's a trojan thingy, and a leap virus, because once I downloaded it, I automatically sent it to everyone on my contact list, and an hour later, my computer automatically restarted. So for days now, I've been trying to fix it, and I think I know the file it's in, or at least close (C:/system32 hosts, or smss), the problem is, the Hijackthis scan, skips that folder, probably because the thing controls my computer, and, If I try delete related files, it says that I need permission to do so, yet I'm on the administrative account, so I guess if anyone know's what ever is going on, that would be awesome. Here's my Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:08:07 PM, on 03/03/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Safe mode with network support
Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.ca/0SEENCA/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\... Read more

A:So, I downloaded this thing.

Bump! If anyone could help, I'm desperate, my computer's getting worse everyday.
 

1 more replies
Answer Match 29.4%

Last nite something tried downloading to my system. I THOUGHT I denied it permission, but immediately A squared IDE started popping alerts whenever I opened any browsers or Outlook Express. (Since I thought I had denied it access to download, I didnt really pay attention to the warning).

So far nothing has tried accessing the internet (i.e., no Zone Alarm requests) but I do assume something "wrong" is here. Here is my Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 5:17:48 AM, on 6/7/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\SnoopFreeUI.exe
C:\Program Files\a2\a2guard.exe
C:\Program Files\WinAlarm\WinAlarm.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\SnoopFreeSvc.exe
C... Read more

A:Help! Something downloaded and Cant find it

Hi and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem a.s.a.p

Please be patient with me during this time.

9 more replies
Answer Match 29.4%

I've recently downloaded a couple files. One is a game (from GOG.com), another a BIOS update (from Dell), among others. When trying to open either of the two above, I get the following error message:

"The version of this file is not compatible with the version of Windows you're running. Check your computer's system information to see whether you need an x86 (32-bit) or x64 (64-bit) version of the program, and then contact the software publisher"

Another recently downloaded program gives me a checksum fail type of error message.

I've kept up to date with Microsoft updates, and have tried running them in various compatability modes, but get the same message each time.

Any help or insight would be greatly appreciated, as I am rather significantly tech illiterate. Thanks!

Computer: Dell Alienware M15x
Processor: Intel Core i3 CPU, M350 @ 2.27GHz
RAM: 3GB
OS: Windows 7 Home Premium (64-bit), (Service Pack 1)

A:Downloaded Software Won't Run

Hello uhohspaghettios and welcome to TSF,

There are certain 32 bit programs, especially binaries, that will not run in a 64 bit environment.

Could you provide me the links to the programs you are attempting to run?

3 more replies
Answer Match 29.4%

I need to know where are the downloaded files stored in Windows 7 that are installed in background through 500kb installers.
Thanks

A:Where is my downloaded file

Do you know what they are called? Try typing the name, or part of the name, in the box that pops up when you hit the start button, then right click on the name and click on "Open File Location"

Or you could look in "Downloads" - Type that in the box and "Open File Location", you should find them there.

3 more replies
Answer Match 29.4%

Hi,

I downloaded Windows 7 RC 64 bit and I'd love to install in on a partition on my PC ... only ... how do I make a bootable image of it?

I've downloaded ISOBuster as suggested at the Microsoft site, I also have MagicISO free version and Nero 8 Ultra, none of these seems to want to work for me.

I did a Nero copy of the image which apparently has nothing to do with a bootable image ... duh.

The MagicISO seems like it will work if I purchase it ... first things first ... can I do it for free?

The ISOBuster seems absolutely impossible to decipher it's "Simplicity"?

Can Nero make a bootable image?

Can anyone pray tell me what I don't know. I'm really eager to hear it.

Thanks,

John

PS I hope my dumbness is only temporary!

A:OK, I got Windows 7 RC 64 bit downloaded.

Have you tried Imgburn?

10 more replies
Answer Match 29.4%

Ever since like 3 days ago the laptop computer has been REALLY slow. IE doesn't even open up anyone (just white screen).
It takes 10minutes when I turn on the computer just to be able to click on start.
A lot of error messages asking me to fix this and that keep coming up (and they are not in the form of a pop up) They look like real windows messages.
here is my HTJ log

Thank you for your time.
 

A:I pretty sure something bad got downloaded

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:37:56 PM, on 2/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\WINDOWS\eHome\ehSched.exe
c:\program files\mcafee.com\agent\mcdetect.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\QuickTime\qttask.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files... Read more

3 more replies
Answer Match 29.4%

I downloaded a game called the curse of monkey island through a torrent.

i already own the game, but it was scratched.

Once i finished downloading it, It was of course in image file, so i ran it through daemon tools. Autorun worked and everything, but when i clicked on install the clock showed next to the mouse for a few seconds then it stopped and nothing happened.

Then i went into the main folder and clicked setup.exe and ran as administrator.. again nothing hapened.. Ive tried burning it to a disk too with no luck.

A:Cant Run A Game I Downloaded.

This game was released in '97. I doubt if it will even run on Vista. You can try compatibility mode

3 more replies
Answer Match 29.4%

i have norton antivirus 2007 and i do the scan and everything gets fix except for the downloader misleadapp, i went thru the removal process about 3 times and nothing happens to it

what do i do??

thank you
david
 

A:downloaded misleadapp help!!! please!!

13 more replies
Answer Match 29.4%

Hi...First time here...so not really sure what I am doing...I have been reading the forums a little bit and decided to download hijackthis...this is what i got...not sure what to do now...

I noticed an issue when i start my computer ...the hp invent blue screen comes up and then it goes to a black screen with a blinking cursor for about 50 secs and it never did this before...at the 50 secs it boots alright...i was just wondering if this was bad and how do i fix it...
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:20:07 PM, on 3/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\arservice.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ARPWRMSG.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.... Read more

More replies
Answer Match 29.4%

I downloaded two viruses today. 1) VBS/Psyme and; 2) JS/IEStart.gen.d. Both were detected by McAfee but when I went to delete them, I got a message back saying that they could not be deleted. I am basically a computer novice - I need help and guidance to figure out what to do next. Can someone please give me assistance?
 

A:Two Viruses that I downloaded

15 more replies
Answer Match 29.4%

Okay, somebody please correct me if I'm wrong. My main goal is I want to burn avi files onto blank DVDs files I have on my computer. If I'm not mistaken, based on all the information I've read from lots of people on this site, I assume the following is correct, but if not, somebody with experience in this subject please help!
1. i have a downloaded .avi movie from the internet around 700,000Kb or so
2. I'm thinking that I'm supposed to use VirtualDub to capture and make a file of JUST the audio from the file and make it a .WAV
3. Then I use TMPGEnc to convert ONLY the video of the original downloaded file to mpeg-2.
4. Now I'm confused. Somehow or another I guess I'm supposed to fuse the two separate files together and "shrink" the newly created mpeg-2 file. And since the complete file is going to be really big, do I have to "compress" it somehow so it will fit onto the standard DVD+R? And can I do all this with Ulead Movie Factory 2E? That's the program that came with my DVD burner.
5. If I'm leaving something out PLEASE tell me, folks! You all have helped me every time in the past, and I am really grateful for that.
 

A:downloaded avi-->mpeg-2-->DVD+R

Originally posted by NYCaztecDC:
Okay, somebody please correct me if I'm wrong. My main goal is I want to burn avi files onto blank DVDs files I have on my computer. If I'm not mistaken, based on all the information I've read from lots of people on this site, I assume the following is correct, but if not, somebody with experience in this subject please help!
1. i have a downloaded .avi movie from the internet around 700,000Kb or so
2. I'm thinking that I'm supposed to use VirtualDub to capture and make a file of JUST the audio from the file and make it a .WAV
3. Then I use TMPGEnc to convert ONLY the video of the original downloaded file to mpeg-2.
4. Now I'm confused. Somehow or another I guess I'm supposed to fuse the two separate files together and "shrink" the newly created mpeg-2 file. And since the complete file is going to be really big, do I have to "compress" it somehow so it will fit onto the standard DVD+R? And can I do all this with Ulead Movie Factory 2E? That's the program that came with my DVD burner.
5. If I'm leaving something out PLEASE tell me, folks! You all have helped me every time in the past, and I am really grateful for that. Click to expand...


"Minimum wage is just another way of saying, 'If I could pay you less, I would!' "Click to expand...
 

1 more replies
Answer Match 29.4%

Hi everyone - hope this is posted in the right area

I am trying to download a file from this page -

http://www.futuresmag.com/industry/downloads/downloads.html

when I click on the blue text of my choice, a box pops up asking me whether I want to open it from its present location or save it to disk. If I choose open it, a box comes up showing the download in process - at the end, I get a WinZip box, which says that this is an 'evaluation copy' and asks me what I want to do - agree to the evaluation conditions, quit, or get ordering info. I click agree, and I get a Winzip Wizard. I start trying to click my way through this process - I get screens like - 'Would you like to Unzip or Install from optr_por[1].zip' (I say yes) and then "Click now to unzip to selected folder, C:/unzipped/optf_por[1]. I say yes - a box comes up which says the files have been successfully unzipped to this location, and then a Windows Folder called TEMP pops up with an file inside it - the file is a Winzip icon, and seems to be the file I have just downloaded - it is called "optf por"....

Seems good so far. Then I click on it, hoping to see the document I have attempted to download. But I get a small box that says 'WinZip self extractor' at the top, and which says 'To Unzip all files in optf_por.exe to the specified folder, press the unzip button'. The specified folder is C:/WINNT/TEMP. I press Unzip and... a tiny box comes up which shows the p... Read more

A:where is my downloaded file?

mset
It can be confusing trying to keep track of where downloaded programs unzip to especially using winzip. I think your first step should be to clean out the default folder winnt temp. I don't believe there is anything needed there but just to be on the safe side don't delete anything from the recycle bin until you're sure you can reboot and run programs without error messages. Next instead of letting the program run itself without installing on your hard drive create a new floder on the C drive tree or whatever your hard drive letter is and save it to that folder (save to disk, browse, choose that folder C:temp that you created.) That way if it unzips to the winnt folder it should be the only program in there, plus you have the original download on your computer so you won't have to keep downloading each time . As to what program to use to open the file that depends on what kind of program it is. Good luck
 

1 more replies
Answer Match 29.4%

I downloaded a wolf3d from utorrent it is resident on my desk top and when I click on it a command box apears and at the top it says C:\docume~1\minemi~1\desktop\wolf3d.exe. I try to delete it ands it says cannot delete wolf3d:it is being used by another person or program. Close any programsthat might be using the file and try again. here is the log from dss Deckard's System Scanner v20071014.68
Run by Mine Mine on 2008-06-13 08:00:52
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as Mine Mine.exe) -------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:01:17 AM, on 6/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\Program Files\Godlike Developers\RAM Saver Pro\ramsaverpro.exe
C:\Program Files\Spybot - Search & D... Read more

A:downloaded program

Thanks but i figured it out myself. Just took me a while to figure it out after being up for almost 48 hours. Brain wasn't functioning. But I got it.

1 more replies
Answer Match 29.4%

Hi ,I downloaded a movie and can't seem to get it to work on quick time player. Can anyone tell me the best utlity to watch a movie on.

Thanks
 

A:downloaded movies(what is the best...

7 more replies
Answer Match 29.4%

I was sent a file that was spose to be a APP on playstation burning, stay away from this file. Now I cant get into to my control panel I cant remove programs, my zip files are unreadable....... nothin! It doesnt seem like a virus. Its like a nonremoveable .EXE Can someone help me!!!!!!!!
 

A:downloaded bullsh*t please help

6 more replies
Answer Match 29.4%

could you tell me where the downloaded updates are ?

More replies
Answer Match 29.4%

Could I be mistaken? I downloaded this utillity, and it seems to make alot of my apps. run faster...even pageloading on the internet. Anyone know any more about this program? I got it from ZDnet.
 

A:just downloaded pc accellerator

It appears to be a pretty decent and harmless program that just gives you an interface to change some settings that you would otherwise need to know how to edit the registry. If you used it to change some settings then it may well have helped.
 

1 more replies
Answer Match 29.4%

I have a 'flash gear' card reader which works with my old SanDisk Ultra II 2.0GB camera card. My new Sony HC 4GB card returns I/O error and crashes the reader. How can I cure this please guys or do I have to upgrade the reader which i have had for years?
 

A:SD card cannot be downloaded

mazda said:


do I have to upgrade the reader which i have had for years?Click to expand...

Unless it is an SDHC compatible reader that you've had for years, the answer is yes,

I just bought an SD card reader for $7.99 this morning.
 

1 more replies
Answer Match 29.4%

I made the stupid mistake of downloading "trial" version of PCMightyMax that I saw referenced in forums. At the end of the download it told me I had 309 problems but it wouldn't "fix" them without ordering it. Which is ok; however, now I'm getting a constant popup telling me about my numerous problems and the "PC ambulance" is parked on my start bar. I hunted an uninstall (Add/Remove programs) and in Windows Explorer Programs file and it didn't have one so I just "deleted" it out of window explorer programs file. But I still have the popup and the ambulance parked on my desktop. Anyone know how to get rid of this? Did the CWS thing and it says my computer is clean. Here is my HJT file:
Logfile of HijackThis v1.97.7
Scan saved at 2:20:28 PM, on 8/31/04
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\SXGDSENU.EXE
C:\MOUSE\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\REGPROT\REGPROT.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\REALTIME.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\UNZIPPED\HIJACKTHIS[1]\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVer... Read more

A:Downloaded PCMightMax

As far as the CD-Rom goes.. Try installing a new ASPI layer.. Forceaspi is probably the easiest way to do this.. http://radified.com/ASPI/forceaspi.htm

Check the run statement in you win.ini file in your windows directory for a call to the unwanted program.. I don't see it in your log..
 

1 more replies
Answer Match 29.4%

I started having problems with my computer a couple of days ago, it started with an internet screen popping up saying HTTP 404 ERROR considering i wasn't even on the internet became a reason for concern. Since my free version that came with this computer that i bought was done i needed to try and find something else. I was recommended to goggle for spybot search and destroy the free version and when i did this a lot of searches came up so i decided to try the first one with that one telling me after i had downloaded it that i needed to pay in order to fix the problems...well i was not willing to do this so instead i decided to try a different one well needless to say the same thing kept happening to me i continued to download different ones with each saying the same thing i needed to pay! well then my computer started just randomly popping up screens every few seconds. I uninstalled most everything that i downloaded but somehow it was stilling popping screens up at me. I now have this 'system security' that i downloaded but it does not give me an option to uninstall, and my computer is still unprotected. I guess my question is Can you help me?
 

More replies
Answer Match 29.4%

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows XP Professional, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz, x86 Family 15 Model 4 Stepping 1
Processor Count: 1
RAM: 765 Mb
Graphics Card: Intel(R) 82865G Graphics Controller, 96 Mb
Hard Drives: C: Total - 76308 MB, Free - 45249 MB; E: Total - 381551 MB, Free - 274164 MB;
Motherboard: Dell Computer Corp., 0WC297, , ..CN70821551008X.
Antivirus: AVG Anti-Virus Free Edition 2011, Updated: Yes, On-Demand Scanner: Enabled I cannot play any games such as mass effect 1or2 without nvida wich will not work on my little pc? what do i need to download to enhance my graphics package ed
 

A:downloaded to death.

You can't download anything that will help. That PC will not run Mass Effect 2; it would need a faster processor, which would require a new motherboard, and more RAM, and a better graphics card, which would require a new motherboard and new power supply to meet the requirements. So you actually need a whole new computer, one built/designed for gaming.

System Requirements for ME 2: http://www.game-debate.com/games/index.php?g_id=518&game=Mass Effect 2
 

1 more replies