Tech Problem Aggregator

"Internet Explorer Warning - visting this site may harm your computer"

Q: "Internet Explorer Warning - visting this site may harm your computer"

OK, I know a lot of people have had a problem with this one.
ANY site I go to redirects to this "Internet Explorer Warning" page and tells me to buy their software. Obviously, I wasn't born yesterday. No thanks.
Even getting to this site and trying to download Hijack This was extremely difficult.
But anyways, here's the log from the HJT scan.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:42:19 PM, on 5/31/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IDT\WDM\STacSV.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\dlbxcoms.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\sttray.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\AESTFltr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.Yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="invilink">http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="invilink">http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.freewebs.com/xoxomissashlee/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.Yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: BHO - {BAD4551D-9B24-42cb-9BCD-818CA2DA7B63} - C:\WINDOWS\system32\iehelper.dll
O2 - BHO: BHO - {BBD4551A-9B23-41cd-9BCD-818AA2DA7B63} - C:\WINDOWS\system32\iehelper.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IDTSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [AESTFltr] "C:\WINDOWS\system32\AESTFltr.exe" /NoDlg
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Mobile Broadband] c:\SWsetup\HPQWWAN\HPMobileBroadband.exe /TrayMode
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dlbxmon.exe] "C:\Program Files\Dell Photo AIO Printer 962\dlbxmon.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [system tool] C:\WINDOWS\sysguard.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD7/JS...9/&filename=jinstall-6u12-windows-i586-jc.cab
O16 - DPF: {C9D7D239-B502-48B3-BA25-9DF8C7264073} (CCAWebLogin Control) - https://172.17.200.11/auth/CCALogin.CAB
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://games.myspace.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {D1548A26-B8F6-4E86-AE74-E7062CCC2E2A} (igLoader Content on Demand) - http://www.miniclip.com/igloader/igloader.CAB
O16 - DPF: {FCB28D51-A017-46B2-9FB3-F7BFD53B2E42} (CPlayFirstChocolatieControl Object) - http://www.shockwave.com/content/chocolatierdecadence/sis/Chocolatier3Web.1.0.0.6.cab
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: dlbx_device - Dell - C:\WINDOWS\system32\dlbxcoms.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV.exe
--
End of file - 10137 bytes
================

I'm okay with computers but I'm no wiz kid so...any help would be much appreciated.
I've had problems in the past with the "Spyware Protect 2009" virus, too. But I've fixed it for the most part (yes, I am aware that the "sysguard.exe" file is in this log and I'm taking care of it now)
I've skimmed through the log above and didn't see anything suspicious.

Thanks in advance for your help!

A: "Internet Explorer Warning - visting this site may harm your computer"

Also, right after I posted this, every pages starts to redirect and then it pops up and instead of "Internet Explorer Warning...blah blah blah," I'm getting "Oops! This link appears to be broken!" with my Google Toolbar logo on the side and a list of suggestions to correct the site's URL.

1 more replies
Answer Match 95.1%

I have an infected laptop running XP Pro SP3. It had Spyware Protect 2009 on it but I was able to stop the sysguard.exe process and delete sysguard.exe from the Windows subdirectory and from the HKEY_CURRENT_USER\....\Run registry hive. There is still at least one other major problem. IE 7 is redirected to display "internet explorer warning visiting this web site may harm your computer" most of the time. I can get to google sometimes and even search something but when I try to follow a link - I get the redirection message. It also prevents me from running a system restore and most of the scanning software such as malwarebytes, SDfix and several others. I was able to run HijackThis but when I tried to post the report, it redirected me again so I saved the log file to a thumbdrive and logged onto an uninfected computer to post this.

I'm attaching the log file.
 hijackthis.log   10.75KB
  9 downloads

I've heard great things about this forum. Thanks for your help in advance.

A:internet explorer warning visiting this web site may harm your computer

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

2 more replies
Answer Match 95.1%

I downloaded a re-direct anti-virus program.
I was able to kill it with RKill, but there are still some lingering issues going on.
When I try to connect to the internet via Google.com I get this message "Internet Explorer Warning - visiting this web site may harm your computer!"
I have run Malwarebytes and Microsoft Security Essentials.
They have removed numerous Trojans etc, but I still get the Internet Explorer Warning - visiting this web site may harm your computer!
When I tried running HIJackThis, I get a message "For some reason system denied write access to the Hosts file...."

Any clue how bad it really is?

Thanks,

Gilly68

A:Internet Explorer Warning - visiting this web site may harm your computer!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

2 more replies
Answer Match 95.1%

Any time I try to access the internet I get " Internet Explorer Warning - visiting this web page may harm your computer".
I can't access the internet from that computer.

If I try to run any programs I get "Security Warning - Application cannot be executed. The file is infected. Do you want to activate your antivirus now?"

Can you guys help?

Thanks
Tim

A:Internet Explorer Warning - visiting web site may harm your computer

Never mind fellas... I fixed it myself!

Thanks anyways!!

1 more replies
Answer Match 85.5%

Dear TSG Forums, I'm wondering if someone could help me.

As of today I seem to have contracted some form of re-direct virus. I was googling for a live journal blog and when clicking a google result I was redirected to a page with the title 'Malware Warning'. The page then went on to read: 'Visiting this website may damage your computer!' it then advised me to return to my previous or visit StopBadware.org. I did neither and closed the page.

However, now it seem that whatever I search for with Google generates the same page including site well known to me such as Facebook and Hotmail.

Malwarebytes has found nothing and beyond this I'm stumped. I'm running Firefox, I've not tried using Google in IE as it just crashes on this computer. Other search engines seem to be working fine.

Any help would be really gratefully received! Thanks for reading.
My HJT logs looks like this...

Logfile of HijackThis v1.99.1
Scan saved at 15:11:02, on 31/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.... Read more

A:"Web site may harm your computer!" - Possible Re-direct Virus?

Hello HaileyBailey,

Welcome to TSG,

Go to the link below to learn what StopBadware.org is. In particular you will see this line:
On January 31, 2009, all of Google's results (including google.com and stopbadware.org) were briefly flagged as malware for almost 40 minutes.Click to expand...

I think that is what happen to you.

http://en.wikipedia.org/wiki/StopBadware.org

Now

I notice your Java is out of date, older versions are vunerable to attack.

Please download JavaRa to your desktop and unzip it to its own folder

Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
Accept any prompts.
Open JavaRa.exe again and select Search For Updates.
Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest Java Runtime Environment (JRE) version for your computer.
It might be worth just having a look at things to check nothing is there.

Next

Please download random's system information tool (RSIT) by random/random from here.
It is important that is saved to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)
So when you return please post
the two RSIT logs - log.txt and info.txt

Note: Unless otherwise instructed always post the logs in the forum. It is likel... Read more

1 more replies
Answer Match 83.1%

when I was browsing on my laptop today, I noticed that every search result I got from google carried with it a "this site may harm your computer" message...EVERY SINGLE ONE

even yahoo answers and trusted sites were blocked and prompted me to go to the site at my own risk

do I have a virus...?

thanks for the help guys
 

A:"this site may harm your computer"

16 more replies
Answer Match 106.68%

We just started having this problem today at one of our computers at work, we run on Windows XP. Every time I navigate to a new web page (even here), I get a pop up warning:

Internet Explorer Warning - visiting this web site may harm your computer!

Most likely causes:
The website contains exploits that can launch a malicious code on your computer
Suspicious network activity detected
There might be an active spyware running on your computer

What you can try:
Activate Antivirus 360 for secure Internet surfing (Recommended).
Check your computer for viruses and malware.
More information

Can you please help me get rid of this? I have tried to attach the 2 things that came up with the DDS

A:Internet Explorer Warning - visiting this website may harm your computer Antivirus 360 Malware

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

2 more replies
Answer Match 104.58%

Hey all Iam tryinng to fix my parents computer. They keep getting "warning visiting this site may harm your computer" when in I.E. I understand this is Malware but shouldnt of Norton 360 have caught this?Anywayz here's the HiJack this LOG, Iam also trying to learn so If someone can explain what iam looking for in this log?Here it is:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:03:07 AM, on 7/30/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Microsoft LifeCam\MSCamS32.exeC:\Program Files\Norton 360\Engine\3.0.0.135\ccSvcHst.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\RealVNC\VNC4\WinVNC4.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Expl... Read more

A:warning visiting this site may harm your computer

Here is the DDS Log:
DDS (Ver_09-07-30.01) - NTFSx86
Run by Administrator at 10:49:09.23 on Thu 07/30/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1534.996 [GMT -4:00]

AV: Norton 360 *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Norton 360\Engine\3.0.0.135\ccSvcHst.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton 360\Engine\3.0.0.135\ccSvcHst.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\vVX... Read more

3 more replies
Answer Match 104.58%

Hi,

I need your help. My website "http://www.how-to-manifest-your-desires.com/" is listed by Google as a dangerous site that may harm your computer. The problem is that I don't know how to fix the problem. I have looked through the code to see any suspicious code but cannot see anything suspicious.

I'd appreciate if someone perhaps has experience with this sort of thing. See warning message below!

Thanks,
Jimmy

---------------------------

Warning - visiting this web site may harm your computer!
Suggestions:
Return to the previous page and pick another result.
Try another search to find what you're looking for.
Or you can continue to http://www.how-to-manifest-your-desires.com/ at your own risk. For detailed information about the problems we found, visit Google's Safe Browsing diagnostic page for this site.

For more information about how to protect yourself from harmful software online, you can visit StopBadware.org.

If you are the owner of this web site, you can request a review of your site using Google's Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
Advisory provided by GOOGLE
 

More replies
Answer Match 104.58%

after i restarted my computer everything looked to be fine until i went on to craigslist and all of the sudden this malwareweblink.com (http://malwareweblist.com/block.php?id=2036-2&url=http://vancouver.en.craigslist.org/forums/?act=Q&ID=144014843)

took over the screen and says my computer is at risk and it gives me two options

continue unprotected or get security software

i am running avg for firwall spyware and antivirus. this doesnt only happen with only craigslist it happens with almost every website i go to. not every time either but 50% of the time.

if i click continue unprotected it goes back to the website i was previously at but then pops up again. so i tried to click get security software and it takes me to a website to purchase antivir antivirus (http://malwareweblist.com/1/?id=2036-2)

so i belive this is a virus or somthing so if anyone can help me with this problem would be great thank you

please see the attachments as well

A:Warning! Visiting this site may harm your computer!

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

2 more replies
Answer Match 102.9%

I have searched to see if this was asked before without any success. Maybe someone has run into this problem before.
When I open "my computer" or "control panel" after I close it...it automatically goes into Internet Explorer as a blank page. Most of the time, when I close the IE blank page...it stops responding and I have the control-alt-delete to "end the program"
Thanks in advance for any help.
 

A:closing "my computer" or "Control Panel" open internet explorer window

Possibly malware - anything openning ie on its own raises an alarm in my books. Post a HJT log to the malware removal section of the forum and let the experts take a look at it
 

3 more replies
Answer Match 101.64%

Hi, i am new to this. I am having this problem with a IE popup this few days.

What happen is, whenever I restart my cpu, before I can click on anything else, these IE popups will appear. A popup appear. Window title is "* * * *** System Warning! Microsoft Internet Explorer" and "Warning: PC Update - Microsoft Internet Explorer". I can leave my cpu on and it will keep popping up. Can get over 20 of the same windows though I am not browsing (in fact, not working with my cpu at all)

Don't know if this is created by the same problem.. that is, when I am bhrowsing with IE, I get redirected to http://www.yupsearch.com/search.php very often.

I have got Ad-aware6 installed on my cpu, but this time round, it is not working to remove my problems completely. Tried fixing with Spybot too. But still problem of pop up exists. Tried installing MSN toolbar hoping this will block popup... but it will not work after cpu restarts.

Attached HijackThis log. Hopes this helps you guys to advise me. Thanks.

Logfile of HijackThis v1.97.7
Scan saved at 5:19:24 PM, on 10/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program... Read more

A:Help needed! IE popup "* * * *** System Warning! Microsoft Internet Explorer"

Closing duplicate, please reply here:

http://forums.techguy.org/showthread.php?t=286363
 

1 more replies
Answer Match 101.22%

Hello,

I've been having this problem for the past few days where my internet explorer (7) crashes everytime I run it (I'm working in safe mode now), and there is this red icon near the clock which says "Security warning: your computer may be infected with harmful or unwanted software" when i put the mouse over it.

I've tried running a full system scan with PC-Cillin 2006, ewido, spybot, trojan hunter but the problems keep occuring. Any help would be appreciated.

I'm running Windows XP Home and here is a log file from HijackThis....

Logfile of HijackThis v1.99.1
Scan saved at 11:52:52 AM, on 11/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5700.0006)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Johnny\Desktop\hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/fwlink/?LinkId=54843
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName ... Read more

A:Solved: "Security Warning" & Internet Explorer Crashing

16 more replies
Answer Match 101.22%

Hi, i am new to this. I am having this problem with a IE popup this few days.

What happen is, whenever I restart my cpu, before I can click on anything else, these IE popups will appear. A popup appear. Window title is "* * * *** System Warning! Microsoft Internet Explorer" and "Warning: PC Update - Microsoft Internet Explorer". I can leave my cpu on and it will keep popping up. Can get over 20 of the same windows though I am not browsing (in fact, not working with my cpu at all)

Don't know if this is created by the same problem.. that is, when I am bhrowsing with IE, I get redirected to http://www.yupsearch.com/search.php very often.

I have got Ad-aware6 installed on my cpu, but this time round, it is not working to remove my problems completely. Tried installing MSN toolbar hoping this will block popup... but it will not work after cpu restarts.

Please advise on how I can remove the popups and the redirection problem...

Thanks and regards.
 

A:[solved]Help needed! IE popup "* * * *** System Warning! Microsoft Internet Explorer"

14 more replies
Answer Match 101.22%

DDS (Ver_09-01-19.01) - NTFSx86
Run by admin at 10:14:58.43 on Sat 01/31/2009
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.479.27 [GMT -5:00]

FW: Norton Internet Worm Protection *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\eHome\ehmsas.ex... Read more

A:Google displays results with the warning message "this site may harm your computer"

http://securityblog.verizonbusiness.com/20...-google-search/The search engine giant Google was suffering from what appears to be a self-inflicted denial of service this morning.It is over and you should be ok. It you are still having problems, let us know and I'll put this log back into the HJT queue.

2 more replies
Answer Match 100.38%

Hello,

Recently, a freind brought me their computer to look at. At first I thought it was a straight forward issue relating to some minor spyware or something. But soon I realized it was a full blown infection. There were tons of files in the system32 that I knew were crap and all sorts of viruses/worms like Netsky and Kaboomface (the facebook one).

It seems I cleared it using most of the steps I found one line and on sites like this. But now I have one final issue. Internet Explorer closes as soon as it loads and prompts you to either save the site it was visiting or run the site. <--- puzzling..

I noticed it started prompting me to save or open STS<random number>.tmp and fwlink (this is that site IE often defaults to). These are the two I got the most.

I am not sure what to do at this point as it just seems to be some permanent damage to IE? I even uninstalled and reinstalled IE but got the same result.
Also, the ability to access internet options is locked. But I checked the registry and couldn't find any entry in there thats causing it.

Anyone ever experience something like this? I am going to update the Malware Antibytes and give it another full scan. Any other suggestions?

Thanks for any help!
 

A:Internet Explorer Closes Prompts to "save" site

Just tested and verified that Mozilla can work on the comp but not IE? I am now trying to download a standalone internet explorer installation file to see if I can reinstall it and if that can resolve the problem.
 

2 more replies
Answer Match 100.38%

I get this messgae when I go to one of my boards I go to . How can I remove it ? Cant get on my board .

I have windows xp, IE6 , dsl . THANKS Roz

A:"Internet Explorer cannot open the Internet site - Operation aborted" in IE.

Why don't you update your IE to the latest version (IE8) here:
http://www.microsoft.com/uk/windows/internet-explorer/

5 more replies
Answer Match 97.86%

Sometimes when I enter an URL Google redirects me at first to a "safety" web page telling me that the following (original) webpage could harm
my computer.

How dont want such intructions by Google.

How can I trun them off forever (in IntExp 9)?

Peter

A:Disable prompt "this webpage can harm your computer"?

That is a safeguard against you becoming infected and pops up because the URL has been Black Listed.

A workaround is to find another download site for the program - if they are the sites that produce this alert - otherwise you will need to change your browsing habits or you will end up with serious problems and will require the services of TSF's expert security team.

2 more replies
Answer Match 96.18%

I have run webroot antivirus with antispyware, several times. Every time I do, it finds the same virus (sometimes others with similar names). This is from the latest scan:

Mal/EncPk-CZ
Troj/FakeAle-FK

and some cookies. However often I quarantine them, they reappear on the next scan and I also can't get the desktop to go back to its normal appearance, it's gone white with a big warning (as above) and refers to:

win32/adware.virtumonde
win32/privacyremover.M64

having been detected on my computer.

I have gone through the 5 steps.

This is the active scan log:

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-08-21 18:37:14
PROTECTIONS: 1
MALWARE: 13
SUSPECTS: 1
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Webroot AntiVirus with AntiSpyware 5.8.1.55 Yes Yes
;==============================================================================================... Read more

A:Can't get rid of "Troj/FakeAle-FK" and "Warning! Spyware detected on your Computer!"

Hi Henry


Disable SpySweeper's realtime protection. Open Spysweeper and click on Options
Choose Program Options and uncheck
load at windows
startup
.
On the left click
shields
and then uncheck everything.
Uncheck
home page shield
.
Uncheck
automatically restore default without notification
.
Exit the program.


Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

A word of warning: Neither I nor sUBs are responsible for any... Read more

19 more replies
Answer Match 93.24%

In Windows XP, fully updated, I have several folders full of mp3's and want to see the bit rate and duration. I right click on a column heading and select "Bit rate". I then click on "More..." so I can get to "Duration", and I select that one too.

But all the figures in the "Duration" column appear to be in "hours" and "minutes", so I see "00:04" or "00:03", but what I want is "minutes" and "seconds".

Any thoughts as to how to change this?
 

A:Solved: Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes"

16 more replies
Answer Match 92.4%

I am running Windows XP SP3, fully updated, on an Acer lap top PC.

I have several folders full of .mp3's and want to see the bit rate and duration. To do this I right click on a column heading and select "Bit rate". I then click on "More..." so I can get to "Duration", and I select that one too.

The two new columns appear, but the format of the "Duration" column appears to be "hours:minutes", so I see "00:04" or "00:03" for most .mp3's, when what I want to see is 'hours:minutes:seconds", e.g. "00:03:45".

This also happens for video files (.avi files), e.g. all my episodes of "Heroes" (sad, I know) have a duration of "00:42" instead of "00:42:xx".


Here are two pictures showing the problem with the .mp3's. The first is of Explorer showing the Duration as "Hours:Minutes":




The second picture is of the properties window of the first .mp3 in the list above:




I copied some .mp3 files to another (old) PC on my home network, and it displayed the duration field correctly:




Also, the properties window correctly shows the duration also:





I'm not the only person to have this problem. I received a private message from a member of another forum where I posted about this problem several weeks ago. That person also has the same problem with the duration field.

The tech guys on that forum were unable to find the source... Read more

A:Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes"

* bump *

Tricky, this one!

8 more replies
Answer Match 91.98%

I am running Windows XP Home SP2 with the latest updates on a Pentium 1.8 GHz Dell 2350. Recently, IE and Eudora quit working. (No new programs had been installed.) IE will not load any pages, it just freezes. Eudora reports an "unhandled exception" and exits. "My Computer" generally will not open, but occasionally after searching several minutes it will function perfectly with every disk/link opening instantly. (I can bypass the "My Computer" button with the "Run" command to instantly open any drive. Using this method, the Control Panel may still open slowly.) Using Task Manager, no process generally appears to be using a lot of CPU resources. Also, "My Computer" and Eudora function perfectly in Safe Mode.

I did run the Panda online scanner. After 6 hours, it reported 37 potential "viruses or spyware" but did not give an option to fix any. I neglected to save the log file at that time--sorry. Since then, I have downloaded and run the following antivirus/spyware detection programs without finding any problems other than tracking cookies (removed all cookies): SpyBot Search & Destroy, AVG Free 8.0 full scan, BitDefender 10 Antivirus full scan, the latest Windows malware removal tool, sfc\ scannow (did not run with XP CD in drive), and Windows Defender. I have also uninstalled IE, restarted, and then tried opening Eudora with no improvement. After that, I uninstalled Eudora, installed IE 7, and res... Read more

A:"My Computer" (Windows Explorer), Internet Explorer, and Eudora Will Not Open

BUMP please . . .

By the way, I had also tried System Restore several times early on--without success.

Any help would be greatly appreciated. Thanks in advance!

19 more replies
Answer Match 90.3%

Does anybody know how I can change these icons?

I changed the default icon for the network one in HKEY_CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C} but it didn't change.
Appreciate any help,

B

A:Changing "Computer" and "Network" icons in explorer navigation pane

Hello, and welcome to Seven Forums.

If you like, you could use the method in the tutorial below to change the icon of "Computer" and "Network" to what you like, and have it applied everywhere in Windows.

Desktop Icons - Change or Restore Default Icon

3 more replies
Answer Match 89.88%

I recently bought a Gateway Laptop from Best Buy and it's running windows 7 home premium. Sometimes when I am on internet explorer it will become unresponsive and whites out. CTRL-ALT-DELETE won't bring up the menu and sometimes if it does I get an error saying it can't display the ctrl-alt-delete menu. When clicking on other things when internet explorer is locked up they become locked up, like when trying to press shut down or restart the start menu becomes locked up and also whites out. Hard reset is the only way to get it back running. I have the cpu/mem gadget on and when the lock-up occurs the cpu usage hovers around 0%. I've tried updating, have the latest of all windows components.
 

More replies
Answer Match 89.46%

Hello. I have a weird problem that doesn't seem very critical, but is really starting to bug me! I have a brand-spanking-new computer from Dell (Dimension 9100) with Windows XP. When I got the computer, there were no problems but this problem started about a month later.

There seems to be a delay of about 15-20 seconds every time I do the following two things:
i) Double-click on "My Computer" and wait for the contents to show
ii) Type a URL in the "Address" field in Internet Explorer WITHOUT the "http://" and hit [Enter]

As you might know, if you don't include the "http://", IE should search for what address you really meant and put the http:// in automatically. For me, the computer doesn't bother starting to do this until a 15-20 second delay is up. WEIRD EH?

My best guess is that my CD-ROM drive is causing the problem (Combo Drive DVD/CD-RW). Perhaps my computer takes a long time checking the CD drive before it bothers searching the rest of the computer. I don't know how to stop this, since it didn't do this before, and started doing it now spontaneously.

If anyone has any suggestions I would REALLY appreciate it. THANKS!!!
 

A:Strange delay at "My Computer" or Internet Explorer

I cant see how your opticald rive would be causing a delay in finding an address thru IE. have you checked hte device manager to see if their are any devices showing as havng a problem?

the delay with my computer sounds more like a file system problem you can run system file checker with your XP disk in the drive to check for damaged or missing system files. put the XP disk in your optical drive and open a command prompt, type sfc /scannow

another possibility is a virus or a trojan are your virus definitions up to date?
 

4 more replies
Answer Match 89.46%

Hello. I have a weird problem that doesn't seem very critical, but is really starting to bug me! I have a brand-spanking-new computer from Dell (Dimension 9100) with Windows XP. When I got the computer, there were no problems but this problem started about a month later.

There seems to be a delay of about 15-20 seconds every time I do the following two things:
i) Double-click on "My Computer" and wait for the contents to show
ii) Type a URL in the "Address" field in Internet Explorer WITHOUT the "http://" and hit [Enter]

As you might know, if you don't include the "http://", IE should search for what address you really meant and put the http:// in automatically. For me, the computer doesn't bother starting to do this until a 15-20 second delay is up. WEIRD EH?

My best guess is that my CD-ROM drive is causing the problem (Combo Drive DVD/CD-RW). Perhaps my computer takes a long time checking the CD drive before it bothers searching the rest of the computer. I don't know how to stop this, since it didn't do this before, and started doing it now spontaneously.

If anyone has any suggestions I would REALLY appreciate it. THANKS!!!
 

A:Strange delay at "My Computer" or Internet Explorer

16 more replies
Answer Match 88.2%

When attempting to browse folders using Explorer opened from Start Menu Or left click on start button, Explorer will allow click on "-" to close paths, but hangs with hour glass if any attempt is made to expand any path or open any file. Explorer remains in this state until closed, at which time Windows asks if I wish to report the problem to Microsoft.
If I use the "My Computer" icon on the desktop to browse, all actions including access to networked resources work perfectly.
Can anyone please explain the difference between the two file browsing utilities and offer an explanation of the above?
My system is: AMD 3000; 2GB Ram Xp Pro with all service packs and updates. I am on a wired network with fixed IP addresses. Other network components are: Old Dual P350 with 0.5GB Ram running Windows 2000 (Explorer on this machine has no problems including access to networked resources); Buffalo 1TB Link Station; 2Wire ADSL router and HP LaserJet 1100 printer.
 

A:Solved: "File Explorer" hangs, "My Computer" does not?

8 more replies
Answer Match 88.2%

Hello, nice peoples that provide so many fixes to make Windows suck less.

I've been looking for hours, but the terms are so general I can't find anything. When I open up Windows Explorer, the "Computer", my profile folder, and the Recycle Bin all appear under "Desktop". Which makes finding things a pain in the butt.

Is there any way to set those items as their own icons, outside of Desktop, and remove them from under Desktop? Basically, I want to see this:

-Computer
└C:\
└Folder
└Folder
└...
└D:\

-Desktop
└Folder
└...

-senselocke
└Downloads
└Favorites
└...

-Recycle Bin


I know you guys have found a ton of tweaks for Windows 7, but this one has bugged me for a while now. Has anyone found a way to get something sort of like that?

A:Move "Computer" and "[username]" out from under Desktop in Explorer?

Hello Senselocke,

You could use the tutorial below to add the User Folder (ex: senselocke) as a separate group in the navigation pane.User Folder - Add or Remove from Navigation Pane
You could use the tutorial below to add the Recycle Bin as a separate group in the navigation pane.Recycle Bin - Add or Remove from Navigation Pane
You might also see if unchecking the Show all folders option in the navigation pane may help get you closer.

Hope this helps some,
Shawn

3 more replies
Answer Match 88.2%

Looking for some help. My wife's toshiba satellite laptop takes forever searching when you try to access My Computer or Windows Explorer. This happens from the desktop icon or thru the start menu. It seems to be searching for something that isn't there.

She is running XP Home OEM edition. Version 2002. computer has Celeron M processor 1.2 GB of ram. Being used for surfing, digital camera picture downloading, itunes, MS Office stuff. there is alot of Toshiba stuff in the add/delete list. not sure what is necessary and what isn't.

Thanks.

PS checked MS database. it said to go into Adminstrator services and stop WIA. I checked this and it is already stopped on this computer.
 

More replies
Answer Match 88.2%

Hi, I'm a new-commer and have been following this thread avidly and taking everyone's advice as I too have identicle problem to Chaz and other bloke i.e my PC (XP) is very slow, shows torch when you open "My Computer" for 15 secs, and when I use Explorer takes ages to find a web address so I'm using Firefox which is fine. Been bothering me for months, tried RWnewson's registry and didn't work. i don't have. Created shortcut direct to C drive to bypass "My Computer" delay however while this works, PC is becoming worse as when I move any files from one folder to another within the C drive the PC can;t cope and stops responding. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanc ed]
"NoNetCrawling"=dword:00000001 anyway.
My computer is not part of a home network nor does it say searching when I open My computer. This did all start when I installed software for new digital camera and webcam. Uninstalled cameras but still runs slow. Bugger.. Help. Tried registry cleaner and various virus killers. There is nothing threatening.
Interestingly when I end process for sychost.exe everything works fine but then Windows closes down in 30 seconds. PLEASE HELP!!!!
You all seem interested in Hyjack this report so here is mine
Logfile of HijackThis v1.98.2
Scan saved at 00:00:20, on 26/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\... Read more

A:XP "My Computer" and "Explorer" taking ages to open

assuming you ran spyware and adaware cleanups, i would suggest reinstalling windows..... Windows (every version) will eventually slow down and not respond, act very unstable, not cooperate, and eventually it will commit suicide and give you major blue screens. then the computer has problems booting... a reinstall (a fresh reinstall preferebly) would probably fix it.....

could you post your system specs? that may help a little bit...
 

3 more replies
Answer Match 87.78%

hello,

This site helped me cure my Laptop in the past and now I am in the process of aiding a friend whose IE is being hijacked to a suspected Anti-malware site for a product known as "Ultimate Cleaner 2007". He also keeps getting repetative pop-ups for an alleged virus known as "Worm.Win32.NetSky" which redirects you again to an unknown site.

here is his HJT log:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 8:27:09 PM, on 11/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HPQ\shared\hpqwmi.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Docume... Read more

A:HJT log for "Ultimate Cleaner 2007" browser hijacking and "Worm.Win32.NetSky" warning

Welcome to TSG

Please download SmitfraudFix

Double-click SmitfraudFix.exe
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm
 

3 more replies
Answer Match 87.36%

I know this was an old post but I am currently having what appears to be the exact same problem, although running Win2000 on an older (PII) machine. IE6 simply appears to be slow. I've disabled protection added via Spywarblaster, Spybot, etc, and deleted all history, temp files, etc.
Once a site is up it appears to run normally., Download speeds are normal (hi-speed Cable). When opening IE6 it takes over a minute to open the page, all the while the indication in the bottom left is "Finding Site:" and whatever the address is, even something as simple as www.google.com.
Unsure what has caused this relatively recent slowdown. Any help?

IrishPip are you still around - did you find the problem?

A:Explorer & FF slow on "finding site http..."

Hello and welcome to TSF

please do this

Open IE and go to Tools => Internet Options => Advanced and uncheck "Enable third-party browser extensions" (requires restart). Try opening links after you rebooted and let us know if you still have a problem.

2 more replies
Answer Match 87.36%

Started last week, all working fine and suddenly all browsers (IE6 & IE7 & Firefox) take forever on requesting any webpage. Running xp on broadband 3mb. Have multiple computers on same network and perfect speeds on them. PC in question is fast and new.

When any page is requested the browsers take about 60 seconds to request the page. In the corner it says "finding site" or "waiting for". Once it starts to download the page flys up instantly. Same with all pages. A bit fast obviously second time on any page.

Connection is fine speed wise, once anything starts downloading it goes instantly to full speed. Network monitor shows it reaching & maintaing full speed on downloads (tested by downloading media player) but very long pauses between requests for websites. Network speed is fine between this computer and others. The computer pings fine.

So far I have, Ran ad-adware and norton scans ( all clear )
Cleared all caches and temporary files
Uninstalled firefox and IE 7 and reinstalled IE7
Changed broadband connection to USB and other ethernet connections
Released and renewed ip
Switched to fixed IP and back to automatic
Enabled and disabled proxy settings
Ran repair tool on connection
disabled all security (Nortons and Windows, normally use just Nortons firewall)
Set internet default security to low
Run network wizard to create new network

Cannot find any articles related to such a problem online. As mentioned I feel security isn't a prob... Read more

More replies
Answer Match 87.36%

"dependency chain" "windows 7" internet "windows explorer"

At the time of this writing, this search in Google will produce one result at best. Am I searching the wrong things? I have tried a couple handfuls of variants, and I am coming up with zilch.

Though I am fairly well versed in Windows 7 from working on other people's machines, I decided to stick with good old XP because of one issue above all else. When I instructed my firewall to block Windows Explorer from accessing the Internet it completely cut me off from the Internet, no ifs, ands or buts. My understanding of why this is happened leads me to believe the dependency chain for Internet access goes through Windows Explorer. I have long had a habit of blocking my File Manager of choice access to the Internet because... well, it's a file manager! Admittedly, my one experience with Windows 7 on my own machine was a retired student version of Server 2008 R2, but as soon as I found out that was the case, I decided not to make the move to Windows 7 and went back to my XP installation. I believe I was using Sunbelt Personal Firewall at the time. I now use PCTools Free Firewall.

Is this still the case with Windows 7? Is there a workaround if it is?

I haven't tried to recreate this on another person's machine.

+KronKyrios

A:"dependency chain" "windows 7" internet "windows explorer"

Hi KronKyrios, welcome to 7F!

I did find some very old information that may shed some light:
http://www.pctools.com/forum/showthread.php?17198-explorer.exe-(W98)&p=58079#post58079

"Launch Browser Windows in a Separate Process" Setting Is Not Available in Internet Explorer 5.01 or Internet Explorer 5.5

You can go into Services and check:
Windows Firewall/Internet Connection Sharing (ICS)
Network Connections
Remote Procedure Call (RPC)
Windows Management Instrumentation

R-click on each one, then Properties, then the Dependencies Tab.
You would have to cross check each one that is listed.

Here is a good list to help you: Black Viper’s Windows 7 Service Pack 1 Service Configurations

6 more replies
Answer Match 86.52%

I recently moved to Mexico from the US and am using Prodigy DSL. I have a reacurring problem with accessing different sites. I type the URL in the window and I keep getting that message "can't find site" I can get to the site in a back door way and know that it does exist. Microsoft.com is one of them that I can't get to. I'm using Window XP Home and have exhausted all my slim knowledge to try and fix this problem. Thanks for any help.
 

More replies
Answer Match 86.52%

Ars Technica article here.

Avalanches are normally something you only worry about when you are lost in snowy mountains or when coming home from vacation and dealing with your junk mail. But researchers studying hard drive technologies have recently discovered that "magnetic avalanches" may pose a serious threat to data stored on rapidly-spinning drives. Joshua Deutsch, a physics professor at the University of California-Santa Cruz (go Banana Slugs!), and Andreas Berger of Hitachi Global Storage Technologies, reported the effect in the Physical Review Letters.

-- Tom
 

More replies
Answer Match 86.1%

I've run SuperAntiSpyware, Ad-Aware, SpyBot and Norton which removed some trojan files and registry items but I'm still getting pop-ups ("Security System Warning" and "System Integrity Scan Wizard"). Below is my HiJackThis log. Thanks in advance!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:00:21 PM, on 4/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\cryptainersrv.exe
C:\WIND... Read more

A:"Sys Integrity Scan Wizard" & "Security System Warning" Pop-ups

Hi Welcome to TSG!!
Please visit this webpage for instructions for downloading and running ComboFix.

Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.
 

1 more replies
Answer Match 84.84%

My friend is having an odd sort of internet problem.
Whenever he signs on IE, or boots up AIM, or trys to make a connection to the internet of any kind, a message pops up reading "prepairing to install"
He's running on XP, and is connected to the internet via a campus ethernet.
 

A:"Preparing to install" internet warning

16 more replies
Answer Match 84.42%

Hi,

My laptop has been infected, as a result I am seeing a blue background with a rectangular box in the middle. The top half of this box is yellow and says "Warning! Spyware detected on your computer." The bottom half is blue and says "Install an antivirus or spyware remover to clean your computer."

I have run Norton , Grisoft and Spy-Bot, none of which has removed it.

This is the Logfile:

Logfile of HijackThis v1.99.1
Scan saved at 3:00:07 PM, on 5/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Java\jre1.6.0_05\bin\j... Read more

A:[SOLVED] &quot;Warning! Spyware detected on your computer...&quot; message on desktop

Welcome to TSF.

Please print the below instructions or copy them to Notepad. Make sure to work through the fixes in the order mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.

Run a scan in HijackThis. Check each of the following if they still exist and hit 'Fix Checked' after you checked the last one:

O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/dow...in/actxcab.cab
O16 - DPF: {FE6A3E85-0F6C-49AD-8843-68FF44E7EEA9} - http://plugin.secureservicepack.com/...ervicepack.cab
O20 - Winlogon Notify: awvtr - C:\WINDOWS\system32\awvtr.dll (file missing)

1. Download combofix at http://www.techsupportforum.com/sect...s/ComboFix.exe or http://download.bleepingcomputer.com/sUBs/ComboFix.exe Save it to your Desktop before you run it.
2. Double-click combofix.exe & follow the prompts.
3. When finished, it will produce a log for you. Post that log in your next reply.

Note:
Do not click on combofix's window while it's running. That may cause it to stall.

7 more replies
Answer Match 84.42%

I downloaded a virus yesterday (8/10) trying to open a video of the opening ceremony of the Olympics (I do not remember the exact URL). The virus was disguised as a video codec for Windows Mediaplayer. After I downloaded the file, a blue screen with a warning in a yellow box replaced my desktop image. The warning says:

"Warning! Spyware detected on your computer. Install an antivirus or spyware remover to clean your computer."

I have tried to remove it with McAfee Antivirus and with a Virus Removal tool I got from my University, but neither of these was able to remove the program. Can you help me?

I attached the two log files below. If you need any additional information, please let me know.

Thanks!

****************Active Scan Log************************
;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-08-11 16:20:06
PROTECTIONS: 1
MALWARE: 37
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===========================================================================================================================================================... Read more

A:Desktop Image Virus - "Warning! Spyware Detected On Your Computer"

Looking over your log, back ASAP.

13 more replies
Answer Match 84.42%

Hi!

Yesterday, I got a virus which changed the background of my Windows XP to a blue background with the message "Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer."

Also, my screensaver has been changed to a fake BSOD and then the Windows startup screen which is highly irritating! On top of this, I am being bombarded with pop ups and redirections when using the internet.

Here is a copy of my HijackThis log:


Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLACSD.EXE
C:\PROGRA~1\TALKTA~1\backweb\81720\Program\SERVIC~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\BLUETOOTH\Bluetooth Software\bin\btwdins.exe
C:\Program Files\TalkTalk Online Security\Anti-Virus\fsgk32st.exe
C:\Program Files\TalkTalk Online Security\Anti-Virus\FSGK32.EXE
C:\Program Files\TalkTalk Online Security\backweb\81720\program\fsbwsys.exe
C:\Program Files\TalkTalk Online Security\Common\FSMA32.EXE
C:\Program Files\TalkTalk Online Security\backweb\81720\Program\fspex... Read more

A:Virus- Background changed to "Warning! Spyware detected on your computer!"

Anyone?

5 more replies
Answer Match 84.42%

Need , help to fix, My CA spyware won't get rid of it,

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:32:14 PM, on 7/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe
C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe
C:\Program Files\CA\CA Internet Securit... Read more

More replies
Answer Match 84.42%

Earlier this evening I randomly got 3 or 4 pop-up windows that were followed by a blue screen.
In a panic or something I pressed enter and the blue screen went away. Everything closed immediately by itself and then showed my desktop.
Ever since, my background is blue with a yellow box that reads
"Warning! Spyware detected on your computer!
Install an antivirus or spyware remover to clean your computer."

I haven't noticed any difference in how my computer is running, other than the fact that I have no desktop control.
When I right-click my desktop I can't change my wallpaper or any desktop settings.

I keep getting blue screens that go away after I press enter, although, my computer did shut off after I got one of the screens.

I've read posts relating to this but tried following the steps and things were too different.

Any help is appreciated. Thank you!

Here is my Hijackthis log:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:32:23 PM, on 6/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ... Read more

A:Blue background that reads: "Warning! Spyware detected on your computer."

Hello, and welcome.

Scans are best run in normal mode unless otherwise instructed.

Please do this:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

---------------------------------------------------------------------------------------------

1 more replies
Answer Match 84.42%

I double-click and get "search" instead of "open"--only when I click a disk, like Hard Drive C: or Floppy A: or CD F: and so on.

It didn't used to do this, so I must've inadvertently changed some setting somewhere, but darned if I can find it now.

Any ideas?
 

A:Solved: On the "my computer" list, I double-click on disks and get "search" instead of "open"

12 more replies
Answer Match 84.42%

Ok, so im new here so hey everybody..

to the point: my laptop is "stuttering"/lagging/skipping.
whatever you wanna call it its doing it.
my video/music/and cursor skip every second for a splt second it starts on start-up and dont stop til i turn my laptop off. it happens in a pattern its not random, ive done checked my drivers, spyware, and m RAM is good.. so can someone please help me? ***could it be because my battery wont hold a charger? so it has to be hooked up to the charger at ALL times or it dies Example: is the charger not got the "juice" to run the laptop by itself so it studders/skips..*** i dont know if this has anything to do with my problem but i ran "event viewer" and found this : The following boot-start or system-start driver(s) failed to load:
Cdrom
Imapi
redbook

PLEASE HELP




OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Genuine Intel(R) CPU T2250 @ 1.73GHz, x86 Family 6 Model 14 Stepping 8
Processor Count: 2
RAM: 502 Mb
Graphics Card: Mobile Intel(R) 945GM Express Chipset Family, 224 Mb
Hard Drives: C: Total - 39723 MB, Free - 23484 MB; D: Total - 12684 MB, Free - 3633 MB;
Motherboard: Dell Inc., 0FF049, , .HWPLLB1.CN1296167S5169.
Antivirus: McAfee VirusScan, Updated: Yes, On-Demand Scanner: Disable
 

A:Solved: Whole computer "studders"/"skips"/"lags" .. have event viewer report (PLEASE

6 more replies
Answer Match 84.42%

Every time I restart my computer the desktop is changed to a blue background with a yellow message reading "Warning! Spyware detected on your computer. Install Antivirus or Spyware Removal to clean your computer." My screen saver is changed to bugs. And it also changes the registry key "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies" so that there is no background or screen saver tab in the display options.

I have followed the instructions for this problem from other threads to no avail. I have rebooted in safe mood, ran smitRem, Hijack This!, Ad Aware, AVG, Kaspersky, Registry Mechanic, scan disk, and disk clean up.

All of this and still every time I reboot it comes back up. I will include my current Hijack This! file.

Logfile of HijackThis v1.99.1
Scan saved at 1:02:39 PM, on 6/7/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WI... Read more

A:Desktop Hijacked "Warning! Spyware detected on your computer."

It sounds like you have been attacked with malware.

Don't Panic! The HJT Support Team are very proficient with these sorts of things.

With that said, we recommend that you read this article… "IMPORTANT - 5 Step Process: Read This Before Posting For Malware Removal Help"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum.
(Simply, click on the coloured links to be re-directed.)

Please ensure that you create a new thread in the HiJackThis Log Help Forum; not back here in this one.

When carrying out The 5 Steps, if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.

After your system has been verified as clean, if your are still experiencing those problems come back here and we will assist you further.

4 more replies
Answer Match 84.42%

Hello, my name is Devon and im fairly new to computers, so I probably wont understand most "big computer words", if you know what I mean.


Warning! Spyware detected on your computer!
Install an antivirus or spyware remover to clean your computer.

That is my wallpaper and I can't change it. It's in a yellow box on a blue background, and in my Desktop Properties, theres no wallpaper tab, so I cannot change it.

Screenshot : http://i35.tinypic.com/2nveccg.jpg (Sorry if not allowed)
I'm sure you've seen it before

I have an emachines computer, service pack 2, Windows XP.

I have Avira AntiVir Personal free antivirus and I scanned the systems folder, found some viruses and deleted them, but still no luck.

ANY HELP IS VERY MUCH APPRECIATED!



Mod?s Message

Please note that this section of the forum is very busy, and re-familiarize yourself with the Bumping Rules found in Step 5 of our sticky topic Important - Please Read This Before Posting for Malware Removal Help, which you should have read before posting. We ask that no one bump a thread before 72 hrs have passed, and then, only once. Premature bump posts will be deleted.

Thanks for understanding.

A:blue "Warning! Spyware detected on your computer!" Wallpaper

wow no help?

3 more replies
Answer Match 84.42%

Hi, my computer was infected yesterday after I downloaded what I thought was a software update . My computer desktop background was changed to a blue background displaying the message "Warning! Spyware detected on computer! Install an anti-virus or spy remover to clean you computer".

McAfee detected a trojan and deleted it immediately, I then physically disconnected from the internet straight away, looked at the task manager deleted the file B2E.exe that was running from the temp directory. The software tried to take me to a bogus website to download their software and this was blocked by firefox =).

I then ran spybot, followed by panda activescan and HijackThis, the logs are below, could any experts help me out here? I goggled and found websites that tells you how to remove this manually, but not sure if this would be applicable for every computer and the adware may have change since.

Thanks in advance

Panda activescan log

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-08-17 18:53:59
PROTECTIONS: 1
MALWARE: 5
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Up... Read more

A:Help - "Warning! Spyware detected on computer!" on desktop background

Hi js200605


Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

13 more replies
Answer Match 84.42%

Please help.
I am running Windows XP Home Edition SP2 with McAfee.
This problem just occurred last night.
Cannot remove this new "picture" from my desktop background, as the Display Properties options have been limited to the tabs "theme", "appearance", and "settings". Also, McAfee wasn't in my taskbar as usual, is so I had to run it from Start. So far it has found nothing.

My new background image is like this:
In an orange box: "Warning! Spyware detected on your computer! Install an antivirus or spyware remover to clean your computer"
In a white box right below:
"Warning! Win32/Adware.Virtumonde Detected on your computer"
"Warning! Win32/PrivacyRemover.M64 Detected on your computer"
On the very bottom, the words in the image of a clickable button:
"Please activate your antivirus software to Clean your computer"

Here is my Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:21:31 AM, on 8/20/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Pr... Read more

More replies
Answer Match 84.42%

My father who is very new to internet surfing used my computer while I was away. When I came back there is this message shown as a desktop background "Warning! Spyware detected on your computer" and I could not make any change to the desktop background. I suspected it might be some kind of spyware, but I could be wrong since my computer always ran ZoneAlarm and AVG in the background.

I ran Panda ActiveScan and found that the computer is infected. The scan result is attached as a text file (activescan.txt). I then ran HiJackThis and below is the result. Please suggest what I should do next. Thanks in advance.

----
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:48:21 PM, on 8/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\LV... Read more

A:"Warning! Spyware detected on your computer" message on desktop

please help...

11 more replies
Answer Match 84.42%

My buddy opened up an email and downloaded some sort of virus/malware/adware that I cannot get rid of. My background is blue, and there's a yellow box that reads "Warning! Spyware detected on your computer! Install an anti-virus or spyware remover to clean your computer." Malwarebyte's and AVG both didn't detect anything, and I'm out of options. If anyone could help it would be GREATLY appreciated.
Here is my HijackThis log...
Logfile of HijackThis v1.99.1
Scan saved at 11:05:50 PM, on 6/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\dlbxcoms.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\runservice.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Vie... Read more

A:Blue background "Warning! Spyware detected on your computer"

Hi, Welcome to TSG!!
Run HJT again and put a check in the following:

O4 - HKLM\..\Run: [lphcrtwj0eva5] C:\WINDOWS\system32\lphcrtwj0eva5.exe

Close all applications and browser windows before you click "fix checked".

Please download the OTMoveIt2 by OldTimer.
Save it to your desktop.
Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
Code:
[b]C:\WINDOWS\system32\lphcrtwj0eva5.exe[/b]

Return to OTMoveIt2, right click in the "Paste List of Files/Folders to Move" window (under the light Yellow bar) and choose Paste.
Click the red Moveit! button.
A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
Close OTMoveIt2
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please download Malwarebytes Anti-Malware from Here or Here
Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
If an update is found, it w... Read more

1 more replies
Answer Match 84.42%

I have a similar problem to what I have read from other users in this forum, however my desktop has been turned into a white background and the popup has a red background header; below the red header in the popup, it claims, "Warning! Win32/Adware.Virtumonde Detected on your computer" and "Warning! Win32/PrivacyRemover.M64 Detected on your computer".

This began yesterday while I was working online.

I purchased a cd and installed Webroot Spysweeper, but it only found low risk cookies.

I tried an online trial version of XoftSpySE and it found two trojans (Downloader Agent BXW Trojan), but it won't clean them unless I purchase the full version. I would, but I'm afraid to disclose personal financial info online in order to purchase the full version.

I did the same thing for "Registry Fix" Version 7, but I can't remove the found problems without registering online - I don't want to do that either for fear my personal financial info will be exposed.

If I try to open any file folder on my desktop, I get a Windows popup that says Windows Explorer has encountered a problem and needs to close. I can open the two or three files on my desktop that are files - not folders - however, they are just doc files or similar.

If I try to access my Control Panel, nothing happens.

MOST IMPORTANT:
I have read your "Start Here" posts and cannot complete some of your instructions. If I try to go online to download a version of anti-spywa... Read more

A:Popup "Warning! Spyware detected on your computer!" New version

I was given a bootable Kaspersky "rescue" cd today. I ran the disc and, after it did whatever it does, a black screen with a window opened. It was an operational window, so I chose "Scan drive c" and it returned with a message that my computer was at high risk. I clicked the "Fix-it Now", but it said the "databases were out of date" and should be updated. OK... however, there was no button or other mechanism to do this. I removed the cd and rebooted the computer. I am right where I was before.

I cannot go online to any anti-spy or anti-virus sites. It appears as though this virus recognizes those sites and prohibits me from going there. I typically get a messsage that reads, "Unable to connect." with a "Try again" button. I can't even go to this website!! I have to use my wife's computer to login here.

By the way, this is a problem on Firefox or IE. I can go to other sites, though. Yahoo, google, online stores, etc are accessible, but the desktop background is still hijacked and I have the same desktop warning window.

Remember... I can't remove it via any help from an online anti-spy or anti-virus site. If I try to access an anti-spy or antivirus site, I get the response as noted above. Unfortunately, this means I am not able to get past Step Two in your "5 steps before posting a log" thread. I did not find any rogue or suspect programs listed in step one.

It has been 24 hours wit... Read more

1 more replies
Answer Match 84.42%

Hi,

This morning my laptop suddenly began displaying a "Warning! Spyware detected on your computer" desktop message. I tried running AVG, but it did not resolve the problem. The issue seems to be related to Agent.AADP and Generic_c.VCZ trojans.

I've followed all five steps of the tutorial. My HijackThis log is as follows:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:18:05 PM, on 9/9/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Dell Network Assistant\hnm_svc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOW... Read more

A:"Warning! Spyware detected on your computer" desktop - Agent.AADP / Generic_c.VCZ

Hello and welcome to TSF.

Apologies for the long delay in response. We have a large number of HijackThis logs to handle and it?s taking us longer to catch up. If you haven?t received help elsewhere already and still require assistance please perform the following:Download RSIT by random/random and save it to your desktop.
Double click RSIT.exe to start the tool and click Continue at the disclaimer.
When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of log.txt here.
Please attach info.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\rsit\info.txt

Click Upload.

14 more replies
Answer Match 84%

I'm a newbie, first time posting and I've been infected with a Virus. It masks itself with a Windows Security Alert (Windows Firewall has detected activity of harmful software, as the subheading) continual pop ups, less often now, don't know why, but perhaps it is more frequent when I'm surfing the internet. These pop-ups messages have included:

Trojan-Spy.Win32.KeyLogger.aa
Trojan-Spy.Win32.GreenScreen
Trojan-Spy.HTML.BankFraud.dq
Trojan-Clicke.Win32.Tiny.h
Trojan-Downloads.Win32.Agentbq

Oh, also if I do not push control, shift, escape to get into my Windows Task Manager to end the annoying pop-up process that not too long and I will get a "blue-screen of death" that pretty soon corrects to try and boot into windows, but then only shows the first inkling of the windows bar with nothing strobing by and then goes back into a blue screen of death again, and then it starts a continuous loop in that fashion. I have to restart my computer.

Oh, also I did try another remedy from a thread somewhere, that from vague memory bits here, cleared my cookies etc and I think I even had to go boot in safe mode before I did 2 items, but I was supposed to have cleared my cookies then and instead had done it before not in that safe mode; maybe that is why that solution didn't work.

I've gone through the 5 steps suggested on these log boards before to post my log below (see at the end of this message); also to include will be the log from Panda Acive scan below th... Read more

A:"Warning! Spyware Detected on your computer!" pop ups problem.

Hi


Disable Spybot's TeaTimer Run Spybot-S&D in Advanced Mode
If it is not already set to do this, go to the Mode menu
select
Advanced Mode

On the left hand side, click on Tools
Then click on the Resident icon in the list
Uncheck
Resident TeaTimer
and OK any prompts.
Restart your computer


Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/comb...o-use-combofix


Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

1 more replies
Answer Match 84%

I am running Windows XP with SP2 installed. Today, my desktop background suddenly changed to a bright blue with a dialog box stating "Windows Warning Message!" at the top and which had on a bright red field the words "Warning! Spyware Detected on your Computer!" At the bottom of the box it said "Please activate your antivirus software to Clean your computer" (sic)

I've gone through the "5 steps before posting a log" on this forum and the only step I could not complete was #2, the Panda Activescan. About 15% of the way through the scan I crashed to a blue screen indicating a "software failure". The machine then automatically rebooted. I completed the remaining steps.

My Hijack This log is as follows:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:27:44 PM, on 8/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\... Read more

A:"Warning! Spyware Detected on your Computer!" on the desktop

Bumped

8 more replies
Answer Match 84%

I'm sure you have seen your fair share of these threads by now so I won't describe the problem unless you need me to. None of my anti-virus/spyware prevention has done anything. Here is my HJT log:

Logfile of HijackThis v1.98.2
Scan saved at 21:02, on 6/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
C:\PROGRA~1\PESTPA~1\PPControl.exe
C:\PROGRA~1\PESTPA~1\PPMemCheck.exe
C:\PROGRA~1\PESTPA~1\CookiePatrol.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\SysMetrix\SysMetrix.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Ad Muncher\AdMunch.exe
C:\Progra... Read more

More replies
Answer Match 84%

I recently downloaded something and opened a file named "run.exe" and then my computer kinda died, the backround changed to blue with a text in middle, and when I dont move anything it will come larvas from the sides and crawl all over the screen. Also, i get popups wanting me to buy stuff and internet explorer changed start site and leads me to wierd stuff. With my 2nd computer i looked this up in google but couldnt rly find any good solution, since I didnt find something exactly the same, but i tried some anti spyware/malware programs, deleted some stuff. But now im stuck, the things i delete keeps coming back. I have stopped getting popups but my screen is still blue (text is removed), and everything i try is "Disabled by Admin" which cant be true since im the only 1 on this computer. The start bar and icons are all gone and i cant right click anywhere either. Also where the clock should be it sais "VIRUS DETECTED!!"

I use XP and have Kaspersky 7.0.

Im gonna try to post a HJT file as soon as i get back to my PC.

Thx.
 

A:"Warning! Spyware Threat Detected On Your Computer!..."

Aight, I got the HJT

Logfile of HijackThis v1.99.1
Scan saved at 18:53: VIRUS ALERT!, on 2008-05-26
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program\Delade filer\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program\Razer\razerhid.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
C:\Program\Delade filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program\Delade filer\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program\NetLimiter 2 Pro\nlsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\Program\NetLimiter 2 Pro\NLClient.exe
C:\Program\Razer\razertra.exe
C:\Program\Razer\razerofa.exe
C:\Program\Delade filer\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program\Mozilla Firefox\firefox.exe
C:\Program\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program\WinRAR\WinRAR.exe
C:\WINDOWS\system32\taskmgr.exe
C:\DOCUME~1\Micke\LOKALA~1\Temp\Rar$EX17.4359\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Star... Read more

1 more replies
Answer Match 84%

Hello,

I recently was infected with some sort of virus/spyware that changed my desktop indefinitely. I am unable to change the desktop back, and I'm assuming that the virus may be causing other issues as well. I use the Norton Utilities software, and it recently cleaned up my registry. Right after cleaning the registry, this problem arose..

Below is the posted Hijack log.. Any help would be greatly appreciated!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:24:57 PM, on 6/8/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\inf\rundll33.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\V... Read more

A:"Warning! Spyware detected on your computer" Desktop Bug

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 84%

Yeah, somehow I got this spyware/malware and it's nasty! I can't get past the blue splash warning screen, and even in safe mode my system was crashing after a few minutes, requiring a reboot.

Others seem to have this same problem, I see, and I did a Hijackthis scan, too - however, I didn't seem to find the same problem lines in my output that others had, so I didn't want to run a Combofix without finding something first. Perhaps someone can assist.

FYI, I can only operate this computer in Safe Mode.

Here is my Hijackthis output:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:19, on 2008-08-14
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CF8926.exe
C:\ComboFix2\nircmd.com
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4... Read more

More replies
Answer Match 84%

need help getting rid of it.....

i have windows xp

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:08:38, on 8/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\TrayComm.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Win... Read more

A:Need help removing "Warning spyware detected on your computer"

Hello and Welcome. Apologies for any delay in replying, but we have been rather busy lately.

You may wish to subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Since it has been a few days since you first posted, please do this:

---------------------------------------------------------------------------------------------
Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
Double click on RSIT.exe to run RSIT.
Click Continue at the disclaimer screen.
Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

1 more replies
Answer Match 84%

Hello... and thanks in advance for helping!

I am the "Computer Support Technician" for my 75 year old very active business and close friend ( I am actually an EE) For his birthday 2 days ago, he received a "greeting card" and the trouble began...

First he has (had) NIS 2008 with Live Update on and MS Automatic updates turned on. He scans his computer once a week.

We now have a very active HD with the Red and White warning box with "Warning! Spyware detected on your computer!" with the Warning! Win32/Adware.Virtumonde Detected on your computer along with Win32/PrivacyRemover.M64 listed ALL in the wallpaper background... of course in which you can't access

In the Services tab of MSConfig their are two RPC services show... one stopped and one running... which I can't stop.

In the task manager processes I see a fairly busy svchost.exe taking up 3 percent of the time (just under the System Idle process)

NIS 2008 in safe mode found no virus. Thus I took over and use a version of AVAST that runs under BART PE (on a CD)... this found two trojans and a bad VBS file which it deleted.

So now the HD is very busy, and the computer slow. I can't kill the svchost.exe process... it wants then to shutdown after 60 seconds.

I do get blue screens of death... but they are fake as I can hit ESC and they go away.

I also can't install or uninstall anything... I get a The Windows Installer Service could not be accessed. I did find some comm... Read more

More replies
Answer Match 84%

Can someone look at these logs for me?
Deckard's System Scanner v20071014.68
Run by Carmen on 2008-04-25 23:19:28
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- Last 3 Restore Point(s) --
3: 2008-04-26 01:21:29 UTC - RP265 - Removed MythWar
2: 2008-04-24 18:44:27 UTC - RP263 - Windows Update
1: 2008-04-23 17:27:55 UTC - RP262 - Scheduled Checkpoint
Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 895 MiB (1024 MiB recommended).
-- HijackThis (run as Carmen.exe) ----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:22:19 PM, on 4/25/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Program Files\SiS VGA Utilities\SiSTray.exe
C:\Program Files\Lexmark 2500 Series\lxddmon.exe
C:\Program Files\Lexmark 2500 Series\lxddamon.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbar... Read more

A:PC-AntiSpyware, "Warning: Your computer may have critical errors"

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft® Windows Vista™ Home Premium (build 6000)
Architecture: X86; Language: English

CPU 0: Intel(R) Pentium(R) D CPU 3.00GHz
Percentage of Memory in Use: 69%
Physical Memory (total/avail): 894.94 MiB / 270.73 MiB
Pagefile Memory (total/avail): 2045.26 MiB / 889.23 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1902.42 MiB

C: is Fixed (NTFS) - 69.77 GiB total, 25.66 GiB free.
D: is Fixed (NTFS) - 69.52 GiB total, 69.43 GiB free.
E: is CDROM (No Media)
F: is Removable (No Media)
G: is Removable (No Media)
H: is Removable (No Media)
I: is Removable (No Media)

\\.\PHYSICALDRIVE0 - Hitachi HDS721616PLA380 ATA Device - 153.38 GiB - 3 partitions
\PARTITION0 - Unknown - 9.76 GiB
\PARTITION1 (bootable) - MS-DOS V4 Huge - 69.77 GiB - C:
\PARTITION2 - Installable File System - 69.52 GiB - D:

\\.\PHYSICALDRIVE2 - Generic USB CF Reader USB Device

\\.\PHYSICALDRIVE4 - Generic USB MS Reader USB Device

\\.\PHYSICALDRIVE1 - Generic USB SD Reader USB Device

\\.\PHYSICALDRIVE3 - Generic USB SM Reader USB Device

-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

AV: avast! antivirus 4.8.1169 [VPS 080... Read more

2 more replies
Answer Match 84%

Hi all,

I recent got the "Warning" message on my desktop. I know nothing about computer...so could you guys help me?

After reading a recent post, I did learn about downloading/scaning HijackThis. This is what I have so far.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:23:19 PM, on 7/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Fasoo DRM\fpm.exe
C:\Program Files\Fasoo DRM\fph.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\lphcgbsj0e763.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA... Read more

A:I recently got the "Warning! Spyware detected on your computer!"

Hello and welcome to TSF

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.
What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

=======
Logs Required
C:\Deckard\System Scanner\main.txt
C:\Deckard\System Scanner\extra.txt<----Attached

1 more replies
Answer Match 83.58%

I am using internet Explorer 11 to access the www.nemsis.org site and when I go to access http://www.nemsis.org/media/CustomElementLibrary/ .

I get the error message below:


I can use Chrome just fine to access the page. I have a coworker who can access just it just fine and he is using Internet Explorer 11 and was also able to access on Firefox. Is there something I am missing to access it? The page should display a map.

Thank you in advanced.

A:Using Internet Explorer 11 but site displays warning that I need internet Explorer 9 or higher.

Answered my own question. Apparently if I place a check in the "Use Microsofts Compatibility list and uncheck the "Displa intranet sites in Compatibility View" it works. 

1 more replies
Answer Match 83.58%

Ok, so im new here so hey everybody..

to the point: my laptop is "stuttering"/lagging/skipping.
whatever you wanna call it its doing it.
my video/music/and cursor skip every second for a splt second it starts on start-up and dont stop til i turn my laptop off. it happens in a pattern its not random, ive done checked my drivers, spyware, and m RAM is good.. so can someone please help me? ***could it be because my battery wont hold a charger? so it has to be hooked up to the charger at ALL times or it dies Example: is the charger not got the "juice" to run the laptop by itself so it studders/skips..*** i dont know if this has anything to do with my problem but i ran "event viewer" and found this : The following boot-start or system-start driver(s) failed to load:
Cdrom
Imapi
redbook

PLEASE HELP
 

A:Whole computer "studders"/"skips"/"lags" .. have event viewer report (PLEASE HELP)

**(DONT KNOW IF THIS WILL HELP..)***

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Genuine Intel(R) CPU T2250 @ 1.73GHz, x86 Family 6 Model 14 Stepping 8
Processor Count: 2
RAM: 502 Mb
Graphics Card: Mobile Intel(R) 945GM Express Chipset Family, 224 Mb
Hard Drives: C: Total - 39723 MB, Free - 23484 MB; D: Total - 12684 MB, Free - 3633 MB;
 

2 more replies
Answer Match 83.16%

The subject message pops up any time I attempt to open my IE8 browser using Windows XP and set to my home page "ATT.Yahoo". When I click "OK" in the message, IE closes and tries to recover, but with the same results each time. I know
there is a method to reset IE9, but can't tell if it also pertains to IE8 since it can't be opened.

A:"Microsoft Visual C++ Runtime Library" "Runtime Error! Program: C:Program Files\Internet Explorer\iexplore.exe"

Hi,
the first step in troubleshooting IE issues is to test in noAddons Mode.
toolbars.google.com - download and install the latest IE compatible version of the Google Toolbar.
for consumer help with IE select the Help>Online Support menu from IE and follow the prompts for your windows and IE versions. thx.Rob^_^

3 more replies
Answer Match 83.16%

The blue and yellow sign that shows up on my desktop says "warning Spyware..." I couldn't remove it. I downloaded spybot search & destroy. I removed some programs that it found but after re-boot the sign reappeared. I followed the 5 steps before posting a log.

Durring the steps The desktop was back to normal. No "warning sign". But I wan't to make sure this is taken care of.

Here is what I have:

Hijack log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:43:57 PM, on 8/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\IPSSVC.EXE
C:\Program Files\Intel\AMT\atchksrv.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\lotus\notes\ntmulti.exe
c:\program files\lenovo\system update\suservice.exe
c:\Program Files... Read more

More replies
Answer Match 83.16%

I came back from work today and when i started my computer the back ground was changed to a blue screen with a yellow text box that said "warning spyware detected on your computer" followed by a blue box saying "install an antivirus or spyware remover to clean your computer"

I have seen several of this same problem in the forums. I don't really know what may have caused this, and i'm not that great with computer but i will try my best.

I have hijackthis and i ran it and here is the log.

I hope someone can help =( i don't really know what else to do.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:14:57 PM, on 7/31/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\WINDOWS\system32\CTsvcCDA.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.c... Read more

A:"warning spyware detected on your computer..."

Hi there solitary

Thank you for your patience. I will be helping you deal with the issues raised in your log from this point onwards

Before we start jumping into things, here is a quick basic note which I mention to everyone. The fix which I have provided for you is for this computer only, it should not be used on any other computer. Each fix is tailor made for the specific task in hand. If for some reason you have system restore disabled, then please re-enable it before proceeding, an infected restore is better than none. Please read through the fix first and set enough time aside to complete the task in one session. If there is anything you feel needs clarification then please ask - do not guess! Thanks.

If this is a computer from a work place then please advise your IT department of the concerning issues before commencing past this point.

Please follow these directions in the order they are set out for you.

We need to disable your TeaTimer as it may interfere with the fixes that we need to make.

1) Run Spybot-S&D
2) Go to the Mode menu, and make sure "Advanced Mode" is selected
3) On the left hand side, choose Tools -> Resident
4) Uncheck "Resident TeaTimer" and OK any prompts
5) Restart your computer.

After all of the fixes are complete it is very important that you enable TeaTimer again, I will let you know when it is safe to do so.

Download ResetTeaTimer.bat by right-clicking on the link, and choosing Save As. Save ... Read more

1 more replies
Answer Match 83.16%

These words are embedded into my wallpaper along with a big blue screen behind them. My computer is running slow, and I have an unnamed button on the taskbar saying, "SYSTEM ALERT! System has dectected spyware..." and it links to this webpage: http://www.virprotect.com/?aff=1012. when I exit this webpage I get a Windows (apparently) message: "Are you sure you want to navigate away from this page? Your computer may still be infected with spyware." I have run norton to no avail, I have registered Spy Hunter, and removed many problems, but still have the problem with my wallpaper. I'm unsure of what else this thing might be doing to my computer. Any help would be appreciated.

My hijack this log:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:41:54 PM, on 1/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\HP\KBD\KBD.EXE
C:\Progra... Read more

More replies
Answer Match 83.16%

I have recently come the victim to some form of malicious attack on my computer. I have switched it on today and run Adaware, Spyboy, About:Buster and CWShredder. All of them found some files, but i just wish to make my system totally clean.

Here is my HijackThis log, any help with this matter is greatly appreciated.

Logfile of HijackThis v1.99.1
Scan saved at 20:25:29, on 16/08/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\System32\BtUsrBdg.exe
C:\WINDOWS\System32\BTSetBootKey.exe
C:\PROGRA~1\ntl\BROADB~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\windows\nmnvplc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\ntl\broadband medic\bin\mpbtn.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system3... Read more

A:Solved: "Warning: Your computer may be at risk..."

16 more replies
Answer Match 83.16%

Every time I move or copy any file from one folder to another on my local computer [not over a network]
I get the following "Windows Security" warning "These files might be harmful to your computer , your internet security settings suggest that one or more files may be harmful, do you want to use it anyway?"

I've Googled the message and in every instance it only occurred when someone was moving files across a network and the solution was to add the IP address of the other machine/server to the Local Intranet Zone. http://*******/14M4FtC

I've haven't seen anyone who has had this problem when simply moving files from one folder to another on the same local hard drive. Any suggestions?

Things I've tried:
Resetting IE Security Setting to default levels.
Turning UAC on/off
Turning Windows Firewall on/off
Resetting IE
I changed every IE security setting to be exactly the same as another computer which is NOT getting this message.

A:"These files might be harmful to your computer" warning

Does the files contain files which have been downloaded from a network before? I ask this because by default files downloaded by the internet will be 'blocked'

To unblock right click the file then click on properties > Unblock

Josh!

9 more replies
Answer Match 83.16%

This spyware has taken over the whole computer, I cannot access the desktop at all and not in safe mode either.

Blue backround with a red and white box with big words.

I repeat I have no way of getting to the desktop, I need either a flash drive with a bootable os, or a way to clean the virus in cmd or something of that nature.

I need help.

More replies
Answer Match 83.16%

Please Help. I have a popup that has appeared on my desktop that claims the following:
"WARNING! Spyware detected on your computer. Install an antivirus or spyware remover to clean your computer."

It also says,
"Warning! win32/Adware.Virtumonde detected on your computer"
"WArning! win 32/PrivacyRemover.M64 detected on your computer"

This appeared on my desktop yesterday and it will not allow me to change the desktop picture. I also get a blue screen if the computer is left dormant for a while.

I attempted the 5 Steps before posting and was only able to complete a few of them. Here is the Hijack This Log:

Logfile of HijackThis v1.99.1
Scan saved at 10:28:36 AM, on 8/25/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\LTMSG.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\WI... Read more

A:"Warning! Spyware detected on your computer"

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please copy this page to Notepad and Save it to your Desktop in order to assist you when carrying out the following instructions.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.
Ensure that there aren't any opened browsers when you are carrying out the procedures below.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please download ComboFix and Save it to your Desktop.

**Note: It is important that it is saved directly to your desktop**

First, we need to install the Windows Recovery Console.

The Windows Recovery Console will allow you to boot up into a special recovery(repair) mode, if n... Read more

1 more replies
Answer Match 83.16%

Please, please help me. I hope I'm not being redundant. I'm using Windows XP Pro
and I'm the administrator and only members of my immediate family have access to
this (home) computer. There are 6 of us. Each of us has a "user" site. I, as administrator,
am able to run "Internet Explorer" and surf the web. When the (limited) "users"
try to run "IE" (double click the "IE" icon) on their "user" site, nothing happens
until about a minute later, the screen goes disjointed, everything freezes up and
"IE" cannot be accessed (doesn't load) ... . If I change the "users" to "administrators",
they are able to access "IE", no problem and hence surf the net. If I change them
back to "limited", "IE" again doesn't work. I've run, "ad-aware, "spy-bot", "pest
control", I have "zone-alarm" installed and "Norton Anti-virus". Can anyone help
me?
 

A:My "users" can't access Internet Explorer"

7 more replies
Answer Match 82.74%

On my Win10 x64 home computer, I find that a I can't always start Internet Explorer (ver 11). I'll click on the icon, the "working" symbol spins for a second and nothing happens.

Then I open Task Manager, and I find about 10 or 12 instances of Internet Explorer and IE (32) running/open. If I then "End task" for each one. I can then get Internet Explorer working again.

For some reason IE is not closing fully when I end the session. It appears that I can continue opening/using IE until I get about 10 or 12 instances running then I can't open or use IE again until I close of all the open IE processes in task manger.

Has anyone else seen this? Any idea what might be causing it?

More replies
Answer Match 82.74%

On my Win10 x64 home computer, I find that a I can't always start Internet Explorer (ver 11). I'll click on the icon, the "working" symbol spins for a second and nothing happens.

Then I open Task Manager, and I find about 10 or 12 instances of Internet Explorer and Internet Explorer (32) running/open. If I then "End task" for each one. I can then get Internet Explorer working again.

For some reason IE is not closing fully when I end the session. It appears that I can continue opening/using IE until I get about 10 or 12 instances running then I can't open or use IE again until I close of all the open IE processes in task manger.

Has anyone else seen this? Any idea what might be causing it?

More replies
Answer Match 81.9%

Hi,

I am sure my PC has been infected because since last week I have been getting this pop up- Warning, Your computer is at risk" at random intervals and the window shows all the files in my PC being scanned by this unknown program.

I ran Mc Afee & Windows live one care scanner and deleted some 180 odd registry errors. Even after running the scan the pop up appeared again after a day. McAfee & Windows scanner didn't get rid of it during its scan.

Along with this problem, a random ad video starts playing even on sites I am sure which do not have any sreaming ads on them. My PC boot time & the time taken by the IE browser to connect to the net is extremely slow.

I would really appreciate the help from the TSG guys. Thanks !

Here is my HJT Log-

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:23:52 AM, on 2/23/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe... Read more

A:"Warning! Your computer is at Risk" Pop up

16 more replies
Answer Match 81.48%

A while ago, ALL my htm and html file icons in Windows Explorer changed to white paper icons with the corners turned town.

I do not have this problem with any other icons--just htm and html.
I do not have this problem with other file managers, such as XYplorer or Shelless.

The problem is only htm and html file icons in Windows Explorer.

Any suggestions appreciated.
Thanks,
Janet
Windows 7 Home Premium 64-bit

A:"Internet Explorer icon" = "white paper icon"

try the fixes suggested here: Incorrect or generic Windows icon displayed for HTM and HTML files

Please update your OS details as it currently shows as "XPPro":
Top of forum page > Quick Links >> Edit Your Details

If you post for help in future and forget to include your Windows version in your post, we assume it's the version shown under your username, so keeping it up to date is important to avoid giving you irrelevant advice.

1 more replies
Answer Match 81.06%

I have a Dell desktop with windows xp.Everytime I try to use the computer the "my computer" site keeps popping up to the point that i can do nothing on my computer.Each time i try to delete it it keeps coming back within seconds. What should I do to correct the problem???

A:"my computer"site keeps popping up

welcome
please follow the infection link in my sig

1 more replies
Answer Match 81.06%

XP HOME SP2, NIS 2004.

I have really wanted to see Yahoo's extra-footage videos for The Apprentice all season but have never been able to. I think my firewall is blocking ME from attacking THEM --The NIS log says:
"Attempted Intrusion "HTTP_ActivePerl_Overflow" from your machine against mediaframe.yahoo.com(THEIR IP # HERE, I think, I can insert it if you say I should - it might be mine that's why I'm hesitating!)
was detected and blocked."
I don't know what to do. Here is the site, you might have to click on "exclusive video." http://apprentice.tv.yahoo.com/theshow/recap/episode14.html
The NIS 2004 icon starts blinking its exclamation point when I click to see the Videos. I asked about this before in Security, but no answers. Here's the old post, it might have other info you need:
http://forums.techguy.org/t294630.html

The Yahoo site is in my Trusted Zones, not in Restricted Sites, and Yahoo cookies are allowed. I don't know what to try with the firewall, don't see anything to work with. NIS 2004 says I AM the threat TO the website. I see log entries for ESPN that say the same thing, but my husband hasn't ever said anything about being blocked from watching ESPN videos.
I would very much appreciate any help or ideas. Thanks!
 

More replies
Answer Match 81.06%

Hi

Is it possible to start the app without "Security Worning" window ("Cancel. Open, More Info" buttons)? If yes, how you can make changes then?

Is it possible to start the app without "Microsoft Access" window on the background?

Thanks,
Barbos
 

A:Solved: Access 2003 - To start the app w/o "Security Warning" and "Microsoft Access"

6 more replies
Answer Match 80.64%

I am connected to the internet but am not able to access the internet. I have tried many methods but still cannot seem to access the internet! Please help.

A:Connected but: Internet explorer 8- "Internet Explorer cannot display the webpage"

How are you verifying that you are connected to the internet?

Can you go to a command prompt and run "ipconfig /all" and then post the results?

13 more replies
Answer Match 80.64%

I thought I was computer savvy until this problem came up. When I double click my computer, recycle bin, control panel, etc, the hourglass comes up for a few seconds, goes off, and nothing else. No error messages or anything, just nothing. I have viewed a few of the threads covering this and a common link was the hijack this result. I have posted that here, and really hope that someone can help me with this. I have run SpyBotSD and adaware, I have run mutiple virus scans, I did an SFC, and the final thing was to repair windows using the original disk, none of which has help. I am running Window XP w/SP2. Any other suggestions would be certainly appreciated. Hope to here from someone soon. MTCS, out.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\TDSTEL~1\ENTERN~1\app\pppoeservice.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusCl... Read more

A:I cannot open "my computer" "control panel" "recycle bin", etc...

You may want to reinstall the operating system.

Backupthe files that are importantto you before you reinstall.

The "New" installation will overwrite the current one

If you do not format your hard drive before the reinstall the installation should not harm your files (That's why I suggest backingup your files) and will speed up the installation process.
 

1 more replies
Answer Match 80.64%

Ok, so basically, whenever I turn the computer on, 3 error messages appear:

- A virtual driver failed to inicialize DLL. Chose close to end the program. H:/Windows/system32/code/pRee.exe

- A virtual driver failed to inicialize DLL. Chose close to end the program. H:/Windows/system32/code/pRee1.exe

- Error loading H:/Archiv~/GBPLUG~/gbiehcef.dll. Couldn't find specific module.

(sorry if some terms are incorrect, my computer is in Spanish, to I tried to translate as best as possible)

Please help me solve this terrible problem, it is really getting me on my nerves! (oh, and if this helps, I've recently donwloaded this so called "Limewire acceleration", and whenever I ran the setup, it didn't work. I don't really remember the name of the website I downloaded it from, sorry...)

A:Can't Open "My Documents", "Trash" or other files in "My Computer"!?

Hi and Welcome to the forum

I am almost certain that you have malware problems. Most like caused by you doing file sharing/ P2P - Limewire.

Suggest that you go here and follow the directions:

http://www.techsupportforum.com/secu...oval-help.html

Please be advised that the malware people are very busy and it could take a couple days to assist you.

BG

1 more replies
Answer Match 80.64%

I have been plagued for years by this bug (see attached Mad_Explorer_col.JPG screen dump), and this morning after visiting Tech Support Guy > Windows XP then searching for "Windows Explorer", on page 2 in "Solved: Explorer tree display curiosity, AKA Odd Windows Explorer Bug", page 2, I found the cause and solution brought by Mosaic1 Wed 07 Mar 2007 05:48 GMT:
Do you have the desktop toolbar on the taskbar?​and mrwes Tue 07 Aug 2007 18:34 GMT:
You can get around this by making the toolbar point to the Desktop but using c:\Documents and Settings > (Profile name) > Desktop. You don't see the My Computer and IE icons in the list, but everything else shows up...​Thanks a lot to Mosaic1 and mrwes!

Versailles, Sat 13 Feb 2010 10:34:25 +0100
 

More replies
Answer Match 80.64%

Hi TechGuy,

I'm having some recent problems on my laptop. When I log-in and start using it, the performance starts slowing down. When I look at the Task Manager, I notice that the task called Explorer.exe takes up a lot of my CPU. In a couple of minutes, I also start getting Internet Explorer windows to pop-up on my screen (I normally use Firefox) with advertisements suggesting that my computer is infected and some software downloads that could help. I recently installed McAfee Total Works, or whatever they call their 10-in-1 software which is supposed to do it all. I ran several scans, and on some of them, if did find and disable the Generic.dx trojan. Even though it claims it is doing something, I don't notice any changes - Explorer.exe continues to bog me down, and the IE windows keep popping up to the point that I cannot use my computer effectively anymore.

IBM T-40 laptop (about three and a half years old)
Microsoft XP-Professional

Any pointers would be truly appreciated!!

Thanks,
Sandjosh
 

A:Solved: "Explorer.exe" process keeps running, IE Windows intermittently open, "Generic.dx"

16 more replies
Answer Match 80.22%

I have my settings set to allow active x on all trusted sites, yet when I go to CNN.com, a trusted site, I keep getting the message that my settings DO NOT allow active x to run on the site. I checked them twice, and it is set correctly. Any ideas?
 

A:I keep getting "security settings dont allow active x" on a 'trusted" site

7 more replies
Answer Match 80.22%

Well, heres the story... I was online and it said something like windows explorer is trying to access the internet, so i thought it might be a key-logger, (dumb worry wart me ) and i clicked block all on nortons and i dont know how to get back to that page where i can unclick "block all" please help me i dont know and the only reason im on the internet now is because i have to press disable nortons and then get on.. PLEASE!!
 

A:I clicked "Block all" on Norton internet security for internet explorer

help me please!
 

1 more replies
Answer Match 79.38%

All Google searches from around 8:30 to 9:30AM Central Time USA - had the link:
"This site may harm your computer"
I was at first wondering if all sites caught malware.
But thinking more likely - Google security - was adjusted too tightly.

Anyone else see this?
I went to a second computer - to verify that the same issue existed.
It did - so was not malware on a particular computer.

At aprox. 9:40 AM CST - the "This site may harm your computer" link had been removed.

Thanks,

Chronk

A:Google - This site may harm your computer

Sorry,

I did not see the first post.

2 more replies
Answer Match 78.96%

Had posted this 08/21/07. No Reposes at all. So I'm going to try here.
http://forums.techguy.org/windows-nt-2000-xp/612963-w2k-explorer-exe-entry-point.html

Was working fine, then something went wrong. COX Secuity Suite blurped it caught a Trojan (didn't catch name). It had blocked it, but couldn't remove it. Explorer will no longer load.

ERROR MESSAGE:
Explorer.exe - Entry Point Not Found
(X) The procedure entry point PrintWindow could not be lcoated in the dynamic link library USER32.dll.
[OK]Click to expand...

I looked in the subdir and found explorer.exe was gone. I pulled a copy of explorer.exe from the old C: (now D, but I get the same error message.

I can muddle around with TaskMgr, but I no longer have my display for desktop or menu bar (i.e., Start and such).

This is my most current HiJackThis Log:
Logfile of HijackThis v1.99.1
Scan saved at 11:32:13 PM, on 9/18/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Cox\Applications\app\SysSvcNt.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINNT\system32\nvsvc32.exe
C:\PROGRA~1\Dantz\RETROS~1\wdsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System3... Read more

A:W2K: "ljjjjij.dll" causing "Explorer.exe - Entry Point Not Found"

9 more replies
Answer Match 78.96%

My problem started 08/21/07 and I've been hoping someone could look at this. I apparently caught a Trojan and can't get rid of it.

This trojan has screwed up my explorer file. I'm unable to get a display of my DeskTop (blue screen only). Reduced to using TaskMgr to run iexplore to access internet and navigate. Ran explorer and received the following error:

explorer.exe - Entry Point Not Found

(X) The procedure entry point PrintWindow cound not be located in the dynamic link library USER32.dll.

[OK] Click to expand...

I can muddle around with TaskMgr, but I no longer have my display for desktop or menu bar (i.e., Start and such).

Had a security 'expert' instruct me to rename my USER32.DLL to USER32.OLD which hosed my computer (could not boot up). Had to find my OS disk to get back in and rename the file back so I can get back to where I was.
Here is my HiJackThis log:
-----------------------------
Logfile of HijackThis v1.99.1
Scan saved at 1:09:55 AM, on 9/11/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Cox\Applications\app\SysSvcNt.exe
C:\Program Files\Common Files\Authentium\AntiVirus\dvpapi.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINNT\... Read more

More replies