Tech Problem Aggregator

# Where can I find a darn y510p charger?!

Q: Where can I find a darn y510p charger?!

I have the y510p with the GT 750M SLI. My charger died on me, and I tried to order one via Amazon provided by a forum thread here a while ago, to only receive an adapter with a 45N0112 modeL number when my adapter is 45N0111. Tried to to purchase it off Lenovo the other day to which I get an email that the product is "end of life" and now they've taken down the listing. So do tell me Lenovo... How am I to use my laptop without the 170w charger that you provide? No universal charger has that wattage. How the heck could you just shelf something like a charger after its only been about 3 years? I mean I thought your company was fantastic but what the heck man. Do enlighten me as to a guaranteed place to get a 45N0111 charger!!! I haven't been able to use my laptop for a week! Why? BECAUSE I CANT BUY A CHARGER. THANKS.

More replies

I am trying to fix some things on my laptop. Everytime I enter the serial number on the lenovo website, it comes up as the number not existing. I am reading the same number off my laptop as the bios.

More replies

I am trying to fix some things on my laptop. Everytime I enter the serial number on the lenovo website, it comes up as the number not existing. I am reading the same number off my laptop as the bios.

A:How to find S/N or IMEI of Lenovo Y510p

Hi liberate26 ,

Welcome to the Community Forums.

I believe you have the right Serial Number as described here on how to find it .
It may be that at the moment support server is currently on update with the database as here in this recent discussion.

You may call in tech support for further assistance or you may send me the your SN in a private message as this should be confidential, and things you would be needing.

Update us as soon as convenient for you.

Regards

1 more replies

My Dell Inspiron 17R 5720 doesn't recognize charger any more. And unfortunately my warranty expired 2 month ago.It was plugged in and working in the morning, but then in the afternoon I noticed that it was running on the battery only. It wont start without battery (just charger plugged in).
1. So here what I have done to debug. Me and my brother, we have purchased the same Dell laptops at the same time a year and a bit ago. This is why for a debugging purposes it was good.I took my charger and plugged in to his computer. And it works. Definitely not the charger issue I guess. And when I plug charger in to my computer, green light is still on the charger. And I have the original charger that came with the laptop.
2. Now, laptop works on the battery only, so this means that motherboard is working. I guess.
3. Next thing I did was unplugged charger and removed the battery from the laptop. Then I pushed and hold "Power" button for 45 seconds to discharge a flea charge. Plugged charger back in but laptop wont start.
4. Next I started laptop on the battery, went to BIOS and checked if the charger is recognized in the BIOS. No, it doesn't recognize charger. So, if it is not a charger then what else can it be?
5. Laptop doesn't have any strange smells so I'm not sure if anything happened with the motherboard, but I would assume mother board is ok because it works of the battery.
6. I was thinking updating the BIOS, but I can't, because it wont update whi... Read more

A:Dell Inspiron 17R 5720 doesn't work with charger. Charger is not recognized. Not charger problem.

Hi CJ777,
Thanks for reaching out with your query. You pretty much figured out all points of failure. Good job.
If the adapter is not detected in BIOS, it most likely is an issue with the mother board. In the BIOS set up, AC adapter should show up as 65w or 90w. If the adapter status is 'None' or 'Unknown Device Installed', it indicates that the mother board is not detecting the adapter for which the battery is not getting charged. Once the battery charge drains, I'm sure the adapter will not charge it again. Replacing the system board should resolve this issue.

19 more replies

hey! My dell 5100 laptop's a/c charger where it plugs into the computer...is ripped...so it is very sensitive and doesnt charge the computer...it does everyonce in awhile if i fiddle with it...on the dell website they are around 70.00 i was wondering if anyone knew of a cheaper trusted place to go?

A:where can i find a dell a/c charger?

I monitor a site called slickdeals.net often times you'll find what you need if your patient and check it frequently, its just a site where users posts deals theyve found, might take days weeks or months to find specifically what you need, but it will be a deal

2 more replies

I just broke my brothers laptop charger, i cannot find a new one anywhere on the internet. as Philips X72 are quite new. Is it possible to use other chargers?
the charger specs are as follows.
100-240V ~1.5! 50-60Hz
19V -- 3/4.2A
V85
i can find these specs for other chargers, but they are for toshiba ect. is it possible to get another laptop model charger for thr toshiba.

A:HELP!! Need to find Philips X72 LAPTOP charger

You can probably order a replacement adapter from Philips if you contact them.

You may also pick up a universal laptop adapter that outputs at least 19 volts and has at least the required amps as specified on the laptop or current charger(but its not 42Amps, maybe 4.2 amps?). Universal adapters adjust for automatic voltage, current, and polarity, soemthign a charger from another manufacturer may not do as they will be unit specific.

3 more replies

Hello, I have a white 15.6" CB5-571 acer and I have bought several replacement chargers for the model already, but none of them are a fit. Two just didn't fit at all and one fit bery loosely, requirely tape to hold it into the port to charge. All the chargers I bought were black, my chromebook is white. Can this be a possiblity why the chargers don't work? Also, if you can, can you provide a link for a replacement? Thanks!

A:CB5-571 Charger broke can't find replacement

1 more replies

Hi.
Im new here and would appreciate if any of you would happen to know what kind of charger i would need to charge my camcorder battery. The battery is a Li Ion 3.7V 1050mAh. I have posted a few pictures below to help out.
This is the battery from the front
This is the battery slot on the camera

This is the slots on the side of the camera. The first is a AV/OUT slot, the middle slot is a HDTV slot and the third is an earphone slot.

Here is a view of the battery from the front showing the 3 gold squares on it.
Thanks for any help in advance.
Also, would this charger be able to charge the battery?
http://www.amazon.co.uk/Ex-Pro-Samsung-SLB-10A-Digital-Charger/dp/B002JUOI0W/ref=lh_ni_t

Here is a shot of the camera.

any help is appreciated. thank you.

A:Help- must find the correct charger for camcorder

What is the make and model of your camcorder?

3 more replies

My Lumia 550 got wet, and dropped about a week later. On the same day I dropped it, I tried to charge it and the charging symbol didn't appear on my screen. So, I turned it off, and left it to charge. However, nothing happened.

More replies

My Lumia 550 got wet, and dropped about a week later. On the same day I dropped it, I tried to charge it and the charging symbol didn't appear on my screen. So, I turned it off, and left it to charge. However, nothing happened. I got a new battery which worked for a while, but this didn't charge either. Anywhere I could find an External Charger for the battery? It's a BL-T5A, 2100mAh.

More replies

I need the power supply + cord. I've found a few sites that didn't appear to have the cord that plugs into the power supply then into the outlet.

I appreciate you help, thanks.

A:I need a Compaq nx9010 charger.. Where the cheapest place I can find it?

6 more replies

When i connect charger to laptop the power button and charger light starts button white light blinking my laptop model inspiron n5010
I tried all the steps like removing the battery and unplugged the charger and holds the power button for 30 second and reconnect no change.

A:When i connect charger to laptop the power button and charger light starts blinking

Hi ZMR 1986,
Thank you for writing to Dell Community Forum.
* Are you able to boot into windows normally?
* Please try to boot into BIOS <F2> and check what is the status of the battery / adapter listed.
* Please update the BIOS to the latest available version from our Dell Support Site.
* Can we check with an alternate adapter?
Please private message us the service tag of the system along with your email id.
(Note: please don't mention the service tag or email id on the public forum as it contains your personal information).
Regards,DELL-Akshatha MSocial Media and Community Professional#IWork4Dell

10 more replies

Hi,My laptop won't hold a charge. I have replaced the battery and charger. The only time it works is when the charger is inserted into the laptop but even though it's plugged in it won't charge and will shut down immediately after the charger is removed. Please help.

More replies

Recently I bought a charger for my HP G61-110SA which was just a replacement adapter. Now yesterday it did something weird. Basically, there are two pictures of the two indicators there are to show whether it is charging, one is on the front and one is next to the port on the side. Basicaally the charger wasnt changing the indicator on the side or the one on screen but the one on the front was working when I turned it on. By default the laptop chages brightness when plgged in but now it sort of brightens a bit (not to the full level as should do) and then goes back to normal. Today the laptop is still doing the same but the front light now only turns on for a few seconds before turning off! I dont know whether it is charging. Is this the laptop or the charger. Any help would be useful, I have attatached the side indicator and the front one

UPDATE: I found a website which said you could turn it off and start without battery but with charger and then turn off and use both. However, I turned it off and removed the battery and it wouldnt charge. Then I put the battery in and it started charging-weird. Also the light on the front doesnt last very long so I am stuck. ANY HELP?

A:Charger icon not changing but charger is working

it could be that your battery is not working properly. how old is the laptop ?
I have read in places on the interwebs about people resetting their batteries by putting them in the freezer overnight.

1 more replies

I am trying to find the correct charger for my Pavilion 17 Notebook, there are no stickers on it anymore, and I'm not sure what I am looking for on the charger itself. Any help would be appreciated

More replies

I don't use my computer for maybe a whole year.
Now, I wanted to use it but it's not working. My battery is addicted, basically, if I don't have a charger I won't be able to turn on the computer.
So when I plugged the charger on the wall, the light on the box charger was solid (it didn't blink); However when I plugged it in the computer the light blinked.
I don't know what's the problem and I would like to fix it, if possible.

A:When charger plugged in pc, the light on the charger box blinks

Hi and welcome to TSG.

What happens if the battery is removed and you only use the charger ?

What make and model laptop is it ?

4 more replies

Hi All

Its been a while but i think i hav a infection.

msb.exe seem to be taking up a lot of cpu.

My browser is turning on by it self and the computer is generaly slow.

I searched for a answer and saw a couple of other threads with the msb.exe but not one answered them.

I hope someone can help

Kind regards

A:Darn MSB.exe

16 more replies

i used hijack this to fix my homepage from keep getting changed to about:blank.but i keep getting that popup (Error loading C:\DOCUME~1\DADDY\LOCALS~1\Temp\se.dllThe file could not be found) i even deleted itwhats keeping this popup from going away?here my hijackthis logLogfile of HijackThis v1.97.7Scan saved at 2:40:28 PM, on 6/10/2005Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Winamp\winampa.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\Program Files\Spyware Doctor\swdoctor.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exeC:\Program Files\Microsoft Office\Office\OSA.EXEC:\WINDOWS\System32\devl... Read more

A:Darn SE.dll

Wow.. I haven't seen this infection for ages... that might have something to do with the fact that your OS is waaaaay behind on updates. I need a log from an updated version of HJT though. You can get it here: 'Hijack This!'.Post up a new log, and then we can get started.

1 more replies

I can't shut down my PC at nite for fear that the next day when I turn it on,I will have no connection and I get a blank screen.Is the light on the computer suppose to be yellow.Before it was,now its blue.Is the network adapter(Trendnet )card the problem?

A:My darn PC

The light on my screen at work is blue but goes to red when I lock it at night. The light on my home computer screen is green while I'm using it but yellow when I shut it down at night. I think that it all depends on the screen model that you use.
Are you saying that you're having a problem with your computer booting back up when you turn it on?

2 more replies
Q: darn...

Hey.
i just found out that the antivirus i used (spysheriff) is bad and it won't go away. help?

A:darn...

1 more replies

I had to replace the motherboard in my backup desktop. I couldn't get the same Z77 motherboard (it was discontinued) but I did get a Z77 from another motherboard vendor. I have a triple boot, Win 7/Win 8.1/Win 10 (all on separate drives) on that machine. I thought Win 7 would be a problem since its an OEM version, but it was a breeze and just had to install the drivers for the different motherboard hardware. It even activated without problems.

Win 8 was a different story. When I first booted to Win 8 it came up with setting up hardware but never got any further (after an hour). I tried a couple of things including startup repair and it came back with a message that it couldn't repair it. After several other attempts (and about 4 hours), I decided to start over and do a clean install. That worked however, the Win 8 Pro (full license not an OEM) required a call to Microsoft activation, reading all the numbers and keying in new numbers to activate!

The 8.1 update was installed this morning.

As there was nothing but the basic Win 10 pre-release install, I did a clean install on Win 10.

More replies

ok... here goes...

we know CRC error messages come from cd/dvd NOT copying from one source/location to the other... namely pc (rig)...!!! i am NOT... going thru a server (box) or another pc, but i am trying to copy file/mp3/wma from (1st) H/D to (2nd) H/D in/on the SAME pc...(rig)...!!!

I copy SOME files/mp3's/wma's but i get CRC error message... which, i am HOPING that someone here have an actual FREE prgm that will correct this problem...!!!

I have sen jsut about ALL ads that say they fix CRC's & REGISTRY this & that... but then end up saying download prgm & will check & let me know the errors & what not...!!!

Who out here knows a prgm that will check & clear up all the so-called boo-boos in REGISTRY... CRC's & those IE has encountered a problem ga-ga...???

(BTW) I would sureley hate to have to copy all the songs 1 x 1 to notepad & go out here to find another of the same w/ hopes it is clean... 1 at a time...!!!

A:Darn CRC's

The "crc" message is always, as far as I know, due to a corruption of the file itself. In other words, the check value for the file after the copy or download does not match what is expected.

If you can copy the file from one location on the SAME drive to another location on the SAME drive and not get the error -- but the error occurs when copying to ANOTHER drive -- you may have bad blocks on that drive.

Run chkdsk on it.

http://www.housing.hawaii.edu/resources/support/chkdsk.htm

3 more replies

Hello all,

New to the site and looking for assistance ;’)

Our PC has just been taken over by pop ups!  They are driving us crazy, every time you attempt to go to a different website or different area on a forum page Bam they are your face.

We are running Windows 7 64 bit

I will admit I am very disappointed as we pay for Norton 360 and still have issues.

Looking forward to hearing back from you fellow forum members.

Cheers Trent

P.S. happy to post up screen shots of pop ups if required.

A:Darn Pop Ups

9 more replies

I don't know how long ago it started but I have UAC popping up for programs that I know are safe that it never used to before. Like Firefox, Ad-aware, etc... Internet Explorer doesn't trigger it. Other than disabling UAC entirely, can I turn it off just for specific programs I use frequently and I know are safe?

A:Darn UAC

bump.

10 more replies

Ok, I've been getting this pop ups a few days ago and I know it has something to do with elitebar. Trouble is, I can't find the elitebar program.
I've ran spy sweeper, ad-aware, spybot search and destroy but I still keep getting them.
I've read trough some of the threads about elitebar and I tried to delete it myself but I still keep getting these pop ups (search miracle I think, Search results for pharmacy and stuff like that).

so here's the log file.

Logfile of HijackThis v1.99.0
Scan saved at 4:03:21 PM, on 12/22/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\Promon.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe

A:Need help with this darn pop ups

Hi and Welcome to TSF

Before attacking an adware/spyware problem with hijackthis make sure you have already run ad-aware SE with VX2 add-on cleaner, Spybot Search & Destroy (with updated database) and CWShredder as these programs will clean a lot of the crap out first. All links to programs are in my signature. Ok..on to the log?..

If you have a highspeed connection please Run an online virus scan from TrendMicro Please select the ?autoclean? option when prompted to do so.

Open My Computer-->Tools-->Folder Options-->View-->Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files and click YES and then OK..

Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Check and fix the following in HijackThis if they still exist (make sure you do not miss an entry)

O4 - HKLM\..\Run: [Microsoft IIS] C:\WINNT\system32\syshost.exe
O4 - HKLM\..\Run: [Microsoft Office] lserv.exe
O4 - HKLM\..\Run: [winrar] C:\WINNT\system32\winrar.exe
O4 - HKLM\..\Run: [Services] C:\WINNT\symcapp.exe
O4 - HKLM\..\RunServices: [Microsoft Office] lserv.exe
O4 - HKLM\..\RunOnce: [WMC_RebootCheck] C:\WINNT\inf\unregmp2.exe /FixUps
O4 - HKCU\..\Run: [Microsoft Office] lserv.exe
O4 - HKCU\..\Run: [win update] wupfyny.exe
O4 - HKCU\..\RunOnce: [MPlayer2_FixUp] C:\WINNT\inf\unregmp2.exe /Fixups

Delete the following Files/Folders in RED (delete folders if no f... Read more

8 more replies

Alright, I'm trying to do a program for my intro to C++ class, the idea is to create a multiplication table. Problem is, teacher insists we use functions. I got it to work fine without them, but he insists we use them so I'm coming to you C++ experts for help.
I'm only getting one error:
error C2448: '<Unknown>' : function-style initializer appears to be a function definition

I'm attaching the code that I've wrote so far, also I'll comment where the error is indicated at in the compiler. Try not to be to judgemental on my code, I'm a newbie at this

A:darn C++

8 more replies

I am pretty sure I'm infected by something. Xp pro system has slowed to a halt when online. sceen highjacks and popups all over the place. Can I get help here? Can I run the CF spyware detection programs?

I am desparate and will greatly appreciate any help you can give me.

Thanks, Doug

A:Darn! I think its got me!

5 more replies

Hello,

I'm having difficulty removing ClickSpring from my computer. I've just run up-to-date versions of the following applications in SafeMode with the results listed.

Spybot S&D removed MT -Dials
Trend Micro AntiSpyware removed nothing

I have Spyware Blaster set up. After restarting my computer, IE (which is not my default browser) opens up connecting to 205.209.167.44/~majic3/test20r.htm and a small pop-up window opens which reads: "Please install Media Tickets to support this web site."

Below is my HiJack This Log file.

ZuZu

Logfile of HijackThis v1.99.0
Scan saved at 9:20:29 PM, on 9/5/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\933.exe

A:Darn that ClickSpring!!!!

Please visit this website - http://virusscan.jotti.org
Submit these file(s) for a comprehensive scan & then post the results back here.C:\933.exe

Also have HijackThis fix this entry:

Then perform an online scan with Internet Explorer with Kaspersky WebScanner

Next Click on Launch Kaspersky Anti-Virus Web Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.The program will launch and then begin downloading the latest definition files:
Now click on Scan SettingsIn the scan settings make that the following are selected:Scan using the following Anti-Virus database:Standard

Scan Options:Scan Archives
Scan Mail Bases

Click OK
Now under select a target to scan:Select My Computer
This will program will start and scan your system.
The scan will take a while so be patient and let it run.
Once the scan is complete it will display if your system has been infected.Now click on the Save as Text button:

Save the file to your desktop.
Copy and paste that information in your next post along with a fresh HJT log

* Turn off the real time scanner of any existing antivirus program while performing the online scan

1 more replies

I have a Dell Dimension 200MMX, with 128MB of DRAM. I have an AT Port PS/2 MS Wheel Mouse, whic is installed with the Intellimouse 2.2 software, and periodically the mouse cursor disappears, and the computer freezes up.

It happens while I'm Browsing in MS IE 5.5, it did in 5.0, it happens in WordPerfect 2000, and in MS Word 2000. It isn't an everyday occurrance, perhaps it happens once or twice a week.

It happens with the system Tray empty, and with it full od programs.

I have struggled with this for a year. MS is no help!

Jim

A:That darn MOUSE

Have you tried updating the drivers?

1 more replies

Gateway running windows XP can't check to see the service pac, nasty virus won't let me access much. Jumped malwarebytes and ran it but at the end of the scan when you x out or hit ok it closes malwarebytes. I tried renaming the exe file to winlogon.exe but it still closes before I can get the viruses off. Is there any other tricks I can try?

A:Darn viruses

Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.

1 more replies

I keep getting the offeroftimizer, kanoodle pup-ups and this designerbagforfree thing. Is there anything I can do to get rid of this stuff.

Logfile of HijackThis v1.97.7
Scan saved at 9:43:24 AM, on 10/20/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ltmsg.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\WINDOWS\System32\jfzzgbi.exe
C:\Program Files\Web_Rebates\WebRebates0.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\Expertcity\GoToMyPC\g2svc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\Program Files\KODAK\Kodak EasyShare software\bin\EasyShare.exe

A:darn offeroptimizer

Welcome to TSF.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point.

Make sure to close any open browsers. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one if they are still listed (they shouldn't be - but double check it):

3 more replies

Hi anyone,

I've been having problems with system slow down and such. Did some poking around and found lots of files that I didn't remember being there before. Deleted some only to find that they replicated themselves! After some web surfing searching on names of files that seemed suspicious I wound up downloading a program called "Spybot Search & Destroy". Running it seems to have restored the computer to its old self, but I kept digging into folders and found some more suspicious files, so I also downloaded and ran "Hijack This" (log appears below). Neither "Spybot Search & Destroy" nor "Hijack This" identified that the directory called C:/Program Files/Yahoo!/YIP2/... contained a Trojan Horse (maybe because it wasn't activated?).

I'm posting my log from "Highjack This" in the hopes that you bright folks can warn me of any more problems heading my way.

Thanks in advance from the Old Engineer!
Logfile of HijackThis v1.96.0
Scan saved at 4:29:50 AM, on 8/13/2003
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EX... Read more

A:Those Darn Trojans (not USC!)

6 more replies

For some reason my firewall won't let me use a program I've downloaded aaaand it's not letting me change any of it's settings???

Anyone got an answer for this?

A:Darn Firewall!!!

16 more replies

I have had the hardest time with this computer i am working on. I can't get the primary master to be recognized/hard drive. primary slave is my cdrom and it is working now. I can not get xp pro to load or set up and install on the hdd. i don't have a boot disk and i keep getting told no boot disk history also the once i got somewhere it said nltdr. i am lost and confused about this computer and would really like to throw it in the dumpster.......can anybody get me back on track and situated so i can get this other computer done and this guy out of my hair? thank you

A:I can't seem to fi this darn computer

Is this a new HD?? IS there an active partition on the drive? Does the bios see the hard drive? You should be able to set CDROM as your first boot device in the bios...boot to the XP CD and run the install process and format the drive for the OS. You can get bootdisks for most OS's over at www.bootdisk.com

5 more replies

I think I've done all the preliminary things...ran SpyBot S&D, ran AdAware, I have SG and Spyware Blaster on my pc. Right after the runs I ran HJT.

Could someone take a glance at the log and tell me if anything looks funny.

Thanks Folks
Logfile of HijackThis v1.99.1
Scan saved at 8:22:31 PM, on 8/18/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLACSD.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\WINDOWS\System32\Plinss.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\America Online 9.0\waol.exe
C:\Program Files\America Online 9.0\shellmon.exe
C:\Program Files\Common Files\Aol\aoltpspd.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank

A:Solved: HJT Log.....Darn Pop-ups

15 more replies

Is this where you would like my log file posted?
stanzer

A:Darn BackdoorBDD

If you are refering to your HijackThis log, post it in the HijackThis Logs and Analysis forum.

2 more replies

Hi there:

So apparently I did something stupid and I have managed to infect my computer with the ZeroAccess Trojan. After a brief Google search (on an uninfected computer) I have come to the conclusion that I am in WAY over my head and I have absolutely no idea how to get rid of this thing. To be honest, the only reason I noticed the infection was that McAfee popped up telling me that it had identified the Trojan and needed to restart to clear it, which of course didn't work. I do seem to have Internet access but when I try to Google search for anything about ZeroAccess I end up redirected to unrelated sites, which is interesting. I now have the computer disconnected from the Internet so that things don't get worse.

Anyway, I would be eternally grateful if you could help me clean this mess up, because right now the only thing I can think of is to reformat. The log is posted below:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Administrator at 14:41:39 on 2012-08-12
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.2.1033.18.6092.4290 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============... Read more

20 more replies

I just installed a faster internet provider and I wanted to add their anti-virus along with it. The anti-virus that I wanted to download keeps telling me that I have to uninstall the old one before it will install the new. Well, I DID. I removed any thing that resembled any thing that had to do with Norton or Symantec or any thing relevant to that. It still won't install. Somebody help!

A:That Darn Norton!

Did you follow the "How to..." self-help guide found at the following link?How To Remove NortonPlease follow the information there very carefully and if nothing works, post back here for additional assistance.Hope this helps!

1 more replies

How do I get rid of these redirectors that seem to generate from google? I have a current log from HTJ I need some one to review it. That's why I'm here.

A:These darn redirectors

Hello we prefer DDs to HJT as it gives better, more acuurate info.Please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9 which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.Include the GMER log you posted earlier.Let me know if that went well.

1 more replies

I installed windows 8 & it's telling me I have no sound device which I did have when using windows xp. any help will be greatly appreciated.

A:darn windows 8

6 more replies

Is there a simple way to TEMPORARILY DISBLE THE 'CAPSLOCK KEY'?????

A:Darn CAPSLOCK!!!!

well, mayby not temporary, but you can pour pop on that key only....
ps. that prob will fry some other keys or the whole keyboard

3 more replies

Hi, I have been hijacked by puppyboyz and am desperate for help. Here is my logfile from hijackthis. Any help is so appreciated.
Thank you!

Logfile of HijackThis v1.99.0
Scan saved at 12:04:21 PM, on 12/22/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\WINDOWS\SYSTEM\winlogon.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
c:\toshiba\ivp\swupdate\swupdtmr.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\NETGEAR\WG511SCU\Utility\Gear511.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\soundblaster.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE

A:DARN those puppyboyz

Hmmmmm....odd infection. May take a few runs at it.......

=========

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Before you do anything else, please create a folder for HijackThis and put it in a permanent folder (like C:\HJT) instead of the Temp folder. This is required because HijackThis will create backups and we don't want them to be deleted.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Turn off system restore by right clicking on My Computer and go to ... Read more

5 more replies

Okay, Im on black and white 2 and I really need to mod it! I went on the files and guess what? I modifed it for it to be easier and it came up that it cant find the file or path! (Happens after saving modified file) Any advice?

A:Darn! I cant mod my game!

I need help!

7 more replies

who has gone thru this ga-ga & fixed them so they stop...???

A:Darn DLL errors...!!!

Try running sfc /scannow

Start / run type in sfc /scannow

remember the space after c

You might need your xp cd

sfc = system file checker

joan

1 more replies

I've been trying to figure out why my laptop is so slow - PC Usage goes between 4-29 percent up and down... Painstakingly I stopped process after process. When I stopped mpservic.exe, my usage went and stayed down to 2%, and my pc performed fast again.

I know mpservic.exe is for the Canon printer, but is it supposed to do this? My file is dated 1998 - is there an update or could it be corrupted? I can't keep it disabled as I have the Canon multi-pass printer - don't I need it for that?

More replies

Logfile of HijackThis v1.99.1Scan saved at 7:03:58 PM, on 3/21/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\mcafee.com\vso\mcvsshld.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exec:\progra~1\mcafee.com\vso\mcvsescn.exec:\progra~1\mcafee.com\vso\mcvsftsn.exec:\PROGRA~1\mcafee.com\vso\mcvsrte.exeC:\WINDOWS\System32\svchost.exec:\PROGRA~1\mcafee.com\vso\mcshield.exeC:\WINDOWS\iedp32.exec:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Windows NT\Accessories\wordpad.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Documents and Settings\bleep & Cindy\Desktop\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\lgjrb.dll/sp.html#52409R1 - HKCU\Software\Microsoft\Internet Explorer ... Read more

A:Darn BackdoorBDD

3 more replies

i have just bought a WINFAST 760GXK8MC motherboard and a 2600 AMD Sempron Processor. I attached everything..i.e my 512MB DDR400 MEMORY AND MY HARD DRIVE...CPU, FAN, NVIDIA GEFORCE 2 MX100/200 GRAPHICS CARD AND AWAY I WENT...AND NOTHING.

by nothing i mean no signal to the monitor and the keyboard not being read...therefore i dont know if the damn thing is booting up or not! I removed the card and attached the monitor to the AGP slot on the motherboard and still nothing.

HEEEELLLLLLLLP!

A:Darn Motherboard

16 more replies

Deckard's System Scanner v20071014.68
Run by edwin on 2008-05-29 12:04:01
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 5 Restore Point(s) --
67: 2008-05-29 18:04:23 UTC - RP67 - Deckard's System Scanner Restore Point
66: 2008-05-29 04:57:06 UTC - RP66 - Software Distribution Service 3.0
65: 2008-05-26 21:19:27 UTC - RP65 - Punto de control del sistema
64: 2008-05-25 16:35:26 UTC - RP64 - Punto de control del sistema
63: 2008-05-22 23:55:45 UTC - RP63 - Punto de control del sistema

-- First Restore Point --
1: 2008-03-24 01:56:49 UTC - RP1 - Punto de control del sistema

Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 510 MiB (512 MiB recommended).

-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-05-29 12:09:11
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Alwil ... Read more

A:darn virus!!

Welcome to TSF.

Download the Flash Disinfector at http://www.techsupportforum.com/sect...isinfector.exe and save it to your desktop. Double-click on it to run it and follow the on-screen instructions. Insert your USB thumb drives that have problems.

* Save it to your desktop.
* Double-click OTMoveIt2.exe to run it. (Vista users, right click on OTMoveIt2.exe and select Run as an Administrator).
* Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

Code:
C:\b2.exe
C:\h8txw.exe
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\kxva
* Return to OTMoveIt2. Right click in the Paste List of Files/Folders to Move window (under the Yellow bar) and choose Paste.
* Click the red Moveit! button.
* A log of files and folders moved will be created in the C:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
* Close OTMoveIt2.

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Go to http://www.bleepingcomputer.com/comb...o-use-combofix and follow the instructions on how to install the Recovery Console and run ComboFix. Go through all the steps until posting the log part. Post the co... Read more

1 more replies

Like many others on this site, I have been infected with the Win Min Virus, or whatever it is. It's messing with my Earthlink Dialup, among other things. I have been reading some of the advice on how to fix the problem, and I don't understand most of it. How can I get rid of this program? Simple, easy to follow steps would be nice. Thanks.

A:That Darn Win Min Program

8 more replies

Hello guys! A few months ago, I was preforming a System Restore Operation, and while I was in the process, my sister decided to shut off my power. When I restarted my computer, the restore operation was said to be Incomplete, and a ton of my programs didn't work. As of now, System Restore doesn't work either. Help me please?

A:Darn my sister!

11 more replies

As a newbie to this site, I hope I'm not placing this in a forum where it doesn't belong. My difficulty is not due to malware, viruses or any such thing. I've recently installed Win 7 for the first time and, after tweaking, it's been doing fine. However ... the wireless Logitech mouse that I used on my old XP system is now somewhat unstable. Simply put, it works but doesn't scroll side-to-side or up-and-down without occasionally hesitating then jumping forward. I've searched high and low for a simple solution and have tried a couple of fixes folks suggested that made no difference. (i.e. changing the mouse scroll from 3 to 4 lines). This is far from a major calamity, to be sure, but it IS exasperating. Since I went ahead and ran DDS, I'm posting the log per the instructions. If there's something that can be adjusted to create a more cooperative mouse, I'd be grateful if you'd identify it. As well, the log correctly notes that several Windows security updates failed to install. Perhaps that can be addressed as well? In any event, I sincerely appreciate any efforts made on my behalf. My thanks in advance. = Richard =As there are no malware or virus issues, the DDS log has been removed so you can receive assistance in a more appropriate forum. ~ OB

A:That Darn Mouse!

How many lines do you scroll usually? Does it do it in all browsers? Adjust scroll wheel to 3 lines and turn vertical down to 1. I know browser have a mouse setting in tools and advanced to smooth out scrolling. You coudl try toggling those. Throw in some fresh batteries, maybe put the mouse dongle on a different usb port.

4 more replies

Hello all,

I have a dilema and I hope you guys and gals can help me out with this. Recently I have reason to believe that I might of triggered the winfixer to download onto my pc. Can you please help me get rid of it. I have seen that other's have ran a hijackthis.exe, so I followed suit and here is my result.....,

Logfile of HijackThis v1.99.1
Scan saved at 10:44:51 PM, on 7/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\wwSecure.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\PROGRA~1\SBCLIG~1\SMARTB~1\MotiveSB.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\MouseWare\system\em_exec.exe
C:\Program Files\Visual Networks\Visual IP ... Read more

7 more replies

Here's my story-

I've had Linksys wireless PCI slot deal for a while now and it's been working great. The computer from which I am receiving wireless internet from is less than 40 feet away, so the connection is always great. Well, recently, I took my computer to my friends house (I do this once a week) to game it up... well when I got there I realized that the antenna had broken clean off. The little cord on the inside was severed perfectly. I was hella angry, but I hooked my computer up anyway and, to my great surprise, I picked the internet up with a great signal. I was astonished. So I brought it back home today and hooked it up and, once again, the signal was picked up perfectly. The need for an antenna was obviously obsolete. BUT I rearanged my room today (had to unhook the computer) and now I cannot pick up hardly any strand of internet. SOMETIMES I pick up a Linksys signal, but it's very week and I cannot connect. Any ideas?

7 more replies

I was looking for some info on Speaker wiring for a Mecedes 300E and I clicked on a link and Wham! Ever since my system has been going bonkers. When I get home from work my internet browser has 10 or more add websites on it and I didnt even have the internet window open. Every once in a while a movie add will play the soundtrack only and my task bar say there is nothing running. Would be great if someone could analize my Hijackthis Log

Mark
hijackthis.log   8.64KB

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

1 more replies

I first noticed this when trying to play BF3,now its random.Sometimes it doesnt happen,sometimes can happen alot.

The screen will go fuzzy then blue screen then pc restarts

? OS - windows 7 ? x86 x64
? What was original installed OS on system? win 7
? Is the OS an OEM version (came pre-installed on system) or full retail version (YOU purchased it from retailer)? full retail
? Age of system (hardware) 29/06/2011 hard drive alittle older
? Age of OS installation - have you re-installed the OS? 29/06/2011
? CPU AMD PhenomII X4 955 Processor
? Video Card AMD Radeon HD 6700 Series
? MotherBoard msi 870 c45 amd870
? Power Supply - brand & wattage 650w arianet black series
? System Manufacturer custom build
? Exact model number (if laptop, check label on bottom)

A:Darn you BSOD

Hello Joe1888,
Could you please follow the posting instructions for BSOD can be found here:
http://www.techsupportforum.com/foru...ta-452654.html

Thank you,
Altie

19 more replies

Hi I am running XP on an hp pavilion 754nand am having problems with Zlob.Downloader, I think. I have run AVG free, AdAware, Spybot and TrenMicro's Housecall and the thing is still here. After running each, the icons (I will explain in a moment) and the pop-ups cease but soon resume. I have tried writing down the source files from when I ran the scans and tried to find them and remove them but they keep coming back and they seem to be processes and I no sooner end them in Task Manager than they reappear. I have also tried disconnecting from the internet and the popups continued!

I have two icons in my task bar and they take turns popping up and warning me that my computer is infested with spyware (like duh) and that I need to download these programs to get rid of it. One is a yellow exclamation mark triangle and the other is a shield similar to the legit one but not. They just keep sending bubbles and popups to badger me into buying these programs. Hopefully it won't come to that. At the end of one of the scans I wrote down some of the offending files.

C:\Program Files\Applications\iebtm.exe
\wcm.exe
\iebtmm.exe
\wcs.exe
\iebt.dll
C:\Windows\system 32\ubpr01.exe

I have found all of these in some combination in the Task Manager. These are the processes that just don't end! I also have an icon pop up occasionally that warns that something has tried to change my search engine from Google and Spybot keeps coming up with apopup similar to this:

More replies

Hi - my husband's computer was infected yesterday with Antivirus Pro. I followed the instructions from this site on the removal and I thought all went well and it was gone. This morning my husband was on his computer and out of no where all the pop-ups started again and then did an automatic reboot which only made his screen go black.

I've tried to fix it but malware bytes won't run at all and I've tried downloading Superantivirus but it won't install and gives an error message. Also keep getting a popup error message that Google Installer won't run. I have no idea what Google installer is?????

DDS (Ver_09-12-01.01) - NTFSx86
Run by Administrator at 8:16:23.53 on Sat 12/05/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_05
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.895.366 [GMT -5:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: AntiMalware *On-access scanning enabled* (Outdated) {28e00e3b-806e-4533-925c-f4c3d79514b9}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe

A:Can't get rid of the darn virus

Hi, lainey58 Welcome.Download GMER Rootkit Scanner from here or here. Extract the contents of the zipped file to desktop. Double click GMER.exe. If it gives you a warning about rootkit activity and asks if you want to run a full scan...click on NO, then use the following settings for a more complete scan..

Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Ensure the following are UNCHECKED ... Sections IAT/EAT Drives/Partition other than Systemdrive (typically C:\) Show All (don't miss this one) Then click the Scan button & wait for it to finish. Once done click on the [Save..] button, and in the File name area, type in "ark.txt"
Save it where you can easily find it, such as your desktop and post its contents in your next reply.**Caution**Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

25 more replies

Ok. I am really pissed off at Vista now. I download WLM(windows live messenger) and every time i open it or try to sign in it FRICKIN CRASHES! I tried microsofts work around and went from 8.0 to 8.1 and then to 8.5 and still, it crashes.

Help!!!!!! I have to maintain a social life!

A:So Darn Frustrating

15 more replies

? OS - Windows 7 x64 OEM
? The original OS that was installed on this system was Vista x84 (I did reformat the drive before installing 7 though, so I didnt use the update utility)
? The MotherBoard and RAM on this system are about 4 years old, the gfx card and the CPU are pretty new (less then a year old).

? CPU - Intel Q9400 Quad Core, I OC'ed it to 3.2GHz (I did try to revert the OC to see if thats the problem, but the BSOD was happening anyways)
? Video Card - Gigabyte, Nvidia 460GTX OC 1gb
? MotherBoard - Gigabyte S-Series EP43-DS3L
? Power Supply - SeaSonic SS-600ET 600W

I also attached the Error report by Windows as "BSOD Error".

Thanks in advance for any type of help, I would be glad to get rid of this nonsense as soon as possible :D

A:Darn BSODs!

Hello,

First I would like to start with a few troubleshooting steps to see if we can narrow down the problem.

Please Uninstall Daemon Tools Pro. Uninstallation of DAEMON Tools Pro | DAEMON Pro Help

Uninstall AVG using the removal tool. AVG | Download tools and utilities

Install Microsoft Security Essentials for testing

Make sure you are using the latest Chipset and network drivers from the motherboard manufacturer site. GIGABYTE - Motherboard - Socket 775 - GA-EP43-DS3L (rev. 1.0)

Make sure that you are using the latest software for your Razer mouse. Razer Support

Code:
Windows 7 Kernel Version 7601 (Service Pack 1) MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Built by: 7601.17944.amd64fre.win7sp1_gdr.120830-0333
Machine Name:
Kernel base = 0xfffff8000304d000 PsLoadedModuleList = 0xfffff800`03291670
Debug session time: Tue Jan 8 15:06:08.516 2013 (UTC - 5:00)
System Uptime: 0 days 1:14:38.217
Use !analyze -v to get detailed debugging information.
BugCheck C5, {8, 2, 0, fffff800031f8a9b}
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+1df )
Followup: Pool_corruption
---------
DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, an... Read more

15 more replies

hello,
i work at a school and some of the students have gotten into my laptop its running XP.
the mouse works, but the double clicking of a desktop icon pops up the properties screen instead of running or opening the

icon.
click on a quick launch icon (bottom left) brings up the properties again.
the keyboard does NOT type in anything. instead the 'f' and 'h' key are either arrow left/right or arrow up/down.
as you can see, this is a mega problem and i can't figure it out at all, any ideas of what they did or how to get things

back? (would prefer to NOT do a system restore point)

A:Darn Kids!

Have you looked in the Keyboard Properties in the Control Panel to see if they have changes it from the standard settings?

5 more replies

my computer is infected with *darn* virus. My cd drive starts opening and closing on its own, i get absurd messages, all my ms office files show such absurd message and last but not the least one of my other system s has become unstable and i cannot log onto it even in safe mode.
Please do help me as no antivirus is detecting it and i cannot afford to reinstall all my applications
waiting anxiously for ur genuine replies
suryansha

A:darn virus!!!!!!!

Hello -

This is a family forum. Even though the board's software censored some of the language in your title and post, I would ask you to refrain from using same going forward. Thanks.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:

Having problems with spyware and pop-ups? First Steps

link at the top of each page.

---------------------------------------------------------------------------------------------

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies

ok...I'm trying to install Vista (from the Vista OS disk that came with this computer) to replace the XP OS that I currently have on this computer...my c/d won't mount the Vista OS install disk...it sounds like the c/d is trying to read but gets caught in a loop...

the c/d is working...it mounts other disks I put in...

any one have an idea of where I should go next...

A:darn it...new problem...need help again...

check the CD for any marks or scratches - sounds like a faulty CD otherwise

1 more replies

TREBUCHET MS4SIENNA Today I signed up for an account with NetZero... wow, you wouldn't believe the problems I've encountered in the past 4 hours. I already got my printer problem solved, thanks to you guys. I logged on to NetZero, typed an e-mail for 20 minutes, then all of a sudden it was gone, I had been disconnected and, poof, the mail was gone. I'm still soooo mad!! Then the minute I logged on and went to the Yahoo site, it said my session has been terminated and again lost what I was working on . NetZero disconnected me too many times to count, and this is the same day I signed up with them. Does this have anything to do with cookies? I know a little about cookies but don't know how to approach them with this problem. If you need additional info let me know. Thanks for your help. NAN

A:Darn Computers!!

Hello.
I am guessing that is a dialup ISP? To which I say - in the US why the heck bother with dialup when dsl & cable is so cheap?

Anyway, what modem are you using, have you updated windows, have you updated modem drivers, is your connection info right? Cookies have nothing to do with this.

Call answering may interfere with dialup...

2 more replies

Hi all, new to this site. Trying to order a dryer part online and I keep getting a notice to enable my cookies. I have went to tools, privacy, and security and enabled anything that says cookie, still no change. Also [cant remember ware] typed in the address and still wont let me on the site. My computer uses CA for security. I read something that said maybe my registry is bad. Any help greatly appreciated, thanks Sparky

Have you tried to purchase your part online without your antivirus on? Maby its a config issue with it.

GL

2 more replies

Ok everytime i run my webroot spy sweeper i get a virus called "troj\virtum-gen" and an adware called "virtumonde". What should i do???? PLEASE HELP!!!

A:I Got A Darn Virus And I Need Help......

5 more replies

Sure appreciate some assistance.

Keep getting Trojans. Running AVG Grisoft, and it pops up with:
Trojan Dropper.Siboco.A

HT log follows:

Logfile of HijackThis v1.97.7
Scan saved at 10:40:08 AM, on 5/19/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER FREE EDITION\PSFREE.EXE
C:\WINDOWS\APPLICATION DATA\OTES.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\UTILITIES\HT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?new-hkcu
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://charter.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default-homepage-network.com/start.cgi?new-hklm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?new-hklm
N3 - Netscape 7: user_pref("browser.startup.homepage", "h... Read more

A:Darn Trojans!!!

hi, turn off system restore when trying to delete these pests or they'll return.

Run an online antivirus check from at least one and preferably 2 of the following sites....
http://security.symantec.com/default.asp?
http://housecall.trendmicro.com/
http://www.pandasoftware.com/activescan/
http://www.ravantivirus.com/scan/
make sure autoclean is enabled on the scans

. cwshredder
. SpyBot

cwshredder can be got here

khaz

to stop reinfection get these two tools, spywareguard and spywareblaster from

www.javacoolsoftware.com

3 more replies

I've gone ahead and followed all the steps in your "do this before posting" thread ( http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/ )Despite doing all of this stuff, I still get the annoying IE popups even when I'm not in IE. Typically, I just use Firefox.Anyhow, on with the show! Here's my log:Logfile of HijackThis v1.99.1Scan saved at 11:50:31 AM, on 9/10/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Symantec AntiVirus\Rtvscan.exeC:\WINDOWS\system32\wdfmgr.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXEC:\WINDOWS\system32\RunDLL32.exeC:\Program Files\Microsoft IntelliPoint\ipoint.exeC:\Program Files\Microsoft IntelliType Pro\itype.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Common Files\Symantec Shar... Read more

A:Darn Popups...

Welcome, lets get started Please download VundoFix.exe to your desktop.Double-click VundoFix.exe to run it.Click the Scan for Vundo button.Once it's done scanning, click the Remove Vundo button.You will receive a prompt asking if you want to remove the files, click YESOnce you click yes, your desktop will go blank as it starts removing Vundo.When completed, it will prompt that it will reboot your computer, click OK.Please post the contents of C:\vundofix.txt and a fresh HiJackThis log.Note: It is possible that VundoFix encountered a file it could not remove.In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.

15 more replies

Hi there!

I got some help with my machine, you guys were awsome. I have since installed a couple (ok a few) Firefox extensions and Spy Bot keeps coming up with one last annoying cookie that remains after a fix and reboot. I'm sure this will be easy for you guys...but I don't really want to guess at what to delete (I'm not even going to look at the HiJack file I'm about to post, I will think I know what I am doing and "fix" something... if you know what I mean.

I have attached a screenshot from Spybot with the little maggot that keeps returning. Again, I just got some help recently, I'm fairly certain we can do without the heavy duty virus logs and all that...if you insist I will do it again, but please take a look at the HiJack log before you ask me to do that again (I have two drives, the Ewido takes a LONG time)

Thanks!!

- J?n

Logfile of HijackThis v1.99.1
Scan saved at 8:26:24 PM, on 4/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5335.0005)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Roxio\Easy CD Creator 6\Dra... Read more

Hi jrobin,

From within the folder, double-click install.bat
Select Option #2 - Install the new IE-SPYAD list, by typing 2
Select option #4 - Add the old porn sites domain, by typing 4

4 more replies

I thought i was home free--and i use adaware every day plus spy sweeper--and i still get Microsoft Pop ups and AOL pop us every time i visit a different web page--here is my log from hijackthis:

Logfile of HijackThis v1.98.1
Scan saved at 1:35:05 PM, on 8/1/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\S3apphk.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\documents and settings\owner\local settings\temp\1e4m6nn.exe
C:\WINDOWS\System32\afspqi.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\alg.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Yahoo!\Messenger\YPager.exe
C:\Program Files\Internet Explorer\iexplore.exe

A:Those darn pop ups still wont go away!!

16 more replies

I was surfing the net and everything, when suddenly all my windows closed, and shortcuts to antiyspware junkcame up. Being the idiot I am, and havig constant spyware problems, I clicked it and downloaded the antispyware DESPITE THE FACT THAT I ALREADY HAVE MCAFFEE AND VIRUSSCAN! Yes, I am an idiot. Anyway, it ended up downloading a trojan... I try to get rid of it, but no success! It sends me popups and warnings about spyware, and tries to get trojan programs into my system, which are (thankfully) stopped by my antivirus program. I tried to get rid of it on my own, but ended up accidentally deleting my audio drive (which I was able to reinstall thankfully again) ...uhh... I havent recieved any trojans or popups in about 20 minutes now, so I think that part's over, BUT considering the fact that no matter what I set my homepage to, it sets it to blank, and bounces it to the site. For diagnosis purposes, I'll give you the site. The one I ended up istalling is PestTrap... What a PEST! http://www.securityuptodate.net/
...oh! It tried to get trojans in again! If it helps, they're called 0000a270.EXE
Help ASAP would be nice. I'd like to say I'm not a N00B really, but that'll probably just make me look like more of an idiot... Now if you'll excuse me, I have to yell at myself for being so rash and stupid.

Fan

A:Darn Trojan! (I am such a N00B Sometimes!)

...hmm.. actually, I think I've actually got both a Trojan AND an annoying program that overtakes my computer here. I might be wrong, but I don't think they're related... I'm virus scanning now, but any extra help would be nice, as I've tried uninstalling the crud to no avail.

4 more replies

the neighbor let his nephew use the computer and i think i got the porn dialer off. ran panda,norton,adaware,spybot.. dont know if there is anything else.
thanks ahead of time... heres the log....

Logfile of HijackThis v1.99.1
Scan saved at 3:58:27 PM, on 2/18/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

A:Solved: darn nephew

10 more replies

I have searched and searched but not understanding what applies to my issue. Is this an "autorun" issue or an active desktop issue or a mountpoints2 issue?
When I double click on any of my desktop icons, nothing happens. Right clicking drops a menue and I can select open. That works.

When I am in Outlook Express 8 and doule Click on a message to get it to open in a new page, nothing happens.

I have xp media center with SP3

A:That Darn Double Click

Have you checked the Mouse settings to make sure that the Double click speed hasn't gotten set to high somehow?

Control Panel | Mouse, check the tabs, mine has the settings on an Activities tab, could be on Buttons. Should be a test box to make sure it's working.

1 more replies

Downloaded, with success, CAMEDIA Master 4.2 Olympus digital camera, some months ago. It worked great until ... Suddenly it didn't. I tried to download again from CD. Doesn't work. I tried System Restore on the computer, but still the CD would not download. I get one message:
Cantante

A:Darn Digital Camera

12 more replies

Okay, I'm an idiot. I've run SpyDoctor, AdAware, & SpyBlaster. Still getting 9 zillion pop ups whether I'm logged onto the I-net or not. Downloaded & Ran HiJack this (saw that was suggested on many other posts) but I have no idea how to get a copy of the log over here so you guys can tell me what I can and can't delete - Lord knows I'm not going to try that one myself. Please help. Oh, I've got Windows XP Home Ed. I've also got that Google toolbar active that's supposed to stop pop ups.....not working as well as I had hoped! Thanks

A:Solved: Darn Pop Ups & HiJack This

16 more replies

My PC keeps using the page file (like 250 megs of it) even when there is over 200 megs of "real ram" free. This sucks for games and really bums down your FPS.

So I went into properties and changed my page file smaller but it still showed up the same usage. So I turned it off alltogether... Still shows usage!!! THis is very annoying... Anyone?

-Tim

A:Darn Page File!!!

I would not turn off the page file. Some programs check to see that there is a page file and will not run if there is not one. As to the page file affecting fps, I do not think that is your problem. Post your system specs as to vid card, amount of ram, processor speed, mb used, etc.

1 more replies

Hi there I'm new here but I hope you can help me out !?

For a few weeks I get these 540filost.com popups, and my computer cant handle more than one program at a time.

This is my hijackthis log :

Logfile of HijackThis v1.99.1
Scan saved at 21:37:04, on 13-06-2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\F?lles filer\Symantec Shared\ccSetMgr.exe
C:\Programmer\F?lles filer\Symantec Shared\SNDSrvc.exe
C:\Programmer\F?lles filer\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programmer\F?lles filer\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\Norton AntiVirus\navapsvc.exe
C:\Programmer\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmer\F?lles filer\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programmer\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Programmer\Java\jre1.5.0_02\bin\jusched.exe
C:\Programmer\MultiMedia Keyboard\MultiMedia Keyboard\1.0\KbdAp32A.exe
C:\Programmer\Browser Mouse\Browser Mouse\1.1\MOUSE32A.EXE
C:\Programmer\iTunes\iTunesHelper.exe
C:\Programmer\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe

A:Darn slow 'puter - HELP !!

Welcome to TSF.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that 'Display the contents of system folders' is checked. If you have Windows XP, the search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that 'Search system folders', 'Search hidden files and folders', and 'Search subfolders' are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Download CWShredder at http://www.greyknight17.com/spy/CWShredder.sfx.exe and run it. Uncompress the file and run it. Click on 'I Agree' button if you agree with it. Click on 'Fix' (it will automatically fix anything it finds for you) and OK. If it asks if you want to delete a certain random file, choose No and post that filename here... Read more

3 more replies

I have a Mal/fake AV-AD bug that is repeating itself. It has added a new program called security tool. Can I remove this using the hijack log? Here it is. Webroot has advised it is quarantined but it keeps comming back.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:40:05 AM, on 12/2/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\System32\CTsvcCDA.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Viewpoint\Common\ViewpointService.exeC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\Program Files\Adaptec\Easy CD Creator 5\DirectC... Read more

A:Those darn Mal/fake bugs

2 more replies

Hello folks,

I used this site years ago and it was fantastic. And, I donated to the cause, too. So I know you guys are awesome. I'm a careful browser and I'm generally good about my Internet behavior. But, today I got schnookered. I clicked a link in response to an item I had posted on Craigslist. Bam - infected.

I have full Internet access - so I'm OK there. But, when I browse - I'm getting all kinds of not-so-fun pop-ups both at the top of my screen as well as on top of the pages I'm viewing. I'm also getting the "you've won a prize!" notifications - including one from TechSupportForum! It doesn't happen on every site. As near as I can tell, I got the MTC.MakeMeSearch.com and the Huntbar.Stoolbar malware. I ran AdAware, Spybot and Exterminate It. Those programs are now removing all kinds of tracking cookies, etc. I can't see those programs anymore - but I know there is something still there.

Here are my files. (thank you - you're a godsend to us folks)

DDS.txt

DDS (Ver_10-03-17.01) - NTFSX64
Run by Sarah at 18:17:10.87 on Mon 05/31/2010
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_15
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3062.1458 [GMT -6:00]

SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Due to the restrictions on Windows 7, all tools should be started by right-click > Run as Administrator

------------------------------------------------------

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Programs->Programs and Features if it still exists:

------------------------------------------------------

2 more replies

Hey folks--

I unwittingly downloaded some BHO's and it's really mucking up my system with popups. Plus, my Symantec AntiVirus Corporate Edition keep detecting a .dll that's at BHO for malware as a Trojan.

Here's some background:

I can't remove/ quarantine/ clean the .dll, it's in my system32 folder in /windows and it doesn't work.
I've tried to reboot and do it in safe mode, and it doesn't work.

I downloaded the latest edition of vundo, and it got some stuff off, but not everything...

Then I downloaded HijackThis and got this logfile. Help? (I bolded the darn things)

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 8:26:49 PM, on 6/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\Program Files\SMART Board Software\SMARTBoardService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe

A:Darn BHO's I can't get rid of. Need help! (Logfile included)

If you have vundofix, remove it and get the current version

Double-click VundoFix.exe to run it.
click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES.
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Please post the contents of C:\vundofix.txt
Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears at reboot.

Please let Vundo finish its thing, sometimes it can take multiple passes
====================

http://www.superantispyware.com/superantispywarefreevspro.html

Install it and double-click the icon on your desktop to run it.
· It will ask if you want to update the program definitions, click Yes.
· Under Configuration and Preferences, click the Preferences button.
· Click the Scanning Control tab.
· Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Terminate memory threats before quarantining.
o Please leave the others unchecked.
o Click the Close button to leave the control ce... Read more

1 more replies

so i have Mcafee anti viras i called them and the say they donot suport anti vermis crap. so far i have:

1 run freedom anti spy
2 unistall freedom
3 install and run mcafee in safe and regular modes
4 installed spy hunter this gave me a list
5 i whent in to my directory and c:\ and hand deletead all files
6 i still have the antivermis popup in my syystem bar
7 ran spyhunter and mcafee and neather is telling me that i have a problem But the pop up is still there
8 once i found this sight i down loaded the silent runner and smitfraudfix but i do not know where to get the note pad report ti post here

6 more replies

Hey guys, here's a good problem for ya to solve, so here it goes.....

the hubby is building a computer for a friend of ours and when he gets everything installed, he goes to turn it on and all he gets is the power supply engages, the hdd does the initial whirring up but that is all. the keyboard/mouse will not lite up, and there is no display screen of any kind at all.....here's the mobo details----

-Biostar M7NCD ver. 3.0 with PhoenixBios D686 BIOS,
-AMD Athalon XP 2.4GB
-NVIDIA nFORCE 2 MCP
--ect..ect...ect-
Any help would greeatly be appreciated

A:Cannot get darn mobo to fire.....

7 more replies

HELP HELP HELP!!!

This one has bedeviled me like no other virus/malware I've ever run across!!! Took Norton and trashed it easy. Laughed at Stinger. Glad I found you folks! So, having said that and trying to follow the threads, here's where I'm at:

The Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 8:57:53 PM, on 7/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
D:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\Program Files\Sony\Giga Pocket\shwserv.exe
D:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\RioMSC.exe
C:\WINDOWS\System32\svchost.exe

A:That darn syssecuritysite hijack

11 more replies

A friend recently asked me to help her with her computer because it had become too slow to use. Needless to say it was full of malware and spyware in various stages of removal. It currently runs at 60% cpu utilization when no program is running. Please find the hijack log below. Thank you for your input in this matter. I have been thinking of nuke and load myself. Logfile of HijackThis v1.99.1Scan saved at 7:09:17 PM, on 10/17/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\ewido\security suite\ewidoctrl.exeC:\Program Files\ewido\security suite\ewidoguard.exec:\PROGRA~1\mcafee.com\vso\mcvsrte.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\mcafee.com\vso\mcvsshld.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exec:\progra~1\... Read more

A:Darn Spyware Slowdowns

Hi,

Then I'll take a look.

2 more replies

Before I even start I want to thank the people in this forum for any help they might be able to give.

I've had this computer a couple years now and managed to stay clean but now my grandson somehow got it infected. I've read through several fixes on various forums and made several attempts to repair it,, but without success. It appears that every solution is oriented to specific HijackThis logs. I've already downloaded HijackThis, Killbox, Cleanup and AVG Free. Following is the HijackThis log I ran a few minutes ago. Thank you.

Logfile of HijackThis v1.99.1
Scan saved at 1:04:36 PM, on 1/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\svchosts.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\ZoneLabs\vsmon.exe

A:Darn secure32.html got me!

16 more replies

My laptop, (like most laptops do) has the little screen at the bottom of the keyboard where you put your finger on it to move the curser on the screen. It you tap on the screen it works as a clicker also. Regular stats about it right?

But see, every once in a while it acts weird. Like sometimes when the curser is at the left top corner of the screen and im trying to go to the start menu, I have difficulty! Like I will move it towards it and then it will go back where it was, or having trouble getting there. Like if it was attached to a rubberband. But that doesn't happen too much. What happens a lot that gets me VERY mad is this..

I will be typing something (like this post) and say the curser is like right here. And then out of nowhere while im typing, i ill be typing where the curser is! As if I clicked there and wanted to type from that place. And I didn't even click it. Sometimes it even highlights. But it gets me mad when all of a sudden im typing where the mouse curser is and I didn't even press anything. You know what's going on?

A:The Darn Mousy thing!

10 more replies

I tried deleting some files associated with this virus today, but to no avail. I deleted the following from my win32 folder:

blphc38rj0e57p.scr
lphc38rj0e57p.???
phc38rj0e57p.bmp
pphc38rj0e57p.exe

But when I boot up into normal mode, after a few moments I get a blue screen.. it talks of dumping of physical memory. I can successfully boot iinto Safe Mode, though. I looked online somewhere to try and fix the desktop image/blue screen of death, they said to go to the regedit and navigate to: HKEY_CURRENT_USER\software\microsoft\windows
CurrentVersion\Policies\system
I right clicked NoDispScrSavPage and I changed value to 0 under Modify. Did same to NoDispBackgroundPage.

Thats what I've done so far, I've ran MalwareBytes and Spy Hunter with no luck.
I have a log from Malware Bytes to but for now here is just the Hijack This.

Here is my log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:59:05 PM, on 8/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Mozilla Firefox\firefox.exe

A:That darn antivirusxp 2008

Update: I've decided to re-format my hard drive and do a fresh install of Vista. Good luck to everyone else in dealing with this Antivirus xp.

2 more replies

I followed Brink's tutorial to remove shortcut arrows with Win 7 64bit RC, and it worked great. Since RC expired, I loaded my new OEM version of Win 7 64bit Ultimate from New Egg and followed the tutorial and I'm having issues. What happens is, instead of removing the arrow, it places the default "no clue file" on top of the icon. What I mean by "no clue file" is, say you download a .pdf and dont have Adobe Reader, it gives a generic icon. The funny thing is it shows the real icon but with the generic one ontop. Just in case it matters, when I right click the blank icon it does not give me the block option. Please help. I despise the arrows!
Thanks,
Beebe

A:Darn Shortcut Arrows.

Hello Beebe,

Try the tutorial step by step again double checking to see if a mistake may have been made somewhere. It should work for you.

http://www.sevenforums.com/tutorials...e-restore.html

7 more replies

Hello! Okay. I have two computers: a desktop and a laptop. I use the laptop for college. I'm a 4.0 student of Criminal Justice, working hard to obtain a degree to get my family out of the economic repurcussions and to pay forward the kindness shown to my family following the brutal stabbing of my husband. Well, I made the BIG mistake of letting my ten year old use my laptop to search about music, as she has just joined the band.

While I was occupied, she followed a link provided by Google about making music. I think she meant "composing" music. That ended up downloading a program she says she thinks is called Sound Force or something like that.

A few minutes later, I returned to my post at my laptop. To my suprise, I noticed BAD things happening. Internet Explorer has a changed icon, I cannot access IE8 or most other programs. It says that I don't have permission or that the file or path is wrong.

I had one of the IT guys at school look at for me shortly after (the same day). He said he did some kind of command prompt with things like dir a.exe, attrib a.exe, attrib a.exe -a, dir b.exe, attrib b.exe, attrib b.exe -b, and del b.exe.

That didn't work.

I know that I have acquired Monopod. Aurora is distraught over what this is doing to my school computer, as am I!!

I have downloaded DDS and GMER to start this process so that I may post to the site for assistance. I CAN'T run DDS, though. It keeps saying that I need to disable script blocking too... Read more

A:Trying to take the first steps...darn Monopod!

Oh! I almost forgot! The laptop is running XP Professional. I have no P2P software installed. I have no form of iTunes, Rhapsody, or anything like it. I have F-Secure Antivirus provided by Charter Communications, and my home wireless network is from Network Magic.

3 more replies

In my last series of posts I had asked a question about a particular file that did not go away when I was instructed to delete all temp files. That file is still there and after researching the net, I found out this is a trojan. The file is "Perfdata_548.dat". This is a nasty since it loads on start-up, changes its number(_641;_560;ect) then deletes itself on shut down so you cannot delete it in safe mode. I have tried all the methods prescribed here, in this group, to get rid of it and it won't go away. I have also searched the registry and found it there in several places but I am always terrified of deleting any registry entries until I get the word it is ok to do so from the experts. Please advise.

More replies

Ok, i gotta do this quick, my notebook is infected and has the blue shut down screen plaguing my attempts at finisheing any repair.
And please enjoy ur holidays b4 messing w/ my ignorant mistakes.

iexplore.exe is/was on my pc,
but avast found it, however it keeps finding it on reboot which is hapening often.

I uninstalled utorrent (this is where i was stupid and new better than to use p2p)

i installed gmer but it wont let me untick the specified ones in the "Read this" section.

So i just need some aid when someone has time, and please take ur time ;)

-G7

A:Darn it, merry xmas to my stupidity

Hi,

Go ahead and run GMER without the boxes unticked, it will be a long log, so zip it up.

I will need to see the DDS and Attach.txt before we can proceed.

13 more replies