Tech Problem Aggregator

# snap.exe on desktop...and other spyware problems- cannot find web page

Q: snap.exe on desktop...and other spyware problems- cannot find web page

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:36:30, on 25/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
c:\windows\system32\prmrsr.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\Application Data\whovcjyp\wzaxihkn.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\social.im\SocialChat.exe
C:\WINDOWS\system32\kxqpgvmn.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\SynCor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\GrabIt\Drivers\Properties\movies\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [PermissionResearch] c:\windows\system32\prmrsr.exe -boot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [Social.IM] C:\Program Files\social.im\SocialChat.exe
O4 - HKCU\..\Run: [pwvsktsb] C:\WINDOWS\system32\kxqpgvmn.exe
O4 - HKCU\..\Run: [shcrqwtt] C:\WINDOWS\system32\mfqziteh.exe
O4 - HKLM\..\Policies\Explorer\Run: [EY2nXk91D1] C:\Documents and Settings\All Users\Application Data\whovcjyp\wzaxihkn.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1129486872515
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1134064576953
O20 - AppInit_DLLs: wbsys.dll,C:\WINDOWS\system32\prai.dll
O20 - Winlogon Notify: PermissionResearch - C:\WINDOWS\system32\prls.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O24 - Desktop Component 0: (no name) - http://www.marvel.com/comics/onsale/...9image_big.jpg

--
End of file - 10726 bytes

also keep getting asked to install pc cleaner as trojan detected

A: snap.exe on desktop...and other spyware problems- cannot find web page

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:22:55, on 25/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\Application Data\whovcjyp\wzaxihkn.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\social.im\SocialChat.exe
C:\WINDOWS\system32\kxqpgvmn.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\SynCor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\GrabIt\Drivers\Properties\movies\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [Social.IM] C:\Program Files\social.im\SocialChat.exe
O4 - HKCU\..\Run: [pwvsktsb] C:\WINDOWS\system32\kxqpgvmn.exe
O4 - HKCU\..\Run: [shcrqwtt] C:\WINDOWS\system32\mfqziteh.exe
O4 - HKLM\..\Policies\Explorer\Run: [EY2nXk91D1] C:\Documents and Settings\All Users\Application Data\whovcjyp\wzaxihkn.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')
O4 - Startup: IMVU.lnk = C:\Program Files\IMVU\IMVUClient.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1129486872515
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1134064576953
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O24 - Desktop Component 0: (no name) - http://www.marvel.com/comics/onsale/...9image_big.jpg

--
End of file - 10405 bytes

1 more replies

Hi everyone, I am new here and i hope I will find a solution to my problem.I tried everything, I mean everything, I can't even write down all the software I used, they found something, cleared, but the problem is still active. When I browse internet, in every browser (FF, IE, Opera) on some adresses, I always get this message Firefox can't find the server at www.anything.com. I get this message usually on .com, .org domens, but hapens randomly. When I press REFRESH or Try again, it loads the web page normaly. This happens especially in Rapid Share when I enter the verification code. I get some strange ads. And Spybot, Spysweeper, AdAware, Kaspersky AV, and etc. nothing helped. Win Update also didn't work, but when some of these sofwares cleared some spyware it works now. If anyone can help please. And also in DC++ it doesn't connect automatically to hubs, and I have to refresh all connections tu hubs.here is my Hijack LogLogfile of Trend Micro HijackThis v2.0.2Scan saved at 2:46:16 PM, on 3/30/2008Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v7.00 (7.00.6000.16609)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\RtHDVCpl.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Acer\Empowering Technology\eDSMSNfix.exeC:\Program Files\WMonitor\InfoMyCa.exeC:\Program Files\Kaspers... Read more

A:Spyware-server Can't Find Web Page In Every Browser

I apologize for the very long delay. We have a huge backlog of HijackThis Logs to handle and it has been taking us greater time than normal to get caught up. If you are still having a problem, and want us to analyze your information, please post a brand new HijackThis log, along with a description of any problems you are experiencing. If we do not hear back from you within a couple of days we will need to close your topic.When posting your logs please post them directly into the reply. Do not attach them.Thank you for your patience.

1 more replies

Hi there just keep getting Aw. snap page come up when ever i go into regular sites eg gmail etc opens gmail up but when i click on an email this blueish screen comes up with Aw snap, had compter in to have a service, rang guy had never seen it before, did google it, has to do with google chrome, please can some one advise how to get rid of this aww snap thingy very annoying

A:aw snap page keeps appearing

"Aw, Snap!" - Google Chrome Help

this should help...it's specifically for chrome

1 more replies

I have been using Chrome for a while now without any problems but now I am getting the "Aw, Snap!" page on every page I try to visit. Whats the problem? This did not take place after a certain browser update by the way, I have been using the newest version of the browser up until now without any problems.

A:Chrome Aw, Snap! On every page

i had that same problem. i just uninstalled firefox using a force uninstaller like revo.
it's fine now as far as i can tell.

1 more replies

Hi there,

Every time I open up a new browser, a snap.do search page opens automatically too. My antivirus cannot stop it. I have tried resetting home page/search bar settings and removing browsing history but the problem still remains. The requested .dds file is shown below and I have attached .attach.text (I hope that's right?).

Thanks!
DDS (Ver_2012-10-19.01) - NTFS_x86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.9.2
Run by Sachin at 10:44:02 on 2012-10-29
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.61.1033.18.2046.714 [GMT 11:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

A:Infected by snap.do Search Page

Hello sdhingra1994 I will be helping with your computer problems.From this point on, it is very important that you refrain from doing anything else to your computer other than what I have requested of you.I do not mind if you browse the web, do basic tasks, or even test to see if the problem(s) you are experiencing are still occurring with the computer while we are working together, but do not run any tools/fixes unless I or another helper from this thread has asked you to do so.Remember that you came here for help, so allow us to help you If something does not run, make a detailed note of what problems you encountered along the way (exact error messages are preferred), but continue onto the next steps until you reach the end of my post.Always do the steps they are listed in (left to right, top to bottom).I prefer that you complete all the steps while you are in Normal Mode. However, I understand that sometimes this is not possible. If you are unsuccessful in getting a tool/fix to run from Normal Mode, but Safe Mode works, then use Safe Mode.If you have a question about something, do not hesitate to ask.Let's begin:First, please attach ATTACH.txt

4 more replies

Hello,

Yesterday, I downloaded Video Converter off of an admittedly sketchy website--and I think that along with that, some sort of virus was installed as well. I continually receive the Google Chrome "Aw Snap!" page after a certain period of time, and it shows up on each of my browser tabs.

At first, my computer downloaded PC Performer--which I promptly uninstalled in "Safe Mode with Networking."

I ran Malwarebytes Anti-Malware, CCleaner, TDSSKiller, and Spybot; but I want to ensure that I've completely removed the infection. How can I do this?

Also, I am running Windows 7. Thank you, and happy holidays!

A:Infected: GChrone "Aw Snap!" Page

2 more replies

So I restarted my windows xp machine today and noticed google chrome isn't loading any website. I thought it was a bad extension so i went to the tools->extensions but even that page did the same thing. So I reinstalled chrome and deleted everything i could find that was related to chrome even in the app data folders. Restarted computer and reinstalled chrome same thing. Turned off all firewalls and antivirus. Still does the same thing. Seeing a page load for a split second makes me think some virus or something has infected my computer. After some research I found this post http://productforums.google.com/forum/#!topic/chrome/SBenHck7nU4 Same problem as me and the guy saids it turned out to be Rootkit-gen[RTK]. Now doing some research on that rootkit some of the files that are associated with that virus i can't find on that machine. So it makes me think it might some other virus. Any help would be appreciated. I can post hijackthis logs and combofix logs if needed.

P.S. I have tried all the stuff posted here https://support.google.com/chrome/bin/answer.py?hl=en&answer=95669 tried about:conflicts, tried creating a new account in chrome and that still brings up the aw snap page. Everything goes to aw snap even the settings and all those options.

P.S.S. The -no sandbox fix does not work when put in the target line of the .exe. I tried many variations and have use target line commands before in other programs so I am pretty sure I wa... Read more

6 more replies

HelloI have an application shortcut called "SNAP.EXE" on my desktop and i can't get rid of it. I am also getting pop-ups to install anti-spyware software and warnings from system integrity scan wizard saying "warning:your computer may have critical errors in windows registry and file system"I have followed all procedures recommended before i post but it still hasn't solved the problem. Below is my Hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 16:32:30, on 01/04/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Sygate\SPF\smc.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\Program Files\AlienGUIse\wbload.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WIN... Read more

A:Snap.exe On Desktop - Pls Help

20 more replies

I need help it works on my lap top via a router and i called my ISP and they went through several steps repairing the network and came to a statement saying my computer had a problem and not the connection, they said to ask a technician so here i am i need help as it works on my laptop but not my desktop computer

A:Internet on my desktop computer says "cannot find server/page" regardless of browser

16 more replies

It has been driving me crazy, but I don't know what it is

If you have skype, or evernote (for win8 desktops) notice that when you near it to the edge, it "snaps" so to speak. THIS IS NOT THE SNAP where you snap to the right or to the left!

I am just lost as to how this came to be. Is this application-specific? I would very much prefer all my applications/windows to snap to the edge as they are.

A:Windows 8 Snap Desktop

It's something the app does. This is not a feature of Windows. It does it on Windows 7 as well.

2 more replies

I've spent a fair amount of time this morning trying to get the remote desktop snap in working in Windows 7 but have not had any luck. For those interested in how the process worked in Vista see this link:

Galin Iliev [Galcho] Blog! - Remote Desktop MMC Snap-in in Windows Vista Trick

For some reason, this no longer works in Windows 7. I've also tried instructions from another blog which includes an additional .dll (mstsmhst.dll) but have so far been unable to register that particular .dll w/o error. I've also attempted to snag the .dll's and tsmmc.msc files from a Win2K8 server but have not had any luck getting it to work either.

Has anyone been able to figure out how to add the Remote Desktop snap in to MMC in the Windows 7 beta?

A:Remote Desktop MMC Snap In

I've never seen this before, but as somebody that uses multiple remote desktops on a daily basis....I want it.

Would you not need to use the .dll's from Server 2008 R2 ?

9 more replies

Hello Guys,

For some reason the Windows 7 style desktop snap has stopped working, I can still snap a metro app to the side of my monitor but not an ordinary program like note pad. I used to either drag the window to the side of the screen or press Windows Key and an arrow to snap it to the left or the right.

Anyone got any idea's?

Thanks

Tony

A:Desktop Snap Stopped working!

Don't Worry Guys, I have uninstalled Samsung Multi Monitor software and Snap is back.

Cheers

Tony

4 more replies

My Taskbar un-hides without me moving the mouse - or even touching the computer. Then, it usually quickly hides again. The icons on the far right of the Taskbar sometimes take over 20 seconds to appear - and that's after the computer has been running for awhile. Then, my Desktop will suddenly disappear momentarily - then come back. I ran System File Checker and it found problems. Before I upgraded from Windows 7, sfc was fine - no problems. I thought if I did a repair install of Windows 10, it might correct these problems - but I can't figure out how to do it. I made a couple of copies of the Windows 10 ISO - but that's only for a clean install. I've Googled for a solution with no luck. Can you advise me what else I can do? Thanks...........

More replies

Windows XP
Had HP computer running Windows XP. (180GB) IE8.
Power pack and mother board burnt out.
Had another comp with smaller hard drive (40GB) Also with Win XP.
Had its Mother board and power pack installed into HP case with the 180 HD.
Is working fine, HOWEVER.....
I now have desktop icons that snap to a grid. I cannot arrange them as I want them.
I have a lot of them and really need them to be in the same place all the time.
If I pull one out another snaps into its place and the one I pulled out will snap to the end of the line.
Also cannot add them to task bar. I did find an option for icons on the task bar, but didn't have a choice as to what went there.

I looked everywhere for an option in this regard....NONE found.
The only thing with icon options is under My Computer and is Only for the icons in that department.

Any suggestions will be much appreciated.

A:Solved: Desktop Icons snap to grid

Right-click the desktop.

Select Arrange Icons By > uncheck Align to Grid.

3 more replies

I need some help with my Windows 8 Desktop. Somehow I have changed something and now my desktop windows will not re-size or move. When I initially open a program or browser it opens fine in a small window somewhere on the screen. As soon as i grab the title bar 2 outlined windows appear on screen in Yellow and Red. When I let go of the title bar the program snaps to one of the two positions, when I try to move the window it just keeps snapping back.
So the desktop programs now seem to be behaving as if they were Metro apps and displaying using Metro Snap. It is really bothersome.
Anybody know how I can revert back to normal Desktop operation?

Any insight would be appreciated.

A:Desktop Windows Acting like Metro Snap

I don't know what's happening, but I'd be inclined to do a system restore to, obviously, a point before the problem began.

7 more replies

Okay hi, this question might be a bit confusing, so I'll explain. What I want to do is have the ability to play a fullscreen game or a fullscreen video or anything else like that, but have it only take up the screen that the desktop is taking, leaving the rest for a snapped skype or something like that. I found a good thread describing the problem, but no answer to whether or not it is possible to do this. So is this possible? I'd like to have a fullscreen browser open (so it doesn't have the toolbars on top) along with skype.

A:fullscreen desktop programs snap with metro?

Originally Posted by g00gly0eyes

Okay hi, this question might be a bit confusing, so I'll explain. What I want to do is have the ability to play a fullscreen game or a fullscreen video or anything else like that, but have it only take up the screen that the desktop is taking, leaving the rest for a snapped skype or something like that. I found a good thread describing the problem, but no answer to whether or not it is possible to do this. So is this possible? I'd like to have a fullscreen browser open (so it doesn't have the toolbars on top) along with skype.

Not on the one monitor. When your monitor is already full screen, you need a second display in order to fetch an app from the app switcher, set it into place and adjust...
... if you set an app in place on one screen then go full screen, it'll kick the app out.

Snap - Edwin000's library

1 more replies

Is the Remote Desktop Services Manager MMC snap-in available for Windows 8? What do we use to boot sessions?

More replies

Adware, spyware, Virus, and desktop problems.Cannot change the windows desktop, and have all kinds of virus and spyware popups.here is HJT report. please helpLogfile of HijackThis v1.99.1Scan saved at 1:09:05 PM, on 1/24/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\WINDOWS\system32\wuauclt.exeC:\WINDOWS\system32\igfxtray.exeC:\WINDOWS\system32\hkcmd.exeC:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exeC:\Program Files\Apoint2K\Apoint.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Hp\HP Software Update\HPWuSchd2.exeC:\Program Files&... Read more

A:Adware, Spyware, Virus, And Desktop Problems

6 more replies

As described. I want my compyter to appear as a bar vertivally on right side of 2nd monitor. Snapped window size is not remembered by explorer. Super annoying to snap it there back everytime. Might sound weird to some but the phenomena is annoying enought that I have to snap it back every time. What to do? Snap is too valuable tool to be snapped off entirely.

A:Expand windows vertically on the desktop using Snap - size not remembe

Quote: Originally Posted by NoJones

As described. I want my compyter to appear as a bar vertivally on right side of 2nd monitor. Snapped window size is not remembered by explorer. Super annoying to snap it there back everytime. Might sound weird to some but the phenomena is annoying enought that I have to snap it back every time. What to do? Snap is too valuable tool to be snapped off entirely.

What you need is WindowManager but it will cost you $10. It remembers not only the Size but also the Position of all Desktop Windows in Win 7 - It works GREAT !!!! You can see it at http://www.desksoft.com/WindowManager.htm 2 more replies Answer Match 51.66% We have an older snap server on our network. It uses Snap OS, which appears not to be supported anymore. All of our XP machines can access it, for Windows 7 we use a small technical but this technical doesn't work on Windows 8. When I try to access the share, I get prompted for my credentials, which I enter. I'm using my domain account, which has full access to the share. The credentials are not accepted. I can acces the snap server through the browser to administer it. I just can't get to the share through Windows Explorer. Any ideas? Julien More replies Answer Match 51.66% The problems: - I get a toolbar on the right of my desktop on startup. I can close it, though. - I also get a message on start up saying userinit.exe has crashed - Any link I follow from a Google search takes me to some unrelated site (btw, Ewido didn't help, Spybot has become extremely slow, and Adaware crashes when doing a deep scan of the registry) Any help would be much appreciated. Here is my hijackthis log: Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\Tablet.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Logitech\iTouch\iTouch.exe C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\WINDOWS\system32\WTablet\TabUserW.exe C:\hijackthis\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIE... Read more A:Solved: Spyware problems (desktop toolbar; taken over google) 11 more replies Answer Match 51.24% Seems simple yet mind boggling. I left click on any top window frame of any open application and drag in order to reposition the window on the desktop. The problem is that after repositioning the window when I release the left mouse, the window may OR may not snap back to it's original position, ignoring where I've moved it. Any ideas? At all times, the windows are within the desktop visible boundary. More replies Answer Match 50.82% Hi: I'm having some difficulty with Facebook. I'd like to change the photo on my main page and try to find out why all sorts of random people are showing up as my friends when I don't know any of them (and wouldn't care to!). Facebook help tells me to go to my admin page by clicking on hide/show. I have this for my business FB page but not for my regular page. When I click on my photo and then edit, there are some spaces where I can annotate the picture but not remove or replace it. Hoping someone can give me a little help. Many thanks, Jane More replies Answer Match 50.82% Hello all I hope someone can help me. In win 7 ultimate.If I try to open computer management I get two event errors." MMC has detectid an error in a sape in and will unload it." it attempts to unload it and continue running. Then I get 2 "Unhandled exception in managed code snap in" windows. FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510} Could not load file or assembly 'Microsoft.ManagementConsole, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The module was expected to contain an assembly manifest. Exeption type System.BadImageFormatException Computer management will then run but I but some functions are unusable. Also it will not access Task scheduler. I have created a new admin account and it is the same so I do not think it is a corrupt user profile. I have also run SFC and still no luck. Sounds like it is time for a repair install but I would like to avoid that. Oh and a few system restores. Thank you for your time Calvin A:MMC snap in problems Try the solutions given here http://social.technet.microsoft.com/Forums/en-US/itprovistaapps/thread/3928aa45-497c-4f2a-93fb-faaa7946d973 Create a restore point before trying registry fixes.Registry fix worked for me once. 13 more replies Answer Match 50.82% Ok so heres my problem: I try and open Event Viewer, and it tells me "MMC Could not create snap-in" And I went to Run>MMC and tried to add it back, and it wouldn't let me, got the error "MMC cannot initialize snap-in Name: Event Viewer CLSID: ####################### (mix of letters/numbers) I'm wondering if there is a way to fix this problem and replace the .dll's and other accosiated files. Would re-installing SP3 fix this? A:MMC Snap-In problems That mixture of letters and numbers if the CLSID ? class identifier; (Stored in the registry at HKEY_CLASSES_ROOT\CLSID) It could be that the registry is damaged. Check the third post (Tuesday, April 14, 2009 5:47 PM) on TechNet. It may be that you will need to run the system File Checker- do you have the Windows CD? 5 more replies Answer Match 50.4% We have Windows Vista and got taken over by Snap.do. We have ESET Smart Security which it seems could identify the problem but not remove it. I have run AdwCleaner, Junkware Removal Tool, and Malwarebytes Anti-Malware Cleanup Tool. In programs, there were two things listed: Snap.do which was using 22MB of space and Snap.do Engine which was not using any space. I was able to remove Snap.do from my programs but Snap.do Engine is still there and I can't uninstall it. All of out internet browers seem to be back to normal including Mozilla Firefox, Chrome, and Internet Explorer. I want to make sure everything is gone and ideally get Snap.do Engine out of our programs. Here is my DDS report: DDS (Ver_2012-11-20.01) - NTFS_x86 Internet Explorer: 9.0.8112.16520 BrowserJavaVersion: 10.45.2 Run by M HP at 9:15:44 on 2013-11-23 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3068.1096 [GMT -7:00] . AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: ESET Personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} . ============== Running Processes ================ . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\Ati2evxx.exe C:\Windows\System32\Driver... Read more A:Snap.do Removed but Snap.do Engine still in Programs Hello jhcomputerI would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same... Read more 26 more replies Answer Match 49.56% Snap.do showed up. Couldn't change it in Internet Options. I ran my antivirus programs, plus ccleaner, combofix, hijack this, mbam, etc. Looked in the registry and removed every spot found. Nothing worked. Then I tried to open in safe mode, and couldn't get either F2 or F8 to open. Ran AV's again, incl. Microsoft Essentials. No help. Went back to Control Panel, but couldn't open it; nor the System Restore program. I checked the user function and was able to open both the IE and Google browsers without snap.do in the Internet Options. Reran all AV programs. So, I lost several programs including MOffice, WinRAR, caliber, etc. Ideas? I'll wait to hear if I should send the ComboFix or other files. A:multiple problems after trying to uninstall 'snap.do' Moving topic to Am I Infected. Original post in MRL forum does not qualify for this forum, moving to appropriate forum. Do not post ComboFix log or any other unless specifically requested. Thanks . Louis 2 more replies Answer Match 49.56% snap.do took over my browsers. I tried the usual virus/malware removal programs. Went through registry. Combo Fix and Hijack This, MBAM, MSE, etc. Cannot get Control Panel to work, or System Restore. F2 and F8 won't activate. Some problems with the 'user' set up in that a new 'user' (azaq?) activates. I've been down this kind of road with conduit, and Norton.....just ugly and frustrating. Any help will be deeply appreciated as I don't want to have to re-install win7 and lose a lot more stuff. A:multiple problems from malware 'snap.do" Hello and Welcome on board ,my Name is Machiavelli and I will assist you with your problem.If you booted into safe mode on your computer then print my instructions!I'm in the 'Malware Staff Team' and will provide you with advice:To remove Malware on a computer can be very complicated. Malware (malicious software) is able to hide and so I may not be able to find it so easily. In order to remove Malware from you Computer, you need to follow my instructions carefully. Don't be worried if you don't know what to do. just ask me! Please stay in contact with me until the problem is fixed.Below are a few tips:Removing Malware is usually very difficult.We need to search and analyse a lot of files. As this is done in our free time, please be patient especially if I don't answer every day!Please follow these instructionsIf you don't follow the instructions your computer may crash. If you fix your PC by yourself, this can be very risky!Please stay in contact with me until your problem is resolvedAs Malware may not be totally removed in one session or in one day, please stay in contact with me until the problem is resolved.Please don't run any other tools without consulting with me as this can complicate finding and removing all MalwareDon't run any tools while I'm fixing your PC. That is counter productive and again, will only complicate finding and removing all Malware!Read my post completelyIf you don't do so, you may make mistakes that could result in your System crashing by your own ... Read more 7 more replies Answer Match 49.14% snap.do appeared to be gone everywhere on c drive but still showed in search engine.i uninstalled Firefox and reinstalled. IE showed no signs of snap.do. no signs of it since reinstall. the main issue i have been having since snap.do arrived is visual. very noticeable in internet explorer and firefox. parts of the pages are not visible, but you can click on them. some pages are almost completely visible and others many things gone. i want to make sure that it is understood that this is not a problem with my monitor directly.it changes areas with pages.the best way i can describe this is, if the screen you are viewing is made up of layers, it is like a layer is missing. i attached a print screen pix of this webpage https://reg.usps.com/entreg/RegistrationAction!input.action you can compare what i show and what it is suppose to be btw, i was using avast. am now using spy doctor with antivirus erica not sure if you needed both files so both are attached A:snap.do redirect virus.i am still having problems with computer so i am not sure if it is gone Please run the following:Please download Junkware Removal Tool to your desktop.Shutdown your antivirus to avoid any conflicts.Right-mouse click JRT.exe and select Run as administratorThe tool will open and start scanning your system.Please be patient as this can take a while to complete.On completion, a log (JRT.txt) is saved to your desktop and will automatically open.Post the contents of JRT.txt into your next messageNEXTDownload AdwCleaner from here and save it to your desktop.Run AdwCleaner and select DeleteOnce done it will ask to reboot, allow the rebootOn reboot a log will be produced, please attach the content of the log to your next replyNEXTPlease open your MalwareBytes AntiMalware ProgramClick the Update Tab and search for updatesIf an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish, so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected. <-- very importantWhen disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK... Read more 10 more replies Answer Match 47.88% Hi! I have been infected with snap.do. I didn't know what it was before but I recently found out that it is a hacker (?) problem? Sorry I am quite computer-illiterate and am not sure if this is a spyware or a malware or virus. I've managed to disable it on my google chrome using the settings > extensions or search engines. I went to control panel > uninstall program and found snap.do by ReSoft.Ltd. I tried to uninstall it but all I got was this error message that says "To uninstall this application, it is necessary to close your browers. Do you wish to continue?" Even after closing my browsers (and also using task manager to properly close those browsers), this same message, and after clicking yes, everything disappears and snap.do is still there in the Programs and Features. I hope someone will help me soon! I really really appreciate your help and the am super duper extremely thankful and grateful that you guys are doing this voluntarily. Thank you so much in advance! I have downloaded DDS and gmer and have generated the log files required if needed. Thank you! Best regards, Jo A:[SOLVED] Snap.do: Failed to uninstall Snap.do using the Control Panel&gt;Uninstall Progr Hi there! Sorry but I've just managed to get rid of snap.do manually using regedit. Thanks so much for your time and sorry for the inconvenience! =) Joo 2 more replies Answer Match 44.94% Hello All,I placed this in the wrong forum last week, I home someone can help me.I seem to have a few problems on my PC, no Pop-ups but something has Hi-jacked both my active-desktop and IE 6. IE 6 is un-useable. I also have Awola Anti-spyware message in near the clock. Another that came up today which says it is Window's Security Center says you have been infected with Spyware.My active desktop has been hi-jacked again, it keeps bringing up a default.htm in the on my desktop. (what I have done for this is created a default.htm with a picture in it. So when the process calls up this default.htm it is something I want to look at.) Will explain more if it makes a difference.I also have a LoadLibrary Manager error???? It wants me to send an error report.Here are the steps that I have taken:1. Cleaned out Temporary internet files in IE6 and Cleared private data in Firefox.2. Ran Ad-Aware SE (Crashed several times)3. Ran Spy-Bot Search and Destroy selected all and clicked Fix and repair4. Rebooted and tried running Ad-Aware SE again and it crashed.5. Ran Spy-bot again and downloaded Ad-Aware SE and installed fresh copy.6. Rebooted and ran Ad-Aware SE selected all and quarantined.6. Reboot and ran Ad-Aware SE again. quarantined again.7. Ran Norton Anti-Virus cleaned everything.8. Ran House Call Anti-virus tried to clean.9. Attempted to run Panda and Bit defender to no avail, since IE has been hi-jacked.10. Ran McAfee AVERT Stinger. (really can't tell if it is cleaning anything sinc... Read more A:Spyware That Has Taken Over My Active Desktop And Awola Anti-spyware Hi,Your system is terribly infected. Problem with these infections nowadays is, it causes a lot of damage. Even if we clean the malware off your system, I can't guarantee that your system will be clean afterwards, because these infections/bundles leave a lot of leftovers behind that most scanners won't even recognise and logs won't show.Also, I can't promise you we can repair all the damage it caused... Even after cleaning the malware, you can still get errors afterwards because of the damage. Solving these is not always possible since it will be searching for a needle in a haystack to find the right cause and solution.So, we can try to clean this up and do what we can, but keep in mind that we can't solve ALL problems this malware already caused.In light of this it would be wise for you to back up any files and folders that you don't want to lose before we start. Reason I am telling this is because when a system is so terribly infected and we try to clean this up manually, the damage that is already present may interfere with our removal attempts. Before you proceed with the following steps, please do this first..Go to this page.Enter the url of this thread in the first field.Where it says, browse to the file that you want to submit, click the browse button next to it and browse to next file:C:\WINDOWS\system32\GE.dllSelect it and click ok:Then click the Send File button below.Then AFTER you did before...* Start HijackThis, close all open windows leaving only ... Read more 6 more replies Answer Match 44.94% i am having a warning on my desktop for spyware from raze spyware . pls help me in removing it A:Removing The Warning For Spyware From Desktop (raze Spyware) Hi yoagaashRaze Spyware is a rogue Anti-Spyware program, see Here for more information.The first thing to do is see if you can uninstall it from Add or Remove.Click on start, settings, control panel and double-click on Add or Remove Programs. From within Add or Remove Programs uninstall the following ...if it exists:Raze SpywareThenReboot your computer into Safe ModeThen delete this folder (Do not be concerned if it does not exist)C:\Program Files\Raze SpywareReboot your computer to go back to normal modeSee if this helps, if not come back and let us know. 1 more replies Answer Match 44.94% One of my computers loads the page but then reverts back to the previous page. I couldn't get far enough to even register on you forum before it would revert. I ran spybot and it found a lot of problems but it also said it fixed, yet I still have problem. Also affecting mouse. Left double click only works sporadically. Also noticed that sometimes my 3 key on the tenkey was acting like the enter button. What a mess!! Please let me know what I should do next! A:internet page loads thenreverts to previous page; also mouse problems Also tried to run the panda activescan but could not get it to scan. Popup would time out before activex could load. 1 more replies Answer Match 43.68% Usually when im browing the internet stop working. i am still connected to the internet because i can talk in messenger and i cant go on any websites. I did Hijack analyser this is the result, hope it helps =========================================================================================================================== Log was analyzed using HijackThis Analyzer - Updated on 12/27/04 Get updates at http://www.greyknight17.com/download.htm#programs ***Security Programs Detected*** C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\SAVScan.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager - Symantec Corporation - C:\... Read more A:Cannot find page have you ever...ever had zone alarm ever on your computer at any time? if so I advise you save everything, reformat, and reinstall. i believe that's all you can do. 11 more replies Answer Match 43.68% I am using Win XP with IE 6.0. When I click on "Edit" and "Find (on This Page)", this feature does not work. I can enter a word that I know is on the current web page and it comes back as not being on the page. What can be done to fix this problem? All help appreciated. A:Find (on This Page) Does the same happen with Ctrl+F? Be sure the window is the focussed one. 1 more replies Answer Match 43.26% I have a problem with my Dell 9300 laptop suddenly losing the ability to find web pages. Everything will be going along fine and then all of a sudden I'll hit a 'cannot find web page' message. From that point on it can't find ANY web page until I reboot. Then it works fine-- generally for the remainder of my use of the laptop that session. I've NOT been able to re-create the problem at will, i.e., by re-creating the sequence of events (page selections) leading up to an occurrence. The problem is sporadic-- it does not happen every session of use but does happen once or twice a week when I'm using the PC daily or more often. After the problem starts I see something different than normal at the bottom of the IE screen-- I see "connecting to" and an IP address which ARIN tells me is within the range of addresses of my ISP. I normally just see "Opening page <such and such>....." on this line. I'm on Win/XP and am connected via a Linksys WRT54G version 3.0 wireless router to a Scientific Atlanta DPC2100 series cable modem on Blue Ridge Cable/PenTeleData cable service. My wife's PC (also on Win/XP) uses the same wireless connectivity and does not experience this problem. -Yellasam A:Cannot find web page until reboot 6 more replies Answer Match 43.26% Hi, I may have an infection in Internet Explorer 8 on a Vista laptop. I get the Page Not Found error constantly when trying to do research. I downloaded and installed Firefox 3.5 today, and guess what? It accesses the webpages just fine. I use AVG Free, SpywareBlaster, Advanced SystemCare, and IObit Security 360 at this time. So far, it has been pretty good protection. But, during the past month or so, this Page Not Found error is coming up more and more often, so I think my IE8 has been compromised. Any suggestions? A:IE 8 Can't find page error Hello and welcome to Bleeping Computer.Please subscribe to your topic so that you will be notified as soon as I post a reply, instead of you having to check the topic all of the time. This will allow you to get an email notification when I reply.To subscribe, go to your topic, and at the top right hand corner by your first post, click the Options button and then click Track this topic. The bullet the immediate notification bubble. Then press submit.Lets take a look with MalwarebytesPlease download Malwarebytes' Anti-Malware from here:MalwarebytesPlease rename the file BEFORE downloading to zztoy.exe instead of mbam-setup.exeMBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Double Click zztoy.exe to install the application.* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.* If an update is found, it will download and install the latest version.* Once the program has loaded, select "Perform Full Scan", then click Scan.* The scan may take some time to finish,so please be patient.* When the scan is complete, click OK, then Show Results to view the results.* Make sure that everything is checked, and click Remove Selected.* When disinfection is completed, a log will open in Notepad and y... Read more 1 more replies Answer Match 43.26% I am using firefox and everyonce in a while when I type in the correct address firefox says cannot find address and check spelling. A few seconds later it may work and sometimes it doesn't. I've been told my hijackthis log is clean so this shouldn't be the problem. Any ideas? A:Firefox can't find page? go to this forum http://forums.mozillazine.org/viewforum.php?f=38 1 more replies Answer Match 43.26% The "find on this page" function under edit stays open and takes command of any text I try to enter This occurs in all bowsers Internet Explorer, Firefox, Chrome, Etc. It opens by itself and cannot be closed. If I try to type anything like when trying to do a search etc., the find on this page hijacks the text and then starts searching the page by itself making any internet experience impossible. Disabling hot keys did not solve problem. I am running Windows XP SP3 More replies Answer Match 43.26% Please, need your help. When I turn off the computer a Win Min error happens. furthermore the browser home page turn always to www.find-everything.com or find-more.net. I have tried a lot of spyware without success. Thanks in advance for your help Here is my hijack log Logfile of HijackThis v1.99.1 Scan saved at 10:13:18 p.m., on 06-04-05 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\LEXBCES.EXE C:\WINDOWS\SYSTEM\RPCSS.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\ARCHIVOS DE PROGRAMA\MCAFEE.COM\VSO\MCVSRTE.EXE C:\ARCHIVOS DE PROGRAMA\REALVNC\WINVNC\WINVNC.EXE C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE C:\WINDOWS\SYSTEM\LEXPPS.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\LOADQM.EXE C:\ARCHIVOS DE PROGRAMA\USB PRODUCT DRIVER V2.03R002\SHWICON.EXE C:\WINDOWS\SYSTEM\QTTASK.EXE C:\ARCHIVOS DE PROGRAMA\MCAFEE.COM\VSO\MCVSSHLD.EXE C:\ARCHIVOS DE PROGRAMA\MCAFEE.COM\AGENT\MCAGENT.EXE C:\WINDOWS\MSTASK.EXE C:\ARCHIVOS DE PROGRAMA\MCAFEE.COM\VSO\MCVSESCN.EXE C:\ARCHIVOS DE PROGRAMA\MICROSOFT OFFICE\OFFICE\OSA.EXE C:\ARCHIVOS DE PROGRAMA\WINDOWS MEDIA COMPONENTS\ENCODER\WMENCAGT.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\ARCHIVOS DE PROGRAMA\INTERNET EXPLORER\IEXPLORE.EXE C:\ARCHIVOS DE PROGRAMA\... Read more A:Win Min and find-everything.com home page Welcome to TSG!! Run HJT again and put a check in the following: R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.find-more.net/sp.htm R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.find-more.net/index.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.find-everything.com/index.htm R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = NOT USED (OK) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = NOT USED (OK) R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.find-more.net/sp.htm R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.find-more.net/index.htm R3 - Default URLSearchHook is missing O4 - Startup: Búsqueda rápida de Microsoft.lnk = C:\Archivos de programa\Microsoft Office\Office\FINDFAST.EXE O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/28fe1a9...RdxIE601_es.cab O16 - DPF: {0585238B-9CA6-4CCB-A9B2-FE4BA495E880} (AXWebMon Control) - http://www.chusfarm.com/AXWebMonProj1.cab O16 - DPF: {9CCE3B43-4DE0-4236-A84E-108CA848EE6A} (WebCam Control) - http://www.webcamnow.com/broadcast/ActiveXWebCam.cab O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6...e/bridge-c7.cab Close all applications and browser windows before you click "fix checked". Restart in Safe Mode Open Windows Explorer. Go to To... Read more 1 more replies Answer Match 43.26% some one really help me. yesterday for some odd reason my internet was screwed up. for example almost every time i go to a website itll give me the 'page cannot find page' so then i followd the steps to get rid of malwear and the first 3-4 steps did it. the internet's working without the 'cannot find page'. it was great. then i did another scan (with adwear) and i think i clicked the search for neglicable. and now the internet is not working at all. it says the connection is not plugged in. i checked all of the connections leading to my computer to the box where it plugs in. i have a windows xp home, and using cable for the internet. and roadrunner.. i really need help like step to step. im not new to computers but im new to going inside them and looking for what i need...so please help with steps to steps...thanks you verrrrrrry muchand my email is xxxxxxxxxxxxxxxMod Edit: E-mail address was removed for your safety. Please, do not post your E-mail address in an open forum. This could lead to a lot more SPAM in your inbox, than you might want. A:First The Cannot Find Page Then The Internet First thing I would like you to do is go to your first post and removew your own email address it really should not be put on for all to see.I would like you to do a hijackThis log as per the instructions that follow.I suggest you post a HijackThis log for examination.A member of the HijackThis Team will walk you through, step by step, how to disinfect your computer.Once you post your log, don't make any changes to your system, as that could change the results of the posted log, making it difficult to properly clean your system.Read Preparation Guide for use before posting a HijackThis Log.http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/Please read, and follow, all directions carefully!!!Then, run a log, and post it in the HijackThis forum, at this link below. http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/ Do not, fix anything, yet.A member, of the HJT Team, will help you out.It may take a while to get a response, because the HJT Team are very busy. Please, be patient, as these people are volunteers. They will help you out, as soon as possible.NOTE:Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies... Read more 6 more replies Answer Match 43.26% Hello I am using a free program in internet explorer (www.starfall.com) to teach a child to read and write on an old computer that has a small hard drive and an unreliable internet link. I am happy to have found that once I click on one of the chapters of this on-line teaching program in Internet Explorer that the chapter is not only useable while I am on line, but can also be accessed and operated via internet explorer for many days afterwards - ie when I am online. this leads me to think that the computer must somehow download the whole chapter and store it somewhere in its memory. My question is a simple one: where??? the reason I ask is this. As I said the computer we are using for this purpose is an old one with a small hard drive that is now full. But we want to keep "downloading" and using more chapters of this free program offline. To do this my idea is a simple one - locate the "downloaded" segments of the chapters on the hard drive and store them on a USB flash drive that can be plugged into the computer, so we can continue to access the "downloaded" chapters whenever we want (online or offline) yet at the same time clear up space on the hard drive so that more chapters can be downloaded. problem is no matter how hard I look I cannot find the location of these files on the hard drive. you can try this for yourself. (1) Go to www.starfall.com (2) open the "stories" program and play a story (eg Zac the Rat) (3... Read more More replies Answer Match 42.84% Hi can anybody help me im experiencing problems with internet explorer, my system is Windows XP. Everytime i try to open internet explorer it tells me page cannot be displayed, even if i change the home page address it is always the same thing. I have access to msn messenger and it works also i use Skype which also works so it seems that the cable connection is ok. Does anybody have any ideas ? your help would be much appreciated. Thankyou . A:Internet explorer cannot find page. If you can't access the Internet with programs like IE, Outlook Express, or other web browsers, you may have corrupted Winsock entries. To take out the old registry entries and put back in the correct ones see: http://www.onecomputerguy.com/ie_tips.htm#winsock_fix There are registry fixes for both Win98 and XP. 2 more replies Answer Match 42.84% Hi Guys, I placed an order online but they never received it. Unfortunately I didn't take a printout. Their website has been down for 4 days. Is there someway I can search my pc and see if a copy is there? A:Can I search pc to find website page try to make the browser work offline (file menu work offline) and then write the url some times this work another way is to -install google desktop search -and let it index ur c: dirctory - from prefernces choose search result to desktop then search in it about the order title and if the page still in ur pc then be sure google will return it back to u 2 more replies Answer Match 42.84% Hi Guys, When I start IE, it does not find my normal home page. The bottom left corner of IE says: "Looking up www.radiotimes.com", but after a few second, the normal "Internet Explorer cannot display the webpage" appears. However, if I press the 'home' icon, the correct site loads with no problems. Is this malware? The problem started around the time Avast4.8 reported trojan files and malware in my Java folder (report available if needed) Typical file name 'Baaaaa.class' I have run AdAware and Spybot and cleaned up but it still happens. Tried running IE without add-ons - still happens. Any help appreciated. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:36:49 PM, on 12/02/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Program Files\MagicTune Premium\M... Read more A:IE7 does not find home page when first opened An update... I found the problem - Trojan - Renos.gn. Found by Windows Defender. Removed now all okay. TC 1 more replies Answer Match 42.84% After a while a gettin real p!$$3d off with my sisters laptop i sent it back to the manufacturer to be fixed....they sent me it back all shiny and good....however now when i want to go onto the internet it wont work... I got it home pluged it into the network and it was working fine, so i turned it off and moved it into my sisters room. I plugged it into the network there and all that came up was the stupid 'page cannot be displayed' page. So i figured that i would try what i said to Do....nuthin happens. So i Though that since it worked in my room earlier id try it back in there...still no joy! Things ive tried: Playing With Proxy servers ( but the other computers dont use em) Reinstalling Internet Explorer Reconnecting the server (im on ADSL by the way) Also i thought that the network wire might not be working so i tryed tranfering some files across from one compuyer to another...it worked fine. I can also connect to msn messenger on the laptop and winmx etc. but i cant browse the internet. I CAN brwse the internet on other computers on the network so it cant be a problem with the router Any Suggestions? Thanks for your time Ben A:Cannot Find Server/ Page cannot be Displayed......Please Help It sounds as if it could be a DNS problem. If possible I would suggest contacting your ISP and getting their DNS servers and inputting them into your local computer Network Connection Properties. You can also go to Start >> Run, then type in command. Once there type "ipconfig /flushdns" without the "" marks. 2 more replies Answer Match 42.84% I am having the hijacked home page problem that others are having. My problem also started with "coolwwwsearch" and then went to a "youfindall.net" page. I can only reset my home page during a current session. Once I restarst my computer, the home page automatically reverts to "youfindall.net" I have used the hijackthis software to remove files containing coolwwsearch and youfindall, however something is replacing the files to my computer everytime that I reboot. Following is the most recent hijackthis log taken from my computer. I would greatly appreciate your help to permanently delete this annoying problem. Logfile of HijackThis v1.95.1 Scan saved at 10:00:09 AM, on 7/19/03 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\COMPAQ\CPQINET\CPQINET.EXE C:\COMPAQ\INTERNET\ISDBDC.EXE C:\WINDOWS\CPQDIAG\CPQDFWAG.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\CPQEADM.EXE C:\CPQS\BWTOOLS\SCCENTER.EXE C:\PROGRAM FILES\MOTIVE\MOTIVEASSISTANT\MOTMON.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\PROGRAM FILES\BROADJUMP\CLIENT FOUNDATION\CFD.EXE C:\PROGRAM FILES\SUPPORT.COM\BIN\TGCMD.EXE C:\PROGRAM FILES\KFH\CL\LAUNCHER.EXE C:\PR... Read more A:HiJacked Home Page - You Find All 7 more replies Answer Match 42.84% v cant find a simple web page copier anyone know of a very simple firefox add on that saves a webpage with 2 clicks and dosent require u to open an acct to store it on line or anything else complicated. found it once but cant see it again the particular one allowed u to copy up to several links deep thanks A:cant find a simple web page copier ScrapBook :: Add-ons for Firefox 6 more replies Answer Match 42.84% I have installed QB45 and some QuickBasic programs in DOSbox on my Windows 7 32bit computer. But the keyboard code page that is loaded is 437, which I think is American. I need one for Windows English. I think I need UK 166 or UK 168 although I don't know which of the two. I also need a source for the code page file. Any help would be appreciated. A:Where can I find Keyboard code page? I think you may be confusing DOS keyboard layout with codepages. The codepage is the character set, I don't think there was a codepage 166 or 168? Those are keyboard layout "IDs". for two different UK keyboards. See: MS-DOS keyb command help To change the keyboard layout you would use: keyb uk That is if what you are looking for is to have your UK keyboard working properly. If you are missing some characters then you can also set the codepage at the same time with keyb uk,850 or maybe try 858 if you want the euro symbol. Though help from a DOSBox forum might be able to be more specific. 2 more replies Answer Match 42.84% hi there, I have reinstalled my pc in the last 2 weeks and have noticed I cannot view many pages adobe and friendsreunited is 2 of them, I hangs and then says page cannot be displayed - cannot find server, I have never had trouble installing a pc before, I have windows xp original disc, Iam with sky for my provider and the router I have is a dg834gt I have used this insallation before as above but never had this problem, hope you can help, thanks in advance. More replies Answer Match 42.84% I have a desktop computer hooked to a cable modem. My laptop is wireless off of it, The desktop pc uses Internet explorer and it shows it finding websites but times out. The laptop works fine. I have tried to use firefox on the desktop but does the same. The desktop is definetly connected to the Internet it just times out...any solutions? A:Internet Explorer will not find page 15 more replies Answer Match 42.84% I get the white page Cannot find server or Page cannot be displayed when I try to connect to secure pages. IE 6 shows Cipher Strength 128-bit. Can anyone help? illemjw A:Solved: Cannot find Server: Page .... It could be a few things. First: i've seen firewalls do this (zonealarm, etc) so if you have one, disable it and try the websites again. Second: you could try reregistering these dll's: Start - Run - and type, one by one, followed by ENTER: regsvr32 softpub.dll regsvr32 wintrust.dll regsvr32 initpki.dll regsvr32 dssenh.dll regsvr32 rsaenh.dll regsvr32 gpkcsp.dll regsvr32 sccbase.dll regsvr32 slbcsp.dll regsvr32 cryptdlg.dll regsvr32 urlmon.dll See if that helps. Let me know. 3 more replies Answer Match 42.84% I'm cleaning my brother in-laws computer after an infection, (using Malwarebytes), and now IE can't find any webpages. I'm trying to run Windows Updates to make sure he is up to date. I am able to get the Malwarebytes update process to work so it looks like I have a connection. I tried running IE without addon's but that didn't help. I ran WinsockxpFix.exe and MicrosoftFixit50199.msi but still no luck. Any help would be appreciated. Thanks A:IE can't find Windows Update page 16 more replies Answer Match 42.84% Hi, When i was on my routers web page i was in the process of forwarding port after just having made a static IP address, when i got an error after submitting a port, i cannot remember what it said sorry. I am running vista home premium, and my modem router is a Huawei EchoLife-HG520s Microsoft Windows [Version 6.0.6001] Copyright (c) 2006 Microsoft Corporation. All rights reserved. C:\Users\Kieran>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : BigBlackBox Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No Wireless LAN adapter Wireless Network Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : TL-WN321G Wireless USB Adapter Physical Address. . . . . . . . . : 00-25-86-EA-AB-DA DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::1133:bd09:9949:880d%11(Preferred) IPv4 Address. . . . . . . . . . . : 192.168.1.10(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 192.168.1.1 DNS Servers . . . . . . . . . . . : 203.109.129.67 203.109.129.68 NetBIOS over Tcpip. . . . . . . . : Enabled Ethernet adapter Local Area Connection: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) Family PCI-E Giga... Read more A:Cannot find router login page You have DHCP disabled for your machine, which should be enabled for most router connections. Select Start > Settings > Network Connections. Double-click the Connection icon of the connection you wish to modify to open the Local Area Connection Status window. Click the Properties button to open the Local Area Connection Properties window. Click to highlight Internet Protocol (TCP/IP). Click the Properties button to open the Internet Protocol (TCP/IP) Properties window. TCP/IP Properties window, IP Address tab Select Obtain an IP address automatically. Select Obtain DNS server address automatically. Click OK to return to the Local Area Connection Properties window. Click OK to return to the Network Connections window. 2 more replies Answer Match 42.84% I looked all over for "my" problem and not finding it, decided I must post before I go totally crazy! I love Firefox, and I've had it for about two years now but the past few months I've had an issue that's driving me bonkers and I have no clue where it's coming from. I click on a link, open my homepage, go to Hotmail, Yahoo, it doesn't matter -- at least 50% of the time I get one of two error messages: Timed Out or www.yahoo.com could not be found. Please check the name and try again. The thing is, it "times out" after perhaps 5, 6, 7 seconds, not long, the same w/ can't find the page. So tell me what I'm doing wrong, what setting I've futzed up, or what I can do to fix it? No one else I know has this problem w/ Firefox, nor was I able to locate information about this at Mozilla. Many thanks!! Samantha I nearly forgot: A techie friend told me it was something to do w/ my ISP and all I had to do was logout/login and my problem would be corrected. I didn't find that to be the case, not even if I rebooted my laptop. I'm going nuts w/ this problem ... A:Firefox Times Out/Can't Find Page 7 more replies Answer Match 42.84% Hi, I get the page cannot be displayed error at yahoo mail, ebay and a few other sites I have to sign in to. I have tried everthing, in security and privecy settings, nothing works. Even talked to three tech's who were no help. Any idea's? XP SP1 ZA, Avast, Adaware, Spybot, and Spyblaster, Oh yeah I also checked ZA. Thanks for any help. A:Page cannot be displayed, cannot find server Are you using IE? Is it the latest version? If not, upgrade it... Check the encryption strength in your browser. Click help->about IE.... What does it say for Cipher Strength? If it doesn't say 128 bit, you will need to reinstall IE with full encryption. 2 more replies Answer Match 42.84% Logfile of HijackThis v1.99.0 Scan saved at 3:35:34 PM, on 2/12/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\System32\svchost.exe c:\jetsuite\jsdaemon.exe C:\PROGRA~1\FIX-IT~1\mxserver.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\PROGRA~1\mcafee.com\vso\mcvsescn.exe C:\WINNT\system32\wuauclt.exe C:\jetsuite\JETSTAT.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\ADMINI~1.DW\LOCALS~1\Temp\Rar$EX00.174\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *new-search.net*;*x-google.net*
R3 - Default URLSearchHook is missing
O3 - Toolbar: @msdxmLC.dll,[email protected],&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"

A:IE 6 cannot find server page always pops up! HELP PLEASE!

i CANNOT VIEW ANY OF MY HYPERLINKS OR TOOLBAR FAV TABS....HELP

1 more replies

Ok, so here's the problem. I went to a website and then proceeded to go to an article. I was going to post a link to this article on a forum but I couldn't because it was not displaying the real web page address to go directly to the article. Instead, it just gave the the home page. For example, if I went to www.msn.com and then clicked on an article, the address bar would still say www.msn.com. This isn't happening with MSN but with a different webpage. Why isn't it listing the exact location of the page with the article? I know it went to a different page. Also, I'm using Mozilla Firefox. Any help you can provide will be greatly appreciated.

A:How do I find the real web page address?

6 more replies

Hi

I can connect to the web, but IE says "Can't find Search Page" when a URL is typed in.

I removed 3 instances of "about:com" from the registry with still no luck

I would appreciate it if someone has a look below

Many Thanks

Mike

Logfile of HijackThis v1.99.1
Scan saved at 10:52:26, on 29/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\DairyPln\DpProcessControl.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLDial.exe
C:\PROGRA~1\AOL9~1.0B\aoltray.exe
C:\PROGRA~1\AOLCOM~1\COMPAN~1.EXE
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\AOL 9.0b\waol.exe
C:\Program Files\AOL 9.0b\shellmon.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_UR... Read more

A:Can't Find Search Page - Hijack log

11 more replies

I am having trouble bringing up pages on the internet. I will get into a site and then when I want to check in further it will come up a page that says cannot find server - what should I do?

A:Cannot find server page coming up

Try again later Dec.
The server may be down due to maintainence etc.
Are you going to a particular site or any site?
It happens here every day for about 20 mins while they change the rubber band.
Wolfey

1 more replies

I am on a toshiba laptop and using windows vista and mozilla firefox and interet explorer. The problem i have is when i open either of the browsers and try to connect to any page it says connected to eg Google then says transferring data from eg. Google but page will not load. eventually it will come up problem loading page but this takes about 10-20 mins. Please help as i have tried loads of forums and nothing works!!!

What fixes have you tried that you got from the other forums ?

That amount of lag could be down to a high error count on your line and perhaps your SNRM could do with increasing. You would need to speak to your ISP about this, then see if there's any improvement.

You will need to set the MTU to 1500 in your router and pc first and in the prog, click on the Custom button. There are options for it to change the adaptors for you. This will set them up in your pc but you will then need to go back into the router and set that the same.

4 more replies

Hello,

I'm hoping someone can help me. My computer was recently hit with a bunch of Spyware. I've been removing it with Spybot, Webroot's Spyware, and Lavasoft. I think there still might be some stuff on it...but in the meantime, I noticed that I am not able to access many sites through links. I get the "The Page Cannot Be Displayed" error message. I know this is NOT a connection problem, because I am able to access some sites...it usually occurs after i put in the web address and then try to click on a link within the site...then it will not open the page and I get this error. All I know is that this was not happening prior to getting all the Spyware on my computer...so think it happened as a result of that.

Does anyone have any suggestions / advice as to what may have gotten changed and how to correct it so I can access links ?

Thank You !

A:The Page Cannot Be Displayed And Cannot Find Server Or Dns Error

Hi RJsonny and welcome to Bleepingcomputer.If you think you have been hit with a malware please post it in the "Am I Infected" forum.Many people will help there with malware.Also please don't post a HJT log until instructed by a expert. HERE is the link to the AM I Infected forumGOod luck Regards Extremeboy

3 more replies

Hello,

I'm hoping someone can help me. My computer was recently hit with a bunch of Spyware. I've been removing it with Spybot, Webroot's Spyware, and Lavasoft. I think there still might be some stuff on it...but in the meantime, I noticed that I am not able to access many sites through links. I get the "The Page Cannot Be Displayed" error message. I know this is NOT a connection problem, because I am able to access some sites...it usually occurs after i put in the web address and then try to click on a link within the site...then it will not open the page and I get this error. All I know is that this was not happening prior to getting all the Spyware on my computer...so think it happened as a result of that.

Does anyone have any suggestions / advice as to what may have gotten changed and how to correct it so I can access links ?

Thank You !

A:The Page Cannot Be Displayed and Cannot Find Server or DNS Error

Okay, you've described a connection error wether you think it's spyware based or not, it will stem from your network/connection due to your spyware problems... i assume you used the "immunize" function of Spybot? this modifies your hosts file and can give you problems with certain sites(to protect your pc)... what sites does this happen with?
The functionality of a site will not be modified by spyware unless it's extreemly sofisticated then it would happen to all of your links not just one or two... it's a connection error...

Okay my main advice is go to the hijackthis log help sub-forum and read the instructions on getting help with spyware and then run hijackthis and post the log and i'm sure you'll get help.. it may be a well known thing, or it may not be a problem due to spyware...

Hope you get it sorted,
Jamey

4 more replies

I Bought Norton 360 In Curry's, I Can't Enter My Product Key, I Used It On Another L Top. But Can't Find The Right Page To Put It On This One, It's For 3 L Top's,

A:Can't Find The Right Page To Instal The Norton 360 Gold I Bo

I dont use Norton but a quick Google search found thishttp://community.norton.com/t5/Nort...

3 more replies

I can access certain web sites but with others i get the above messagei know for sure that recently i have been infected with internet security 2010 and i am pretty sure the winsky 32 worm virus. please help.my logs are attached. thanks

A:internet explorer can not find search page

16 more replies

Hiya

I am getting this message 7 out of 10 times that I click a link or try to open a new page, here and at other sites.
I have to click the back button, then re-click the link and then it works.
I also sometimes have to refresh the page to get it to display properly: there is no background colour the first time.
It's becoming pretty irritating, especially when I am trying to post a message. This message took 3 click send>back button>sends to make it actually "go".
I have the newest versions of Adaware SE (1.03), Spywareblaster and Spybot Search & Destroy. I have WindowsXP and IE.
I have checked and re-checked Internet security settings as per suggestions in this forum and all looks fine, but I am not really sure...
I've also read other similar posts and found nothing that helped.
I also have the newest version of hijackthis, so if you need a log let me know.
Thank you in advance, but I am going log out now, so if a log or something is required, I won't be sending it until the morning.
Peace
Carolyn

A:[Resolved] Cannot find server/page cannot be displayed

16 more replies

Hello, I have an odd problem. I use to be be able to visit a few sites but about a month ago a few of then started reciving the error The page cannot be displayed - Cannot find server or DNS Error. After some reseach some suggested that it might have been spyware that had messed IE up, so Iopened Firefox and tried. it came up with it just returns a blank white page.

I reformatted my computer and reinstalled windws but the pages still dont display.

Ive pinged the site and it responds in cmd but when i try http://XXX.XXX.XXX.XXX it comes back witht he same error.

Ive tried accessing it via my work laptop which runs vista business, and it works there.

Not sure why my home pc doest work.

ANy suggestioons would be great.

Thanks

-Bigdog889

A:The page cannot be displayed - Cannot find server or DNS Error

Are you using DSL connection? and what is the make/model of the modem/router you're using?

Try going to..

start > run > type 'cmd' > type 'ipconfig' then paste the result here.

try also pinging a website and it's IP address then post the result here as well.

3 more replies

I'm not certain but I believe my computer has been compromised. I had several viruses that I have found and deleted in the past week, but It seems that I'm still having browser issues. My browser hangs at times and seems to be buggy.

I see a few entries that seem a bit suspicious. I would like to post my HIJACK File and see if anyone can evaluate it for me to be certain. I have highlighted two items I think are suspicious. I appreciate any help I can get. Thanks!

WIN XP (Media Center Edition)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:50:13 PM, on 5/23/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe

A:Possible Spyware - Cant Seem To Find it?

16 more replies

I called my ISP last night because my download connection was lower then 30 Kb/s, It should be up to 5 Mb/s.

They assured me that I had spyware and removing it would fix the problem.

I ran Ad-Aware Se 1.06 Pro. Found Nothing
I ran SpyBot SD. Found Nothing
I ran SpySweeper 5. Found Nothing.
I ran SpyDoctor. Found Nothing

All with the most recent Definition files.

My net speed is STILL less then 30 Kb/s.

Here is my HJT Log. If anyone could take a look it would be GREATLY appreiated.

Logfile of HijackThis v1.99.1
Scan saved at 2:50:21 PM, on 10/6/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Internet Security 2007\pavsrv51.exe
C:\Program Files\Panda Software\Panda Internet Security 2007\AVENGINE.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\Panda Internet Security 2007\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\panda software\panda internet security 2007\firewall\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

A:My ISP Says i have spyware, But I can't find it!

Just got off the phone with Rogers (my isp) AGAIN, and they again assured me my network is fine. Which it is. EXCEPT when ....

This is all because I am getting EXTREEMLY SLOW CONNECTION SPEEDS.

My SIMPLE layout of my network.

PC1
PC2
PC3
PC4
LAP1

When All the PC's are connected via the router the network is fine. *5Mb/s*
The computer where the HJT log came from is LAP1.

When the laptop *lap1* is connected to the network it DROPS the speed to less then 50 Kb/s.

Thats the basic situation.

1 more replies

Hi there. I am a novice. My Homepage has been hi-jacked by any-find, which I think I have removed. However there may be more. I keep getting pop-ups telling me I have been infected by spyware/ parasites. I have copied what hi-jacker found. Any advice would be appreciated in cleaning up and avoiding a repeat. Thanks. Proteus

Logfile of HijackThis v1.97.7
Scan saved at 12:08:45, on 6/2/04
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINDOWS\System32\WBEM\WinMgmt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsgSys.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\NavNT\vptray.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\HPHipm11.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe

A:Any-find/spyware

12 more replies

There have got to be some spyware here that I am overlooking. Can someone help? Windows xp sp2, AMD 1532Mhz, 128MB Ram. The S3tray2.exe is something that I do not recognize but it look important. Here is my hijackthis log:

Logfile of HijackThis v1.99.0
Scan saved at 3:36:32 PM, on 2/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\LXSUPMON.EXE
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\WINDOWS\system32\S3tray2.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\InterMute\SpySubtract\SpySub.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe

A:Cannot find spyware....

6 more replies

Logfile of HijackThis v1.97.7
Scan saved at 10:14:47 PM, on 10/16/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON UTILITIES\NPROTECT.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON CLEANSWEEP\CSINJECT.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON GOBACK\GBPOLL.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM\USBMMKBD.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\WINDOWS\STARTER.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE ANTISPYWARE\MSSCLI.EXE
C:\WINDOWS\SYSTEM\YTPIGY.EXE
C:\PROGRAM FILES\LOGITECH\QUICKCAM\WEBCAMRT.EXE

A:Help with HJ log... I got rid of all spyware I could find..

12 more replies

My computer does a lot of funny things which I know is the result of spyware. I ran all the checks and I can not find it. Here is my HijackThis log and I was wondering if there is anything there that I should fix?

Logfile of HijackThis v1.98.2
Scan saved at 8:39:15 PM, on 9/1/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Personal Firewall\NISUM.EXE
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\LTMSG.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\WINDOWS\ALCXMNTR.EXE
c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe

A:Cant Find Spyware and I know I have it.

I'm no Hijack pro, but this log doesn't look too bad to me. What sort of funny things does your comp do?

3 more replies

ok. heres my hijack this log. i have no idea, but the spydoctor 2006 thing i get a popup from. i got rid of ssk tclock bookedspace bunch of stuff. my desktop icons have blue backgrounds. i keep hearing that internet explorer sound. on my desktop. i clicked to not show icons then i couldnt right click on my desktop until it crashed. i dont see any spyware. heres my hijack this log. i get popups and stuff. adaware is running very slow. and computers very slow. Logfile of HijackThis v1.99.1Scan saved at 12:57:51 AM, on 7/23/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Turtle Beach Catalina\EnMixCPL.exeC:\Program Files\DAEMON Tools\daemon.exeC:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVTray.exeC:\Program Files\CA\eTrust Internet Security Suite\eTrust EZ Antivirus\CAVRID.exeC:\Program Files\DU Meter\DUMeter.exeC:\Program Files\Common Files\Logi... Read more

A:Cant Find Spyware.

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Please download ComboFix and save it to your desktop.Double click combofix.exe and follow the prompts.When it's done running it will produce a log for you. Please post that log in your next reply.Important Note - Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

2 more replies

In the last few days I have noticed that after I have booted-up my PC, and before I have started any applications, my PC keeps telling me that "You, or a program, have requested information from ******", (where ****** is some web address or other), and then asks me which connection I want to use. The websites it is trying to contact change, and usually it tries twice in a row (I always select 'Cancel'), then gives up, but of course that doesn't stop whatever it is from doing its thing when I am connected by choice.Some of the websites I have taken note of are:www.ip2location.combest-targeted-traffic.comhs2.zonelabs.comcm2.zonelabs.com210.22.14.9I have been using SpywareBlaster, Ad-Aware, Spybot S&D, X-Cleaner, Avira AntiVir PE Classic and ZoneLabs Firewall for ages, and have followed your instructions on http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/ as best I can, but I can't find the problem.This is my HijackThis log:Logfile of HijackThis v1.99.1Scan saved at 12:03:11 AM, on 16/11/2006Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\DU Meter\DUMeter.exeC:\WINDOWS\Mixer.exeC:\Prog... Read more

A:I Think I Have Some Spyware, But I Can't Find It.

6 more replies

It keeps flashing on my toolbar as a yellow triangle telling me i have worms and trojans and viruses and that it has found spyware...at first i thought it was my computer telling me this and it gives u this same website telling u to scan with there free scan and then u need to buy it to remove wat they say u have which u dont have at all becos i ran everything and i found a website which displayed wat i kept getting exactly but the guy never told u how to remove it..its slowing my computer down and internet speed... i have tryed system restore aswell and it will not go away and i have typed exactly wat it told me i have and u have to remove it...i was dl a crack and thats what gave me this spyware, any feedback would be apprecaited

A:I cant find this spyware with anything

i have luked at the forum and me and metalgod4eva have the exact same problem

2 more replies

Hello. I need find and change link to the image in the source code of the page.
-

As you can see in this example, it is very easy to do.
-

But how i can do this here?

More replies

Please help. I have posted messages before. My son's PC, even though there is connectivity IE does not establish a connection. It is frustrating because I have run AVG, Spybot Search and Destroy, Microsoft antiSpyware, KillBox, etc, I have fixed HJT logs, and I still cannot get access to the internet. On top of this, I keep getting a virus JS/psyme and a couple of Trojans. I run AVG to clean the computer and the next day the virus and the Trojans are back again. How is this possible, there is no access to web sites in the computer. Is it because there is connectivity? Apart from this, cleaning his PC is very difficult because I cannot access the INTERNET to download spyware cleaners, I have to keep using CDs to copy the data from his PC to mine. If there is a way to at least get this access, it would help a great deal.

Once again, thank you very much for your anticipated assistance.

LCrime

A:Help IE returns a cannot find server and page cannot be displayed messages

Run HIjackthis

Click the "Scan" button, when the scan is finished the scan button will become "Save Log" click that and save the log.
Go to where you saved the log and click on "Edit > Select All" then click on "Edit > Copy" then Paste the log back here
It will possibly show issues deserving our attention, but most of what it lists will be harmless or even required,
so do NOT fix anything yet.

If you do not have hijackthis on this computer then do this:

You want to post a Hijackthis log I assume, and you can easily do this by using a floppy disk provided both computers have that type of drive (3.5 floppy drive, or A:\)

Put the disk into the bad computer's floppy drive, after the pc is started up.

You do not need Internet access on that pc to do this.

Open Windows Explorer and hit C: drive so the folders etc show over on the right side.

At the top, select File>New Folder, but rename the new folder to HJT, then, hit Drive A: to see the hijackthis.exe file, then EDIT> Copy, then click on the new HJT folder on drive C: that you made, EDIT> Paste and the hijackthis.exe file should be copied to C:\HJT folder so you can run it on the bad pc.

When you have hijackthis.exe in the HJT folder:

Start hijackthis.exe by double clicking it from the HJT folder and use... Read more

2 more replies

HI,

I am getting a "warning spyware detected on your computer install an spyware.." on my desktop wallpaper since past two days.

I ran SUPER Anti spyware, then ran combofix and then HJT. I'll post the
logs in that order. Right now the message has gone, but I guess its still not fixed.

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/13/2008 at 03:22 PM

Application Version : 4.15.1000

Core Rules Database Version : 3503
Trace Rules Database Version: 1494

Scan type : Complete Scan
Total Scan Time : 01:31:36

Memory items scanned : 603
Memory threats detected : 2
Registry items scanned : 5735
Registry threats detected : 1
File items scanned : 105474
File threats detected : 242

Rogue.Dropper/Gen
C:\WINDOWS\SYSTEM32\LPHC5Q4J0EV87.EXE
C:\WINDOWS\SYSTEM32\LPHC5Q4J0EV87.EXE
[lphc5q4j0ev87] C:\WINDOWS\SYSTEM32\LPHC5Q4J0EV87.EXE

NotHarmful.Sysinternals Bluescreen Screen Saver
C:\WINDOWS\SYSTEM32\BLPHC5Q4J0EV87.SCR
C:\WINDOWS\SYSTEM32\BLPHC5Q4J0EV87.SCR
C:\WINDOWS\Prefetch\BLPHC5Q4J0EV87.SCR-206729A6.pf

A:Getting a "warning spyware detected on your computer install an spyware.." on desktop

6 more replies

When I go to a website that does not exist in IE a page comes up saying Error 404 and it has links to different internet categories and such. How do I get this to go back to the original IE page not found page instead of this one and Ive run alot of spyware programs. Here is my Hijack This log. Hope it helps.

Logfile of HijackThis v1.97.7
Scan saved at 6:05:31 AM, on 4/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe
C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\Free Surfer\fs20.exe
C:\WINDOWS\TBPanel.exe
C:\WINDOWS\System32\mqsvc.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe

A:Error 404 Spyware Page

2 more replies

I just went though an extremely long and time consuming process of getting my computer operational again. I was infected by malicious programs while running various anti-spyware programs like Spyware Doctor, and Spyware Search & Destroy. I have since then installed even more programs like Ad-Aware and Malewarebytes. Each one has been able to remove spyware or programs the others could not. Anyway at some point my antispyware programs failed me and I got infected. I also had Norton at some point but that was useless as well.

Anyway the problem that worries me right now is that most of my anti-spyware can not update. Only Ad-Aware seems to have updated. The rest are getting blocked by something or they say that I do not have an internet connection yet here I am typing away. When I do searches for spyware or viruses the links I click on give me a page cannot be found error. It is like I have a censor on. I managed to download AVAST but I can not install it as it needs to download some files and it is being stopped by something.

During startup I get a memory can not be read error on HDThemeEnabler. Other programs like Realtek Audio have to be terminated when I first see the desktop appear. One program that seem critical called services.exe has to be terminated with status code 1073741819.

Also when ever I remove the spyware on my computer and every single spyware program comes up clean I will get spyware getting downloaded or turning on during startup. When I open ta... Read more

A:Problems with spyware and can not update virus/spyware programs.

Hello and welcome to TSF.

Please read the instructions very carefully and carry them out exactly as they are presented.

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
Double click on ComboFix.exe & follow the prompts. Combofix will try to update. It's very important that you do NOT allow it to update. Please click on No if it requests an update.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Click on Yes, to continue scanning for malware.

12 more replies

Ok. When i turned the computer on today i saw a flashing icon in the system tray saying "Virus Alert!". When i click the popup it opens up Spyware Quake and does a scan. I closed it as soon as it popped up.

I googled "Spyware Quake" and found out that it was a spyware that tricks people into buying their products. So i googled how to remove it and found to use spyware doctor which did get rid of the pop up in the system tray.

But my computer still has spyware around ever since i got that spyware quake problem. I get pop ups when i use internet explorer telling me that my computer may be infected and i need to download that program to remove it (WinAntiVirus PRO was one of them i think).

I also have Norton Antivirus 2006 and i get messages for it saying ive got "Trojan.Nebular" and that it cant be repaired and access to it is denied. I do run Ad-aware and Spybot S&D regularly along with my norton scan.

Could anyone help me with this?

A:Solved: Spyware virus problems - Spyware Quake

16 more replies

Hey guys. So I'm new here, but I've found many helpful answers so here's my problem and I hope someone can help.

When I turn on my computer, sometimes it won't even get to the log-in when you type your password and log-in to Windows. I have XP on my IBM desktop. The computer is 1 year old. Lately, when I turn it on, these colored bar code-type pixelized lines fill my screen in a grid-like pattern, and everything freezes. I have to re-boot. i just recently removed lzx32/PE386 off my machine and it was fine for the last 2 months. These symptoms occurred back then but had stopped. Now they're back again and as you can imagine I am so irritated. I have to re-start sometimes 35-50 times just to get Windows on. Then, after 10-75 minutes (you never know when) that pixel stuff starts and it locks up. Then it just won't come on after awhile, and the keyboard lights blink, I can hear a fan clicking in the CPU.

When I opened the CPU, the fan on the videocard was looping, I removed the card but the sound was still there. I listened, and it's coming from the box of wires in the CPU. However, it's not overheating or power supply because it works on every other machine.

So I am assuming this is time-release malware or some such garbage, as every 24th or 25th of the month, this same thing starts up. I really am getting flustered with it, violently so. I removed Spysheriff last summer and was fine. Then in Jan. the pixel bar code crap started, and now my c... Read more

A:Help - Possible Virus/spyware But Cant Find It!

Since you are already receiving help here this thread is closed. Please do not duplicate postings as this causes confusion and makes it more difficult to get the help you need to resolve your issues. Thanks for your cooperation.

1 more replies

Ok, I am fairly experienced with spyware removal but this one has me very confused. I have run Ad-Aware, Spy Sweeper, MS Antispyware, Norton antivirus, and AVG Antivirus. I have gotten rid of a lot so far, but there seems to be one more left that I can't find. It will generate pop ups even when not surfing the internet and it starts up with windows since I can leave it alone after startup and it will happen. I have gone through the hijack this log but I can't figure out what is causing it. I think it is loading itself inside another dll but I am not sure. I have posted the log below and any help would be appreciated.Logfile of HijackThis v1.99.1Scan saved at 6:05:21 PM, on 9/25/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\aol\ACS\acsd.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\System32\CTsvcCDA.exeC:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exeC:\Program Files\Symantec_Client_Securit... Read more

A:Stealth spyware...can't find it.

1 more replies

I have CONSTANT pop-ups, even when Internet Explorer is not open. I have run Adaware, Spybot, and Spysweeper multiple times, but to no avail. Below is my HiJackThis log. I hope someone can help!

Logfile of HijackThis v1.98.2
Scan saved at 2:27:43 PM, on 12/29/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\HIDSERV.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\STARTEAK.EXE
C:\COMPAQ\EAKDRV\EAUSBKBD.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFTRAY.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\COMPAQ\EASY ACCESS BUTTON SUPPORT\BTTNSERV.EXE
C:\COMPAQ\CPQINET\CPQINET.EXE
C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\WEBROOT\WASHER\WWDISP.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE

A:Solved: Cant find Spyware

8 more replies

I'm having a problem with a user's computer that I cannot solve and desperately seeking a solution.

System began exhibiting malware behavior - communications coming from an app named SharK.exe to several IP's. AdAware, SpyBot, MS Antispyware and Norton Corporate Antivirus could not identify. I contacted Norton's division and uploaded samples of suspicious files, which they recognized as W32.Spybot.Worm and Trojan.Dropper and sent me updated definitions. Norton Corp AV is now catching and removing these instances and seems to have them cleared out. These are standalone items - not known to infect other system dlls/exes.

However, the machine still has SOMETHING running somewhere. Everything works great in safe mode, but after booting up normally, Explorer, IE, Taskmgr and all Office applications will freeze, timeout, etc. Office will freeze when asking for a file dialog. Excel will load a spreadsheet, then display a cursor whenever you're trying to work inside the document. Taskmgr shows its icon in the tray but will not open a process window.

Posted below is a HijackThis log and Analyzer result, but I don't see problems there immediately.

====================================================================
Log was analyzed using KRC HijackThis Analyzer - Updated on 9/28/05

***Security Programs Detected***

A:Virus? Spyware? Can't find it!

One additional note: I have formatted/reinstalled the machine from scratch. After getting it reconnected via Outlook, the infections began again. However, I could not locate any mails in the box with suspicious attachments.

6 more replies

HiI have a spyware problem on my aptop which nothing seems to fix. Ive tried lots of free spyware killers and have bought one or two too. (Norton, Xsoftspy, registry mechanic...) Nothing will find it.I'm also have a major headache with Themida. It seemed to disappear for a while (mainly by me blindly killing random registry entries via hijack this), but when I set up a new account on my computer, it reapeared again!Hope someone can help!! Here's the hijack this thing.ThanksJonLogfile of HijackThis v1.99.1Scan saved at 11:12:32, on 02/12/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Norton Internet Security\ISSVC.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\... Read more

A:Spyware Which _nothing_ Can Find!

Hello, I would like to take a look at this log
and will get back you you as soon as I can.

Thank You.

2 more replies

Hello - I was posed a question by someone who uses Spyware Terminator. When they ran a scan, this item was found and they are asking whether or not to allow or deny

C;\windows\INF\WPIE4X86.INF

I've researched it as much as I know how, but can't really come up with a definative answer, so I thought it best to ask here. I'm leaning towards calling it a "keeper" but I don't want to chance messing up someone elses computer.

Thank you, Keith

A:Spyware Terminator Find

I would need to know the full info about the file, such as what program it is linked to, etc. get a copy of the file, and most.inf files that I have seen can be opened with notepad, it should have full program information inside. then you can actually evaluate what program installation that it is linked to, and determine if it is a threat.

12 more replies

I have a piece of spyware that reloads everytime I launch IE. It changes my home page to:

res://C:\WINNT\xylgs.dll/index.html#96676

Logfile of HijackThis v1.97.7
Scan saved at 12:08:41 PM, on 8/9/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\WZCBDL Service\WZCBDLS.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\WINNT\Samsung\LaserSMMgr\ssmmgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINNT\system32\rundll32.exe
C:\Program Files\Microsoft Office\Office\OUTLOOK.EXE
C:\WINNT\sdkvy32.exe
C:\WINNT\msxq.exe

A:Spyware reloads itself - can't find

6 more replies

Hi Guys,
My PC has a problem with Internet Explorer.
I am connected to Boradband OK as i can receive and send emails via Outlook Express.
However, when i try to launch Internet Explorer, the window appears but no URL address appears.
Then i get an Internet Explorer error box :
Cannot find 'http://chinese writing. Make sure the path or Internet address is correct.
The internet explorer pag then closes down.
When i click ok on the error box, the whole process starts again but the chinese url in the dialogue box is different to the last one.
When i load Internet Explorer (without add-ons) from Accessories>System Tools, the internet works fine.
I am at a loss what to do.
I've tried everything (the restore won't work as it only goes back to when the error started occurring.
Have you any clues.
Thanks