Tech Problem Aggregator

Please HELP! Ghost Audio, Ads, virus/adware running on windows explorer

Q: Please HELP! Ghost Audio, Ads, virus/adware running on windows explorer

Randomly every couple of minutes i hear ads and music even with no windows open. I've run task manager and it shows that explorer.exe is showing high pc usage.

Ive tried Norton antivirus, Windows defender, Malwarebytes anti malware, etc. Nothing can detect this.

Please can anyone help. Thanks in advance.

here is my dds.txt:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_29
Run by Danilo at 16:26:00 on 2012-06-16
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2935.1020 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\Program Files\IDT\WDM\STacSV64.exe
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\System32\spoolsv.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\IDT\WDM\AESTSr64.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\windows\System32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe
C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\ccSvcHst.exe
C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
C:\windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
C:\windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\SearchIndexer.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files (x86)\doubleTwist 2.0\DoubleTwist.DeviceHelper.exe
C:\Program Files (x86)\ooVoo\ooVoo.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\DellTPad\HidFind.exe
C:\windows\system32\conhost.exe
C:\Program Files (x86)\Constant Guard Protection Suite\IDVault.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\ccSvcHst.exe
C:\Program Files (x86)\SFT\GuardedID\GIDD.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files (x86)\SFT\GuardedID\x64\GIDD.exe
C:\windows\system32\taskeng.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\WUDFHost.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\windows\Explorer.EXE
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\windows\system32\taskeng.exe
C:\windows\system32\sppsvc.exe
C:\windows\system32\DllHost.exe
C:\windows\system32\DllHost.exe
C:\windows\system32\REGSVR32.exe
C:\windows\SysWOW64\cmd.exe
C:\windows\system32\conhost.exe
C:\windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = *.local;192.168.*.*
mWinlogon: Userinit=C:\windows\system32\userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Norton Identity Protection: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\coIEPlg.dll
BHO: PodcastBHO Class: {65134fdf-f8a5-4b3d-91d9-cdf273cfd578} - C:\Program Files (x86)\Common Files\doubleTwist\IEPodcastPlugin.dll
BHO: Norton Vulnerability Protection: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\IPS\IPSBHO.DLL
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Constant Guard Protection Suite (COM): {b84cdbe7-1b46-494b-a188-01d4c52deb61} - C:\ProgramData\White Sky, Inc\ID Vault\IEBHO1.1.605.0\NativeBHO.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\coIEPlg.dll
uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
uRun: [doubleTwist] "C:\Program Files (x86)\doubleTwist 2.0\doubleTwist.DeviceHelper.exe"
uRun: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
uRun: [Desktop Software] "C:\Program Files (x86)\Common Files\SupportSoft\bin\bcont.exe" /ini "C:\Program Files (x86)\ComcastUI\Desktop Software\uinstaller.ini" /fromrun /starthidden
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun: [<NO NAME>]
mRun: [RoxWatchTray] "c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
mRun: [Desktop Disc Tool] "c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
mRun: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun: [GIDDesktop] C:\Program Files (x86)\SFT\GuardedID\gidd.exe /s
dRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
dRun: [doubleTwist] "C:\Program Files (x86)\doubleTwist 2.0\doubleTwist.DeviceHelper.exe"
dRun: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
dRun: [Desktop Software] "C:\Program Files (x86)\Common Files\SupportSoft\bin\bcont.exe" /ini "C:\Program Files (x86)\ComcastUI\Desktop Software\uinstaller.ini" /fromrun /starthidden
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\CONSTA~1.LNK - C:\Program Files (x86)\Constant Guard Protection Suite\IDVault.exe
uPolicies-explorer: HideSCAHealth = 1 (0x1)
uPolicies-system: DisableRegedit = 0 (0x0)
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: DisableRegedit = 0 (0x0)
dPolicies-explorer: HideSCAHealth = 1 (0x1)
dPolicies-system: DisableRegedit = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} - hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
TCP: DhcpNameServer = 192.168.0.1
TCP: Interfaces\{29D6B677-2592-4239-8913-244705319DE8} : NameServer = 75.75.75.75,75.75.76.76
TCP: Interfaces\{29D6B677-2592-4239-8913-244705319DE8} : DhcpNameServer = 192.168.0.1
TCP: Interfaces\{29D6B677-2592-4239-8913-244705319DE8}\2656C6B696E6534376 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{29D6B677-2592-4239-8913-244705319DE8}\4414E494C4F4D20534F5E4564777F627B6 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{29D6B677-2592-4239-8913-244705319DE8}\4414E494C4F4D20534F5E4564777F627B6F513 : DhcpNameServer = 192.168.2.1
TCP: Interfaces\{2FBF1A90-4F7C-4642-9FA3-B96F61030F9F} : DhcpNameServer = 192.168.0.1
Handler: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - C:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
mASetup: {9191979D-821C-4EA8-B021-2DA1D859A7C5}-3Reg - C:\Program Files (x86)\SFT\GuardedID\gidi.exe /v
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64: AcroIEHelperStub - No File
BHO-X64: Norton Identity Protection: {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\coIEPlg.dll
BHO-X64: Norton Identity Protection - No File
BHO-X64: PodcastBHO Class: {65134FDF-F8A5-4B3D-91D9-CDF273CFD578} - C:\Program Files (x86)\Common Files\doubleTwist\IEPodcastPlugin.dll
BHO-X64: dTPodcastBHO - No File
BHO-X64: Norton Vulnerability Protection: {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\IPS\IPSBHO.DLL
BHO-X64: Norton Vulnerability Protection - No File
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype add-on for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64: SkypeIEPluginBHO - No File
BHO-X64: Constant Guard Protection Suite (COM): {B84CDBE7-1B46-494B-A188-01D4C52DEB61} - C:\ProgramData\White Sky, Inc\ID Vault\IEBHO1.1.605.0\NativeBHO.dll
BHO-X64: Constant Guard Protection Suite (COM) - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB-X64: Norton Toolbar: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\coIEPlg.dll
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [(Default)]
mRun-x64: [RoxWatchTray] "c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
mRun-x64: [Desktop Disc Tool] "c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
mRun-x64: [Dell DataSafe Online] C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [AccuWeatherWidget] "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
mRun-x64: [GIDDesktop] C:\Program Files (x86)\SFT\GuardedID\gidd.exe /s
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Danilo\AppData\Roaming\Mozilla\Firefox\Profiles\invl7o3p.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.xfinity.com/?cid=insDate03012012
FF - prefs.js: network.proxy.type - 4
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Common Files\doubleTwist\NPPodcast.dll
FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
.
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\windows\system32\Drivers\PxHlpa64.sys --> C:\windows\system32\Drivers\PxHlpa64.sys [?]
R0 SymDS;Symantec Data Store;C:\windows\system32\drivers\N360x64\0602010.005\SYMDS64.SYS --> C:\windows\system32\drivers\N360x64\0602010.005\SYMDS64.SYS [?]
R0 SymEFA;Symantec Extended File Attributes;C:\windows\system32\drivers\N360x64\0602010.005\SYMEFA64.SYS --> C:\windows\system32\drivers\N360x64\0602010.005\SYMEFA64.SYS [?]
R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.0.145\Definitions\BASHDefs\20120531.001\BHDrvx64.sys [2012-5-31 1160824]
R1 ccSet_N360;Norton Security Suite Settings Manager;C:\windows\system32\drivers\N360x64\0602010.005\ccSetx64.sys --> C:\windows\system32\drivers\N360x64\0602010.005\ccSetx64.sys [?]
R1 GIDv2;GIDv2;C:\windows\system32\drivers\GIDv2.sys --> C:\windows\system32\drivers\GIDv2.sys [?]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.0.145\Definitions\IPSDefs\20120613.007\IDSviA64.sys [2012-6-13 488568]
R1 SymIRON;Symantec Iron Driver;C:\windows\system32\drivers\N360x64\0602010.005\Ironx64.SYS --> C:\windows\system32\drivers\N360x64\0602010.005\Ironx64.SYS [?]
R1 SymNetS;Symantec Network Security WFP Driver;C:\windows\system32\Drivers\N360x64\0602010.005\SYMNETS.SYS --> C:\windows\system32\Drivers\N360x64\0602010.005\SYMNETS.SYS [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\windows\system32\DRIVERS\vwififlt.sys --> C:\windows\system32\DRIVERS\vwififlt.sys [?]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
R2 AESTFilters;Andrea ST Filters Service;C:\Program Files\IDT\WDM\AESTSr64.exe [2011-9-10 89600]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-9-10 13336]
R2 iPodDrv;iPodDrv;\??\C:\windows\system32\drivers\iPodDrv.sys --> C:\windows\system32\drivers\iPodDrv.sys [?]
R2 MotoHelper;MotoHelper Service;C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperService.exe [2011-12-6 214896]
R2 N360;Norton Security Suite;C:\Program Files (x86)\Norton Security Suite\Engine\6.2.1.5\ccsvchst.exe [2012-6-10 138232]
R2 NOBU;Dell DataSafe Online;C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe [2010-8-25 2823000]
R2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2011-9-10 1692480]
R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-9-10 2533400]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\windows\system32\DRIVERS\CtClsFlt.sys --> C:\windows\system32\DRIVERS\CtClsFlt.sys [?]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-6-10 138912]
R3 HECIx64;Intel(R) Management Engine Interface;C:\windows\system32\DRIVERS\HECIx64.sys --> C:\windows\system32\DRIVERS\HECIx64.sys [?]
R3 Impcd;Impcd;C:\windows\system32\DRIVERS\Impcd.sys --> C:\windows\system32\DRIVERS\Impcd.sys [?]
R3 IntcDAud;Intel(R) Display Audio;C:\windows\system32\DRIVERS\IntcDAud.sys --> C:\windows\system32\DRIVERS\IntcDAud.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\windows\system32\DRIVERS\Rt64win7.sys --> C:\windows\system32\DRIVERS\Rt64win7.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-1-8 136176]
S2 IDVaultSvc;CGPS Service;C:\Program Files (x86)\Constant Guard Protection Suite\IDVaultSvc.exe [2012-6-6 66160]
S2 McMPFSvc;McAfee Personal Firewall Service;"C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc --> C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [?]
S2 RoxWatch12;Roxio Hard Drive Watcher 12;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-4-10 257696]
S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-1-8 136176]
S3 RoxMediaDB12OEM;RoxMediaDB12OEM;C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\windows\system32\Drivers\RtsUStor.sys --> C:\windows\system32\Drivers\RtsUStor.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\windows\system32\drivers\tsusbflt.sys --> C:\windows\system32\drivers\tsusbflt.sys [?]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\windows\system32\drivers\TsUsbGD.sys --> C:\windows\system32\drivers\TsUsbGD.sys [?]
S3 USBAAPL64;Apple Mobile USB Driver;C:\windows\system32\Drivers\usbaapl64.sys --> C:\windows\system32\Drivers\usbaapl64.sys [?]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\windows\system32\Wat\WatAdminSvc.exe --> C:\windows\system32\Wat\WatAdminSvc.exe [?]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2012-06-13 00:47:03 3216384 ----a-w- C:\windows\System32\msi.dll
2012-06-13 00:47:03 2342400 ----a-w- C:\windows\SysWow64\msi.dll
2012-06-13 00:46:52 1462272 ----a-w- C:\windows\System32\crypt32.dll
2012-06-13 00:46:51 184320 ----a-w- C:\windows\System32\cryptsvc.dll
2012-06-13 00:46:51 140288 ----a-w- C:\windows\SysWow64\cryptsvc.dll
2012-06-13 00:46:51 140288 ----a-w- C:\windows\System32\cryptnet.dll
2012-06-13 00:46:51 1158656 ----a-w- C:\windows\SysWow64\crypt32.dll
2012-06-13 00:46:51 103936 ----a-w- C:\windows\SysWow64\cryptnet.dll
2012-06-13 00:44:33 9216 ----a-w- C:\windows\System32\rdrmemptylst.exe
2012-06-13 00:44:33 77312 ----a-w- C:\windows\System32\rdpwsx.dll
2012-06-13 00:44:33 149504 ----a-w- C:\windows\System32\rdpcorekmts.dll
2012-06-13 00:44:12 5559664 ----a-w- C:\windows\System32\ntoskrnl.exe
2012-06-13 00:44:12 209920 ----a-w- C:\windows\System32\profsvc.dll
2012-06-13 00:44:11 3968368 ----a-w- C:\windows\SysWow64\ntkrnlpa.exe
2012-06-13 00:44:11 3913072 ----a-w- C:\windows\SysWow64\ntoskrnl.exe
2012-06-13 00:44:09 3146752 ----a-w- C:\windows\System32\win32k.sys
2012-06-13 00:44:08 210944 ----a-w- C:\windows\System32\drivers\rdpwd.sys
2012-06-11 01:13:53 4140192 ----a-w- C:\windows\SysWow64\FlashPlayerInstaller.exe
2012-06-10 21:49:59 -------- d-----w- C:\Program Files (x86)\Common Files\Symantec Shared
2012-06-10 21:48:35 405624 ----a-r- C:\windows\System32\drivers\N360x64\0602010.005\symnets.sys
2012-06-10 21:48:35 1092728 ----a-r- C:\windows\System32\drivers\N360x64\0602010.005\symefa64.sys
2012-06-10 21:48:34 737912 ----a-w- C:\windows\System32\drivers\N360x64\0602010.005\srtsp64.sys
2012-06-10 21:48:34 451192 ----a-r- C:\windows\System32\drivers\N360x64\0602010.005\symds64.sys
2012-06-10 21:48:34 37496 ----a-w- C:\windows\System32\drivers\N360x64\0602010.005\srtspx64.sys
2012-06-10 21:48:34 190072 ----a-r- C:\windows\System32\drivers\N360x64\0602010.005\ironx64.sys
2012-06-10 21:48:34 167048 ----a-r- C:\windows\System32\drivers\N360x64\0602010.005\ccsetx64.sys
2012-06-10 21:48:05 -------- d-----w- C:\windows\System32\drivers\N360x64\0602010.005
2012-06-10 21:42:59 175736 ----a-w- C:\windows\System32\drivers\SYMEVENT64x86.SYS
2012-06-10 21:42:59 -------- d-----w- C:\Program Files\Symantec
2012-06-10 21:42:59 -------- d-----w- C:\Program Files\Common Files\Symantec Shared
2012-06-10 21:42:25 -------- d-----w- C:\windows\System32\drivers\N360x64
2012-06-10 21:42:24 -------- d-----w- C:\Program Files (x86)\Norton Security Suite
2012-06-10 21:42:07 -------- d-----w- C:\ProgramData\NortonInstaller
2012-06-10 21:42:07 -------- d-----w- C:\Program Files (x86)\NortonInstaller
2012-06-10 21:39:21 -------- d-----w- C:\ProgramData\Norton
2012-06-10 21:27:08 -------- d-----w- C:\ProgramData\IsolatedStorage
2012-06-10 21:27:07 -------- d-----w- C:\Users\Danilo\AppData\Local\ID Vault
2012-06-10 21:26:28 8007680 ----a-w- C:\Program Files (x86)\Mozilla Firefox\Microsoft.mshtml.dll
2012-06-10 21:26:28 1724016 ----a-w- C:\Program Files (x86)\Mozilla Firefox\IdVaultCore.dll
2012-06-10 21:26:28 138864 ----a-w- C:\Program Files (x86)\Mozilla Firefox\CommonDotNET.dll
2012-06-10 21:26:28 104048 ----a-w- C:\Program Files (x86)\Mozilla Firefox\IdVaultCore.XmlSerializers.dll
2012-06-10 21:26:21 -------- d-----w- C:\Users\Danilo\AppData\Roaming\ID Vault
2012-06-10 21:25:54 29288 ------w- C:\windows\System32\drivers\gidv2.sys
2012-06-10 21:25:52 65816 ------w- C:\windows\System32\GIDLogonCP64.dll
2012-06-10 21:25:52 467224 ------w- C:\windows\System32\GIDHOOK64.DLL
2012-06-10 21:25:52 446752 ------w- C:\windows\System32\GIDHookLogon64.dll
2012-06-10 21:25:52 206608 ------w- C:\windows\System32\GIDBIN1.DLL
2012-06-10 21:25:52 109064 ------w- C:\windows\System32\EasyHook64.dll
2012-06-10 21:25:52 102160 ------w- C:\windows\System32\GIDBIN3.DLL
2012-06-10 21:25:44 -------- d-----w- C:\ProgramData\GID
2012-06-10 21:25:43 -------- d-----w- C:\Program Files (x86)\SFT
2012-06-10 21:25:29 -------- d-----w- C:\Program Files (x86)\Constant Guard Protection Suite
2012-06-10 21:25:00 -------- d-----w- C:\ProgramData\White Sky, Inc
2012-06-02 19:37:14 1544704 ----a-w- C:\windows\System32\DWrite.dll
2012-06-02 19:37:14 1077248 ----a-w- C:\windows\SysWow64\DWrite.dll
2012-06-02 19:36:32 75120 ----a-w- C:\windows\System32\drivers\partmgr.sys
2012-06-02 19:36:21 1918320 ----a-w- C:\windows\System32\drivers\tcpip.sys
2012-06-02 19:36:19 1732096 ----a-w- C:\Program Files\Windows Journal\NBDoc.DLL
2012-06-02 19:36:19 1367552 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
2012-06-02 19:36:18 936960 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
2012-06-02 19:36:18 1393664 ----a-w- C:\Program Files\Windows Journal\JNTFiltr.dll
2012-06-02 19:36:17 1402880 ----a-w- C:\Program Files\Windows Journal\JNWDRV.dll
2012-05-31 04:23:31 128512 ----a-w- C:\ProgramData\Microsoft\Windows\DRM\7A95.tmp.dat
2012-05-28 22:30:16 -------- d-----w- C:\Users\Danilo\AppData\Local\{57929D66-6DA6-40F0-9A77-F3EE6B38014F}
2012-05-28 22:30:06 -------- d-----w- C:\Users\Danilo\AppData\Local\{407677AB-4EE2-410C-83F0-245B398E2542}
.
==================== Find3M ====================
.
2012-06-11 01:14:06 70304 ----a-w- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
2012-06-11 01:14:06 419488 ----a-w- C:\windows\SysWow64\FlashPlayerApp.exe
2012-05-18 0248 2311680 ----a-w- C:\windows\System32\jscript9.dll
2012-05-18 01:59:14 1392128 ----a-w- C:\windows\System32\wininet.dll
2012-05-18 01:58:39 1494528 ----a-w- C:\windows\System32\inetcpl.cpl
2012-05-18 01:55:22 173056 ----a-w- C:\windows\System32\ieUnatt.exe
2012-05-18 01:51:30 2382848 ----a-w- C:\windows\System32\mshtml.tlb
2012-05-17 22:45:37 1800192 ----a-w- C:\windows\SysWow64\jscript9.dll
2012-05-17 22:35:47 1129472 ----a-w- C:\windows\SysWow64\wininet.dll
2012-05-17 22:35:39 1427968 ----a-w- C:\windows\SysWow64\inetcpl.cpl
2012-05-17 22:29:45 142848 ----a-w- C:\windows\SysWow64\ieUnatt.exe
2012-05-17 22:24:45 2382848 ----a-w- C:\windows\SysWow64\mshtml.tlb
.
============= FINISH: 16:35:55.14 ===============

A: Please HELP! Ghost Audio, Ads, virus/adware running on windows explorer

Hello and Welcome to TSF.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please download aswMBR.exe to your desktop. Double-click aswMBR.exe to run it.
When prompted to download the latest Avast! virus definitions, please choose Yes
Click the Scan button to start scan.
Wait until it says, 'Scan finished successfully'. ( Note - do not select any Fix at this time)
Click Save log, and save it to your desktop.
Click Exit.
Please post the contents of that log, aswMBR.txt, in your next reply.
------------------------------------------------------

When you run this tool, remember to choose 'Skip' not 'Cure' if it finds something. We just want a scan, not a fix.

Download tdsskiller.exe and Save it to your Desktop.

Double-click tdsskiller.exe and click 'Run'

Click Change parameters then under 'Additional options' check the 'Detect TDLFS file system' > OK.

Click 'Start scan'.

If no infection is found, click 'Close' and let me know.

If an infection is found, select 'Skip' from the dropdown menu under 'Cure' then click 'Continue' > 'Close' > 'Close'.

It will produce a log here > C:\TDSSKiller.2.7.40.0_date_time_log.txt

Please navigate to the file, double-click to open it, and copy/paste the contents in your next reply.

------------------------------------------------------

2 more replies
Answer Match 70.14%

I hope I am following instructions as you have posted. I have been trying to fix the virus on my pc for a month with no luck. The virus is definitely in my windows explorer. When I shut it off I am able to navigate around internet but very very slow. Also I have no access to my skype since it happened. I have backed up everything I want to my external.
thanks Technos, Cant wait to hear from you
Bec1256

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:10:33 PM, on 10/10/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\PixArt\PAC207\Monitor.exe
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Dell Support Center\gs_agent\dsc.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
c:\program files\real\... Read more

A:audio adware coming from my windows explorer

14 more replies
Answer Match 63.42%

Hello guys I am running Windows XP Professional and in the last 2 days my computer a "Ghost Audio" type virus.
There is no program that I can tell in the Task Manager that is causing it.
I assume it's Internet Explorer because every once in a while i get a "Script Error" where it asks me if I want to keep running the script.
It is also hijacking my google searches when I click on a link after a search.

I have the following programs to help.
Avira Antivir
Malware Bytes
Hijack This
and RKill
I have ran these in safe mode and regular mode many times but I cant kick it, so here I am(i tried researching online but can't figure this one out). Here is my Hijack This log
Any Help would be LOVELY.

Edit: I updated my Java to the most current one and uninstalled the old. They say that this was probably where the virus came in...
Edit2: created the DDS and ATTACH files, the GMER is erroring out about 5 minutes into a scan, and it closes down. I will keep trying, if it works, I will edit and attach.
Edit 3: I got the GMER file.

A:Ghost Audio Virus -

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

10 more replies
Answer Match 62.16%

hi guys.since yesterday whenever i turn my speakers on, every couple of minutes i'll get an advert played through them, no pop up appears and there is nothing i can do to close this down. help!here is my dds report......DDS (Ver_10-03-17.01) - NTFSx86 Run by Gaylord at 18:07:59.48 on 27/07/2010Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_15Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.1022.204 [GMT 1:00]AV: avast! antivirus 4.8.1368 [VPS 100727-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupsvchost.exesvchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exesvchost.exe 4C:\WINDOWS\system32\spoolsv.exesvchost.exe 4svchost.exeC:\Program Files\Common Files\Acronis\Schedule2\schedul2.exeC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\P... Read more

A:Audio ghost virus causing hell.

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

2 more replies
Answer Match 61.74%

I have an unusual virus/spyware/malware running on my computer and I've never seen anything like it. At random intervals audio will start playing. One time, it sounds like a news broadcast, another time it sounds like some Japanese song, or just people talking. I've noticed that whenever the "ghost audio" is playing, I pull up the Windows Task Manager to see if some foreign task in causing this, but it shows the task "iexplorer.exe" running and its Mem Usage is upwards of 50,000 K, which leads me to believe that the software is running through it. I use FireFox and never Internet Explorer, so there is no reason the real "iexplorer.exe' should be running in the background. I've ran McAfee virus scan, Ad-Aware SE, Eusing registry cleaner, and StopZilla, but none of these programs have located or deleted it. Below is my log-file from Hi-Jack This. I hope someone could help me. Thank you for the help.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:22:38 PM, on 8/13/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleM... Read more

A:Help removing 'iexplore.exe' ghost audio virus/malware

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 60.9%

I have an unusual virus/spyware/malware running on my computer and I've never seen anything like it. At random intervals audio will start playing. One time, it sounds like a news broadcast, another time it sounds like some Japanese song, or just people talking. I've noticed that whenever the "ghost audio" is playing, I pull up the Windows Task Manager to see if some foreign task in causing this, but it shows the task "iexplorer.exe" running and its Mem Usage is upwards of 50,000 K, which leads me to believe that the software is running through it. I use FireFox and never Internet Explorer, so there is no reason the real "iexplorer.exe' should be running in the background.

I've ran McAfee virus scan, Ad-Aware SE, Eusing registry cleaner, and StopZilla, but none of these programs have located or deleted it. Below is the DDS.txt copy & pasted and I've attached the Attact.txt file. For some reason the GMER.exe program didn't appear to do anything when I double clicked the extracted .exe file. It looked like it was running in the task manager, but there was no GUI pop-up. I hope someone can help...


DDS (Ver_09-07-30.01) - NTFSx86
Run by Alex at 17:52:35.31 on Sat 08/15/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.557 [GMT -4:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Personal Fir... Read more

A:Help removing 'iexplore.exe' ghost audio virus/malware/spyware

hi.

Lets try other Rootkit scan before we proceed with fixes.

Download RootRepeal.zip to your Desktop and extract the compressed file to it's own folder.

Open the folder and doubleclick on RootRepeal.exe to run it.Click on the Report tab, and then click on: Scan
A window opens asking what to include in the scan.
Check the following boxes then click OK:
Drivers
Files
Processes
SSDT
Stealth Objects
Hidden Services
Shadow SSDT You will then be asked which drive to scan.
Check C: (or the drive your operating system is installed on, if not C)
Click OK once again.
The tool will begin scanning and may take a while to complete, so please be patient.
When the scan finishes, click on: Save Report. Save it to your desktop so you may find it easily.

Please attach the report in your next reply.

Mark

10 more replies
Answer Match 58.8%

This morning my computer start randomly playing sound clips of advertisements and music even when my internet is not running. Nothing out of the ordinary shows up when I check my task manager, but its doing it constantly. Any help is greatly appreciated.

Here is my HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:39:44 AM, on 7/13/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_265.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_265.exe
C:\Users\The Authority\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/HPNOT/1
R1 - HKLM\Software\Microsoft\Internet Ex... Read more

More replies
Answer Match 56.28%

I need help with removing a Search Engine Redirect Virus and also Internet Explorer stays running in my Windows Task Manager, which makes me think the virus is somehow linked to my Internet Explorer (which I never really use, I use Mozilla). The only browser the redirect doesn't happen in is Google Chrome which I am using right now to type this. Both Internet Explorer and Mozilla have this redirect problem. Below is my combofix log after I ran combofix.
ComboFix 10-12-09.04 - HP_Owner 12/10/2010 11:43:20.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.447.71 [GMT -5:00]
Running from: c:\documents and settings\HP_Owner\My Documents\Downloads\ComboFix.exe
AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Spyware Doctor with AntiVirus *On-access scanning disabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\HP_Owner\g2mdlhlpx.exe
C:\install.exe
c:\temp\bkR11
c:\temp\bkR11\ftCa.log
c:\windows\system32\_000021_.tmp.dll
c:\windows\system32\_000022_.tmp.dll
c:\windows\system32\_000023_.tmp.dll
c:\windows\system32\drivers\sst115.tmp
D... Read more

A:My Combofix Log after Search Engine Redirect Virus and Internet Explorer always running in Windows Task Manager

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for post... Read more

5 more replies
Answer Match 56.28%

I've come here after running several ineffective scans, including McAfee Security Center, AdAware, and SpyBot S&D.

My laptop has contracted a particularly annoying adware virus. Every few minutes, I'll hear an audio advertisement for detergent or "crunchy onion chicken," or the ubiquitous "congratulations, you've won." Sometimes two ads play at once, but they never have a popup/window counterpart. This is the malevolence of the virus: I have no idea where the audio is coming from. As a musician, the virus is especially awful because it has made music painful to listen to. I can barely get through a full song without hearing an advertisement. Any help solving this thing would be greatly appreciated!

Anyway, I'll get down to it. Here's my HijackThis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:20:35 PM, on 8/22/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18498)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program ... Read more

A:Audio Adware Virus Causing Hell, Is The Bane Of My Existence

Download ComboFix here :

Link 1
Link 2
* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Here is a guide on how to disable them

Click me
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt log in your next reply.
 

3 more replies
Answer Match 55.44%

Hello Everyone,
 
I've been scanning the forum and this seems like it's been dealt with before but I can't for the life of me figure it out.  When I Open Google Chrome, usually within a minute or two, a bunch of cases of internet explorer open up in the background.  You can't see them unless looking at task manager.  They start as blank pages then play audio Adds.  As of now I ran an AVG scan and it found nothing.  .  I downloaded DDS and ran the scans.  I have the logs but I'm not sure how to attach them in the proper way.  I'm currently running a malware bytes scan and will update with results from that in the morning. (Looking through other threads it seems to rarely fix it).  I also tried to do a quick system restore.  To a restore point about a week ago and it went through the process normally but then came up after going through the reboot of the restore saying the restore failed, could not rewrite one of the files.  I went to try again and that restore point was gone and replaced with one from only 10 minutes ago.  At any rate when I look at the task list processes window, I see about 5 processes for IE and if I end one or more of them they almost instantly repopulate.
 
I'm worried about this and need to get this computer back to proper running shape as I use it for anything.  I have no idea where this virus has come from as I can't think of anything strange I've downloaded ... Read more

A:Invisible internet explorer running audio adds

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:  aswMBR will create M... Read more

14 more replies
Answer Match 55.44%

Internet explorer is running 15-20 times and my compauter keeps playing audio advertisements every few minutes. this must be some sort of malware or virus. i have ran ad-aware and symantec. i have run a hijackthis report witch i have pasted below.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:39:57 AM, on 4/14/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Symantec AntiVirus\Smc.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Symantec\Backup Exec System Recovery\Agent\VProSvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Nero\Nero8\InCD\InCDsrv.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Google\Update\1.2.183.23\GoogleCrashHandler.exeC:\Progra... Read more

A:Internet Explorer running in background playing audio ads

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

3 more replies
Answer Match 55.02%

Hi. New here so hoping all goes well! This problem has just started today however I did have the, whats known as the "Google redirect virus" but managed, or thought I got rid of that. Anyway, now I have this about a week later so wondering if you can help. As said in the topic title Iexplore.exe keeps running with audio ads and some visual ones occasionally. I am currently using "Process blocker" to block iexplore.exe as it is really doing my head in but looking for a fix.My DDS Log is below and attach DDS file attached.Many thanks in advanceChrisDDS (Ver_10-03-17.01) - NTFSx86 Run by Chris at 22:10:18.23 on 25/07/2010Internet Explorer: 8.0.7600.16385Microsoft Windows 7 Ultimate 6.1.7600.0.1252.44.1033.18.2038.893 [GMT 1:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Windows\system32\lsm.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svch... Read more

A:IE explorer running in the background playing audio ads with occasional visual ads by IE

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

3 more replies
Answer Match 54.6%

When I use Google, I can search just fine, but if I click on a link (one of the search results) I am redirected to a random website, some of which are blocked by my anti-virus software saying that the website is dangerous. This doesn't only affect Google, however, it affects any search engine that I have tried (Yahoo!, Bing, Google, Ask). Another problem that I have been having is a random "Script Error" message that will pop up, saying "continue running script?" with the choices "yes" and "no." It interrupts whatever I am doing and if I hit any keys while it is open, it automatically selects "yes." I hit no whenever I can, but this pop-up issue has been preventing me from playing games, as I get interrupted and die, writing papers for school, because it constantly pops up and disallows me from concentrating or typing correctly. There seems to be no result whenever I accidentally select yes. Next, although I muted it, there is an unknown source of audio that just has a man and a woman saying random words. It almost sounds like a skype conversation, because of the influction and tone. When I created a guest account for my dad to use on my laptop, the audio was everpresent, but I could not find where it was coming from when I tried to mute it. Finally, to top off all of my computer problems, Windows desperately tries to force me to update it, but whenever it attempts to, it begins the update, then stops somewhere before ... Read more

A:Google redirects, ghost audio in background, script error pop-ups, and windows unable to update

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

31 more replies
Answer Match 54.18%

I use Mozilla, and my Internet Explorer keeps popping up every few minutes or so with a random website. Ad-Aware, Spybot S&D, Advanced Spyware Remover, CCleaner, and System Restore have all not gotten rid of this.

EDIT: Sorry, missed the "First Steps" article. Deleting the ComboFix log I posted and completing the steps in the article.

A:Help: Internet Explorer random site popup virus/adware

Only bumping this because I missed the instructions on what to do here, and can't guarantee anyone will check back since my first post was meaningless.

Results of DDS:
DDS (Ver_10-12-12.02) - NTFSx86
Run by Mark at 18:01:05.91 on Wed 12/15/2010
Internet Explorer: 7.0.6002.18005
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3581.1936 [GMT -6:00]

AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {DAAC1C79-1A96-9DFE-FC4C-6940214C33E6}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {61CDFD9D-3CAC-9270-C6FC-52325ACB795B}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\WLTRYSVC.EXE
C:\Windows\System32\bcmwltry.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Fingerprint Reader Suite\upeksvr.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.ex... Read more

1 more replies
Answer Match 54.18%

I have a virus that is running audio ads on my computer. The ads will start up at any random time, even if I have nothing open. The browser I use is Safari, but with this virus, ads from Internet Explorer keep popping up as well. The virus has also messed with the volume on my computer (I can't hit "mute" when the ads start playing, because it just unchecks the mute button itself right after I do it). The only way I can turn the sound off is if I move the volume notch all the way down. I installed Malwarebytes and tried to run it, but halfway through the scan it keeps saying the program has a problem and needs to shut down. I also tried renaming the file to zztoy.exe that I saw on another topic but that didn't help either. Can someone please help me with this?

A:Virus running audio ads

Please follow the instructions in ==>This Guide<== starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

1 more replies
Answer Match 53.34%

I have overlapping, obnoxious audio running in the background of all applications. No signs of any closable programs running. Malware Bytes detects and eliminates 4-6 objects every time it runs, but the problem persists upon reboot.

Let me know what I need to do!

--John

A:Virus running audio in Background

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

3 more replies
Answer Match 53.34%

i keep getting random audio advertisements in the background of my computer and i have no idea how to get rid of them...here is my hijack log. All help is appreciated. Thank you
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:29:54 AM, on 12/30/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
c:\program files\hp\hp software update\hpwuschd2 .exe
c:\docume~1\matt... Read more

More replies
Answer Match 52.92%

Hi,

Probably should of come here before I made my problems worse, heh.

I'm running Windows XP professional with service pack 3 on a Dell latitude D620 laptop. The computer is a special deal through my fathers work so I don't have any software CD's including Windows XP and can't use their help desk to fix.

I've been having random and increasingly frequent crashes of my firefox web browser. So I downloaded the free AVG 2011, malwarebytes, spybot S&D, and Ad-Aware to try and clean up the problem.

Malware and Spybot S&D were run and items cleaned up with no problems. Successfully rebooted. I installed AVG and immediately started getting notifications that explorer.exe and winlogon.exe had viruses related to Win32/Patched.FM and Win32/Patched.FL but were "critical system file that should not be removed" so it wouldn't do anything with them. A full scan with AVG 2011 did nothing. Lastly I download Ad-aware today and updated to the latest version. It automatically fixed 7 items (not sure which). I did a reboot to make sure all was well and now windows won't boot up.

I get to the windowsxp loading screen followed by BSOD with the following message:

STOP: c000021a {Fatal System Error}
The windows Logon Process system process terminated unexpectedly with a status of 0xc0000005 (0x00000000 0x00000000).
The system has been shut down.

I've tried all options available in F8 menu. All thee safe modes, last known good configu... Read more

A:Windows XP won't boot after running Adware

I'm excited to report that this post is being made from the laptop that wouldn't boot previously.

I read tons and tons of posts from way too many google searches and tried a bunch of different stuff. None of it worked. I read some concerns around replacing the winlogon.exe file due to version differences, especially from CD. But out of frustration I used the recovery center to replace both winlogon.exe and explorer.exe from my family's Dell Windows XP SP3 cd. I made backups before overwriting them just in case.

Welp the computer boot up normally and so far so good...

Now I just need to find out how to install recovery center on the laptop so when I go back home and have no CD again I will be prepared for the next time.

2 more replies
Answer Match 52.92%

Dear Bleepers,Firstly, a week ago I encountered the WINDOWS RECOVERY virus. I was able to remove this by running rkill.well that seemed okay only to discover that I now have a redirect virus. I ran Malwarebytes' Anti-Malware 1.50.1.1100 again and it seems to be okay.Also the Windows Discovery removed all my programs from my start menu.I am running VISTA Home Premuim.Now I have audio ads running in the background. I AM GOING CRAZY - please help!!!Removed e-mail address to protect from spambots. ~ OBScottsdale, AZHere is my DDS.TXT below. And Attach.TXT attached..DDS (Ver_11-03-05.01) - NTFSx86 Run by Sagran at 17:06:37.11 on Mon 04/25/2011Internet Explorer: 8.0.6001.19048Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.2038.311 [GMT -7:00].AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}.============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\sv... Read more

A:Audio Ads running in backgroun and Redirect Virus

Hello Sagran and welcome to BC.

Sorry about the delay, do you still need help?

2 more replies
Answer Match 52.08%

Hello, I know this is being posted alot but someone's help would be greatly appreciated!!

A few months ago my new laptop was infected w/the Win 7 antispyware malware/spyware/virus problems. I thought I had cleaned up but have had persistant problems ever since. Recently, I started to have constant audio ads playing in the background (in english and french!) when an internet browser is not running. I deleted mozilla firefox and itunes to see if something there was running, but it continues to run.

Somewhere I saw that iexplore.exe is on my computer but when I open task manager I dont see any programs running that could be causing this to play.

Thank you kindly!
 

More replies
Answer Match 52.08%

Hello, I know this is being posted alot but someone's help would be greatly appreciated!!

A few months ago my new laptop was infected w/the Win 7 antispyware malware/spyware/virus problems. I thought I had cleaned up but have had persistant problems ever since. Recently, I started to have constant audio ads playing in the background (in english and french!) when an internet browser is not running. I deleted mozilla firefox and itunes to see if something there was running, but it continues to run.

Somewhere I saw that iexplore.exe is on my computer but when I open task manager I dont see any programs running that could be causing this to play.



Thank you!
 

More replies
Answer Match 51.24%

I ran AVG Anti-Spyware and it detected a few viruses, ever since then i noticed a large amount of popups on my internet explorer.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:29:37 AM, on 12/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\PROGRA~1\COMMON~1\SEMBLY~1\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Maynard\Application Data\?racle\e?plorer.exe
C:\Program Files\Trend Mi... Read more

A:Virus Popups + 2 explorer.exe's running.

Hi, Welcome to TSG!!

Please close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix and make sure you are disconnected from the Internet after downloading the program and before scanning.
Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix and remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Remember to re-enable the protection again afterwards before connecting to the Internet.

Download ComboFix and save it to your desktop.

**Note: In the event you already have ComboFix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

Close any open browsers and make sure you are disconnected from the net. Unplug the cable if need be before running ComboFix.

WARNING: IF you have not already done so ComboFix will disconnect your machine from the Internet when it starts.
Please do not re-connect your machine back to the Internet until ComboFix has completely finished.
If there is no Internet connection when Combofix has completely finished then restart your computer to restore the connection.

Double-click on combofix.exe and follow the prompt... Read more

1 more replies
Answer Match 50.82%

Hijackthis log attached.  Unsure of the issue.  Super super slow for some reason.  Programs crashing and blue screens of death happening somewhat frequently.

A:Computer Running Slow, Boots Slow, Virus/Spyware/Adware all show negative

I have tried to update the drivers for the video card and the bios drivers as well.  It hasn't seemed to have an effect.  Boot time for computer is pretty slow as well.

3 more replies
Answer Match 50.82%

My explorer is to the point where it is super slow. It started when I got hijacked by the FBI Moneypak virus. I got into safe mode and downloaded malwarebytes and removed it. I then downloaded spyhunter 4 and ran a scan to double layer myself. All along my AVG didnt do much for me.

I went back into normal mode in widows and my explorer just really dragged real bad. A friend recommended norton eraser. I ran that and it did detect 2 more bugs. I deleted those and everything seemed fine.

No my issue has returned. I dont know if AVG is the problem and its dragging my explorer or if I have a hidden leach somewhere in my laptop. I opened my task manager and there were 5 "iexplore.exe *32" process running when I only had one explorer window open. So this is leading me to suspect that I still have a leach somewhere...

Can Anyone assist, feedback, ideas???

I certainly would appreciate it!

Ed
 

More replies
Answer Match 50.82%

My computer has been running very slowly for the past little while, and the internet browser has froze a few times. Occasionally we'll get floods of pop-ups, but that hasn't happened for the past few weeks.

Also, I've noticed that in the Task Manager is a process called explorer.exe that has a high memoery usage... I read somewhere that it's potentially dangerous.

And another thing, when I log into my computer I get these start-up window's that are called something like WINDOWS/system32/command.com (or something like that). They are only there for a few seconds and there are about 6 of them. I should also mention that I'm pretty computer illiterate...

I'd appreciate any advice! THANK YOU!
hijackTHIS log:

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Nexon\Mabinogi\npkcmsvc.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
... Read more

A:explorer.exe or possible virus? [+ slow running browser]

B.u.m.p!
 

2 more replies
Answer Match 50.82%

Seeing all these posts - this is a common virus that is going on...I seem to be infected too! Need help - please! This began when a bogus Anti-Malware program called "Windows Recovery" took over my computer.

Symptoms:
The background went black;
my search engine results are being redirected;
audio commercials are playing in the background when the internet is not up and running;
and I am getting "Internet Explorer Script Errors"
When I run McAfee, Spybot and Malware - nothing is finding the issues.

Help Please!

DDS (Ver_11-03-05.01) - NTFSx86
Run by Rebecca at 22:26:33.09 on Fri 04/22/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Starter 6.1.7600.0.1252.1.1033.18.1014.160 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: IObit Security 360 *Enabled/Updated* {FAE2835A-B90A-9E7A-85DA-82DBDA7C1E3A}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetw... Read more

A:IE Script Error, Audio Commercials running in Background, Google Redirect Virus

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

11 more replies
Answer Match 49.98%

Hello all,

Original post

http://www.techsupportforum.com/f100...en-444547.html

I've been reading and learning from multiple posts here, so thank you in advance for this wonderful page. my issue is not uncommon, but all the fixes I've seen for others, don't seem to work for me. So hopefully its an easy fix.

IE8 runs itself in the background, hidden so that it is not seen unless you run task manager. In TM you can see 4-20+ iexplorer.exe running at any given time.

I use google chrome. when I open IE8 and look in the history, it is sending itself to sites such as; canfind.org, alert4find.com, alertsfind.com, etc all search or even ad sites which plays music,commercials, sounds in my speakers.

when I kill iexplorer.exe in my TM it just restarts itself every few minutes. and procedes to run this garbage in my background.

I rate myself as an avid user and very competent on the computer, so hopefully I can make your job easy.

Thank you in advance for your time and knowledge.

-LordRed





DDS (Ver_09-12-01.01) - NTFSx86
Run by Ramey's at 16:33:07.96 on Thu 12/24/2009
Internet Explorer: 8.0.6001.18372
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1435 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgch... Read more

A:internet explorer running virus/malware in background?

Let's try this version of gmer.


Download GMER Rootkit Scanner from here to your desktop. Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Also, please post the attach.txt from DDS. The attachment in the previous post has a gmer.exe file, but there's no attach.txt from DDS.

19 more replies
Answer Match 49.98%

OK I got the boot info off the floppy. Made a bootable cd. It boots and loads all the net drivers jus fine. But it does not find ghost.exe. If I crtl-C it and do a dir command in the ghost folder it says there are 2 files but doesnt list any (by the way all the other files show up in the root dir) and it wont run ghost.exe if i type it in. However when I go into windows I can see ghost.exe so i know it is there. Anyone know how I can fix this?

I thought maybe it didnt burn right but I burned it twice with the same results.
 

A:Solved: Ghost boot cd DOS cant see ghost.exe but windows can

7 more replies
Answer Match 49.98%

Mod edit: Moved from WIN7 to the Am I Infected forum ~~ boopmeAt random times during the day I will hear various ads through my speakers even though the only open application is Outlook.Where is this audio coming from and how do I put a stop to it? It's funny but it's kind of annoying, too.I've checked Task Manager and I'll only see Outlook. The running processes are minimal and look to be normal for my computer.I've gone through msconfig and disabled all the fluff...Just now while writing this I got an ad for some Insurance company while Outlook and Firefox were open.Bleepingcomputer.com is the only tab open.Why you do this to me, Demi?

A:Ghost audio

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here.If you get crashes in normal mode,run it in safemode with networkingDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

13 more replies
Answer Match 49.98%

I've seen the problem around a lot, and haven't found a fix, so I thought to come to you guys for some help ;]

Basically the problem is the annoyance factor. When no browsers are open or anything new in the process list, random audio from no where play. The sounds range from television adds (burger kings, lysol, etc.) to obscure music, and even just banging pots, but the most common is the clicking noise, my computer on default doesn't make this noise, so it's related. Also some pop-ups show up on my screen (things like custom smilies/cursors and that nonsense).

I had this problem several months ago, but after numerous scans it subsided. Today, I scanned my computer with superantispyware, it found numerous trojans (forget which kind) and tracking cookies. After the restart, the ghost audio started up. I ran malwarebyte's and it removed a trojan.dropper. However the problem persists.

Here's the catch, my previous problem was caused by 2-3 instances of "iexplore.exe" running. Through HJT logs and similar programs, it failed to see these when they were right on the task manager. But now, in my GMer log, i see 2 instances of IEXPLORE.EXE that are 'hidden', which seems more than fishy, and most likely the source of the problem. This time, I can't see them on task manager.

I also don't use internet explorer, and have had it uninstalled to it's minimum, and is never, ever in use.
I currently do not have a system recovery disc, I believe it's at another house, ... Read more

A:Ghost Audio and Pop-ups

Hello, and welcome to TSF.

I am currently reviewing your log. I will be back with a fix for your problem as soon as possible.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

13 more replies
Answer Match 49.14%

have just recently begun having ads playing through my speakers but i have no internet browsers open i had a look at the task manager the last time this occured and there are multiple processes of iexplorer.exe there but i am not using it i only use firefox

what do i need to do to fix this problem

A:ghost audio problem

Post over in the malware forums for assistance.
Please follow the instructions at the top of the forum.
http://www.techsupportforum.com/f50/

1 more replies
Answer Match 49.14%

have just recently begun having ads playing through my speakers but i have no internet browsers open i had a look at the task manager the last time this occured and there are multiple processes of iexplorer.exe there but i am not using it i only use firefox

what do i need to do to fix this problem

A:ghost audio problem

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 49.14%

have just recently begun having ads playing through my speakers but i have no internet browsers open i had a look at the task manager the last time this occured and there are multiple processes of iexplorer.exe there but i am not using it i only use firefox

what do i need to do to fix this problem
 

A:ghost audio problem

This is a sign that you could possibly be infected with a virus or malware. Do you run any virus or malware protection?
 

1 more replies
Answer Match 49.14%

This is my first time posting on a forum like this because I usually remedy any problems I have myself. However, this time I can't seem to identify where my problems are coming from. First of all, these problems originated with Win 7 antispyware 2010 which I 'got rid of' using the steps in the forums. After that, there's been no end to my problems. The random ghost audio ads play and my computer sometimes becomes just generally unresponsive. Sometimes Chrome or IE won't open and sometimes my mouse just randomly stops working or the computer randomly freezes. As I've said before, it all started with the Win 7 Antispyware 2012 malware/virus and that was just a few days ago. Malwarebytes acts as a temporary solution for some of it but then I restart my computer and it detects some of the same problems it just got rid of. Any help is much appreciated, I'm at my wits end. My Log is as follows: (Attach.txt will NOT attach for some reason but I do have it saved to my desktop)
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_17
Run by Kevinroth at 19:02:16 on 2011-06-27
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.2.1033.18.3071.1437 [GMT -2.5:30]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32 ... Read more

A:Ghost Audio and other problems

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

5 more replies
Answer Match 49.14%

very recently i have been getting ads playing from my speakers. looking at the task manager i found there to be several copies of iexplore.exe open i dont use this as a browser using firefox instead everytime i close one using task manager a new one opens occasionally they will all close but sooner or later they reappear i have followed the instructions i was given and below is the information from the DDS.txt file.........i dont have an install cd for windows vista.......my computer i am led to believe has a separate partition alocated for this.


DDS (Ver_10-03-17.01) - NTFSx86
Run by ero sennin at 18:28:32.25 on Mon 26/07/2010
Internet Explorer: 8.0.6001.18928 BrowserJavaVersion: 1.6.0_17
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.61.1033.18.3070.1782 [GMT 10:00]

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
svchost.exe 4
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Window... Read more

A:Ghost Audio Problem

Hi er0_senn1n and welcome to TSF,

Please subscribe to this thread to get immediate notification of replies (if you haven't already) as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If you have any questions, please ask them before you begin. Then either print out, or copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper at this forum.

-------------------------------------------

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

--------------------------------------------

Download ComboFix.exe from here to your desktop.Refer to the ComboFix User's Guide here.
Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. If you are unsure of ho... Read more

14 more replies
Answer Match 49.14%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:15:12 PM, on 8/2/2010Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\System32\Magnify.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskhost.exeC:\Program Files\Microsoft Office\Office12\GrooveMonitor.exeC:\Program Files\doubleTwist 2.0\DoubleTwist.DeviceHelper.exeC:\Program Files\vghd\vghd.exeC:\Program Files\vghd\VirtuaGirl_downloader.exeC:\Program Files\MSN Toolbar\Platform\4.0.0379.0\mswinext.exeC:\Program Files\Windows Live\Companion\companionuser.exeC:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\... Read more

A:Ghost audio files

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

3 more replies
Answer Match 48.72%

Recently installed and update for my nvidia video card, after installing i encountered a "ghost" hdmi audio output.
That is to say that when hdmi is connected video sends correctly but when i open up the playback devices 2 audio outs are shown, the problem is my laptop only has 1 hdmi port, and the sound is being send to a non existent hdmi output.
Solutions I have tried so far (they all faild)
1 Rolled back the video card driver to previous version
2 Contacted nvidia support they were stumped
3 contacted dell support they had me roll back video card driver and then they were stumped
4 completely deleted nvidia software and reinstalled from the discs that came with my computer
5 restored my entire pc back to all factory default settings
After all of that my problem still exists, any suggestions?

Device Info
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i7-4800MQ CPU @ 2.70GHz, Intel64 Family 6 Model 60 Stepping 3
Processor Count: 8
RAM: 16311 Mb
Graphics Card: NVIDIA GeForce GTX 770M, -1024 Mb
Hard Drives: C: Total - 704916 MB, Free - 616952 MB;
Motherboard: Alienware, 068R5X
Antivirus: McAfee Anti-Virus and Anti-Spyware, Updated and Enabled
 

More replies
Answer Match 48.72%

on my HP all-in-one computer, windows 8.1 was auto installed - the sound worked fine for a day, now it doesnt - also, i cant access the control panel - how can i fix this, and where can i get a free update or audio device?

A:Windows 8.1, audio service is not running

Although you don't have sound, the Operating System problems are really the problem. If you can't access the Control Panel, it looks like the 8.1 has corrupted your system.

This forum section is probably more applicable to your system problems.

http://www.eightforums.com/bsod-crashes-debugging/

2 more replies
Answer Match 48.72%

This is a difficult problem for me to put into words, but I am just getting progressively more annoyed as time goes on, so I'll be quick.

Basically, my audio has a tendency to stop working (as in red x over sound icon) at complete random, and despite fixing the supposed "problem" of "audio is too low", it still does this and with seemingly increasing frequency. I have noticed some minor details that happen when this occurs:

1) While inconsistent, it tends to happen right after I open some applications, although this is somewhat random.
2) When it does happen, and I check up the playback devices via right clicking the sound icon, they are completely gone even if the devices are completely plugged in. It's only after I normally click on the icon do they come back after a short period.
3) I check the "Services" and the Windows Audio is off despite the fact that it is automatic. Restarting it only keeps it on for as long as possible until the next random shutoff.
4) It also tends to automatically occur the very moment I log into my account on my computer, so I always end up having to turn it back on.

I am at my wits end here, and I am hoping this place can provide some answers. My computer is a Windows 7 Dell, and I'll try to provide more information if I can.

I AM NOT TECH SAVVY.
 

A:Windows Audio Service is not running

16 more replies
Answer Match 48.72%

i have no sound latest changes made to my dell insperion 1501 laptop was a security update and my computer restarted while playing plants vs. zombies
i have an icon in my taskbar that looks like a sound icon but with a red circle and white X
i checked out my services
audio services for windows that arent running
Windows Audio - needed for windows audio endpoint builder
Windows Audio Endpoint Builder
Multimedia Class Scheduler - needed for windows audio

i try to manual start them and they wont boot due to some services arent running that it depends on
and Multimedia Class Scheduler gives error 193: 0xc1 Windows could not start the Multimedia Class Scheduler on Local Computer

Reformat is really what i want to put off to last resort please help me

A:windows 7 audio service not running

Edit:

not a audio driver i wish it was it would of been so much easier to fix
i am experienced with computer problems as im going for the COMPtia A+ certification
i uninstalled my sound driver and let windows 7 reinstall it for me and no luck
downloaded the driver of of dells website for SigmaTel High Definition Audio Codec and it says its the wrong driver

Now i cant play videos now when i go to watch them i get this error C:\Users\Ethan\Downloads\Movie.(avi, wmv, mp4, ect)
Server Execution failed
along with aim i get an error saying
C:\Windows\systen32\AVRT.DLL is either no designed to run on Windows or it contains and error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support
that message comes up each time i send an im but it allows me to chat so idk is windows 7 just another Vista?

now when i start up windows 7 i get this message when i log on The procedure entry point [email protected]@@SAXXZ could not be located in the dynamic link library libcmmn.dll.

1 more replies
Answer Match 48.72%

What follows is the text of the initial message that I posted at the Dell Desktop Forum regarding this problem:
Running Windows 7 Professional 64 bit, Service Pack 1 on a Dell XPS 8700 Special Edition PC.  I am experiencing audio distortion/breakup & dropouts/skips when playing music from the computer through headphones or external speakers.  The problem occurs whether the source is iTunes, Windows Media or the optical drives.  The longer the listening time, the more frequent & severe the errors become.  When listening to ripped copies of the same music through an iPod connected directly to the audio system or headphones, no errors occur.  I have installed an ASUS Xonar U7 external sound card.  This seems to have improved the overall sound but it has not solved the distortion issue.  The relevant drivers appear to be up to date.  Any suggestions?  Thanks.
After a series of exchanges with Chris M, and performing actions suggested by him that included establishing that the Onboard Audio Controller was disabled & removal of the program REALTEK HIGH DEFINITION AUDIO DRIVER, Chris M's latest reply was:
I do not think that this is a computer hardware issue. The fact that both the Realtek and the 3rd party Xonar both have the issue points to the operating system resource allocation has the problem. You need to repost the issue on the Microsoft Operating System board to get their thoughts and opinions.
So, he... Read more

More replies
Answer Match 48.72%

I've been having some audio trouble with my Dell Vostro desktop for a month or so. It says audio service not running. If I Turn on dependent services it will shut off when I try to use sound.
What I've TriedSystem Restore (Won't restore)
Turning on all dependent services
Replacing audiosrv.dll with new file from windows restore disk
SFC /scannow (Has a bunch of errors. Will provide cbs.log if needed.



Please help.
Thanks.

A:Windows Audio service is not running.

With all the SFC/scannow errors I would suspect an OS problem.

I think Dell has a "repair my system" option in their recovery. F8 at power on will get you to the Dell restore options.

3 more replies
Answer Match 48.72%

On occasion when i boot up im getting a red cross on my volume control in the tray and hovering over it it says the "audio service is not running" but the service is running, i get sound and everything is working fine. Looking at the services i find windows audio service and yep its running fine & set to automatic but there is still the red cross in my tray?

at the moment im having to "restart" this service to get rid of the notification and the red cross but its a pain.

Only happens about 20% of the time.

I have the latest sound drivers.

have done a search but its all about this service failing to start & giving errors etc.

any ideas anyone,

Thx all,
JackDinn.

A:Windows Audio service not running ! But it is ?

Isee that you have listed: OS Windows 7 Ultimate Media Center Edition.

Hmm. Maybe there's a connection.

9 more replies
Answer Match 48.72%

The desktop uses the Integrated IDT 92HD68E2 High Definition Audio Codec and there is no sound output from the headphone port in the top I/O ports or from either of the two back audio ports ? audio side speaker out or audio line out. I have tested the speakers and headphones on other devices and they work perfectly so either the jack sensing has failed or the issue is deeper than that.I have tried the following without any success:uninstalling and reinstalling the audio codec;uninstalling and deleting the audio codec, then downloading and reinstalling it;opening the Sound panel on the taskbar to see what shows on the Playback tab ? ie:The Speakers/Headphones and Communication Headphones go from 'not plugged in' to 'ready' when headphones are connected to the top headphone port. No sound at the headphones thoughThere is  no change to the display when the speakers are connected to the back audio ports.The only sound I get is from a second monitor with internal speakers connected by a DVI cable. The problem may be related to upgrading the OS from Windows 8.1 to 10 but I can't be certain as I really haven't tried to listen to sound files since upgrading. Any help I can get would be most appreciated.










Solved!
View Solution.

A:No audio on desktop running Windows 10

Hi: See if the W10 IDT audio driver works for you... This package provides the IDT Tempo High Definition Audio Driver for supported desktop models that are running a supported operating system. File name: sp71717.exe If the above driver doesn't work either, there is a workaround that you can try to at least get the sound to work... Go to the device manager and click to expand the Sound, video and game controllers device category. 1. Select IDT High Definition Audio CODEC under that category.2. Select Driver tab.3. Click Update Driver... button.4. Select  -> Browse my computer for driver software.5. Select -> Let me pick from a list of device drivers on my computer.6. Select  High Definition Audio Device (Not  IDT High Def...  this is important.) and click Next.    A warning message may appear,  but click Yes.7. Windows has successfully update your driver software.8. Restart the PC. The key is step 6. 

4 more replies
Answer Match 48.3%

Good morning,

I am suffering from a fairly frustrating problem. At random times, Internet Explorer (iexplore.exe) will run itself in the background. Frequently, audio advertisements for the most annoying things start playing. Upon termination of iexplore.exe, this issue is resolved.

Any help preventing the unintended execution of iexplore would be greatly appreciated.

Regards,

Mac

A:[SOLVED] iexplore running as a ghost

Sorry, I did not add the proper information in my first post. See below for my DDS log, and the attach.zip for other logs. I do not have a boot disk available to me.


DDS (Ver_09-06-26.01) - NTFSx86
Run by Mac at 12:25:22.31 on 06/02/2010
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_12
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.511.161 [GMT -7:00]


============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\UGS\UGSLicensing\lmgrd.exe
C:\Program Files\UGS\UGSLicensing\lmgrd.exe
C:\Program Files\UGS\UGSLicensing\ugslmd.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Apoint\Apoint... Read more

14 more replies
Answer Match 48.3%

Hi,

I actually did read the entry on the 72 hour target turn around time. I have problems on my Windows XP SP2 machine related to adware and increasingly slow performance, to the point where it crawls.

Norton anti-virus detected Trojan Vundo and Metajuan viruses. I removed Vundo by downloading Symantec tool. I turned off System Restore and did full scan to remove Metajuan a couple days later. But I notice that adware (totalantivirusscan.com, fling.com) popup when I use firefox or IE. It seems a little better when I use Opera for some reason.

My hijack this log is as follows (I appreciate any help that the great underappreciated volunteers of this forum can provide):

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:40:39 PM, on 11/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Norton AntiVirus\Engine\16.0.0.125\ccSvcHst.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\LMSTATU... Read more

A:Adware/Virus on Windows XP

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

If you're not receiving help elsewhere and still require assistance for this issue, please follow the process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post/attach as instructed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your next reply.

------------------------------------------------------

2 more replies
Answer Match 48.3%

Hi - I've been poking around within the forums as well as google in general, trying to get on top of these problems.
 
The dreaded svchost.exe is gobbling up much of my processor.  Not sure how to explain the ghost audio - varies from what appear to be entertainment news to - well, just kitchen sounds.
 
After visiting the How to determine what services are running under a SVCHOST.EXE process link, I've discovered that the only things running under the svchost.exe are :
 
DcomLaunch  (PID) 700 (Description) DCOM Server Process Launcher
PlugPlay (PID) 700 (Description) Plug and Play
 
Both are "Running" and are under group DcomLaunch.
 
Does this make sense to anyone?
 
Thanks!

A:svchost.exe and ghost audio issues - bleah

Hi,
You got hit with the latest version of Zekos. One of your system files (rpcss.dll) has been patched.
You'll need more advanced tools to replace that file.
 
Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.
Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.
If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.
It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.
xXToffeeXx~ 

3 more replies
Answer Match 48.3%

I am expat living in China. Yesterday I suddenly received a message that said "the audio service is not running". It is possible that I have a virus because that day I had briefly listened to a couple of audio files from what I thought was a reputable Chinese learning site. I ran malwarebytes and did an online bitdefender scan, but nothing came up. I tried to do system restore but found out my system restore was not on. I've since turned it on.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 8.1, 64 bit
Processor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz, Intel64 Family 6 Model 58 Stepping 9
Processor Count: 8
RAM: 8075 Mb
Graphics Card: Intel(R) HD Graphics 4000, -1984 Mb
Hard Drives: C: Total - 704622 MB, Free - 576360 MB;
Motherboard: Intel, PLCSF8
Antivirus: AVG AntiVirus Free Edition 2015, Updated and Enabled
 

A:Solved: the audio service is not running, windows 8.1

8 more replies
Answer Match 48.3%

Hey,

I am having two issues, small but irritating; once I boot into Windows, my audio service is not running, it is set to automatic and it needed to be manually started (I have tried reinstalling my audio drivers)

I am also having issues with my network, my connection is "identifying" until I launch an application such as Spotify.

I hope this image can assist you in some way along with an ipconfig /all dump.








Quote:
Windows IP Configuration

Host Name . . . . . . . . . . . . : Hydrogen
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : cable.virginmedia.net

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : cable.virginmedia.net
Description . . . . . . . . . . . : Realtek RTL8168D/8111D Family PCI-E Gigab
it Ethernet NIC (NDIS 6.20)
Physical Address. . . . . . . . . : 6C-F0-49-7A-4A-E0
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::54cd:abf4:1535:3e1d%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.0.100(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 31 December 2010 00:06:11
Lease Expires . . . . . . . . . . : 07 January 2011 00:06:11
Default Gateway . . . . ... Read more

A:Windows Audio Service is not running - Automatic

First thing I would try would be sfc/scannow to see if any system files have become corrupt.

Click start and type cmd, right click cmd and run as admin. Type into cmd sfc/scannow and enter, looking at your sys specs it wont take long.

2 more replies
Answer Match 48.3%

Running Windows 7 Professional 64 bit, Service Pack 1 on a Dell XPS 8700 Special Edition PC.  I am experiencing audio distortion/breakup & dropouts/skips when playing music from the computer through headphones or external speakers.  The problem occurs whether the source is iTunes, Windows Media or the optical drives.  The longer the listening time, the more frequent & severe the errors become.  When listening to ripped copies of the same music through an iPod connected directly to the audio system or headphones, no errors occur.  I have installed an ASUS Xonar U7 external sound card.  This seems to have improved the overall sound but it has not solved the distortion issue.  The relevant drivers appear to be up to date.  Any suggestions?  Thanks.

More replies
Answer Match 48.3%

I'm running Guitar Rig (amp simulation software) on Windows 7, but whenever the application is open it prevents other Windows applications from accessing the audio output. For example, if I have Guitar Rig open I can't play back an MP3 track. As soon as I close Guitar Rig other applications recover their audio capability.

I have tried disabling the "exclusive control" option for all of my Playback Devices in Windows (then rebooting) but it didn't help.

I have Realtek HD audio, and my Playback Devices are listed as:
Speakers - Behringer USB WDM Audio 2.8.40 (this is the guitar USGB interface)
Speakers (Default Device) - Realtek High Definition Audio
Realtek Digital Output
Realtek Digital Output (Optical)

I'm using the ASIO4ALL driver for the USB guitar interface.

Can anyone tell me how/if I can share audio between Guitar Rig/ASIO4ALL and other Windows applications?

A:Windows audio not available to other apps when running Guitar Rig

Your also cross posting here Windows audio not available to other apps when running Guitar Rig
since it is a native instrument program you may be better sticking with that thread.

1 more replies
Answer Match 48.3%

windows is playing audio files in the background with nothing up and running. Found by terminating the scvhost.exe file that was being a memory hog killed the audio issues, but the audio comes back.
 
I have done these steps so far
 
#. program - 1st run( X ), 2nd run detected infections( X )
0. Cleared all system restore points
1. Avast browser Cleaner  - 0,0
2. Emsisoft emergency Kit - 0, 0 
 computer.txt   1.36KB
  1 downloads
3. AdwCleaner - 0
4. Super antispyware - 7,0
5. MBAR - 0,0
6. MBAM - 0,0
7. Panda Scan 0,0 - Looked in previous logs and showed that Panda cleared up some infections recently from computer
8. HDS - Hard drive is running fine
9. RKill - Quarentined some items
10. TDSKILL - look at log file
 computer tdskiller log.rtf   218.81KB
  1 downloads
11. Combofix - look at log file, post run nothing was running properly so I had to perform system restore back to number 0 to make the computer work at all
 computer combo fix log.rtf   31.56KB
  0 downloads
12. Hitman Pro - see log file
 hitmanpro.rtf   1000bytes
  0 downloads
13 MBAM - see log file
 malwarebytes.rtf   1.31KB
  0 downloads
14. MBAR - see below as i cannot upload any more files/size limit of 4 K
 
assitance would be greatly appreciated
 

 
---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.07.0.1009
 
© Malw... Read more

A:Windows playing audio with nothing running scvhost.exe

 Results of screen317's Security Check version 0.99.81  
 Windows 7 Service Pack 1 x64 (UAC is disabled!)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 Windows Firewall Enabled!  
 Windows Firewall Disabled!  
Panda Endpoint Protection   
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
  Adobe Flash Player 11.9.900.170 Flash Player out of Date!  
 Adobe Reader XI  
 Google Chrome 33.0.1750.154  
 Google Chrome 34.0.1847.116  
 Google Chrome Plugins...  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C: 2% 
````````````````````End of Log`````````````````````` 

17 more replies
Answer Match 48.3%

i have windows vista Ultimate. i have no sound coz of Windows Audio Service won't start ( even its automatic or manually).

and Sound card: Realtek High Definition Audio have latest driver instaled running fine on Device Manger. (This device is working properly.)

but on Sevices>>> Windows Audio Service i can't start/run windows Audio. Windows Audio Endpoint Buidler is running fine.

i have tried following 2 method but still not working
1)
windows Audio >> Properties >> logon tab >> i have check on "Local system Account"
but when i try to start i get follwoing error
Windows couldnot start the Windows Audio Service on Local computer.
Error 1079: the account specified for the service is diffrent from the account specified for other service running in the same process.
2)
windows Audio >> Properties >> logon tab >> i have check on this account "Local Services"
but when i try to start i get follwoing error
Windows couldnot start the Windows Audio Service on Local computer.
Error 1297: Aprevilege that the service require to function properly doesnot exist in the service account configuration. you may use the services microsoft management console (mmc) snap-in (services.msc) and the local security settings mmc snap-in (secpol.msc) to view the service configuration and the account configuration.

please help thanks
 

A:Windows Vista the audio service is not running

here is event log error message. when i try run/start Audio Service on Services please help.



The Windows Audio service failed to start due to the following error:

The account specified for this service is different from the account specified for other services running in the same process.



System


- Provider

[ Name] Service Control Manager
[ Guid] {555908D1-A6D7-4695-8E1E-26931D2012F4}
[ EventSourceName] Service Control Manager

- EventID 7000

[ Qualifiers] 49152

Version 0

Level 2

Task 0

Opcode 0

Keywords 0x80000000000000

- TimeCreated

[ SystemTime] 2007-09-04T00:11:23.000Z

EventRecordID 9309

Correlation

- Execution

[ ProcessID] 0
[ ThreadID] 0

Channel System

Computer LH-MESBNJ61IVSC

Security


- EventData


param1 Windows Audio
param2 %%1079
 

9 more replies
Answer Match 48.3%

Hey guys, I've been having issues with my computer for the past few days. My audio on videos and websites will not work, yet AIM and system sounds will play. I've tried installing my sound driver from Toshiba.com, but it didn't fix it. I'm also having trouble with the Windows XP style toolbar changing into the Windows 98 style toolbar after a few minutes of startup. My internet is also working sporadically when my router shows connection. I know I'm most likely infected with a virus, so I've run malwarebytes a few times and HijackThis a few times. I've fixed what an auto-analyzer has told me to but this file keeps coming back after startup: O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe Here is my latest hijack this log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 00:05, on 2009-03-04Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\AGRSMMSG.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\igfxpers.exeC:\Program Files\Adobe\Reader 9.0&... Read more

A:Audio Issues and Windows running oddly

Hey guys, I didn't recieve an answer in 5 days, so I'm moving this here:Hey guys, I've been having issues with my computer for the past few days. My audio on videos and websites will not work, yet AIM and system sounds will play. I've tried installing my sound driver from Toshiba.com, but it didn't fix it. I'm also having trouble with the Windows XP style toolbar changing into the Windows 98 style toolbar after a few minutes of startup. My internet is also working sporadically when my router shows connection. I know I'm most likely infected with a virus, so I've run malwarebytes a few times and HijackThis a few times. I've fixed what an auto-analyzer has told me to but this file keeps coming back after startup: O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeHere is my latest hijack this log: (UPDATE: I did a new scan, and these are the results. I now have no sound at all and can only run in safe mode with networking.)Logfile of Trend Micro HijackThis v2.0.2Scan saved at 09:07, on 2009-03-09Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EX... Read more

10 more replies
Answer Match 48.3%

I've been running Windows 7 for close to a month now and it's been running flawlessly except until now.

I've been having audio play back problems either from Windows Media Player or on Youtube. The sounds become slurry, distorted, laggy every few seconds. I don't quite understand what's causing the problem.

A:Weird new audio problems running Windows 7

I closed bit-comet and it seems to have no problem now.

However if I'm using any browser it has the same problem, e.g. when i click on a link and it goes to a new page or opening the browser. Pretty much surfing seems to lag/distort any audio being played.

I don't have the problem with other windows applications like browsing through folders or opening/closing them.

Any ideas?

3 more replies
Answer Match 48.3%

Cannot get my HP Touchsmart to play audio or make any sound whatsoever. It was previously connected to my home surround system until I moved and now I'd just like for it to play audio out of the monitor itself. It runs Windows 7. I've checked the volume levels, run the troubleshooting program, and have done the audio tests and there is no sound. I also tried reinstalling the audio driver. Nothing has worked. Ideas?

More replies
Answer Match 47.88%

HelloI was told to post on this forum from the "Am I infected? What do I do?" forum. This is where it started... http://www.bleepingcomputer.com/forums/t/224624/computer-running-slow-some-redirects-and-explorer-crashes/Anyway, my computer is still running really slow and I've tried using McAfee, Ad-Aware, and Malwarebytes' Anti-Malware. I also tried to use SDFix but was unable to do so. Explorer.exe keeps crashing whenever I try to use it. I finally was able to run RSIT and here is the log from that scan. Please help! Thanks!-------------------------------------------Logfile of random's system information tool 1.06 (written by random/random)Run by John John at 2009-05-20 22:55:41Microsoft Windows XP Professional Service Pack 3System drive C: has 26 GB (24%) free of 108 GBTotal RAM: 1014 MB (52% free)Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:56:20 PM, on 5/20/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\Program Files\Common Files\Apple\Mo... Read more

A:Computer running slow, some redirects, explorer crashes, cannot access anti-virus website

Anyone? Anyone? Bueller?===========Hello While we understand your frustration at having to wait, please note that Bleeping Computer deals with several hundred requests for assistance such as yours on a daily basis. As a result, our backlog is quite large as are other comparable sites that help others with malware issues. Although our HJT Team members work on hundreds of requests each day, they are all volunteers who work logs when they can and are able to do so. No one is paid by Bleeping Computer for their assistance to our members.Further, our malware removal staff is comprised of team members with various levels of skill and expertise to deal with thousands of malware variants, some more complex than others. Although we try to take DDS/HJT logs in order (starting with the oldest), it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us want someone to assist you who is not familiar with your issue and attempt to fix it.We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a me... Read more

19 more replies
Answer Match 47.88%

Hi,
I used this weblog post (GHOST PXE Boot Via TFTP - Tygarbyte) to boot computer from network and run ghost on a network location.
now when I try to boot several computers from the network and run ghost at the same time it gives me this error:
error 52: A duplicate workgroup or computer name exists on the network.

can you please help me to solve the problem?

I want to boot several computers and run ghost from a network location

thanks

A:PXE boot and running ghost from a network location

I believe you will need to have multiple images or they will all be booting with the same PC name.
Dave

1 more replies
Answer Match 47.88%

My computer is infected with a virus. I used Norton Security to remove the virus and then another virus comes up right after. My background changed into a red background with a toxic symbol stating under it is "YOUR PRIVACY IS IN DANGER! DOWNLOAD PRIVACY PROTECTION SOFTWARE NOW" It is also a link, if i clicked on it it would take me to a site. I right-clicked and went to properties and found the location of the original file. I deleted the file and deleted it out of the recycle bin and a few minutes later the background would go back to normal. Then a few minutes later the background would go back to the toxic symbol etc. And the folder and files i deleted previously to get rid of the backgroun are back in their original places. Plus my spydoctor notifications tell me that explorer.exe is trying to change the registry...PathHKEY_USERS\S-1-5-21-4107714433-1829323052-3762878806\Software\Microsoft\InternetExplorer\Main, Start Page and then there was a link at the end.
I also have these pop-ups saying malware alert download software now.
Along with similar pop-ups for adware and trojans.
For some of the pop-ups wether I hit yes or no, it opens internet explorer to a link that downloads the software.
There's also one called Windows Security Alert saying
Warning! Potential Spyware Operation!
Your computer is making unauthorized copes of your system and Internet files. Run full scan now to prevent any unauthorized access to your files! Click here to download spyw... Read more

A:Windows XP Virus & Adware/Spyware Help

Go here and follow the instructions carefully:
http://www.techsupportforum.com/secu...sting-log.html
-Andy

3 more replies
Answer Match 47.88%

Ok, so I can't use IE7 or Opera, FireFox is the only browser that works and so I decided to scan with kaspersky's free tool and here is my report.... it found: adware not-a-virus:AdWare.Win32.Look2Me

I need the proper steps to remove this and also get my browser's working again. PLEASE HELP ME! lol thanks everyone for reading and hopefully the future help.

Link to my other post about the browser error's and the message it gives me.

Scan
----
Scanned: 366193
Detected: 1
Untreated: 0
Start time: 1/22/2008 3:36:13 PM
Duration: 03:01:29
Finish time: 1/22/2008 6:37:42 PM
Signatures published: 1/22/2008 11:43:50 AM
Detected
--------
Status Object
------ ------
deleted: adware not-a-virus:AdWare.Win32.Look2Me.e File: C:\Program Files\INITIO\Button Manager v1.874\inihid.exe
Events
------
Time Name Status Reason
---- ---- ------ ------
Statistics
----------
Object Scanned Detected Untreated Deleted Moved to Quarantine Archives Packed files Password protected Corrupted
------ ------- -------- --------- ------- ------------------- -------- ------------ ------------------ ---------
Settings
--------
Parameter Value
--------- -----
Security Level Recommended
Action Prompt for action when the scan is complete
Run mode Manually
File types Scan all files
Scan only new and changed files No
Scan archives All
Scan embedded OLE objects All
Skip if object is larger than No
Skip if scan takes longer than No
Parse email formats No
Scan password-protected archives ... Read more

A:adware not-a-virus:AdWare.Win32.Look2Me PROBLEM

6 more replies
Answer Match 47.46%

I had a pretty severe malware problem a few days ago.. Windows would start up and there would be a bunch of errors about WerFault.exe and NOTHING would run, not a single piece of software. Turned everything off, even a bunch of windows services and removed the malware, but now I can't turn the audio back on. The services show a bunch of different errors.

When I try to turn the service on

'Windows Audio' on Error 1068 Dependency service or group failed to start

'Windows Audio Endpoint Builder' 1722 RPC Server is unavailable

Remote Procedure Call and Locator are both set to automatic and have started alright.
Plug n Play is set to automatic and has started fine.
Multimedia Class Scheduler has started find and set to auto.

Hope someone can help me set this right Thanks for taking the time to read.

A:Windows Audio service not running after malware problem

Hello and welcome theone mat try running this - you will need to make a bootable disk though Download Kaspersky Rescue Disk 10

You might even try these if you haven't already - just to eliminate stuff
http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html
http://www.sevenforums.com/tutorials/433-disk-check.html < if necessary include the /f and /r in the command line as per Option2

then these - I know you have cleared the malware but these take only a few minutes to so

http://www.superantispyware.com/
http://www.malwarebytes.org/products/malwarebytes_free/
http://www.bleepingcomputer.com/download/adwcleaner/
ADW download from bleeping computer delete any rubbish found with the malware scans
(NB If one is running Kaspersky security it may rant about ADW - just ignore it or disable Kaspersky while the ADW is being used)

6 more replies
Answer Match 47.46%

I'm not sure whether my problems should be posted upon this section "Windows XP Home and Professional" or "Am I infected? What do I do?"Problem : windows detect : no audio device , Local Area Connection not connected. after start up for 20-60 minutes. render every program running afterward no SOUND.Known symptoms :- 1. 2 warning message : ,Data Execution Prevention decided to close this program : Generic Host Process for Win32 Services ,Publisher Microsoft Corporation.,Generic Host Process for Win32 Services encountered a problem and needed to be close.- 2. right after Windows start up, Control Panel>Sound and Audio Device have Realtek audio detected and everything if perfectly fine.after 5-30 minutes afterward, a strange loading occur then Sound and Audio Device detect no audio device. every program running after the strange loading occur cannot initialize Direct Sound then terminated ,some program can still be running but no sound at all.every program running before the strange loading occur (include system sound , firefox's flash sound) still able to play its sound perfectly fine.- 3. right after Windows start up, Network Connection>Local Area Connection (to my modem) connected , it's perfectly fine as everyday.after 30-90 minutes afterward, ADSL connection being cut and the Local Area Connection is no longer detect modem , Repair option cannot re-new IP address as quickly as if no modem being connect to PC.Possible cause I suspect :- ... Read more

A:windows detect "no audio device" after 30 minute running.

Please perform the following:Download the following:Malwarebytes Anti-MalwarePlease download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will beg... Read more

6 more replies
Answer Match 47.46%

How do i remove adio ads running in backround. Not exactly good with computers, yet i do watch several movies online and it's playing while my movies are and its extremely annoying
 

A:Just downloaded windows 7 and am experiencing audio ads running in backround help!

You will have to give us more details.

Where did you download Windows 7 from?
What websites are you watching movies from?
 

3 more replies
Answer Match 47.46%

Ok. So I've been running my desktop on Windows XP with no problems for almost a year now. Last night, I decided to reformat and install Windows 7 Ultimate 64-bit. Now, I can't get the audio to work. I have no sound at all. I tried the Foxconn website, none of the sh*t there helps. Either that or they're not working. I'm no computer genius but I'm guessing I need to find a suitable driver for the onboard audio. I tried downloading the latest realtek driver/software but still nothing. I'll appreciate any help or suggestions! Thanks in advance!

A:No Audio with Foxconn P43A running on Windows 7 Ultimate 64-bit

Do you have any drivers for Realtek ALC888GR? (onboard audio of my foxconn p43a) I get no audio as well.

5 more replies
Answer Match 47.46%

Hey everyone, so i come home one day and turn on my laptop, i go to play some music and i realize nothing is playing. I look at the speaker icon and it has a white x in a red circle over it. I tried to open the settings but it kept saying "one or more audio services are not running." So i tried enabling "Windows Audio" in the services.msc, but all it says is "Windows could not start the Windows Audio service on Local Computer, Error2: The system cannot find the file specified." So i assumed that there were no output devices that were recognized by my laptop. But then i realized that everyday for the past year I have been listening with the same headphones, so how could this happen out of the blue? I look on skype settings for example, and there are no speakers recognized, (not in the drop down box), and no mic etc. I am really worried, and this has happened before, and the company changed my motherboard. Although now I do not have warranty so i am nervous. I am just so confused as to how this could happen so randomly. Oh and I also tried updating my drivers from dell.support website, and nothing seems to work. Please help if possible, Thanks alot.

PS: please be very specific, because I am alright with computers but the simpler the better, Thanks.

-Stryde

A:The Audio Service is not running, Alienware M14x Windows 7 64-bit

Please fill in your specs for future reference.
First of all, I would recommend trying a system restore to a date before the problem appeared.
If that does not work, try right clicking My computer->Properties->Device Manager and see if there any driver that is showing with an exclamation mark. If so, please post the error code and the Hardware ID that you can find by right clicking the driver, going to Properties->Details and choosing "Hardware IDs" from the dropdown menu.
Also, try going intro Control Panel -> Sound and see if your speakers/headphones are recognized there.

4 more replies
Answer Match 47.46%

I have an image of an old disk that was made for me using Ghost 7.0. I would like to retrieve some files that I lost when I got a new computer and my tape backup failed to restore them. (Yes, the tape backup was verified, but failed all the same. And I wiped the old hard drive before giving the computer to a friend. Stupid. I know.)

Luckily, I think, I've got this 5-disk set of Cd's and a boot floppy to restore an older image of my disk, but I don't have Norton Ghost. Restoring the image to a blank hard drive I have fails about 3/4 of the way through (last .GHO file on disk 3) with an error message that indicates the file is corrupt. Is there a way to retrieve individual files without buying Norton Ghost to get the Ghost Explorer? Or is there a way to skip the corrupted file to try to restore the rest of the image and accepting whatever was lost in the corrupted .GHO file?
 

A:Ghost Explorer

Welcome to TSG.

As far as I know the only way to extract individual files from a ghost image is with the explorer. I just checked my System Works CD and explorer doesnít seem to be a separate item but is integrated with the program.

You could pick up the 2003 System Works Pro CD here for $10 plus about $5 shipping. http://store.yahoo.com/saveateaglestore/symnorsyspro3.html If you need a good fax program the 2002 CD is $9 and comes with Winfax, which the 2003 version doesnít seem to have.

I would guess there was glitch in the recording of your third CD. I donít think you can do anything but install the entire image or access the individual parts with explorer. It is problematic whether you could get the ghost of your old boot drive to work on your new computer anyway. Sometimes it will boot far enough for you to replace all of the drivers, but sometimes it wonít.

If you have both a burner and reader on the computer you might try the install with the other one. Sometimes the error correction varies. One might read the CD where the other wonít.
 

3 more replies
Answer Match 47.46%

While running Norton Ghost, my system often crashes and reboots and when it comes back up, it has a dialog box that says "the system has recovered from a serious error"

This happens ONLY when Norton Ghost is running, and doesn't always happen.

Any suggestions on where to look to find a solution?

A:System crashes and reboots while running Norton Ghost

Zip up and attach some minidumps from c:\windows\minidump.

6 more replies
Answer Match 47.04%

I recently installed Windows 8 Developer Preview, and everything is working smoothly except for one thing - there is no sound. There's a small icon in the lower right corner of the taskbar telling me that "The Audio Device is not running."
I tried starting it using services.msc, but when I try to, it gives me error 1297: "A privilege that the service requires to function properly does not exist in the service account configuration."
Can someone please help me? I have no idea what's going on.

A:Windows 8 Preview - The Audio Service is not running, error 1297.

Hi -

Please see - http://social.msdn.microsoft.com/For...0-18b7e775cfae

Regards. . .

jcgriff2

`

8 more replies
Answer Match 47.04%

As you can see I am having the problem of audio service not running. I have read a couple threads and tried to do the recovery but my control panel just freezes up. Please help with any further options.

Thanks

A:Windows audio service not running 8.1 (control panel freez

What you don't want to hear. Most of these have required a reinstall. I've seen quite a few and users have tried many things but in the end it took a reinstall.

Whatever reinstall procedure Toshiba has, would be my recommendation. Back up your user data (pictures, music, word files, etc) to some other media before the recovery as that is deleted on most recoveries.

1 more replies
Answer Match 47.04%

Hello, fellow... meh, I don't know.

OS: Windows 8.1 Pro
Processor: AMD FX-1400 Quad Core
RAM: 8.00 GB
Storage: 1.73 TB of 1.81 TB available
System Type: 64-bit Operating System, x64 based processor
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
A while ago, my PC was having some lag issues that made the computer practically unusable. I found out in msconfig that I had almost all services running. I disabled many of the services, and I made sure not disable the necessary ones (i.e, Windows Audio.) I restarted my computer and there was a red circle with a white "X" over the audio icon. I clicked on the icon. A window named "Playing Audio" opened. On the window was a bar similar to the one shown while loading/downloading something. Above the bar said "Detecting Problems" and then "Scanning for hardware changes...". This went on for about 10 seconds. After this, the window changed. At the top in blue was "Troubleshooting has completed". Under that was "The troubleshooter made some changes to your system. Try attempting the task you were trying to do before." In the center of the window was "Problems found-Hardware changes might not have been detected".
In the search bar, I typed "Manage audio devices". When I opened it up, the window told me that there were no audio devices installed. I have checked in Device management under "sound, video and gam... Read more

A:Windows 8.1 Audio Service not running (Error 1068/1058?)

The first thought, have you tried reinstalling the Sound Drivers? either from the motherboard vendor or if you have RealTek you can get the latest from RealTek and install that.

14 more replies
Answer Match 47.04%

Recently my Internet Explorer icons have all dissapeared, on all the menus, desktop and in my programe files ie folder. It doesn't appear to be on the uninstall menu either. The thing is that it is still there. If I type in an address in the address bar in my documents, like normal it turns into ie. I tried to re-install it but it says that a more renct version is already installed!

It's kinda turned into a ghost, you can't see it, but it's there.

My operating system is XP SP 2

Thanks, hope you can help.
 

A:Internet Explorer A Ghost?

8 more replies
Answer Match 47.04%

hi i am not able to access windows explorer on xp

A:explorer is not running on windows xp

how can i repair windows explorer

4 more replies
Answer Match 47.04%

Hello, I recently bought a copy of windows 7 home edition and my computer passes the minimum requirements and my CPU runs too much CPU (not 50-100 like I hear about) I use basic theme, have no desktop icons, and I maintain my computer every two days, what can I do to fix it?

A:Explorer.exe running a little to much cpu (15-45) windows 7

The percentage used for any process will vary across different machines in line with how powerful the CPU actually is in comparison to others (ie it's MHz rating, single/dual/quad-core etc). So simply saying you think it runs too high or too much does not mean much without also stating it's specifications to allow a "like for like" comparison with similar machines.

For example, my 2.5GHz quad-core Intel CPU runs at 5% max when no applications are open (Win7). My Vista box, however, with only a 1.5MHz dual-core Intel, is using 10-15% under the same conditions, but both figures are well within the norm for each type of CPU.

High CPU usage for no apparent reason is often caused by malware.

1 more replies
Answer Match 47.04%

Here is what happens. While surfing the internet, I sometimes click on links which sometimes opens a new window...great most times, but lately when it is opening a new page, everything freezes, a box comes up saying explorer has quit responding and is starting explorer again. Everything closes, then all pages I had open with pop up and re-open automatic. I also noticed, that when I'm in my hotmail account, when I click on a email it takes me to info on hotmail stuff and not into the email, also can't seem to get into my junk mail folder either. Not sure if the two are connnected, but it is frustrating...Is it possible to be infected?, I've run the malaware bytes program, found a few cookies, ran my virus program from microsoft and nothing...any suggestions????thanks bunches.

A:Running Windows 7 pro, explorer 8

Perhaps it would be prudent to update to IE9.

http://windows.microsoft.com/en-GB/windows7/how-do-i-install-or-uninstall-internet-explorer-9

OR:

How to reinstall or repair Internet Explorer in Windows 7, Windows Vista, and Windows XP

http://support.microsoft.com/kb/318378

If the problems persist, you can post in the 'Am I infected' forum, but read the Pinned Topics first.

2 more replies
Answer Match 46.62%

I hope that this is in the right section but I am having a problem with my computer. I can constantly hear programs running in the background. I currently have two anti spyware/malware installed on my computer. One is SpyHunter and the other is CyberDefender. They both are picking up on some virus called Vundo and everytime I delete it, it just comes right back. It is so frustrating surfing the internet because it freezes or moves extra slowly. Figured I'd ask you guys before I take a hammer to it lol.

Thanks

A:Windows XP SP2 running slow, virus protection catches it but the virus keeps coming back

Hello,i am moving yjis to the Am I Infected forum from XP.Please disable those apps while we do this.Next run MBAM (MalwareBytes):NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the St... Read more

9 more replies
Answer Match 46.62%

thanks for taking a look, i appreciate any help I can get. I don't know what I have, but I have everything I can think of to get this off my computer. I've ran several different anti-spyware programs and virus checkers, I've also tried turning off sys restore, boot and scan in safe mode. Thanks again.Logfile of HijackThis v1.99.1Scan saved at 9:12:57 PM, on 2/23/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:E:\WINDOWS\System32\smss.exeE:\WINDOWS\system32\winlogon.exeE:\WINDOWS\system32\services.exeE:\WINDOWS\system32\lsass.exeE:\WINDOWS\system32\svchost.exeE:\Program Files\Windows Defender\MsMpEng.exeE:\WINDOWS\System32\svchost.exeE:\WINDOWS\system32\spoolsv.exeE:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeE:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeE:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeE:\WINDOWS\system32\cisvc.exeE:\WINDOWS\system32\crypserv.exec:\program files\mcafee.com\agent\mcdetect.exec:\PROGRA~1\mcafee.com\agent\mctskshd.exec:\PROGRA~1\mcafee.com\vso\mcvsrte.exeE:\WINDOWS\System32\nvsvc32.exeE:\WINDOWS\system32\pctspk.exeE:\WINDOWS\System32\svchost.exeC:\Program Files\Webroot\Spy Swe... Read more

A:Windows Installer Popup (unknown Virus/adware)

Hello jeff_2201 and welcome to the BC HijackThis forum. After reviewing your log I see a few items that require our attention. Please print these directions and then proceed with the following steps in order.Step #1Download CCleaner and install it but do not run it yet.Step #2Start in Safe Mode Using the F8 method:Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until the boot menu appears.Use the arrow keys to select the Safe Mode menu item.Press the Enter key.Step #3Start HijackThis and click the Scan button to perform a scan. Look for the following items and click in the checkbox in front of each item to select it:R3 - Default URLSearchHook is missingF2 - REG:system.ini: UserInit=E:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\userinit.exe,O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)O4 - HKLM\..\Run: [IPInSightLAN 02] "C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPClient.exe" -lO4 - HKLM\..\Run: [IPInSightMonitor 02] "C:\Program Files\Visual Networks\Visual IP InSight\SBC\IPMon32.exe"O9 - Extra button: (no name) - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - (no file)O20 - Winlogon Notify: FileCopy - C:\WINDOWS\system32\fprq0395e.dll (file missing)O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe (file missing)Now clo... Read more

1 more replies
Answer Match 46.62%

1.) I've been using my laptop recently and figured out that I have sort of adware on this computer (I believe VirtuMonde/Vundo). The problem is, whenever I use this computer it's really slow, and when I use the internet I get frequent pop-ups. They include some search sites and some rouge anti spyware wanting me to complete a free scan of my computer.
The programs i've used include SpySweeper, McAfee, and VundoFix. None of which worked. I've been trying to find a good solution for my problem these past few days.
2.) Also, I cannot get windows automatic update to work. I think it's from the Vundo I have on my computer, when I go to to the microsoft website to try and update I get an errror code 0x8DDD0018. I've gone into services.msc to enable BITS then tried to start automatic updates but it goes from automatic/manual to disabled and stays that way, and when I try to start it I get an error:1058 code.
3.) As i've mentioned. My protection consists of SpySweeper, and McAfee.
My operating system is windows xp professional.
Any help is appreciated, Thanks.

A:Adware/virus Problem + I Can't Get Windows Update To Work

Hi and welcome to BC.Would you please do the following...FirstPlease download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the ma... Read more

14 more replies
Answer Match 46.62%

I have this comp that im trying to get working. Its running wondows 98 and is loaded with viruses/ adware. At this point the computer wont even bootup all the way. It starts to boot and gets about halfway down the first screen then freezes and wont continue the bootup. The last few lines it displays are:

Award Plug and Play BIOS Extension v1.0A
Copyright (C) 1998, Award Software, Inc.
Found CDROM : ATAPI CD-ROM DRIVE 40X MAXIMUM

It will not boot any further. If anybody can walk me through this I would appreciate it. Its just a little project I'm doing to get more experience. Thanks
 

A:Windows 98 Virus/ Adware Galore / Bootup problems

OK so I got it to boot up but now it freezes up every few minutes and I have to restart it. Help!!!
 

1 more replies
Answer Match 46.62%

Dear Bleepingcomputer Team, I am new to this forum and many thanks for allowing me to post the problem here.

Few days ago from nowhere Antimalware doctor spyware got installed on my Windows XP professional laptop.. After searching the net and reading some of the reviews on your website, i installed malwarebytes anti malware and ran the file mbam-setup.exe.. With this antimalware doctor has been removed from my laptop.. After this i ran Avg Anti Virus program and it gave me below results and it doesn't allow me to remove the infection from file : C:\WINDOWS\system32\drivers\ipsec.sys;"Virus identified Win32/Patched.DX";"

Infections
File;"Infection";"Result"
C:\WINDOWS\system32\drivers\ipsec.sys;"Virus identified Win32/Patched.DX";"Object is white-listed (critical/system file that should not be removed)"
C:\System Volume Information\_restore{A9A94DDE-6388-4B07-AB18-760CDB114235}\RP92\A0124509.exe;"Trojan horse Generic19.FW";"Moved to Virus Vault"
C:\System Volume Information\_restore{A9A94DDE-6388-4B07-AB18-760CDB114235}\RP92\A0124508.exe;"Trojan horse Generic19.FW";"Moved to Virus Vault"
C:\System Volume Information\_restore{A9A94DDE-6388-4B07-AB18-760CDB114235}\RP90\A0123348.exe;"Trojan horse SHeur3.AWAT";"Moved to Virus Vault"
C:\System Volume Informat... Read more

A:Win32/Patched.dx virus in C:\Windows\system32\drivers\ipsec.sys with running AVG Anti Virus

________________________ STEP 1________________________ Please download Malwarebytes Anti-Malware and save it to your desktop.* MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "T... Read more

1 more replies
Answer Match 46.62%

Hello All!!

I have seen similar threads here but my problem is slightly different.
I have ASUS P4S8X-MX which have built in audio of Realtek AC'97 .
I am using Windows XP SP2 for quite a time and everything was fine unless i tried to install an updated driver for my sound. After updating, i got Code 10 error , device cannot start.
I uninstalled the drivers, Restart my PC and then installed my previous version of drivers.
Everything was fine and i can see volume icon in task bar. But when i tried playing an audio file there wasn't any sound. I clicked volume icon to raise it but it was disabled.
I double click it to open Mixer .. there are only 3 options (normally it use to have lot ..wave,speaker,etc..) Now it has only Wave , SW Synth, CD Player.. and No recording device.

I did try re-installing the drivers again and again but no LUCK..

I tried using Drivers Sweeper to remove the tracks .. doing that in Safe Mode and then again Installed Old drivers. It all go well but in the end its same situation with sound disabled.

I don't want to reinstall my Windows , is there any way to fix it ?

One thing i noticed is every time I install drivers the sound manager shows up at task bar but in moments it disappears while the soundman.exe is running in Processes and I can't find it in Control Panel as well (where it use to be) .


Its been 8 hours since I am struggling with that. But No LUCK!

Note: My PnP Software Device Enumerator is worki... Read more

A:Realtek AC'97 audio - drivers installed properly & services running but no audio

Hi muazzam

Is best to upgrade to SP3 (if only because MS has dropped support for SP2) but can start, for now, looking at your problem while you continue running with SP2

Let's start with these initial steps
1) List any Problem Devices

Make sure all your devices are connected and powered on
Click Start->Run, enter: msinfo32. Click the + sign next to Components to expand it
Click Problem Devices. Anything appear?
If yes, click on it, Ctrl-A to select all, Ctrl-C to copy it, Ctrl-V to paste into next post
2) Generate and attach a DirectX report

click Start->Run, enter dxdiag
Notice progress in lower left window corner
When done, click Save Information button and save to your Desktop
In TechSpot, use the paper clip icon to attach the report. (If you don't see icon you may need to first click Go Advanced)
3) If there were no Problem Devices (step 1 above) then also check on your Windows Audio service if Status=Started and StartupType=Automatic

I'll have a look and we can take it from there
 

12 more replies
Answer Match 46.62%

Until last week I was quite happy with the Windows 7 explorer with the indexed search. On my 500GB data drive it finds anything I ask for, in over a million files, in a matter of seconds or less.

My C: drive is not indexed, I only install programs there and hardly ever have to search anything there. But yesterday and today I noticed something spooky:
While browsing C:/blabla/downloads (just 161 items) it is extremely slow, each time I click the scroll bar it starts with an empty window, then shows file names, then columns like date and size slowly get their information. While doing so the bread crump bar (or is it still called address bar?) turns slowly green, just like when it is actually searching something.

I haven't yet seen it in any other folder. BTW there are no hidden files other than desktop.ini. This is a few weeks old i7 with 4GB DDR3, the C: drive is SSD, so IMHO it's not strange that I expect more speed than Windows 3.1 on 4.77 MHz IBM PC-XT (yes, I'm that old, even older ;-)

A:explorer starts ghost searches

What version of Win 7 and where did you get it?

3 more replies
Answer Match 46.62%

I was copying data from my USB drive to my PC and while data transfer was still in progress, I physically removed the drive. This created a Ghost Drive. The drive doesn't appear in the Disk Management.

How do I delete this drive? I have attached the screen-shot of my Explorer Window

A:Ghost Drive Appears in Explorer

  
Quote: Originally Posted by kbajpai


I was copying data from my USB drive to my PC and while data transfer was still in progress, I physically removed the drive. This created a Ghost Drive. The drive doesn't appear in the Disk Management.

How do I delete this drive? I have attached the screen-shot of my Explorer Window


Does it remain after a reboot???

5 more replies
Answer Match 46.62%

So, I go away for a while and the parents managed to mess the computer up. So, here goes nothing...
My dad decided to buy Kaspersky 7.0 and install it himself. It asked him to uninstall our previous anti-virus software (McAffee) which he did (through Kaspersky) It asked him to restart Windows, which he did, and 'bam', the problems started
I've been working at it for the best part of a day. Its not Kaspersky as far as I can gather because its not installed. I believe its Explorer being an arse.
Heres whats going on:
-Drives wont read (cant read any disks including music)
-Cant run any EXEs (just flashes up for a split second then goes off)
-Internet Explorer wont run (same)
-System restore wont run (getting 'System Restore is unable to protect your computer. Please restart and try again')
I've tried safe mode to run system restore and still get the same. Even run Safe mode with CMD and tried System Restore through it, but still nothing.
Dunno if its significant, but all the menu bars (start bar etc) have all changed from XP blue to a 98 grey.
I get a message at startup also explaining about safe mode, and asking if I want to use Restore option instead....Still doesn't work.
Anyone got any ideas? I'm running out of hair...
Cheers
 

A:Windows XP Explorer not running properly. Help?

I've run into similar situations many times, and the easiest and quickest solution has been to do a system restore manually using an Ubuntu Live CD. Here's a link that describes the steps.

Otherwise, without looking at the system, your only other option might be trying a repair installation with your Windows installation CD.

Good luck.
 

1 more replies
Answer Match 46.62%

I have a sony vaio from 07, i dropped it about 3 months ago and brought it to a local guy 3xs that "repaired it" by replacing the harddrive, and im still having problems with my CPUi have gotten the following messages, in random order; security failure, windows explorer has stopped working, and the infamous Blue Screen of Death. It runs super slow, it freezes when you try and run security scans, also when you run mutiple programs that take up alot of the memory, like opening my photos, i-tunes, or mutiple tabs in internet explorer. Im not sure what could possibly be wrong with it at this point. the last time i brought it to "local guy" he told me that there was absolutely nothing wrong with it, that he never had any of the problems that i was experiencing. Please advise, if it continues i will be forced to take it out back and shoot it...
 

A:windows explorer stops running

Tell me, what make and model of pc do you have and how much Ram do you have?

Also, is there a possibility of a virus in your system which hasn't been discovered yet?
 

2 more replies
Answer Match 46.62%

hi i am currently running Windows XP SP2, with the correct updates, i am having problems with my windows explorer wheneva i try and delete a file it takes 30-60 seconds for the delete popup to appear, this also occurs with the right click on files....it takes ages before the options appear.

I have tried defraging my HD, disk cleanup, virus scanned using laters Norton Internet Security 2006, and proformed a spywear check.

does anyone know any reason that this would happen??

PC SPECS:

Microsoft Windows XP Home Edition
5.1.2600 SP2 Build 2600
Dell OptiPlex Gx240 1.7ghz P4 processor
512MB SD RAM
128MB nVidea GeForce FX5200
Virtual memery 2.00 GB
Page File Space 1.22GB
 

A:Windows Explorer Running Very Slow

Norton is undoubtedly causing the problem, get rid of it. Get avg antivirus or ca etrust or something, just not norton.
 

12 more replies
Answer Match 46.2%

Here's a weird one. I'm running Windows XP Pro (SP2), and use an audio player called Quintessential Player. At some point in recent weeks - I can't be sure when - all the audio files on my machine (wav's, wma's, mp3's) seem to have acquired the following annoying characteristics:
1. they have all taken on the icon associated with Quintessential, even though I did not set up this as the default file association. Any attempt to re-associate these file types (with Windows Media Player for example) seems not to work.
2. Attempting to right-click any file with this icon in Windows Explorer (for instance to get the properties or perform some other operation) brings up the error message "Windows Explorer needs to close - sorry for the inconvenience.... " etc. Windows Explorer then duly shuts down; when you bring it back up, there are several icons missing from the system tray (i.e running tasks/processes have closed - this is normally what happens if Windows Explorer crashes).

I've tried doing a System Restore - no effect. Any views on causes - or possible fixes? Other courses of action I'm thinking of are de-installing the Quintessential software, or attempting to make clean copies of all the files, or perhaps run them through an audio processing program - however, as I have rather lot of audio files, this would take forever.
 

A:Audio files - Windows explorer needs to close

What about the preferences within Quintessential? Can you change it so that it doesn't associate itself with .mp3 .wav ect. If worse comes to worse uninstalling Quintessential from within add/remove programs should fix the problems
 

1 more replies
Answer Match 46.2%

Hey all.... I'm new to this forum, but I'm not new to computers or fixing problems, but I've come across one that I can't seem to figure out:

I'm running Windows XP Media Center on an HP Pavilion laptop. Basically, upon startup, the start menu, quicklaunch, and taskbar all freeze, and I can't use them... I can access the start menu using keyboard shortcuts, but only momentarily before it disappears. I am able to click things on the desktop, but once I open a program or window, whatever I have open de-selects itself, and I have use Alt+Tab to get it back.

This seems to be the most telling problem: whenever I open a window (IE, Firefox, or even a Windows window (my documents, etc.)), after a few seconds it automatically goes back to whatever previous screen I had open.... as if I hit the "Back" buton". So it let's me get nothing done.

All this still happens when in Safe Mode.

I've updated and run all sorts of programs, which makes me believe this might not be adware, spyware, malware or necessarily a virus or trojan.

I've run Norton Antivirus, Sybot, Adaware Pro, CWShredder, Windows Defender, AVG Spyware and AntiVirus, online Bitdefender. They've found a few minor problems (a little spyware and a minor virus or trojan), and fixed/deleted them, to the point where now when i run them they find no viruses or anything, but still the problems persist. I have all the recent Windows Updates, so I'm lost.

(Note: I know ... Read more

A:Menus Freeze, Windows Problems, Not Virus Or Adware/spyware?

Hi shipwrecked77 and welcome to BleepingComputer.

I hope you are not running both Norton and AVG at the same time, you should only run anti virus at a time otherwise you will start getting problems like false positives.

When you ran your scans did you run them in safe mode, if not try that as you have a better chance of catching problems there. It does sound like malware.

5 more replies
Answer Match 46.2%

I'm not sure if its a virus, or some type of bug, but when I run a program, most commonly IE my computer will grind to a halt after a few minutes. Curious, I open task manager and click processes, it shows IE as using 97% of my CPU, not caring if I lose what I'm doing, I end the process, everything seems fine and nothing closed, a possible hidden program? Virus scans say no, spyware/malware etc. scans say no, any help guys?
 

A:Annoying "Ghost" Virus? Possibly windows bug?

8 more replies
Answer Match 46.2%

I've been having this problem for awhile with Ghost 8. The program creates images fine, but doesn't want to open them past 14% of the NTFS partition. I thought I had a corrupt image, so I cleaned the drive twice with CHKDSK and reimaged. Ghost Explorer still stops at 14%. I haven't found any information on this at the Symantec site, or anywhere on the net. Anyone have any idea what could be wrong?
 

A:Ghost Explorer stops opening images at 14%

I am running into the same problem at one of our sites. The only solution (so far) is to restore the image to another computer and pull the needed files off the machine. Restoring runs into no problems. I have not tried this yet though:
http://service1.symantec.com/SUPPORT/ghost.nsf/0/d269658fe5f461a4882568e100785f58?OpenDocument

This document covers some switches that mght do the job. If I succeed, will let you know.
 

1 more replies
Answer Match 45.78%

I have an Acer Aspire Laptop 57362-4790 running Win 7 with all the latest updates. Audio is an Intel(R) High Definition Audio HDMI, and Realteck HDMI.

Because I had no headphone output with the computer connected to my TV via the HDMI out I ran the Windows audio trouble shooter. I got a messaage "non standard audio detected" and Windows did something. Now my headphone jack works, but I have no audio on the TV from the HDMI connection.

I've checked both the Intel and Realtime audio controlers and gotten the message, "Device working properly."

I've searched both Intel and Realtime for new drivers and gotten the message, "Best driver already installed."

Opening sound, clicking on playback, clicking on configure, selecting speaker and clicking on test gives test tones out of both the left and right speakers on the TV. Going back to the web, still no sound!

Does anyone have any idea what Windows did and more importantly how do I undo it and get sound back on the TV through the HDMI connection?

Thanks for looking at this story, and any help you can give.

A:No HDMI audio after running Win 7 audio trouble shooter

Use the System Restore function and restore the PC back to a date PRIOR to whatever you did. That should return it to how it was configured. System Restore can be accessed from Start/Programs/Accessories/System Tools. System Restore will not delete any user data or emails.

2 more replies
Answer Match 45.78%

ANYTHIGN LOOK ODD???

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:42:52 PM, on 5/13/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\MicroWorld\Agent\MWASER.EXE
C:\Program Files\Common Files\MicroWorld\Agent\MWAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\S3tray2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microso... Read more

A:Got windows\explorer on screen running????got hjt results

12 more replies