Tech Problem Aggregator

Windows Recovery Series Removed and desktop notepads everywhere

Q: Windows Recovery Series Removed and desktop notepads everywhere

Hello AllI would first like to say that I am grateful for all the folks at Bleeping Computer. I have been assisted by them more than once and remember they do accept donations to keep the site going.I recently had the virus windows recovery tool and it hid all of my documents. Very scary moment for me. I went through the process to remove it with malware bytes and secunia psi and went into the command prompt to unhide everything. Now in all of my documents, pictures, videos, desktop I have a notepad log file with:[.ShellClassInfo]LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787This also pops up every time the laptop starts up. Should I be concerned? How do I stop it from popping up on every boot up?This one is in my documents:[.ShellClassInfo]LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21770IconResource=%SystemRoot%\system32\imageres.dll,-112IconFile=%SystemRoot%\system32\shell32.dllIconIndex=-235This one is in my pictures[.ShellClassInfo]LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21779InfoTip=@%SystemRoot%\system32\shell32.dll,-12688IconResource=%SystemRoot%\system32\imageres.dll,-113IconFile=%SystemRoot%\system32\shell32.dllIconIndex=-236[LocalizedFileNames]Sample Pictures.lnk=@%SystemRoot%\system32\shell32.dll,-21805Thanks for your help.Mark

A: Windows Recovery Series Removed and desktop notepads everywhere

Open your C driveOn top click on Organize-Folder & search optionsClick on view tabIn advanced settingsMake sure to check mark DON'T show hidden filescheck mark HIDE protected operating system filesClick okNow,press Windows+R key and typeshell:common startup and click okDelete the desktop.ini file from the startup foldergood luck

3 more replies
Answer Match 67.2%

Hi Folks, As crazy as it sounds, that's what happened while I was doing a variety of installs of addons for my Microsoft Flight Simulator FSX program. At some point I noticed that all of my desktop icons had lost their individual picture (graphics) and instead all of them had the Notepad graphic symbol. When I clicked any icon it opened up a Notepad page with some recognizable words as well as other letters and characters (gibberish). Then when I tried to click on other programs in "All Programs", the same thing happened. I tried safe mode and it was the same there. I called for tech help and was told it probably was a virus. I then did a total System Recovery back to Factory Settings.

Needless to say, I'm interested in what may have caused this and to find out if it really was a virus. My computer is 1 month old.

Thanks for your help Howard

A:Desktop icons turned into notepads

Hi Howard,

Malware is a possibility.....can you recall any of the recognisable words in the notepad icons when you opened them? It could also have been something as simple as the icons becoming dissasocciated from the program - something that is easily fixed.

Whats sort of anti-virus/malware software do you currently have installed?


9 more replies
Answer Match 67.2%

HELP! So I downloaded MS Office to this site : or KickAssTorrent, and when I tried to open the file, a bunch of notepads popped up with weird letters in it.. then it says "This program cannot be run in Win32 mode".. and when I open installed programs on my computer like Skype for example, it just kept saying that.. I'm using windows 7 by the way..

So if you have a similar problem and solved it please help me out! And to those tech guru out there, please help me! :)

A:desktop icons turns into notepads... -.-

what kind of file your were trying to click? probably your torrent must be infected with virus

2 more replies
Answer Match 66.36%

and the message inside them read,

I don't know what is going on, but if someone can help me fix this problem i'd appreciate it . I am not really into computers, so if whoever is replying to my message to take it easy on the computer lingo lol... thank you

A:when i turn on my computer on my desktop it opens up 2 NOTEPADS :S.

13 more replies
Answer Match 59.64%

Windows Recovery Series is a rogue security software which will report that malware has been detected on your computer in an attempt to scare you into buying this malicious software.
In reality, none of the reported issues are real, and are only used to scare you into buying Windows Recovery Series and stealing your personal financial information.

As part of its self-defense mechanism, Windows Recovery Series has installed a rootkit on your computer,which will disable the Windows Task Manager and will block you from running any program that could lead to its removal.

Windows Recovery Series is a scam and you should ignore any alerts that this malicious software might generate.
Under no circumstance should you buy this rogue security software as this could lead to identity theft,and if you have, you should contact your credit card company and dispute the charge stating that the program is a scam and a computer virus.
Removal instructions for Windows Recovery Series virus​This is a self-help guide, use at your own risk.
If you experience problems completing this guide, or the problem persists after following the instructions below or would like to have one of our staff members guide you through the process, please start a new thread in our Malware Removal Assistance forum.
STEP 1 : Start your computer in Safe Mode with Networking

Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.

Press and hold the F8 key as your computer res... Read more

More replies
Answer Match 58.8%

Hey folks. Sorry for not starting out in the intro forum. I am up against it and need some help. My wife works from home as a medical transcriptionist. Her laptop is an Acer 5100 with a version on Windows 7 I got somewhere and to be honest can't remember. She got swarmed with this Windows Recovery Series virus/malware thing yesterday. I got the thing in safe mode and ran a quick scan of Malwarebytes. It looked great... no more virus. I decided to run the full scan and thats when it happened. I got some kind of error from Malwarebytes and it froze up. I tried to start it and here we are... It wont boot in safe mode, networking, command, nothing. I copied a recovery disk and tried to run it but it will not read the disk. My wife needs this laptop for work. Any advice?? I am a master plumber and would gladly swap trade secrets with any it folks out there!!
I can usually find my way out of these tech issues but this has me baffled...

I sure would appreciate any input.

Many thanks,

Jeff Legg
Billings, Montana

A:Windows Recovery Series crashed my laptop

Hello, and sorry for the delay.

Please start the computer and tap F8 until the Advanced Boot Options menu opens. Select Repair Windows and let me know if that loads the Recovery environment and if you can enter it.

1 more replies
Answer Match 57.12%

Hello everybody,

I just came back from a 7 month deployment and I was finally enjoying having internet again and bam Windows 7 Recovery Virus! So I did some research and I used did everything in this thread

My new problem is that after doing the unhide.exe, I get ?PEV? is not recognized as an internal or external command, operable program or batch file and my start menu is still empty.

I downloaded the Home_Premium_All_Users_Start_Menu from somewhere to get some items back but a lot of my stuff is still empty. Can I please get some one on one help from somebody?? Thanks so much in advance!!!

A:Removed Windows 7 Recovery but still need help

Please download SystemLook from one of the links below and save it to your Desktop.Download Mirror #1Download Mirror #264-bit users go HEREDouble-click SystemLook.exe to run it.Vista\Win 7 users:: Right click on SystemLook.exe, click Run As AdministratorCopy the content of the following box into the main textfield:

%Temp%\smtmp /s

Click the Look button to start the scan.When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.Note: The log can also be found on your Desktop entitled SystemLook.txt

28 more replies
Answer Match 56.7%

I had a tough time removing windows vista recovery WVR, but managed. I used mbam in safe mode and it would stop scanning after 15 minutes or so several times. I finally ended it early to get rid of about 200 or so infections. it still would stall midway through. I tried rkill. mbam would still stall midway in both safe and normal modes. but after running rkill i was able to identify 2 random running files, 1 of which i noted killed the WVR. So i manually went in and deleted both random files. Yahoo!! it got rid of the WVR. now I need to restore the start menu icons and desktop icons. I did use unhide several times but they don't gome back, I did temporarly remove the AV and Mbam to run the unhide as stated at the end of the program, but that don't seem to work either, do I need to manually put them back. Thanks for the help

More replies
Answer Match 56.7%

Almost one half of the programs are hidden after a successful removal (I think) of the infection using Bleeping instructions and suggested downloads

After removal of the WINDOWS XP RECOVERY INFECTION the PROGRAMS became visible in START > ALL PROGRAMS, however when I place the cursor over most of them I only see (empty) to the right of them and unable to open them.

THE SPECIFIC PROGRAMS THAT ARE INDICATED AS (empty) and will not load are:

System Tools

PS: I?m not sure if I can mention this here but I will, I have not been able to use SYSTEM RESTORE for a very long time.

Thank you

DDS (Ver_11-03-05.01) - NTFSx86
Run by Owner at 16:56:02.29 on Sun 05/15/2011
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_24
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.355 [GMT -4:00]
AV: Kaspersky Internet Security *Enabled/Updated* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *Enabled*
============== Running Processes ===============
C:\WINDOWS\... Read more


Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

43 more replies
Answer Match 56.7%

It seems like I got the Windows 7 Recovery virus/malwaare removed but I still cannot see my programs. I ran mbam, rkill, tdskiller (not sure the order but followed directions) and then unhide. unhide showed some desktop shortcuts but did not fix the program list. I tried rkunhookerlerle but I get an error "Error loading driver, NTSTATUS code: 0x000036B".1. I would like some help to confirm i have the virus/malware completeley removed?2. How to I get visibility of my program functioning properly again?Thanks in advance for you great volunteers helping!!!.DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by Scott at 14:59:57.19 on Sun 05/15/2011Internet Explorer: 8.0.7601.17514Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8125.6164 [GMT -7:00].AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}.============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\system32\atiesrxx.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:�... Read more

A:Windows 7 Recovery: removed but still cannot see programs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Please take note:If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available.If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information.If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply'... Read more

19 more replies
Answer Match 55.86%

Hello! I've been reading around, as I've seen this virus has been hitting a lot of people recently. I was first hit with the Windows XP Recovery Virus yesterday, ran MBAM and Spybot S&D and completely removed it, among other things, from my computer. I am running Windows XP SP3. I decided to make a topic because I wasn't sure if my case was any different, so I figured I'd rather be safe than sorry.

However, even after that fact, I noticed there was still a Google Redirection virus, along with a rogue "iexplore.exe" process that would return after being killed. I believe the two are connected, and I ended up changing the name of iexplore.exe to _iexplore.exe, killed the process, and it has yet to return, but I am still having the redirection problem. I've run searches through MBAM, Spybot, and Trojan Hunter (both in and out of safe mode), nothing has come up. TDSS Killer will not run. Any help would be appreciated!

Not sure where to start, but I have a few logs from MBAM and Hijack this, if needed, let me know. Thank you very much!

More replies
Answer Match 55.86%

Hello, i have a problem that Lenovo apps such as Cyberlink..etc removed after recovery in my Windows 10 is there anyway to return them. Note: even if i opened properites on my computer " Lenovo" Sign disappered

More replies
Answer Match 55.44%

Hi - I used the Windows XP recovery uninstall guide. I removed the laptop drive and connected it to a system as a usb drive. I ran malwarebytes which cleaned the malware. Ran the unhide.exe program. I ran Kapersky tdsskiller. All seems back to normal except the windows menu options show up empty. example start/all programs/accessories/system tools/empty It seems that all the menu choices after all programs have empty choices. I have installed the purchased version of malwarebytes for the future. Any suggestions to recover the menu choices without a system rebuild?

Thanks for your help.

A:Windows XP recovery Virus Removed but missing windows system menu options

which forum is this in now? OK I found it.

1 more replies
Answer Match 55.44%

Hi, any help appreciated; I had the Windows Recovery virus on my computer yesterday (Nod32 antivirus was running and up to date at the time), I ran rkill and then MalwareBytes to remove the virus, it found 16 infections which I then deleted...restarted the computer as it said and ran UnHide.exe to restore my desktop icons. The desktop background stayed black as opposed to my old Windows background, so changed that manually. However there are still icons not showing in my Start Menu and more importantly, when I start Task Manager there are two unknown processes, csrss.exe and winlogon.exe, which Task Manager does not let me close, saying Access is Denied. Below is a paste of my DDS file:.DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by Sheel at 13:31:35.15 on 11/05/2011Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_10Microsoft Windows 7 Enterprise 6.1.7600.0.1252.44.1033.18.3070.1521 [GMT 1:00].AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtServ... Read more

A:Windows Recovery Virus: Unsure if fully removed

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

20 more replies
Answer Match 55.44%

Hi guys, had to have my toshiba netbook NB555D harddrive replaced with a new one. Got no warranty, no recovery media etc. Dont have windows 7 starter iso. What can I do?


A:Netbook: Recovery Partition removed, need Windows 7 starter iso

We always assume you have made your Recovery Disks using the OEM manufacturer's Recovery Media Creator app the first day you had your new PC.
& made the Startup Repair CD.
startup repair disc-create

Did you make the OEM manufacturer's Recovery Disks?

How to use Toshiba Recovery.
How to use the Toshiba HDD Recovery Utility

You can order Toshiba Recovery disks from here:

2 more replies
Answer Match 55.44%


I am new to this site, so would appreciate it if you bear with me with regards to any further information that you may require.

I have recently had the Windows Vista Recovery virus on my computer. As far as I know I have removed the virus from my computer with programmes such as iexplore.exe and malware bytes.

The issue that I am having now is when I type something into Google, the search results come up, but when clicking on the links, they are redirecting to a completely different website.

I would appreciate the help in how to stop this happening as I havent got a clue.
Please make me aware if you require any further info.

Thank you

More replies
Answer Match 54.6%

I had the same experience as described on this thread:

So - I followed the same instructions (ran defogger, dds, rkunhooker). Logs attached.

Before I tried this, I went through the steps of removing the fake Windows Vista Recovery program as best I could based on several forums - it seemed to work.
(Steps taken were along the lines of: changed settings to view hidden files, manually removed related files, went into regedit to remove added entries, installed Windows Security Essentials and ran a full scan which found and removed 3 files, and then ran a script to reset all my files and folders to not be hidden anymore.)

After all that, I still get strange behavior clicking on google search results where the page will re-direct several times and end up back in the google search page. (before installing Security Essentials - redirects always landed on some ad page).

Other thing I noticed that seems related is that when I re-installed Adobe Flash for FF/IE, my Flash Access 2.0 module isn't able to individualize the computer (so I am unable to stream encrypted movies from mSpotmovies). I installed Chrome to see if that might work since that uses a different version of Flash but Chrome couldn't even get to the web to display the google search home page. FF/IE could still browse the web. Uninstalled Flash 10.3 and installed 10.2.159 to see if Access 2.0 individualization might work with that but it didn't. (n... Read more

A:Windows Vista Recovery removed but google redirects among other things

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator&#... Read more

19 more replies
Answer Match 54.6%

Hello - am am running Windows XP Version 2002 Service Pack 2.Just got infected today by the "Windows Recovery" Trojan and I believe it had been removed(?) using, Malwarebytes Anti-Malware (version and unhide.exe.However MBAM is now popping up frequent messages that say it "Successfully blocked access to a potentially malicious website, Type: outgoing".A number of different IP addresses are shown (in the above message where the is shown), including these: MBAM full scan reports zero infected items.Reformatting and reinstalling Windows is not something I want to do unless all other options have been exhausted.Am I (still) infected?Thanks in advance for any and all assistance.

A:Removed "Windows Recovery" Trojan but MBAM Still Reporting Issue

Hello,And welcome to, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can.Please download and run Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.Malwarebytes Anti-MalwareNOTEMalwarebytes is now offering a free trial of their program, if you want to accept it you will need to enter some billing information, so that at the end of the trial you would be charged the cost of the product. Please decline this offer, if you are unable to provide billing information. If you want to try it out, then provide the billing information.Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts a... Read more

5 more replies
Answer Match 54.6%

I used information on this site to remove the Windows XP Repair Virus. I ran Malewarebytes quick scan but when unhide wouldn't work I then ran full scan to double check virus was completely removed. It shows virus was removed successfully. I tried running Unhide in normal and safe mode. I have my icons but like others the folders are empty in the programs section of the start menu. When I run Unhide either it does not finish (I waited 90 min) or I get this message:
Processing C:\'Pev' is not recognized as an internal or external command,operable program or batch file

I saw that people were being asked for results of System Look when Unhide didn't work so I downloaded it and tried to run it. When I double click on it I get message "Script Error" Even though I'm logged as an administrator user I tried right clicking and run as Administrator and that didn't work for System Look or Unhide. I do not know what to try next.
I've saw where it is mentioned that programs can be put back manually but nothing says exactly how to do that.

My problem is now fixed thanks to USN Vet. I found and used his suggestion to the topic Windows XP Restore Aftermath. I cant seem to find a way to mark my topic as solved. This site has been a lifesafer today.

A:I've removed the Windows Recovery Virus but Unhide and System look will not work for me. Please help.

Close, OP resolved, see .


1 more replies
Answer Match 54.18%

So i tried to remove digital protection with malwarebyte, while I also had total vista security rogue anti virus as well. The problem was that total vista messed up some of my legit files so i deleted them such as a win32 file. After mawarebyte scan, I deleted some files, but then when i restarted my computer, I got some window saying i lost some data or something like that and windows will attempt to restore last date that my computer worked. So i let my computer restore my computer settings to an earlier date and then when I log back in, total vista and digital protection was removed?

I don't know if they are removed just from a system recovery, so i need some advice. After the recovery, I tried the instructions on deleting total vista, but when I renamed process explorer to iexplorer.exe, it doesn't open up, because my computer recognized it as illegal instructions.


So far i am having no pop ups of the rogue anti virus software, but are they hiding??

A:total vista rogue anti virus removed after windows recovery??!!!

Hi Vay,I would suspect that the malware is still there, but hasn't had a chance to run yet. Unfortunately, it will probably pop up some time in the near future. However, if you aren't currently having any symptoms, that makes it easier to do the common scans that will probably remove the rogue for you.Start off by using TFC by Old Timer which will clean out any temp files that might be left over from the pre-restore infection.Follow this guide here on how to remove Digital Protection.Then:Please download and scan with SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)In the Main Menu, click the Preferences... button.Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.Click the "Scanning Control" t... Read more

7 more replies
Answer Match 54.18%

so somehow I caught the malware program known as Windows 7 recovery. As per its standard operations it made my computer seem like it was having a bunch of issues, hid all the files on my hard drive, removed my background, etc. I followed a removal guide I found here on bleeping computer and it did rid of me of that annoying malware. A lingering problem I am still experiencing is that all my start menu items are missing. For example there is a folder for Microsoft office, but when you open it it shows as empty, but if I open a Microsoft office file like say a word file the program opens as normal. I have run the unhide.exe file a couple of times, and shutdown my firewall and maleware protection, but to no avail the start menu items still seem to remain hidden. I'm hoping someone on here has a solution. Thanks!

A:Removed Windows 7 recovery malware, but start menu items still missing

Tutorial to 'restore default'

1 more replies
Answer Match 54.18%

Original thread from "> Security> Am I infected? What do I do?" forum is here: got infected today by the "Windows Recovery" Trojan and I believe it had been removed(?) using, Malwarebytes Anti-Malware (version and unhide.exe.However MBAM is now popping up frequent messages that say it "Successfully blocked access to a potentially malicious website, Type: outgoing".A number of different IP addresses are shown (in the above message where the is shown), including these: logs are pasted/attached...DDS dds.txt log:.DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_14Run by Main User at 21:35:37 on 2012-01-16Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.3316.2524 [GMT -5:00].AV: ESET NOD32 Antivirus 4.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}.============== Running Processes ===============.C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\SUPERAntiSpyware\SASCORE.EXEC:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exeC:\Program Files\ESET\ES... Read more

A:Logs Associated with: Removed "Windows Recovery" Trojan but MBAM Still Reporting Issue

Hi,Please do the following:Download ComboFix from one of the following locations:Link 1 Link 2 VERY IMPORTANT !!! Save ComboFix.exe to your Desktop * IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:Click on Yes, to continue scanning for malware.When finished, it shall produce a log for you. Please include the C:\C... Read more

2 more replies
Answer Match 54.18%

I have a brand new Inspiron 13 - 7000 series 2-in-1 laptop. I have removed stylus several times, but after about 6 months, I cannot remove it now and does not come out at all. Is there any trick or any suggestions?
Service Tag: GP2ZD32.
Country: Saudi Arabia, Riyadh

More replies
Answer Match 53.76%

Hello. This is my first thread on any forum, even though I have been deep into computing for nearly 17 years. I am putting this out to see if anyone else has seen it. I have a Windows 10 desktop. Although I use Edge and Chrome as my primary browsers, I use IE for some security camera access in several businesses I manage. I noticed a few days ago that an IE icon had appeared on my desktop. When I click it, it takes me to my homepage as normal. However, when I try to navigate to any other page, I get a prompt to install an application (which I believe to be malware related). I will note that when I use the IE I have pinned to my taskbar, I have no issues. Here is what I have done to attempt to remove the icon from my desktop, without success:
1. Move it to the recycle bin.
2. Right click to remove it. No option to remove it shows up. Only Open Home Page, start without add-ons, bottom, create shortcut, and rename.
3. Removed it through programs and features/Turn windows features on and off. When I do this, the icon remains, but does not function.
4. Looked through the desktop folder under each user account, including in a portable environment, not binded to an OS, where I am usually able to do things freely. The icon does not even show up as present when I look for it.
5. Ran several malware scans, using MBAR, HijackThis, RogueKiller, AdwCleaner, Junkware Remover, and others. Nothing seems to indicate that it is there or is a problem.
I hope I have provided enough informa... Read more

A:IE Icon cannot be removed from my desktop on Windows 10-Help!!!

I found the answer on the forum itself. It involves a registry script that adds IE to the desktop. The thread also has a script to remove it. Thanks!

0 more replies
Answer Match 52.92%

Followed the article posted on the site to remove the virus, removed, however the start menu programs icons / shortcuts are gone. Do i have to recreate them myself or is their a way to recover them.

A:Windows Recovery Virus with TDDS Rootkit removed Start Menu Programs Shotcuts

Let's see, if your computer is fairly clean.Download Malwarebytes' Anti-Malware (aka MBAM): to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be found here:C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txtOr at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt=========================================================================Download aswMBR to your desktop.Double click the aswMBR.exe to run it.Click the "Scan" button to start scan:On completion of the scan click "Save log", save it to your desktop and post in your next reply:NOTE. aswMBR will create MBR.dat file on your desktop. This is a copy of your MBR. Do NOT delete it.

1 more replies
Answer Match 52.5%

.... but I didn't touch it.
My d:\ is not empty - it is almost 80% full but when i click on it there are no files. Tried - to the extent of my knowledge - to see if the files are hidden but didn't reach anywhere. Tried a restore point but that didnt work either. Please help

A:HP Recovery Manager says that my recovery partition has been removed

Recovery Manager has hiccups sometimes...
Try re-booting and entering at boot.

If that fails you can order the Recovery Media from HP for a reasonable price.

4 more replies
Answer Match 51.24%


I have a Windows7(Home Premium) pre-installed Sony Vaio Nw20SF/S laptop in which i tried to create Recovery disks(2 DVD's)... using Vaio Recovery disk Software(Inbuit). It stopped(or hanged donno) in the middle while creating the 2nd DVD then that was cancelled, but a new partition with no FileSystem is created for about 9.3 GB when i look in the Computer Management tool present.

Now, i have two questions to ask...

1) Does Sony Vaio models with Windows 7 comes with Hidden Recovery Disk Partition(D:... something like that or not)???
2) What to do or how to make use of the 9.3GB partition present???

Please Help.
Thanks a lot in Advance...

A:Regarding Recovery disk and Recovery disk partitions in Sony Vaio NW series...

Help please.....

1 more replies
Answer Match 50.82%

How do you recover an online newspaper series, viewed on my computer many times, but is no longer available when google searched (may have been pulled by newspaper). The series "Philippines: Arc of the islanders" was written by me and I need it for clips and my own archives. HELP?

A:Newspaper series on Web recovery

Could this be of any help?

1 more replies
Answer Match 50.4%

When I right click on a text file and go to "open with" the list shows notepad twice and wordpad once. Is this anything to worry about? How do I make sure it's nothing malicious and how do I fix it? I recently installed word 2003 and I should also mention Notepad only shows up once in the start menu.

A:2 Notepads?

Hello guistar and welcome to BC

Sorry about the delayed response. We're all volunteers here and sometimes things slip past us.

Can you tell us what your operating system is: Windows XP, Vista, etc.?

Did this problem occur before you installed word 2003 or only after? If after, how long after?

Are you experiencing any other issues with your computer?

Orange Blossom

6 more replies
Answer Match 49.98%

Hi, im just wondering if there was any way of getting recovery disks if you have already wiped the hdd? I only formatted the c drive, not the recovery partitions.
I didn't make a recovery disk because I have made a image using a 3rd party image backup program. But when I put the disk in, it doesn't work.
I tried doing a system reset by pushing f12, but not even that works, I get an error message.

More replies
Answer Match 49.98%


Toshiba L series laptop - L50-B1-1NL
Toshiba Original Recovery media on usb stick
Do I use a usb2 port or usb3 port to install/recover from

Do I reset BIOS settings to dwfault before recovery
Where would I find a copy of BIOS settings for the L50-B1-1NL


More replies
Answer Match 49.98%

Hi there,

I'm having problems starting up my laptop. I hit the power button and it goes straight to Windows Error Recovery. I then hit "Launch up Recovery (recommended). It then just moves to a blue screen and never actually gets to a recovery page or where I can enter login. If I press start windows normally the same thing happens.

Is there a way I can reset to factory without starting laptop?

Thanks for any help.


Ps sorry for any typo's/poor grammar, writing on phone isn't easy.

A:Failed Recovery - HP Pavillion G Series

6 more replies
Answer Match 49.56%

Good morning people.

I do have an issue with my Satellite. I am currently not home and do not know the exact version i have, but its a C-Series Laptop.

I watched NFL on Sunday, as usual, shut down the Laptop, went to bed.

Monday morning, i started the Laptop and it was already taking ages. I could then log in and saw my wallpaper, the battery status on the bottom right and the windows logo (Start) in the left bottom corner. Every now and then, other logos would show up, but disappear shortly after.

After a few minutes, i got the Windows Blue screen, saying there was an issue and data is being collected.


Toshiba Logo and its saying "data beeing analyzed" - "repair being prepared" - "repair started, may take up to two hours" - blackscreen, reboot, "data being analyzed" and so on.

Now, i had my laptop running for a solid 14 hours and it kept going through this loop.

It will not start from a CD, it will not let me get to BIOS.

I have taken out the RAM one after another, same issue.

What other steps could i take to save my data or the laptop?

Thanks all,


More replies
Answer Match 49.56%

My desktop was hijacked by what Norton identifies as: Trojan.Destophijack.
I have successfully removed it according to the instructions from Norton's Website. HOWEVER, I can no longer change the desktop background from solid black. There is not even a tab for Desktop on the Display Properties window of the Control Panel.

How do I get the option back?

A:[resolved] Desktop Hijack removed, cannot change desktop.

Try this

Go to Run --> type in regedit

Then go to: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System

Look for the entries NoDispAppearancePage and NoDispBackgroundPage. If they have 1 as their values, set them to 0.

Delete the file wallpaper REG_SZ

Close regedit

3 more replies
Answer Match 49.56%

Ack.. I was trying to edit a file for Counter Strike
A .cfg file... I double clicked on it and i would open it with note pad to edit the file...

Each time i edit the file i needed to uncheck somthing i forgot on the last time

you know when you open one of those files and a little window pops up asking you what program to open it with.. and there is a little Box there that says...

Always open this file with this program...

Well i forgot to uncheck it.. and when i did.. It changed all my .cfg files into Note pads..

I cant play now with all the .cfg files as note pads... it makes the game crash..

There should be a way to make them go back to normal but i havent a clue ..

Iam here begging for help... How can i make the files go back to normal ? I need to un link them to notepad somehow..
I tried to reinstall the game but it just remade the files as note pad..

Somehow i have binded .cfg files to note pad ... How can i change that ?

A:DOH, My .cfg files changed to notepads :(

As long as the files still end in .cfg, the game should not crash. You might have saved the file as .txt, or changed something within the file so that the game could not run. However, if you want to change it back, go into your control panel, and check around in there, it might be under System somewhere, I'm not sure as I can't check on this computer. Or, you could go into the registry and manually change the file associations, but I think the control panel method is easier.

OK, I found it. Right-click your desktop, and hit properties. Now click the "Web" tab, and click "Folder Options" at the bottom. Click Yes if a window pops up. Now, there should be a "Folder Options" window. Click the File Types tab, and scroll down until you see CFG file. Click it, and hit the "Edit" button on the right. If there is anything in the 'Actions' field, click it and hit the 'remove' button. Then, hit OK in the windows, and try Counter-Strike again. You may have to restart for the settings to take effect.

Hope this helps.

1 more replies
Answer Match 49.56%

I have this very irritating problem for some time. During startup three empty notepads pop up.

I searched for similiar problems, but noone mentions having empty notepads. I tried searching and deleting desktop.ini files in Startup folders, but that doesn't correct the problem.

Any ideas? Anybody?

A:Three Notepads open on startup

8 more replies
Answer Match 49.14%

HI, I have recently found my hard drive is failing. Actually will not boot up. I have Acronis software to try to duplicate the hard drive, but it says that there are bad sectors and I cannot make the copy to a new SSD. Most of my personal files are saved on USB flash drives, and I was able to obtain files off of the dead hard drive, but I can't get the OEM operating system off of the old drive. What can I do to obtain a recovery disc or another copy of windows 8 without having to buy another OS?  Or is there another way to try to retrieve anything off of my dead drive? thanks for any help

A:recovery cd for OEM windows 8 desktop

@TerryWS?, welcome to the forum. Here is the HP Software and Driver Downloads for the computer.  There is a section on how to order the Recovery Media.  I believe that HP should still have them available. Please click the Thumbs up + button if I have helped you and click Accept as Solution if your problem is solved.

2 more replies
Answer Match 49.14%

i have no recovery disk nor my password for my T-series W350I gateway laptop. this was passed down from an old friend to help me during my first stages in my college journey.

A:gateway T-series reboot with no password or recovery disk..

gateway t series w350i restore cd

3 more replies
Answer Match 49.14%

I had to convert my HP6000 series desktop to its factory settings ,including Windows 7. Prior to having to do that, I had upgraded to Windows 10. I had made recovery discs. When I put in the discovery discs, it does not read them. How can I recover my files?

More replies
Answer Match 49.14%

Alt-f10 is not working to start e-recovery software and also my backup acer software not read into DVD drive and eject immediately.. Yes I have original HD included windows vista. due to some problem one of IT people format all C and D drive and install windows 7. error showing when pressing alt-f10 same as like Path:\windows\system32\winload.exe Partion:2 Hard Disk:8fa61239 [ /NO EXECUTE = OPTIN ]

A:Recovery Acer Software aspire product 45.. series

"Usually" the Acer recovery partition was a hidden partition; inaccessible by the usual means; at least it was some time back. Sometimes called a PQ partition if I remember correctly (at least for Acer laptops a wee while back). It was usually first item on the hard drive too.You seem to suggest that the system was initially Vista; then you took it up to win-7... Possibly in the process of going to win-7 the (Vista) recovery partition was destroyed; or at least overwritten by a win-7 version?This rather olde post has a very helpful response from Johnw - it's the best answer entry too. John's routine and see if you can "see" any evidence of a recovery partition?This is another approach too: this may also explain "your" particular drive partitioning as was and possibly is now: would appear that in some more recent systems the PQ/Recovery partition is now flagged as D: ; and thus if per chance your IT chums got at that D partition on your laptop.. then they erased its contents when they reformatted it...?

12 more replies
Answer Match 49.14%

Toshiba L series laptop - L50-B1-1NL
Toshiba Original Recovery media on usb stick
Do I use a usb port2 or usb port3 to install/recover from

More replies
Answer Match 48.72%

As you can see from the image above, when I RightClick a .txt file and hover mouse over OPENWITH, two notepad appeared in the dropdown menu.

I have tried other of the NOTEPADs, and both of them do open txt file in notepad. This situation occurred sometime after I installed notepad+, but I have unstalled then reinstalled notepad+, still wasnt able to solve the problem.

I have also tried fixing it with the context Menu Manager from Glary Utilities. And I wasnt able to find anything strange using sheview and shmnview from NirSoft.

Could anybody tell me what is causing this duplicate copy to appear? And how I can fix it?

A:Two notepads in OpenWith menu for txt files

try running

sfc /scannow

13 more replies
Answer Match 48.72%

Both notepad & Word docs are unreadable on each others PCs. Same setup both PCs.

This is happening from copy/paste to Flash USB drives. Unable to open on OP pc.

A:Win 7 PCs cannot read each other's notepads or MS Word docs

Can you provide some more information? Possibly a screenshot of the error? Are you sure the file is not corrupt? How big is the file?

1 more replies
Answer Match 48.72%

I happened to update HP Desktop with windows 7 pro Os sea X's - 96091 to Windows 10 (64-bit). System did run a lot of error after updates ( cannot access google, dropbox, youtube...) I want to recover my PC back to windows 7 pro Os sea X's - 96091 for HP. I have product key lab on my desktop. But I do not have the Windows 7 recovery disc.  May I know how I can proceed for the recovery?

More replies
Answer Match 48.72%

I have a HP d325st computer with a virus problem. I need a recovery disk to try to reinstall the OS but I lost my disk while moving. HP informs me that they no longer have the recovery disks in stock because the computer is 2 yrs old.

How do I find a recovery disk to fix my problem? Will any recovery disk work or do I have to buy a new OS for the PC?

A:Windows XP Pro Recovery Disk for HP Desktop

Go to the HP support site and nose around for information on how to abtain new install discs . . they usually charge around $20 for them

5 more replies
Answer Match 48.72%

hi i have a hp 11o desktop pccan someone ples tell me how to boot from a memstick ples

More replies
Answer Match 48.72%

Hello Bleeping Computer,
Yesterday my machine was infected with Live Security Platinum. I appear to have successfully removed the rogue AV program after following the BC guide using MBAM (although I initially struggled to uninstall the program in Control Panel - nothing happened when i clicked 'Uninstall' - it has now disappeared from my program list though)
However, I've been left with a few issues:
1. On reboot all my desktop icons rearrange themselves on the LHS of the screen in alphabetical order. Auto-arrange is not checked. This is workable but annoying...
2. Periodically IE9 redirects to something like a googleads or adclick address. Once it asked me to click on a picture of a 'fire'?! I just closed the window...
3. Windows Firewall is disabled and I can't re-enable it - Error message: 'Windows Firewall can't change some of your settings. Error code 0x80070424'
4. AVG seemed to have been disabled so I've now uninstalled and reinstalled
5. AVG Resident Shield keeps indicating a Trojan horse Dropper.Generic_c.MMI in c:/Windows/System32/services.exe
6. Ran MBAM again overnight after removing Live Security Platinum and it's still picking up a few things. Currently it's quarantined the items in the attached JPEG:

I'm running Windows 7 64-bit so didn't run the GMER log as instructed. DDS.txt log is below, and Attach.txt attached.

Would appreciate any help on this matter.


DDS (Ver_2011-0... Read more

A:Live Security Platinum removed but desktop icons auto-arranging on reboot, IE9 regularly redirecting, Windows Firewall disabled

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

20 more replies
Answer Match 48.3%

As per the title:

PLEASE show me how to "Make my notepads & browsers open on top when selected."

Currently when selected in task bar they pop up underneath & I have to minimize what's open to see 'em.

A:Make my notepads & browsers open on top when selected.

How windows are stacked is called the Z order and it is controlled in part by your video drivers. If updating your video drivers does not solve the issue, then you will probably have to use a script to force the action that you want. I might be able to help you script a solution. Please see this post (and the videos) for more info on the scripting tool that I would use for this.

6 more replies
Answer Match 48.3%

Hi there! First and foremost, I am somewhat of a noob... but I am hoping that my own actions didn't further my computer's trouble. My computer was entirely unprotected when it was infected with the Windows Recovery Virus a few days ago. I attempted to download Avast, but the virus blocked it. So I ran RKill, which seemed to have worked, then I downloaded both Malwarebytes and Avast and ran them both, which moved the viruses to my "chest", but when the chest was full began deleting the infected files. I am able to get on the internet and other typical functions (albeit veeeeeeeeery slowly) but my files can only be found when I run them by name. Is there anything I can do to fully restore my computer?

Thank you so much for any help you can offer!!

A:Windows Recovery Virus - Virus Removed, but...

And also... now, several days later, has started hijacking google searches again. *sigh*

8 more replies
Answer Match 47.88%

please help me, i reformat my HP 110 Desktop PC Series, but the problem is, the CD needed for installation was lost, how can i retrieve the Product Key? Serial Number : 4CE33904M1 / Product Numer : H6L44AA / Model Number : 110-012d / OS Windows 8

More replies
Answer Match 47.88%

Well my computer was hijacked by a virus with the Windows Recovery popups. I've run several virus removals, and seen files removed such as ultra defragger, windows recovery, etc. The virus has hidden my files, and I've noticed in windows explorer a fake drive called memory_card on 'Npie99fc4' (Z:). Any help would be greatly appreciated. Thanks.

A:Desktop hidden, script errors, Windows Recovery

The "Windows Recovery" virus is plagueing my computer. It has hidden my desktop icons, and files/folders on my disk drive. I have attempted to run Malwarebytes and SmitFraud Fix, but the virus will not allow it. I have also run RKill prior to starting the anti virus programs, but they still cannot run. I have run SUPERAnti Spyware, which finds a couple of issues, but it will not remove the virus. I am running Windows XP Professional. Please help.

13 more replies
Answer Match 47.88%

Hello everyone. As much as I'd like to be posting a welcome message in the appropriate section, I could surely use some help. I'm going to go back to last night, just to make sure I don't miss anything.

I'd left my computer on when I went to bed, as my weekly in-depth virus scan (AVG Free) runs around 4 am, but we lost power sometime in the night and the computer was shut down when I woke up this morning. I restarted and everything seemed fine; I had an Adobe Flash Player update waiting to be downloaded but as I wasn't connected to the internet, I planned on updating it later. I left the computer running while I went to yoga and was back about 2 hours later, everything still seemed fine.

However, as I started my browser (Firefox), I was getting an error message that the Adobe Flash Player.exe couldn't be found (I think, I didn't pay much attention at first) and the filepath the message was referencing was somewhere in the Temp folder. Then I started getting the hard drive failure error message ("Hard Drive Failure
The system has detected a problem with one or more installed IDE / SATA hard disks. It is recommended that you restart the system.") and, like a moron (thinking it was an issue caused by the power outage last night), I restarted my computer.

Once I restarted, the desktop was black save a few icons - My Computer, Recycle Bin, etc and what looked like the Windows Recovery utility started running. Noticing a typo, I did so... Read more

More replies
Answer Match 47.88%

My father's computer (a desktop from 2010, I believe) crashed a while ago and Windows would freeze on the loading screen. At the time, I tried system recovery and that didn't work. I then tried to get help from HP at that point but they didn't provide me with any viable avenues for further troubleshooting. Because my dad mainly uses his computer to run a small online business I successfully installed Linux so at least he'd have a functioning computer, but it's a less than ideal setup for him. I'd really like to reinstall Windows 7, but I know I can't use the product code that came with the computer to get Windows from Microsoft. I tried to get support from the HP website again, but the computer is too old and no longer serviced by them. I just tried to recover again and I was able to look at the files on the hard drive through a command prompt and the Image Backup file is missing, which leaves me at a bit of a dead end. What are my options at this point? Would buying a new copy of Windows 7 be my best bet? Or is the machine old enough that he just needs a new one? Thanks!

More replies
Answer Match 47.88%

HiMy laptop was infected with the Windows Recovery virus and i lost my desktop and everything from the local drive. i downloaded stopzilla which seemed to remove the virus however i still do not have my desktop icons back and now keep having IE scrpt error messge popping up. In addition, i have the following problems:unable to open links in new window or tabcannot run defogger - will not run so saved to desktop. when i tried to run from desktop, the icon just disappearedtried to run DDS but seemed to just hang and nothing happenedhelp please!!Edit: Moved topic from Virus, Trojan, Spyware, and Malware Removal Logs to the more appropriate forum, due to the absence of logs. ~ Animal

A:windows recovery, no desktop / programs, script errors.....

Hello,Now that you have posted a log here: you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.Please be patient. It may take several days to get a response but your log will... Read more

1 more replies
Answer Match 47.88%

My laptop was infected with the Windows Recovery virus and i lost my desktop and everything from the local drive. i downloaded stopzilla which seemed to remove the virus however i still do not have my desktop icons back and now keep having IE scrpt error message(see below) popping up as well as a host of audio adverts and a load of pages in internet history which i have not visited.

Internet Explorer Script Error
Line: 13
Char: 1
Error: Object doesn't support this property or method
Code: 0
URL: hxxp://
Many thanks in advance for any help!
DDS (Ver_11-03-05.01) - NTFSx86
Run by David at 13:34:47.68 on 02/05/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.276 [GMT 1:00]
AV: *Disabled/Outdated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: *Disabled*
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\... Read more

A:windows recovery, no desktop / programs, script errors.....

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

18 more replies
Answer Match 47.46%

OS: Windows XP
Platform: Laptop
Problem Source: Internet, Malicious URL (3 were blocked, 1 was apparently not)
Anti-Virus Software: Avast! (Active), SUPER Anti-Spyware, Malwarebytes' Anti-Malware
Virus MO: Had Windows Security Center (I believe) being posting bogus things such as "Spyware Detected! Your system is now leaking personal information! Click here to get anti-spyware software!" and other similar messages. Would sometimes pop up the virus' "anti-virus software" called "XP Total Security" saying that there were 25 critical system errors.
Virus Removal: Used Super Anti-Spyware to remove trojans and registry problems. 1 System Problem was found[C:/Documents and Settings/User/Application Data/PSN.exe]. 2 Trojan [Local] were found. 3 Registry Problems were found, all related to Windows Security Center. I don't remember the exact details, but it was for notifications for firewall, updates, and one other thing. 359 Tracking Cookies were found, but that's not abnormal for not running AV for a bit.
Aftermath: As of right now, the virus seems KIA. The problem now is that it seems like Windows cannot run ANY exe files. When an executable is attempted to be run, it asks for what program I want to use to run it. This includes command prompt.

No reports or such can be given, since no EXEs can be run after removal of the trojan and such. Please advise.


A:Virus Removed, Need Help With Recovery!

Update: Nothing except for the extremely basic Windows functions run at the beginning, but still boots up normally. Current Processes:

svchost (x3)

These of course are all EXEs, but I suppose it just isn't letting any none system programs run.

2 more replies
Answer Match 47.46%

My hp recovery partition has been removed. I don't know what happens.

More replies
Answer Match 47.46%

i m having hp pavilion g7-1219wm notebook with windows 7 Home premium sp 1 OEM.
by accidentally Recovery partition from the hard disk is removed so that i m not able to use some function in HP Recovery Manager like System Recovery and Recovery Media creation..
please help me how can i restore/recover this deleted Recovery Partition..

A:Recovery partition is removed

Unless you have created a set of recovery discs or can order a set from HP, the recovery partition is lost and can only be reinstalled by a factory restore when you use the recovery discs.

Best to contact HP Support:

Just choose your region first.

9 more replies
Answer Match 47.46%

Is there any way that messages removed from the deleted file can be recovered? Thanks.....

A:Outlook 2K Removed Msg Recovery

Possibly. I know that if you're using Exchange you can recover Deleted Items. Make sure you're in the Deleted Items window and then go to Tools/Recover Deleted Items. Hope that helps.

2 more replies
Answer Match 47.46%

?Constantly receive this message when on the internet...on a brand new H50 desktop?? Hmm, we can't reach this page.Try thisMake sure you?ve got the right web address: http://www.puritan.comRefresh the pageSearch for what you want

More replies
Answer Match 47.46%

Hi there,

My PC is reasonably mature now and after getting a few BSOD's I just thought I was getting a little unlucky every so often. However they are now increasing in frequency and I can't seem to see a recurring theme in-between them.

Here's the log file. Hope it helps. I'm happy to provide any more info required.

Thanks a lot for any help at all in advance

A:A series of BSOD's during games and on the desktop

Please make sure to remove all pirated stuff from your system before we can start troubleshooting.

+++ WER1 +++:
Fault bucket 128944370255, type 5
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: AutoKMS.exe // Only variant I know of autokms is a crack variant
P3: 53c9a9a0
P4: mscorlib
P6: 561da691
P7: 1514
P8: 22
P9: System.FormatException

0 more replies
Answer Match 47.04%

So I turn on my computer this morning and all the files on my desktop are now deleted! a ton of icons for games are gone to same with notepads. My downloads folder is now empty, my desktop background is back to windows 7 default and settings are changed because when I drag a window it doesn't drag the image with it it just shows a box that's outlined with the opposite colour of what's behind the box.

Thanks in advance for the help

A:I booted up my computer and now tons of files/notepads/icon deleted!!!

Run a full scan with Malwarebytes from safe Mode if necessary. Post back what is found. If blocked switch to disinfection steps in Troubleshooting Windows 7 Failure to Start .

Try a System Restore to a point before this occurred. You may be in a a temporary profile. Did it say Setting Up Desktop just before it opened? Again, switch to System Recovery Options from disk if Win7 won't cooperate. Run a few Startup Repairs if System Restore won't work.

Next run SFC /SCANNOW Command if necessary from boot disk

Report back results.

If you confirm Hidden Files infection by googling the results of malware scans, post it up in our Security forums for customized help.

3 more replies
Answer Match 47.04%

I accidently downloaded False security spyware "Windows 7 Recovery". Immediately afterwards, all icons on the desktop disappeared, could not access any programs or files. Could not see transfered files/folders on the desktop. Ran rkill, then malwarebytes, then superantispyware free (in safe mode), then gmer. Many files were found, quarantined, and removed. However, still no files, programs on desktop or in start-up menu. In Firefox does not open pages to appropriate link. please help. thanks in advance.

Below are the available logs in order - Malwarebytes, Super antispyware free; the gmer log is incomplete, as it was too long to post the entire log when I tried, but the log appeared to have thousands of files listed, that appear to possibly be a bunch of normal files and programs.
thanks again
Malwarebytes' Anti-Malware

Database version: 6688

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

5/26/2011 8:15:01 PM
mbam-log-2011-05-26 (20-15-01).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|Q:\|)
Objects scanned: 282629
Time elapsed: 45 minute(s), 29 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 6

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected... Read more

A:Windows 7 recovery - all programs, folders, and desktop erased/missing

To make your files visible again, please download the following program to your desktop:Unhide.exeOnce the program has been downloaded, double-click on the Unhide.exe icon on your desktop and allow the program to run. This program will remove the +H, or hidden, attribute from all the files on your hard drives. If there are any files that were purposely hidden by you, you will need to hide them again after this tool is run.

9 more replies
Answer Match 47.04%

I ran malwarebytes and it seemed to clean the system up.
I cannot see my desktop icons UNless I go to folder options and choose to view hidden files and folders. I do not want to leave it this way because others may change system files.

How can I fix it windows vista to show these desktop icons another way?
Thanks for any help or advise in advance...

A:Windows Vista Recovery virus hidden desktop icons

I've been battling the same monster all day, Ive been running iexplore.exe(rkill) which stops the malicious processes and then running malwarebytes...but after restarting it still remains...BS security warnings all day...theres a program called unhide.exe which is supposed to unhide all of ur files after uve run the malwarebytes and supposedly removed the virus. It seems that malwarebytes is not fiunding every infected folder for some reason and Im treading water here. Please somebody point me in the right direction.

45 more replies
Answer Match 47.04%

Hi, I removed the Bitlocker password simply by hitting "Remove Passoword" on the right-click menu on the disk in Computer. Now I need the recovery key, but since I formated the USB-drive I had stored the recovery key on I'm stuck.

Do I have to format my Bitlocked drive?

A:Removed Bitlocker password - need recovery key

Not sure whether this will help, but it may do: How to use the BitLocker Recovery Password Viewer for Active Directory Users and Computers tool to view recovery passwords for Windows Vista

6 more replies
Answer Match 47.04%


I've been looking on the worlds greatest text book and am unable to find a solution. I'm using a retail version of Windows 8 Pro and am creating my on refresh images. I can perform a refresh just fine through the PC settings however after bit locker encryption I cannot use the refresh feature; in setting bit locker, it says "You will no longer be able to use Windows Recovery Environment unless it is manually enabled and moved to the system drive".

The Problem: I cannot find on the internet how to manually enable or move a Windows Recovery Environment so that I can use the refresh feature with bit locker encryption.

When I was using the manufacture upgraded OEM I was able to use the refresh feature with bit locker encryption, but not the retail version. I don't want to use a USB thumb-drive to house the recovery environment, I just want it on the hard-drive.

I found the convenience of using the refresh feature over image backup is that it wouldn't format the drive to restore the image, thus loosing the encryption. the refresh feature maintains encryption.

your help would be greatly appreciated.

More replies
Answer Match 47.04%

Hi all

brother recently had a problem with his computer, and rather then wait for me to sort it, he tried to install windows xp. Its installed, but drivers etc all missing. However i noticed he has a restore partition hidden. I'm assuming its usually accessed using an F key, e.g. F10 on startup. Looks like this is no longer the case so wondered if theres another way to run the partition?

thanks for any help.

A:XP install removed recovery F key at startup

What is the make and model number of the computer?

1 more replies
Answer Match 47.04%

Hi all

brother recently had a problem with his computer, and rather then wait for me to sort it, he tried to install windows xp. Its installed, but drivers etc all missing. However i noticed he has a restore partition hidden. I'm assuming its usually accessed using an F key, e.g. F10 on startup. Looks like this is no longer the case so wondered if theres another way to run the partition?

thanks for any help.

More replies
Answer Match 47.04%

first of all been awhile since I last posted here.
I recently tried to remove ubuntu from my computer and got the grub rescue screen.
tried redoing the computer from recovery partition this didn't work
tried reinstalling Ubuntu didn't work still grub rescue
changed some settings and now i get grub to come up
has the options for ubuntu and the windows recovery environment
when trying to go to windows recovery grub just restarts
I searched and found many kind of like issues but most were solved with a windows 7 disk. I found disk that I had from a college upgrade program, and nothing worked for me.
from the repair computer option selecting console i tried:
as well as the steps in this article:
called sony about the issue all they said they could do is send out the disk for $55 plus tax and shipping.
any help would be appreciated and thanks in advanced.

A:removed Ubuntu can't get into recovery partition

6 more replies
Answer Match 47.04%

I recently upgraded to a larger hard drive for my laptop, after dutifully backing-up virtually every file I had onto compact disks. While reformatting the new drive with the new O/S, I inadvertently made the mistake of keeping my old hard drive attached to the computer (via an external hard drive enclosure) - and when prompted during the reformatting process I agreed (stupidly) to the installation request to remove the existing partition from the old hard drive (obscure/unfamiliar drive letters the OS referenced is my only lame excuse here). Up until that point the drive had been intact, and was bootable, or at a minimum, could be read by virtually any computer via the external hard drive enclosure connection. Now I'm not able to read the drive at all.

Since I'm posting this, obviously I was able to complete the new hard drive upgrade successfully - but there were a couple of super-large files on my old hard drive that I was not able to easily get onto the back-up set of compact disks, along with my most recent bookmarks file - and a couple of other files, that I would like to recover, if possible.

I know that the existing files and file structure all still exist on the old hard drive, since only the partition was removed, and at least I didn't make the mistake of reformatting the old hard drive - so all those files are still essentially intact on the old hard drive. I've thought of a couple approaches to recovering those files, but before I do anythin... Read more

More replies
Answer Match 47.04%

I have an ACER M4 Series, Veriton desktop PC, Model number M4618G-Ui5240W.  The PC has an Inter Core i5-2400 CPU @ 3.10 GHz, 4 GB of Ram and a 32 bit Operating System .  I am running Windows 10. Recently it has begun failing during normal operations.  The top of the monitor will flicker with horizontal lines corrupting the video image, followed by loss of output to the monitor which goes blank.  The PC then either freezes with an annoying beeping sound that continues until I perform a hard shutdown or it completely shuts itself down. Any ideas what is causing this or what I can do to correct this issue?


A:I have an ACER M4 Series, Veriton desktop PC, Mode...

let's try with some basic test. windows logo key + stypemem window memory test will appear as first result, click it and run a memory test, so we can check if it's a ram issue.

4 more replies
Answer Match 47.04%

Model SVE151G11L. I do not want to delete the contents on the HDD so reloading the OS will only be a last resort. When i power on first screen shows:

Automatic Repair
Automatic repair couldn't repair your pc

I then choose Advanced Options which shows 4 options:

Continue- Exit and continue to windows 8
Use a Device- Use a USB device, network connection or windows Recovery DVD
Troubleshoot- Refresh or reset your pc, or use advanced tools
Turn off your pc

Anything I can do here to get back to windows without losing any files please? I don't wish to use the Troubleshooting option if it will erase any files on the HDD?

A:Sony Vaio E series Laptop cannot go to desktop

You should be able to "refresh" your pc without losing your files. Im not sure about programs, but personal files you shouldnt lose. This should  work, I have done it myself and the Microsoft website also says it will not remove personal files when you choose this option. But I will say do it at your own risk. If it works, back up your personal information onto an external media for safe keeping incase something like this happens again.

7 more replies
Answer Match 47.04%

Hello!  I went to put my desktop into sleep mode before bed last night and noticed it had turned off.   No idea why.  I go to turn it on and NOTHING.  No lights, no sounds, no fans, nothing.  The power signal light on the back is flashing green.  I followed some steps from this page Unplugging everything from the back and holding  the power button for 10 seconds didnt do anything.  Pushing for 1 second and waiting 10 seconds didn`t do anything.  I took off my side panel for the next steps, but didn`t want to touch anything as I don`t want to harm anything.  I`ve tried another outlet and the light keeps blinking green.  I haven`t had this computer for too long, maybe a couple years or less.  I take good care of it with good antiviruses and making sure to put it to sleep mode everynight, and keep it updated etc.  Looks like the power to the machine is okay since the light is flashing....  is it something internal? Wondering if anyone could help?   Feeling anxious.  Please and thank you! 

A:Need some help! Desktop Envy 700 series wont turn on! No li...

I understand that you started through the troubleshooting guide for power supplies.  The step about disconnecting internal components is essential to continue the troubleshooting, however.  If you are not comfortable with that, maybe get a more knowledgeable friend to help.  Otherwise it is off to the repair shop.

8 more replies
Answer Match 47.04%

I have an ACER M4 Series, Veriton desktop PC, Model number M4618G-Ui5240W.  The PC has an Inter Core i5-2400 CPU @ 3.10 GHz, 4 GB of Ram and a 32 bit Operating System .  I am running Windows 10. Recently it has begun failing during normal operations.  The top of the monitor will flicker with horizontal lines corrupting the video image, followed by loss of output to the monitor which goes blank.  The PC then either freezes with an annoying beeping sound that continues until I perform a hard shutdown or it completely shuts itself down. Any ideas what is causing this or what I can do to correct this issue?


A:I have an ACER M4 Series, Veriton desktop PC, Mode...

let's try with some basic test. windows logo key + stypemem window memory test will appear as first result, click it and run a memory test, so we can check if it's a ram issue.

4 more replies
Answer Match 47.04%

How to clear power-on password of HP desktop 110-a04 series pc?

A:how to clear power-on password of HP 110 desktop PC series

Hi, Please try 3 times then post back error code Regards.

1 more replies
Answer Match 47.04%

I'm having Windows Vista home edition on my HP laptop. The issue is, after I signon as Admin or Guest, I just get a dark /balnk screen and no desktop background or any icons, no taskbar etc.

I can access task manager by pressing (ALT+CTRL+DEL), therefore I can bring up the desktop (all icons and taskbar, system tray, quick launch) by initiating the task (explorer.exe) manually from New Task tab.

Please help to get rid of this issue.


More replies
Answer Match 47.04%

Gentlemen/Ladies: I am strongly considering the purchase of above HP Desktop. I will use the system for surfing the web and video and photo editing. I am a novice in the area of video and photo editing. I am taking up the craft as a hobby and see where it takes me. The primary components of the system will be as follows:

- Windows 7 Home Premium (Upgrading to Windows 8 when available)
- Processor:3rd Generation Intel(R) Core(TM) i7-3770K quad-core processor [3.5GHz, 8MB Shared Cache]
- Memory: 16GB DDR3
- HD: 256GB SSD + 1 TB 7200 HD
- GPU: 2GB Nvidia GeForce GTX680 [DVI, HDMI and VGA via adapter]
- Power Supply: 600 Watt
- Liquid Cooling Solution
- Monitor: Looking at Dell 27"2560x1440

The system comes equipped with Adobe Photoshop and Adobe Premiere 10

HP's Phoenix series is a favorite of some gamers. I was considering an Imac but decided against it because I wanted to stay with a PC. My question to the forum is are these components a little overkill? The price is not a barrier for me.

A:Is the HP-HPE h9-1210t Phoenix series Desktop Overkill for Me

I guess it will depend on how much video editing you end up doing. It is absolutely overkill for surfing the web, and overkill if you only do a little photo editing. The extra cores will help with the video editing, but you will never use them surfing the web. Even if you do gaming it will not help much. Games rarely use 4 cores of a processer. If you want a system like that, you would be better off building it yourself. It really isn't as hard as most people think and you will get better quality components, and exactly what you want. And you always have the experts here in chosing components and assembling the computer.

1 more replies
Answer Match 46.62%

Hello. Thank you so much for taking the time to check out my post first off. I recently had some random pop up that mentioned something about hard drive failure. Next thing I know the folders and everything were disappearing off of the desktop. Then the windows xp recovery pop up came, and started doing its scan thing. Task manager was "disabled by administrator." I was able to run malwarebytes and get some functioning back, but not the files as of yet. I then did a restore to see if I could recover anything but nothing yet. Ran malwarebytes again and found even more stuff the second time. And now I have a browser redirect issue every time I do a search and click a link. Please please help if you can. Thank you. Greatly appreciated.

A:Desktop files erased, redirect problem, Windows XP Recovery virus

Hello.Let's try this.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe from Kaspersky's website and not which appears to be an older version of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it.To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller. will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.~BladeIn your next reply, please include the following:TDSSKiller Log

7 more replies
Answer Match 46.62%

why did this happen when I went into recovery ,restart then resetting this PC. after the process completed .I checked my control panel for programs to uninstall and I always had something showing in there like Adobe reader , well to my amazement nothing is in there so I checked [ Apps removed while refreshing your PC ] and there they were all removed yet the computer works great even faster and I have much more disk space , just curious ?

A:after a recovery and apps removed this is what I found interesting

Did you recover it to factory spec ?

6 more replies
Answer Match 46.62%

Hi all,
I got a 64GB flash drive to back up my Windows 10 system. The flash drive showed 55 or 56GB free space before I started. After all of the boot files had been written to the drive, the flash drive showed that 8.88GB of space was used with 23.1GB remaining. That adds up to 32GB of total space.
I'm wondering what happened why it seems like the drive's total capacity was cut in half, and if the remaining space can be recovered.


A:USB Recovery and removed free space on USB device

Did Windows partition the drive or change the drive's format? Both of that information can be found in Disk Management.

2 more replies
Answer Match 46.62%

Hi guys, a big thank you for all the expert advice on this forum.

I managed to successfully remove antivirusxp08 following the excellent guides found here, written by Lawrence Abrams THANKS LAWRENCE .

Do I need to delete the recovery console?
If I don't delete it will it give me problems or sit in the background quitely until next catastrophe?
Should I post the Combofix log?


More replies
Answer Match 46.62%

Since I upgrade to win 7 not getting no sound from my speakers. It says no audio output device is installed. can someone tell me what to do?Thanks

A:No sound from desktop lenovo 3000 j series upgrade...

Welcome to the forums! Windows 7 has some inbuilt diagnostics to check for your sound issues Go to control panel and select troubleshooting your sound devices You can also go thorugh this thread at microsoft answers  If you still have a problem with your sound device make sure that is compatabile with windows 7,you may need to run the windows 7 upgrade advisor If the upgrade advisor finds the required drivers it will point out the link to you. Hope this helps   

Cheers and regards,? ???????????? ????????? ? ??????dh'? d? ?I am a volunteer here. I don't work for Lenovo

5 more replies
Answer Match 46.62%

I have an Acer AST 160-US321H desktop PC that is not connected to the internet and used for home projects only. Today I can not get it to come up at all. I have turned it on and off several times hoping to reset whatever went wrong. Also, there is a red light shining next to the green power light once I power it up. Nothing happens on the screen. The CPU is running (at least the fan) but that's about it. Any suggestions?
PROBLEM SOLVED!!!! I shut down the power strip for a few minutes then tried to reboot again and after doing a disk scan all is well again! THANKS!!!

More replies
Answer Match 46.62%

So, yeah. 5 year warranty compared to two of Buffalos and WDs, but does that actually mean that much more reliable a drive? With the problems with Seagate drives lately and a price slightly lower than with other similar drives I'm a bit wary... I won't be storing/backuping anything of real importance, just a handier option compared to a squadron of flash drives How much limited is the warranty actually? Manufacture flaws with no responsibility over the lost data or what? I'm a bit... Uncomfortable with any kind of warranty or RMA thing....

A:Seagate Freeagent Desktop series (especially 1TB model) reliable or not?

Aanyone? The actual model seems to be Desk, not Desktop, FWIW.

1 more replies
Answer Match 46.62%

I am SERIOUSLY thinking of buying HP TouchSmart 610 Quad series All-In-One desktop with following (customized) specs.

However, I DO NOT like the graphics card 2GB NVIDIA GeForce GT 425M - looks like they are putting laptop graphics card into a desktop.

My question(s) is/are :

Can I replace this card with one of the NVIDIA GTX series graphics card ? Which one will you recommend? I want to put in a new GTX 590 or any of the following :

GeForce GTX 580
GeForce GTX 570
GeForce GTX 560 Ti
GeForce GTX 560 (new!)
GeForce GTX 550 Ti
GeForce GTX 460

Will it be a simple SWAP or I need to upgrade PSU as well.

If I need to replace PSU what will be specifications of the new PSU? I do not know what is the rating of the current PSU. Do you think, it will handle the new GTX card?

Specs of the desktop :

Operating system SAVE $21 on Genuine Windows 7 Professional 64-bit edit
Processor Intel(R) Core(TM) i7-2600 quad-core processor with Turbo-Boost [up to 3.8GHz, 8MB cache] edit
Memory FREE UPGRADE to 8GB DDR3-1066MHz SODIMM [2 DIMMs] from 6GB edit
Hard drive FREE UPGRADE to 1.5TB 5400 rpm SATA 3Gb/s hard drive from 1TB edit
Office software No additional office software edit
Security software SAVE $30 on Norton Internet Security(TM) 2012 - 15 month edit
Graphics card 2GB NVIDIA GeForce GT 425M edit
Primary optical drive FREE UPGRADE to Blu-Ray writer from Blu-Ray player edit
Networking Pre... Read more

A:New NVIDIA GTX card in HP TouchSmart 610 Quad series All-In-One desktop

6 more replies
Answer Match 46.62%

I purchased what was described as a 'Dell 3588D Motherboard Slot 1 Dimension
XPS-B' motherboard from eBay. It uses Rambus memory sticks, but has 3
memory slots to fill, while every motherboard of that type I have researched only
has 2 memory slots. In addition, most of the Series B desktops I looked into
seem to be limited to 512MB of memory.
Because my motherboard has 3 memory slots, would I be allowed to insert three 256MB memory sticks, giving me a total memory of 768MB? I'm told that you should
not exceed the required limit of memory. Would someone care to comment on my


A:Filling a 3rd memory slot of a Dell B Series desktop

Just try it, it'll either work or it won't work.

1 more replies
Answer Match 46.2%

I've manually stopped the lastest version of the XP / Windows Recovery Virus with a combination of manually removing associated links and files from the registry (help from a youtube video), and also with the help of iexplore, unhide, and malware-bytes.
Scanned multiple times with malware bites to finally seemingly get it all.

Then I had to run the unhide.exe to see the hidden files again.

Then I had to copy the program files links back from c:documents and settings/*profilename*/Local Settings/temp/smtmp/1/*.* to c:Documents and Settings/*profilename*/Start Menu/

So far, so good. I also copied those moved start menu programs back to the /All Users/ and maybe one other user folder to fix their start menu too. (They didn't have their own recoverable start menu programs that I could find moved somewhere else).

Now, I notice that internet explorer doesn't allow internet access, and times out.
I've installed avira from a cd, and it was able to update through the internet connection, but at dialup speeds.
Something else is still wrong. I haven't messed with any Java uninstalls/reinstalls yet.
Any ideas where to start fixing the network connection based on what this virus may have done?
I'm currently scanning with Avira hoping it catches something.
--Avira caught and removed 1 virus. Problem still exists. Internet connection tests ok on other computer, same port.
Anyone else experiencing this from the new XP Recovery Virus?
I have removed older ... Read more

A:XP Recovery Virus removed, slow internet connection

Problem resolved. Was unrelated to the virus.

2 more replies
Answer Match 46.2%

For my Satellite C855-2HW with Win 8 OEM, I'd like a separate data partition besides the OS+programs one.
At the moment 4 partitons are already in use.
First a 450MB recovery partition, second a 260 MB EFI partition, third the 920GB OS partition and fourth a 10GB recovery partition.

Now that I've made recovery DVD's with 'Toshiba Media Recovery Creator' , I can safely remove the recovery partition right?
Can you only do this from external media like with Diskpart or Gparted ?

The need for this partition is for media files; fotos, docs,music, movies etc.

What is the best way to about this?
cheers, boris.

A:Satellite C855-2HW: Win 8 - Can 10GB Recovery partition be removed?

> Now that I've made recovery DVD's with 'Toshiba Media Recovery Creator' , I can safely remove the recovery partition right?

Yes. After changing partitions structure probably you will not be able to use HDD recovery installation anymore. This was the case in the past. Anyway, now you have recovery DVDs and you can install recovery image using these DVDs.

2 more replies
Answer Match 45.78%

I recently got an HP 2311x Monitor for Christmas and hooked it to a Lenovo H200 tower. I am unable to get past Windows splash screen. BIOS says "we apologize for the inconvenience, but Windows did not start successfully. A recent hardware or software change might have caused this." I have tried going into safe mode and just about every other option to no avail. I asked HP tech support to see if bad monitor but it is fine. I also called Lenovo Idea tech support and they said a tech will call back. I think something is uncompatible with Lenovo and HP monitor. It worked just fine when it was hooked to an old CRT. Cant handle the latest flat screen technology perhaps?. Any suggestions?

A:Lenovo H Series Desktop is not responding to recent HP 2311x monitor

Do you know anyone you can borrow another monitor from?

Have you checked monitor settings to make sure frequencies are within the range supported by your display device?

Another option would be to manually disable the display adapter driver. What type of display adapter is involved? Intel, NVIDIA, AMD?


1 more replies
Answer Match 45.78%

I had originally posted earlier at the link below, but was told to re-post after running a few programs here. I have attached all the necessary files. Thank you for checking out my post. Hopefully someone can help.

DDS (Ver_2011-06-03.01) - NTFSx86
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_12
Run by Scott at 1:48:31 on 2011-06-03
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.511.166 [GMT -4:00]
============== Running Processes ===============
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\iP... Read more

A:Desktop files erased, redirect problem, Windows XP Recovery virus, IEXPLORE.EXE running

Good evening. Download MGADiag from here and save it to your Desktop. Double click it to run it. Click Continue. Once the scan has completed, click Copy - this will transfer the results to your clipboard. Paste them into your next reply.

19 more replies
Answer Match 45.36%

I have two virtually identical Dell laptops running Windows Home Premium.

On one of them I wanted to see what was in the hidden RECOVERY partition so I fired up Disk Manager and added a drive letter. Nothing in the partition made sense to me so I removed the drive letter.

However, windows no longer recognizes the RECOVERY partition. If I run standard windows "Create System Repair Disc", I get an error message "The parameter is incorrect 0x80070057".

The Dell DataSafe program also says it cannot find the RECOVERY partition.

a) Is there some kind of attribute that got changed when I assigned the drive letter and then removed it? If yes, how can I set it back?

b) The laptops are virtually identical. Can I use a recovery disk from one on the other? I'm particularly interested in keeping MS Office 2010 Starter edition intact when I upgrade to Win 7 Pro.


A:Added Drive Letter to Recovery Partition, Then Removed... Now Broken

The recovery partition should have a letter. The System Reserved does not have one. Can you post a
Disk Management - Post a Screen Capture Image and I can look at it and see what is wrong. Be sure and widen the columns so all of the print can be read.

2 more replies