Tech Problem Aggregator

Need help with Dell Alienware Aurora

Q: Need help with Dell Alienware Aurora

My brother just gave his Alienware Aurora to my boyfriend and the computer won't turn on by the power button but it does turn on with the button in the back while my boyfriend is holding it but turns off immediately afterward. It worked just fine when my brother had it so no clue what the trouble could be now. Please help, thank you.
Alienware Aurora ServiceTag:<ADMIN NOTE: Service tag removed per privacy policy>
Express Service Code: <ADMIN NOTE: Express service code removed per privacy policy>

More replies
Answer Match 88.2%

Two months ago bought a Dell 8900 from Best Buy. After 20 days, it would not start, same with the next 8900 replacement... only fewer days. The first gameware as a replacement did not start at all. The Alienware Aurora worked beautifully for 3 days and then would not start. In the 8900's,,, got the blinking amber lights on the start button. Tech is coming to replace motherboard. What the heck is happening? Could it be the monitor... or the external hard drive or what? Come on Dell,,, what's up? I have a Dell XP Laptop as a back up using the same external hard ddrive.

A:Dell 8900, Gaming Computer, Dell Alienware Aurora

There is a power issue with the external hard drive.

2 more replies
Answer Match 86.94%

Recently, I changed a monitor from 2560x1440 to 2048x1920 and the X51 updated to Windows 10. Next, without any hardware changes, the XPS 8700 updated to Windows 10.
Aurora R1 is running Windows 7.x
Aurora R3 is running WIndows 7.x
What MS OS can the Aurora R1 support (2560x1440 display, updated GPU)
What MS OS can the Aurora R3 support (2560x1440 display)
Can either move to Windows 8.1.x? Or both?
Can either or both move to Windows 10.x?
What is significantly different between Win 8.1.x Pro and Win 10 Pro?

Thanks gurus!
Srosxi

A:DELL ALIENWARE AURORA R1, R3, X51, and XPS 8700

First there is a free upgrade from Windows 7 OEM to Windows 10 Retail so there is absolutely zero point in purchasing a Windows 8.1 Retail license...
Windows 10 TH2 is essentially a fixed version of Windows 8.1 where Metro Apps work correctly as "Windows".
Almost any system shipped with Windows 7 can run Windows 10. As they are 2009 and 2011 models respectively Dell did not provide updated drivers for Windows 8.x or Windows 10 because they are all out of warranty. All the drivers should be inbuilt into Windows 10 TH2 or automatically obtained via Windows Update. Its advised to update your BIOS to the latest revision before proceeding.
A Clean Installation also in general performs better. See here for details:
http://dellwindowsreinstallationguide.com/download-windows-10-oem-and-retail-iso/
https://www.youtube.com/playlist?list=PL1RkaknDn7v-Ucth4gt0U3BHVSY7oNkWr
Both systems likely have a legacy (non-UEFI) BIOS so take that into account when making the Bootable USB. Although you may want to look at the BIOS settings for the 2011 model to see if there is UEFI support.

1 more replies
Answer Match 68.04%

I'm trying to install 2 nVidai NVS 810 cards onto a single Alienware Aurua R5 PC. If I just install 1 card everything works, no matter with PCI16e slot I install them in, top or bottom.
When I add the second card and boot the PC, it stops at the POST telling me it can't find any boot device and the keyboard stops working.

More replies
Answer Match 68.04%

I recently downloaded a game from steam (Fallen Earth) on my aurora r1 and I was able to play for about 6-12 hours with no issue then for no reason my computer froze keyboard and mouse was unresponsive, the sound looped, the game was froze on the monitor and i was unable to soft boot, i had to hold the power button down to shut it down.
I turned it back on after a bit, thinking it over heated i turned down the graphics on the game, and same freeze with 30 min to and hour of play time. shut it down again and started it back up this time it didnt pass its POST (power on self test) causing it to beep 4 times for the possible problem of a Ram read/write failure. after about 5 minutes it started like normal. yet it froze again.
Now its starting to freeze at the desktop level, and i dont know what to do. (I haven't changed a single thing with this computer and i treat it like my baby regular virus scans every other week and disk cleans)

right now im running it through a pre-boot system assessment. Ill post back with that info once its complete.
Update: It passed the system assessment

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz, Intel64 Family 6 Model 26 Stepping 5
Processor Count: 8
RAM: 6134 Mb
Graphics Card: ATI Radeon HD 5670, 1024 Mb
Hard Drives: C: Total - 468680 MB, Free - 313830 MB;
Motherboard: Alienware, 04VWF2
Antivirus: avast! Antivirus, ... Read more

A:Alienware aurora freeze

gonna try removing the ram one at a time till it stops freezing. (friends idea)
only reason im updating this is incase someone has a problem like this
 

1 more replies
Answer Match 68.04%

Hi there. I'm here on behalf of one of my good friends who purchased an Alienware desktop from Dell. He's owned it for almost four months now and he's been having trouble with it for the last month or so. I can't determine what's causing it myself and I don't want to take any drastic measures (like reformatting). Because of this, I don't really know where I should make this post, so sorry if it's in the wrong section.Basically, when he plays games like World of Warcraft, the visuals are rendered all messed up. Flickering, stretched, or missing geometry; the whole nine yards. Alt-tabbing also tends to make the game crash (and worse, which I'll explain below). Basically, the game performs perfectly, but it's all messed up looking and alt-tabbing is unstable.I've tried uninstalling the display drivers that came with the computer and installing the latest version (and yes I made sure I chose the correct model on Nvidia's website). I also made sure his operating system was up to date. None of that fixed it, and according to him it got somewhat worse after I updated his display drivers.But anyway, the worst part of all of this is that he's been forced to do a system restore twice within a couple of days. According to him, on both occasions, he alt-tabbed out of World of Warcraft and when he tried to alt-tab back in, the screen would go black and his monitor would say "Entering Power Save Mode" and basically it doesn'... Read more

A:Alienware Aurora "Blackscreening"

Try troubleshooting ... Open Control Panel, click in the search box, and type troubleshoot. Click the Troubleshooting link at the top of the search results

3 more replies
Answer Match 68.04%

Can you damage your system, especially the motherboard and electric capacitors if you leave this computer on for too long ? Dell told me so, but I have much doubts? Supposedly, I damaged my motherboard doing so.
Thank you very much for your input. So basically what Dell told me (I supposedly damaged my motherboard and some capacitors by leaving it on for too long for my specific hardware) is just wrong ?

A:(Redirected) Alienware Aurora R4 always on

Best to post this in the Alienware Owners Club Forum, here:http://en.community.dell.com/owners-club/alienware/default.aspxBev.

1 more replies
Answer Match 68.04%

Hello.  I have 4 x 2 gig of ram but one of them is not working.  Win 7 shows 8 gig installed but only 4 available. 
How do I figure out which ones are good, and make sure its not the MB?
I would like to upgrade to 16gig but not sure which to get.
I'm guessing this should work.  Any thoughts?

Thanks
Menessis

More replies
Answer Match 68.04%

All considering would this be a good safe buy for an all-out yet relatively affordable gaming laptop?
http://cgi.ebay.com/ws/eBayISAPI.dl...MEWA:IT&viewitem=&item=230130519506&rd=1&rd=1
 

A:Alienware Aurora m7700

8 more replies
Answer Match 68.04%

Looking around the Alienware website I found this very strange:

The Area 51 base model starts at 800Euros more than the Aurora but seems to have a far poorer selection of processors, all i7, but no 2600. Of course you can get the 980 or 990x but that is an additional 800E! Otherwise the 960 (3.4 Ghz turbo) is the best option.
Whereas the Aurora desktop has the option of 2600 overclocked to 3.9 Ghz which is FAR cheaper than the above processors in the Area 51.

Of course the Area 51 has the infinitely better Core 2 Quads vs the Aurora Phenoms.
So which is ultimately better for gaming performance?? And why don't they have 2600 in the Area 51???
 

A:Alienware Aurora VS Area 51

BUMP
Does anyone here have either of these desktops?
 

3 more replies
Answer Match 68.04%

Hi there,

I have recently bought a new PC and it has recently started to encounter a BSOD on almost a daily basis.

I have Windows 8, 64 bit.

I have attached a copy of the dump files that are produced. They seem to indicate a problem with storport.sys, hal.dll and ntoskrnl.exe.

I have tried to find solutions for this myself online but haven't succeeded.

If I you need any further information please let me know.

Thanks in advance

Scott

A:BSOD With Alienware Aurora R4

Dell has a special users helping users support forum just for Alienware customers. Have you tried that?

Alienware Club - Dell Community

1 more replies
Answer Match 67.2%

Running into an issue upgrading my system from 4x2Gb uDIMMS (2GB 1Rx8 PC2-12800U) that came with my system to a 4x8Gb kit. I purchased the Patriot Viper kit off of Amazon, and installed it today. The system will not boot when only the Patriot memory is installed (no beeps, just turns on with a blank screen), but it will boot with an old dimm installed in slot 1, and slots 2-4 populated with the patriot dimms. 
Here's the info on the DIMMs that I purchased:
Patriot Viper III Extreme Performance 32 GB 1600MHz (PC3 12800) DDR3 Memory Kit PV332G160C9QKBL

1.5V
PC3-12800 (1600MHz)
9-9-9-24
Intel 6, 7 and 8 series
XMP 1.3 Certified

I've done a few searches, but most people I've seen with issues were installing memory with a higher clockrate. The motherboard model is 07jnh0 rev a00, and BIOS version is A11. Does anyone have any suggestions?

A:Alienware Aurora R4 Memory Upgrade

You'll probably get a better response if you repost this in the Alienware Club forum.

1 more replies
Answer Match 67.2%

I tried doing the power drain thing, didn't work. The power button starts with a blue light, then goes to blinking yellow light. 3 times, then 6 times. Last night when it was working it said Alienware needed to do a bios update. I just shut off my monitor and let it do its thing over night. This morning I went to turn it on and I got the blinking lights.  For the price I paid for it I didn't expect problems to occur the day after I got it. I wonder if I should of just got a different computer in the first place.

More replies
Answer Match 67.2%

Ok, I don't know if anything can be done about this or not. I will go ahead and give you some background on my

system and situation. I purchased it around 10/26/06.


Prod. Order No.: 434115A
I. Identification
Customer Name: xxxxxxxxxxxxx
Customer Account No.: xxxxxxxxxxx

II. Configuration

Processor(s)


Processor: 1
CPU_Name: AMD Turion(tm) 64 Mobile Technology ML-40

CPU_Manufacturer: AuthenticAMD

CPU_Caption: x86 Family 15 Model 36 Stepping 2

CPU_Version: Model 4, Stepping 2

CPU_ProcessorId: 078BFBFF00020F42

CPU_CurrentClockSpeed: 2211MHz

CPU_AddressWidth: 32Bits

CPU_DataWidth: 32Bits

CPU_SocketDesignation: CPU 1



Case Color: New Background


System Memory


Memory Module: 1
Mem_Capacity: 1024MB

Mem_BankLabel: DIMM #1

Mem_Type: DDR

Mem_Bandwidth: PC3200 (200 MHz)

Memory Module: 2
Mem_Capacity: 1024MB

Mem_BankLabel: DIMM #2

Mem_Type: DDR

Mem_Bandwidth: PC3200 (200 MHz)


BIOS Information


BIOS_Manufacturer: American Megatrends Inc.
BIOS_Name: Default System BIOS
BIOS_Version1: W830D315
BIOS_Version2: A M I - 4000626

Motherboard Information


MB_Manufacturer: alienware
MB_Product: Aurora m9700
MB_SerialNumber: W830DA AB040
MB_Version: AB040

Video Adapter


Video_Caption: NVIDIA GeForce Go 7900 GS
Video_AdapterRAM: 512MB
Video_DriverVersion: 6.14.10.8474

Hard Drive(s)


FUJITSU MHV2060BH
Disk_Model: FUJITSU MHV2060BH
... Read more

A:SLI problems on Alienware m9700 Aurora

Either one of the video cards is bad, or you motherboard may be defective as far as running in the SLI mode is concerned. Have you tried swapping the video cards to see if it is one card or one of the SLI motherboard sockets?
 

4 more replies
Answer Match 67.2%

I've been having strange problems, mainly since updating to Windows 10. Sometimes, I get no response to clicking on the Windows icon bottom left corner. Other times, it has a transparent background etc. I have also been randomly getting a BSOD with IRQL_NOT_LESS_OR_EQUAL error. A link to the dump file is here...

I am running BIOS A11, GTX690, 16GB ram, i7-4820K @ 3.7GHz. Can anyone who know how to interpret dump files point me in the right direction?

Thanks.

A:Issues with Alienware Aurora R4 Windows 10

You'll probably get a better response if you re-post this in the Alienware Club forum.

1 more replies
Answer Match 66.36%

I'm trying to install a Sound Blaster Z on my R5, as I don't particularly care for the integrated sound card. What is the correct procedure for doing this (i.e. what do I need to disable, etc.)? I went into the BIOS, but I don't see anything about any integrated devices. My apologies if this has been asked before, but I've searched Google up and down, and I can't seem to get a straight answer anywhere. Any help would be appreciated. Thanks.

More replies
Answer Match 66.36%

I've recently been given a fresh in-box geforce gtx 650 ti boost graphics card.
I've already attempted to upgrade my card before and it didn't work, the computer refused to run with it no matter what I tried, so I'd just like to ask if anyone knows if it will work to put this card into my system?
and if not, why? and what can I try?

More replies
Answer Match 66.36%

SOS

For the last three days I've been searching all over the web for the drivers for my aurora 9700 , I'm begging to regret that I upgraded to vista 64, any driver information would be usefull since the lap top works more like a typewriter now...

Saludos desde Madrid

A:alienware aurora 9700 vista 64 drivers

Originally Posted by todossobran


SOS

For the last three days I've been searching all over the web for the drivers for my aurora 9700 , I'm begging to regret that I upgraded to vista 64, any driver information would be usefull since the lap top works more like a typewriter now...

Saludos desde Madrid



Welcome to the forums.

I'm pretty sure this thread can be of some to you.

Good luck! If you need further help, feel free to ask.

EDIT: I just noticed the links are broken. I'd suggest sending the Original Poster a Private Message, asking if he still has those available.

3 more replies
Answer Match 66.36%

I own an older Aurora R3 with an upgraded gpu. The right side light, alienware logo light, bottom of case light all work, and display the colour properly. Though the left side where there is a removable side panel does not light up. A few months ago it did work, though now it doesnt. i've tried taking out and putting the side panel back in. Any help is appreciated

A:(Redirected) Alienware Aurora Light not working

Best to post this in the Alienware Owners Club Forum, here:http://en.community.dell.com/owners-club/alienware/default.aspxBev.

1 more replies
Answer Match 66.36%

Hi, I'm looking to upgrade my computer's processor but I'm not sure wich processors are compatible with my motherboard. I leave the information from TSG SYsInfo down and also I uploaded some images with extra information that maybe could help. Also I had some Cores that I would like to know if they're compatible. Thanks for your responds.
_____________________________________________________________

* Core i7-860

* Core i5-760, 650, 540

* Core i3

_____________________________________________________________
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i3 CPU 540 @ 3.07GHz, Intel64 Family 6 Model 37 Stepping 2
Processor Count: 4
RAM: 16375 Mb
Graphics Card: NVIDIA GeForce GTX 650, -2048 Mb
Hard Drives: C: Total - 945108 MB, Free - 755286 MB; J: Total - 8717 MB, Free - 4020 MB;
Motherboard: Alienware, 0RV30W
Antivirus: Avira Desktop, Updated and Enabled
_____________________________________________________________




 

A:Solved: Upgrade an Alienware Aurora R2 processor

Here's a list of compatible processors: http://alienwareusersupport.weebly.com/aurora-r2.html

The i7-860 would be the one to use from the ones you have listed.
 

2 more replies
Answer Match 66.36%

i have a Alienware Aurora-R3 and i took out the 2 gts 450s. and replaced it with a single MSI radeon R9 290. and it seams that it is running a bit hot. once it got up to 180F. all the fans are working. i wonder if its the case? i took the cover that was covering the video card and left the side off and it helped some. it went down to about 120F to140F. i was wonder if i can cut a hole in the side panel. and mount a fan there to blow out if that would help any?





 

A:Alienware Aurora-R3 case air flow question?

and this is the only place in the front that air is getting in. maybe i sgould try to open this up some how?

 

2 more replies
Answer Match 66.36%

i have a old Alienware Aurora (2008) desktop laying around, I am soon building a custom computer with new technology (i5|ddr3|GTX etc.. but the new case im getting dosent have any led lights on it. I really love the sleek look of the new case although theirs no lights, now i know alienware (especially back in he day before dell owned them) uses a lot of proprietary parts that being the odd led system chip on the bottom of the case. but i know its a long shot but i was wondering if i could take the entire system out of there and re wire it in my new pc case?

More replies
Answer Match 66.36%

Hello,

Recently I've been experiencing a BSOD in most of my PC sessions. It can happen almost randomly. It only seems to happen when an action is done. For example, I've been getting a BSOD from clicking a link, opening outlook and uninstalling Firefox. After resetting the PC, these functions work normally. Time taken for a BSOD to occur varies between half an hour to more than 2 hours (occasionally longer, sometimes going the whole day without any BSODs). System information is below and a system health report (and the Dxdiag system information) is in the attachments, along with the results from the "BSOD_Windows7_Vista_v2.64_jcgriff2_" application. Help would be greatly appreciated, thanks.

Operating System: Windows 7 Home Premium 64-bit (Came preinstalled with PC, was reinstalled after a factory format a few months ago)

System Manufacturer: Alienware

System Model: Aurora

BIOS: Default System BIOS

Processor: Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz (8 CPUs), ~2.7GHz

Memory: 3072MB RAM

Video Card: NVidia GeForce GTS 240 (correct me if this isn't the video card)

Power Supply: Unknown, but has never encountered any problems in the past.

Motherboard: Unknown, came with the PC.

Exact Model Number: Unknown, I don't know where on the PC it's located.

A:Constant, almost random BSODs on Alienware Aurora

Quick Note: The PC is about two (and a half?) years old, for nearly two years it ran everything perfectly. It could easily run graphics and RAM intensive games and perform at blisteringly high speed. However, after under two years of it being in action, it started freezing and rebooting itself for no real reason - but it only happened while steam (or many tabs in firefox) was open. After sending it off for repairs and getting a factory format, the PC was fine for a month and a half until it started crashing for the same reasons as before. After reinstalling the graphics driver and running a full antivirus scan it worked fine, but then (5 days ago) it started crashing when running games, steam or no. A couple days later all games seemed to work fine (though in one incident yesterday playing Unreal caused the PC to reboot itself and make bleeping noises, probably because a disc was in the drive, that hasn't happened again since) but now it's been brought to the problem I've been experiencing for about 3-4 days now.

19 more replies
Answer Match 66.36%

Hello everybody! I recently purchased an Alienware Aurora R5 from dell about a month ago. I just received the PC in the mail about 4 days ago so it is completely brand new. The first day I was using it, the computer randomly shutdown and restarted itself and I didn't think much of it at first just that it was possibly an update finishing or something like that.
Fast-forward a few days to now, I tried to install my Star Wars: The Old Republic game and when I went into the game and changed the settings to my PC's correct resolution and overall settings, the PC will randomly shut off and restart once again. I tried a few times and the same result occurs every time. My PC is more than able to handle that game and yet it does it no matter the settings.
Then I tried to run the Diagnostics Tool on this site and when I did, it got about 2-3 minutes in and then once again, the PC randomly shutdown and restarted itself. 
I am at a complete loss right now. I have absolutely no idea what is wrong with this PC and it has me worried since I just shelled out a decent amount of money to get it and it's not even a week old yet. The only things that have been downloaded to the computer is my Anti-virus software and a few driver updates. Any help or suggestions would be greatly appreciated because I am at a complete loss right now on what may be causing this issue. I'm starting to feel something is wrong on the inside and was defective before it even got to me, but I really... Read more

A:Alienware Aurora R5 Randomly Shutting Down and Restarting

Contact Dell Tech Support right away...

1 more replies
Answer Match 66.36%

Recently Swapped out my old enermax PSU for a new one. Plugged everything back in. I inadvertenly disconnected a a twin wire two prong cable which connects to the hinge of the front door of the Tower. It is tied into the other connectors for the system pannel(20 pin) connector on the motherboard. However i do not know where it plugs in?

I would not normally care but the PC will not power up with the new PSU. All i am getting is the standby power LED on the motherboard to light up. I have connected the two fans to the same cables as the EZ_plug( which i just use a ordinary four prong connector). The DVD and CD-R drives use the same power cable. The HDD i have using a SATA power connector. Finally the floppy drive just uses a standard connector with nothing else on the other 12v connectors. The motherboard uses a ATX connector, EZ_plug and 24 pin connector.

I just realised i connedted the PSU up incorrectly. I used an EZ_plug with the ATX connection which i should not do with a Geforce 7800 GT on Asus A8N-SLI Deluxe(ez-plug should only be used with two cards?). I also forgot to connect the six prong connector on the video card. Would this earlier omission on my part have damaged the mobo? I rectified and still no change?
 

A:Strange Connector on Alienware Aurora Door

That 2-pin plug is probably 5 volts gonig to LEDs in the door. Carefully go over the motherboards manual and recheck all the power supply connections to it. If all else fails, take the system down to the bare minimum, no sound card, no video card and only one memory stick and see if it powers up. Try resetting the CMOS while you are at it
 

4 more replies
Answer Match 66.36%

Hello,

I've got an Alienware Aurora R4 with Windows Home Premuim 64bit. A few days ago my computer started having BSOD issues, crashing and sometimes taking multiple tries to restart. I've not noticed anything consistant in what programmes were running when it happened. I tried a system restore to a few days before I noticed the issue, but it didn't have an effect. I could potentially go back further. Alienware Autopsy scans and self scans find nothing. The signature is always:

Problem Event Name: BlueScreen
OS Version: 6.1.7601.2.1.0.768.3
Locale ID: 2057

I have attached a dmp. file

Attachment 325181

I am a fairly proficient, but not an expert by any means. If anyone has any advice or similar experiences I would greatly appreciate it. Let me know if I have to provide anything further too.

Many thanks for reading.

A:BSOD on Alienware Aurora R4 locale ID:2057

If you don't get help for the problem here, Dell has a special forum for Alienware owners. May get support there.
Alienware Club - Dell Community

4 more replies
Answer Match 66.36%

in reinstalled windows 7 on my alienware aurora after a virus. after the install in put in the resources cd and installed all drivers. everything worked except i don't see my wireless card. i also went on dells website and got the latest drivers still nothing. my internet works fine with a cable plugged in but i don't see my wireless card. any ideas.

under device manager, network adapters it shows - realtek pcie gbe family controller. it also has one under other devices that says - 802.11 n WLAN. i tried automatically getting a driver for this one but it can't find one.

A:reinstalled windows 7 on alienware aurora and now i have no wireless.

Hi,

try the drivers on this site (alienware's)

Alienware : The Ultimate Gaming Machine

Steve

1 more replies
Answer Match 66.36%

Greetings, my name is Kevin and I am here to seek some help from you tech experts here on tech support forum.

Here is my issue: I own an Alienware aurora desktop and it freezes when ever there is a little lag (this happens everyday, and I am force to shut down and restart the computer by using the button on the machine)

Here is a image of my computer spec:


What I have done in attempt to fix this issue:
[*] Defragment my hard drive (Control Panel > Administrative Tools)
[*] Free up disk space by deleting unnecessary Files (Control Panel > Performance Information and Tools)
[*] CCleaner (Used cleaner option and fixed all registry errors as well)
[*] Went through all my installed programs and uninstalled any programs that I don't need.
[*] Re-installed OS (Window7 home premium) once.
[*] Cleaned out all the dust surrounding the fan.

I no longer have warranty on this computer (cannot afford it), and I've had this computer for around 2 years, please help me fix this :( paid over $2000 for it.

A:Alienware Aurora (Win7) Freezing Issue

Any help?

6 more replies
Answer Match 66.36%

From what I can understand I get the BSoD randomly and not because of a spesific program or game.
The computer is new so it shouldn't be hardware related, unless something came defect somehow.
The first weeks I didn't get any blue screens that I can rememeber so things should be working okey?
But the last weeks I've gotten the BSoD often, sometimes several times a day.

multiple_irp_complete_requests is the message that appears on the bluescreen and from my attempt at checking out a minidump file it points me to ntoskrnl.exe as the cause.
From searching around none of them gives me an answer to what I can do to solve my problem.


I tried to follow the instructions for posting here and I followed step 1, and then step 2..
Now this window that popped up just says Waiting for SystemInfo over and over and over..
Can't really do step 3 and 4 then?

I can add step 5 still.
5. Please provide answers for -
? OS - Vista/ Windows 7 ?
Windows 7 Professional.
? x86 (32-bit) or x64 ?
64-bit
? What was original installed OS on system?
Windows 7 Professional
? Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)?
If the question is if it's pre-installed or purchased seperate and then installed, the answer is pre-installed.
? Age of system (hardware)
I got the computer in the end of november, 2011.
? Age of OS installation - have you re-installed the OS?
Same as above. Never re-installed, yet..

? CPU
3... Read more

A:[SOLVED] 2 months old Alienware Aurora R3 getting the BSoD

Computers are not like cars. Getting a brand new manufactured PC has potential of croaking on day one of use as opposed to the same with a car, which is extremely unlikely. Most likely when dealing with instability in a new system, it's manufacturing defects in the hardware and installation that cause woes. Keep that in mind.

When I see multiple IRP requests, however, that's typically a driver bug. Turn on Driver Verifier, then any crashes you have provide us the minidumps (they are located in /Windows/Minidump). That should give us the information we need.

6 more replies
Answer Match 66.36%

I have alienware aurora custom built pc

it keeps saying boot prority no medium

i have tried putting several boot discs in but it still says no medium :/

There is no OS on the hard drives i have been trying to install windows 7

does anyone no what to do ?
 

A:Alienware Aurora not reading recovery discs

Go into the BIOS and set the CD\ROM as first boot option. Save and boot from the Win7 DVD.
 

3 more replies
Answer Match 65.94%

I have an alienware Auora R4 I believe. I've had it for some time now, and I've recently encountered a problem since last night. I've had three crashes.
 
The first one was when I was playing Death To Spies. My game froze, audio stuttering, then I got a black screen and it stood there and eventually rebooted. When it auto-rebooted I got a "Internal Hard Disk Drive not Detected" error. I ran the ePSA diagnostic thing and it checked out fine, even on a full test.
 
My PC ends up rebooting super slow. Browsing the internet my PC crashes and hangs AGAIN, this time it just hangs and I have to reboot manually. No hard disk error this time.
 
When on steam and installing a payday 2 update while browsing the internet, only a few minutes ago today, my PC crashes again, same issue. I had sound off, but the screen went black and autorebooted. This time I got the "hard disk drive not detected" error again.
 
I was thinking it was possibly the hard drive, but have no idea. I've also had issues where my screen would go black, and when it comes back on, I'd get a "Display driver has stopped responding and successfully recovered" message in the disk tray. This seems to be happening more often.
 
My specs: Windows 7 64bit, i7 3820 processer quad core at 3.6 ghz.
 
Nvidia 560ti video card, 8gb ram. I ran the dell ePSA and Seagate tools, and they found nothing. Can someone help me fix this? I believe it might be hardware related but I have no idea. 
 ... Read more

More replies
Answer Match 65.94%

I followed the instructions from DELL-Chris M "Intel Chipset & Realtek HD Audio update & simple check" it lists an update, try to install and and get an "Unknown error"
this is the log for it I believe:
=== Verbose logging started: 10/3/2016  8:05:05  Build type: SHIP UNICODE 5.00.10011.00  Calling process: C:\Users\Mabel\Downloads\Intel Components\SetupChipset.exe ===MSI (c) (FC:6C) [08:05:05:903]: Resetting cached policy valuesMSI (c) (FC:6C) [08:05:05:903]: Machine policy value 'Debug' is 0MSI (c) (FC:6C) [08:05:05:903]: ******* RunEngine:           ******* Product: C:\ProgramData\Package Cache\{FEBB7B48-CC1C-4A50-A497-FA21413F6BE9}v10.1.1.14\SetupChipsetx64.msi           ******* Action:            ******* CommandLine: **********MSI (c) (FC:6C) [08:05:05:903]: Client-side and UI is none or basic: Running entire install on the server.MSI (c) (FC:6C) [08:05:05:903]: Grabbed execution mutex.MSI (c) (FC:6C) [08:05:05:922]: Cloaking enabled.MSI (c) (FC:6C) [08:05:05:922]: Attempting to enable all disabled privileges before calling Install on ServerMSI (c) (FC:6C) [08:05:05:924]: Incrementing counter to disable shutdown. Counter after increment: 0MSI (s) (E0:80) [08:05:05:929]: Running installation inside multi-package transaction C:\ProgramData\Package Cache\{FEBB7B48-CC1C-4A50-A4... Read more

A:(Redirected) Alienware Aurora R4 Intel chipset update

Best to post this in the Alienware Owners Club Forum, here:http://en.community.dell.com/owners-club/alienware/Bev.

1 more replies
Answer Match 65.94%

VICTORY IS MINE!!!!!!!!!!!!!

Alienware got you down? Those smarmy, mankey gits not supporting 64 bit software makin you feel like you've purchaced a $5000 paperweight?

No more worries my friend!! I too have pulled my hair out and resisted the urge to throw this bloody thing out a window.

I've managed to find all the drivers save the Web Cam driver and for you convienience (because I wished i could find something like this) i've packaged them all up in one little ball for you.

At the end of this post are four links to RAR files i've made for you. It contains all those pesky missing drivers.

YOU MUST DOWNLOAD ALL THE RAR FILES.

The files are split up due to file size limitations put on me via the file host.

If you are not familiar with RAR files it's quite easy. Once you have downloaded all the RAR files... make sure they are all in the same directory! Double click on the file called "Alienware m9700 Vista x64 drivers.part1" and once WinRAR opens click "Extract to" then pick a folder and hit OK... Thats it.

Install the drivers as you normally would.

WinRAR is avaliable from RARlab


here are the links to the various files:

Part 1
http://www.fileden.com/files/2008/2/...vers.part1.rar

Part 2
http://www.fileden.com/files/2008/2/...vers.part2.rar

Part 3
http://www.fileden.com/files/2008/2/...vers.part3.rar

Part 4
http://www.fileden.com/files/2008/2/...vers.part4.rar


All I ask is that you share the wealth a little bit by telli... Read more

A:Alienware Aurora m9700 Drivers Problem Solved.

Cool! Thanks a lot man. I know how you feel ? I spent many, many hours trying to find working Vista x64 drivers for my m9700. Thanks to you, both speakers on my Alienware now work instead of just one!

Btw, did you manage to find a solution to that pesky BisonCam driver problem?

55 more replies
Answer Match 65.94%

Hello im swapping somthing for a Alienware Aurora M9700

Want to know if i can replace the graphics card if it is the problem and can somone give me a ebay link of somone selling one and is it easy to change?

it has a problems with graphics card causes as he said

wen he installs the graphics card it gets worse



lines of dots on screen
Heres an image



info

Processor
._AMD Turion64 ML-44 processor
(2.4GHz)

Chipset
._NVIDIA nForce4 SLI

Memory
._Two SODIMM sockets
._1GB DDR 400 Unbuffered Non-ECC memory
._Supports maximum memory capacity up to 2GB

Graphics
._Dual NVIDIA GeForce Go 7900 GS 256MB (MXM)

60 gig Hitachi 7200rpm SATA HDD
._8x Dual-Layer DVD+/-RW

Display
._17" WUXGA TFT LCD (native 1920 x 1200)

Audio
._Stereo speakers with integrated subwoofer
._Intel High-Definition Audio
External I/O Connectors
._1 x Power port
._1 x Lock jack
._1 x Ethernet port
._1 x Modem port
._1 x Headphone jack
._1 x Microphone jack
._1 x SPDIF jack
._1 x PCMCIA slot
._1 x TV-out port (S-Video)
._1 x TV-in port (S-Video)
._3 x USB 2.0/1.1 ports
._1 x VGA-out port
._1 x DVI-out port
._1 x 4-pin mini IEEE1394 port
._1 x Multimedia (MMC/SD/MS/MS Pro) Card Reader

Dimension and Weight
._1.85" x 15.65" x 11.75"
._Starting at 8.5 lbs.

Be helpful if somone can reply asap (planning on swapping sunday)

Thanks.
 

More replies
Answer Match 65.94%

I just received my Alienware Aurora R5 earlier this week. I purchased a Samsung 950 Pro 512GB NVMe M.2 SSD and placed it into the M.2 slot.
After restart I could see the SSD in the BIOS and continued booting into the factory install on the 2TB HDD. There under Disk Management I could see the drive. I could create a volume and bring it online. I made it a GPT disk.
Boot to UEFI Flash drive and try to install Windows 10 and it gets to the last part (Finishing Up) and then throws an error ("Windows could not update the computer's boot configuration. Installation cannot proceed.")
Various things I've tried:
Disconnected the HDD so that the M.2 is the only disk. Result: Computer will not boot past the BIOS load screen. Alienware head and blue bar all the way full. Stops there permanently.
Set ATA Controller to AHCI. Result: Computer will not boot past the BIOS load screen. Alienware head and blue bar all the way full. Stops there permanently. At this point I have to completely remove the SSD to get back to a functioning boot.
Booted back to HDD and cloned it to the SSD using Paragon Migrate. Result: Clone is successful, however windows fails to boot to the SSD after selecting Windows Boot Manager Disk 1 entry under the UEFI boot menu. Try startup repair from Windows setup: (Fails). Tried Paragons rescue Utilities: Says they successfully repair the problems. Still won'[t boot to SSD.
BIOS is 1.0.4 brand new hardware can't get it to work.
Anyone know h... Read more

A:(Redirected) Alienware Aurora R5 Samsung 950 Pro 512GB NVMe M.2 SSD

 
Best to post this in the Alienware Owners Club Forum, here:http://en.community.dell.com/owners-club/alienware/default.aspxBev.

1 more replies
Answer Match 65.94%

Hey guys my computer blue screens just about everytime I use my webcam. I have unistalled and reinstalled the logitech software numorous times but still wont work properly. I don't know much about this computer, I bought it from a friend a while back. Are there any programs I can install to diagnose the problem?

More replies
Answer Match 65.94%

Hi! I currently have an Alienware Aurora R5 with 2 x 4GB 2133MHz RAM sticks and am really happy with it so far!
But I would like to add another 8GB 2133MHz stick to bring it up to 16GB, thing is, I'm not entirely sure if I can just slot another 8GB stick into the XMM3 slot and have it work,
partly because i couldnt find any documentation on what the voltages/timings/cas latency are on the 2 4gb ram sticks in the pc currently are, and I think those are important to upgrading ram,
And because of this thing i found in the online manual for the R5

Seems to say that there are only  5 configuration's I can have, is that set in stone or is it just what they've tested?

Thanks, Saucybagel

A:(Redirected) Small RAM upgrade question for Alienware Aurora R5

Best to post this in the Alienware Owners Club Forum, here:http://en.community.dell.com/owners-club/alienware/Bev.

1 more replies
Answer Match 65.94%

Hello everyone,
I would like to get two PNY GeForce GTX 1080 Founder Edition cards from Dell for my Alienware Aurora R4 but before I make the $1,200 plunge I have just a couple questions. Firstly, Would these cards even work in the Aurora R4? Secondly, would I have to get a new SLI bridge?
Here is my current system
Intel Core i7 4820K
16GB of RAM
Nvidia GeForce GTX 780 2-way SLI
500GB SSD Main + 1TB 7200 RPM HDD Storage
1500 Watt PSU
BIOS A11
Thanks.

More replies
Answer Match 65.94%

Dear all,

the title says it all.. I'm experiencing a lot of BSODs when I start up my computer lately(occured since December).. So when I turn on my PC, after a few minutes the whole screen turns out like this: ImageShack? - Online Photo and Video Hosting and usually the computer shuts of.. Now today I was finally able to get a minidump which can be found in attachments..

My system info:

? Windows 7 ? x64 ? Original OS which was pre-installed
? I have the system since Februari 2010
? Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz ? ATi RADEON HD 5800 series (crossfire)
? Motherboard Information

MB_Manufacturer: Alienware
MB_Product: 04VWF2
MB_SerialNumber: ..CN697029BN0950.
MB_Version: A00
BIOS Information

BIOS_Manufacturer: Alienware
BIOS_Name: Network:MBA v11.0.14 Slot 0400
BIOS_Version1: A04
BIOS_Version2: ALWARE - 20091028

Thanks for having a look as I have little experience comming to these technical issues..

Kind regards,

Jurgen

A:BSOD when starting up Alienware Aurora ALX R3 desktop computer

Please upload a full report
http://www.techsupportforum.com/foru...ta-452654.html

To me that looks like it is video card related or PSU related. What kind of PSU do you have?

I would start off by removing any overclocks you may be running and also check the temps of your card(s).

You can do a video stress test to see if you get any artifacts or overheating
Video Card - Stress Test with Furmark - Windows 7 Forums
As for your BSOD. It doesn't really tell me much. Could be a couple things (memory, driver, video card)

After you run your video card stress test, I would like you to run a memory test
Memtest86 - Run for 7-8 passes - http://www.sevenforums.com/tutorials...memtest86.html

Once that is complete enable driver verifier

http://www.techsupportforum.com/foru...ed-473665.html

BSOD BUGCHECK SUMMARY

Code:

Built by: 7601.17640.amd64fre.win7sp1_gdr.110622-1506
Debug session time: Fri Jan 20 14:49:49.374 2012 (UTC - 5:00)
System Uptime: 0 days 0:00:59.233
Probably caused by : ntkrnlmp.exe ( nt!NtSetInformationProcess+c2 )
EXCEPTION_CODE: (NTSTATUS) 0xc000001d - {EXCEPTION} Illegal Instruction An attempt was made to execute an illegal instruction.
BUGCHECK_STR: 0x3B
PROCESS_NAME: svchost.exe
FAILURE_BUCKET_ID: X64_0x3B_nt!NtSetInformationProcess+c2
BiosReleaseDate = 10/28/2009
SystemManufacturer = Alienware
SystemProductName = Aurora
CPUID: "Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz"
MaxSpeed: 2670
CurrentSpeed: 2673
?????????????... Read more

3 more replies
Answer Match 65.1%

This is a older desktop, and when I was trying to install a USB bluetooth Kinivo BT 400 some how the Dell 655 Bluetooth Module popped up. I was told years ago from dell that this did not come w/ Bluetooth installed.

I called Kinivo support and said that probably my wireless card did have the Bluetooth built in.

Kinivo support suggested that I restart and hit the F2 key to get into the BIOS. I did that and am a loss where to find the Bluetooth to turn off.

I have used the Kinivo BT-400 for a few years no w/o a problem, but I just purchased a Bluetooth speaker and I must of did something wrong to get this 365 to show up and block my working Kinivo.

Hope I explained this so somebody would understand. I also was told by just disabling the 365 in the device manager would not turn it off

A:Alienware Aurora Win7 64bit (how do I turn off bluetooth in bios)

I looked at one Alienware Aurora on the Dell site. There is nothing in the BIOS, for that one that I looked at, for Bluetooth.
I would just disable it in the Device Manager.

Dell has a special support forum for Alienware users. You could also ask there. Be sure to state the specific Aurora model, as there are several.
Alienware Club - Dell Community

1 more replies
Answer Match 65.1%

Has anyone installed an m2 nvme SSD drive in an Aurora R4 via a m2 to pcie adapter and configured it to boot from it?
Hoping it is possible.
Thanks

Peter

A:(Redirected) Alienware Aurora R4 Samsung 950 NVME m2 pcie adapter

Hmm.. I think it would have to be available in BIOS/UEFI and i'm not sure the R4 would have that.  I would post here in the Alienware community to double check.

2 more replies
Answer Match 58.38%

Hello everyone,

I just purchased a new Alienware PC and it is just fantastic!

My only little problem is that I am having a weird issue I can't seem to find an answer for online.

When I boot my PC everything is working perfectly fine like it should. However whenever I access a website or program that makes the screen flash my mouse pointer dissapears. It will then reappear as little lines with no mouse pointer visible. It is a pain to navigate the computer this way until I go to a web page or program and the mouse pointer comes back.

Please let me know if there's anything I can do to correct this.

My setup is a Intel Core I7 930 QC (2.8 Ghz, 8MB Cache)

Windows 7 64 bit

Dual ATI Radeon HD 5670 with crossfire enabled.

The mouse that I am using is a Razer Deathadder and I connected to through HDMI to a 22inc Vizio 720P LCD television.
 

A:Mouse pointer issues with new Alienware Aurora Mouse

I'm not sure if this will help, go to your Mouse settings in Control Panel and turn on the "mouse trail" set it to the minimal that it will go to. Try and get the screen flash+mouse disappear to happen and see if it goes away.

This is however NOT a fix if it does work.. I use to play Battlefield 2 and half the time my mouse would disappear "behind the screen" as if there was no mouse there, but I could click things. Turning on the trail displayed the mouse but it was really aggravating and a little hard on the eyes..

Like I said it is not a fix. What do you mean though about a webpage/program that loads and makes the screen flash, like, it changes resolutions to accommodate for the program?

If it is that then I see this either being a video or monitor issue.. Maybe try changing the screen refresh rate, or the bit colour? I haven't had this issue in a long time so I can not play around with it to try.

One last thing you can try is, there is also a setting where the Mouse Pointer Trail is enabled that says to hide the mouse when you type, try disabling this and see if it helps? I doubt this will fix the issue but you never know.
 

3 more replies
Answer Match 53.76%

should I buy a dell xps or a alienware system....... please post if u have any comments...... THANK YOU
 

A:dell or alienware

cant really say because i always build my own systems from scratch it adds to the excitement and thrill of worrying if everything will work great when it is finished plus it gives me a better understanding of the bios settings
 

3 more replies
Answer Match 53.76%

why are alienwares so overpriced? how is an alienware with the same specs as a dell xps better and more expensive?
 

A:Alienware vs. Dell

Alienware actually makes sure all your parts will give you great performance.
Dell has this habit of saying "Intel inside" with a 3.0 ghz CPU and 512mb of RAM.
Then you buy the system and find out you can't upgrade anything in it and you bought a 3ghz Celeron with 512mb of PC133 RAM.
If your buying a DELL, look very closely at whats in it. There is almost always a huge bottleneck in the system that they expect you to overlook.

Alienware will always put great parts in their system, do a system burn in and then ship it. I have heard their Customer support is a little lacking though.
 

2 more replies
Answer Match 52.92%

Apparently I have a bad virus and I need to reformat my laptop. It came from Dell so I don't have a CD for it but I do have a Win7 CD I used for my desktop computer. I am unsure if I can use said CD for the laptop because of registration garbage and I wanted to find out and possibly get advise on the best way to go about doing the reformat before I wiped it clean.
Thanks.

A:Help reformatting Dell Alienware

If you have the Dell System restore ( not all Dells do ) you can use that and you will not need a install CD

Dell - Technical Support

If not, You can get a reinstallation guide specific to your Dell here ( You will have to change the operating system to match yours.

You can request a replacement instalation cd here:

1 more replies
Answer Match 52.92%

i want to buy my self a computer with a fast proseser, is relyalbe, so i found these two, plz could someone tell me which 1 is better, the dell xps 700 or the alienware for 899 pounds
 

A:wats better dell xps or alienware

wats better writing messages in gibberish or posting them in the wrong places
 

17 more replies
Answer Match 52.92%

Hey,I'm not familiar and comfortable with Windows 10 yet and I think windows 7 is still the best operating system for PC. Alienware 13 R2 came with pre-installed windows 10 . Here is my laptop model details : Spectell.com/dell-alienware-13-r2-z549933hin8-laptopI want to know is there any way to downgrade the OS from windows 10 to Windows 7 ???I'll be thankful to you if you guys could help me to find any way...Regards.

A:Dell Alienware 13 R2 Windows 10

KHAJOR,
Unfortunately, there are no Windows 7 drivers available for download for the Alienware 13 R2.

2 more replies
Answer Match 52.92%

ive bought an alienware around half an year ago and recently its starting to glitch every few seconds in games.
first i thought because i had alot of stuff installed all on one drive.. so i deleted some stuff up and shrinked disk C to make a second drive and now i install everything there if i need to. but i cant solve my main problem :/
i have an alienware m17x R3 please help.

A:having some trouble with my dell alienware

Can you be more specific? How exactly does it glitch?

5 more replies
Answer Match 52.5%

Hi guys,

Have been looking for this for quite a while. Alienware Club - Dell Community was not very helpful.

I'm looking now for a device to disable to disable touchpad on my alienware 13.

I've opened Device Manager, but haven't found anything that could disable my touchpad.

In settings I have no such option to disable touchpad.

Maybe anyone has some ideas on that matter?

Thanks,
Ivan.

More replies
Answer Match 52.5%

Hi, im trying to factory reset my computer because i'm just tired of having a full HD, and random software from years ago. Anyways, my current OS is Windows 7 and I have an Alienware m15x. Now i've read up on a few ways to restore this specific computer, however, I don't have the installation disc, AlienRespawn/DellDataSafe does not appear when press f8 at boot menu, and i don't have a factory system image to recover from apparently. So with this being said, Is there anyway to factory reset? I have a bootable USB drive with windows 7 recovery on it, but I need a system image or something I believe. I've also tried download AlienRespawn Win 7 patch off of alienware.com but when I try to use it it says "Change.MBR failed"
 

A:Factory Reset Help with alienware/dell

Hello,
My name is Krishna and I work for the Social Media and Community Team at Dell. The restore process can also be initiated within windows. Try the steps mentioned in the below link and see if it helps.
http://support.dell.com/support/top...c=us&cs=19&docid=439099&doclang=en&l=en&s=dhs
If this doesn't help, I would suggest you call our technical support department at (866) 287-6727.

Regards,
Dell-Kris K
 

1 more replies
Answer Match 52.5%

Which is your main brand of choice?
 

More replies
Answer Match 52.5%

Hi there,
I have an alienware 18 which runs the GTX880m
i recently got a  dell 3007wfp hc, and could not get the promised 2560x1600 resolution
I am using the HDMI port from the laptop with this hdmi cable: 
the audioquest pearl
www.audioquest.com/hdmi/pearl
and this adaptor
www.amazon.com/.../ref=od_aui_detailpages00
Both parts indicated that it is 4k ready.
I have also previously tired this cable
www.amazon.com/.../ref=oh_aui_detailpage_o00_s00
but also resulted in failure
I was able to make a customize tab in the NIVIDIA control pannel for 1920 x 1080 and the image got through, it is however very pixelated.
I was also able to create a tab for 2560x1600, while i hit the "test" button, the screen became black with only one line of pixels.
is there something i missed?

thanks so much!

More replies
Answer Match 52.5%

Which of these babies is the best buy?.... please consider performance, brand, model, tech support and warranty.

Configuration will be:
CPU:
Alienware 3.0GHz 800MHz FSB 1MB
Dell 2.13 GHz/2MB Cache/533MHz FSB
RAM: 1gb DDR
VIDEO: nVidia GO 6800 Ultra 256DDR
HD: 60GB 7200
NW: Intel Wireless
OPTICAL: 8x CD/DVD Burner (DVD+/-RW)





http://www.alienware.com/product_de...?SysCode=PC-LT-MJ12M-7700&SubCode=SKU-DEFAULTClick to expand...





http://www1.us.dell.com/content/products/productdetails.aspx/inspn_xps2?c=us&cs=19&l=en&s=dhs#tabtopClick to expand...

Thx in advance!
 

More replies
Answer Match 52.5%

hello everyone, i am a newbie here.

i got my alienware laptop less than 10 days ago, and it has been restarted itself randomly for 2 times, the first time i was using photoshop and the second time i was just reading some web pages...i have done some research and the problem appeared to be the hardware.

that will be so damn awesome if it's the hardware 'cause i'll have to go all the way 20km to get local dell store to fix it, and they will take weeks maybe just to get some parts...so i hope, it's a system bug.

alienware 15m (that 15inch model, can't remember what's called)
windows7 home prem,
8G ram
650G hard drive
ATI HD 5850 (some people said that it could be the graphics card drive's fault)
 

A:Why my dell alienware restarts itself randomly?

First, since this things only 10 days old it is certainly under warrenty. I'd be telling Dell straight up to fix this thing and a) either they send someone to get it or b) they give you an RMA # with them paying the shipping both ways.

If you don't want to take this path first then go to their website, find your exact laptop model and update their latest video drivers from there.
 

1 more replies
Answer Match 51.66%

I was just wondering if I am able to upgrade the HDD. There are currently 2 500GB HDD built into this machine. The information I have been looking for wasn't accurate enough for me to be sure that the HDDs are removable. And if so what type of HDD is it?
Example: SATA 2.5" .

A:Alienware M18X Dell Upgrade Question

Alienware M18X Hard Drive Replacement - Manual

HDD Replacement on the M18x

1 more replies
Answer Match 51.66%

Hello sevenforums,

I have an external mouse that works on other desktops/laptops but not on my alienware.
It shows up in device manager and lights up but wont work other than that.

I have already tried updating drivers

On another thread i saw this
-----------------------------------------------------
Have no idea if this will help in your situation but it sometimes solves weird USB problems.

Shut down laptop
Remove AC power cord
Remove the battery
Press and hold the laptop power button for 30 seconds
Reinstall the battery
Reconnect the AC power cord
Restart laptop
Reconnect and try USB mouse
---------------------------------------------------------

I tried that but it didn't work.

Could it be the mouse is just not compatible?

not sure what brand mouse it is but its a cheap one.

Here are some specs:
win 7 64 bit
8 gigs ram
i7 2.2 ghz cpu

A:external mouse not working on dell alienware

To confirm: this is a laptop? (Your MySystemSpecs say Desktop)

With the mouse connected, go into the mouse properties and go through all the options and see if you can find anything obvious there.
Start > Control Panel > Hardware and Sound > Devices & Printers > Mouse

On the Hardware Tab you should see the touchpad and the mouse. See if you can "Change Settings" with the mouse highlighted. This is to see if Windows is recognizing the mouse and it's driver.

One other WAG: try putting a plain sheet of paper under the mouse as a mousepad. Just a test.

1 more replies
Answer Match 51.66%

I purchased a dell alienware are 51 desktop computer I just got it delivered on Friday.  I want to add another Nvidia 980 gtx card to this but the SLI Bridge comes in 3 different sizes short, medium and long.  What I am trying to find out is what size bridge I need.  I cannot find a picture of hard drive so I do not know if the pci express ports are side by side or is there a regular pci port between them.
http://www.geforce.com/hardware/technology/sli/bridges

A:(Redirected) Dell Alienware Area 51 new model

Best to post this in the Alienware Owners Club Forum, here:http://en.community.dell.com/owners-club/alienware/default.aspx
Bev.

1 more replies
Answer Match 51.66%

Greetings
I have a VGA card.
nVidia GTX 260 SLI
There are some games you show a message to identify my video card is very old
And must be updated
While there is no update on the Nvidia site or Dell
Please advise and send another update to the card
Machine model is
Dell AlienWare M17x R1

More replies
Answer Match 51.24%

I started this thread at the beginning of November: Virus help

since then I haven't had the time to fix it but now I've been considering just reinstalling the OS but my problem is I'm not sure how to. The computer with the virus is an Alienware bought from Dell so it didn't come with a windows CD though I have one from building another computer. I was wondering if it was safe to use the other cd or will that not be able to register windows on two computers? And I'm not sure if the Alienware computers come with an internal CD for reinstallation or anything like that.
I would prefer to not have to deal with Dell since they are a hassle and I don't trust them to not charge me for services.

Thank you for your help.

More replies
Answer Match 51.24%

Hi,
Not sure if this is the right place for this topic, but I'm posting it here in the hope that someone at Dell will raise this with the right person.
I've been desperately trying to buy an Alienware Graphics Amplifier from www.dell.com.au, but when I search for the product and click on the search result (the link I get is accessories.dell.com/.../productdetail.aspx, I get a product not found error page.
I raised this with support through online chat, but they told me to contact the parts department via phone. I then spent over 20 minutes getting bounced around different departments before I gave up.
Has the Alienware Graphics Amplifier been discontinued or is this just a bug in the site?
Please help.

More replies
Answer Match 50.82%

Dear All,

When I try to use both the monitors ( the one in the laptop and ST2410 ) with extended display my computer crashes with bluescreen. This was never a problem when I was using ST2010 monitor. I could use both the screens. I have downloaded and installed the device driver too. I m using HDMI. I am using Windows 7 64bit Home Premium in Alienware M17X. My laptop has 2 NVIDIA Geforce GTX 260M graphics card. Does anyone know what the problem is?

Thanks in Advance,
Shoeson333

A:Dell ST2410 monitor makes my Alienware M17X crash

The only difference is the monitor? Same pc, same operating system?

2 more replies
Answer Match 50.82%

If I wanted to keep my current home computer as my main server & be able to access it remotely via laptop any where in the world if I'm away for whatever reason.

What kind of laptop would be best?

My business is websites, so I almost automatically jump to an apple since its pushed more for the graphics/artists

But I also like the dells & alienwares.

I'd also like them to talk wirelessly/via bluetooth while they are in the same room together to "sync" up.

I'm just not sure which way to go.

I wont be gaming, just heaving internet surfing & web design/work.

I run Win7 64 & Ubuntu 64 (though I havent used it as much since win7 64 came out)

A:Apple, Alienware/dell for laptop to acces remote server

Apple is also pushed strongly in the professional audio sector.

That doesn't necessarily mean it is better for a professional or studio to use, however.

Any laptop will do. Look into Dameware software. It's great.

1 more replies
Answer Match 45.36%

I've owned this laptop for quite a while and had been using Webcam Central to control the Integrated Webcam on my Alienware M17x R4.   I never had any issues using Windows 7, 8, 8.1, or even Windows 10 until my system updated on 8/20/2016 with a scheduled Windows 10 update.
After the windows 10 update my system restarted and the next time I went to use my webcam I noticed that I couldn't control the pan / zoom / or tilt or alter any of the settings in webcam central.  If I attempt to change anything it automatically changes back instantly.  For example of I move the slider to zoom, or attempt to change the pan, it auto goes back to where it was and will not allow me to change the settings.
I also notice that my mouse pointer flickers over the webcam central GUI, meaning, there seems to be some issue with the GUI after the windows 10 update, I assume is also whats causing the settings not to be changed.
I have tried uninstalling both the drivers and software and reinstalling to no avail, same problem is present after reinstallation of both drivers and the webcam central software.
Wondering if anyone else has run into this and whether there was some type of resolution.
I was able to get the pan / zoom / tilt working with 3rd party webcam software, however I would prefer to go back to using webcam central.

More replies
Answer Match 35.7%

Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\Explorer.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\ewido\security suite\ewidoctrl.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\ewido\security suite\ewidoguard.exeC:\Program Files\AIM\aim.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\Program Files\BitComet\BitComet.exeC:\Program Files\MSI\DigiCell\DigiCell.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\WINDOWS\system32\nvsvc32.exeC:\Progra... Read more

A:Help with AUrora pop ups

Hello bratchny and welcome to the BC forums. It appears that your log was not completly posted. We need a complete HijackThis (HJT) log file to be able to analyze what is happening on your computer. If you do not have a copy of HijackThis or do not have the latest version (1.99.1) then download it from here: HijackThis_sfx.exe Double-click on the file you just downloaded and click on the UnZip button to install the program. It will be installed to the C:\Program Files\HijackThis\ folder by default.Start HijackThis and click the Do a system scan and save a log button to perform a scan and create a log file. When the scan is complete, Notepad will open up with the log file in it. While in Notepad, press Ctrl-A to select all text and then Ctrl-C to copy the text to the clipboard.POST the log in this thread using the Add Reply button. Click in the data-entry window and press Ctrl-V to paste the log into the window. Add any other comments which you believe might be helpful in our analysis. and click the Add Reply button.I will review your log when it comes in.DO NOT MAKE ANY CHANGES OR CLICK "FIX CHECKED" UNTIL I CHECK THE LOG, AS SOME OF THE FILES ARE LEGIT AND VITAL TO THE FUNCTION OF YOUR COMPUTEROT

17 more replies
Answer Match 35.7%
Q: Aurora

I have these pop-up ads that I can't get rid of. This is my HijackThis log:Logfile of HijackThis v1.99.1Scan saved at 3:54:59 PM, on 4/29/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Java\j2re1.4.2_07\bin\jusched.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\system32\hkcmd.exeC:\Program Files\Java\j2re1.4.2_07\bin\jucheck.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\WINDOWS\AGRSMMSG.exeC:\WINDOWS\system32\bcmwltry.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\support.com\bin\tgcmd.exeC:\WINDOWS\ALCXMNTR.EXEC:\WINDOWS\system32\igfxtray.exeC:\Program Files\Symantec\LiveUpdate\ALUNOTIFY.EXEC:\Program Files\AIM\aim.exec:\windows\system32\uxgrdlx.exeC:\Program Files\Compaq Connections\1940576\Program\BackWeb-1940576.exeC:\Program Files\Microsoft Office\Offi... Read more

A:Aurora

Hi there,Nice collection you have. I suggest you print out next instructions, because you have to perform next actions in safe mde and this page wouldn't be available then.It's also very important you perform everything in the right order.* Please download ewido security suite here: http://www.ewido.net/en/download/Install and update it. Don't let it scan yet!!* Please set your system to show all files; please see here if you're unsure how to do this.* Reboot into Safe Mode`: ?To get into the Safe mode as the computer is booting press and hold your "F8 Key". Use your arrow keys to move to "Safe Mode" and press your Enter key.* Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=F2 - REG:system.ini: Shell=Explorer.exe C:\WINDO... Read more

4 more replies
Answer Match 35.7%
Q: Aurora?

hay iv got this bloodly web page "http://195.95.218.172/index.php that i cant get rid of as wel as Aurora pop ups please help

heres my hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 11:05:48 PM, on 17/06/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\PackethSvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\windows\system32\hQTs.exe
C:\windows\system32\hQTs.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Documents and Settings\David\Local Settings\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe
... Read more

A:Aurora?

hi, welcome to TSG.

Download the Nail/aurora fix
http://www.noidea.us/easyfile/index.php?folder=2


* Download the trial version of Ewido Security Suite here
http://www.ewido.net/en/

* Install ewido.
* During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
* Launch ewido
* It will prompt you to update click the OK button and it will go to the main screen
* On the left side of the main screen click update
* Click on Start and let it update.
* DO NOT run a scan yet. You will do that later in safe mode.
* Click here for info on how to boot to safe mode if you don't already know
how.
How to boot to safe mode

http://service1.symantec.com/SUPPOR...2001052409420406?OpenDocument&src=sec_doc_nam
* Now copy these instructions to notepad and save them to your desktop. You
will need them to refer to in safe mode.
* Restart your computer into safe mode now. Perform the following steps in
safe mode:
* Once in Safe Mode, double-click on Nailfix.cmd. Your desktop and icons will
disappear and reappear, and a window should open and close very quickly ---
this is normal.
* Now run Ewido:

* Click on scanner
* Put a check by the following before you scan:
o Binder
o Crypter
o Archives
* Click the Start Scan button to start the scan.
* During the scan it will prompt you to clean files, click OK
* When the scan is finished, look at the bottom of the screen and click ... Read more

3 more replies
Answer Match 35.7%

i have aurora pop ups appearin after i have purchased a blocker from PARETOLOGIC that guarented to remove aurora from my system. a family member unknowingly allowed aurora onto my system and i cant get rid of it , any suggestion or help ?

thanks james
 

A:aurora pop ups

Hi..and welcome..
Aurora uninstaller...http://www.mypctuneup.com/evaluate.php
Run a HJT log....www.thespykiller.co.uk/files/HJTsetup.exe
Install in C:\ program file...let it scan..save logfile to notepad>edit>select all>edit>copy>paste on your thread...
 

1 more replies
Answer Match 35.7%

I'm having a heck of a time trying to get rid of this...Not too used to not being able to solve this stuff on my own.

I've run ad aware, spy bot, & microsoft's new one. It has said it's been removed, and then it always reappears.

Can someone take a look at this and point me in the right direction?

I appreciate it!

____________________

Logfile of HijackThis v1.99.1
Scan saved at 4:29:22 PM, on 4/25/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$ACT7\Binn\sqlservr.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Creative\SBAudigy2\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2\DVDAudio\CTDVDDet.... Read more

A:Aurora?? Help!

Hi....

To remove the startup and delete then Nail.exe file, go to Start > Run and type: cmd
and hit Enter. When a command prompt opens, type:
nail.exe /FullRemove
and hit Enter and the Reboot.

------------------------------------------------------

For the second half of the fix go to Start > Run and type services.msc and OK. Look for the below service:

O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe

When you find it, stop it if it is running, doubleclick on it and change the startup type to disabled.

Next, download SvcProc.reg and ZepMon.reg
to your Desktop. Doubleclick on one at a time to merge it with your Registry and boot into Safe Mode (restart your PC and tap F8 as it restarts)and run Hijack This again. Check the below entry and click on Fix Checked.

O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe

Still in Safe Mode, make sure that you can view hidden files and
folders (and System Files)and run a search for svcproc.exe and delete it. Reboot and post a new HJT log.

4 more replies
Answer Match 35.7%

I know that I have an issue with Aurora and now have other popups that I have not been able to get rid of even deleting in Safe Mode (followed directions from Symantec - no luck) and running HiJackThis and trying to delete through there. Please help. Let me know if you need any additional information. Here's my HiJackThis log. Thanks.

Logfile of HijackThis v1.99.1
Scan saved at 11:40:07 PM, on 9/18/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Norton Internet Security\IAMAPP.EXE
C:\WINDOWS\System32\hphmon03.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton Internet Security\SymProxySvc.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Norton Internet Security\NISSERV.EXE
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\HPHipm09.exe
C:\WINDOWS\system32\ksrtmm.exe
C:\... Read more

A:Please Help. Aurora and other pop-ups

7 more replies
Answer Match 35.7%
Q: aurora

i have recently been experiancing a lot of pop ups. i ran hijack this and here is the log...
Logfile of HijackThis v1.99.1
Scan saved at 5:30:04 PM, on 7/4/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\hphmon05.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\MMDiag.exe
C:\Program Files\MSN Apps\Updater\01.03.0000.1005\en-us\msnappau.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
c:\windows\system32\sjzvaxi.exe
C:\Program Files\Webshots\webshots.scr
C:\Program Files\iPod\bin\iPodServi... Read more

A:aurora

13 more replies
Answer Match 35.7%

I followed the instructions and have run hijack this. Here is what it came up with:
Logfile of HijackThis v1.99.1
Scan saved at 2:50:50 PM, on 7/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\STOPzilla!\szntsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Yahoo!\browser\ybrwicon.exe
C:\Program Files\STOPzilla!\Stopzilla.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\h... Read more

A:help with Aurora pop ups

Add remove programs remove bear share the likely source of infection also newdotnet if not there

http://www.newdotnet.com/removal.html

DL http://www.cexx.org/lspfix.htm

Launch the LSP application, and click the "I know what I'm doing" checkbox.

Then click Finish.
Run this - http://www.mypctuneup.com/evaluate.php

Go here http://www.thespykiller.co.uk/ and click on Downloads to get the peper trojan uninstaller.

Run the peper fix - Just click on the uninst.exe and let it run. When it is finished it will just close. There will be no dialogue. Also you must be connected to the internet for the uninstaller to be effective.
Fix these with HJT

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe

O2 - BHO: (no name) - {1B8D4572-E745-5AC6-8024-655505A07B4C} - C:\WINDOWS\System32\bwbrfykz.dll (file missing)

O2 - BHO: TChkBHO Class - {8E33BBB6-8BE3-47BF-A2BE-ACC7307D3874} - (no file)

O2 - BHO: (no name) - {8F095DCC-0AE0-41C4-923B-D34D48210703} - (no file)

O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)

O3 - Toolbar: SuperBar - {9D8C0400-7254-4E64-9559-0B738AA1D3A8} - C:\Program Files\SUPERBAR\SUPERBAR1.dll (file missing)

O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause

O4 - HKLM\..\Run: [[email protected]] C:\WINDOWS\System32\PhkPVfC1.exe

O4 - HKCU\..\Run: [Yahoo! Pager] 1

O16 - DPF: {28F00B0F-DC4E-11D3-ABEC-005004A44EEB} - http://content.hiwiren... Read more

1 more replies
Answer Match 35.7%

I just can't seem to get rid of this *******!

What I've done:
1) Ad Aware
2) Spybot
3) Microsoft Antispyware
4) Ewido

Here's my latest Hijack This log:
Logfile of HijackThis v1.99.1
Scan saved at 9:31:36 PM, on 7/13/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\1XConfig.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
c:\windows\system32\vfupckc.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AIM\aim.e... Read more

A:Aurora Help Please

8 more replies
Answer Match 35.7%

I have tried everything to get rid of Aurora, even ran all the Anti-Spyware programs (Spybot, Microsoft Antispyware, CCleaner) under Safe Mode but that still hasn't kicked it.

And no matter what I can't get rid of websearch.drsnsrch.com, in HJT I check them all and click "Fix checked" but they eventually come back!

Please help if you can, this is just becoming ridiculous.

Thanks in advance!

Logfile of HijackThis v1.99.1
Scan saved at 4:37:50 PM, on 6/1/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmgr.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Dell AIO Printer A920\dlbkbmon.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\eFax Messenger Plus 3.2\J2GDllCmd.exe
C:\Program Files\eFax Messenger Plus 3.2\J2GTray.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\DELL\drivers\FAH502-Console.e... Read more

A:Aurora will be the end of me!!!!!!!!!

JennyH,

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.



Download Ewido Security Suite at http://www.ewido.net/en/download/ and install it. Update to the newest definitions. Do NOT run it yet.


Download nailfix at http://users.pandora.be/bluepatchy/nailfix.zip (for Windows XP)
Unzip it to the desktop but do NOT run it yet.


Reboot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.

Once in Safe Mode, please double-click on nailfix.bat. Your desktop and icons will disappear and reappear, and a window should open and close very quickly --- this is normal.

Next run a full scan in Ewido. Post the log from the Ewido scan here.

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O4 - HKLM\..\Run: [patzawh] c:\windows\system32\znwolr.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe


Close all open windows except for HijackThis and click Fix Checked.

Restar... Read more

14 more replies
Answer Match 35.7%
Q: Aurora

Well, my computer was infected by mirindaspg.exe and Aurora (not sure if they're the same thing). I tried to follow some of the directions on this forum but couldn't remove everything. At least now when I surf I don't get a virus popup every 5 seconds... however the Aurora browser still shows up and throws a bunch of popups at me. Would really appreciate it if somebody could help out. Here is my hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 1:29:58 AM, on 8/31/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\WINDOWS\System32\gltqhr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Toshiba\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\System32\TFNF5.exe
C:\WINDOWS\System32\TPWRTRAY.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\WINDOWS\System32\spool\DRIVER... Read more

A:Aurora

hi, welcome to TSG.

go to add/remove and uninstall Media Gateway, Viewpoint Toolbar, SurfSideKick 3, Viewpoint and PLook look for their folders in C:\program files and delete them.
Download the pocket killbox

http://www.bleepingcomputer.com/files/killbox.php

Download the Nail/aurora fix
http://www.noidea.us/easyfile/index.php?folder=2


* Download the trial version of Ewido Security Suite here
http://www.ewido.net/en/

* Install ewido.
* During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
* Launch ewido
* It will prompt you to update click the OK button and it will go to the main screen
* On the left side of the main screen click update
* Click on Start and let it update.
* DO NOT run a scan yet. You will do that later in safe mode.


*Download Cleanup from Here

http://www.stevengould.org/software/cleanup/download.html

* A window will open and choose SAVE, then DESKTOP as the destination.
* On your Desktop, click on Cleanup40.exe icon.
* Then, click RUN and place a checkmark beside "I Agree"
* Then click NEXT followed by START and OK.
* A window will appear with many choices, keep all the defaults as set when the Slide Bar to the left is set to Standard Quality.
* Click OK
* DO NOT RUN IT YET


* Click here for info on how to boot to safe mode if you don't already know
how.
How to boot to safe mode

http://service1.symantec.com/SUPPOR.... Read more

2 more replies
Answer Match 35.7%

Here is my HJT log.

Logfile of HijackThis v1.99.1
Scan saved at 11:11:07 AM, on 7/9/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\System32\RUNDLL32.exe
C:\WINDOWS\System32\nsvsvc\nsvsvc.exe
C:\WINDOWS\System32\vidctrl\vidctrl.exe
C:\WINDOWS\System32\kukuur.exe
C:\WINDOWS\cskware.exe
c:\windows\system32\tlltbrc.exe
C:\Program Files\SurfAccuracy\SAcc.exe
C:\Program Files\BullsEye Network\bin\bargains.exe
C:\WINDOWS\System32\tlnrss.exe
C:\WINDOWS\System32\tlnrss.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Intel\ASF Agent\ASFAgent.exe
C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
C:\Program Files\Dell\OpenManage\Client\Iap.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\McAfee\McAfee VirusScan\Vshwin32.exe
C:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe
C:\Program Files\McAfee\McAfee VirusScan\Webscanx.exe
C:\Program Files\Common Files\Network Associates\McShield\Mcshield.exe
C:\Program Files\... Read more

A:Aurora and More, Please Help!!!!!!!

First you need to unzip (extract) Hijack This and move it to a permanent folder. It will not function properly when run from the zip folder or the Temp folder.

You need to create a new folder in My Documents and name it Hijack This. Right click on the HijackThis.zip file and choose "Extract all" and extract it to the Hijack This folder you created. That way it can create and restore backups if needed. HJT will store the backups in the same location that it is run from.
You have several different infections so we will have to do this one step at a time. Do this first please:

Click here to download L2mfix.

Save the file to your desktop and double click l2mfix.exe. Read and Accept the agreement. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so!.
 

3 more replies
Answer Match 35.7%

Hey All,I, too, had the Aurora Trojan. I ran repeated scans and even spent over an hour on the phone with two different techs at Microsoft, who appeared equally as stumped. Nothing they suggested helped; Aurora was popping up several ads at a time.I finally brought my computer -- a four-year-old Compac Presario laptop -- over to a good friend; a real computer wiz, who suggested that the only sure way to get rid of Aurora was to reinstall my Windows XP operating system.Fortunately, I still had my installation CD's. First, however, I had to back up everything essential in my Documents, as well as some key operating systems. We installed the three XP CD's. Then reinstalled Norton Internet Security. Next, I got on line at Microsoft and spent 3-4 hours receiving and installing Windows Updates. This, of course, was very important because the CD's are over four years old.After that was done, I deframented my computer (as my friend suggested) and ran a full system Norton scan. When I got back on line, *ta-daaa!* no more Aurora. Of course then I had to transfer all my essential documents and programs back onto my hard drive, which took additional time. Small price to pay, though, for all the aggravation that Aurora was causing.It's been four days now since I did all this, and not *one* Auroroa pop-up. Hope this helps someone in the same boat.Bil Sullivanwww.WhoAreYou.wsMod Edit: Email address edited out to protect against SpamBots

A:Aurora Fix

Though I appreciate your heads up, what you say is not entirely accurate. It is true that the infection is very difficult to remove but the malware removal community has found ways of removing it. Ewido security suite does a good job removing the majority of the infection. Then using killbox you can generally remove the last piece.

While reinstalling the OS will definitely get rid of any malware problems, it is possible to remove aurora without reinstalling.

8 more replies
Answer Match 35.7%
Q: Aurora

A friend of mine (hah), stupidly, ran an unidentified .com file sent to him over AIM.I took a look at the file in a hex editor, ran a google search, and it seems to be this: http://www.sarc.com/avcenter/venc/data/w32...pread.worm.htmlYet, Norton never detected it. That said, I ran multiple full Spybot, Ad-Aware, and Microsoft AntiSpyware scans. It's in better shape than before, but Aurora's still appearing, and leaving AIM on overnight (two different accounts open with isolated buddy lists), it's still sending the worm.Here's my HijackThis log: Logfile of HijackThis v1.99.1Scan saved at 3:55:06 PM, on 5/18/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.exeC:\WINDOWS\msaccrt.exeC:\Program Files\D-Tools... Read more

A:Aurora

Hello Tain and welcome to the BC forums. After reviewing your log I see a few items that require our attention. Please print these directions and then proceed with the following steps in order.Step #1Download and install ewido security suite. Update the program and then close it. Do not run it yet.Step #2Download nailfix.zip and unzip it to its own folder.Step #3Start in Safe Mode Using the F8 method:Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until the boot menu appears.Use the arrow keys to select the Safe Mode menu item.Press the Enter key.Step #4Navigate to the folder you unzipped nailfix.zip into and double-click on nailfix.cmd. Your desktop and icons will disappear and reappear, and a window should open and close very quickly --- this is normal.Step #5Start ewido and click on the Scanner button. On the Scanner page click on My Computer and then click the Start button to begin the scan. Let it run to completion and fix anything that it finds.Step #6Start HijackThis and click the Scan button to perform a scan. Look for the following items and click in the checkbox in front of each item to select it:F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exeO2 - BHO: (no name) - {82315A18-6CFB-44a7-BDFD-90E36537C252} - (no file)O3 - Toolbar: (no name) - {2CDE1A7D-A478-4291-BF31-E1B4C16F92EB} - (no file)O4 - HKLM\..\Run: [Qa7i9H.exe] c:\windows\system32\Qa7i9H.exeO4 - HKLM\..\Run: [tgdpkx] c:\... Read more

1 more replies
Answer Match 35.7%

Yep. Aurora here is my HJT log.

Logfile of HijackThis v1.98.2
Scan saved at 2:12:40 AM, on 7/17/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
C:\WINDOWS\system32\ctfmon.exe
c:\windows\system32\zwuobb.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HJK\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://we... Read more

A:Aurora pop ups, HJT log

Hi there and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem a.s.a.p

Please be patient with me during this time.

We also suggest that you Subscribe to this thread to be notified of fixes as soon as they are posted by our Team. You can do this simply by clicking the "Thread Tools" button located in the original thread line and selecting "Subscribe to this Thread".


Alba

9 more replies
Answer Match 35.7%

I ran Trend micro house call and ad aware before I ran HijackThis. Then i ran Hijackthis Analyzer as suggested in one of the threads. Here is the result from that. Please help me get rid of these pop-ups.

====================================================================
Log was analyzed using KRC HijackThis Analyzer - Updated on 6/3/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.99.1
Scan saved at 5:46:00 PM, on 7/1/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
c:\windows\system32\iftqtw.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gmail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://websearch.drsnsrch.com/sidesearch.cgi?id=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = websearch.drsnsrch.com/q.cgi?q=
R1 - HKCU\Software\Microsoft\Internet Explore... Read more

A:Aurora Pop-ups

Please print out the instructions here (or save it in Notepad) so that you can follow along more easily.


Downloads
Download Ewido Security Suite at http://www.ewido.net/en/download/ and install it. Update to the newest definitions. If you have trouble updating, you may do it manually at http://www.ewido.net/en/download/updates/ Do NOT the Ewido scan yet.

Please download Nailfix at http://www.noidea.us/easyfile/file.p...50515010747824 Unzip it to the desktop but do NOT run it yet.


Boot Into Safe Mode
Reboot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.


Run Downloaded Program #1
Once in Safe Mode, please double-click on nailfix.cmd. Your desktop and icons will disappear and reappear, and a window should open and close very quickly --- this is normal.


Run Downloaded Program #2
Next run a full scan in Ewido. Save the log from the Ewido scan so that you can post it later.


Potential Uninstallations
Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs:
IEPlugin Software
WeatherBug - it's adware. If you didn't install this yourself, uninstall it. If you Like i can provide you with a much more reputable Weather System.



Start HijackThis Fix
Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (m... Read more

3 more replies
Answer Match 35.7%

Pop ups from Aurora every few minutes. I have run Lavasoft and Norton Anti virus (both upmto date)...but still got problem.

Also do i have to have a search the web window on my address bar?? I much prefer google

Here is my
Logfile of HijackThis v1.98.2
Scan saved at 22:25:33, on 22/06/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\PROGRA~1\NORTON~3\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Idjlce\Bknfj.exe
C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
C:\Program Files\HP\HP Software Upd... Read more

A:aurora pop ups

Greetings, and welcome to TSF!

I wuill be moving your thread to the Help Forum.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that 'Display the contents of system folders' is checked. If you have Windows XP, the search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that 'Search system folders', 'Search hidden files and folders', and 'Search subfolders' are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Reboot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work. Make sure to close any open browsers. Go into HijackThis->Config->Misc. Tool... Read more

1 more replies
Answer Match 35.7%

Hello,

We are plagued with the very nasty Aurora trojan (children use this computer and this is a real problem). Also CoolWebSearch and About have popped up.

I have ran CWShredder and does not find any variations of CWS.
I use Grisoft's AVG, Spybot Seach and Destroy and Adaware. All have found CWS, Aurora and About.


Here is our Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 6:41:50 PM, on 8/23/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.exe
c:\windows\system32\wluhote.exe
C:\WINDOWS\System32\wuauclt.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Yahoo!\browser\ybrwicon.exe
C:\Program Files\2Wire\2PortalMon.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files... Read more

A:Aurora, About and CWS

Welcome to TSF.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Please download Ewido Security Suite at http://www.ewido.net/en/download/.

1. Install Ewido Security Suite.
2. When installing, under 'Additional Options' uncheck:
* Install background guard
* Install scan via context menu
3. Launch Ewido, there should be an icon on your desktop, double click it.
4. The program will now open to the main screen.
5. When you run Ewido for the first time, you will get a warning 'Database could not be found!'. Click OK. We will fix this in a moment.
6. You will need to update Ewido to the latest definition files.
* On the left hand side of the main screen click update.
* Then click on Start Update.
7. The update will start and a progress bar will show the updates being installed. The status bar at the bottom will display 'Update successful'.
8. Exit Ewido. DO NOT scan yet.

If you are having problems with the updater, you can go to http://www.ewido.net/en/download/updates/ to update manually.

Download Nailfix Utility at http://www.noidea.us/easyfile/file.p...50711214630636 Save it to your desktop. Do NOT run it yet.

Download dsrfix.zip http://www.atribune.org/downloads/dsrfix.zip and save it to... Read more

19 more replies
Answer Match 35.7%

Pop ups from Aurora every few minutes. I have run Lavasoft and Norton Anti virus (both upmto date)...but still got problem.

Also do i have to have a search the web window on my address bar?? I much prefer google

Here is my
Logfile of HijackThis v1.98.2
Scan saved at 22:25:33, on 22/06/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\PROGRA~1\NORTON~3\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Idjlce\Bknfj.exe
C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
C:\Program Files\HP\HP Software Upd... Read more

A:aurora pop ups

Hello alanp119, Welcome back to TSF

Please print out the instructions here (or save it in Notepad) so that you can follow along more easily.

You have an outdated version of HijackThis. Download the newest version at http://www.greyknight17.com/spy/HijackThis.exe and run it.

Before you give us a new log here, if we gave you instructions for a fix, please do the fixes first and then post the new log with this updated version.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the HijackThis log here.

Download Ewido Security Suite at http://www.ewido.net/en/download/ and install it. Update to the newest definitions. If you have trouble updating, you may do it manually at http://www.ewido.net/en/download/updates/ Do NOT the Ewido scan yet.

Please download Nailfix at http://www.noidea.us/easyfile/file.p...50515010747824 Unzip it to the desktop but do NOT run it yet.

Download KillBox http://www.greyknight17.com/spy/KillBox.exe.

Download ProcessExplorer


Run Process Explorer and find hvugutd.exe in the list of Processes.
Select hvugutd.exe and click Process > Suspend.
Leave Process Explorer running with the process suspended.

Run KillBox and check the box that says 'End Explorer Shell While Killing File'. Next click on 'Delete on Reboot'. Copy and paste the following into KillBox (hitting the X button

c:\window... Read more

1 more replies
Answer Match 35.7%

Hi there,

I am new to this forum and was hoping you could please help me with a nasty little problem I am having. I am getting Aurora pop-ups all the time. It seems to have wreaked havoc on my comp as I am having trouble with Norton, Ad-aware etc freezing. Please find below details of my Hijack This log. Hope you can help. Many thanks in advance.

Kazz

Logfile of HijackThis v1.99.1
Scan saved at 10:30:48 PM, on 23/06/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
c:\windows\system32\xvwyfp.exe
C:\WINDOWS\essspk.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WI... Read more

A:Aurora Pop-ups please help

Hi and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem a.s.a.p

Please be patient with me during this time.

10 more replies
Answer Match 35.7%

Hello there. I appreciate your site and hope you can help with my pest. Aurora spyware. I have posted my log from HJT analyzer below and will look forward to hearing from you.
Thanks a ton!

====================================================================
Log was analyzed using KRC HijackThis Analyzer - Updated on 6/3/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\program files\mcafee.com\agent\mcagent.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\PROGRA~1\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROG... Read more

A:Aurora - HJT log

Please print out the instructions here (or save it in Notepad) so that you can follow along more easily.

Download Ewido Security Suite at http://www.ewido.net/en/download/ and install it. Update to the newest definitions. If you have trouble updating, you may do it manually at http://www.ewido.net/en/download/updates/ Do NOT the Ewido scan yet.

Please download Nailfix at http://www.noidea.us/easyfile/file.p...50515010747824 Unzip it to the desktop but do NOT run it yet.

Go to Start->Run and type in services.msc and hit OK. Then look for System Startup Service (SvcProc) and double click on it. Click on the Stop button and under Startup type, choose Disabled.

The Temp folders should be cleaned out periodically as installation programs and hijack programs leave a lot of junk there. Download CleanUp! http://cleanup.stevengould.org/ (Alternate Link if main link don't work - http://www.greyknight17.com/spy/CleanUp.exe ) and install it. Run CleanUp! and click on CleanUp! button. Once it's done, you may click the Close button. When asked if you want to logoff, choose Yes.

Reboot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.

Once in Safe Mode, please double-click on nailfix.cmd. Your desktop and icons will disappear and reappear, and a window should open and close very quickly --- this is normal.

Next run a full scan i... Read more

6 more replies
Answer Match 35.7%

Here's my log:

Logfile of HijackThis v1.99.1
Scan saved at 2:13:29 PM, on 6/14/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\hhkssvc.exe
C:\PROGRA~1\IBM\CLIENT~1\cwbbs.exe
C:\PROGRA~1\IBM\CLIENT~1\cwbntred.exe
C:\Program Files\IBM\Client Access\CWBPROVD.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\IBM\Client Access\cwbuitsk.exe
C:\Program Files\IBM\Client Access\CWBSVD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPClient.exe
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Visual Networ... Read more

A:Pop Ups and Aurora Help

Hello Ychiu21,

Please print out or copy this page to Notepad since you will not have any of browsers open while you are fixing this. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. Again, you should not have any open browsers when you are following the procedures below.

Before we begin, let's move HiJackThis to your hard drive. With HiJackThis in it's current location, we'll lose both the program and the backups it creates. These backups are important in case we need to restore any 'fixed' entry(s) later.

To do this:
Click My Computer, then C:\
Right click in the right-hand panel.
In the menu that opens, click New>Folder.
That will create a folder named New Folder.
Rename it"HJT".

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that 'Display the contents of system folders' is checked. If you have Windows XP, the search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that 'Search system folders', 'Search hidden files and folders', and 'Search subfolders' are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a pr... Read more

8 more replies
Answer Match 35.7%

I am trying to clean a computer loaded with aurora pop ups - it is a fairly new Win xp laptop - here is my first hjt log -

Logfile of HijackThis v1.99.1
Scan saved at 7:47:39 AM, on 6/13/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\windows\system32\rvaatrq.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\VERIZO~1\SUPPOR~1\SMARTB~1\MotiveSB.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\dnjjdll.exe
C:\WINDOWS\gxlpenc.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Creata Mail\JMSrvr.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\Program Files\Verizon Online\Support Center\bin\mpbtn.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\... Read more

A:Aurora - please help

Hi and Welcome to TSF!

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst. I will be back with a fix for your problem as soon as possible. Please be patient with me during this time.

We recommend that you subscribe to this thread so you'll be notified as soon as we post your fix. To do this, please scroll up to the 1st post of this thread. Click Thread Tools and then Subscribe to this thread; on the next page, make sure "Instant notification by email" is selected, then click Add subscription.

I suggest that you stop using Interent Explorer until we've fully disinfected your machine. Please download & use an alternative browser like Firefox.

Thanks.

4 more replies
Answer Match 35.7%

hi guys, i need some help getting rid of this aurora thing...it just won't die. here's a log of hijackthis, thanks in advance for the help:

Logfile of HijackThis v1.99.0
Scan saved at 10:49:27 PM, on 6/3/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Kerberos\leash32.exe
C:\Program Files\Kerberos\krbcc32s.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Ryan Young\Desktop\downloads\hijack\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exe
O2 - BHO: Band Class - {01F44A8A-8C97-4325-A378-76E68DC4AB2E} - C:\WINDOWS\systb.dll (file missing)
O3 - Toolbar:... Read more

A:aurora help

Hi and Welcome to TSF!

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst. I will be back with a fix for your problem as soon as possible.

Please be patient with me during this time.

We recommend that you subscribe to this thread so you'll be notified as soon as we post your fix. To do this, please scroll up to the 1st post of this thread. Click Thread Tools and then Subscribe to this thread; on the next page, make sure "Instant notification by email" is selected, then click Add subscription.

It is very important that you get all of the critical updates for your Operating System and Internet Explorer. I notice your browser is not up to date and this makes you susceptible to attacks by Trojans and viruses. Please go to Windows Update website and download all the critical updates to help prevent further re-infection.

I suggest that you stop using Interent Explorer until we've fully disinfected your machine. Please download & use an alternative browser like Firefox.

Thanks.

17 more replies
Answer Match 35.7%
Q: aurora

Hi, I'm new at this...

My computer has this Aurora virus. It keeps getting pop ups titled Aurora- part of the ABI network. They're different adds for things. My pc has windows XP, and from what I've heard this thing is impossible to get rid of.

If anybody can help I'd really appreciate it!!

A:aurora

Download HiJackThis - this program will help us determine if there are any spyware/malware on your computer. Create a folder at C:\HJT and move HiJackThis.exe there. Double click on the program to run it.

1. If it gives you an intro screen, just choose [Do a system scan and save a logfile].
2. If you don't get the intro screen, just hit [Scan] and then click on [Save log].
3. Post the HiJackThis.log file here. Do not fix anything in HiJackThis since they may be harmless.

3 more replies
Answer Match 35.7%

Logfile of HijackThis v1.99.1Scan saved at 11:44:19 AM, on 3/13/2006Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINNT\system32\spoolsv.exeC:\WINNT\system32\svchost.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\WINNT\system32\regsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\svchost.exeC:\WINNT\Explorer.EXEC:\WINNT\system32\igfxtray.exeC:\Program Files\Free Surfer\fs20.exeC:\Program Files\Microsoft AntiSpyware\gcasServ.exeC:\Program Files\Common Files\Syma... Read more

A:Help I Have Aurora

Hello and welcome to the forum. Sorry about the wait, the logs are many and the volunteer are few. If you are still waiting for help, follow these instructions:1) Tell me what this is: C:\PAYCLOCK\msgcheck.exe If you don't know use this free online scan to find out and post that information for me:http://virusscan.jotti.org/2) ewido scan: Please download Ewido Security Suite it is a trial version of the program.Install ewido security suiteLaunch ewido, there should be an icon on your desktop double-click it.The program will now go to the main screenYou will need to update ewido to the latest definition files.On the left hand side of the main screen click updateThen click on Start UpdateThe update will start and a progress bar will show the updates being installed.If you are having problems with the updater, you can use this link to manually update Ewido.Ewido manual updatesOnce the updates are installed do the following:Click on scannerClick on Complete System Scan and the scan will begin.NOTE: During some scans with ewido it is finding cases of false positives.**You will need to step through the process of cleaning files one-by-one.If ewido detects a file you KNOW to be legitimate, select none as the action.DO NOT select "Perform action on all infections"If you are unsure of any entry found select none for now.Once the scan has completed, there will be a button located on the bottom of the screen named Save reportClick Save report.Save the report .txt... Read more

2 more replies
Answer Match 35.7%
Q: Aurora

Here is my log file, please help!!ogfile of HijackThis v1.99.1Scan saved at 12:26:25 PM, on 06/May/2005Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exeC:\WINNT\System32\svchost.exeC:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exeC:\WINNT\system32\regsvc.exeC:\WINNT\system32\MSTask.exeC:\WINNT\system32\stisvc.exeC:\Program Files\TapeWare\TWWINSDR.EXEC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\system32\svchost.exeC:\Program Files\Citrix\ICA Client\ssonsvr.exeC:\WINNT\Explorer.exeC:\Program Files\Visual Networks\Visual IP InSight\Sympatico Consumer\IPClient.exeC:\Program Files\Visual Networks\Visual IP InSight\Sympatico Consumer\IPMon32.exeC:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exeC:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exeC:\WINNT\system32\atiptaxx.exeC:\WINNT\system32�... Read more

A:Aurora

Hi GCVIALUMNI,Welcome to Bleeping Computers. My name is Trevuren and I will be helping you with your log.1) I need you to move HijackThis to its own folder so that nothing gets deleted by mistake. The easiest way for you now would be as follows:. Right Click on your Desktop. Scroll down the menu to "New". Left click on "Folder". Name Folder "HJT". Drag or copy the current HijackThis icon from your desktop into the HJT Folder. Run HJT from there.2) Now I want you to UNINSTALL the following program through the ADD/REMOVE feature of your Control Panel:Visual NetworksThis program ins not at all necessary and has a tendency to slow down your system by sending reports back to your ISP Provider which then gets your system to change in an effort to avoid problems supposedly.3) We won't delete the folder in case you ever want to avail yourself of this service.4) Finally, run HijackThis and with all windows closed except for HJT, click SCAN, produce a LOG and POST it in this thread for review.Regards,Trevuren

2 more replies
Answer Match 35.7%

I'm pretty sure I've got the dreaded Aurora. Along with it, it brought these viruses:

C:\WINDOWS\SYSTEM32\Poller.exe
C:\WINDOWS\SYSTEM32\wrapperouter.exe
C:\WINDOWS\SYSTEM32\main.exe
C:\Program Files\sdf.exe
C:\Program Files\ddd.exe
C:DOCUME~1\Owner\LOCALS~1\Temp\AUTOUP~2\AutoUpdate.exe
C:\Program Files\FwBarTemp\searchbar.exe
C:\WINDOWS\SYSTEM32\SSK3_B5 Seedcorn 4.exe
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\54KVLLWT\Poller[1].exe
Here's my Hijack This log:

Logfile of HijackThis v1.99.1
Scan saved at 4:56:01 AM, on 5/23/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Prog... Read more

A:Aurora and maybe more?

Hello puyo53 and welcome to the BC forums. After reviewing your log I see a few items that require our attention. Please print these directions and then proceed with the following steps in order.Step #1Download CCleaner and install it but do not run it yet.Start ewido and perform an update and then close it. Do not run it yet.Step #2Open Notepad and copy/paste the text from the quotebox below into the new document:if exist process.exe (     process -k explorer.exe  ) ELSE (    cmd /c "echo Process.exe missing.  Please unzip completely and rerun this file.&&pause&&exit"  )cd %windir%Nail.exe /fullremovedel /a /f nail.exe cd %windir%\system32del /a /f DrPMon.dll crbs32.exeecho REGEDIT4 > nailfix.regecho. >> nailfix.regecho [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\?%AF?????] >> nailfix.regecho [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_?%AF?????] >> nailfix.regecho [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\?%AF?????] >> nailfix.regecho [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_?%AF?????] >> nailfix.regecho [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\?%AF?????] >> nailfix.regecho [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_?%AF?????] ... Read more

10 more replies