Tech Problem Aggregator

Solved: Over a Thousand Spyware, Says My Scanner

Q: Solved: Over a Thousand Spyware, Says My Scanner

Well, I was scanning my computer with Panda's ActiveScan, and I've been found with over 2,000 spyware. Yes, I've found 30 before, or 130 before, but over 2,000....it seems a bit much. (And this is after having used CleanUp!) I did what (I assume) I should, ran HijackThis, and here's my results. Thanks in advance for the help.

Logfile of HijackThis v1.99.1
Scan saved at 0421:12, on 23.02.06
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\DVDRAMSV.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\System32\TPWRTRAY.EXE
C:\Program Files\Toshiba\TOSHIBA Controls\TFncKy.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\EZSP_PX.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://espanol.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshiba.com" target="_blank" class="invilink">http://www.toshiba.com
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://latino.msn.com/"); (C:\Documents and Settings\Household\Application Data\Mozilla\Profiles\default\2ii7r6x7.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Household\Application Data\Mozilla\Profiles\default\2ii7r6x7.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [PmProxy] C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [TFncKy] C:\Program Files\Toshiba\TOSHIBA Controls\TFncKy.exe /Type 28
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\EZSP_PX.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.com
O16 - DPF: JT's Blocks - http://download.games.yahoo.com/games/clients/y/blt1_x.cab
O16 - DPF: Toki Toki Boom - http://download.games.yahoo.com/games/clients/y/vto_x.cab
O16 - DPF: Tornado 21 - http://download.games.yahoo.com/games/clients/y/t21t0_x.cab
O16 - DPF: Video Poker - http://download.games.yahoo.com/games/clients/y/vpt0_x.cab
O16 - DPF: Yahoo! Backgammon - http://download.games.yahoo.com/games/clients/y/at1_x.cab
O16 - DPF: Yahoo! Bingo - http://download.games.yahoo.com/games/clients/y/xt0_x.cab
O16 - DPF: Yahoo! Blackjack - http://download.games.yahoo.com/games/clients/y/jt0_x.cab
O16 - DPF: Yahoo! Checkers - http://download.games.yahoo.com/games/clients/y/kt4_x.cab
O16 - DPF: Yahoo! Chess - http://download.games.yahoo.com/games/clients/y/ct2_x.cab
O16 - DPF: Yahoo! Dice - http://download.games.yahoo.com/games/clients/y/dct4_x.cab
O16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot8_x.cab
O16 - DPF: Yahoo! Dots - http://download.games.yahoo.com/games/clients/y/dtt1_x.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/games/clients/y/fltt3_x.cab
O16 - DPF: Yahoo! Gin - http://download.games.yahoo.com/games/clients/y/nt1_x.cab
O16 - DPF: Yahoo! Graffiti - http://download.games.yahoo.com/games/clients/y/grt5_x.cab
O16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/games/clients/y/ht1_x.cab
O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks12_x.cab
O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/games/clients/y/tt3_x.cab
O16 - DPF: Yahoo! MahJong - http://download.games.yahoo.com/games/clients/y/ot0_x.cab
O16 - DPF: Yahoo! MahJong Solitaire - http://download.games.yahoo.com/games/clients/y/mjst3_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cab
O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/games/clients/y/pyt1_x.cab
O16 - DPF: Yahoo! Spades - http://download.games.yahoo.com/games/clients/y/st2_x.cab
O16 - DPF: Yahoo! Towers 2.0 - http://download.games.yahoo.com/games/clients/y/ywt0_x.cab
O16 - DPF: Yahoo! Word Racer - http://download.games.yahoo.com/games/clients/y/wt1_x.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/zylom/activex/zylomloader.cab
O16 - DPF: {D54160C3-DB7B-4534-9B65-190EE4A9C7F7} (SproutLauncherCtrl Class) - http://download.games.yahoo.com/games/web_games/gamehouse/frenzy/SproutLauncher.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://download.games.yahoo.com/games/web_games/popcap/chuzzle/popcaploader_v6.cab
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

A: Solved: Over a Thousand Spyware, Says My Scanner

15 more replies
Answer Match 56.7%

Hi White Knights, Good Guys and Gals,

My PC was attacked, likely through Internet Explorer today, since I haven't downloaded anything. The following are is the list of Malware that XP Security Center has notified:

=email-worm.win32.netsky.q
=rootkit.win32.agent.pp
=backdoor.win32.kbot.al
=net-worm.win32.mytob.t
=net-worm.win32.dipnet.d
=virus.win32.hala.a
=trojan.downloader.js.multi.ca
=virus.win32.gpcode.ak

and Trojan Remover has identified
c:\windows\system32\vacinit.dll

and Mcafee
NTROSKRN... (rootkit trojan)

The program "Protection Systems" continues to pop up prompting me to buy along with random IExplorer bombs despite having removed it from programs. The system regularly freezes when I employ anti-malware programs.

I have attempted to use in normal and safe operating mode (Mcafee from safe command prompt)
=Mcafee VirusScan Enterprise (halts early in operation, Identifies NTROSKRN and 11 cookies)
=Stopzilla (Halts early in operation)
=Malwarebytes(fails to open even with changed name)
=Rooter Malware Finder (Eric_71) (operates results indeterminant)
=Trojan Remover (Runs. results indeterminant)

I am not in a good position to format the PC (in the wilderness).

Any advice what is preventing these malware programs from operating?

Thanks, and happy to repay the favor particularly if you like homebrew since PC wars arent my specialty!

Lookingtree

DDS (Ver_09-06-26.01) - NTFSx86
Run by Iamcomputer at 20:41:08.59 on Wed 07/15/2009... Read more

A:Unknown Attack Disables Malware Scanner/Antivirus/Spyware Scanner

Hi, lookingtree Welcome.Please read and follow all these instructions very carefully.Please download ComboFix from Here or Here to your Desktop.**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**If you are using Firefox, make sure that your download settings are as follows:Tools->Options->Main tabSet to "Always ask me where to Save the files".During the download, rename Combofix to Combo-Fix as follows:

It is important you rename Combofix during the download, but not after.Please do not rename Combofix to other names, but only to the one indicated.Close any open browsers.Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
-----------------------------------------------------------Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
-----------------------------------------------------------Close any open browsers. WARNING: Combofix will disconnect your machine from the Internet as soon as it startsPlease d... Read more

2 more replies
Answer Match 56.28%

Hi i have Norton Antivirus on my laptop im looking for a spyware scanner like spybot witch one is good and compatible with windows vista
thanks
 

A:Solved: A Good Free Spyware Scanner

8 more replies
Answer Match 56.28%

My stepson's computer, running W2K SP4, is infected with something that keeps popping up malware alerts and IE or firefox windows. Right now, for example, on my screen I have a security warning about Trojan.W32.Looksky, a dialog box asking me to click OK to start SecurePCCLeaner, an IE window offering to download Trojan&Spyware scanner, another IE window also offering securePCCLeaner, and a firefox tab offering a download called "privacyprotector". The computer is almost unusable. Any help is appreciated.
Thanks

Logfile of HijackThis v1.99.1
Scan saved at 8:15:48 PM, on 9/11/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\PcCtlCom.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\TmPfw.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\tmproxy.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\PcScnSrv.exe
C:\Program Files\X3watch\x3watch.exe
C:\Program Files\Trend Micro\Internet... Read more

A:Solved: Trojan&Spyware scanner - popups

11 more replies
Answer Match 52.08%

i need a real time spyware scanner for free. I also need a virus scanner (realtime) avast, avg, or antivir? Does anybody have suggestions?
 

A:real time spyware spyware scanner? (free)

16 more replies
Answer Match 47.88%

Groan, for months i've been burning military and news pictures off the net to a DVD, but when I tried to burn a new batch today something must have happened because not only did I get error messages, but now my DVD drive won't recognise the disk when its inserted, which means not only can i not burn any more, but i can't even access the thousand pics already on it, are they lost forever or are they still on it but invisible? (sniffle)
I thought that burnt stuff can never be deleted, accidentally or otherwise?

PS- The drive recognises other disks just fine, its just this particular disk that it snubs.
Any suggestions?

A:I can't see my thousand pics

What program did you use to burn this disk?Are you using the correct UDF format for this disk?http://homepage.ntlworld.com/allcam/cdformat.htmlLouis

9 more replies
Answer Match 47.46%

Check this out. I dont have direct cd software anymore but I still have this under my send to options.

The "send to" option, right click a file and you can send it somewhere. Under that I have send to cd drive e (burner) and also direct cd drive e (burner but its meant to be used with direct cd software and I dont have it on my system anymore).

Is there a way to remove this option? Maybe in the registry somehow?
 

A:A Picture is worth a thousand.........#2

16 more replies
Answer Match 47.46%

I got a grand and want to build a computer.

I want a 16g of ram. A terabyte hd. A pentium 5i. A dvd rw drive. I honest dont play video games but ill down load a emulator for xbox to play magic the gathering. So I really dont need to drop 450 on a graphic card.

What do u guy recommend
 

A:a thousand to build a computer

9 more replies
Answer Match 47.46%

Just bought an Asus N53S and literally the first thing I did was install Assassins Creed (from a real DVD and everything, not a download). When I restarted I was directed to the system recovery console which gave me an error message which I think is related to a video card driver. However, it could not fix the problem so I tried a system restore which also failed to remedy the problem. Now I'm out of options. It's a brand new machine and despite spending a small fortune I haven't been provided with a copy of Win7 which would allow me to format and do a fresh install.

So..... how do I fix this problem? How do I fix an issue which I think is related to the graphics card drivers if I cannot boot up into Windows? How do I fix a problem that the recovery console cannot fix and that reverting to an earlier restore point will not fix either? And how can I format if I don't have a copy of Win7?

A:You've probably heard this a thousand times before...

You should have a way of making a set of recovery disks that will let you restore to factory condition if you cannot otherwise fix the problem. Consult your documentation for how to do that.

8 more replies
Answer Match 47.46%

A week ago I got my laptop cleaned from ZeroAccess. I was messing aorund on the desktop and ran a scan with MBAM and it found over a thosand items. All of them were PUP.Optionals but I don't want this desktop to be infected. I don't use it or anything but yeah. Here's my MBAM log, it's pretty long.
 
Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org
Database version: v2013.12.24.07
Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
Owner :: OWNER-PC [administrator]
Protection: Enabled
12/24/2013 4:55:04 PM
MBAM-log-2013-12-24 (17-23-07).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 219777
Time elapsed: 25 minute(s), 58 second(s)
Memory Processes Detected: 4
C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe (PUP.Optional.Conduit.A) -> 1008 -> No action taken.
C:\Users\Owner\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe (PUP.Optional.DefaultTab.A) -> 832 -> No action taken.
C:\Users\Owner\AppData\Roaming\SearchProtect\bin\cltmng.exe (PUP.Optional.Conduit.A) -> 3104 -> No action taken.
C:\Users\Owner\AppData\Local\Smartbar\Application\QuickShare.exe (PUP.Optional.SmartBar.A) -> 3224 -> No action taken.
Memory Modules Detected: 35
C:\Users\Owner\AppData\Roaming\SearchProtect\bin\InternetExplorerModule.dll (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\Owner... Read more

A:Thousand of items found.

Run a quick scan.
 
First empty the temp files on this machine.
http://www.bleepingcomputer.com/download/tfc/
 
Open malwarebytes update and do a quick scan!
 
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is Checked (ticked) and click on Remove Selected
 
Post the new malwarebytes  log please.

22 more replies
Answer Match 47.46%

Hi there, I,ve just lost nearly four thousand pictures...

I thought I had duplication in my computer as I saw Pictures/My pictures and Pictures/My pictures, so I deleted the first one, and I couldn't stop it, the computer deleted all within 4 seconds. I tried to find them in the Trash, but there was only older stuff, about 300 pictures. I kept searching... and when I emptied the Trash, could see on the screen: it deleted more than 4 thousand pictures....
How can it be possible? Where are my pictures then?

In the last two weeks my windows 8 really made me unhappy, loosing the mouse, loosing the keyboard, loosing the internet, when I was doing my home work. The "know how" couldn't help me I was told by them to do factory settings, I,ve done it, took about 5 hours + 5 hours to make the "new" computer work....

Can be the problem, that I have renamed the Trash????? Is it worth to upload those pictures to the computer again? (As they are still in a memory stick )

Please talk to me in basic English, if it is possible, thank you
Other problem:
After that factory settings my computer is not able to import pictures from my Nokia C3... It stops after some pictures, asks and I click: skip all pictures with problems- but at the end there is no new picture has come over. Probably it skips all, as it has already uploaded them... but I didn't find. Until I get back the other thousends of pictures, I cant search also.
Can anyone help me???
Thanks
Judyt

A:I,ve lost four thousand pictures

You can try Recuva and see what it finds. Recuva - Undelete, Unerase, File and Disk Recovery - Free Download

17 more replies
Answer Match 47.04%

Hi, first time here,

I am running Windows 7 Home Premium. 32 and 64 bit. I have Norton security suite that comes with my Comcast subscription. I scan pretty frequently and I also use CCleaner which works great. I am not having any problems with my computer right now but I have in the past. Something not only got past Norton it also was able to disable Norton. I got it going again fairly quickly but my computer wasn't the same. I did a complete restore and it has been fine. For some reason I still feel like there is something going on in my computer which there may not be. I've noticed some files that looked suspiscious but I can never know for sure so I won't change anything. One time I noticed 3 extra users and I was sure I was infected until I found out Nvidia adds these for updating.
My question is that when I was looking at the files in my registry, I clicked on internet settings then zone and the list expanded to about a page and a half of files with names having to do with sex and porn. They all had the arrow to open a sub folder with on every one was www. I ran Norton and superspyware and a search. Nothing is detecting these files. Any suggestions?

Thanks,
Ron

A:spyware scanner

Hello,I will be helping you with your problems. Please be patient while I assist you.Some points for you to keep in mind while I am helping you to make things go easier and faster for both of us Please do NOT run, install or uninstall any programs, unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability. Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post. Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process. Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the Watch Topic Butt... Read more

28 more replies
Answer Match 47.04%

(win xp)
I'm looking for a spyware scanner similar to the OLD ad-aware, that just scans and does NOT keep running.
Which programs could I use?

with these properties:
-light program
-scan only
-free to use
 

A:spyware scanner?

6 more replies
Answer Match 47.04%

Hello. Browser (when it works) is constantly hijacked. Popups galore, IE and / or Firefox slower than the congress passing a funding bill. I ran combofix, and the log is posted below. If you can help, I'd sure appreciate it and thank the heavens!

ComboFix 08-06-16.2 - Owner 2008-06-16 18:42:33.1 - NTFSx86
Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Owner\Desktop\WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
* Created a new restore point
* Resident AV is active
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Program Files\MyWay
C:\WINDOWS\BMc3f61828.xml
C:\WINDOWS\cookies.ini
C:\WINDOWS\Fonts\acrsecB.fon
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\alxreqml.dll
C:\WINDOWS\system32\dlqioygg.exe
C:\WINDOWS\system32\dxiyblmv.dll
C:\WINDOWS\system32\ephijecl.ini
C:\WINDOWS\system32\idcnocie.dll
C:\WINDOWS\system32\iehqbcfu.exe
C:\WINDOWS\system32\jjubwwoh.exe
C:\WINDOWS\system32\jpxuidac.ini
C:\WINDOWS\system32\LUFhPqss.ini
C:\WINDOWS\system32\LUFhPqss.ini2
C:\WINDOWS\system32\lvibjadd.dll
C:\WINDOWS\system32\lyklfvgw.ini
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\ngocqctp.dll
C:\WINDOWS\system32\oegvpdqe.dll
C:\WINDOWS\system32\ookmrxvf.exe
C:\WINDOWS\system32\orlgmdcn.exe
C:\WINDOWS\system32\ostqwcax.exe
C:\WINDOWS\system32\pjofhivh.ini
C:\WINDOWS\system32\rohwscrv.exe
C:\WINDOWS\system32\ubfyfxxk.ini
C:\WINDOWS\system32\udggxucx.dll
C:... Read more

A:vungo, vango and a thousand variants

Also adding my HJT log below. Please help!!!! Thank you

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:22:03 PM, on 6/16/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ActivCard\acachsrv.exe
C:\Program Files\Common Files\ActivCard\acautoreg.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Digital Media Reader\shwicon2k.exe
C:\Program Files\... Read more

1 more replies
Answer Match 47.04%

We have about 3300 PCs running Windows 7 and need to change the local administrator account password when someone from the company leaves due to security policies we have. Is there any way to run a script or batch file to do this instead of having to physically touch each machine? It was easy to do with a batch file in Windows XP but it will not work in Windows 7.

Thanks

A:Administrator Password Change, few thousand PCs

Yep

Change Local Administrator Password thru GPO

1 more replies
Answer Match 46.62%

Is this a good program? And should it stay, or should I just get Spywareblastar, and Spy_bot S&D?

Thank You
 

A:Bazooka Spyware Scanner?

I had never heard of Bazooka before, but it looks nice. Spybot Search & Destroy detects a lot more spyware though, I wouldn't get rid of it for Bazooka.
 

3 more replies
Answer Match 46.62%

Greetings:I am somewhat new to this. I have always been able to solve the few problems I have with AdAware or Spybot. This time though, I am stumped. I installed HiJackThis and have looked through it to the best of my knowledge, but can't find anything. It seems like it all started when I accidently installed YourSiteBar. I have used their removel program but I still get popups. Here is my HiJack log. Any help would be most appreciated.Logfile of HijackThis v1.99.1Scan saved at 9:16:15 PM, on 10/26/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\RioMSC.exeC:\Program Files\Norton AntiVirus\SAVScan.exeC:\Program ... Read more

A:Help ... No Spyware Scanner Has Helped Me!

Sorry for the delay. If you still need help with your log please post a brand new HJT log as a reply to this topic and I will help you clean it up as necessary.

1 more replies
Answer Match 46.62%

i have done a bunch of cleaning on this computer for someone and have managed to get it back online... but just need someone to glance at the hjt for me.. thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 500 PM, on 2/15/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\Athan\Athan.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Common Files\AOL\1131078266\ee\aolsoftware.exe
c:\program files\common files\aol\1131078266\ee\services\antiSpywareApp\ver2_0_32_1\AOLSP Scheduler.exe
c:\program files\common files\aol\1131078266\ee\aolsoftware.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:... Read more

A:hjt log, keep on getting spyware scanner popup thanks

moving back up...
soproc.exe error on startup,,, and ie opens up with fake virus scanner...

1 more replies
Answer Match 46.62%

Has anyone used the online scanner at Spywareinfo.com?

here

I'm looking for an online scanner that can be truested (to compliment Antivirus.com)


Thanks

A:Online Spyware Scanner

Hi, Guy!

I haven't used the application, but I do trust x-block. I also don't think that Mike Healen would get involved in anything second-rate.

The reason that I haven't introduced the service here is that I think recommending it is akin to "giving a man a fish".

When folks download Ad-aware, or Spybot, or both, set the configurations and run their scans, they have now been taught to do that properly. They can do it over and over again, weekly, we hope, with the only "outside" support being updates.

Also, with Spybot Free set to immunize or Ad-aware 7.0, they get some actual protection.

A ounce of prevention is worth a pound of cure.

1 more replies
Answer Match 46.2%

At least that's the only viable explanation I can think of.

I spent a very long and tiring process fixing a shabby motherboard and I FINALLY got it all fixed when I went to install XP. It got up to the restart in BIOS options when it restarted and now goes nowhere. My bios messages will go up but I can't enter setup, it'll all just read a bios post message and then it'll go to a blank screen OR it will go to a screen with a single little "male" symbol. You know, the one that resembles that Prince symbol thing he had going on for a while.

So yeah, i'm absolutely ******* fed up and I'm just assuming, after I brought this damn thing in to a lame *** computer store and everything, it's got to be windows and not my hardware. What gives.

A:Windows Disc Wants Me Shatter It Into A Thousand Pieces

I can't help you but i think you will hear from one of the mods soon.

12 more replies
Answer Match 46.2%

INFORMATION SYSTEMS BREACHES

Microsoft today confirmed that thousands of Windows Live Hotmail account usernames and passwords had leaked to the Internet, but said the credentials were "likely" stolen in a phishing attack. The company denied that its Web-based e-mail service had been hacked and the account log-in information stolen because of some lapse on its part. ?

Microsoft did acknowledge that Hotmail accounts had been compromised. "Over the weekend Microsoft learned that several thousand Windows Live Hotmail customers' credentials were exposed on a third-party
due to a likely phishing scheme," [a Microsoft] spokeswoman [said]. ? According to Neowin.net, which first reported the Hotmail incident, more than 10,000 accounts had been compromised. However, Neowin said it had seen only a partial list -- accounts with usernames starting with "A" or "B" -- and suspected that the total could be much larger. [Date: 5 October 2009

More.......Microsoft confirms phishers stole 'several thousand' Hotmail passwords

A:Microsoft confirms phishers stole 'several thousand'...

  
Quote: Originally Posted by reghakr


The company denied that its Web-based e-mail service had been hacked and the account log-in information stolen because of some lapse on its part. …


If you think about it, it's not even possible to find the passwords of everyone's account starting from A to B. Because the database would not have passwords in cleartext form. They would be hashes of some sort. In order to find out someone's password from a database, you'd have to crack the hash.

Of course I am assuming that Microsoft stores credentials the correct way...

5 more replies
Answer Match 46.2%

Hi, I need help here. I have been searching on google and reading several articles trying to figure what's going on. Here is my situation.

I have a Sony laptop, model number is PCG-7142L. This is a Windows Vista Home Premium OEMAct system. Service tag is C6U0K0HG. Everytime I turned on the power, I can see the power LED light turned on (I can hear the system was running) and within 5 second, the light turned off (with a very tiny sound and then no any sound at all) and then in a second, the power LCD light turn on again. However, nothing showing on my screen. I mean nothing. not even showing the mouse arrow.

I have tried to hold F12 or F8 or "shift" Key and almost all keys on the keyboard but just nothing happening at all. I also tried to hook up another desktop monitor because I suspect the problem was my Sony Laptop screen was dead but still showing noting on that desktop monitor. I also tried to take off the battery and unplug the power for days and re-start my laptop, but nothing.

Here is probably my last hope before I throw my laptop to the wall. Can someone help me here.

A:Black screen with nothing, tried thousand ways on google

Hi and welcome to the forums.

Do you have your laptop plugged into the charger when you try to start it up?

50 more replies
Answer Match 46.2%

I was just browsing my download folder to drag a newly downloaded PDF (exam studying), then I just saw random .txt files numbered from like 1 to 99999. Each file is super detailed right down to everything I open and type, even back spaces and such. There are also more separate files that neatly contains every single ID, Password data I have ever typed. I don't know how there could possibly be a text file that compiles all of my ID and passwords of everything I ever used so neatly, is this keylogger or a function of my laptop? I was rather surprised but now I can check for any Password I need in case I forgot... but this is really dangerous?!?

It does say keylog at beginning of each text file... is someone keylogging me? I did not think I am getting keylogged even with all this but then I saw date modified does not match date created for some of the files... I never accessed this personally so does this mean someone else went into it? (oh and my parents/siblings would not be capable of doing such a thing).
Here is a picture, what do u think I should do? I will post more info if you guys think I am keylogged, sorry I have to go back to exam studying now. Thanks for ur time!

(i'd like to apologize for posting this almost identical thread twice in another section and here, wasn't sure where to post this!! sorry!)
 

A:Found A HUNDRED THOUSAND keylog files!! help!

6 more replies
Answer Match 46.2%

What's a good free spyware scanner that comes , already dowloaded with a certain amount of basic definitions already on it?. Kind of like what Avast does for antivirus.

The reason I ask is that I have a friend that can't get online with her NetZero dialup and I want to eliminate the problem being related to spyware. In other words, I want a scanner that doesn't need to be updated right anyway and just might find something.

By the way...could a virus or malware stop someone from connecting on a dialup connection? When I use the Netzero software it connects briefly to the internet but then the modem shuts down. I don't think it's a modem problem either because I queried the modem just fine and was actually able to connect with a connection I made myself from the new connection option in Windows 2000. However I could not get anything to come up on IE.

I also could not get online by using the Internet Connection Wizard. The one that connects you, using an 800 number. It also was cut off by the modem.
 

More replies
Answer Match 46.2%

I am wondering if there is any free (good) portable anti-spyware scanner because i want to make sure that my normal scanners are doing their job, and I don't feel like installing anything extra. I am using windows vista.
 

More replies
Answer Match 46.2%

IE pops up with "this page cannot be displayed" or just fake "you're computer may be infected" type messages... Then AVG pops up saying "threat detected"... When I run AVG or MalwareBytes, I get nothing... I just want to know how to make it stop
 

More replies
Answer Match 46.2%

Folks,I have been trying off and on for 2 weeks to clean this machine. It is my brother in laws computer and used by his kids to play many on-line games. It came to me with a BSOD which I recovered from by removing Antivirus XP malware using Malwarebytes Anti malware. I subsequently cleaned about 30 infections off the machine. I have scanned it with AVG Free, Malwarebites, Spybot S&D, Ad-Aware, House call and Bit defender (online). Still It has a browser highjacker in both Firefox and IE v8. I am getting repeated virus alerts from AVG concerning iastor.sys and one concerning kxdiypod.sys. I have tried to replace iastor.sys by renaming it and copying a new version. Every time I mess with it, I get another AVG alert and it replicates itself. Please help!DDS (Ver_10-03-17.01) - NTFSx86 Run by Michele at 17:54:04.18 on Sat 04/24/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.202 [GMT -4:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) Copyright Information 0============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exesvchost.exesvchost.exeC:\Program Files\AVG\... Read more

A:Exploit Rogue Spyware scanner

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

17 more replies
Answer Match 46.2%

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:09:42 AM, on 7/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Trend Micro\AntiVirus 2007\tavsvc.exe
C:\Program Files\Trend Micro\AntiVirus 2007\Components\tmproxy.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Trend Micro\AntiVirus 2007\tavui.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
C:\Program Files\Spyware Doctor\pctsTray.e... Read more

More replies
Answer Match 46.2%

What is the best and free spyware and virus scanners for Windows XP?
 

A:Best Free Virus and Spyware scanner?

10 more replies
Answer Match 46.2%

Hi, please help, been getting popups for free spyware scanners, did a bitdefender scan and it managed to move 5 virus infected files, but I still get popups from 'myprivacyguard' and 'Adwareremover2007'. Bitfender also detected and blocked Trojan.Agent.BHO.N, Trojan.Agent.ABSG, Trojan.Downloader.Agent.YNQ, Adware.Agent.NAV, Trojan.Downloader.Agent.YNU in the file http://www.thenetworkcom.com/fast-update/upd_cb.zip, how can this file be removed?This is my Trendmicro HijackThis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 17:44:44, on 28/10/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\rundll32.exeC:\WINDOWS\ehome\ehtray.exeC:\WINDOWS\AGRSMMSG.exeC:\WINDOWS\eHome\ehmsas.exeC:\WINDOWS\RTHDCPL.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Acer\Empowering Technology\eDataSecurit... Read more

A:Popups For Free Spyware Scanner

cl0ud,Welcome to the forum, you have multiple infections on this system. Lets do a few things.Download ComboFix from Here or Here to your Desktop.Double click combofix.exe and follow the prompts.When finished, it shall produce a log for you. Post the Combofix log and a HiJackthis log in your next replyNote: Do not mouseclick combofix's window while its running. That may cause it to stallOpen HijackThis > Do a System Scan Only, close your browser and all open windows including this one, the only program or window you should have open is HijackThis, check the following entries and click on Fix Checked.Some of these may be goneR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=...6Ojg5&lid=2R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =O2 - BHO: MSVPS System - {6EB10F79-5E53-4F76-B146-409EFCDCB957} - C:\WINDOWS\movctrlfqd.dll (file missing)O3 - Toolbar: The nssfrch - {DF0ACE0C-4A3F-4A1F-8676-BA16DEB23C70} - C:\WINDOWS\nssfrch.dllO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEO21 - SSODL: bxsbang - {7C244A7A-44CC-4104-8133-40430C7AF562} - C:\WINDOWS\bxsbang.dllO21 - SSODL: ocgrep - {598370DE-4746-4951-B4F6-85459895E243} - C:\WINDOWS\ocgrep.dll (file missing)We need to make sure all hidden files are showing :Click Start.Op... Read more

2 more replies
Answer Match 46.2%

Does anyone know of a good program, ( freeware ) for the above mentioned?
chuck
 

A:Spyware, Malware Scanner, Cleaner.

Hi chuck, there's a few choices to consider....

MalwareBytes https://www.malwarebytes.org/

SuperAntispyware: http://www.superantispyware.com/

AdwCleaner: http://www.bleepingcomputer.com/download/adwcleaner/
 

2 more replies
Answer Match 46.2%

I still can't get rid of that annoying raze spyware desktop.
The windows system I run is XP.
I tried running the ewido program following all the instructions on this site, and still I can't get rid of the raze spyware desktop.

The desktop is a red background with a flashing black pop-up.
If you have any new ideas or info on a new way to get rid of this, please e.m. me at my address.

Thanks for your time.
 

A:I tried the ewido scanner, still can't get rid of raze spyware

11 more replies
Answer Match 45.36%

I run Zone Alarm Internet Security Suite. Never had any problems. I also run Spyware guard. No problems there either. On a weekly basis I run, Spybot, Adaware, Hijack This, and A2 Squared. Once a month I do a Trend-Micro online scan. My computer stays clean.
Right now I can run Zone Alarm and/or Spyware Guard active protection and I can do anything I want on my computer, Internet, online games, emails, word processing, anything. As soon as I run any of the mentioned scanners, they make it haft way through and my computer shuts itself down. It powers itself off. The only thing that is different about the computer is that Dec. 26th I added a router to my desk top for my kids laptops and a USB hub 2.0. All works fine. This problem started on Dec. 27th. My computer will run fine night and day, but soon as I run a scanner, it powers down If this isn't where I should post this question please tell me where it is better suited Thanks
 

A:antivirus and spyware scanner shut down computer

6 more replies
Answer Match 45.36%

My Computer is:
Lenovo Thinkpad 6460-7EU
Windows XP Pro SP 2 (5.1.2600.2765)
All Updates and Optional Updates Applied
3GB RAM
83GB Free Space on HD (56%)
Intel Core 2 Duo T7300 @ 2.00 Ghz
Symantec Corporate Antivirus 10.0.0.359 (with updates through 22 Apr 2008)
Windows Defender (updated)
Microsoft Malicious Recovery Tool (March 2008)

I have a corporate laptop that had the following symptoms:
1. A link to Viruswebprotect.com kept poping up to initiate a scan
2. "error cleaner" kept popping up
3. "privacy protector" kept popping up
4. "Spyware&Malware Protection" kept popping up
5. A Task Tray icon for "trusted anti-vrus" was present

I found a previous post regarding these exact same symptoms, so instead of posting my initial findings I went ahead with the cleanup, but found even more than the original poster afterwards. The other viruses were Symantec Defined as "Trojan.Vundo" and "downloader.Zlon!gen.2".

After around 12 hours of cleaning I think I have repaired the problem fully and would like to post my HiJackThis Log for your expert opinion:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:36:26 AM, on 4/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\W... Read more

A:viruswwebprotect plus other popup spyware scanner stuff

Here is my combofix log:
ComboFix 08-04-22.5 - User1 2008-04-23 9:57:28.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2060 [GMT -4:00]
Running from: C:\Documents and Settings\User1\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\User1\g2mdlhlpx.exe
C:\WINDOWS\cookies.ini
C:\WINDOWS\rs.txt
C:\WINDOWS\rtqmekwg.exe
C:\WINDOWS\system32\khfCTmnL.dll
C:\WINDOWS\system32\LnmTCfhk.ini
C:\WINDOWS\system32\LnmTCfhk.ini2
C:\WINDOWS\system32\oacqcncs.ini
C:\WINDOWS\system32\qoMFurop.dll
C:\WINDOWS\system32\scncqcao.dll
C:\WINDOWS\system32\uxdfpmto.dll

.
((((((((((((((((((((((((( Files Created from 2008-03-23 to 2008-04-23 )))))))))))))))))))))))))))))))
.

2008-04-22 07:52 . 2008-04-22 07:52 21,361 --a------ C:\WINDOWS\system32\drivers\AegisP.sys
2008-04-22 07:52 . 2008-04-22 07:52 21,361 --a------ C:\WINDOWS\AegisP.sys
2008-04-22 07:52 . 2008-04-22 07:52 13,984 --a------ C:\WINDOWS\AegisP.inf
2008-04-22 07:52 . 2008-04-22 07:52 10,640 --a------ C:\WINDOWS\AegisP.cat
2008-04-22 07:49 . 2008-04-22 07:49 <DIR> d-------- C:\Documents and Settings\NetworkService\Application Data\Intel
2008-04-22 07:49 . 2008-04-22 07:49 <DIR> d-------- C:\Documents and Settings\LocalService\Application Data\Intel
2008-04-22 07:49 . 2008-04-22 07:49 <DIR> d... Read more

1 more replies
Answer Match 45.36%

I've recently acquired the false Zinaps malware "remover," and i'm trying to get rid of it. I've reasd that its really recent, so my previous scanners probably will not do the job. Could I get some help?

The lower task bar "notifies" me constantly with a yellow triangle with an exclamation mark. It reads "Windows has detected spyware infection. It is recommended to use special antispyware tools to prevent data loss. Windows will now download and install the most up-to-date antispyware for you."

By the way, this is Windows XP

Also, my computer's been excruciatingly slow recently (even before Zinaps), so if you could help me take care of those too?
 

A:Zinaps rogue spyware scanner 7.0 removal

Here's the HiJackThis log

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 3:21:54 PM, on 6/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\iaantmon.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
C:\WINDOWS\system32\vmnat.exe
C:\Program Files\VMware\VMware Player\vmware-authd.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PRISMSVR.EXE
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\VMware\VMware Player\hqtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\P... Read more

1 more replies
Answer Match 45.36%

Hello, I have a problem with some spyware that got installed by my younger sibling on the family desktop. I was able to get rid of some of it but i still have the adware icon in the taskbar popping up.
The files that were a problem were part of the netproject spyware...i think i was able to get rid of the files that were being active which were the scit.exe and scm.exe files. The icon that's left in the taskbar is pretty much neutral right now cuz i disabled and deleted IE, but it's still annoying and im pretty sure there's still something in it.

Thanks in advance and i really appreciate the help.
Here is the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:32:49 PM, on 2/16/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Dell Photo AIO Printer 942\dlbubmgr.exe
C:\Program Files\Dell Photo AIO Printer 942\dlbubmon.exe
C:\Program Files\Lexmark 5400 Series\lxctmon.exe
C:\Program Files\Lexmark 5400 Series\ezprint.exe
C:\Program Files\Commo... Read more

A:Please Help...spyware scanner trojan is slowing my computer

Welcome to TSG

Please download SmitfraudFix
to your Desktop.
Double-click SmitfraudFix.exe
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm
 

1 more replies
Answer Match 45.36%

Hello,
I am having a problem within my Window7 OS. I removed a "Java solace k" virus in 06/2010 but am still having issues with redirects from my browser and fake security scanners telling me of a security breach within my system. Any assitance would be greatly appreciated.

buhdabless

A:malware/spyware and fake security scanner

Hello please try this approach.Reboot into Safe Mode with Networking How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode with Networking using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. >>>> Download this file and doubleclick on it to run it. Allow the information to be merged with the registry.RKill....Download and Run RKillPlease download RKill by Grinler from one of the 4 links below and save it to your desktop.

Link 1
Link 2
Link 3
Link 4

Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
If nothing happens or if the tool does not run, please let me know in your next replyDo not reboot your computer after running rkill as the malware pro... Read more

5 more replies
Answer Match 45.36%

I recieved a threat alert on my AVG 8.0 that I had something called Exploit Rogue Spyware Scanner type 621. I ran the AVG Scan and it showed nothing. I ran Adaware and all it found were some tracking cookies. I started getting redirected when browsing with internet explorer and I down loaded Mozilla because the pop ups and redirects became so bad I couldn't use My Internet Explorer to get to any place for help... This is My HighJackThis Log.... I do not know why all My AVG Scans come back that everything is fine. Please can You Help me... I have No Idea What this is.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:26:49 PM, on 3/21/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpe... Read more

More replies
Answer Match 45.36%

Hi, I have pro system scanner and spyware remover 2009 on my system. I have run Super anti spyware and Malwarebyte's anti malware. They did remove a trojan at one point but the infection continues. I'm on a pc with xp pro sp2. Please help.
Thank You sotasteve

A:pro system scanner and spyware remover 2009

Let's run another pass with MBAM, update itPlease download ATF Cleaner by Atribune & save it to your desktop.Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox browser click Firefox at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser click Opera at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".Please download Malwarebytes Anti-Malware (v1.34) and save it to your desktop.alternate download link 1alternate download link 2If you have a previous version of MBAM, remove it via Add/Remove Programs and download a fresh copy.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will... Read more

9 more replies
Answer Match 45.36%

My son downloaded some videos on how to fix his car from You Tube and since then my laptop has been getting worse and worse. I ran Sammsoft ARO and Malware. I have since taken both off my computer thinking that might help. I have AVG, but it comes up with nothing when I scan. I keep getting the threat alert scaneriche.cz.cc/scan/dim_sp2/free as the file name and Exploit Rogue Spyware Scanner (type 140) as the Threat name.
I found a post about rkill on a random site and downloaded rkill, but every time I try to run it my computer goes to blue screen with a loooong message and then reboots automatically.
When I try to use the internet, I am directed to different sites that I don't want.
Help!!

A:Exploit rogue Spyware Scanner (type 140)

Hello kathym and welcome to BC.

We're so sorry about the delay, do you still need help?

4 more replies
Answer Match 45.36%

Referred here from: http://www.bleepingcomputer.com/forums/t/206430/pro-system-scanner-and-spyware-remover-2009/ ~ OBI was referred to this forum by DaChew from the Am I Infected forum. I'm running windows xp pro sp2. The pro system scanner and spyware remover 2009 are popping up frequently and being very invasive, sometimes locking my computer. Here are the required logs. Thank you for your help. DDS (Ver_09-02-01.01) - NTFSx86 Run by Steve at 15:04:38.03 on Fri 02/27/2009Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_12Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1918.1457 [GMT -5:00]============== Running Processes ===============C:\WINDOWS.0\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS.0\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS.0\system32\spoolsv.exeC:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS.0\system32\svchost.exe -k imgsvcC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\Program Files\Webroot\Washer\WasherSvc.exeC:\WINDOWS.0\system32\wscntfy.exeC:\WINDOWS.0\system32\userinit.exeC:\WINDOWS.0\Explorer.EXEC:\WINDOWS.0\RTHDCPL.EXEC:\Program Files\ImagePrint\spool\mux\muxd.exeC:\Program Files\HP\HP Software Update\HPWuSchd2.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\WINDOWS.0\System32\spool\DRIVERS\W32X86\3\E_S5I0O2.EXEC:\Program Files\DNA\btdna.exeC:\WINDOWS.0\system32\ctfmon.exeC:\Program Files\HP\Digital... Read more

A:pro system scanner and spyware remover 2009

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for p... Read more

2 more replies
Answer Match 45.36%

I'm infected with a Fake spyware scanner by the name of Zinaps 7. Can you help me get rid of it?

Thanks.
 

A:Help me delete Zinaps 7 rogue spyware scanner

Welcome to TSG

Please click Here to download HijackThis to your desktop.

Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.

It will be installed by default here: C:\Program Files\Trend Micro\HijackThis

A shortcut to the application will also be placed on your Desktop.

The program will open automatically after installation.

You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.

Close all other windows except HijackThis.

Click on "Do a system scan and save logfile" When the log pops up in Notepad, copy and paste that file back here.

Do NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.
 

1 more replies
Answer Match 45.36%

I am looking for a program that I can install on a centralized server and run scans from single client machines. I am not aware of anything that will let me do this. I have about 300 machines and need something besides installing on 300 machines. I would like to hear all suggestions on ways to handle this task.
 

A:Spyware scanner that runs from centralized location

6 more replies
Answer Match 45.36%

alright so out of no where today my computer is infected with the "you need to download this program to protect your computer from viruses, spyware, etc." crap.

i have been working at it for the past hour and cant seem to find out why it wont let me run any sort of removal programs.

i went into my registry deleted the the files there, deleted all the temp files, and it still wont budge.

i need some help here, im researching into it, but any help here is definatley appreciated.

-chris

extra information :

backdoor.win32.kbot.al - keeps popping up and others like it

A:every sort of spyware scanner refuses to open!

Try scanning with this:http://www.free-av.com/en/products/12/avir...cue_system.html

16 more replies
Answer Match 45.36%

About a month ago my computer (Windows XP Professional SP3) was attacked by some malware (Security Suite 2011 or something like that) that locked all functions/programs and told me that any program I tried to open was infected with a virus. I thought I finally got rid of by running MBAM (in safe mode). It found some trojans, etc., removed them and I thought that was that. Not exactly.

Since then, I've been getting the "Generic Host Process for Win32 Services has encountered a problem and needs to close" error with increased frequency. Now, the following happens w/in 30-60 minutes of a fresh reboot. I first get the error, then my toolbars basically "blink"; I then lose internet connection capability, then my system volume goes, and finally the entire desktop and all programs lock up and I have to reboot. Sometimes I also get a svchost.exe error window that some memory cant be read. That svchost.exe error also posts in the error log of the Generic Host Process error. Additionally, I have no ability to download Windows updates (even when computer is not in Generic Host Process error mode and whether through IE or Firefox) and programs like Adobe are acting all crazy.

I constantly scan with MBAM, Spybot, Superantispyware and Webroot and everything comes back clean every time. My only guess is that the malware wasnt completely cleaned or that in the cleaning process my registry got all screwed up. PLEASED HELP!

Thanks in advance

More replies
Answer Match 45.36%

My nephew used this older laptop for an hour last week and when I did a Superspyware scan last night it showed that there were over 3 thousand Trojans on this computer. Now its almost 5000 so theyre obviously replicating. I always clean all my computers on a regular basis and he got these from a gaming site in that hour timeframe. I have Avast and Malawarebytes (paid) running all the time and I no longer do updates (dumb, I know) since the last time I did it destabilized my computer and I had to do a system restore to get it to perform properly. Anyway, when the Superspyware scan was done I attempted to let the program get rid of them (hit next), got the blue screen of death and a memory dump. The computer shut down on its own and I restarted it again with no problem. I ran my Avast and it showed nothing. I ran Malawarebytes and again showed nothing. Did a google search on the Trojans and got info from Microsoft site on the subject and was directed to download their free onboard anti-virus Microsoft Security Essentials. Did a scan with that and got no hits either. The only program that found them was the SuperAntiSpyware program. From what I understand trying to get rid of these Trojans is like trying to close a door while someone on the other side is trying to push it open. Also, doing a backup of my files wont help because Ill simply take the Trojans with me and re-infect my computer and infect my external hard drive. Anyone have a solution to get rid of this proble... Read more

More replies
Answer Match 45.36%

I have bought an Epson Perfection 1200S scanner, second hand. I hoped to plug it into the USB of my PC but only after buying it did I see that the 1200U model is for USB and the handbook for this 1200S model says that unless my PC has an SCSI board, I need to install one. The scanner came with an interface board but I am not confident about opening my PC to install it.

The scanner also came with a Microtech USB-SCSI-DB25B, which is not part of the Epson package but I guess is an extra that the seller threw in. It has a USB prong on one end that could go into my PC, and the other end would fit the cable that attaches to the scanner.

Can I install the scanner without using the SCSI board?
 

A:Solved: Can my SCSI scanner run as a USB scanner?

From the looks of it the Microtech USB-SCSI-DB25B is a usb to scsi converter so you should be able to plug it into the USB port and have it work. Seems like it should be Microtech USB-SCSI-DB25B to SCSI cable to scanner.

While Microtech USB-SCSI-DB25B did not give me too many things to look up... maybe you can provide a picture of this unit to verify....

either that or verify its something like this -

http://www.ramelectronics.net/html/usbxchange.htm
 

2 more replies
Answer Match 44.94%

Hi, today I decided to try ZoneAlarm's free firewall. Before I could download it, the website strongly recommended I run they're "free" online spyware scanner.
I did so, and this is what it spit out:
Blackbox - Keystroke Logger

GUID - {0863A990-95FD-11D1-B777-00001C1AD1F8}

File Name - C:\Program Files\Tecnomatix\Common\DWSBC36.OCX

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{0863A990-95FD-11D1-B777-00001C1AD1F8}

GUID - {3BD2C94F-049E-11D1-B66A-00001C1AD1F8}

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{3BD2C94F-049E-11D1-B66A-00001C1AD1F8}

GUID - {5B238A07-94F7-11D1-B776-00001C1AD1F8}

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{5B238A07-94F7-11D1-B776-00001C1AD1F8}

GUID - {679C8412-93B8-11D1-B773-00001C1AD1F8}

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{679C8412-93B8-11D1-B773-00001C1AD1F8}

ProgID - Dwsbc36.Subclass.6

GUID - {7F5E3525-F816-11D0-B64C-00001C1AD1F8}

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{7F5E3525-F816-11D0-B64C-00001C1AD1F8}

Desaware Spyworks - Hacker Tool

GUID - {2C704DBB-9C46-11D1-B784-00001C1AD1F8}

File Name - C:\Program Files\Tecnomatix\Common\DWSHK36.OCX

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{2C704DBB-9C46-11D1-B784-00001C1AD1F8}

GUID - {2C704DBC-9C46-11D1-B784-00001C1AD1F8}

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{2C704DBC-9C46-11D1-B784-00001C1AD1F8}

GUID - {2C704DBD-9C46-11D1-B784-00001C1AD1F8}

RegistryKey - HKEY_CLASSES_ROOT\CLSID\{2C704DBD-9C46-11D1-B784-00001C1AD1F8}

ProgID - dwshk36.WinHook.6

GUID - {389B19B9-... Read more

More replies
Answer Match 44.94%

Hello, i suspect this all happened a few days ago when a friend attempted cracking a software program for me. Which he did do, but I see I am paying for it. The day it was cracked AVG detected a trojan downloader, I don't remember the name since i dismissed it.(Had gotten them before with no problem.) But I still ran avg scans in normal and safe mode and deleted all files it showed as a threat. About 4 days later after no problem my computer started acting sluggish all of a sudden, the next day AVG detected a new threat "Exploit Spyware Scanner" through the web alert I believe it was and told me the infected file and process was IEXPLORE.EXE, which was odd since I had deleted internet explorer a long time ago. I finally found it in program files and attempted to delete it but it wouldnt let me. The files I was able to delete from the IEXPLORE.EXE folder would come back the second I deleted them so I gave up and started looking for help. Around this time I started getting popups mostly spyware/adware removal related while firefox was inactive. The site I went to suggested running SuperAntiSpyware removal program, so I did. Out of 50 minutes of scanning it has found these problems:
Adware.Vundo/Variant-PrintDlgExW 9 files
Adware.Vundo/Variant 2 files
Trojan.Downloader-NewJuan/VM 2 files
Adware.Hotbar/ShopperReports(low risk) 24 files
Adware.Zango/Shopping Report 137 files
Adware.Vundo Vairant 7 files
Trojan.Vundo-Variant/NextGen-Six 4 files
Trojan Vundo Variant... Read more

A:Exploit Spyware Scanner/Vundo & Trojan infection

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. Please download Trend Micro - HijackThis. Do a new scan with Trend Micro - HijackThis and post it in your next reply. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until instructed to do so! Let me know if any of the links do not work or if any of the tools do not work. Tell me about problems or symptoms that occur during the fix. Do not run any other programs or open any other windows while doing a fix. Ask any questions that you ... Read more

2 more replies
Answer Match 44.52%

DDS does work on Vista 64bit so i have to use Hijackthis. Anyways AVG detected after I clicked a link by mistake while googling. Avg hasn't detected it before this happened and hasn't since.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:53:54 PM, on 3/19/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files (x86)\AVG\AVG8\avgtray.exe
C:\Program Files (x86)\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cnnb
R1 - HKLM\Software\Micr... Read more

A:AVG just detected: exploit rogue spyware scanner (type 621). Vista 64 bit

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please start a new thread in our Virus/Trojan/Spyware forum along with the required logs

1 more replies
Answer Match 44.52%

Have tried to delete this but have been unable to. Tried to delete with change or remove programs, and through searching files. have run many spyware scanners, have got norton antivirus, adaware, spy doctor, run house call and a few others. none have got rid of it.Popup message coming up at bottom right hand side of screen, blinks between a cross and question mark when the message is not there. Message reads 'System Alert - System has detected a number of active spyware applications that may impact on the performance of your computer . Click the icon to get rid of unwanted spyware by downloading an up-to-date antispyware solution.'Logfile of HijackThis v1.99.1Scan saved at 8:02:58 PM, on 6/14/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC... Read more

A:Annoying Safety Alert - Sends Me To Spycrush.com (spyware Scanner)

Welcome to the BleepingComputer HijackThis Logs and Analysis forum adar Download SmitfraudFix (by S!Ri), to your desktop.Double click on Smitfraudfix.cmdSelect option 1 ? Search, by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).Please copy and paste the content of that report into your next reply.*IMPORTANT* Do NOT run any other options until you are asked to do so!***************************Please download Combofix and save to your desktop:http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exeNote: It is important that it is saved directly to your desktop Close any open browsers. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Also post a new Hijackthis log please.

2 more replies
Answer Match 44.1%

I have been battling trying to fix my computer for the past four days. It started with my computer just restarting and then a blue screen would come up and it would automatically restart. After I would re boot I started to get these things popping up at the bottom of the screen saying my computer was infected and total security was start running itself. I didn't buy it and quickly began to search the web and see what it actually was. Sure enough it was a virus so I came to this website to see what I needed to do. I downloaded that Malware thing and it would load. I tried to rename it didn't work. oh yeah I also tried to do a system restore and it will not let me it is locked saying call my administrator. When I am regular mode I try to press cont alt del and the task manager doesn't pop up. It only allows the task manager to come up on safe mode under administrator. I have downloaded plenty of antivirus scanners. My mcafee isn't working, tried norton not working, pc tools, spyhunter. Some will actually load and scan and when it is like 75% done scanning it just disappears. I've deleted some of those long numbers like 12141123(stuff like that) under system 32 and now I am not getting total security to pop up but antivirus pro 2010 and microsoft phising... I have tried manually deleting things but that is too confusing and quite frankly I don't want to delete something that doesn't need to be. I hope someone can help me. I tried to avoid doing this, but seems like this is my la... Read more

A:Malware/Spyware/ EVERYTHING Virus.. Scanner doesn't complete the scan... Just disappears

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No inp... Read more

14 more replies
Answer Match 44.1%

Hi everyone!

Trying to help a friend out with his laptop and my meagre knowledge has fallen flat so have come to the forum to ask for help!

Can anyone tell me what the best "Free" Open Source downloads are to detect and destroy/remove Trojans/Virus's/Worms/Syware etc? As this would be of great help to not only myself and my immediate friend but, by word of mouth, a larger safer community.

Many thanks in advance for all those that can Help!

A:What's the best "Free" Scanner/Removal Tools for Trojans/Virus's/Worms/Spyware etc?

Hello.I have found this links a few hours ago while trying to solve some silly problems. I find them rather comprehensive and think it'll suit what you are looking for, though they are from the same web.This link shows you your choices using free software available.http://www.geekstogo.com/forum/Free-Antivi...ftware-t38.htmlSome tips from the same web:http://www.geekstogo.com/forum/index.php?a...;page=How_did_I

5 more replies
Answer Match 40.74%

I have a Vista home premium Thirty Two bit on a HP DV Six Thousand laptop.
A few days ago, I have no idea how, but the scroll lock has been turned on. This is also the num lock key. so now my down and right arrows don't work and neither do my number keys, except numbers 6 and 5. Please help. The signs that are doubled up with the number keys don't work either since the num ock is on. This is so frustrating. How can I turn this scroll lock / num lock key off?
Thanks in advance.

A:Unlock Scroll lock / Num lock keys on HP DV 6 Thousand

Welcome
How to Activate the Scroll Lock on an HP Pavilion DV6000 Laptop | eHow.com

1 more replies
Answer Match 40.74%

I'm running Windows 7 and a few months back had to remove Snap.do and some other unwanted programs.  I managed to get them off, I beleive.  I'm not sure, but I beleive I had to delete some folders to get them off fully. Subsequent Superantispyware runs did not report any unwanted programs.
This morning Avast alerted me Snap.do was back.  I opened a browser and confirmed the home page was hijacked.  Avast said it could remove it for me and when I looked, the home page was back and Snap.do wasn't on my list of programs in control panel>prorams and features.
I ran malware bytes and nothing too bad was found.  I ran Superantispyware and it reported regcleaner pro, Advanced Sysrem Protector and AppsHat Mobile Apps were installed.  I let the Super antispyware try to remove them and also cleaned out some tracking cookies.  I cehcked programs and the 3 weren't there.  Re-running Super antispyware however keeps reporting they're in my system.
Any ideas?  Was my original removal not successful?  Can these apps hide?

A:spyware scanner found unwanted programs not listed in programs and features

Hello Splungee, this one is a bit tricky.Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

5 more replies
Answer Match 40.74%

I'm running Windows 7 and a few months back had to remove Snap.do and some other unwanted programs.  I managed to get them off, I beleive.  I'm not sure, but I beleive I had to delete some folders to get them off fully. Subsequent Superantispyware runs did not report any unwanted programs.
This morning Avast alerted me Snap.do was back.  I opened a browser and confirmed the home page was hijacked.  Avast said it could remove it for me and when I looked, the home page was back and Snap.do wasn't on my list of programs in control panel>prorams and features.
I ran malware bytes and nothing too bad was found.  I ran Superantispyware and it reported regcleaner pro, Advanced Sysrem Protector and AppsHat Mobile Apps were installed.  I let the Super antispyware try to remove them and also cleaned out some tracking cookies.  I cehcked programs and the 3 weren't there.  Re-running Super antispyware however keeps reporting they're in my system.
 
Boopme kindly walked me through the DDS process and I'm posting the logs
I did post on another help site before knowing the rule of no posting elsewhere.  I closed that thread, so please do not shut this down.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17126
Run by Valued Customer at 20:40:49 on 2014-06-27
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8147.5962 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131... Read more

A:spyware scanner found unwanted programs not listed in programs and features II

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/539247 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

10 more replies
Answer Match 40.74%

Hello, I was sent here from the Am I Infected Forum by garmanma. Topic referenced is here: http://www.bleepingcomputer.com/forums/t/260361/requesting-virus-help-malware-greenav-and-rootkit-etc/ ~ OBPrior to posting in that forum. I tried to run MBAM, Spybot, Spyunter. The programs would not run at all, I would get an error stating I didn't have appropriate permissions. I downloaded the DDS.scr file and tried to execute a scan. The scan screen popped open for about one second and closed....every program that I try to run will either not run at all, or if it does run, it will close a few seconds into the scan then shut down. If I try to run it again, I'll get an error saying I don't have permission to run that file.I have tried online scans from Bitdefender, Microsoft's OneCare, and one more (forgot the name)...but every online scan shuts down the entire browser. Also, on occasion I get a fake page saying that the webpage I requested has been blocked due to my infections, and links to me to a page regarding GreenAV. I could not run most of the tools in the preparation guide, even after renaming them. However, in the other forum I was able to run a couple of scans before the programs shut down. I was requested to start a new topic here and post the logs that I have. Thanks in advance:I was instructed to download "peek.bat" and run that program and also RootRepeal. The results from both are listed below:Peek.bat Log:Volume in drive C is SQ004214P01Volume Serial Number i... Read more

A:Rootkit and Spyware Problems: Antispyware/Antivirus/Rootkit Scanner programs all shut down when executed...

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

3 more replies
Answer Match 40.32%

I'm trying to solve a "slow computer" problem for a friend...The stand-alone version of AVG Anti-Spyware runs slowly on his machine and does not not scan smoothly, stalling a bit every 5 to 15 seconds. This happens even when running in safe mode. Occasionally the scanner will freeze right after I begin scanning, forcing me to do a cold reboot (ctrl-alt-dlt doesn't work).I have run other virus checkers and the system - 1.4 GHZ Gateway desktop, XP Pro SP2 - looks clean, but seems like it should run a bit faster than it is. Nothing unusual is running on startup or via processes, at least nothing I can see in msconfig. A recent "HijackThis" logfile doesn't appear to show anything malevolent.Another weird symtptom is that the Windows "chimes" sound is sometimes cut off when the PC boots up.What could be causing this? Thanks...Moderator Edit: Moved topic to more appropriate forum. ~ Animal

A:Slow Pc... Anti-spyware Scanner Runs Slow And Stalls

If you are sure no malware issues Please follow these steps : ? Defrag your system. Disk fragmentation slows the overall performance of your system. When files are fragmented, the computer must search the hard disk when a file is opened. Disk Defragmenter consolidates fragmented files and folders on the hard disk so that each occupies a single space on the disk. This speeds up reading and writing to the disk. Read "The Importance of Disk Defragmentation" for instructions.? Check for disk errors by running CHKDSK. CHKDSK can be run from the Recovery Console, the command prompt or through the Windows GUI.To run chkdsk from the Win XP GUI see these instructions.To run chkdsk from the command prompt see these instructions.To run chkdsk from the Recovery Console see these instructions.The problem with running CHKDSK from Win XP is that it will not check files that are being used by Windows. Using chkdsk in the Recovery Console with the /r switch is a way to resolve this.? Check for damaged, altered or missing critical system files by running the System File Checker. If SFC discovers that a protected file has been damaged, altered or missing, it restores the correct version of the file from the cache folder. You must be logged on as an administrator or as a member of the Administrators group to run sfc and it may ask you to insert your XP Installation CD so have it available.? Clean up your hard drive by removing unused programs and transferring old data, pictures, music ... Read more

4 more replies
Answer Match 39.9%

Recently from http://www.bleepingcomputer.com/forums/t/494727/superantispyware-or-malwarebytes/. Please take the poll and post suggestions for the poll here. 
 

A:Best Anti-Spyware/Anti-Malware/On-Demand Scanner

Hitman Pro to check scan, but needs paying for removal.   Comodo Cleaning Essentials which comes free with Comodo Internet Security for removal.

38 more replies
Answer Match 39.06%

I am looking at purchaseing a new scanner. I have several thousand slides and negatives that I am needing to scan and want to find the best equipment for this at a decent price. I've seen some people say the Plustek 7500i SE is a good dedicated scanner. Even the Plustek 7200i SE has a good rating. Is there any that are better or that you might recommend instead. I'm really struggling on what direction to go. A dedicated film scanner is suppose to be better quality but at a much higher price. I've looked up flatbed scanners for under $500 and the CanoScan 8800F seems to have the highest rating and good reviews.
If anyone could point me towards one they like or recommend I would greatly appricaite it.
Like I said I'm getting to the point where I'm getting confused on which direction I should go.
Thank you for your help.
Senna
 

A:Dedicated film, slide scanner - is the Plustek 7500i SE a good scanner?

6 more replies
Answer Match 39.06%

I have a Cannon PIXMA MP760 printer/scanner, the Windows Fax & Scan does not recognise this as a scanner
There is no help or support from the application
Is this a driver problem, if so how and where can you get the correct drivers to fix
Can anyone help

A:Cannon PIXMA MP760 printer/scanner not recognised as a scanner

If there is no Windows 8 driver, try with the one for Windows 7 http://www.usa.canon.com/cusa/support/consumer/printers_multifunction/pixma_mp_series/pixma_mp760#DriversAndSoftware

3 more replies
Answer Match 39.06%

please note this correction to my previous post the scanner is a VISIONEER 9020 NOT HP
Thank oyu edjal
 

More replies
Answer Match 38.64%

Need an expert's diagnosis guys:

I have been having a serious problem with a spyware/hijacker which has consistantly reinstalled itself after rebooting the system. When Windows XP boots up, there is a very long delay (appoximately 1 minute) while XP attempts "Loading Personal Settings". Once windows starts, it seems as though it begins downloading a pleothora of various Spyware/Adware programs onto my computer. These programs are almost entirely different every time, and range from "A better internet" to "eZula" to goldencasino.com. And all this is without me accessing Internet Explorer. I have tried many different strategies to remove the spyware, such as rebooting in safe mode, disableing system restore, using registry editing utilities such as HijackThis, and removeing .html extinsions from folder options. Even though they are removed, once windows is rebooted a whole new set of Spyware applications is installed onto my system. The one thing that I am sure of right now is that, as I stated earlier, once I log into windows there is an enormous delay for the 1st minute before the startup sounds play and the normal system tray icons begin to load. Please assist.

Sincerely,
Shaun W. Donaldson
P.S. My Pest Control logifle of malicious infections shows 500 new entries in the past 3 hours. I could also have included my most recent HijackThis log with post. However, that would be pointless since, apparently, new registries are written for... Read more

A:[Solved] HIJACKER/SPYWARE: Downloading new Spyware onto system at Startup!

11 more replies
Answer Match 38.64%

My computer has a serious spyware problem.
It mostly seems to be centre around I.E. (3 annoying pop-ups on every page, strange seach bar beneath the top panel, etc.) but I do occasionaly get icons appearing on the desktop. can anyone help? I've included a hijack this log in case you need it.
thanks a lot
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-gb\msnappau.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\sys... Read more

A:Solved: spyware even after running several anti-spyware programs repeatedly

10 more replies
Answer Match 38.64%

I am using XP cant use both devices together. device mgr recognizes just one of them. Get device mgr. code 38 "windows cant load the device driver for this hardware because a previous instance of the device driver is still in memory". The windows trouble shooter doesn' help solve this particular problem. I can load either scanner singularly and it does not give error code 38 and works fine unless I try to load both scanners. I have loaded latest xp drivers for each of these USB scanners. Does any have a fix for this problem. Your help would be appreciated.
Thanks edjal
 

More replies
Answer Match 38.64%

Hi Anyone

I currently use a CanoScan LiDE 60 (60 GBP). Mainly I scan music (300dpi) from books or sheets and then display it on computer screen, half a sheet at a time. But the scans are sometimes not so good i.e. jagged stave lines and hard to read text. This is taken from a flat A4 sheet with good quality clear print. Would the quality of the scan be improved or affected by going to the Canon DR 1210C document scanner (260 GBP)? Or is the higher price only reflecting the document feeder/opening lid/larger flatbed etc. on these type of devices and not the scan quality?

Any knowledgable thoughts on this?

Thanks
 

A:Solved: Solved: Cheap home scanner or buisness?

Welcome to TSG!

I've just checked on Canon's site, this scanner has a 1200 x 2400 dpi resolution, which is a lot more than enough to make clear image of a clearly printed A4 sheet. Why, I've made great copies with a 100 x 100 dpi scanner. I suspect the color settings are wrong. If you scan in black & white mode, that can be really ugly. Try with grayscale or color mode.
 

3 more replies
Answer Match 38.22%

Hey guys

Alrighty I think my latpop is hit with a really nasty trojan called virtumonde.generic which i think is the combo of generic.dx which mcAfee is detecting as and virtumonde which spybot is coming up as. I've used SuperAntispyware and found winfixed and prob fixed it. I also used Vundofixer but seems like spybot is still detecting virtumonde.generic and won't delete even after reboots. The generic trojan is quite annoying. Cannot delete the windows update and help&support icon on the desktop as it comes back again and again. Also all these windows error keep popping up randomly like critical error could occur and memory stuff.

Also AdClicker-FX has been detected as well by mcAfee but cannot delete it. soo useless.
Another trojan i think is on there is called downloaderConHooker, something like that

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:02:56 PM, on 30/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDO... Read more

A:Solved: another new spyware after assumption trojan and spyware cleared

11 more replies
Answer Match 38.22%

Ok. When i turned the computer on today i saw a flashing icon in the system tray saying "Virus Alert!". When i click the popup it opens up Spyware Quake and does a scan. I closed it as soon as it popped up.

I googled "Spyware Quake" and found out that it was a spyware that tricks people into buying their products. So i googled how to remove it and found to use spyware doctor which did get rid of the pop up in the system tray.

But my computer still has spyware around ever since i got that spyware quake problem. I get pop ups when i use internet explorer telling me that my computer may be infected and i need to download that program to remove it (WinAntiVirus PRO was one of them i think).

I also have Norton Antivirus 2006 and i get messages for it saying ive got "Trojan.Nebular" and that it cant be repaired and access to it is denied. I do run Ad-aware and Spybot S&D regularly along with my norton scan.

Could anyone help me with this?
 

A:Solved: Spyware virus problems - Spyware Quake

16 more replies
Answer Match 37.8%

Hi expert types. I have a canon scanner/printer MX320 and I just hooked it up to a new laptop. I installed the disc and it installed everything for the mx320, but when I try to scan something I get an error code from scangear that says turn off scanner error in scanner code 2,148,0 . What should I do? My dell came with Windows 8, so I figured posting here was the right place....I've tried to see if anyone else has had this problem prior to me but every site I go to just has nada. I've already tried unplugging everything, and also pressing the scan function on the actual scanner. (which is pretty much the only advice anyone had on the other sites I went to). Any help here would be greatly appreciated. I really can't afford to buy a new scanner right now and I need it for work.

A:Just installed my old scanner onto my new laptop and the scanner won't work.

Hi,had the same trouble with my HP printer.Worked on Windows7 but not on 8.Went to there website and downloaded new driver and works fine now.Hope this helps.

5 more replies
Answer Match 37.8%

According to Windows XP For Dummies from year 2002, any scanner can be used with Windows XP because of some basic WIA which permits scanners to be used without being installed. Since I have an older scanner which worked well on another Windows XP computer on which the scanner was installed, I figured I could follow the instructions in that Dummies book to use the same scanner in Windows XP on a different computer. So I began to try.Instructions began like this:To use the Scanner and Cameria Wizard,1. Click Start --> Control Panel2. Click Printers and Other Hardware, click Scanners and Cameras...BUT THERE WAS NO CORRESPONDING WINDOW PRESENT. THERE WAS SUPPOSED TO BE A SCANNERS AND CAMERAS WINDOW, BUT NONE THERE.I could then not follow any further instructions.I also found in Control Panel, an item called Scanners And Cameras, so I opened this to see if there were selections which I could follow according to the Dummies book. There was only an "install hardware" item inside. Also, somewhere along the attempted process, Windows invited me to look for drivers to install, but I was not sure if that fit my purposes or not. Would that path bring in the WIA software which Windows XP is expected to already have?What am I missing here? Windows XP is supposed to have some WIA software allowing basic features of any scanner to be used, but I could not find the instructions path to make use of the scanner. The scanner was also plugged in while I tried the process... Read more

A:scanner and camera Wizard for noninstalled scanner

Please click on Control Panel > Scanners and Cameras > on the Left side (as shown) there are Sub Headings for you to click on - Do you know if the scanner came with an install CD - That may have drivers listed on the CD - If not then visit the site of the scanner maker -If you can list the make and model for us, we may be able to link the driver site for you -Thank You -

13 more replies
Answer Match 37.8%

Currently I use Microsoft Security essentials as my "active monitoring" - What i'm looking for is any virus scanners that you find work well? (I only like "free" scanners.)

Consider I'm not seeking an active "monitor" that runs as a windows process. What I'm looking for is a "file scanner" that scans designated folders/drives.

Now adays, if you're paying attention, the quantity of spyware/Trojans/active x viruses is at an all time high. It seems like I get infected going to common websites even. I am looking to expand my assemblage of file scanners. In my opinion, the more, the better. (Sometimes I like to scan my drives with 3+ virus scanners. I'd like even more.)

I currently use:

Malwarebytes - Sweet secondary scanner. Doesn't run as a process (is just a scanner) and isn't "active monitoring" Perfect!

clam - Sweet scanner I actually got lastnight. Takes a long time, and doesn't clean files? (that's fine, but not as good as I hoped)

Super Anti Spyware - sweet spyware scanner

Online Virus Scanners - Housecall - Housecall is the best online scanner I've found and actually cleans the files for FREE. (do you guys know any other good online files scanners?)

Can you guys reccommend any additional file scanners that scan windows drives/files? Please remember, I don't want it to actively manage/monitor! (I USE MSE FOR THIS) I want it to be a secondary scanner that scans u... Read more

More replies
Answer Match 37.8%

Hi whats best image scanner for my MP160 as win2k image scanner is bad!

Please advice.

Arek
 

A:Whats the best freeware image scanner for my scanner?

Is this a Canon scanner? It should have come with software/drivers...
 

2 more replies
Answer Match 37.8%

Hi there

Just looking for some advice on an issue I am having at work.

A user cannot scan with the above scanner. They are getting the following error.

Scanner Status - 0 Error Number =1116 Twain Data Source Not Found Please Reinstall Scanner Software.

The Scanner is detected in Device Manager (No errors next to it)

I have uninstalled the software and reinstalled but the user gets the same issue.

I have added them as a local admin and once the software is installed I have logged on as the user. It detects that new hardware has been found and continues with the install but then they get the same issue.

Another user can log on to the machine and it works fine!

I have reseated the scanner to force it to pick up the connection but SAME ISSUE!

Any ideas would be greatly appreciated.

User is on Windows 2000

Thanks
 

More replies
Answer Match 37.8%

Sprout scanner KO since win10 update. Officejet 6500A plus scanner unusable. Is there a way to choose?

More replies
Answer Match 37.8%

: how do you delete your post thnx much
 

A:Solved: Solved: scanner unable to connect

What posts? And what is solved? Post back to your thread.
 

1 more replies
Answer Match 37.8%

Hi,
I am using Vista Home Premium. My scanner is a Canon Lide 20. I downloaded and installed the proper Vista software from the Canon site on the Internet and Device Manager shows that my scanner is properly connected. However, when I go to Windows Photo Gallery [came bundled with Vista] and want to scan and email a photo it shows that no scanner is installed. I pressed the refresh button as they suggested but still nothing. Any ideas? Thanks.

Charles
 

A:Solved: Help with scanner

10 more replies
Answer Match 37.8%

Ok, this is frustrating. I am trying to scan in a bunch of regular pages with some info on it, no pics or anything. Yet, unless I do it one by one, the text changes, or the pages overlap. I have several HP printers. HP deskjet all in one 2210 and HP office jet 4315Xi all in one. The latter I got because it has a feeder so I can feed more than one page in....

I installed the software that came with it and it's not working...please help.
 

A:Solved: Need scanner help please

Never mind, I figured it out.
 

1 more replies
Answer Match 37.8%

I'm looking to buy a new scanner and was wondering if anyone has read any recent reviews or can recommend a decent, mid-priced one. I have had few Visioneer models with no probs but not too knowledgeable on other brands. Doesn't have to be fancy, its for my mother and she rarely does anything but scan documents or an occasional pic.
One other question, can you use a 2.0 usb scanner on a computer with 1.0 ports? Not sure if she has 2.0 usb.
 

A:Solved: Need a new scanner...

6 more replies
Answer Match 37.8%

I upgraded to Windows XP and can no longer use my old scanner since the Visioneer website has no downloadable driver for it. I also have an old Microtek Scanmaker E6. I downloaded software from the Microtek website, but I don't think the cable I am using to attach it is working. It is a SCSI. The scanner has a 25 pin male port, a Mac port and a small 16 pin male port.
I know I'll probably have to buy a new scanner, but it's worth a try, if anybody has suggestions that might work. Thanks.
 

A:Solved: Old scanner--can it be used with XP?

7 more replies
Answer Match 37.8%

HP PrecisionScan LTX is not found
 

A:Solved: Scanner

7 more replies
Answer Match 37.8%

hey guys i have no protection at all for my computer and what is the best to use?
 

A:Solved: hey looking for scanner

6 more replies
Answer Match 37.8%

I have a paperport 6100b, everything was fine, til i bought a digital camera, plugged it in and didnt like it so i uninstalled the software for it. now my scanner wont work. it says it has problems communicating with the twain device. i've gone to the visoneer web site but that didnt help, i've uninstalled and reinstalled and nothing helps. please can someone help??
 

A:[SOLVED] scanner

Hi,

Did both devices use a USB connection? My knowledge of scanners is limited, but I think that what might've happened is that when you removed the digital camera software, you might've accidentally removed TWAIN support from your system. The scanner and camera were probably sharing files, and you've deleted some of those shared files. Try uninstalling the PaperPort software, then removing the scanner from Device Manager and re-starting and allowing it to re-detect. Then try re-installing the PaperPort software.
 

2 more replies
Answer Match 37.8%

I went to use my scanner and I am gettin a twain error
what is a twain error mean.
I recently got a different computer and havent used the scanner
since getting the new one. It is plugged into the computer and the light is on.
 

A:[SOLVED] scanner help

16 more replies
Answer Match 37.8%

I have recentley bought a new Dell r15 laptop, have got my printer working OK on my XP and 7 computers, would like to know if the scanner will work on my 7 computer now that I have installed a new driver for my HP f2480 printer or will I need to download something.
 

A:Solved: Scanner on Win 7

7 more replies
Answer Match 37.8%

I currently use a HP ScanJet 3400c connected through USB. The HP drivers/scanner is not 100% compatible with my motherboards chipset. Using WIA support works 100% of the time.

Quote from HP support.
A USB signal-integrity problem causes the scanner to fail. Other USB devices are not affected. The issue is dependent on an NVIDIA nForce chipset, a USB cable, and an HP Scanjet 3500c series scanner combination and does not happen 100 percent of the time.Click to expand...
The thing I find annoying is that I cannot set defaults for the DPI of scans using WIA, It always defaults to 150dpi. Is there some sort of tweak that will let me change the defaults of WIA support in Windows?

Thanks in advance

Nurdle
 

A:Solved: WIA scanner help

7 more replies
Answer Match 37.8%

i got a scanner from a garagesale and i never got the drivers for it does any one know where i can download them.
 

A:Solved: my scanner

7 more replies
Answer Match 37.8%

We have recently discovered several old photos of our parents, grandparents etc. We read about Epson having the highest quality scanners. Anybody had some experience and/or recommendations to pass along?
 

A:Solved: best scanner?

6 more replies
Answer Match 37.38%

Epson V33 Scanner
How do I name a file rather than the software naming it for me?
Such as image46, etc.?
Thank You,
Gary
 

A:Solved: Epson V33 Scanner

I don't personally own this scanner, but according to the online manual, "If you want to select the location, name, and format for the scanned image, click File Save Settings." In there, you'll see File Name (Prefix + 3 digit number) - you can likely change it there.
 

3 more replies
Answer Match 37.38%

I have a Hp psc 1210v all-in-one And when I try to scan something with it it says( The Scanning Software could not be found ) I have no clue what this means and I really need to get if fixed before tuesday night otherwise I miss sending a Really important paper to somebody
 

A:Solved: My scanner Will not work

Try downloading the driver at this web
http://h10025.www1.hp.com/ewfrf/wc/softwareCategory?product=90770&lc=en&cc=us&dlc=en&lang=en&cc=us
 

3 more replies
Answer Match 37.38%

I got a new computer, switching from ME to XP. I have a Visioneer 8100 scanner that doesn't seem to want to work properly. I tried uninstalling & reinstalling. I tried downloading a new driver. Nothing works! Can somebody help? Or shoul I just bite the bullet & get a new scanner?
 

A:[SOLVED] new computer-BAD scanner!

14 more replies
Answer Match 37.38%

Hi All,
I'm the newbie so forgive anything I might do wrong!

I have an Atec scanner e+48U and it has just stopped working for no reason at all.
I have re-installed the sofware several times but no luck.

Has anyone out there got the slightest idea what is wrong please?

Many thanks,
Regards,
Derek.
 

A:Solved: Artec scanner e+48U

11 more replies