Tech Problem Aggregator

IE closes immediately after opening, red circle with white X on the taskbar

Q: IE closes immediately after opening, red circle with white X on the taskbar

Hey
I've tried everything I know how to do (not very much). I've lost the recovery disc so I can't reformat. I have a Gateway tablet pc/laptop thing. I think i've picked up some nasty malware/virus/browser hijacker. When I open IE it would close immediately. Firefox is very unresponsive and my browsers appears to be hijacked. I get the warning that pops up on the task bar over and over saying that it's detected some spyware or malware and I need to click to download the antivirus. I'm in safemode now, I can't even use either browser in normal mode, I still can't use IE in safemode. If I have to log back in on normal mode to save a hijack this log then switch back to safe mode so I can post then i'll do that. I also noted that I couldn't even run the "hijack this" program, it wasn't until I renamed the .exe to something completely unrelated that it would even allow me to open it up.
Idk if my hijack log will be valuable in safemode but here it is, i've already tried looking at other people's threads with similar problems and troubleshooting myself unsuccessfully. I will appreciate anyone's help or helpful advice.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:20:52 PM, on 9/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\WISPTIS.EXE
C:\WINDOWS\System32\tabbtnu.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\csrssc.exe
C:\Documents and Settings\Administrator\Desktop\Jimmy.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.com/g/startpage.html?Ch=Consumer&Br=GTW&Loc=ENG_US&Sys=PTB&M=CX210X
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {A0437744-582A-4014-B39A-936814EB5A46} - C:\WINDOWS\system32\xxywwxuS.dll
O2 - BHO: C:\WINDOWS\system32\gjm86akm34.dll - {C5BF49A2-94F3-42BD-F434-3604812C897D} - C:\WINDOWS\system32\gjm86akm34.dll
O2 - BHO: (no name) - {C85BD9F1-5B95-46DA-9F39-979DB6B58484} - C:\WINDOWS\system32\awtutusr.dll
O2 - BHO: (no name) - {CC628875-53FE-4DE3-9CA8-E61652820398} - C:\WINDOWS\msagent\chars\ndsnifo.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [TabletWizard] C:\WINDOWS\help\SplshWrp.exe
O4 - HKLM\..\Run: [TabletTip] "C:\Program Files\Common Files\microsoft shared\ink\tabtip.exe" /resume
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [Snippet] "C:\Program Files\Microsoft Experience Pack\Snipping Tool\SnippingTool.exe" /i
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\McAgent.exe
O4 - HKLM\..\Run: [buritos] buritos.exe
O4 - HKLM\..\Run: [BM5bc728a7] Rundll32.exe "C:\WINDOWS\system32\guevygpc.dll",s
O4 - HKLM\..\Run: [58f41b3b] rundll32.exe "C:\WINDOWS\system32\enojxfaf.dll",b
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Jnskdfmf9eldfd] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\csrssc.exe
O4 - HKUS\S-1-5-19\..\Run: [TabletWizard] %windir%\help\wizard.hta (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [TabletWizard] %windir%\help\wizard.hta (User 'NETWORK SERVICE')
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
O4 - Global Startup: Bluetooth.lnk = ?
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\karina.dat
O20 - Winlogon Notify: awtutusr - C:\WINDOWS\SYSTEM32\awtutusr.dll
O20 - Winlogon Notify: ndsnifo - C:\WINDOWS\msagent\chars\ndsnifo.dll
O22 - SharedTaskScheduler: lksdfj98w3rmsekfnaui3rgfdgf - {C5BF49A2-94F3-42BD-F434-3604812C897D} - C:\WINDOWS\system32\gjm86akm34.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

--
End of file - 7543 bytes

A: IE closes immediately after opening, red circle with white X on the taskbar

Here's today's hijack log (not in safe mode):

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:36:24 AM, on 9/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\KeyboardSurrogate.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\WISPTIS.EXE
C:\WINDOWS\System32\tabbtnu.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\TCServer.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\TabTip.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\PROGRA~1\mcafee.com\agent\McAgent.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\BigFix\bigfix.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\csrssc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Documents and Settings\Administrator\Desktop\Jimmy.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.com/g/startpage.html?Ch=Consumer&Br=GTW&Loc=ENG_US&Sys=PTB&M=CX210X
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {7DE6E4B3-AE6E-4996-954C-0AEB48640A6A} - C:\WINDOWS\system32\xxywwxuS.dll
O2 - BHO: C:\WINDOWS\system32\gjm86akm34.dll - {C5BF49A2-94F3-42BD-F434-3604812C897D} - C:\WINDOWS\system32\gjm86akm34.dll
O2 - BHO: (no name) - {C85BD9F1-5B95-46DA-9F39-979DB6B58484} - C:\WINDOWS\system32\awtutusr.dll
O2 - BHO: (no name) - {CC628875-53FE-4DE3-9CA8-E61652820398} - C:\WINDOWS\msagent\chars\ndsnifo.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL (file missing)
O4 - HKLM\..\Run: [TabletWizard] C:\WINDOWS\help\SplshWrp.exe
O4 - HKLM\..\Run: [TabletTip] "C:\Program Files\Common Files\microsoft shared\ink\tabtip.exe" /resume
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [Snippet] "C:\Program Files\Microsoft Experience Pack\Snipping Tool\SnippingTool.exe" /i
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\McAgent.exe
O4 - HKLM\..\Run: [58f41b3b] rundll32.exe "C:\WINDOWS\system32\enojxfaf.dll",b
O4 - HKLM\..\Run: [BM5bc728a7] Rundll32.exe "C:\WINDOWS\system32\guevygpc.dll",s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Jnskdfmf9eldfd] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\csrssc.exe
O4 - HKUS\S-1-5-19\..\Run: [TabletWizard] %windir%\help\wizard.hta (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [TabletWizard] %windir%\help\wizard.hta (User 'NETWORK SERVICE')
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
O4 - Global Startup: Bluetooth.lnk = ?
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (file missing)
O20 - AppInit_DLLs: C:\WINDOWS\system32\karina.dat
O20 - Winlogon Notify: awtutusr - C:\WINDOWS\SYSTEM32\awtutusr.dll
O20 - Winlogon Notify: ndsnifo - C:\WINDOWS\msagent\chars\ndsnifo.dll
O22 - SharedTaskScheduler: lksdfj98w3rmsekfnaui3rgfdgf - {C5BF49A2-94F3-42BD-F434-3604812C897D} - C:\WINDOWS\system32\gjm86akm34.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

--
End of file - 9165 bytes

2 more replies
Answer Match 87.36%

Got blinking white x in red circle in taskbar while surfing internet. Have run spybot and ad aware. AVG keeps popping up with "Virus Detected! While opening file: C:\WINDOWS\SYSTEM32\riqmc.dll Trojan horse Startpage. 19.AO". AVG gives me the option of deleting it, which I do, but then AVG keeps popping that up every time I open my home page which apparently keeps being changed to "about: blank". Keep getting popups that are advertising whatever I search for on the internet. Logfile of HijackThis v1.99.1Scan saved at 2:13:19 PM, on 11/3/2005Platform: Windows XP SP1MSIE: Internet Explorer v6.00 SP1Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Nhksrv.exeC:\WINDOWS\sysii32.exeC:\WINDOWS\System32\Ati2evxx.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\MsPMSPSv.exeC:\WINDOWS\MMKeybd.exeC:\Program Files\Common Files\Real\Update_OB\rea... Read more

A:White X In Red Circle In Taskbar.

Hello and Batman500 welcome to BleepingComputer.You have HijackThis running from a temporary or zip folder. Any backup files HJT creates during the repair process will not be secure if left in this folder. Before we use HJT to get rid of some entries, we need to get it into a permanent location. Create a folder on the C: drive called "C:\HJT". You can do this by opening My Computer then double click on Local Disk (C:). In a clear area right click and select New then Folder and name it "HJT". Unzip HijackThis into this folder. Please delete any other copies of HijackThis and run HJT only from this new folder. If required a tutorial is here.Please read through the instructions before you start (you may want to print this out or copy it into a word program).Download and install the trial version of Ewido Security Suite.When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".- Launch Ewido, there should be an icon on your desktop double-click it.- The program will now go to the main screen.- On the left hand side of the main screen click update.- Click on Start.The update will start and a progress bar will show the updates being installed.Once the updates are installed, close Ewido. Tutorial if neededDownload AboutBuster.zip.- Unzip the contents of AboutBuster.zip to it's own folder.- Navigate to the AboutBuster folder and double-click on AboutBuster.exe.- Clic... Read more

6 more replies
Answer Match 87.36%

I need some help. I can't figure out how to get this off my computer. Here is my HJT log....

I am doing this on a secondary laptop since i can't get to any of these websites on the infected computer...
DDS (Ver_09-02-01.01) - NTFSx86
Run by User at 21:41:37.92 on Sat 03/14/2009
Internet Explorer: 6.0.2900.5512

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearch Page = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.toshiba.com
mDefault_Search_URL = hxxp://www.google.com/ie
mSearch Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = hxxp://www.toshiba.com/
uSearchAssistant = hxxp://www.google.com
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com
TB: Norton AntiVirus: {42cdd1bf-3ffb-4238-8ad1-7859df00b1d6} - c:\program files\norton antivirus\NavShExt.dll
TB: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - No File
EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\windows\system32\Shdocvw.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
EB: ShopperReports: {a7cddcdc-beeb-4685-a062-978f5e07ceee} - c:\program files\shoppingreport\bin\2.5.0\ShoppingReport.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [TOSCDSPD] c:\program files\toshiba\toscdspd\toscdspd.exe
uRun: [MSMSGS] "c:&#... Read more

A:red circle w/white x in taskbar

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructio... Read more

2 more replies
Answer Match 86.94%

I am so puzzled with this problem I have. I have Windows xp: Service Pack 3, and when I open Windows Internet Explorer 8, It turns white and closes almost immediately after I open it, or i'll open it and it'll turn white and stay like that for almost 10 minutes straight and do nothing. I tried resetting it in control panel, and it didn't help at all. Why doesn't it----referring to my browser;Windows Internet Explorer, work?

A:Windows Internet Explorer 8 turns white and closes almost immediately after i open it

If IE works properly when you start it without add-ons then it's possible that you could have an infection, but try these two MS fixits in this order first -

Fix Internet Explorer issues to make IE fast, safe and stable

Fix Internet Explorer add-on problems when IE hangs or freezes

2 more replies
Answer Match 86.52%

Earlier today I found myself with the red circle with a white "X" in the middle of it in the taskbar. I searched different threads in this forum and have downloaded some of the programs and run them as others have directed and have had *some* success thus far. The actual icon is no longer there with an upadated Malwarebytes scan, but I still suffer from of of the infection's consequenses. For instance, when multiple browsers are open, the "active" one will change as various script error message boxes pop up. After reading through the thread of how to properly post a new topic, I have included the current DDS, Kaspersky online scan and HJT log files. Thank you in advance for assisting me in nursing my computer back to health!DDS (Version 1.0.1) - NTFSx86 Run by Kyle at 19:22:25.48 on Mon 12/15/2008Internet Explorer: 7.0.5730.11Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.374 [GMT -6:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Dell\Media Experience\DMXLauncher.exeC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\WINDOWS\System32\DLA ... Read more

A:Red circle with white "X" in center in Taskbar

Hello 8504,Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.Thanks,tea

2 more replies
Answer Match 86.52%

A red circle with a white X has appeared in the taskbar. XP protection center installer shows up when i accidently clicked on it but I don't think this is microsoft related. It also will not allow my system to defrag or use the system restore and go back to what I know was a safe point. Where do I go from here? I went through the "first steps" the best i could and i tried numerous times to get the gmer.exe to run but failed. I was able to download it, unzip it but when I click on it nothing happens. 8-10 tries, deleting it and doing it over would not allow it to run. I've included the dds and attached the other. Thank you so much in advance!! ...nick


DDS (Version 1.0) - NTFSx86
Run by Nick at 16:59:46.03 on Mon 12/08/2008
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.625 [GMT -6:00]

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\... Read more

A:[SOLVED] Red circle with the white X in taskbar

Hello and welcome to TSF

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

========

Please follow all instructions and in which order they come, if you have any questions, please ask before proceeding. Its important that you follow this through until i give you the all clear, a lack of symptoms does not mean that it is no longer present.

Please DO NOT Attach logs to your posts unless you are advised to do so.

==========

P2P

P2P - I see you have P2P software LimeWire 4.12.11 installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.

Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares and their infections.

References for the risk of these programs are Here,
Here and Here.

=======

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPOR... Read more

14 more replies
Answer Match 86.1%

Hello, I was reading over this forumand I had the same problem.Regedit and MSConfig closed immediately after opening.Well, to my surprise, after following those steps, I tried to install HiJackThis.It did the exact same thing.It closed right after I opened it.Please help?

A:Hijackthis Closes Immediately After Opening

turns out I was using an old version
so I did what it told me to
now whenever I try to open the folder to run the installer, it restarts the explorer process.
Folder opens, then immediately afterwards, screen goes black.
Something very smart installed in my computer is preventing me from finding it. Please help?

58 more replies
Answer Match 86.1%

OK, this is what's going on...

This particular game doesn't require much out of my machine. I've ran this game 5-6 times over just to see and it still ran smoothly, so I know for fact it has nothing to do with hardware (especially because I can still run much more graphically/processor intensive games). Just getting that out of the way.

I have played this game, unchanged, many-a-time pretty much every day, then one day it simply quits working. No update to the game (it does not update automatically), no change whatsoever. It'll just open and immediately close before any kind of content, color, or image is loaded. The whole process of me attempting to run the game and it closing takes less than a second.

I've tried spamming the game to see if maybe a 1 in 100 shot will randomly open it. This didn't work.

I have removed all my firewalls and antivirus, just for sake of testing purposes. This didn't work. Yes, I rebooted.

I have absolutely completely uninstalled the game, then reinstalled it. Rebooted, and it didn't work.

I have tried running as Administrator, or even just disabling the UAC altogether. Rebooted, and it didn't work.

It's an online game. Windows Firewall is disabled, all my ports are open, nothing is justifying what's going on here.

The two previous Firewalls/Antivirus I had were McAfee and Avast.

I am on Windows 7.
 

A:Game closes immediately after opening

What game and what are you exact PC specs (make and model if its a big brand name, or make and model of motherboard, cpu, gpu, ram, harddrive, power supply including wattage, optical drives etc.)?

At the moment, all you are saying is a random game doesn't work on a undefined machine ... thats not a lot to work with
 

1 more replies
Answer Match 86.1%

I know this has been addressed in previous posts but none of the solutions I found worked for me.

Upon starting my computer, opening regedit isn't possible. I get an error message saying: "Regedit is disabled by administer." To fix this, I run (every time I turn on my netbook) the following statement: REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 /f

This allows me to open Regedit, but it immediately closes again.

I have started working in Sierra Leone and know my computer has many viruses on it. Still, none of my anti-virus software (I use AVG Free 9.0 and PandaSecurity ActiveScan 2.0) has solved this problem.

Below please find my HJT log. Any and all help would be greatly appreciated.

Thanks,

Daniel

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 6:18:45 PM, on 1/13/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Fi... Read more

More replies
Answer Match 86.1%

IE 11 closes either immediately after opening or within 2 sec when selected from Win 8.1 start page, does not happen when I

select IE icom from bottom bar

More replies
Answer Match 85.68%

I just want to say thank you very much in advance for your help. This is my first time using BC, and already I am so thankful that a website like this exists. I am completely lost, and unfortunately think that I made things worse by trying to fix stuff on my own. Luckily, I ran across BC, and am confident things will be fixed up just fine. I am having that same problem that many others on here are having where a red circle with a white exclamation point pops up in the task bar with a yellow note saying "security warning: your computer may be infected..."I have already followed all the steps outlined in the Prep guide, and have a HJT log and start-up list ready to be looked at. In addition to the prep guide, I also ran SmitFraudFix because SpyBot detected some of those files in my registry. However SmitFraudFix did not run as descirbed. After cleaning, it never prompted me to clean temp files or to clean the registry. I know there is a way to run it manually, but have not tried it yet. I also ran a full scan with Norton Internet Security 07, and it found and fixed SpySheriff. All of these entries always regenerate themselves after I reboot the computer.Thank you again for your help! Here is the log file:====================================Logfile of HijackThis v1.99.1Scan saved at 12:13:17 PM, on 11/14/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\sms... Read more

A:Red Circle W/ White Exclamation Point In Taskbar

Hello DavidAg02, I am SifuMike and I will be helping you. Please download SmitfraudFix (by S!Ri) Extract the content (a folder named SmitfraudFix) to your Desktop. Open the SmitfraudFix folder and double-click smitfraudfix.cmd Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that report into your next reply. Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

20 more replies
Answer Match 85.68%

Hi, I was using Google Chrome (I usually use Firefox but I was mixing it up a little) and all of a sudden my McAfee virus scan located a bunch of trojans on my computer and removed them. Then, Chrome proceeded to close and the little red circle with a white cross appeared, saying how my computer has been infected, yada yada, seems like a pretty common problem after searching "red circle...". A warning box pops up every few minutes saying:"Attention! System detected a potential hazard (TrojanSPM/LX) on your computer that may infect executable files. You (*sic*) private information and PC safety is at rick. To get rid of unwanted spyware and keep your computer safe you need (*sic*) update your current security software. Click OK to download official intrusion detection system (*sic*) (IDS software)"I close this window rather than hitting OK. Anyway, similar to others who had this problem, I can't open task manager, nor can I open Chrome anymore, because it says both files are infected, and it says I need to activate my antivirus software. Whenever I turn on my computer, a box appears that says I need to download new spy-ware removal software or whatever, and that the problem is a 5 on a scale of 0 to 5. McAfee and Ad-Aware haven't done much, the little red circle is still there with the balloons saying "click here to protect your computer!" and I still can't open task manager or chrome. Can someone help me remove/fix this?Edit:... Read more

A:Malware? Red circle with white cross in taskbar...

I could be of use, but the experts hangs out in the Am I Infected forum.

Either wait a bit to be moved or repost your stuff in that forum

2 more replies
Answer Match 85.68%

Hello!

Yesterday a red circle with a white x appeared in my taskbar. I can't open my taskmanager, and I can't run my computer in safemode (if I try, I get a blue screen with white writing saying that something happened, and I have to manually turn it off).

I spent about 2.5 hours trying to do all of the "first steps." I was fine up till running ddes and gmer. The spyware won't let me open ddes, and gmer runs but freezes while scanning.

Any help would be appreciated!
Thank you!
Sio

A:Red Circle, White X in taskbar. Can't run ddes or gmer...

Please try the following:



Download OTL from one of these locations to your Desktop
OTL
OTL Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Under the Custom Scans/Fixes box at the bottom, paste in the following


Code:
:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="explorer.exe"
"Userinit"="C:\\WINDOWS\\system32\\Userinit.exe,"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSetActiveDesktop"=-
"NoActiveDesktopChanges"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"NoSetActiveDesktop"=-
"NoActiveDesktopChanges"=-

:Files
helper32.dll /lsp
winhelper86.dll /lsp
%HOMEDRIVE%\Internet Security 2010.lnk /s
%systemroot%\System32\winlogon32.exe
%systemroot%\System32\smss32.exe
%systemroot%\System32\AVR10.exe
%systemroot%\System32\helper32.dll
%systemroot%\System32\winlogon32.exe
%systemroot%\System32\smss32.exe
%systemroot%\System32\warning.html
%systemroot%\system32\IS15.exe
%systemroot%\System32\winhelper86.dll
%HOMEDRIVE%\trhh.exe ... Read more

14 more replies
Answer Match 85.26%

I scanned with Malwarebytes, Spybot and Superantispyware. I updated them all too. And I noticed my Comodo Internet Security had disappeared too, I didn't know what happened, but all of a sudden IE closes immediately after opening and I know that is bad. can someone help me? this is my hijack this.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:47:16 PM, on 1/4/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\COMODO\COMODO Internet Security\cmdagent.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\ehome\ehtray.exeC:\WINDOWS\arservice.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\COMODO\COMODO Internet Security\cfp.exeC:\WINDOWS\ALCXMNTR.EXEC:\Program Files\Lexmark X74-X75\lxbbbmgr.exeC: ... Read more

A:Internet explorer 8 closes immediately after opening.

Hi Versani,Welcome to BC HijackThis forum. I am farbar. I am going to assist you with your problem.Please refrain from making any changes to your system (scanning or running other tools, updating Windows, installing applications, removing files, etc.) from now on as it might interfere with our fixes. Please let me know in your next reply if you agree with this.Please post the required log as outlined here:Preparation Guide For Use Before Using HijackThis and other Malware Removal Tools, Instructions for receiving help in cleaning your computer

14 more replies
Answer Match 85.26%

Okay, for some reason when I try to start Firefox, I get the message:

"firefox.exe has encountered a problem and needs to close. We are sorry for the inconvenience."

behind it is the Mozilla Crash Reporter:

"Firefox had a problem and crashed. We'll try to restore your tabs and windows when it restarts."

There is an option to restart firefox, but the same messages come up. I believe it might have had something to do with a virus I had, but Malwarebytes removed several trojans (Vundo I believe was one of them) and installed IE8. So far I've

- restarted the computer
- completely uninstalled and reinstalled firefox
- ran ccleaner & combofix
- ran malwarebytes
- manually uninstalled firefox, renamed the user profile folder in %APPDATA%

i cannot restore to an earlier date because of the virus scans and deleting virus files that were housed within restore data. Has anyone else encountered this issue or know a possible solution?
 

A:Solved: Firefox Closes Immediately After Opening

nevermind. uninstalled IE8 and went back to IE7. Firefox works now.... hmmm....
 

2 more replies
Answer Match 85.26%

I have Windows XP Pro, and when i try to open up regedit or msconfig, they immediately close. THe reason i have been trying to get into regedit is to completely delete my old corporate edition of Norton antivirus in order to install the New norton cd i just bought.

i have seen in other posts that it is necessary to post the hijackthis log, so here it is....

if you could please guide me in how to remove this virus, i would greatly appreciate it. thank you

Logfile of HijackThis v1.97.7
Scan saved at 12:30:06 PM, on 9/12/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\WINDOWS\System32\rmctrl.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\WINDOWS\System32\taskswitch.exe
C:\WINDOWS\System32\pctspk.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\XMGDGPUN.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Creative\TaskBar\CTLTray.exe
C:\Program Files\Creative\TaskBar\CTLTask.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System... Read more

A:REGEDIT and MSCONFIG closes immediately upon opening

16 more replies
Answer Match 85.26%

Hi everyone, New to the forum so thanks for the help ahead of time. Upon opening internet explorer it immediately closes and displays nothing. Also Internet options in control panel will not open at all. The windows firewall also tells me "For your security, some settings are controlled by group policy." This computer is not on a network and is a home computer. I was able to work around it by doing some registry work in which I removed the value on the firewall key. So that enabled me to turn the firewall back on. The service for windows firewall is now started with no errors and is set to automatic.

The Internet explorer problem is more important to me at the moment. I know the internet connection is active because firefox works perfectly. I scanned the computer with AVG and it found so many viruses and trojans it was rediculous. I also scanned the computer with webroot spysweeper and it found nothing but when I open IE it stops all sorts of things like drivecleaner for example.

HijackThis log listed below...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:57:40 PM, on 12/29/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svcho... Read more

More replies
Answer Match 85.26%

i know i had the blaster virus (or that's what Dell tells me anyway...). So, I downloaded the patch for it and installed it, and then tried to run Norton Antivirus full system scan and about 3 seconds after it opens, it disappears. Same thing if I try to run Live Update.
I was able to do a full system scan in safe mode, and the system came up clean, but I still can't run the Live Update in regular mode. HELP!

I'm on XP, using Norton Antivirus Professional Edition 2004.
 

A:norton antivirus closes immediately after opening

Do the cntrl, alt, delete command to open the task manager then go to aplications and see if its still runing. If it's not there, then check the processes tab to see if its runing. If its not runing at all then maybe you should uninstall and reinstall then after do the patch. If it happens again then its gonna be a registry that some virus or malicious code has added or modified. Im not an expert but tricks like that are always pulled by means of altering the registry.

PS...MAKE SURE TO RESTART AFTER UNINSTALLING AND BETWEENING INSTALLING THE PROGRAM AGAIN AND PATCH.
 

2 more replies
Answer Match 85.26%

Hi guys,

Have just found and read a closed as solved post about Microsoft Office 2000 Outlook closing immediately on opening. Of course, now I have gone through the registration process I cannot find the original post.

So, within the last two days, for no apparent or obvious reasons, Outlook 2000 refuses to stay open. When I try to open it, it opens and immediately closes; no error messages, no crash reports to Microsoft. The only thing I notice is in the task bar at the bottom of the screen, when it opens it shows the outlook logo followed by '-Microsoft Outlook' instead of 'Microsoft Outlook'.

I have removed the program and reinstalled it a trillion times (only a slight exaggeration). This made no difference.
I have deleted (having copied it to a different location) the .pst file. This caused the program to open and ask various questions about setting up new folders. I did what it asked and the program promptly closed having created various personal telephone folders.
I have put the .pst file back. Now, for the pico second that the screen is open, I can see that there are no e-mails in any of the folders, obvious I guess, but confusing to an idiot like me.
Any help greatly appreciated.
P.S. Info Utility says I don't have an anti-virus but I am running a full Norton 360 program which is always on and I have scanned the whole system a couple of times since this problem began.

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Mic... Read more

A:Solved: MS Outlook closes immediately on opening.

10 more replies
Answer Match 84.84%

Hello. This afternoon I had the dreaded red circle pop up my pc's taskbar (running windows xp). It says Warning! Security Report Your computer is infected! It is recommended to start spyware cleaner. Now, I did a little research on this site and others and went to this thread:http://www.bleepingcomputer.com/forums/t/22402/how-to-remove-spysheriff-winstallexe-spysheriffexe/ That is re the spysheriff problem. That does not seem to be the issue here. I followed the steps in that thread and that didn't solve anything. Also, when I restarted Windows Security Alerts popped up on the taskbar as well. I downloaded TrendMicro's latest HijackThis today and crafted this log (I'm confused on the log posting policies so I hope this is proper).Logfile of Trend Micro HijackThis v2.0.2Scan saved at 17:40:08, on 3/10/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\PackethSvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\ewido\security suite\ewidoctrl.exeC:\Program Files\PC Tools Firewall Plus\FWService.exeC:\WINDOWS\system32\carpserv.exeC:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exeC:\Program Files\Compaq\Easy Access Button... Read more

A:Red circle/white x on taskbar task manager locked

Hello again. I'm not trying to do a btt to get help, but just say that I read an older thread: http://www.bleepingcomputer.com/forums/ind...+circle+taskbar and I think I've gotten somewhere. This thread suggested doing the SDFix and Combofix and then running another HJT log. Ok, I've done that and will post the results. I do now have my ctrl-alt-del back up and running to get to my Task Manager and so far I have not seen the red circle/white x pop back up on restart. The Windows Security alerty shield icon still came up on the taskbar, which it never did before this problem, but everything else seems ok at the present. Can anyone suggest if I'm ok now, or need to do more, or? Here are the results of the logs that were suggested from the thread I linked above. Thank you in advance of course. eta: just read up above I was not supposed to post a ComboFix log without being asked for it. Sorry, I skipped over that when I posted it. I was able to remove the Windows Security alert, and also had my time go to military time and was able to reset that based on searching another thread. SDFix: Version 1.240 Run by main user on Tue 03/10/2009 at 20:41Microsoft Windows XP [Version 5.1.2600]Running From: C:\SDFixChecking Services :Restoring Default Security ValuesRestoring Default Hosts FileRebootingChecking Files : Trojan Files Found:C:\WINDOWS\system32\vx.tll - DeletedRemoving Temp FilesADS Check : Final Check :catchme 0.3.1361.2 W2... Read more

3 more replies
Answer Match 76.02%

Hello there, friends at Tech Support Forums. Once before I visited the website and received timely, effective assistance with a problem, and I'm returning seeking similar advice.

I've browsed through a few other postings, and it seems that a few other people describe the same sort of situation that I'm dealing with. I'm using a laptop with Windows XP, and in the bottom righthand taskbar there is a red circle icon with a white X that simulates Windows antispyware message. It periodically states the following in a popup box:

"Your computer is infected! Windows has detected spyware infection! It is recommended to use special antispyware tools to pervent [sic] data loss. Windows will now download and install the most up-to-date antispyware for you. Click here to protect your computer from spyware!"

If I click this bubble, then it leads me to a website that encourages me to download a program called PC-Antispy or PC Clean Pro. Also, another message pops up periodically. This message also has a bubble that leads to the same website to download PC-Antispy program.:

"Windows Security Alert
To help protect your computer, Windows Firewall has detected activity of harmful software. Do you want to block this software from sending data over the Internet?

Name: Trojan-Clicker.Win32Tiny.h
Risk Level: Critical
Description: This Trojan opens a range of web pages without the knowledge or consent of the user. The Trojan adds a rule to the Windows Firewall which ... Read more

A:Computer infected. Please help: Red Circle with White X in taskbar/"PC-Antispy"

My apologies for being preemptive, but I was hoping I could provide more timely information to you, so I followed directions that were given to other folks with similar problems. I downloaded Combofix and the Windows XP Service Pack 2 program, turned off anti-spyware/anti-malware programs, and then dropped the Windows SP program into the Combofix program. I ran into no problems, and I have included the three logs requested in other forums in this reply (e.g., ComboFix.txt, new HijackThis log, Add-Remove Programs.txt).

The red symbol with white X is gone, but when I try to go to Tech Support Forums via Google Search results, I am still redirected to other sites. Also, I still periodically get a Windows Security Alert stating:

"To help protect your computer, Windows Firewall has detected activity of harmful software. Do you want to block this software from sending data over the Internet?

Name: Trojan-Spy.Win32.KeyLogger.aa
Risk Level: Critical
Description: This Trojan has a keyboard logging function, which is intended to steal information from users of a range of on-line payment systems. . . [etc.]"

So, it seems like there may still a problem. Please see the logs below. Thanks in advance for any advice you can provide.

--------------------------------------------------

ComboFix 08-10-12.01 - Owner 2008-10-13 11:27:17.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.565 [GMT -5:00]
Running from: C:\Documents and Settings\... Read more

11 more replies
Answer Match 71.82%

Hi, I could use some help. When I try to open msconfig it closes immediately. When I search for a file on my pc the search closes to. When I uses the internet it will close when certain words are searched for. some of the words are; virus, trojan, avast. I'm using Firefox for the browser fyi. When I turn on my pc and sign in I get a message saying install NETframe.com v4.0  Honestly though, I think I uninstalled this myself by accident
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 10.0.9200.16686  BrowserJavaVersion: 10.55.2
Run by Sparks at 16:54:59 on 2014-05-12
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.8152.6622 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Program Files\HitmanPro\hmpsched.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork... Read more

A:msconfig closes immediately internet closes to

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/534116 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Answer Match 69.3%

Oy, these cyber hackers are driving us CRAZY.

Here is my HiJackThis log. Every time I load IE, it comes up for a sec. or 2, then closes. Any help would be greatly appreciated. I can use any other internet browser fine.

Thanks in advance.

- Ray
Logfile of HijackThis v1.99.1
Scan saved at 9:44:36 PM, on 9/21/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\System32\Grxp4exe.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9FA.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Ray\Desktop\HijackThis.exe

R1 - HKCU\Softwar... Read more

A:IE closes immediately closes when opened.

11 more replies
Answer Match 63.84%

I have the red circle with the white x on my task bar. How do I get rid of it? I have install Ad-Aware Plus 2008 and it doesn't seem to be picking it up? I have Windows XP. What steps do I need to take?
 

More replies
Answer Match 63.84%

I searched for topics to see how to get rid of it, but I wasn't very successful at copying all of the steps I've seen, so hopefully you guys can help me out here. I've downloaded SmitFraudFix, but I couldn't run it even if I changed the extension from .exe to .bat. I've even tried it in safe mode.Here's my logfile: Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16981)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exeC:\Program Files\Common Files\mcafee\mna\mcnasvc.exeC:\PROGRA~1\COMMON~1\McAfee\McProxy\McProxy.exeC:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeC:\Program Files\McAfee\MPF\MPFSrv.exeC:\Program Files\McAfee\MSK\MskSrver.exeC:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exeC:\Program Files\Dell Support Center\bin\sprtsvc.exeC:\WI... Read more

A:Red circle and white x again.

-edit-

2 more replies
Answer Match 63.84%

i keep getting a white x on a red circle in my system tray saysing your computer is infected, and i cant get rid of it.

here is my log

Logfile of HijackThis v1.99.1
Scan saved at 11:10:46 PM, on 1/20/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\T3duZXI\command.exe
C:\Program Files\Network Monitor\netmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\inet20010\services.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\winupdates\winupdates.exe
C:\WINDOWS\system32\paytime.exe
C:\winstall.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\LSASS.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\dllcache\IExplore.exe
C:\WINDOWS\system32\dllcache\IExplore.exe
C:\WINDOWS\system32\dllcache\IExplore.exe
C:\WINDOWS\system32\dllcache\IExplore.exe
C:\WINDOWS\system32\dllcache\IExplore.exe
C:\WINDOWS\system32\dllcache\IExplore.exe
C:\WINDOWS\system32\dllcache\IExplore.exe
C:\WINDOWS\system32\dllcache\IExplor... Read more

A:Red circle white X

* Click here to download smitRem.exe.
Save the file to your desktop.
It is a self extracting file.
Doubleclick the smitRem.exe and it will extract the files to a smitRem folder on your desktop.
Do not do anything with it yet. You will run the RunThis.bat file later in safe mode.

* Download the trial version of Ewido Security Suite here.
Install ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido
It will prompt you to update click the OK button and it will go to the main screen
On the left side of the main screen click update
Click on Start and let it update.
DO NOT run a scan yet. You will do that later in safe mode.
* Click here for info on how to boot to safe mode if you don't already know how.
* Now copy these instructions to notepad and save them to your desktop. You will need them to refer to in safe mode.
* Restart your computer into safe mode now. Perform the following steps in safe mode:
* Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen.
Wait for the tool to complete and disk cleanup to finish.
* Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report to your desktop
* Go to... Read more

1 more replies
Answer Match 63.84%

Looks like I caught this Virus two nights ago and it is driving me crazy.

I keep getting the balloon in my task bar stating that my computer is infected.

Please help.

Here is my hijack this notepad.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:12:07 AM, on 11/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_06... Read more

More replies
Answer Match 63.84%

I've been infected. it keeps appearing in my tray in the right hand corner of computer, a red circle with a white x, then things slow down and pop ups happen. I have ran adaware, registry cure, registry fix, 1 click maintenance. and it's still there. I can follow instructions well if someone can lead me in the right direction as to what to do. I can log in on safe mode without any problems. other error receiving is a windows error that says potential problem occurred, windows has shutdown buggy to prevent damage. wxyz.sys.....kernel debugger.
 

A:red circle with white x

is there anymore information I can post for someone to help me? please. I notice most people post their hijack this log, is that what I need to do? The reason why I went to this forum, was because I saw where someone else had helped someone with this same problem. I followed their steps, searching certain files, but I didn't have those files so not sure what to do next.
 

2 more replies
Answer Match 63.84%

in my tool bar at the bottom of the screen there is a little red circle with a ahite x. It is constantly reminding me that my computer is infected and I need to use antivirus software.

Is this spyware???

i've installed antivirus software and cleaned up all known spy ware.

anybody encountered this???
 

A:little white x in a red circle

9 more replies
Answer Match 63.84%

My friends computer got the white X in a red circle. The infection that does a popup every few seconds saying "You have been infected".I ran ComboFix and it seemed to get rid of it but I want to be sure its gone.Deckard's System Scanner v20071014.68Run by Irvine on 2008-07-26 00:05:33Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 4 Restore Point(s) --4: 2008-07-26 06:05:38 UTC - RP4 - Deckard's System Scanner Restore Point3: 2008-07-26 05:54:36 UTC - RP3 - ComboFix created restore point2: 2008-07-26 05:50:26 UTC - RP2 - ComboFix created restore point1: 2008-07-26 05:35:33 UTC - RP1 - System CheckpointBacked up registry hives.Performed disk cleanup.Total Physical Memory: 511 MiB (512 MiB recommended).-- HijackThis Clone ------------------------------------------------------------Emulating logfile of Trend Micro HijackThis v2.0.2Scan saved at 2008-07-26 00:06:33Platform: Windows XP Service Pack 2 (5.01.2600)MSIE: Internet Explorer (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\system32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin ... Read more

A:White X In Red Circle

Hello PopSmithWelcome to BleepingComputer ========================The first thing I will need you to do is to Download ONE of these anti-virus programs and install it.These are free. AVG free 8.0Note this is free antispyware protection and Antivirus protection.or Antivir=================Please download the OTMoveIt2 by OldTimer. Save it to your desktop. Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

C:\WINDOWS\upezybap.sys
C:\WINDOWS\ufih.exe
C:\WINDOWS\ucunosog.scr
C:\Program Files\Common Files\quwubojyb.vbs
C:\Documents and Settings\Irvine\Application Data\udoheb.dll
C:\WINDOWS\system32\jutabazoju.bat
C:\WINDOWS\qetulicut.exe
C:\Program Files\Common Files\eguxebymym.dat
C:\WINDOWS\ylufuryqo.bin
C:\WINDOWS\ycixuhahy.bat
C:\WINDOWS\unahoqezaj.com
C:\WINDOWS\ruwenofew.scr
C:\WINDOWS\ibawihaz.bin
C:\WINDOWS\dozug.vbs
C:\Program Files\Common Files\uzatiwyqy.dll
C:\Program Files\Common Files\mase.reg
C:\Program Files\Common Files\ecin.pif
C:\Documents and Se... Read more

6 more replies
Answer Match 63.84%

Picked up some malware that is keeping IE from launching. Window keeps appearing offering to solve the problem, for a fee. The program installed a red circle with a white x in the dock. Running XP Home Edition on a Toahiba Satellite with a Pentium III.

Ran SmitFraudFix. Here is the log it provided--any help will be much appreciated:

SmitFraudFix v2.253

Scan done at 18:18:30.20, Wed 11/21/2007
Run from C:\Documents and Settings\John\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Network Monitor\netmon.exe
C:\Program Files\Linksys\Wireless Network PC Card\NICServ.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\msdtc.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program F... Read more

A:Red circle w/white x

You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Next, please reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.
Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted: "Registry cleaning - Do you want to clean the registry?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.

A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.

The report can also be found at ... Read more

1 more replies
Answer Match 63.84%

hey all once again i got a virus.......some how the little guy slip by avast(which i do not recommend) anyway what happens is that it popes up saying

DANGER!
harmful viruses detected on your computer. click on the message to scan your computer for security threats for free.
well thats now...before it was showing a yellow triangle with ! in it....it said something bout uninstalling hitman pro 3.5 (which i installed like a year ago to help out every now and then) and i click the bubble by accident(trying to hit the x) and i quess it uninstalled it....then it tried installing another program i ended the process then it turned to the x it closed out taskman and now i cant open it saying taskman has been diabled by your admin...which im the only user on this computer with admin....but i have process explorer open and nothing other than the normal windows stuff just like taskman showed...o ya and i cant update any anti virus programs.....o and when i put my mouse over the icon it says windows security alert

if anyone got any suggestion please let me know.....

A:red circle with white x

Please download Malwarebytes Anti-Malware (v1.46) and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress&qu... Read more

1 more replies
Answer Match 63.84%

Got home from work tonight and the wife said the computer was acting funny. So I took a look and found the red circle/white x in my system tray. I ran spybot and it gave me Wild Tangent and Virtumonde. Ran Norton AV and Spybot but still seem to have the red circle/white x. I will post my HJthis, I am just wondering if there is anything I need to worry about. So far there are no obvious problems with the computer running, mostly get an annoying bubble pop sound every five minutes as if my wireless network is connecting.

System Specs:
Dell Inspiron E1505
CPU T2050 @1.60ghz
RAM 2gb 667mhz
GPU Nvidia GeForce 7300
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:25:46 AM, on 10/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\... Read more

More replies
Answer Match 63.84%

I now have a white x in a red circle in my system tray. I ran a hijack this log. Can someone please help me! I now have no control over my volume nor can I change the brightness of my screen. Also macafree is giving me these popups of blocked trojens all the time. Please Help Me!

A:White X in Red Circle

Hello please run MBAM (MalwareBytes):NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take... Read more

3 more replies
Answer Match 63.84%

Hello,

I am a college student and today when I woke up I logged onto my computer and it turns out I cannot use google. When I search and click on a result I am redircted to another search site with the URL go.google. My room mate was online last night and must of picked this virus up somewhere.

I've run AVG and Spybot and neither show any infections. I googled this on my laptop (which I am on now) and read about software call Malwarebytes. I download this, put it on a USB drive and went to put it on my desktop and I come to find that the computer has froze up. Now I cannot log on in normal mode so I have to boot in safe mode. When I do this and instal the new software I find that I cannot update the program because the computer cannot connect to the internet.

I do not know what to do. There is so much important stuff on my computer that has not been backed up to the chaos involving my move to college. I have never used HJT and do not have it on my desktop nor can I get it because I cannot connect to the internet.

Please... any help would be amazing.

EDIT: At the moment I am running avg in safe mode and Malwarebytes without the update in safe mode.
 

A:Red Circle with White X

Hi, Welcome to TSG!!
Click here to download HJTInstall.exe

Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

 

3 more replies
Answer Match 63.84%

Hi All,

Internet Explorer (7 and 8) will open and close immediately under Vista Home Premium. I have tried the following:

1) Run IE in no adds-on mode. Does the same thing.

2) Reset all settings under the Internet Options Panel---when it gets to the third part 'Applying Default Settings' it fails.

3) Run Malware Malabytes in Safe Mode---nothing detected.

4) Install IE8 (wasn't working back when it was IE7), still no luck. Uninstalled back to IE 7, no working, and then back to IE8.

So, any ideas? I normally use Firefox and Opera, but there is one specific work-related website that requires some ASP scripting that neither Firefox or Opera can handle!

Thanks!

-bea

-----------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:20:46, on 26/08/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\SetPoint\LBTWiz.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\VPTray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\acrotray.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Kontiki\KHost.exe
C:\W... Read more

More replies
Answer Match 63.84%

This is primarily a informational post for those interested.. I found this post http://forums.techguy.org/malware-r...regedit-msconfig-closes-immediately-upon.html and wanted to reply but it was closed.

I just copied my drive over using Western Digital's Data Lifeguard utility. Upon rebooting (and making sure the new drive was selected in the bios to boot from) I encountered 2 problems..

1: the boot menu (which had not previously been enabled) now showed two entries for "Default system", both which worked, but was annoying to me..
2: msconfig would not work for me to check the startup and boot.ini.

I ran through a lot of steps trying to get msconfig to work again.. copied the file to a different location, rename it as a different filename, check for virus/malware, even copied it from my laptop, and checking the registry entries.. Nothing would let this program run!
As far as antivirus programs, I run Avast! .. I was POSITIVE I had no virus malware, etc. Even still, I ran a boot time virus sweep. NOTHING found. Even ran HijackThis.. again nothing. After MUCH searching on Google and even these forums, I simply resigned myself that I was going to need to do a repair install (which I hate doing). I decided to check one last thing first.. manual edit of the boot.ini.

When I opened it up and compared to my laptop running the same version of the OS (Win XP Pro sp3) I noticed it was missing an entry .. the information under [operating systems] (second entry) was b... Read more

More replies
Answer Match 63.84%

Unfortunately I need IE7 for a stupid little app I'm running. IE6 and IE8 just won't work with it :-(
Machine is XP MCE-SP3 and was recently formatted so it's pretty clean.
Anyway same old story, IE6 works...IE8 works...IE7 opens for 500ms or so and disappears.
The process closes so it's not an issue where the window is simply hidden.
**********
I don't use this machine to get on the net
PC Functions:
Run MCE
Run IIS
Run an MS SQL DB that keeps tabs on my movies
Some video encoding using VirtualDub
Non MS Software Installed:
K-Lite Codec Pack
PowerISO
XP-AntiSpy (tweak)
Winrar
--Nvidia Drivers
MS Software installed:
MS ForeFront Client Security (AV)
MS SQL Server 2005
**********

Scanned with MS Forefront Client Security...nothing found
Scanned with Malwarebytes Anti-Malware......nothing found
Machine preperation for further troubleshooting:
1) All Run items removed (HKCU, HKLM, Startup Groups)
2) AV Service Completely disabled,
(no other security or spyware apps installed)
3) No toolbars or add-on's installed but I still checked disable all third party add-on's in Inet options.

Troubleshooting:
===Stage 1===
Downloaded IE7 setup to local drive
Uninstall IE7
Reboot
Install from local file
Reboot
Hit [Tools>Inet Options>Advanced>Reset]
===Stage 2===
Create new local admin account and login with that account.
I rip out out 7, reboot and IE6 works fine again.
Install IE8 it works great.
Rip out 8 back to 6 works fine
Install IE7 again... Read more

A:XP SP3 - IE7 opens and closes immediately

What is the app that you are trying to run? Is there not an update that will work with IE8, or at least a bug fix?

When was the last time this program was working properly?
 

3 more replies
Answer Match 63.84%

Whenver I start msconfig it immediately shuts down. I know its a virus and ive seen other boards on it but none of it helped me out. I used Hijackthis but dont know what to do now. This is the log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:06:36 PM, on 4/23/2013
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\regsvr.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\WINDOWS\system32\28463\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\AutoProtect\DrvMonitor.exe
C:\WINDOWS\system32\regsvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
C:\WINDOWS\system32\XP-1B65F206.EXE
C:\WINDOWS\system32\mdm.exe
C:\WINDOWS\Sy... Read more

A:msconfig.exe closes immediately

Platform: Windows XP SP2 (WinNT 5.01.2600)

Hi, you need first to download Windows XP Service Pack 3
http://www.microsoft.com/en-us/download/details.aspx?id=24
You are missing out on important Windows Update and your Pc is not protected.
------
Once you have installed SP3 - restart your Pc and check for Windows Updates.

When that is done - post a New Hjt log.
-------
Download Security Check by screen317 from
http://screen317.spywareinfoforum.org/
Or
http://www.bleepingcomputer.com/download/securitycheck/

Save it to your Desktop.
Double click the install icon.
Let it scan the Pc - press any key when asked.
It should now open in Notepad.
Copy and Paste the result of the scan in the reply box below.

The saved log will be called checkup.txt.
------
Check and post
TSG System Information Utility - found here.
http://library.techguy.org/wiki/TSG_Valuable_links
 

2 more replies
Answer Match 63.84%

I am unable to access IE (Win XP home edition)
The IE white screen opens and then closes after a few seconds. I have tried to do a system restore - and I can't even get that to open.

I have attached the output from Hijackthis. When I attempted to run the dss tool, it was unable to complete. I tried several times and recieved a Windows error - "dss.exee has encountered a problem and needs to close".

Please help!!

Thanks

A:My Ie Opens And Then Closes Immediately - Pls Help!

Hello brownth01,

Welcome to Bleeping Computer

Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Thanks,
tea

2 more replies
Answer Match 63.84%

MS Word 2000 SR-1 closes immediately on launch. My operating system in Microsoft XP Pro. I've removed the program and reinstalled it, restarting the system after each action. I've updated AVG and run it, then restarted the computer, but no luck. Any ideas?
 

A:Word closes immediately

yes, here an idea
though, you have remove the application from your computer, you system have kept some files from old installation.
not to worry, this can be fixed by purging all MS Office files from your system.

let us start with add/remove programs & remove MS Office 2000
click Start, Run & type regedit & OK. browse to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office. right click that folder & choose the delete option.
go to C drive, Programs Files, & delete Microsoft Office from there. (don't worry if you receive an error of some files can not be removed, will just do it after reboot)
if the last step gave u an error, please reboot & delete after reboot (don't open any applications or browsers)
reboot
click Start, Run & type %TEMP%, the click OK. (delete all items within the folder that opens)
reboot
reinstall MS Office 2000
this should fix your issue. please let me know how it goes
 

1 more replies
Answer Match 63.84%

Also Outlook Express if I select to display images on HTML e-mails, or reply or forward an HTML e-mail. Firefox runs just peachy!
I hope I did all of this right. I really appreciate the assistance!

Hijack This log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:38:42 PM, on 10/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Novadigm\AXF\Bin\XFSrvcNT.Exe
C:\WINNT\system32\CmgShieldSvc.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Symantec\SPA\smc.exe
C:\Program Files\Symantec\SPA\snac.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINNT\system32\ccs.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Communication Now\2119264\Program\ServiceWrapper-2119264.exe
C:\Program Files\BigFix Enterprise\BES Client\BESClient.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\Program Files\iPass\iPassConnect\iPassPeriodicUpdateService.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\Program Files\McAfee\Common Framework... Read more

A:IE closes immediately upon launching

Bump.

1 more replies
Answer Match 63.84%

IE 11 opens and then closes immediately. The only way to open IE 11 is to right click on IE shortcut, select properties, then set to open minimized. Then click IE 11 on toolbar, and it opens. Setting IE 11 to Normal or Maximized causes IE 11 to open then immediately close. I have removed then re-installed IE 11, ran malewarebytes and ccleaner but IE 11 still has the same problem. I turned off GP rendering. I am out of ideas, does anyone have any other methods to try?

A:ie 11 opens then closes immediately

Run CCleaner-Slim or CCleaner-Portable & remove everything it finds, then try IE11 again. If that doesn't do it, go to Internet Options > Advanced tab, then click the reset button located near the bottom.https://www.piriform.com/ccleaner/b...

6 more replies
Answer Match 63.84%

I was trying to install updates on our desktop last night and had to roll back because the XP3 update could not install. Now IE does not work. I try to install IE8 through automatic updates and it cannot finish the installation. Also when I first logon to my machine, I get the messages cannot find and could not run or load C:\windows\inet2003\winlogon.exe.

A:IE opens then immediately closes

Its wise to make sure when you are doing updates and Service Packs to make sure the system is 100% malware free. With that said, why wold the SP3 not install? Did you recieve an error and if so what was the EXACT error message?

3 more replies
Answer Match 63.84%

In our client we are facing the below issue in only 4 machines.

When we open Internet Explorer 11 in the machines, it freezes for some time and then closes automatically. No error is getting recorded in the even viewer. Tries to launch the IE by disabling the add ons and by enabling the use software rendering instead of
GPU rendering. Disabled the script also but no use. When i tried to uninstall IE 11 and use the old version of IE it works fine.
Kindly suggest

More replies
Answer Match 63.84%

Unfortunately I need IE7 for a stupid little app I'm running. IE6 and IE8 just won't work with it :-(

Machine is XP MCE-SP3 and was recently formatted so it's pretty clean.

Anyway same old story, IE6 works...IE8 works...IE7 opens for 500ms or so and disappears.
The process closes so it's not an issue where the window is simply hidden.

**********
I don't use this machine to get on the net
PC Functions:
Run MCE
Run IIS
Run an MS SQL DB that keeps tabs on my movies
Some video encoding using VirtualDub

Non MS Software Installed:
K-Lite Codec Pack
PowerISO
XP-AntiSpy (tweak)
Winrar
--Nvidia Drivers

MS Software installed:
MS ForeFront Client Security (AV)
MS SQL Server 2005

**********


Scanned with MS Forefront Client Security...nothing found
Scanned with Malwarebytes Anti-Malware......nothing found

Machine preperation for further troubleshooting:
1) All Run items removed (HKCU, HKLM, Startup Groups)

2) AV Service Completely disabled,
(no other security or spyware apps installed)

3) No toolbars or add-on's installed but I still checked disable all third party add-on's in Inet options.



Troubleshooting:
===Stage 1===
Downloaded IE7 setup to local drive
Uninstall IE7
Reboot
Install from local file
Reboot
Hit [Tools>Inet Options>Advanced>Reset]

===Stage 2===
Create new local admin account and login with that account.
I rip out out 7, reboot and IE6 works fine again.
Install IE8 it works great.
Ri... Read more

A:XP SP3 - IE7 opens and closes immediately

You can try to run the following command to see if any DLL files are missing/damaged.

sfc /scannow

Try also the install folder of the app you use with IE7, if there is a DLL called PSAPI.dll
if there is delete it or rename the file.

6 more replies
Answer Match 63.84%

Internet Explorer closes immediately after loading on my ThinkPad. I have run a virus scan using my installed Internet Security scanner (Comodo), but it has found no threats. Following the instructions for this forum, I have run dds.scr and gmer.exe. DDS.txt is pasted below; ark.txt and atttach.txt are zipped together in the attachment. Any guidance would be most helpful.


DDS (Ver_09-12-01.01) - NTFSx86
Run by asquared at 13:48:30.78 on 27/01/2010
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3037.2317 [GMT -8:00]

AV: COMODO Antivirus *On-access scanning enabled* (Updated) {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: COMODO Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

============== Running Processes ===============

C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe
C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\vsnp2uvc.exe
C:\Program Files\Lenov... Read more

A:IE closes immediately after loading

Hello XEyedBear,

I see you also ran ComboFix. Are/were you being helped at another forum?

11 more replies
Answer Match 63.84%

I have downloaded IE11 directly from Download IE Here Before that though I tried getting IE9, 10 and 11 through the Windows Update process. IE8 works on my laptop but I cannot get Direct x to function properly on http://www.moac.microsoftlabsonline.com I have tried uninstalling and reinstalling via the "Turn Windows features on or off" section of the control panel. Also reset IE through the control panel. Followed the instructions from this page as well. Internet Explorer opens, flashes, and then closes immediately when you start it Here is the link to the thread that suggested I seek help here.

Other browser (Firefox) works fine. I rarely use IE and only need it now to do the lab work for the 2 MOAC courses I am taking.

dds log:

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17126
Run by JohnnyD at 0:55:48 on 2014-07-03
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2942.1807 [GMT -4:00]
.
AV: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG AntiVirus Free Edition 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServic... Read more

A:IE 11 - When opened, immediately closes

jdougs,

Hi and welcome to TSF.

I am currently reviewing your logs. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem as soon as possible.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please be patient with me during this time.

19 more replies
Answer Match 63.84%

When I try to use Hijackthis, it closes withing a maybe two seconds. I'm not exactly sure what's wrong.
When I managed to get the log by quickly pressing the button, the log hadn't work either until I changed the name of the file. Also, certain websites that deal with hijackthis, closes my explorer immediately. D:

But here's the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:55:18 AM, on 7/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Yahoo!\Me... Read more

A:Solved: HJT closes almost immediately.

16 more replies
Answer Match 63.84%

Hijackthis runs for about two seconds and then closes. Though, I was able to get a log by clicking the button quickly enough.And then I realized that the saved log also closed within a few seconds also. So I tried changing the name of log, and then it worked.But here's the log I managed to get:Logfile of HijackThis v1.99.1Scan saved at 6:20:15 PM, on 7/17/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\TGTSoft\StyleXP\StyleXPService.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Microsoft Hardware\Mouse\point32.exeC:\Program Files\Java\jre1.6.0_01\bin\jusched.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\Program Files\PowerISO\PWRISOVM.EXEC:\WINDOWS\system32\rundll32.exeC:\Program Files\DAEMON Tools\... Read more

A:Hijackthis Closes Almost Immediately.

Hello Onyx,Please download ATF Cleaner by Atribune.This program is for XP and Windows 2000 onlyPlease download OTMoveIt by Oldtimer and save it to your desktop.Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.O2 - BHO: (no name) - {53B5F2B1-94DD-43E5-8187-EB4E31F00701} - C:\WINDOWS\cxylyvyh.dllO4 - HKLM\..\Run: [SeePassword] C:\Program Files\SeePassword\SeePassword.exeO4 - HKLM\..\Run: [jexetsns] rundll32.exe "C:\Program Files\jexetsns\rohyzyvs.dll",InitO4 - HKLM\..\RunServices: [system] keygen.exeO4 - HKCU\..\Run: [gf1.0.0.2] C:\WINDOWS\zcrqpghy.exeNow close all windows other than HiJackThis, then click Fix Checked. Close HijackThis.Run ATF Cleaner:Double-click ATF-Cleaner.exe to run the program.Under Main choose: Select AllClick the Empty Selected button.If you use Firefox browserClick Firefox at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browserClick Opera at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.For Technical Support, double-click the e-mail address located at the bottom of each menu. Run OTMoveIt:Please double-click OTMoveIt.exe to run it. Copy the file paths be... Read more

2 more replies
Answer Match 63.84%

I am having the same problem. I have tired resetting, I ran sfc and no issues were found. I have tried uninstalling/reinstalling. Also tried the tweaks from majorgeeks.com. I have tried IE9 via update and IE11 via update and also from downloading. Also I just finished a clean install on a tower and have the exact same issues there. I am desperate here. I need IE to complete MOAC labs. Both machines are running Win7 64bit. Laptop has Home Premium and the new tower is Pro. Both machines have the OS on one partition with registry point program files to a second partition.

A:IE 11 - When opened, immediately closes

Moved to a thread of your own, please do not hijack another thread, making one of your own will get you help specific to your issue.
Do you have any other issues, where did you get the copies of windows that are installed, have you tried running a startup repair. What about other browsers do they have the same problem.

19 more replies
Answer Match 63.84%

I just installed AIMMusicLink and all of a sudden AIM won't work. I try to run it and the screen flashes really quick and then closes. I uninstalled the music link program, reinstalled AIM 6.8, uninstalled 6.8 and installed 6.9 beta and then gave up and started using 5.9 which does work. Any ideas to why 6.8 won't work? I even searched the registry and deleted everything that had to do with musiclink but it still didn't work.

A:AIM opens and then immediately closes

meebo works if you cant fix aim meebo.com

5 more replies
Answer Match 63.42%

Two days ago i was searching through the internet..
Suddenly my computer(windows xp sp2) was rebooting..
next time it loaded up popped the red circle with white 'x'
saying im infected and its downloading a program..
Then something installed, i didn't know what it was but there was a progress bar.. i coudn't cancell this or what so ever..
Then again my PC restarted. The red circle with with 'x' is now gone..
But after about 1 minute my whole pc just freezes..
Now everyone i log on to my account it freezes after 1 minute or so..

It runs fine on safemode so it can't be hardware right?

Please help me, I would really appriciate it

thanks in advance.
 

A:PC Freezing After Log on | Red Circle White 'X'

Please please please help

This is the hyjack log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:19:32, on 17/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SDFix] C:\SDFix\RunThis.bat /second
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Download with &DAP - C:\Prog... Read more

1 more replies
Answer Match 63.42%

Hi I'm new to the forum so I'll try to follow the guide lines as described in posts above. I have the red circle with the white x in my systems tray, I also get a popping sound coming from my speakers every so often. I've looked over other forums with same topics most ask for a hjt log so I've posted one in this thread.**Also I must note that I had to rename the hjt.exe before it would run, OS:windows Xp pro. sp2 80gbHD Intel pentium 3 on a compaq desktop pro. the following is my HJT log.

---------------------------------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:03, on 2008-11-01
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRAM FILES\A-SQUARED FREE\a2service.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
C:\Program Files\DAP\DAP.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\c4\Desktop\dot.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\... Read more

More replies
Answer Match 63.42%

Here is my Hijack log, any help would be appreciated, this is driving me crazy. Been working on it off and on for days.

Logfile of HijackThis v1.99.1
Scan saved at 10:38:37 AM, on 9/26/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\Program Files\Microsoft AntiS... Read more

A:rde circle white x trouble

7 more replies
Answer Match 63.42%

I'm running a Dell XPS with Windows XP (Media Center)

Over the last couple months, I had a couple viruses that I've taken care of (can't remember what they were), but my system is now acting oddly, and in some ways similar to how it was when it was infected before.

Some of the symptoms:
1) Red circle with a white X in the taskbar. Before, this would warn me that my computer is infected, but now just makes the "pop" sound without showing anything.
2) Random restarts, sometimes without warning, sometimes displaying a window that puts a 1 min. countdown until the computer shuts down (the window that can be halted with running the "shutdown -A" command)
3) Blank web pages popping up in a separate window when using the brower (Firefox)
4) Locked, blank desktop and (sometimes) locked task manager.

So far, I've run scans on the computer several times each with Ad-Aware (Free), AVG (Free) and Spybot Search & Destroy. Each time, even though a run was just completed, there are at least a dozen different infected files, security hazards or trojans. The one that seems to come up the most (and never gets deleted, even in Safe Mode) is something called Virtumonde.

I've run a Hijack This scan, with these results:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:00:49 PM, on 2/12/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.e... Read more

A:Red Circle & White X, Odd Behavior

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

2 more replies
Answer Match 63.42%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 5:11:30 PM, on 3/27/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Common Files\Microsoft Shared\Ink\KeyboardSurrogate.exeC:\WINDOWS\system32\spoolsv.exec:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\System32\digtizer.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\o2flash.exeC:\Program Files\Softex\OmniPass\Omniserv.exeC:\WINDOWS\system32\PnkBstrA.exeC:\Program Files\Intel\Wireless\Bin\RegSrvc.exeC:\WINDOWS\system32\svchost.exec:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exeC:\Pro... Read more

A:Red circle with white x causing pop-ups

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.We need to create an OTListIt2 ReportPlease download OTListIt2 from hereSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the "Run Scan" button.The scan should take just a few minutes.Copy the log that opens up and paste it back here in your next reply.=============The next log will show us any hidden files that are present.Download GMER from here:Unzip it to the desktop.Open the program and click on the Rootkit tab.Make sure all the boxes on the right of the screen are checked, EXCEPT for ?Show All?.Click on Scan.When the scan has run click Copy and paste the results (if any) into this thread.

12 more replies
Answer Match 63.42%

I so got slammed by "Ultimate Defender". I'm at my wits end, this thing has done a number on me. First off, I've got the dreaded red circle with the white X in my system tray telling me "Your computer is infected!" blah blah blahI CAN NOT open HJT. I've saved it in different folders. I've renamed it. I've done everything and the program will not start. Neither will Kapersky. Also, when I click on any link on google, I get redirected to a sales screen. I have to hit "back" and then re-click on the link to get to where I want to go. This is for everything I hit on google. I'm a McAfee subscriber and I've got Ad-Aware, but neither of these programs have done jack crap for me. I've tried about every fix I've seen on the internet, and I've got nothing. I manually cleared the Ultimate Defender listings from the registry, but still nothing helps! McAfee also says I'm not protected -- when I click the "fix" button, it says "an error occured" and it kicks me back to the main screen. Lovely -- SuperAntiSpyware won't open either. HELP!

A:Red Circle / White X -- But Disabled Hjt!

Welcome and please try these instructionsHow to remove Ultimate Defender (Removal Instructions)After try running SUPER again from Safe Mode

6 more replies
Answer Match 63.42%

Hi, I've tried myself to get rid of the virus using the programs that have been suggested. I used McAfee (which sucks, but it's my mom's computer and she doesn't trust it unless it costs money.)

I also ran, CC Cleaner, Malwarebytes, and SuperAnti Spyware. It's gone, but I just want to make sure it's REALLY gone.

The problem was a White X in a Red Circle saying I had to update spyware, and it kept opening up POP-UP ads every 10 seconds. I just turned the internet back on, and I re-downloaded HJT and this is my log.

Thank you guys so much in advance for all your help!!! This computer isn't used much so I'm astonished it has a virus at all, but let's see what the nasties are! lol.

Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:33:24 AM, on 9/18/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\AGI\common\win32\PythonService.exe
C:\Program Files\Common Files\Apple\Mo... Read more

A:HJT Log: White X in Red Circle Problem (Pop-ups, etc...)

I'm including this Malwarebytes file as well:

Thanks!!
Malwarebytes' Anti-Malware 1.41
Database version: 2823
Windows 5.1.2600 Service Pack 3

9/19/2009 2:54:53 AM
mbam-log-2009-09-19 (02-54-53).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 166241
Time elapsed: 1 hour(s), 0 minute(s), 39 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\ZCLZ5EM4\exe[1].exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\rdl59F.tmp.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
 

1 more replies
Answer Match 63.42%

I posted this in the wrong place to begin with. So here goes. I think I got this down loading an active x plugin. Anyway here is what I have so far. Security alert pop ups, link redirects to spyworld.com or something and cuponmoutain.com sometimes opening windows on their own and this annoying poping sound and the my task bar comes up( usally have it on autohide).
DDS (Ver_09-02-01.01) - NTFSx86
Run by Compaq_Owner at 13:18:12.28 on Fri 02/06/2009
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1279.734 [GMT -5:00]

AV: Trend Micro AntiVirus *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\userinit.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorSer... Read more

A:Evil red circle w/ white x

Hi,

Sorry for delayed response. Forums have been really busy. If you still need help with this post a fresh dds log, please.

2 more replies
Answer Match 63.42%

OK -- my old computer hit the skids, but before it did, I had the dreaded red circle/white X problem.You guys fixed it. Here's the link. http://www.bleepingcomputer.com/forums/t/129285/red-circle-white-x-ultimate-defender/My wife and I were looking for cars online, her computer shut down and rebooted. I thought "uh oh". Sure enough, now she's got the red circle / white X. Let's do this again..... (sigh)Log created by WinPatrol version 15.5.2008.0:15.5.2008.0
Scan saved at 10:49:16 PM, on 7/18/2008
Platform: Windows XP SP2 Home Edition Service Pack 2 (Build 2600)
MSIE: Internet Explorer (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\SYSTEM32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\SYSTEM32\services.exe
C:\WINDOWS\SYSTEM32\lsass.exe
C:\WINDOWS\SYSTEM32\svchost.exe
C:\WINDOWS\SYSTEM32\spoolsv.exe
C:\WINDOWS\SYSTEM32\aspimgr.exe
C:\WINDOWS\SYSTEM32\cisvc.exe
C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMntor.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\SYSTEM32\hkcmd.exe
C:\WINDOWS\SYSTEM32\carpserv.exe
C:\PROGRAM FILES\SYNAPTICS\SynTP\SynTPLpr.exe
C:\PROGRAM FILES\SYNAPTICS\SynTP\SynTPEnh.exe
C:\PROGRAM FILES\ORiNOCO\COMBOCARD 11AG\Utility\orinoco.exe
C:\PROGRAM FILES\Java\JRE1.5.0_06\bin\jusched.exe
C:\PROGRAM FILES\QUICKTIME\qttask.exe
C:\PROGRAM FILES\iTunes\ITUNESHELPER.EXE
C:\PROGRAM FILES\COMMON FILES\Real\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\NETGEAR\WG511SCU\Utility\Gear511.exe
C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE
C:\WINDO... Read more

A:The Red Circle White X Returns

Hello Holy Moses and welcome to BC. Let's see what we can find. Follow the steps below in order:Before running a new scan let's clean out the temporary folders. Download ATF Cleaner to your Desktop.Double-click ATF-Cleaner.exe to run the program.Click Select All found at the bottom of the list.Click the Empty Selected button.If you use Firefox browser, do this also:Click Firefox at the top and choose Select All from the list.Click the Empty Selected button.NOTE : If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser, do this also:Click Opera at the top and choose Select All from the list.NOTE : If you would like to keep your saved passwords, please click No at the prompt.Close ALL Internet browsers (very important).Click the Empty Selected button.Click Exit on the Main menu to close the program.Now download OTScanIt from here or here to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.Note: You must be logged on to the system with an account that has Administrator privileges to run this program.Close ALL OTHER PROGRAMS.Open the OTScanIt folder and double-click on OTScanIt.exe to start the program (if you are running on Vista then right-click the program and choose Run as Administrator).
In the Drivers section click on Non-Microsoft.Under Additional Scans click the checkboxes in front of the following items to select them:Reg - BotCheck
File - Additional Fo... Read more

9 more replies
Answer Match 63.42%

I am infected with a red cirlce witha white x in the center. there is an icon on my toolbar that keep popping up a security message: Warning! you have a security problem. Please help. thanks.

A:infected with red circle with white x

Hi and welcome to BleepingComputer The process of cleaning your computer may require temporarily disabliling some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Result... Read more

1 more replies
Answer Match 63.42%

Hi,this seems to be a fairly prevalent problem. ive got a red circle with a white x in it on my toolbar. heres my hijackthis logRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exeC:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYSC:\Program Files\Intel\Wireless\Bin\RegSrvc.exeC:\WINDOWS\ehome\ehtray.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\... Read more

A:Red Circle With White X In Toolbar

Welcome to the BleepingComputer HijackThis Logs and Analysis forum mrabid First please find and delete:C:\DOCUME~1\OWNER~1.YOU\LOCALS~1\Temp\Rar$EX25.2485\HijackThis.exeNow download and install Hijackthis.This is a self-extracting version which will automatically install HJT to C:\Program Files\Hijackthis by default.A desktop shortcut can be created during install under 'Select Additional Tasks'.**********************************Please download DrWeb-CureIt & save it to your desktop. DO NOT perform a scan yet.You should copy/print the following because you need to be in Safe Mode from here on.Reboot your computer into SAFE MODE" using the F8 method. To do this,restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys on your keyboard to navigate and select the option to run Windows in "Safe Mode".Scan with DrWeb-CureIt as follows:* Double-click on drweb-cureit.exe to start the program. An "Express Scan of your PC" notice will appear.* Under "Start the Express Scan Now", Click "OK" to start. This is a short scan that will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it.* Once the short scan has finished, Click Options > Change settings* Choose the &quo... Read more

4 more replies
Answer Match 63.42%

My work computer seems to be infected. I've got the red circle with a white "X" in the system tray. It randomly says I have a virus and that I'm downloading antivirus software to take care of it. Task manager has been disabled. Sometimes when I'm browsing the web I'm redirected to random sites.

I've run several antivirus programs, (McAfee is loaded, but was no help) including SuperAntiSpyware and HouseCall. I've downloaded AVG, but when I try to run it, it says it can't connect to the internet (though I am connected).

I've searched the forums for a fix, and there seem to be various avenues for tackling this, so I'm not sure what to do.

Please help!

A:Red circle with white X virus; help!

Hello and welcome.. First I must say that I hope you're allowed to run tools on tis (office) PC without the bosss or IT dept coming down on you. If that's OK then run these.RKill.... then Super again ( post the scan log)Please download Rkill by Grinler and save it to your desktop.Link 2Link 3Link 4Double-click on the Rkill desktop icon to run the tool.If using Vista, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.You will need to run the application again if rebooting the computer occurs along the way as the malware programs will start again.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.44) and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' An... Read more

1 more replies
Answer Match 63.42%

I have an intermitant issue with a red cirle and a red x in the center. I also get several pop ups that tell me I have malware and or spyware and want me to click ok to run scans or install software when I am on the internet. I have attached the extra.txt and active.txt

nDeckard's System Scanner v20071014.68
Run by Compaq_Owner on 2008-04-08 15:21:36
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.


-- Last 1 Restore Point(s) --
1: 2008-04-08 22:21:43 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-04-08 15:24:59
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:... Read more

A:Red circle with white x in task bar

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

If you still require assistance with this issue, please do this:

Please download HijackThis to your desktop

Alternate link

Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file here.... Read more

1 more replies
Answer Match 63.42%

Hey I have a red circle with a white x in it in my taskbar. I have no idea how it got there or how to get rid of it. I know that I cannot do a system restore and that I cannot access my task manager either. It tells me "Task manager has been disabled by your administrator. This problem is on a Dell Dimension 2400 running Windows XP Home SP3. I need this fixed as soon as possible. Any help is greatly appreciated.I created a HJT log and it reads as follows:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:15:20 PM, on 12/30/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Nero\Nero 7\InCD\InCDsrv.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\McAfee\SiteAdvisor\McSACore.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeC:\PROGRA~1\McAfe... Read more

A:Red Circle with White X REmoval

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner ... Read more

2 more replies
Answer Match 63.42%

As I was reading a site, I blindly accepted something without reading it fully and my pc shutdown and restart and now I am getting a Red Circle with the White X telling me the following:

You computer is infected!

Windows has detected spyware infection!

It is recommended to use special antispyware tools to prevent data loss. Windows will not download and install the most up-to-date antispyware for you.

Click here to protect your computer from spyware!

I have downloaded and ran AdAware (the free version) and it found nothing. I have not been able to get SpyBot to run at all. I finally got HijackThis! to run after renaming the executable to something else. I have also read about ComboFix. It shows a little status bar, then nothing. I also cannot get my Symantec Anti-Virus to disable. It will automatically renable itsself. Also my Windows Personal Firewall will be disabled every time I start up.

The following is my HijackThis.log file. Thank you for your help!

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 2:10:02 PM, on 2/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Novell\XTAgent.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Apache Software Foundation\Apache2.2\bin\htt... Read more

More replies
Answer Match 63.42%

i got a malware i think. theres this program in my taskbar with a red circle and white x in the middle and constantly pops up balloons saying ur computer is infected windows has detected a spyware, it is recommended to use special antispyware tool .... blah blah.
Here is my hijackthis log:
Platform: Windows XP SP3, v.5755 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Roxio Creator 2009\5.0\CPMonitor.exe
C:\WINDOWS\system32\winupdate.exe
C:\Wallpaper Changer\EvJOWall.exe
C:\Progr... Read more

More replies
Answer Match 63.42%

HERE IS MY LOG FROM HIJACKTHISLogfile of Trend Micro HijackThis v2.0.2Scan saved at 1:02:52 PM, on 1/21/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\brsvc01a.exeC:\WINDOWS\system32\brss01a.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgrssvc.exeC:\PROGRA~1\Grisoft\AVG7\avgrssvc.exeC:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exeC:\PROGRA~1\Iomega\System32\AppServices.exeC:\WINDOWS\system32\PRISMSVC.EXEC:\PROGRA~1\Grisoft\AVG7\avgrssvc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WIN... Read more

A:RED CIRCLE WHITE X IN TOOLBAR

Hello sledneck8,Welcome to Bleeping Computer.My name mas_pogi and I will be helping you with your Malware problem.As I am still in training I will be helping you under supervision of our expert teachers, so there may be a delay between posts.Attention!Please do not run any other tool untill instructed to do so.Please tell me about any problems that have occurred during the fix.Please tell me of any other symptoms you may be having as these can help also.Please try as much as possible not to run anything while executing a fix.Please reply to this thread, do not start another.You might want to save this page on your bookmark, so you can find it again when you return.Firefox: Then click on Done.IExplorer: Then click on Add.Stay calm and everything will be just alright. I will be analyzing your log. I will get back to you with instructions after it is approved.With Regards,mas_pogi

15 more replies
Answer Match 63.42%

Hi,
I am running Windows 2000 on my machine here at work. I had Office 2000 Professional installed and all was well. A few weeks ago I installed a CAD reading program called Volo View and sometime there after all my problems started. All of my office applications (Excel, Outlook, Word, etc.) close only a few seconds after opening any one. I have removed both softwares and tried reinstalling Office. I also removed Volo View out of the registry also and it still shuts down. I found a MS fix to edit the registry by deleting HKEY_LOCAL_MACHINE\Software\Microsoft\Office\9.0 and then reinstalling Office from an administrator profile which didn't help. I have run Spybot, Adaware and CW Shredder, in an attempt to remove anything that may have come about via the internet and none have solved my problem. Below is my Startup Log and HijackThis Log. Thanks for any help that can be relayed...

StartupList report, 8/9/2004, 8:47:30 AM
StartupList version: 1.52.2
Started from : C:\Hijack This\HijackThis.EXE
Detected: Windows 2000 SP4 (WinNT 5.00.2195)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\NavNT\defwatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\NMSSvc.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINNT\syste... Read more

A:Office 2000 Closes Immediately

when removing Office 2000 to correct problems, make sure you run OFF2000: Utility to Completely Remove Remaining Office CD1 Files and Registry Entries and OFF2000: Utility to Completely Remove Remaining Office CD2 Files to clean up any leftovers the uninstall left behind

Here's some MS KB articles that might help with the programs closing problem . . .
Office 2000 programs quit immediately on Windows 2000 when you are logged on as user
Error messages starting Office 2000 program, or program immediately quits on Windows XP, Windows NT 4.0, or Windows 2000
OFF2000: Program Quits Immediately After Installing Project or Visio, not necessarily the same issue, but you can try it, if all else fails.
 

1 more replies
Answer Match 63.42%

I posted this in the "email" forum but I'm thinking it might be a security issue so I'm going to post it here as well:

All of a sudden yesterday Outlook closed and now when I try to re-open it, it immediately closes. I get the splash screen and I see my inbox for about a second but as soon as it tries to send/receive, it closes.

I've uninstalled MS Office and reinstalled, tried using a restore point, tried to open in safe mode and run spybot. After all of this, still nothing.

I'm running MS Office XP Pro

Anyone have any advice or tips on what I can do next to get Outlook back up and running?

Here's my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 09:41:16, on 6/15/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Dell\NICCONF... Read more

More replies
Answer Match 63.42%

Thought this would be a good place to ask this...if not, feel free to point me in the right direction.

I've had this problem ever since the first betas, thinking that it would eventually work or "be fixed"--but even the release candidate and now the final has the same issue.

When I install IE9, when I go to open up the browser (32 or 64), it opens for a split second and then immediately closes. Every single time. I've never seen IE9 open on this machine.

One of my thoughts on why would be that I have two hard drives in this machine--a 60GB SSD and a 1TB HDD. I manually edited the registry entry for default install location / program files location to the E: drive, or 1TB drive, so I don't mistakenly install programs onto the SSD and clog up its limited space. For 95% of programs this has worked out just fine, including Microsoft's own Security Essentials (even though I'd love to have the option to put it on the SSD, but there's no options on where to install it).

Anyone else run into a problem like this? Is there a better solution than reverting that program files change? Now that I've had Windows running for a while I imagine changing that record will cause some...not so nice issues.

EDIT: And I just checked--IE9 is indeed installing to Program Files on the E:\ drive.

A:IE9 opens for a split second, then immediately closes.

For IE crashing, you probably want to try starting it from the command line first to see if it works this way - start > run > iexplore -extoff. If so, you have an add-on causing an issue, and can disable them via autoruns.

3 more replies
Answer Match 63.42%

Hello FYI, I was referred to post here by MRT.Today I did Windows updates.Before updating, I had Win XP SP2 and IE6 (IE6 used to work fine).After updating, I had IE7 and XP SP3.After going to IE7 and XP SP3:IE will not work. IE flashes open and closes very fast.The text in the cmd prompt dialog box is now teeny tiny microscopic (was normal sized before).Wireless connection will not work. (worked fine before; now using ethernet connection to DSL modem).I found this topic on Microsoft's site:When you start Internet Explorer, it opens, flashes, and then closes immediatelyhttp://support.microsoft.com/kb/967896Tried "resetting" IE, as per Microsoft's instructions.....didn't work.I uninstalled IE7, and IE6 still did not work. Downloaded IE8 and am about to install it, per Microsoft's instructions in above-referenced topic.Anybody ever heard of this, text in cmd prompt dialog box going teeny tiny after IE7 and XP SP3 updates, and what the fix is for this?Regarding the wireless connection not working after IE7 and XP SP3 updates:I right clicked wireless icon in tray area of taskbar, hit "Repair" and it was unable to "repair". Went back to Control Panel, Network Connections, right clicked on Wireless Network Connection, hit Properties, clicked TCP/IP, hit Properties. There is a checkmark in "obtain IP Address Automatically". I thought maybe I could type it in manually, so I went to the cmd prompt, did an IPCONFIG. The top part... Read more

A:IE opens, flashes, and then closes immediately

Well...the only question I have...is do you have a boxmaker (Dell, HP, etc.) system?

If so, you should have read their documentation/suggestions before ever installing SP3.

Louis

11 more replies
Answer Match 63.42%

I cannot open IE7 - or any other browser on my laptop (I am using our desktop to enter this). The window says connecting for about 5 seconds, but it never connects and the window just closes. I have run Norton Antivirus, Adaware and Spyware Terminator and no viruses have been found. Please help me fix this problem - I don't even know where to begin trying to fix it since I can't access the Internet from the machine.

A:IE7 Closes Immediately - Cannot Access Browser

I am going to close this thread and post in the malware forum instead as I am sure I have a virus.

1 more replies
Answer Match 63.42%

Im running Win XP Home and just started to encounter this problem. I just finished ad-aware/spybot/cswshredder/defragging/antivirus and any other little tricks of the trade i have picked up.....

Seems that when i try to open Task Manager it will only stay open for around two seconds, then just closes automatically....

Any help would be great ty.
 

A:Task Manager Closes Immediately

11 more replies
Answer Match 63.42%

As the title says, Google Chrome opens then immediately closes. I've tried uninstalling it but it does the same , the uninstall window will just close so i deleted all the files off the PC and tried to install it but again, when installing the window just opens then closes..

Has anybody come across this before?

Thanks.

A:Chrome opens then immediately closes

Hello,

Boot into Safe Mode and see if you can uninstall the program then try the reinstall.

If still does not work try creating a new user profile. Create a new browser user profile - Google Chrome Help

If still having issue make sure that your antivirus is up to date and perform a scan on the PC.

See the thread below and try the recommended fix. Hopefully this helps

chrome crashes on startup

2 more replies
Answer Match 63.42%

When I click on a link to a page (that I've used many times before) IE suddenly shuts down. Actuually, I jsut tried it on FireFix also and the same thing happened. Makes me think it's a firewall issue, but I don't know how to troubleshoot that. Tried all I cound, but not a TrendMicro guru and could appreciate any help that's out there.
 

A:IE immediately closes when directed to link

9 more replies
Answer Match 63.42%

I'll start with my current setup:

I'm running Win 7 Pro 64 on a Dual HDD setup, 120GB SSD/1.5TB Spinning. I have installed Windows on the SSD and I have set the Registry to expect Program Files and Program Files (x86) in the D drive.

So far, so good, except IE will not start. It flashes on the screen and immediately closes. It's getting frustrating. I've tried the Microsoft solution, and even re-registered all the .dll's for IE.

At this point, I have no idea what to do next. Anyone have any thoughts or suggestions? I would really prefer not to set Program Files and (x86) back to C drive, but I might have to if I want IE to run. And yes, I run a different browser primarily, I'd just like to know IE is functioning.

A:[SOLVED] IE 11 - When opened, immediately closes

Can you boot IE in Safe mode?

Have you tired to reset IE via Control Panel?

Internet Explorer: How to reset your settings - Lansing Computers | Examiner.com

12 more replies
Answer Match 63.42%

All of a sudden today Outlook closed and now when I try to re-open it, it immediately closes. I've uninstalled MS Office and reinstalled, tried using a restore point, tried to open in safe mode and run spybot. After all of this, still nothing.

Anyone have any advice or tips on what I can do next to get Outlook back up and running?
 

A:Outlook opens then immediately closes

Hi Lionhart

Are you receiving any error messages at all?
Which version of Outlook are you running?
 

3 more replies
Answer Match 63.42%

Internet Explorer 7.

There is a particular page of just one website that brings up the following message the second it has loaded: 'Internet Explorer has encountered a problem and needs to close.'

It's a multiple choice bullet page for placing an order at the pizzahut.co.uk site!!

I can logon just fine, but as soon as I navigate to the problem page the error is thrown up. It bugs me enough to tell you about it here!

Can anyone suggest a remedy for this? I just want to be able to order a pizza without the damn error!

Very curious that it only happens with this page and on this site only.

Not the most serious problem in the world I admit, but any help appreciated of course.

Thanks.

A:[SOLVED] Web Page Immediately Closes IE7.

Hello and welcome to TSF

Do you have these problems in any other browsers? Please try one of the below (both are free):

Firefox
http://www.mozilla.com/en-US/firefox/
Opera
http://www.opera.com/

19 more replies
Answer Match 63.42%

When i open the Internet Explorer, it will open then immediately close. I was able to pinpoint the problem at my home page (www.google.com). I opened IE again, stopped it quickly from opening the home page and then entered another web page. It worked. Then i went back to the home page and it closed again. So whenever i enter the home page the program will shut itself. I also use Firefox as web browser and it doesnt do the same thing. Any help will be appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:33:25 p.m., on 27/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\ARCHIV~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\ARCHIV~1\AVG\AVG8\avgrsx.exe
C:\ARCHIV~1\AVG\AVG8\avgemc.exe
C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\Explorer.exe
C:\winlogon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\vsnpstd.exe
C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe
C:\Archivos de programa\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:... Read more

More replies
Answer Match 63.42%

I've been through the forums and i know that other people have had similar problems, and I've read how they have had their problems fixed. I've tried many different things to get my problem fixed, but nothing seems to ever work.

I suspect that i have multiple problems that may or may not be related to each other, but either way I cannot do certain things to fix anything.

The problems that I have noticed are:
1. Home page for internet explorer changes to http://www.nuevaq.fm/ even when I change it back to what I want.
2.a)HijackThis opens, then lasts about 1-4 seconds, then automatically closes
b) Whenever I type Hijack This in internet explorer, whether on google, or any site, Internet Explorer closes within seconds (making it almost impossible to search for help regarding Hijack This)
3. Regedit/msconfig open for a split second then close again (task manager and antivirus sites do still work)

It'll really help me if you guys could tell me an alternate software which could fix this problem or better still guide me through the process of getting rid of this problem..

FYI: I wanted to post the Malware Removal & HijackThis Logs forums but whenever i visit the subforum my browser automatically closes...

please help me thanks in advance
 

A:Browser & + HijackThis closes Immediately

Duplicate here: http://forums.techguy.org/general-security/866624-browser-hijack-closes-immediately.html
 

1 more replies
Answer Match 63.42%

I cant seem to get out of this one. we removed with tddskiller then got the 0x7b. Tried many things. Just recently tried to run farbar and I can share a log if someone is available please? Should i attach or post?

A:Firefox and IE redirecting, now closes immediately

Is this the same computer as your other topic here: http://www.bleepingcomputer.com/forums/topic438946.html

6 more replies
Answer Match 63.42%

Ohh Hi...I've posted a same thread on this issue before but i made a stupid mistake..
I added the word hijackthis to my title..and i cant seem to open the thread up due to the problems in my computer...

i'll basically repeat what i said on my previous thread..

I know that I've heard that other people have had similar problems, and I've read how they have had their problems fixed. Ive tried many different things to get my problem fixed, but nothing seems to work.

I think I may have multiple problems that may or may not be related to each other, but either way I cannot do certain things to fix anything.

The problems that I have noticed are:
1. Home page for internet explorer changes to nuevaq.fm even when I change it back to what I want.
2.a)Hijack This opens, then lasts about 5 seconds, then automatically closes
b) Whenever I type Hijack This in internet explorer, whether on google, or any site, Internet Explorer closes within seconds (making it almost impossible to search for help regarding Hijack This)
3. Regedit/msconfig open for a split second then close again (task manager and antivirus sites do still work)

could any of u tell me if there's another software i can use to get rid of this problem..and if possible guide me through the process...thanks

FYI: i posted this in this section because i could not enter the proper forum cause my browser seems to automatically close when i do so...srry for the inconvenience caused..
 

A:Browser & Hijack closes Immediately

You computer is obviously infected. Are you saying you cannot post in the Malware Removal & HijackThis logs forum? Possibly caused by the name HijackThis?

Can you download the program after booting in Safe Mode with Networking?

Is so,

Please click here to download and install the HijackThis installer. ​
Run it and select Do a system scan and save a logfile.

The log will be saved in Notepad. Copy and paste the log in your next post.

Do not fix anything​
 

1 more replies
Answer Match 63.42%

Good afternoon,

Have a nasty infection and can't seem to get DDS to work. When I doubleclick it, it opens and then immediately closes. I can't see anything!

Windows Vista x64

A:Nasty infection - DDS closes immediately

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/465721 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Answer Match 63.42%

Whenver I start msconfig or regedit or generally any other program of that sort it immediately shuts down. I know its a virus and ive seen other boards on it but none of it helped me out. I used Hijackthis but dont know wat to do now. This is the log:
Logfile of HijackThis v1.96.4
Scan saved at 6:15:04 PM, on 09/08/2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
c:\program files\logitech\wingman profiler\lwpevntm.exe
C:\Program Files\Messenger Plus! 2\MsgPlus.exe
C:\Program Files\ISTsvc\istsvc.exe
C:\WINDOWS\System32\WXKFCGREMB.EXE
C:\Program Files\Opera\Opera.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Mannycanny\Desktop\HijackThis.exe
C:\Program Files\MSN Messenger\msnmsgr.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://ok-search.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ok-search.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ok-search.com/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Defau... Read more

A:MsConfig Closes Immediately After Execution

Welcome to TSG, Cronfofan; I've moved you to the XP forum since that is your operating system.

I see you have a couple of problems, first and foremost is the msconfig issue caused by a trojan. The second is a hijacker called rapidblaster among other things.

I'll try to address both in a combined fashion.

First have HijackThis and a notepad copy of these instructions handy in their own folder on the desktop. Then go to Folder Options > View and make sure "show hidden files" is selected. Folder Options is found through the Control Panel or any Explorer Tools menu.

Then shutdown completely and wait about 20 seconds before restarting. Tap f8 promptly on restart to access the boot menu and select Safe Mode.

1 -- in Safe Mode, click Start, Run and enter Explorer

2 -- navigate to c:\windows\system32 and delete:

WXKFCGREMB.EXE

3 -- navigate to: C:\Documents and Settings\All Users\Start Menu\Programs\Startup and delete:

TFTP1504

4 -- Run HijackThis and check the following boxes and click "fix checked":

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://ok-search.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ok-search.com/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ok-search.com/search.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://findloss.com/home.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,... Read more

3 more replies
Answer Match 63.42%

Hi,

I've had zero luck with the Poser support people and have had to take this issue into my own hand. This app *will* work under safe mode but does when vista is booted up normaly. What are the key differences between safe mode and normal mode in vista? I need to start there if i want to begin troubleshooting this thing. I absolutely know its a display driver conflict between Catalyst 8.8 and my Asus software package that came with the video card. Any suggestions?

A:Poser 7, closes immediately after it loads

Safe mode loads basic drivers, and prevents most Anti virus and other prevention software from running fully.

So, you either have a conflict with your av / am software or else with a driver.

2 more replies
Answer Match 63.42%

My computer had/has a bug that will sleep, but not die. EasySearch is the bug and it is really pesty. My anti-spyware provider is close to finding an effective pesticide. I have overcome most problems, but I also have downloaded 5 browsers, IE, Firefox, Opera, Avant & NetCaptor to compare them. Now something different has occurred. IE, Firefox and Opera will open certain websites I like to visit, e.g. consumerworld.org and then promptly close the window. Avant and NetCaptor do not do this. I'm leaning toward Firefox as my preferred browser.

Question 1. Can you give me some advice as to how to make IE, Opera and Firefox keep these auto-closing windows open?

This is my first post. Any help will be appreciated. Thanks.

Gary
 

A:Browser Immediately Closes Windows

Download Spyware Search & Destroy and run:
http://www.safer-networking.org/en/download/index.html

Download Ad-Aware and run:
http://www.lavasoftusa.com/software/adaware/

These should get rid of your "bug".
 

1 more replies
Answer Match 62.58%

Hi Cookiegal,

I'm logging in now that I can, but I can't get my Hijack This to run properly. Earlier I was being redirected to other sites when I tried to get to your site or searched for antivirus and Microsoft, etc., and I don't trust the link I'm getting for a new download of Hijack This. Do you have a safe link I can try?

Thanks for all your help so far.
 

A:Solved: Red Circle, White X Infection

I don't understand why you don't trust the link I gave you to download HijackThis.

In any event, I'm closing this as it's now a duplicate thread. We'll continue in your other thread.
 

1 more replies
Answer Match 62.58%

Hi,
I've got the same problem as rachgr and goukoy below. I've run panda activescan and attach the log of that. I've also run rsit, and attached both logs. I've downloaded sdfix and combofix in preparation.
Also, how can I delete norton? It doesn't work properly and it's just a nuisance, and the add/remove progs doesn't work on it!
Thanks,
Kun.

A:Same red circle with white cross problem.

bump, please.
Also, since I posted above, the XP Antispyware 2009 has installed itself and is causing more havoc. :-(

And here is a log file in text format, if you want it:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:13:34, on 16/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\~user~\Desktop\dsdf.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Expl... Read more

3 more replies
Answer Match 62.58%

I am running windows XP on a lenovo think pad T61. I have done everything I can think of so far to rid my machine of these error messages that keep appearing showing the red circle with a white X. They appear whenever I try to run .exe programs. In the begining it showed the red circle in the task bar and changed my wallpaper to a blue screen with a black rectangle in the center that read "Your Computer Has a Virus...processes on your computer have been terminated by your administrator." Also would not allow me to run task manager. I restored my system from a backup saved on my computer from months ago and the red circle dissappeared from the task bar. I can access task manager but I still recieve error messages when I run .exe files and when I tried to reinstall my bell security virus protection software from the website I couldnt even open the program, it wont run when I click the icon. I used AVG to scan for anything left and it found some trojan horses which i deleted. The error messages still appear and I still can't run proper virus protection. I am so frustrated and mentally exhausted with this thing, I need my computer for school (ironically I am in a mobile computing telecom course...) and I need help badly to correct this.
Thanks

this is my hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:53:37 PM, on 17/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Norma... Read more

A:Infuriated with red circle with white X MalWare

Hello there Welcome to the Tech Support Guy forums.
My name is NeonFx. I'll be glad to help you with your computer problems. Logs can take some time to research, so please be patient with me.

Please note the following:


The fixes are specific to your problem and should only be used on this machine.
Please continue to review my answers until I tell you your machine appears to be clean. Absence of symptoms does not necessarily mean that the system is completely clean.
It's often worth reading through these instructions and printing them for ease of reference. I may ask you to boot into Safe Mode where you will be unable to follow my instructions online.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.
Step 1

Please download exeHelper to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)

Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).


Step 2

NOTE: ComboFix should NOT be used without supervision by someone trained in its use. It does a whole ... Read more

3 more replies