Tech Problem Aggregator

Need help in removing Protection System Virus

Q: Need help in removing Protection System Virus

I've been infected with the Protection System virus. Computer runs slower than normal. My google searches get redirected to www.searchwebonline.org. Obviouly, I get a ton of Protection System fake popups asking me to register and that it has found various worms/viruses, etc.

Please let me know what steps to take to get rid of this thing. I have downloaded OTL.exe and run the scan based on a previous post but the removal was not successful. Not sure but I guess the removal of malware/spyware is specific to each pc?

Anyway, any help would be greatly appreciated!

tenjed

A: Need help in removing Protection System Virus

Reposted: http://www.bleepingcomputer.com/forums/t/264165/windows-security-center/

1 more replies
Answer Match 65.94%

Hello! I have visited the site before and have browsed through the topics and easily removed virus. This time I have this pesky Protection System virus that keeps on appearing after I have scanned using Malware. I also keep getting Security Center Alerts telling me about trojans such as Rootkit.Win32.Agent.pp and it gives me an option to enable protection but have decided not to mess with anything like that. I hope someone can help me please. THANK YOU!
I will paste my MalWare log.
Malwarebytes' Anti-Malware 1.39
Database version: 2421
Windows 5.1.2600 Service Pack 3

9/15/2009 7:21:32 PM
mbam-log-2009-09-15 (19-21-32).txt

Scan type: Full Scan (C:\|)
Objects scanned: 200701
Time elapsed: 1 hour(s), 12 minute(s), 7 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 2
Files Infected: 13

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{5e2121ee-0300-11d4-8d3b-444553540000} (Rogue.ProtectionSystem) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\protection system (Rogue.ProtectionSystem) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\UAC (Rootkit.Trace) -> Quarantined and deleted successfu... Read more

A:need help removing Protection System

Hello! My name is Sam and I will be helping you. In order to see what's going on with your computer I'll ask for you to post various logs from the tools that we will use to resolve your issue. Please also share with me any information about how your computer is reacting and behaving each step of the way as we work through this process.Please download ComboFix from one of these locations:Link 1Link 2Link 3Important!You should NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert. It is intended by its creator to be used under the guidance and supervision of an Malware Removal Expert, not for private use.Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Make sure that you save ComboFix.exe to your DesktopDisable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

Follow ... Read more

9 more replies
Answer Match 64.26%

Protection system has uninstalled Malwarebytes. Pops up with Security Center Alert and tells me to help protect your computer windows firewall has blocked some features of this program. Do you want to block this suspicious software. Before it uninstalled Malwarebytes, when I would try to run Malwarebytes it would ask me what program I wanted to open Malwarebytes in. I can not access control panel to add or remove. I get an error message that says C:\WINDOWS\system32\rundll32..exe. I have beginners knowledge of computers. Any help will be appreciated. I have windows XP on my computer
 

More replies
Answer Match 63.42%

Hello i hv this bad malware on my computer called (malware protection)it has blocked mostly all my files it doesn't let me open internet explorer, task manager and pretty much everything. I need help removing it without loosing all my files like my pics,music and etc... if not how can i backup my files thanks alot! I have windows vista.

More replies
Answer Match 63%

Hello all, I?m a newbie here. Thanks in advance for any assistance which you may kindly offer. This is an accurate description of my issue here: http://www.bleepingcomputer.com/virus-remo...protector#filesAll of my attempts to launch ?Malwarebytes? and ?Spybot S&D? are immediately halted. This excerpt from the top of this article is where I seem to be stuck in trying to follow the prescribed remedy:-----------------------------------?Some installations of System Protector include a DLL that is loaded via the Winlogon Notify key. This DLL has a random name and is located in the C:\Windows\System32 folder. If this DLL is loaded it will make it so you cannot run numerous anti-malware programs on your computer. An example HijackThis entry for this type of DLL is:O20 - Winlogon Notify: aeefaaeeafcbba - C:\WINDOWS\system32\aeefaaeeafcbba.dllIf you have problems starting anti-malware utilities or if they shut down automatically when you start them, then you may have this module installed. If this is the case you will need to delete this file before following the rest of the steps in this guide. For help removing and identifying this DLL, we suggest you ask about in the forums.?-----------------------------------------So, before posting any logs I thought I would first inquire if anyone might have dealt with this particular POS before and immediately know where this demon seed file might be located and how to go about performing a proper exorcism? I ha... Read more

A:Removing “Protection System” - a rogue anti-spyware program?

Welcome to BCWe Need to check for Rootkits with RootRepealDownload RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.If it doesn't want to run, rename root repeal.exe to something like tatertot.scr

8 more replies
Answer Match 60.06%

I just went through the guide for removing the Security Protection virus, and I followed it to the letter. I had no problem at any step, and my computer (Win XP Home, SP3) seems to be back to its old self in every respect but one. None of my browsers - IE8, Firefox, or Chrome, will load google.com or search.yahoo.com. I haven't tried any other search engines, but any other URL I enter works just fine. I get "connection timed out" (Firefox) or "could not connect" (Chrome) when trying to load google.com or search.yahoo.com. Since Security Protection wreaks havoc on browsers, I thought that maybe I didn't get some setting reset properly.

I would be up a creek without guides like those I've found here, and any help in resolving this issue is greatly appreciated!

Jay

A:Problem loading Google or Yahoo Search after removing Security Protection Virus

Hello,Please follow the instructions in ==>This Guide<== starting at step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then post them in a reply to this topic by using the Add Reply button.If you can produce at least some of the logs, then please create the post and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the reply and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Please note that I am not a member of the Malware Removal Team and will not be assisting you in removing the infection. I'm simply helping you to post the information they need in order to assist you.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.Orange Blossom

5 more replies
Answer Match 58.38%

Thanks in advance to the BleepingComputer users for helping me and others with this malware/virus problem: On December 14, 2011, the System Fix Virus & Privacy Protection Virus hijacked and infected my system: WinXP (64-bit). They've caused my default web browser to change frequently (each time I reboot my PC). So I've been having trouble getting rid of all of this malware/viruses from my system, since I use Windows XP x64. The latest version(s) of ComboFix and TDSSKiller don't work on the 64-bit version of Windows XP, but they are compatible with other versions of Windows: 98, XP, VISTA, 2000, 2003, 2008 and Windows 7! The following programs were made for other operating systems, so I need a solution to these 3 problems (listed below)e: ComboFix.exe and TDSSKiller.exe are not compatible with my Windows XP 64-bit system. So how do I get rid of the malware/viruses from this computer without those apps that were made to get rid of the following problems on other Windows OS's?:1. System Fix Virus (reference: http://www.bleepingcomputer.com/forums/topic432547.html)2. Privacy Protection Virus (reference: http://www.bleepingcomputer.com/forums/topic432664.html)3. Google-Redirect Malware (reference: http://www.bleepingcomputer.com/forums/topic416561.html)

A:Infected WinXP 64-bit with "System Fix Virus" & "Privacy Protection Virus" (Malware)

That is coorect they will not.. If you need to remove malware stiil then please go here....Preparation Guide ,do steps 6 - 9.Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.If Gmer won't run,skip it and move on.Include a link back to this topic.Let me know if that went well.

1 more replies
Answer Match 57.12%

lFor the last couple days I have had problems with windows police pro virus which i was able to fix. Now Protection System virus is attacking me. First it wouldnt let me open any programs, but finally I was able to download and run IObit security 360 which found a large number of threats. It did not really solve the problem though, instead now for just about every program (except microsoft office, and a couple others) it says "Choose a prgram to open this file", basically nothing will run. Also Protection System virus is still there and is doing it's usual thing. I can't use the internet or open regedit, and I have no idea how to fix this. My OS is Windows XP.

A:Protection system virus Please Help

does anyone have any ideas? I would really appreciate any help that could be provided

1 more replies
Answer Match 57.12%

Logfile of random's system information tool 1.06 (written by random/random)Run by Owner at 2009-09-01 18:01:20Microsoft Windows XP Home Edition Service Pack 2System drive C: has 51 GB (34%) free of 147 GBTotal RAM: 895 MB (21% free)Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:01:42 PM, on 9/1/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16876)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\TGTSoft\StyleXP\StyleXPService.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\CyberLink\Shared Files\RichVideo.exeC:\WINDOWS\system32\svchost.exeC:\PROGRA~1\COMMON~1\Stardock\SDMCP.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\WINDOWS\RTHDCPL.EXEC:\WINDOWS\system3... Read more

A:protection system virus

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

4 more replies
Answer Match 57.12%

Hello

This is the first time I've had a virus so I'm a little new to the technical terms and am trying to follow the advice given on this forum.
(BTW - the advice has been v clear and easy to follow - thanks!!)
I have had the 'Protection System' virus since yesterday (the one that masquarades as an anti-virus). I havent accepted anything nor bought it but it keeps putting distasteful shortcuts on my desktop, has cut me off from the internet, disabled some of my own scanware and keeps putting up pop-ups pushing me to buy it.

I read your threads and tried to install the Malwarebyte' Anti-Malware but it won't run and closes after 5 seconds. I then ran a CD with AVG as suggested on one of the threads. After this ran, I still was unable to run the Malware software - even in safemode.

I am using my friends computer and have downloaded the DDS screen saver and have managed to run it on this (healthy) PC and obtain the log files with ease. On my PC I have tried several times and rebooted, but no logs are being produced. Indeed after some time of trying - even that welcome message isnt displayed and it just closes without warning.

I dont really know where to go from here. Im not overly technical so I dont know if there is somewhere I should be looking to start with. Any help would be much appreciated.

PS I am running on Vista.

Thanks

A:'Protection System' virus

Welcome to BCWe Need to check for Rootkits with RootRepealDownload RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.----------------------------------Please note: If Rootrepeal fails to run, try this step: Click Settings - Options. Set the Disk Access slider to HighAlso try: right-click on rootrepeal.exe and rename it to tatertot.scr==========================Please download Win32kDiag.exe by AD and save it to your desktop.alternate download 1alternate download 2This tool will create a diagnostic report Double-click on Win32kDiag.exe to run and let it finish. When it states Finished! Press any key to exit..., press any key on ... Read more

6 more replies
Answer Match 56.28%

I have (possibly had if combofix worked correctly) the "System Protection" virus along with it's best friend a search engine redirect virus.
Tried-
-Step by step guide, TDSSKiller, RKill, and Malwarebyte as outlined here http://www.bleepingcomputer.com/virus-removal/remove-security-protection
-AVG and another scanner that I can't remember (has a doctor as a symbol)
-Deleting the host lines through notepad
-Restore prior to infected date
All of them failed miserably, especially the TDSSKiller (didn't find anything). Malwarebyte claimed it deleted about 30 files, however I was still being redirected and Deploymentupdate.exe continues to pop up the processes tab in my task manager. When I force quit the Deploymentupdate, my computer runs a bit more smooth.

I finally decided to run Combofix (no I do not have a mentor/guide) and so far no redirecting but that "Deploymentupdate.exe" still pops up!

I have attached a log. I appreciate any advice!

-Nate

A:System Protection/redirect virus

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/418304 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

6 more replies
Answer Match 56.28%

Hello, My computer was hit with these viruses maybe 2 weeks ago. I have tried various types of online help, and I have not been able to get rid of the issue. My computer was offline for a few days, and when I went back online today, I was able to search without redirects for a few hours (I actually got to the real google page instead of the redirect one), but the issue is back now. I have read that sometimes, the virus can remain in the router until it is reset. I do not have access to the router to do this, so I hope that this is not the case. I have McAfee on my computer, but it is expired, so I am not sure that I disabled it correctly before running the scans. If I need to do anything over again let me know. Thank you in advance for your expert help.Here are my logs.************************************************************************************************************************************************Checkupresult************************************************************************************************************************************************Results of screen317's Security Check version 0.99.7 Windows Vista Service Pack 2 (UAC is enabled) Internet Explorer 8 `````````````````````````````` Antivirus/Firewall Check: Windows Firewall Disabled! McAfee AntiVirus Plus McAfee Security Scan Plus WMI entry may not exist for antivirus; attempting automatic update. ``````````````````````````````` Anti-malware/Other Utilities Check: Malwar... Read more

A:System protection and redirect virus

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/419297 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

30 more replies
Answer Match 56.28%

i have a fake anti-virus called 'protection system' on my computer. I have run malware btyes and AVG software. I tried running ad-aware but it didn't to find anything. *when i downloaded malwarebytes and HJT i had to change both the file names before i could install them* Please help!!!

***did a scan this morning, new logs are at bottom of post***
here is the log from malwarebytes

Malwarebytes' Anti-Malware 1.40
Database version: 2551
Windows 5.1.2600 Service Pack 3

8/20/2009 12:42:45 AM
mbam-log-2009-08-20 (00-42-45).txt

Scan type: Full Scan (C:\|)
Objects scanned: 146971
Time elapsed: 31 minute(s), 35 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
\\?\globalroot\systemroot\system32\UACmosoxtbqlm.dll (Rogue.Agent) -> Delete on reboot.

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
\\?\globalroot\systemroot\system32\UACmosoxtbqlm.dll (Rogue.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\uacinit.dll (Trojan.Agent) -> Delete on reboot.

and here is the HJT log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved... Read more

A:Protection System virus. help please! HJT log included

9 more replies
Answer Match 56.28%

Hello,

My computer was recently infected by System Progressive Protection virus, which I removed using RKill and Malwarebytes Anti-Malware. In the process, the Antimalware detected and removed several Trojans and Rogues. How do I ensure that my computer is not infected? Any suggestions on additional scans that can be performed?

Thank you so much.

A:System Progressive Protection Virus

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwar... Read more

12 more replies
Answer Match 55.86%

System Progressive Protection is a rogue security software which will report that malware has been detected on your computer in an attempt to scare you into buying this malicious software.
In reality, none of the reported issues are real, and are only used to scare you into buying System Progressive Protection and stealing your personal financial information.

As part of its self-defense mechanism,System Progressive Protection has installed a rootkit on your computer,which will disable the Windows Task Manager and will block you from running any program that could lead to its removal.

System Progressive Protection is a scam and you should ignore any alerts that this malicious software might generate.
Under no circumstance should you buy this rogue security software as this could lead to identity theft,and if you have, you should contact your credit card company and dispute the charge stating that the program is a scam and a computer virus.
Removal instructions for System Progressive Protection virus​This is a self-help guide, use at your own risk.
If you experience problems completing this guide, or the problem persists after following the instructions below or would like to have one of our staff members guide you through the process, please start a new thread in our Malware Removal Assistance forum.
STEP 1 : Start your computer in Safe Mode with Networking

Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer.

Press and hold the F... Read more

More replies
Answer Match 55.86%

I posted in the "Am I infected? What do I do?" forum and was told to come here. I was told to do steps 6-9 of the Preparation Guide but am having trouble downloading the defrogger. It will let me download it but it will hide it to where I can't get to it. I've gone in the control panel to make sure I am enabled to see hidden files. Can anyone please help? Below is what I posted in the other forum:

I've been trying to kill this virus and I thought I finally got rid of it. It all started a few days ago I noticed i would get redirected to a different website everytime i searched for something. Then i got the privacy protection pop ups and the Vista 2012 Antivirus pop ups that tried to scan my PC.

Well after reading about it on the internet and then finding this lovely website I downloaded aswMBR, fixTDSS and Malwarebytes Anti-Malware which i thought got rid of the virus. I no longer get the popups or the redirects but now when I try to re-enable my virus protection (AVG) and Windows Firewall it will not let me. I also tried to download Microsoft Security Essentials but when I download it and go to the .exe I get an error saying it's not a valid Win32 application.

Also when i tried to view my System Info to try and determine if I had a 32 or 64 bit operating system there is nothing there. It just says Windows Management Files may be moved or missing.

Can anyone please help?

A:Redirect, System Fix, Privacy Protection Virus

***Update***

I was able to get the defrogger downloaded by saving it to a thumbdrive from another computer. I got it to work. I am attaching the 2 DDS logs from step 7 of the guide however when i run GMER (step 8) i get an error saying it stopped working. It runs for about a minute and stops. Not sure what to do now.

51 more replies
Answer Match 55.86%

My disc drive is not being recognized and in ie, using google, if I click on a link I get redirected to 2popcorn.net which redirects me somewhere else. It seems a lot of people are having a similar problem. Anyway here is my DDS log:


DDS (Ver_09-07-30.01) - NTFSx86
Run by Christian at 17:10:08.59 on Wed 08/12/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.249 [GMT -7:00]

AV: Windows System Suite *On-access scanning enabled* (Updated) {ADD4C55C-2E4A-4DE1-ACBE-B354C5480485}
FW: Windows System Suite *enabled* {1E0B9FC9-7CCE-4014-93AC-973C2AD1E648}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\BCMSMMSG.e... Read more

A:Have Windows System Suite as Virus Protection

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.??If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine.??Please perform the following scan:Download DDS by sUBs from one of the following links.??Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool.??No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

14 more replies
Answer Match 55.86%

I have Vista Home Basic, and I know that Vista prevents viruses from tampering with the System Restore folder. A few days ago I was the lucky recipient of a rootkit/trojan agent, which was able to turn off System Restore and delete/damage/prevent System Protection from working. By turning off System Restore, the virus effectively deleted all restore points, thereby preventing my computer from recovering to a previous state. This seems to negate any benefits of tamper protection.

Is it possible to prevent anything from disabling System Restore? Thanks for any advice.

Michael

PS. Although I was unable to use System Restore I was able to press F8 at startup and select "Last known good configuration." This has not removed all the issues, but it seems to have gotten rid of the really nasty stuff, and System Protection has returned.

More replies
Answer Match 55.86%

I just got both these viruses today, and managed to finally delete them both with malwarebytes antivirus. The thing is, after I used unhide.exe, yes, I got a lot of my icons back, but the things INSIDE of my folders, are all gone. I had many pictures and documents inside those folders, and they're really important too. Is there any way I can get them back?

More replies
Answer Match 55.86%

I have been trying to get rid of these/this virus for days and days. They wil allow nothing to run. I can access the internet in safemode and d/l but cannot run TDSSkiller, no matter how I rename it, SmitFraudFix.exe also wil not run, and pretty much everything else locks up. I ran DeFogger and disabled CD Emulation. I will post the DDS log as soon as I can make it work..... any suggestions eagerly and gratefully accepted..... I'm about ready to give the bleeping computer the Very Hard Boot out the window........

Christa

A:System Restore and Privacy Protection Virus

I can't run the dds.scr program, it says I have to be an administrator and I have never had an admin password for this computer (bought it used).

10 more replies
Answer Match 55.86%

Please help me out. I have a virus. Every time I turn my computer on I get a message saying some error has occurred and giving me the option to "terminate" or "debug". Then I get pop ups advertising/telling me to download "protection system" software and saying my computer is infected. I also get pop up fake security alerts. Also, when I do a google search and try to click on a link it redirects me to fake ad web sites. I ran hijack this and malwarbytes antimalware.. I don't know if this is important or not but at first I couldn't even get malwarebytes to open. I had to go into program files and rename the file to get it to open so I could run the quick scan. UPDATE: I think this thing is really smart.. I was away from my computer for maybe 5 mins. and wasn't around to close the pop ups from the virus and "protection system" downloaded onto my computer and sent me a message saying "are you sure you want to uninstall malwarebytes anti-malware and all of its components?" It's trying to get rid of my anti-malware! Someone please help.. I want this thing gone.Here are my logs:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 6:59:33 PM, on 9/2/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS ... Read more

A:Please Help-- Computer infected with "protection system" virus

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until ... Read more

2 more replies
Answer Match 55.02%

  I originally had Microsoft Security Essentials for 6 months now.  I had it programed to scan everyday.  All of a sudden everything is removed from icon task bar (I'm sure if that is what it is called)  and I can no longer access those programs even from the start menu which included MSE.  My system restore will not respond.  I keep getting this pop up:  loadmoney.txt - notepad.  I have tried safe mode with networking and I still cannot download anything except Dr. Web's Cure it.  What are my options?  I am running Windows XP  with service pack 3. 
 
I have recently found that Spyhunter4 was able to download and detected 327 problems, which included some antivirus blocking rules.  If I purchase their product will they be able to fix the issues I am having.  I don't want to purchase a product that I am not sure whether that will fix the problem.
 
Well, spyhunter gives me the option to pay with paypal, but when I select paypal there is an error and I don't think that it would be safe to give my creditcard in formation right now.
 
Also I have problems deleting Files or Folders.  It says Acess denied, make sure the disk is not full or write protected and that the file is not currently protected.

A:CANNOT INSTALL ANY VIRUS PROTECTION AND SYSTEM RESTORE IS NOT WORKING

G'day cryss962,
I would steer clear of spyhunter 4...it is distributed by enigma software which has a poor rating according to WOT.....it rates the site as misleading and unethical and spammy.
 
Run the following for me and see what we can do..... if you are unable to download any of these tools please let me know.
 
 
 
Download  MiniToolBox MiniToolBox, Save it to your desktop and run it.
Close any Firefox browsers you may have open
Checkmark the following boxes:
•Flush DNS
•Report IE Proxy Settings
•Reset IE Proxy Settings
•Report FF Proxy Settings
•Reset FF Proxy Settings
•List content of Hosts
•List IP configuration
•List last 10 Event Viewer log
•List Installed Programs
•List Users, Partitions and Memory size.
•List Minidump Files
 
Please Close Firefox before using this tool
 
Click Go and copy / paste the result (Result.txt).
 
 
Download TDSSKiller and save it to your desktop.
Extract (unzip) its contents to your desktop.
Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.
If an infected file is detected, the default action will be Cure, click on Continue.
If a suspicious file is detected, the default action will be Skip, click on Continue.
It may ask you to reboot the computer to complete the process. Click on Reboot Now.
If no reboot is require, click on Report. A log file should appear. Please copy and... Read more

14 more replies
Answer Match 55.02%

Have run all your recommended programs.... Here is my latest Hijackthis Log File...Logfile of HijackThis v1.99.1Scan saved at 6:25:55 PM, on 22/07/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeE:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exeC:\Program Files\Common Files\Symantec Shared\ccProxy.exeC:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exeC:\WINDOWS\system32\qwerty12.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exeC:\Program Files\Canon\CAL\CALMAIN.exeC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\System32&#... Read more

A:Computer Is Getting Pop Ups For System Doctor And Other Virus Protection Software

Welcome to the BleepingComputer HijackThis Logs and Analysis forum stevepas My name is Richie and i'll be helping you to fix your problems.Please download rr-free-setup.exe (by RubbeR DuckY),save the file to your desktop:http://www.malwarebytes.org/rr-update/rr-free-setup.exeDouble-click rr-free-setup.exe. RogueRemover will now be installed - OK the installation prompts. Once it has successfully been installed,click Check for updates,download/install any updates.Now click 'Scan'. RogueRemover will now scan your computer for any rogue programs. Once it has finished click Remove Selected if it finds any. Please allow RogueRemover to submit the statistical data.--------------------------------------------Please download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop Close any open browsers. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Also post a fresh Hijackthis log please.

2 more replies
Answer Match 55.02%

Hi (first time poster, so I apologize for any rules/etiquette that I break),A few weeks ago, I had the System Fix virus. I followed these steps (My link) and successfully (almost) removed the virus. I still have the issue that when I click on a link after a Google search, it will re-direct me to a random website. I also do not get real time search results as I type into the Google search bar.I have tried multiple programs like Malwarebytes' Anti-Malware, Spybot Search and Destroy, Superanti Spyware, and many others (in safe-mode, and "regular" mode), but nothing seems to work.Something that doesn't seem to run for me is TDSSKiller (even when I change the file name and extension).Also, when I try to turn off my computer, the "Windows has to shut down a process" screen appears for about 10 seconds (meaning that there is something running in the background)?I haven't gotten many viruses on my computer, but I have fixed a lot of my friends/families computers. This one has me stumped.I would really appreciate some help!When I tried to run gmer.exe, I received the following error:DDS Results:.DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 8.0.7601.17514Run by SARAN at 19:31:38 on 2011-12-28Microsoft Windows 7 Professional 6.1.7601.1.1252.2.1033.18.4025.2495 [GMT -8:00].SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}.============== Running Processes ===============.C:\Windows\system32\wininit.... Read more

A:Google Search Re-Direct Virus? (After removing System Fix virus)

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/435068 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

27 more replies
Answer Match 55.02%

Hi,

Like stated I recently tried cleaning my mom's system of these two viruses. I had to take her harddrive out and put it as a slave on my comp to initially clean some things. I am now able to boot up onto her harddrive as a master, and have run the latest malwarebytes, hijackthis, and this other program by AVG specifically for the Virut virus. The AVG program has checked and cleaned all exe and other files on my comp and I rebooted twice and it now finds nothing everytime. After this I ran the updated malware & hijack this, and cleaned everything... My question is now everytime I reboot, everything seems fine, but when I run the malware & hijackthis, they still find a FEW things everytime... are these traces of the virus left over? I'll post the logs from hijackthis and malwarebytes... is there anything lingering around waiting to restart this whole madness?

Windows XP Pro SP3

Thanks
Ryan

A:Recently tried removing Virut virus & system security virus.. is it gone?

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner ... Read more

2 more replies
Answer Match 54.6%

MBAM found system restore virus on my computer, it was removed. But still having issues with redirect virus. Tried following instructions for downloading and running TDSSKiller but it won't run. Please help.

Victor

A:Redirect Virus after removing system restore virus

With the information you have provided I believe you will need help from the malware removal team. Please make sure that you read the information about getting started first.Then start a new thread HERE and include or required logs.Including a link to this thread will be helpful. Good luck and be patient. Help is on the way!

1 more replies
Answer Match 54.18%

OK. I'll try and explain this as good as i can. This started a couple months ago where i was trying to sync a scanner to laptop on win8 Toshiba, when the CPU started going crazy changed all contrast colors and ease of access settings to where the screen was not legable. ran my virus scan which didn't find anything but it kept happening. so did a full system restore. to no avail started noticing cpu always different  i got on it so i've been trying to run malware and spyware that gets shutdown or computer reboots in middle of scan. to where the laptop has crashed quite a few times when i get to looking deeper into the problem. now ive noticed network problems at home  with so many ports open and established. its gotten so bad as my older asus running win 7 has same problems now and my brand new galaxy s5 cell phone also was doing weird things and finally it too finally crashed. so thinking its something over the network which at first i thought it was the wife spying on me but every now and again i can turn off router and seems like things still happen and couple of my scan logs got changed were i know i saw some alerts on log about not updating but next day it was changed. when laptop was off all night after scan.
 
im not that tech savy but i try to read and look up as much as i could but shoot it just keeps getting worse and worse. so i would greatly appreciate some help with the matter before the laptop gets thrown in trash. it seems like theres alot of cmd ... Read more

A:Total system problems. files moved around virus protection gets disabled.

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll dow... Read more

5 more replies
Answer Match 54.18%

Hi, as you can see by my Topic title, I am ready to tear my hair out trying to get this computer back to normal so any help would be GREATLY appriciated. My computer seems to be infected with a rogue anti-virus called Protection System, and it causes fake Windows Security Alerts to pop up every so often with claims that my computer is infected. Most forums I go to tell me that people who have this Malware can't search for help on Google, this is true in my case to a certain degree. Before EVERY link on Google I clicked made a pop up coming up, leading to some AD website called windowsupdate.com or something like that, but now it doesnt do that, but some websites are blocked and I find ways around them. On top of that after a couple of hours or so depending on the time, a system shutdown will start to countdown. Now most times I can avert this by simply clicking cancel whenever the task manager pop ups start occuring telling me to End Now and stuff, but sometimes it goes through. Also sometimes i'll get a process called IEXPLORE.EXE which I know isn't the REAL iexplore.exe because 1 it's UPPER CASE and 2 I use Opera, and the IEXPLORE.EXE will play random audio clips of commercials and scenes and stuff like that and I have to end the processes from the Task Manager. Also I have weird processes like: wscsvc32.exe, g106p.exe, freddy41.exe etc etc. I downloaded Malwarebytes but I had to save it and run it from my external hard drive because if i save it on my normal hard drive it ... Read more

A:HELP!! PROTECTION SYSTEM ROGUE ANTI-VIRUS MALWARE MAKING ME INSANE!!!

Also here is my Malwarebytes LOG as well:Malwarebytes' Anti-Malware 1.38Database version: 2297Windows 5.1.2600 Service Pack 26/26/2009 3:15:19 AMmbam-log-2009-06-26 (03-15-19).txtScan type: Quick ScanObjects scanned: 116506Time elapsed: 14 minute(s), 27 second(s)Memory Processes Infected: 3Memory Modules Infected: 0Registry Keys Infected: 11Registry Values Infected: 8Registry Data Items Infected: 0Folders Infected: 5Files Infected: 43Memory Processes Infected:C:\WINDOWS\freddy47.exe (Worm.KoobFace) -> Unloaded process successfully.C:\WINDOWS\system32\reader_s.exe (Trojan.Agent) -> Unloaded process successfully.C:\Documents and Settings\Compaq_Owner\reader_s.exe (Trojan.Agent) -> Unloaded process successfully.Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{b2c7b2a1-00f3-42bd-f434-00aaba2c8952} (Trojan.Ertfor) -> Quarantined and deleted successfully.HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b2c7b2a1-00f3-42bd-f434-00aaba2c8952} (Trojan.Ertfor) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2c7b2a1-00f3-42bd-f434-00aaba2c8952} (Trojan.Ertfor) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall&... Read more

3 more replies
Answer Match 53.34%

I have a windows xp laptop.

A little padlock sign has appeared on the bar along the bottom of my laptop screen, it keeps popping up saying its 'System Tool' and that I need to buy it due to viruses on my computer and I can't find a way to delete it. I keep telling it that i want to continue unprotected. I tried running anti malware scans in normal mode but my computer kept sutting down halfway through scans to a blue screen saying I should run my computer in safe mode. So, I went on to safe mode. Nothing is popping up in safe mode, and I have tried running my Windows Security Essentials scan but it can't find any problems. I got a friend in who helps my family to fix computers and he thought he had fixed it (I'm not sure how) but it had popped up again when I next looked at my computer. So, I went back to safe mode and thats where i am now.

Here is my DDS:

DDS (Ver_10-12-12.02) - NTFSx86 NETWORK
Run by Natasha at 23:04:51.76 on 01/03/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1918.1375 [GMT 0:00]

AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WI... Read more

A:Something called 'System Tool' keeps popping up and wanting me to buy virus protection and can't open my actual vir...

Hi, Welcome to Bleeping Computer.My name is Shannon and I will be working with you to remove the malware that is on your machine.I apologize for the delay in replying to your post, but this forum is extremely busy.Please Track this topic - On the top right on this tread, click on the Option button, and, in the drop-down list, click on 'Track this topic'. Under Subscription Information, click on 'Immediate Email Notification' and then click on the Proceed button at the bottom.Do Not make any changes on your own to the infected computer.Please set your system to show all files.Click Start, open My Computer, select the Tools menu and click Folder Options.Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.Uncheck: Hide file extensions for known file typesUncheck the Hide protected operating system files (recommended) option.Click Yes to confirm.Now, let's look more thoroughly at the infected computer -We need to see some information about what is happening in your machine. Please perform the following scan:We need to create an OTL Report
Please download OTL from here:Main MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Change the "Extra Registry" option to "Use SafeList"Push the button.Two reports will open, copy and paste them into your reply:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedPlease note: ... Read more

2 more replies
Answer Match 53.34%

Hello,

It's been a month and a half since my computer first started having issues, so I'll try to be as comprehensive as I can from memory, but can't guarantee that I'd remember everything. That said, here is a list of the symptoms:

I started getting re-directs when I go to Google links.
I started getting bluescreen. I can't remember what the bluescreens exactly say, but always with "beginning of physical dump", etc.

I did a system restore to a week or two weeks ago. That did not solve the problem.

I ran AVG, Windows Defender, Spybot Search& Destroy. None of these programs resolved the issue.
AVG found nothing of note.
Windows Defender found nothing of note.
Spybot Search& Destroy found the following two items:
-Opachki.ru
Autorun Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Autorun Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
-Win32.ZBot
Data
C:\Users\Public\Documents\Server\hlp.dat
Text file
C:\Users\Public\Documents\Server\admin.txt
I could not update my AVG nor Windows Defender.

So, after all this, I decided to do a system restore that goes to a point that's a lot further than before. But this happens:
System Restore informs me that "No restore points have been created on your computer's system disk", when I HAD system restore points before!... Read more

A:Google re-directs. Bluescreens. Can't update virus-protection programs. System restore-gone!

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

20 more replies
Answer Match 52.92%

My computer won't work because system tools virus. How do I remove this?

A:removing system tools virus from my PC

Hello natedogg58 ,Let's disable the main file manually so you can run some tools. Do you have access to a flash drive?What I want you to look for is in Application Data (If using XP). There will be a folder, with a file in it of the same "name". This will appear random, but it has a pattern. Look for letters and numbers in this order: lower case, upper case, lower case, upper case, lower case, then 5 random numbers. For example:Folder -----> pEeHl02508\pEeHl02508.exe <-----file insideDelete the folder. Now, if you still have no access to the internet, download the following tool to a flash drive from a different computer, then put it on the infected one and run it.This tool is not a toy. If used the wrong way you could trash your computer. Please use only under direction of a Helper. If you decide to do so anyway, please do not blame me or ComboFix.* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. IF YOU USE AVG IT MUST BE UNINSTALLED OR THIS WILL NOT RUN.1. Download this file - combofix.exe http://download.bleepingcomputer.com/sUBs/ComboFix.exe 2. Double click combofix.exe & follow the prompts.3. When finished, it will produce a log for you. Post that log in your next reply please.Note:Do not mouseclick combofix's window while it's running. That may cause it to stall.If you have trouble running it the first time, then rename ComboFix.exe to natedogg.exe and ... Read more

2 more replies
Answer Match 52.92%

I'm running a Windows 7 64-bit and this morning I got about 20 error messages saying "failed to save all the components for the file system32/[file name]", which was accompanied by a bogus scanner which told me I had several hardware problems. I did some research and found out I have the System Check virus, so I tried to follow a few guides that I found through Google to remove it, including the one on this site. The problem still hasn't gone away.Here's what I've done so far:Ran TDSSkiller, which didn't find anythingRan rkill, then MBAM, both in regular and Safe Mode. Both times MBAM found 2 items (I don't know if they were the same items each time the program ran), and I clicked "remove selected", but the pop-ups kept coming back after I ran the scans.Ran the unhider program, so now the files the virus originally hid are visible againIf anyone could help me fix this problem I'd really appreciate it.

A:Help removing System Check virus?

Hello and welocme,it appears we will need a deeper look. Please go here....Preparation Guide .Create a DDS log and post it in the new topic explained in step 9,which is here Virus, Trojan, Spyware, and Malware Removal Logs and not in this topic,thanks.If Gmer won't run,skip it and move on.Include a link back to this topic.Also include that MBAM log. The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Let me know if that went well.

3 more replies
Answer Match 52.92%

Hi, I'm just a novice, but the guide on removing System Tool was very good - even I did it. But just at the end it requires me to delete the HOSTS file and download a bona fide HOSTS file then save it to the Windows\System32\Drivers\etc folder. However, it won't let me save it to this folder: it just says to contact the adminstrator, even tho I'm the only user and my account says adminstrator. Sorry it's probably a daft question, but any ideas please? Thanks!

A:Removing the virus System Tool

Hello.running the hosts-perm.bat file mentioned in the removal guide should fix the permissions issues you're experiencing. Alternatively, save the file elsewhere, then move it to the specified location.Hope that helps.~Blade

1 more replies
Answer Match 52.92%

Link to original topicMy computer seems to be infected with the System Check virus, I got the bogus system scanner which said I had several hardware problems along with about 20 pop-up messages saying "failed to save all the components for the file system32/[file]", as detailed in the link above. Below are my DDS and MBAM logs. I didn't run a Gmer log as the guide only says to run that on Win7 32bit, and I am running 64.DDS Log:.DDS (Ver_2011-08-26.01) - NTFSAMD64 NETWORKInternet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_22Run by Nate at 18:55:14 on 2012-01-16Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3836.3123 [GMT -8:00].AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}.============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\... Read more

A:Help removing System Check virus?

Sorry, forgot to add the attach.txt from the DDS scan, attaching it now.

13 more replies
Answer Match 52.92%

Ok, I have not posted before. But I need help removing system tools virus. I have visited several sites and have downloaded spyware doctor, and scanned in safe mode with networking as the instructions said, but the scan never finds system tools to fix and remove. Please... I need advice and help intermediately.

running windows XP home edition

A:Need help removing system tools virus

You need to read this pinned topic in the Am I infected? What do I do? section of the Security forum, then start a new topic here and wait for a member of BC's Malware response team (shouldn't be too long) to guide you through the removal process.

2 more replies
Answer Match 52.5%

Virus buster - the worst program I have ever come across. Doesn't want to leave my computer
I removed the program from my system but I still get pop-ups every few seconds. I also have some protection toolbar on IE. Can't get rid of that either. Right now its disabled...
Logfile of HijackThis v1.99.1
Scan saved at 12:52:04 AM, on 09/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
C:\Program Files\Video ActiveX Object\isamonitor.exe
C:\Program Files\Video ActiveX Object\pmsngr.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Video ActiveX Object\isamini.exe
C:\Program Files\Vid... Read more

A:Solved: Need help removing Virus Buster from my system

16 more replies
Answer Match 52.5%

How do you completely remove the "System Volume Information" Virus? Every time I do a Full Scan with MalwareBytes, it'll scan C:\system volume information\, and Avira will pop up a detection. I always move it to quarantine, but it always comes back... The file is either A0xxxxxx.dll or A0xxxxxx.exe. (x's stand for a number). Any advice?

A:Removing "System Volume Information" virus?

Hello.To clear this out you'll need to purge System Restore. This is done by disabling System Restore, and then re-enabling it.You can find instructions on how to disable and enable system restore here: Windows XP System Restore Guide or Windows Vista System Restore Guide~Blade

1 more replies
Answer Match 51.66%

Buddies,

With some of steps with this link, i got to delete the folder RECYCLER.

However, the System Volume Information folder dont allow the access to delete it (MSDOS or Explorer). I know that have to manage folder options, to show hidden files, etc... run CMD as Administrador and the folder is still there denying the command.

Any hint to help me?

Thanks

A:Removing System Volume Information virus with $recycle bin

Check out this post

2 more replies
Answer Match 51.66%

Hello Everyone,

I recently was on my laptop and was infected with a fake antivirus, so I ran my antivirus ( malwarebytes and avira) which it found and removed the virus. After removing the fake antivirus I restarted my computer and a rundll error poped up that said:

Error Loading C:\windows\ijizimocinexil.dlll The specified module could not be found.,

I am unable to start the computer into safe more now, When I try to go to safe mode the blue screen comes on an says there is an error and when I start my computer normally it has the rundll error. Everything seems to still work just fine and the computer seems to be pretty much the same speed. What would be the first step towards cleaning my computer of any infections?
Laptop: Dell Inspiron 6000 Running Windows xp Service Pack 2

More replies
Answer Match 51.66%

i have windows vista and i have norton and i wont have it for long, i cant afford to buy virus protection but i need it. whats the best thats free and has NO trials
 

A:Solved: whats the best free virus protection and spywhere protection?

16 more replies
Answer Match 51.24%

Hi All,

I could successfully remove SYSTEM FIX virus with the useful guide but unhide.exe did not work for me and I still have many files hidden in many folders.

Could you please anyone out here help??

Please.

Ash

A:Files are still hidden after removing SYSTEM FIX virus 3 months back!!

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/465361 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Answer Match 50.4%

The System Fix Virus & Privacy Protection Virus hijacked and infected my system: WinXP (64-bit). They've caused my default web browser to change frequently (each time I reboot my PC). So I've been having trouble getting rid of all of this malware/viruses from my system, since I use Windows XP x64.

ComboFix.exe and TDSSKiller.exe are not compatible with my Windows XP 64-bit system. So how do I get rid of the malware/viruses from this computer without those apps that were made to get rid of the following problems on other Windows OS's?:

The latest version(s) of ComboFix and TDSSKiller don't work on the 64-bit version of Windows XP, but they are compatible with other versions of Windows: 98, XP, VISTA, 2000, 2003, 2008 and Windows 7!

1. System Fix Virus (the first virus that affected my Windows system, 2 days ago.)
2. Privacy Protection Virus (behaves almost exactly like the aforementioned virus)
3. Google-Redirect Malware (redirects all my searches to this site: 63.209.69.107)

Thanks in advance to ANY users for helping me and others with this malware/virus problem: I understand and read the previous pinned-thread about the revelant malware/virus issue that Windows-users solved with the programs I've been unable to install on my system. The aforementioned malware/viruses began to infect my PC on December 14, 2011 (since that day, I haven't found a single anti-virus program that can detect the Google-redirect malware/virus on my system).
&nbs... Read more

More replies
Answer Match 49.98%

  I am a bit unsure of difference between malware protection and anti-virus protection. I have Norton nis which is great for stopping Trojans. I have a company that works on my computer if I have a problem. They wanted me to put in a anti malware program. I have been having problems with computer lately, so I let them do this, could this cause a problem, because I know that you are not supposed to run 2 anti-virus programs?
          Anyone?

A:Difference between malware protection and virus protection

Anti-virus and anti-malware programs each perform different tasks as it relates to computer security and threat detection. Essentially, they look for and remove different types of malicious threats. In simplistic terms, an anti-virus program will focus on viruses, worms, Trojans, rootkis and bots while anti-malware programs generally tend to focus more on spyware, adware and PUPS (potentially unwanted programs)?. However, there can be some overlap in functionality and detection features depending on the program's scanning engine, how the vendor defines a specific threat and what Naming Standards are used. Some vendors also add a modifier or additional information after the name that further describes what type of malware it is.The Difference Between Antivirus and Anti-MalwareAntivirus and Antispyware Software: What's The Difference?What Is the Difference Between Antivirus & Antispyware?Use Anti-Virus and Anti-Spyware SoftwareTo fully understand the difference between Anti-virus and Anti-spyware (anti-malware) programs, you need to understand the difference between the various types of malware. Please read the Glossary of Malware Related Terms.

6 more replies
Answer Match 49.98%

MY question is, "if I purchase a particular product. I'm not sure if I could name the product here. Could someone tell me if it will remove it from my computer?

A:removing security protection

Hello,

Try following this guide: http://www.bleepingcomputer.com/virus-removal/remove-security-protection

If you still have issues after following the steps in the guide let me know.

~Blade

1 more replies
Answer Match 49.98%

Can anyone PLEASE help me? Somehow my files became "write protected" I was able to in the pass hook up my portable HD and drag and drop files with no problem, I go today to do the same thing.. and bam I get the pop that the file is protected and to remove it and try again.. I am lost. For 5 hrs I have googled and tried everything. I am on Vista, and use an usb cord to transfer to my ext hard-drive with ease, same as I do with my black berry just a simple drag and drop never had this problem, dont know why today.
Someone/anyone know how to turn it off?
Please and THANK you in advanced!
Leis

A:Removing Write-Protection..

hi,..
Right click on the hard drive icon or folder icon and go to security and give yourself "full control" you should be logged in on your computer as administrator or with administrator rights to perform this step..
cheers

1 more replies
Answer Match 49.98%

So I've tried following the guide on BleepingComputer, but I can't boot in safe mode.
When I try to access the advanced menu via F8, I get a small menu that instead asks if I want to boot floppy drive, cd drive, etc. instead of the advanced menu you usually see, with safe mode as an option. I'm unaware of when/why this changed as I've used safe mode previously, but it was a while ago.
I haven't tried using the System Configuration Utility method, as I'm sure it'll just cause the loop mentioned in BleepingComputer's How to start Windows in Safe Mode. And while it does include a solution as to what to do if you enter the loop, it doesn't provide a solution as to how to get into safe mode.
I've tried to run rkill, which I had downloaded previously, but it never gets to the stage where it finishes killing the processes, no matter how many times I run it. Antivir just ends it before that's possible. I can't do a system restore or anything, nor download/run Malbytes. I could get it from this laptop, but I still wouldn't be able to run it.

Help, please? I'm not the most knowledgeable in this kind of thing, so tell me if i've missed anything.

Edit: Using Windows XP btw.

A:Need help removing Antivir Protection Pro

FIX SAFE Mode after using MSCONFIGPlease boot in safe mode and see if you can change msconfig back. How to enter safe mode(XP)Using the F8 MethodRestart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. If not, locate the following file: c:\windows\pss\boot.ini.backupCopy that file to c:\Rename the existing boot.ini to boot.ini.oldRename boot.ini.backup to boot.iniAnother choiceLet us see if we can get Safe mode to run.Please download and run SafeBootKeyRepair.exe. Once it has completed, please try booting into Safe Mode.

1 more replies
Answer Match 49.98%

I was uninstalling a program and the wizard was not uninstall some files it says ,some of the files delet manualy' but when deletes it say Acess denied please remove write protection. I was set on the properties to security Administrator but that still appears ,Acess denied Please remove write protection. How to remove the write protection?

A:Removing write protection

Make sure there are all checks for allow for both in the pic I included.

4 more replies
Answer Match 49.98%

hi...
can you please explain the procedure for the removing the protection from my 16gb sandisk usb storage. I am using windows 7.
 

A:removing protection from usb device

Which model? since they make quite a few.
 

3 more replies
Answer Match 49.14%

Hello!I just registered today on this site/discussion board & desperately need someone's help. Yesterday, my desktop PC was taken over by PRIVACY PROTECTION. Using a laptop, I tried googling ways to remove it & I am now using the "safe mode networking" mode to access the internet. Although some sites have given me steps to remove P.P. through Spy Doctor, its scans have found no threats; I suspect this is because it's only scanning my safe mode & not my normal mode (which is where the P.P. has embedded itself).BOTTOM LINE: what FREE steps can be taken to safely & effectively remove Privacy Protectin from my PC??Thanks in advance,JoeEdit: Moved topic from AntiVirus, Firewall and Privacy Products and Protection Methods to the more appropriate forum. ~ Animal

A:Removing Privacy Protection for FREE

Take a look here: Remove Privacy Protection (Uninstall Guide)

5 more replies
Answer Match 49.14%

Hi,
I'm assuming that by downloading a certain software that this was automatically downloaded and installed into my PC either by myself or a family member. I've attempted to install this but instead i receive an "error launching installer" notification. This also seems to make Yahoo my search engine automatically. Can anyone assist with removing this software.

A:Assistance Removing Search Protection

Hi and welcome to TSF you can try following the steps here How To Remove The Search Protect

2 more replies
Answer Match 49.14%

I have been fighting this for a week. At first the Security Center said my virus protection was Smart Internet Protection 2011. After some struggle (before I read the sticky instructions!) I now have Avira Antivirus loaded and working and the Security Center says it now finds 2 antivirus programs so SIP in not fully dead yet. When Avira did its scan it found and killed 3 or 4 trojans so it was a heavily infected machine.

Here are the particulars followed by the log you requested (DDS.txt). Attached is also one of the logs (GMER would not run even with only Sections checked. It hangs up the computer on, I believe, the "drivers" section).

1. Registry now has no references to Smart Internet Protection (SIP). Initially it did have 2 keys with values and a section under AllUsers/Application data. All three of these were deleted by me.

1A. No processes with obvious SIP names were ever seen.
2. OS is Windows XP with all the latest updates.
3. The computer owner does have the Windows CD that came with the system plus a restore disk to brand-new condition.
4. Malwarebytes Anti-malware was run in Safe mode and found nothing.
5. Spyware Doctor seemed to find SIP and said they would fix it for $29.95 but at this point I trust none of those folks. Several other root-kit killers were run and found nothing.
6. Very early on the proxy server setting was found checked and then unchecked.
7. Data has been backed up but I worry about the possibility of the data being in... Read more

A:Help removing Smart Internet Protection

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

I need to see a rootkit scan log in order to help you. Please download Rootkit Unhooker and save it to your desktop.
Double-click RKUnhookerLE.exe to run it.
Click the Report tab, then click Scan
Check Drivers, Stealth Code, Files, and Code Hooks
Uncheck the rest, then click OK
When prompted to Select Disks for Scan, make sure C:\ is checked and click OK
Wait till the scanner has finished then go File > Save Report
Save the report somewhere you can find it. Click Close then Yes
Copy the entire contents of the report and paste it in your next reply.
Note: If you get a message 'Rootkit Unhooker has detected parasite inside itself!
It is recommended to remove parasite, okay?', click Okay

------------------------------------------------------

2 more replies
Answer Match 48.72%

Hello fellow forum members, and thanks to all who participate in creating this. I have an old Dell netbook that crashed (literally) on the ground, broke the screen. Hard drive is intact and accessible by a USB device, but that pesky password I made up to protect the files under my personal username, even though I know it, doesn't appear anywhere for me to access the document. I haven't found references made to it, but the hard drive has Windows XP operating system on it and I am running 8 on the computer I have now. Don't know if that has anything to do with not being able to get control panel to open on that one. If anyone has any ideas, shoot! I'm out of them, trying to continue writing a book I had started on that computer and foolishly didn't save elsewhere. Thanks!
KB

A:Removing password protection on an old hard drive

The Windows tutorial for this is ok but after hitting the advanced settings button of the Security tab, where they type in "new user" you need to type in Everyone then hit Ok etc. set for full read/write permissions as desired. Set the permissions on the Sharing tab as well.

First link is Windows sharing tutorial for XP.
How to Share and Set Permissions for Folders and Files Using Windows XP

This is the link I made which shows a bit more detail but it's for Windows 7.
HDD sharing - Windows 7 Help Forums

Important step is adding Everyone to the advanced settings of the security tab.

2 more replies
Answer Match 48.72%

I followed all the steps found here - http://www.bleepingcomputer.com/virus-removal/remove-malware-protection-center - and MBAM says it removed it successfully... but when I try to install Avira, it detects traces of Malware Protection Center. Avira won't install because it conflicts with Malware Protection Center.

Then I followed the steps found here - http://www.bleepingcomputer.com/forums/topic34773.html - as well... Hope you can help. Thanks!

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_27
Run by butbans at 12:29:55 on 2012-01-27
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.895.321 [GMT -8:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Malware Protection Center *Enabled/Updated* {3E21A5B8-106D-4EC4-AA7A-49D39654F5E3}
FW: Malware Protection Center *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
C:\Program Files\iTunes&#... Read more

A:Tried removing Malware Protection Center but failed?

Hello pama817 and welcome to BC.

Sorry about the delay, do you still need help?

31 more replies
Answer Match 48.72%

I have a USB pen drive (Verbatim 2 GB). Now I am not able to write or delete anything from the drive. It says that the disk is write-protected. But the dik does not have any write-protect tab or switch. I even tried formatting, both in windows and trhrough the command prompt but then also the same message pos up. Disk management also failed to solve the problem. Can somebody guide me as to how to solve the problem?

A:Removing write protection from USB flash drive.

What are your computer specs and what service pack are you using?

2 more replies
Answer Match 48.72%

I'm not that great a writer, so I'll just make all the details as shor and simple as I can.

http://www.bleepingcomputer.com/virus-removal/remove-privacy-protection
the guide I was using to fix my problem, also has all the lettle details about the Virus.

I am using a school-provided laptop for an AP class.

It is a 2004 Dell with Windows XP installed.

The specific Malware is a devious bit of binaric called "Privacy protection" which mimics as a anti-malware program. It constantly shows fake scans, alerts, and won't allow me to run executables(resovled by switching to safe mode). According to the guide provided (which is from this site) it often comes with rootkits.
I had come in contact with a similar virus before, so turned off my computer and set it to safe mode with networking. However, I didn't fix it the first time (my dad did). It also didn't have the ability to block executables(this one does), it merely minimized all other tabs and begged for your attention(made playing Counter-Strike a nightmare).

The specific issue is that I cannot install RKill or mbam due to lack of admin priviledges(students are not gien admin priveldges for school computers). At first I thought it was file location, but the error pop-up pops up before you choose that (it pops up after you select the language for the wizard).

Are there any relatively simple alternatives to removing the malware?

More replies
Answer Match 48.3%

Some time ago I protected the Excel 2010 file from the path File > Protect workbook > Encrypt with password and gave it a password. Now that I removed that password via below method:

Open the workbook and use Save As
In the lower right of the file window will be "Tools"
Choose "General Options"
Clear the password.
Save over your old file.

the file is openable without wanting a password. But the problem is when I open it and close it immediately, even without moving the active cell, the message "Do you want to save the changes you made to 'test.lsx'?" appears. While there hasn't occurred any changes to that file so why I face this message any time I want to close the file?
Hasn't the file been corrupted?

A:"save the changes” message after removing the protection from workbook

I've seen that happen because there are changes to the properties of the file that can't be seen, example when opening .doc files in Word 2007 or 2010 then closing saving the .doc format.

1 more replies
Answer Match 48.3%

So, I'm currently trying desperately to get my laptop DVD player to work half-decently. It's somewhat of an uphill battle, really. It appears that WinDVD doesn't want to work on this player, giving me no video and very intermittent sound in return for a DVD. Needless to say, it's uninstall time.

On to the problems... which DVD player should I be using? I've heard good things about PowerDVD, but can't help but wonder whether there's something better that is free? Perhaps not, but it's worth a try.

In addition, how on earth do I make my DVD player region-free? I've currently got DVD Region Killer, but it doesn't seem to be actually doing anything. If it fails, I'll get DVD Region Free, but I can't see that working much better if Region Killer doesn't work. I've looked at a page for firmware, but I'm reluctant to install a patch to my DVD player without first finding out what exact model my DVD is. Help/Suggestions?
 

A:DVDs - Playing them, and removing region protection on the players?

8 more replies
Answer Match 48.3%

I am unable to copy anything to my USB Stick and/or my new WD External Drive because I get the error message that I must remove the Write Protection on these Devices and I am not sure how to do that. Can anyone help me. Thanks.
 

A:Removing Write Protection on USB Stick and WD External Drive

I googled your question and here is one of the things I found.
Answerer 1
Look very hard for a very small switch on it's side.
They are very very small and hard to see. Some have a small pad-lock image that will tell you which position the switch is in.
You may need to take off the end caps to see it. May old "Attache"
Pen Drive (Thumb Drive) is easy to get the cap on backwards and not see it. IT IS VERY SMALL!!
3 months ago
Source(s):
you can get much information in this website
http://allinthis.we.bs


Answerer 3
Right click the drive in My Computer,select Properties and untick Read only.
'Hope this helps you
Vicks
 

3 more replies
Answer Match 47.04%

Somehow i have error cleaner, privacy protector, spyware and malware protection on my desktop and it has also set my homepage as a fake spyware site. I have tried smitfraud and re-insalling windows but still no luck. I would appreciate any help!

A:Error Cleaner, Privacy Protector, Spyware And Malware Protection. Need Help Removing Please!

Hello there and welcome to BleepingComputer.Please follow our Preparation Guide For Use Before Posting a HijackThis Log; running all of the scans before posting your HijackThis log in your next reply.

16 more replies
Answer Match 47.04%

hi, i have Error Cleaner, Privacy Protector, Spyware And Malware Protection icons on my desktop, and in my favorites under documents and settings. i get spammed with a bunch of fake anti-virus popups now, and i don't know how to get rid of them. system restore doesn't work, and my anti-virus/anti-spyware can't get rid of them. please help

A:Error Cleaner, Privacy Protector, Spyware And Malware Protection. Need Help Removing Please!

See info in link below for using Smitfraudfix unless you have Vista.http://www.bleepingcomputer.com/forums/t/98801/how-to-remove-privacy-protector-or-privacyprotector-removal-instructions/Install Super Antispyware free. Run it in safe mode. Allow it to quarantine whatever it finds. http://www.superantispyware.com/Run the online scan for Bit Defender in normal mode. Allow it to quarantine whatever it finds.http://www.bitdefender.com/scan8/ie.htmlHow to Start Windows in Safe Mode:http://www.bleepingcomputer.com/tutorials/how-to-start-windows-in-safe-mode/ Post back for further instructions after doing the above.

2 more replies
Answer Match 46.62%

I've had the System Integrity Scan Wizard, PC-Antispyware, and Security System Protection Control Panel popups. They've been very stubborn but after reading some of the posts here and running Spybot, Adaware, SmitfraudFix, Panda Activescan, Housecall, Stinger Avert, Windows Defender, and SDFix, I am now getting only one popup, which shows up as a blank white rectangle in the center of the screen (and now I can't click "Close" to get it off the screen, since the "Close" option is missing). From the size & shape, I believe it's the Security System Protection Control Panel. Would you please review my HijackThis log? Also, in some of the posts I've noticed recommendations to update Java. Is that needed in my case? Thanks very much for your help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:55:55 PM, on 3/28/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Common Files\Symantec Sh... Read more

A:System Integrity Scan Wizard, Security System Protection Control Panel

The blank popup appeared to be repopulated with information over time...apparently the spyware refreshed itself. I also learned from Task Manager that all of my popups were from the System Integrity Scan Wizard. After some more searching, I found the name (in my case, yzqrqzkp.exe) and told Norton Firewall to block it from accessing the internet. I used HijackThis to fix it and then deleted it and a namesake (YZQRQZKP.EXE-1253B76A.pf) from Windows\Prefetch (not sure that was necessary but deleted it anyway). My only concern is that from what I read, there should have been another copy in \Local Settings\Application Data, which I didn't find. I updated Java per instructions in another post, also turned System Restore off and on. I think the PC is now clean, but would you review my latest HijackThis log to be sure? Thanks very much.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:05:26 AM, on 3/30/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Syman... Read more

14 more replies
Answer Match 46.62%

I've had the System Integrity Scan Wizard, PC-Antispyware, and Security System Protection Control Panel popups and my backround change to a blue colour. After reading some of the posts here and running Spybot Search and Destroy, Ad-Aware 2007, RegCure and Malwarebytes Anti-Malware it seems as if that problem was solved, but now everytime I put my pc on I get these messages:The first one says "rundll32.exe - Bad Image : The application or DLL C:\WINDOWS\system32\qpfrsnow.dll is not a valid Windows image. Please check this against your installation diskette" and the second one says "RUNDLL -Error loading C:\WINDOWS\system32\qpfrsnow.dll%1 is not a valid Win32 application".The disk that I got when I bought my pc was Windows XP Home Edition SP1. I downloaded SP2 from the internet.I'm attaching all of the logs you need to assist me, because I don't know if and how badly my pc is still infected.I attached 4 log files: 1. DSS Main.txt 2. DSS Extra.txt 3. Kaspersky 4. DSS Main.txt - after the Kaspersky reportThank you for taking the time to look into my problem.DSS MAIN.TXTDeckard's System Scanner v20071014.68Run by Parratjie on 2008-04-17 09:29:31Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------... Read more

A:System Integrity Scan Wizard, Security System Protection Control Panel

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Run Hijackthis again, click scan, and Put a checkmark next to each of the lines listed below. Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button.R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =O4 - HKLM\..\Run: [e43075dd] rundll32.exe "C:\WINDOWS\system32\qpfrsnow.dll",b================Click Start -> Control Panel -> Add Remove Programs and uninstall these programs:J2SE Runtime Environment 5.0 Update 11 Java? 6 Update 2 Java? 6 Update 3 Java? SE Runtime Environment 6 Update 1Reboot and post a new hijackthis log.

37 more replies
Answer Match 46.62%

I have windows 7 home premuim 64 bit
I went to create restore point on my new dell and after about an 1/2 hour of waiting for SR to open up I got this:

You have no Restore Points. Use System Protection to create restore point.
When I attempt to turn on System Protection, it doesn't show any drives available when it opens -- it just says that it's searching for available drives and it keeps searching and doesn't stop. Eventually, I'll receive the following Error Message:

"There was an unexpected error in the property page: System Restore encounter an error. Please try to run System Restore again (0x81000203)." also all button are greyed out. I wanted take an image to show you but that's not working either. Is there hope?

Thank you.

 

A:Windows 7 Home Premuim System Restore and System Protection not working.

16 more replies
Answer Match 46.62%

My PC is infected with 3 malware popups named Security System Proctection Control Panel, System Integrity Scan Wizard and Security System Warning (the last one telling me I have Abebot). I have tried to get rid of them with Kaspersky Antit-Virus, Adaware, spyware sweeper, and SpybotSD, but they are still running. I didn't run the online scan by Kaspersky because I have the most recent version installed and running on my PC. When I ran a rootkit scan with KAV, it took just over four hours and reported my PC was clean. So for whatever reason Kaspersky is not picking up these three forms of malware. Following all other directions on your preliminary instruction list I used Deckard's System Scanner to make two Hijack This files. They are pasted in below. Please take a look and tell me what I should do to get rid of this malware. Thank you very much for this valuable service you are providing.-- Dark EagleDeckard's System Scanner v20071014.68Run by Perry H. Chesnut on 2008-04-18 23:11:18Computer is in Normal Mode.--------------------------------------------------------------------------------Backed up registry hives.Performed disk cleanup.-- HijackThis (run as Perry H. Chesnut.exe) ------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:47:35 PM, on 4/18/2008Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:F:\WINNT\System32\smss.exeF:\WIN... Read more

A:Security System Protection Control Panel & System Integrity Scan Wizard Popups

Hello Dark Eagle. to BleepingComputer.comMy name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)Please give me some time to look over your computer's log(s).Please take note of the following:In the meantime, please refrain from making any changes to your computer.Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.Finally, please reply using the button in the lower left hand corner of your screen.See you soon,Billy3

2 more replies
Answer Match 46.62%

Hello,

I have recently just successfully cloned my Old primary 1TB Western Digital HDD onto my new 1TB Samsung EVO SSD to increase hard drive performance to give it a quick boot up and to enable Windows and my programs to load a lot quicker and perform better with multi tasking. My laptop is one of the bigger 17inch Acer models which comes with two hard drive bays. So once I had wiped my older WD HDD I then inserted a new 2 TB Seagate hard drive into the second bay to be able to store it for personal and media files, and any other imprtant data, to keep it the SSD as the primary hard drive and just for OS and programs only. My system runs the Windows 8.1 OS and is 64 bit.

However, I wanted to create a restore point and upon doing so, I found that System protection was turned off for all my both my hard drives.

I thought I had managed to somehow enable system protection on my C:/ Dive (including the partioned / drive on the same hard drive) on my SSD, and yet though it shows them enabled, it shows the word missing next to them, and I am assuming this is telling me the previous restores are missing; whether as a result of cloning I don't know. The other weird thing is further up the properties page it also shows the C\ and D:\ Drive but turned off.

So I thought I would try increasing the disk space usage, since it was showing it at 0, and it would allow me to do so and returned the message: 'There was an unexpected error in the property page: The system cannot fin... Read more

More replies
Answer Match 46.62%

Hello,

I have recently just successfully cloned my Old primary 1TB Western Digital HDD onto my new 1TB Samsung EVO SSD to increase hard drive performance to give it a quick boot up and to enable Windows and my programs to load a lot quicker and perform better with multi tasking. My laptop is one of the bigger 17inch Acer models which comes with two hard drive bays. So once I had wiped my older WD HDD I then inserted a new 2 TB Seagate hard drive into the second bay to be able to store it for personal and media files, and any other imprtant data, to keep it the SSD as the primary hard drive and just for OS and programs only. My system runs the Windows 8.1 OS and is 64 bit.

However, I wanted to create a restore point and upon doing so, I found that System protection was turned off for all my both my hard drives.

I thought I had managed to somehow enable system protection on my C:/ Dive (including the partioned / drive on the same hard drive) on my SSD, and yet though it shows them enabled, it shows the word missing next to them, and I am assuming this is telling me the previous restores are missing; whether as a result of cloning I don't know. The other weird thing is further up the properties page it also shows the C\ and D:\ Drive but turned off.

So I thought I would try increasing the disk space usage, since it was showing it at 0, and it would allow me to do so and returned the message: 'There was an unexpected error in the property page: The system ca... Read more

More replies
Answer Match 46.62%

Hello,
 
I have recently successfully cloned my Old primary 1TB Western Digital HDD onto my new 1TB Samsung EVO SSD to increase hard drive performance to give it a quick boot up and to enable Windows and my programs to load a lot quicker and perform better with multi tasking. My laptop is one of the bigger 17inch Acer models which comes with two hard drive bays. So once I had wiped my older WD HDD I then inserted a new 2 TB Seagate hard drive into the second bay to be able to store it for personal and media files, and any other imprtant data, to keep it the SSD as the primary hard drive and just for OS and programs only. My system runs the Windows 8.1 OS and is 64 bit.
 
However, I wanted to create a restore point and upon doing so, I found that System protection was turned off for all my both my hard drives.
 
I thought I had managed to somehow enable system protection on my C:/ Dive (including the partioned :D/ drive on the same hard drive) on my SSD, and yet though it shows them enabled, it shows the word missing next to them, and I am assuming this is telling me the previous restores are missing; whether as a result of cloning I don't know. The other weird thing is further up the properties page it also shows the C\ and D:\ Drive but turned off.
 
So I thought I would try increasing the disk space usage, since it was showing it at 0, and it would allow me to do so and returned the message: 'There was an unexpected error in the property page: The system... Read more

More replies
Answer Match 46.2%

Hello,

I need help manually removing the "Antivirus System Pro" virus. The same suggestions are found on many websites promoting anti-virus software for removing specific registry keys, files, and folders. But, none of these exist when I search for them. Please help... What is the most troubling is that the registry keys are not hard to locate, they are simply not there.

Here are examples of what is suggested to search for and cannot be located.
For example:

Block Antivirus System PRO sites:
hxxp://www.antivirsystem.com
hxxp://www.inetavirus.com

Stop Antivirus System PRO processes:
%ProgramFiles%\Antivirus System PRO\Antivirussystempro.exe
%ProgramFiles%\Antivirus System PRO\uninstall.exe
c:\WINDOWS\sysguard.exe

Get rid of Antivirus System PRO files:
c:\WINDOWS\system32\iehelper.dll
%ProgramFiles%\Antivirus System PRO\conf.cfg
%ProgramFiles%\Antivirus System PRO\mbase.vdb
%ProgramFiles%\Antivirus System PRO\quarantine.vdb
%ProgramFiles%\Antivirus System PRO\queue.vdb

Delete Antivirus System PRO folders:
%ProgramFiles%\Antivirus System PRO\

Remove Antivirus System PRO registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ?Antivirus System PRO?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad ?ieModule?
HKEY_CURRENT_USER\S... Read more

A:Manually removing the "Antivirus System Pro" virus

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 46.2%

I've tried to open System Protection in System in the Control Panel but it will not work. It gives an error of 0x81000203. I've rebooted and attempted but get the same thing each time.

A:System Protection not working in System Control Panel

Follow instructions on this page error code 0x81000203__ - Microsoft Community

Scroll to the 2nd answer by Meghmala

6 more replies
Answer Match 46.2%

Please help!!! Pics included to explain the situation
Basically after installing some new software for my phone my windows 7 laptop crashed - it flashes a blue screen and restarts on boot up I can get to image 1 page to try a system repair
But then I need to enable system protection.. Image 2
Is there any way I can do this through a command prompt??
Thank you in advance!!!

A:Enable system protection to preform system restore

Sorry images didnt upload???

9 more replies
Answer Match 45.36%

Hi Everyone

I went on my laptop this morning and it said I needed to run a system restore. Unfortunately when I try to it says I need to enable system protection on my C drive. I've been searching the web for a solution for the past couple of hours and it seems like quite a common problem. However I've tried all of the suggested solutions and nothing seems to work. I'm not the most computer literate so some of the suggested didn't make the most sense. If anyone has any suggestions to help the matter it would be very much appreciated.

Thanks

A:How do I enable system protection for system restore?

System Protection - Turn On or Off

3 more replies
Answer Match 45.36%

My Toshiba Notebook (x64) (running Windows 7) has stopped being able to open/run programs. I've been using safe mode to try and find a cure, and safe mode works fine. I ran a few antivirus programs that detected a few things, but none of them solved this issue. Using System Restore seems to be the only thing I can really do, but I've been having some troubles with it.

Only one System Restore point shows up, and it's only from a few days ago, which isn't far back enough to fix my problem (I've already tried restoring it to that point). There are no other options as you can see here and here.

I tried to create my own restore point, but ran into some problems. When I go into "System" the "System Protection" option is missing. I only have these three options:

When I use the search bar to find it instead, "Create a restore point" comes up, but when I click and it opens System Properties, the "System Protection" tab is missing.

When I looked it up, someone had suggested running Regedit and checking HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore\DisableSR but I couldn't get that far.

If anyone could help me out, it would be greatly appreciated.

A:Troubles with System Restore/System Protection

Hello esu and welcome to Seven Forums.

Have you verified that System Protection is turned on? (If it is, try turning it off, restarting the computer, turning it back on, and restarting the computer one more time.)

System Protection - Turn On or Off

See if you can manually create a restore point.

System Restore Point - Create

If not, your computer may have damaged or corrupt sytem files. Try running a system file checker scan from an elevated command prompt (option two.) If problems are found, run the scan 3 times and make sure to reboot the computer immediately after each of the scans.

SFC /SCANNOW Command - System File Checker

4 more replies
Answer Match 45.36%

Hi, I defragged my registry (castigate me later, please), and well, my system crashed. I'm running Windows 7 Home Premium 64 bit on a Lenovo laptop, and on startup, I get a blue screen claiming that the OS couldn't boot, and the option to try a system repair. After analysis, it says that it can't repair the system automatically, and offers more advanced options. I can try a system restore, but after selecting a restore point (clearly the one created before defragging the registry), system restore says that I must enable system protection on the drive. I don't remember disabling it, and I don't know how to enable it without access to the desktop.
From those same advanced recovery options, I can use a system image recovery (don't have an image to recover from), the windows memory diagnostic (it claims there's no memory error), or the command prompt. I know very little about using the command prompt, but I can open the task manager at least, though not explorer.exe or msconfig.exe (the prompt claims they're invalid commands).
I've tried booting in safe mode, with the last known good configuration, with boot logging, and everything else from that menu, as well as a Windows 7 recovery disc (though I believe this disc just provides the same options as those installed on the laptop.
If possible, I'd like to know how to enable system protection from the command prompt window so that I can continue with the system restore. I'm quite certain that the error lies in the defragmentation... Read more

A:System Restore - Enabling System Protection

right click my computer/properties/advanced system settings/system protection/ high light your drive, click configure,now click( restore system settings and previous versions of files)
OK and exit

7 more replies
Answer Match 45.36%

 I have a screen shot of it.  There is the Local Disk (C:) listed and then this other.
 Capture.PNG   126.43KB
  0 downloads

A:Under System Prop, and System Protection what is (C:) Missing ?

Post an Image from Disk Management Screen.
 
Control Panel / Administration Tools / Computer Management / Disk Management.
 
This will show all current active drives.
 
 
 

11 more replies
Answer Match 45.36%

I have a Win10 Pro and ran MR to create a system image backup.
It went well but it turned of system protection.
A message shows up with a warning yellow triangle that reads.
Using system protection on a drive that contains system image backups will cause other shadow copies to be deleted faster than normal.
--- How do I stop system protection from being turned off?

I have another Win10 computer and created a MR system image backup on that one also.
System protection wasn?t turned off on that one.

I do not use shadow copies: If shadow copies are in use on my computer it doesn?t matter to me if that is the case as I don?t know how to use them anyway. I just don?t want system protection turned off.

A:I don’t want system protection turned off when I do a MR system image

Hi,

The available disk space on the pc with the warning issue is probably too small to store both backup images (MR) and system protection image.






I do not use shadow copies:



Actually you do. System Protection is a form of Shadow Copying.

Furthermore, it's not wise policy to store backups on the same physical drive as your system. Still better than nothing but all in all not sound practice.
Better to store back up on an ext. removable drive.

In the mean time you could reduce the amount of space allocated to System Protection and see if that helps any.

Cheers,

1 more replies
Answer Match 45.36%

I need help on how to remove the (system reserved) folder under Available Drives in protection settings. On all my other computers it is not shown. Not sure why it is there as it does not show anywhere else on computer as a drive. I guess it just bugs the hell out of me not knowing why it's there. Any help would be appreciated.

A:In System Protection under Available Drives (System Reserved)

Look in Disk Management and see if the Reserve has a partition letter.

9 more replies
Answer Match 44.52%

I hope that this is in the right section but I am having a problem with my computer. I can constantly hear programs running in the background. I currently have two anti spyware/malware installed on my computer. One is SpyHunter and the other is CyberDefender. They both are picking up on some virus called Vundo and everytime I delete it, it just comes right back. It is so frustrating surfing the internet because it freezes or moves extra slowly. Figured I'd ask you guys before I take a hammer to it lol.

Thanks

A:Windows XP SP2 running slow, virus protection catches it but the virus keeps coming back

Hello,i am moving yjis to the Am I Infected forum from XP.Please disable those apps while we do this.Next run MBAM (MalwareBytes):NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the St... Read more

9 more replies
Answer Match 44.52%

Hello,

It started with search results being redirected, then my Mcafee suite not scanning or being able to update. Any downloaded virus protection, malware blocker, etc WILL NOT RUN. Including HijackThis, Malwarebytes, Superspyblocker, Panda, etc etc.

Then it shut down Internet Explorer, and it prevents me from reloading it (now browsing on Firefox, while it lasts)

Tried Secure2k's boot cd on the mcafee forums - did not help, so came here.

DDS will not run or has been prevented from running.

GMER runs, then crashes, then the blue screen of death, then my computer restarts a few times automatically before its "normal" again.

So I cannot post any logs whatsoever.

Having some real problems here, please help.

A:[SOLVED] Unknown malware/rootkit/virus stpping virus protection and redirecting searc

BUMP, please

1 more replies
Answer Match 44.1%

For the last few days my McAfee VirusScan Enterprise 8.5.0i features has been disabled and greyed out. My Access Protection, Email Protection and Buffer Protection are absent when I open my Virus Console from my Start menu. I cannot open my Virus Console from my system tray where the icon is. I keep getting an error message that says: Could Not Access the Local Computer. But I AM the local computer. I also have full privileges. I ran services.msc to see if I had access to shut down mcshield and I get another error message Error 5: Access Denied. Now my Microsoft Word isn't working. It's saying that there isn't enough memory or the disk is full. But I know I have enough space. I've also gone into the Administrator account in Safe Mode to look at my Virus Console and, although the options are avaliable, everytime I reenable them it just disables again when I reopen it. I haven't have problems for months since I got this. I've reinstalled this thing a hundred times to no result. And I've scanned my computer multiple times with different recommended devices in and out of safe mode. I am at wits end. I could really use some help.
Deckard's System Scanner v20071014.68
Run by Buni on 2008-05-20 11:51:07
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enabl... Read more

A:Unknown Virus Or Trojan Or Spyware Attacking My Virus Protection

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=3070801
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk-rel&channel=us&ibd=3070801
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAf... Read more

2 more replies
Answer Match 44.1%

Hi, Can you please help as I believe I may be infected.
After logging on to my computer, the Action Centre reports that theFirewall and Virus Protection are turned off, with a red cross appearing on the flag on the bottom right hand corner.
This shows for a good few minutes before disappearing and Mcafee appearing to run normally.
Also, on some occasions, going into certain websites causes considerable keystroke lag (i.e. Facebook), and the only way to stop this is to restart the computer.
On looking at the system configuration startup items, item Appgraffiti appears (which appears online to be malware), but this does not show in the programs list to be able to uninstall.
I tried the Microsoft Fixit facility to uninstall hidden programmes, but although Appgraffiti does not appear there are three items showing "Name not Available"
Trying to uninstall one of these fails.
 
DDS Log below:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17280
Run by FC at 21:07:09 on 2014-10-05
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.44.1033.18.6056.3009 [GMT 1:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall *Enabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}
.
============== Running Processes ===========... Read more

A:Possible Virus - Delayed Firewall/Virus protection Startup & Keystroke Lag

Also, attempting to make changes to system configuration startup items and saving changes causes computer to freeze up. Please help as we need this for working from home.

38 more replies
Answer Match 44.1%

For the last few days my McAfee VirusScan Enterprise 8.5.0i features has been disabled and greyed out. My Access Protection, Email Protection and Buffer Protection are absent when I open my Virus Console from my Start menu. I cannot open my Virus Console from my system tray where the icon is. I keep getting an error message that says: Could Not Access the Local Computer. But I AM the local computer. I also have full privileges. I ran services.msc to see if I had access to shut down mcshield and I get another error message Error 5: Access Denied. Now my Microsoft Word isn't working. It's saying that there isn't enough memory or the disk is full. But I know I have enough space. I've also gone into the Administrator account in Safe Mode to look at my Virus Console and, although the options are avaliable, everytime I reenable them it just disables again when I reopen it. I haven't have problems for months since I got this. I've reinstalled this thing a hundred times to no result. And I've scanned my computer multiple times with different recommended devices in and out of safe mode. I am at wits end. I could really use some help.Here is my 'main.txt' information:Deckard's System Scanner v20071014.68Run by Buni on 2008-05-20 11:51:07Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------System Restore is disabled; attempting to re-enable...success.-- L... Read more

A:Unknown Virus Or Trojan Or Spyware Attacking My Virus Protection

Hi, if you would still like assistance, please do the following.Please download Malwarebytes' Anti-Malware and save it to your Desktop. Alternate download location Alternate download locationDouble-click mbam-setup.exe to install the application.Make sure a check mark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Full Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See note below)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.Click OK to either and let MBAM proceed with the disinfection process.If asked to restart the computer, please do so immediately.NextClick Start and then Run to bring up the Run box.Copy and paste the contents of this quote box into the run box:
"%userprofile%\desktop\dss.exe" /configClose all other open windows.Click OK.A window will now open. Click Check All and then click Scan!.When the scan is complete, two text files wi... Read more

16 more replies
Answer Match 44.1%

I just completely reinstalled my windows and i'm still getting redirecting and i'm also still not able to get onto malwarebytes site and i can't use microsoft update or download.. Is there a chance when i put some stuff on my flash drive that when i took the drivers off that flash drive to update my computer it could have reinfected me? if so what do i need to do to a. clean this off and b. clean my flash driveany help will be greatly appreciatedi've scanned this computer 3 times and gotten the same problems each time.. ill post the most recent first and the other two in following repliesMalwarebytes' Anti-Malware 1.46www.malwarebytes.orgDatabase version: 4095Windows 5.1.2600 Service Pack 2Internet Explorer 6.0.2900.21805/13/2010 3:28:54 AMmbam-log-2010-05-13 (03-28-54).txtScan type: Full scan (C:\|)Objects scanned: 126124Time elapsed: 8 minute(s), 11 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 2Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 93.188.161.105 93.188.166.105 1.2.3.4 -... Read more

A:Online protection tool virus and google redirect virus..

this is the very first scan i did as you can tell by the times these were all done within a relatively short time.. the only reasosn the first one i posted has 3:30 time is because i changed my clock from pacific to eastern in the middle of the scan.. all 3 scans were done within an hour of each other and i haven't been to very many sites to pick up anything at all and all 3 have the same dsnc changerMalwarebytes' Anti-Malware 1.46www.malwarebytes.orgDatabase version: 4095Windows 5.1.2600 Service Pack 2Internet Explorer 6.0.2900.21805/12/2010 11:55:56 PMmbam-log-2010-05-12 (23-55-56).txtScan type: Full scan (C:\|)Objects scanned: 119747Time elapsed: 8 minute(s), 23 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 2Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 93.188.161.105 93.188.166.105 1.2.3.4 -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{648e4f26-bd48-4bda-b906-dd725a4d48d7}\... Read more

10 more replies
Answer Match 43.68%

Hi, Im the one with the problem with a green av false security virus. I got a reply telling me to post threes documents on to my new thread after i scan with them and zip two of them. My problem with this virus, is that it puts up 4 pop ups every 30 seconds, and it keeps kicking me out of web sites. Whatever i click on when the pop ups come, it opens my internet to a page asking for my card number to make a purchase. My computer runs on Windows XP. Here is the document that i was told to copy and paste.



DDS (Ver_09-09-29.01) - FAT32x86
Run by personel at 11:12:25.42 on 09/30/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.445.139 [GMT -7:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
SVCHOST.EXE
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Symantec\LiveUpdate\ALuNotify.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\YAHOO!\browser\ycommon.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.ex... Read more

A:Green AV false virus protection virus reply

Hello, and Welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper at this forum.

---------------------------------------------------------------------------------------------

I see no AntiVirus application installed. An AntiVirus is a must have for machines connected to the internet today.

Connecting to the Internet without antivirus protectio... Read more

12 more replies
Answer Match 43.68%

Hi
When windows vista starts I get a screen that looks like a virus potection screen saying to run it. Also all files are gone until I run unhide. Cannot run task manager or anything and keep getting many popups. It also erases everything on the start menu. Don't know how to get rid of it. Can you please help.

DDS.txt
.
DDS (Ver_2011-08-26.01) - NTFSx86 NETWORK
Internet Explorer: 7.0.6001.18000
Run by Chenille at 9:34:15 on 2011-12-10
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.3061.2381 [GMT -7:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:&#... Read more

A:Keep sees virus need to scan looks like virus protection may popups

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 31. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the runn... Read more

3 more replies
Answer Match 43.68%

Hi and thanks in advance for your help!I have some type of virus on my home computer, but I am not sure what it is or how to remove it. I currently can not access the Internet and my virus protection was disabled after being attacked repeatedly some time ago. I currently do not have this computer connected to the Internet and it does not have a firewall or virus protection on it.I had posted to BC's "Am I Infected? What do I do" Forum and BC 1st Responder Rigel was helping me with this problem, but after successfully deleting a Trojan after many steps, we still couldn't resolve it. Rigel advised me to post to the HJT forum for further help and to post a link back to the topic so y'all could see what had been done so far. I'm not sure how to post a link, even tho' Rigel gave me instructions, so I hope copying & pasting the web address to that topic is sufficient . http://www.bleepingcomputer.com/forums/t/237160/cant-access-internet-virus-protection-disabled-think-i-have-a-virus/I have tried to be very "exact" with telling Rigel what was going on with my computer each step of the way since I know next to nothing about computers, so I apologize for the prolific topic posts above . . . and . . . for those ahead. I downloaded and ran the DDS Tool successfully on my infected computer. I hope I've been able to attach the Attach.txt file correctly for you. Below is the DDS.txt log.Thanks again! Scouter_________________________________________________________DDS (Ver_09-... Read more

A:Have virus, can't access Internet; virus protection was disabled

Hello and welcome to Bleeping Computer.My name is Syler, I will be helping you to solve your Malware issues. Whilst I am helping you, I wouldbe grateful if you would note the following: Please do not run other tools or scans unless I ask you to and follow all the steps I give you, in order.
Copy and paste all logs requested in you reply, Do not attach them unless asked too.
If you don't know or understand something, please don't hesitate to say or ask before you proceed with my instructions.
Please continue to work with me, until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clear.
If I do not hear back from you within 5 days of my last post, then this topic will be closed.Please download Malwarebytes' Anti-Malware from HereNote: If you already have Malwarebytes' Anti-Malware, just update then run it.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Full Scan", then click Scan (the scan may take some time to finish, so please be patient).When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be p... Read more

19 more replies
Answer Match 43.68%

I think I have finally figured out what in the heck is wrong with my computer, it's the PE_Parite A virus. I have no idea where I picked it up from, but it's there and I can't get rid of it. Previously, on my old computer, I didn't have any anti-virus software. With this new computer I purchased Trend Micro's PC-Cillin, which apparently did not pick up this virus. I gave up trying to remove/fix the virus problem and I am reinstalling my windows operating system (2000 Professional). What I really need to know is what anti-virus software should I be using? Apparently I'm not having any luck with PC-Cillin, so what's a better program? Thanks!
 

A:Solved: Anti-Virus protection against PE_Parite A virus??

7 more replies
Answer Match 43.68%

My computer is a very old, very ?full? one running Windows XP Home Edition version 5.1.2600 with Service Pack 2.0. About 6 months ago, my computer quit working, and I had a new hard drive put in, but the technician partitioned it. I am very computer illiterate, so I?ve just been managing with the part of the hard drive that had my files on it so my Drive C has an error message of ?Low Disk Space? flashing on the lower right of my desktop. I also have a 1 TB Maxtor External Hard Drive which we just got a couple of months ago. We attempted to back up my computer to the external hard drive right after we got it, but I?m not sure we did it successfully.I believe I have a virus, but I don't know what it is on my home computer. Several weeks ago, my home computer was attacked repeatedly, but NIS 2009 blocked it over & over again. However, a virus was detected and removed later that day. Also, a week or so later, my son downloaded some stuff from the Internet.My computer began acting up & I couldn't access the Internet. These are the steps I?ve attempted so far:I restarted the computer several times with no change.I attempted to use System Restore, but the computer wouldn?t reset to any of the dates I tried.I attempted to uninstall & then reinstall NIS 2009. I got the following message at one point: The file ?Sym\M.sys? on Symantec Network Driver Disk is needed. Type the path where the file is located, and then click OK. Copy files from: Files\Norto... Read more

A:Can't access Internet, virus protection disabled, think I have a virus

Hi scouter and welcome to BC We are going to have to download files and transfer them to the infected computer. Let's start with malwarebytes. You will have to tranfer it and its updates and then install them on the infected machine. Also. rename the .exe installer file to qwerty.com. Install the program and then add the updates. Here is the procedure...The process of cleaning your computer may require temporarily disabliling some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.I... Read more

17 more replies
Answer Match 43.68%

Hi,
I wanted to start system restore. The window shows: to create a restore point

open System Protection.

When this link is clicked, the System Properties dialog is opened by

SystemPropertiesProtection.exe

But the Tabs "System Protection" and "Remote" are missing in this dialog.

Something is wrong with the installation, but I cannot do new clean installation as many software is installed upon the platform. I have mounted the Vista installation DVD with "GImageX", but I do not know which files or Registry Entries I have to extract.

Any ideas? Thanks in advance for any help.

More replies
Answer Match 43.68%

Oh i can not get system restore to open but it works in safe mode not in regular mode.

A:Need help system protection not there on system properties

Hi,

Welcome to Seven Forums.

Run Regedit and check the following registry key:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SystemRestore\DisableSR.

If the key is present and has any value other than 0 then system restore is disabled and the system protection tab will be hidden.

Viruses often disable this by setting this registry key. Often they will also disable the task manager and regedit too.

If you get a message saying regedit has been disabled by your administrator then it's quite possible you have been targeted by a virus, in which case a full scan of your system is a good idea.


As always, before making changes to your registry, back it up.

hth
Tanya

4 more replies
Answer Match 43.26%

Hi all
I want to disable "hardware, Advanced, System Protection, Remote" tabs from system properties dialog box( screen shot attached).
The user should only able to access change computer name feature. Other feature should be disabled/removed.
I there any way to achieve it?
thanks in advance.


IMG]https://social.technet.microsoft.com/Forums/getfile/703346[/IMG]

A:disable "hardware, Advanced, System Protection, Remote" tabs in system

I'm inclined to say no, for a very simple reason.
Changing the computer name requires administrator access. Given that, the user already has full control over the entire computer, therefore he can change whatever he wants.
What's the purpose of such "limitation"?

4 more replies
Answer Match 43.26%

Hey all, I've ran into a huge problem... My aunt dropped off her family computer yesterday and I've been working on it for a few hours now and to say the least I'm completely stumped. There's this fake anti virus program called Protection System which does it's thing, I'm sure you know all about it. Anyway, I've done a few hours worth of research, read countless "fix it" articles and forum post and nothing has worked yet. At this point I need to rest my eyes and my mind and ask you all for your help.The biggest problem is no programs that could solve the problem or aid in solving the problem work. The real anti virus was disabled and broken, malwarebytes wouldn't install so I renamed it, it then installed halfway before freezing. I played around with that for a while and I got it to install. Couldn't run the program after that, so I renamed the that. It finally opened but as expected the scan shut the program down. After it crashed during the scan malwarebytes was completely inoperable, couldn't even delete it with out a restart. At that point I had enough, I was preparing to post a topic in the "HijackThis Logs and Virus/Trojan/Spyware/Malware Removal" forum but after several attempts it appears that not even your DDS Tool works. I'm just so frustrated right now...To clear a few things up. I've been trying everything in and out of safe mode, same results. Also, all the games on the computer appear to work, iTunes works, Quickbooks work, AIM works. I'm pretty sure every progr... Read more

A:Protection System

We Need to check for Rootkits with RootRepealDownload RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.----------------------------------Please note: If Rootrepeal fails to run, try this step: Click Settings - Options. Set the Disk Access slider to HighAlso try: right-click on rootrepeal.exe and rename it to tatertot.scr

4 more replies