Computer Support Forum

I really need some assistance

Question: I really need some assistance

I am really, really, really in need of getting my laptop fixed so that it can help me earn my living.I posted this topic http://www.bleepingcomputer.com/forums/t/216539/windowsclickcom-uacdsys-trojan-infection/ on April 3rd and have not yet recieved a reply. I have been waiting patiently as instructed but after checking for a reply this morning, I noticed the link to view new topics and followed it to look at the new topics just posted today. I noticed that many of them are already being worked. I am now wondering if my post is in the wrong place?????Any attention you can give me will be very appreciated.Thanks,Marc

Relevance 100%
Preferred Solution: I really need some assistance

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: I really need some assistance

You posted in a very busy forum, there are many more posts older than yours that haven't been answered yet. Ignoring directions and special pleas for help, especially running combofix doesn't look good.

2 more replies
Relevance 36.49%

I know the title is rather ironic, but i was wondering if anyone had any advice for me. i will explain.I have fallen in love with skiing scince my school ski trip last year, and now want to begin racing, and save 800 for next years trip. well racing gear costs alone about 900, 700 of which is for skis, so, in total, by christmas, i need to earn 1700, which for a 15 year old seems oretty impossible. Currently i have 2 jobs, a paper round, which gives me 10 a week, and 1 day a week on a golf course, giving me another 20, so per week i currently have 30 income. Unfortunately, this will only earn me 750 by christmas, the time when i will require the full sum of 1700. right, well now the sympathy part is over, i can ask for advice. Being a self confessed computer geek, and a who dares wins kind, im trying my absolute hardest to find some way of earning this money. i thought it might me a good idea to try to find a part time job in the computer world. now what i ideally want to do is to go to an old persons house, spend an hour or so teaching them/fixing their pc, and earn like 15 an hour. now im not suggesting that i only want to deal with old people, im just trying to explain the kind of thing i would love to be able to do, and make money at the same time during the summer. I can quite easily advertise through word of mouth, putting leaflets in my papers, and giving buisness cards to local shops, but i was wondering if i would need insurance or anything else a... Read more

Answer:Pc assistance job assistance (sorry for the irony)

You need to go to Dragons Den they may lend you some

10 more replies
Relevance 29.11%

Toshiba Laptop Failed Due To Spyware! Installed Clean-up Disc, Somehow The Harddrive Failed To Reboot And Wants An Hdd Password When There Was Not One To Begin With! I Am Unable To Go Anywhere At This Point! Additionally, All The Drives Have Failed! Is It Possible For Me To Connect Directly To My Fourway Wireless Router And Have Someone Do What Is Necessary To Reboot The Hard Drive Etc. To Re-install Windows Xp With All Updates For No Cost? Thank You For Your Valuable Time, Ted
 

Answer:In Need Of Assistance

Not too familiar with laptops - but on a pc I would be inclined to remove the CMOS battery ( usually round about 20mm ....3/4 inch diameter ) for 10 mins then replace. This effectively wipes any CMOS information including the bios password. It is worth a try.

You may find this helpful: http://www.smartcomputing.com/Edito...cle=articles/2004/w1510/32w10/32w10.asp&guid=

Please note - this is not specific to a laptop - just for general info only.
 

1 more replies
Relevance 29.11%

Computer recently started having pop-ups. It is a Windows XP computer and the users use Mozilla as a web browser, not IE. However, IE is still installed on the computer.

Recently, have been getting popups randomly, even when all applications are closed. I have downloaded the latest Ad-Aware program, run the scan several times and told the program to "Remove All". Pop-ups still are there. The program finds Win32.Adware.BHO along with some MyWebSearch and Cookie results.

I have tried to uninstall the My Web Search Assist from Control Panel -> Add / Remove programs, but the uninstall fails.

I downloaded and ran the HiJack This program and have the results of the log below:

===============================================================
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:23:39 PM, on 11/2/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:... Read more

Answer:Need assistance getting rid of pop-ups

16 more replies
Relevance 29.11%

The issue I have is it seems like there is something on my C drive that is creating files to take up all of my extra space. I've used hijackthis before and had an account on here before but couldn't log into it for some reason. Here is my log, please help.


Logfile of HijackThis v1.99.1
Scan saved at 8:14:04 PM, on 6/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
D:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\nvsvc32.exe
D:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
D:\Program Files\Executive Software\Undelete\UdServe.exe
D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\iPod\bin\iPodService.exe
D:\Program Files\HP\Digital Imaging\bin\hpqSTE08.... Read more

Answer:I need some assistance please

bump for fear of getting lost in the shuffle

9 more replies
Relevance 29.11%

I'm having trouble with random pop-ups occurring when IE is closed. I have tried a multitude of different programs to try to fix this but they keep coming back. So far, in the last couple weeks or so, I have tried running Spybot, adaware, smitem, smitfraudfix, hjt, combofix, and Vundofix. I have also gone into my system32 folder in safemode and tried deleting anything foreign on dates after the problem started. Seems the when I fix one problem, another starts. I would greatly appreciate anyone's help and can give you a HJT log if needed. Thanks!
 

Answer:Can't fix this - need some assistance please...

Welcome to Major Geeks!

Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Now please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide
 

1 more replies
Relevance 29.11%
Question: Assistance please

Hi, My computer recently was infected with the nasty "system security" program which is a anti virus clone, It is a fake anti virus designed to steal your money and it stops you from using windows.. I cleaned that up, ran Malware bytes and spy doctor and manually removed the infected files, I thought everything was ok but now my Task bar keeps on disappearing. So I ran highjackthis as a last resort, I would apreciate a little help. Malware bytes and spy doctor found several malicious programs and removed them, but somehow they keep on coming back!!!

My setting for my task bar are as followed: Lock taskbar (checked), keep task bar on top of other windows (checked), group similar taskbar button (checked) and Hide interactive icons (checked) I am running windows xp.

Here is my file:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:34:42 AM, on 7/15/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bonjour\mDNSResp... Read more

Answer:Assistance please

(Update)** Ok just updated Malware bytes and ran another scan, it found some crazy unwanted crap:

Malwarebytes' Anti-Malware 1.39
Database version: 2421
Windows 5.1.2600 Service Pack 3

7/15/2009 10:39:53 AM
mbam-log-2009-07-15 (10-39-53).txt

Scan type: Full Scan (C:\|)
Objects scanned: 155333
Time elapsed: 1 hour(s), 25 minute(s), 16 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)


It seems my registry keys are also infected and keep on producing the same unwanted programs somehow? I am not sure but i keep on getting the same results and now its affecting my voip line, not sure if malware fixed the problem but im running another scan now! I keep on getting "TROJAN.VUNDO.H" and an occasional rootkit, someone is definitely trying to crack my machine.
I ran hijackthis again, here is my new file:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:47:23 AM, on 7/15/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\syste... Read more

3 more replies
Relevance 29.11%

I ran through all the steps that I was suppose to. I Couldn't run in Safe Mode for some apparent reason. I did the best I could. Please help.

attached is counterspy and 2 online scan texts.
 

Answer:Need some assistance please.

and attached is the other three--runkey, shownew, HJT.
 

19 more replies
Relevance 29.11%
Question: QA assistance

Hi folks,

Am part of a QA team for a project these days, and hence need to detect, record and document bugs in a Windows Application. While finding bugs (unhandled exceptions etc.) is not very tough, trying to reconstruct them often takes up quite a lot of time. In most such cases, I fail to remember that one mouse-click or keystroke that comprised a series of events that generated the bug.

To make it easier for myself to reconstruct these bugs, I spent some time looking for utilities that can record mouse movements/keystrokes etc. so that I can playback and see what actually caused the error. I did find a couple of programs which though did a good job doing what they claimed they could (see below), but only provided a partial solution.

Thus, I'm broadcasting this SOS - If anyone knows of a software that is (hopefully specifically designed for QA) and lets you record, study and playback the series of events during the last 5,10,15,200 seconds etc. do let me know. Any assistance will be greatly appreciated.

Cheers..
Sarab.

Programs tried:

1. Journal Macro
http://www.gold-software.com/JournalMacro-file5084.html
"Journal Macro is an easy-to-use mouse and keyboard macro recorder, player and editor designed to help you eliminate repetitive operations."
Advantages:
1. Lets you playback your event records including even the mouse movements at a customizable speed.
Problems:
1. Does not generate a log file (not that I k... Read more

Answer:QA assistance

Quote:




Originally posted by sarabjit
2. Mouse and Key Recorder
...
Problems:
1. Records mouse clicks in terms of their spatial co-ordinates on the screen. Unless one reopens exactly the same windows and keeps them of the same sizes as they were during recording and then figures out what the co-ordinates correspond to, there's no way (not that I could find) of finding out the numbers mean.




that's prolly the best an app can do. The alternative would be to use a video capture tool, but you would experience a major performance hit because of all the processing that has to occur.

1 more replies
Relevance 29.11%

Using IE 8, when i click on certain links it opens a new window that is different than the others. its almost a rectangle. like i said it doesnt do this everytime i opt to open a new window only with certain links. it also doesnt have the main toolbar menus at the top. how can i get this particular link/window to resize as the rest. ??

Answer:HELP!?!? NEED ASSISTANCE PLEASE

I believe that is set by the link you press. If you right click and open in new tab / new window it won't do that, it'll open like a normal window.

1 more replies
Relevance 29.11%

Hi!
I'm not sure if anyone here can help me but if so I'm looking for someone to help me find a person's true IP address, so I know you may be asking why, the reason is this person has been cyberstalking me for too long and I need to find out who they are so this can stop, I have already spoken to the Police but since there is "no threat to my life' there is nothing they can do for me.. This has put a strain on my life cause this person has found out personal information about me & my family members, I don't feel safe online or offline.

I have tried on my own to find there IP adress but it seems to show up as different locations based on the site I'm using...

If someone could help me I'd truly appericate it

Answer:Need some Assistance

I don't know how to track ip addresses. It might even be illegal if it's possible at all.
How is this person "cyberstalking" you? Try editing your Facebook privacy settings, running spyware scans and running spybot. Also, if you have an android, root it and install LBE privacy guard and bring down the hammer by denying permissions that apps don't need. This includes Facebook's gps permission.
It's most likely they are getting to your information via bad apps your smartphone. Nearly all smartphone apps allegedly have all kinds of crap like that loaded in them.

2 more replies
Relevance 29.11%

I've been having trouble with my PC since a couple of days now. I think someone that was using MSN on my computer got one of those 'CLICK HERE' messages and clicked on it and possibly downloaded something or a cookie of some sort must've been accepted. I'm not to sure what's going on. My msn opened up messages boxes of everyone and sent those same messages. I ran an Aadware scan, Spybot and an online scan of Trend Micro and Kapersky. I have also used CCshredder and removed everything that was found on my computer. Now I still feel my computer is running slow. I can see those 'glitches' while browsing around the computer. I have a p4 3.0 GHZ with 1 gb RAM which is pretty fast and never gave me such problems. Here's a hijack log. Hope anybody could help me. There was a IRC BOT that was found and removed. Oh just to also add..I was using NOD 32 all this while and switched to Trend Micro because NOD didn't seem to find anything I was infected with. Anyway, here's the log.

PS: I'm not very computer literate!!

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 3:26:39 PM, on 4/1/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_11\bin\jusched.ex... Read more

Answer:Need some assistance please.

Somebody? :(

4 more replies
Relevance 29.11%

I have a Dell Demension 8250 running xp and I am using Norton for some protection.

I have Registry Booster and have repaired and fixed up the registery.

I have scanned every file on my system.

I have turned Norton off and tried to install the fix.

I have uninstalled Norton and tried to install the fix and then Reinstalled Norton.
I do not believe Norton is a problem.
I have searched the net for similar problems and have not come up with articals similar to mine.

The problem is that I can not install the Microsoft fix KB927779! The install shield is in my system try all the time. I click on the little Microsoft automatic update shield and it says that it is installing the fix. But right after it says that the installation was succesfull the update shield goes away for about 3 or 4 min. and then pops back up like I never installed it. I have rebooted right after the install but it makes no difference.

Here is a Hijack log if that will help you. Thank you for looking at my problem.

Logfile of HijackThis v1.99.1
Scan saved at 11:56:45 PM, on 3/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Prog... Read more

Answer:I've tried and tried and know I must ask for assistance

7 more replies
Relevance 29.11%

I am trying to make a bootable dvd image using Ghost v9. I was able to do this with an older version but I can't seem to figure this one out. The last Admin here didnt take the time to show me anything so I am on a trial and error basis. What I did so far was made an image to a DVD. I tried to boot from it but it didnt go thru. Our last image had these files on it:

Old Image

Ghost.exe 66kb
Ghost .ini 2kb
Ghost.env 1kb
Ghost.ino 2kb
Ghosterr.txt 4kb
T30ntfs.001 358, 945kb
T30ntfs.gho 2,097,139kb

This is the file on my new image:

c_drive 2.39gb

I seem to be missing a lot files.


At this time, I only have Norton Ghost v9. I can get any software as you all know but here at work, I got to be careful in what I use and this place is tight with money. So, this is the only software I can use. Does anyone here have an experience in this and can provide step by step instructions on how to do so? Also, I don't want to use a floppy to access the image at this time. So I need a 100% bootable DVD image of these IBM laptop hard drives. They are all IBM T30's 40gb. Our other image is outdated and I don't like how it is setup.

I know a lot of people are willing to help or think they know how to do this, but I need someone that has done this and does it on a regular basis and knows this process like the back of their hand.

I'm wasting too much time trying to figure this out. I'm leaving for Michigan tomorrow at 6 am to replace 25 T30 IBM laptop hard drives so th... Read more

Answer:Need some assistance...

so you want to be able to boot to dvd, run ghost, and restore the ghost image to the hd?

5 more replies
Relevance 29.11%

I would really appreciate some help from some techies please. Recently I have been getting alot of pop-ups with the URL domain of xadso.offeroptimizer,xasdq.offeroptimizer, etc. (all have offeroptimizer at the end). If I'm to understand correctly, this is spyware. Earlier I found another person on these boards with the same problem. So, I followed the instructions given to this fellow, in the hopes my problem would be cleared up. also i downloaded HijackThis and pasted the logfile below. Would someone who knows about this stuff please look at it and tell me if im safe or if there is anything else i need to do to protect myself. I greatly appreciate any help I receive.

Thanks


Logfile of HijackThis v1.97.7
Scan saved at 2:24:19 AM, on 11/12/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WScript.exe
C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe
C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe
C:\WINDOWS\system32\RUNDLL32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-us\msnappau.exe
C:\Program Files\DIGStream\digstream.exe
C:\PROGRA... Read more

Answer:Need Assistance, Please

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

You have an outdated version of HijackThis. Click here to get the latest version of HijackThis.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point.

Please download Ad-aware SE and install it if you don't have it already. Make sure it's the newest version and check for any updates before running it. Go to this site to get the plug-in for fixing VX2 variants. To run this tool, go into Ad-aware->Add-ons a... Read more

4 more replies
Relevance 29.11%

Alright, so I'm thinking about buying an AMD 64 and a mobo. A few questions:
1. What's the best core for gaming without OCing? Still Venice?
2. Is there a big difference between 3200 and 3500?
3. Good PCI-e socket 939 mobo for $100 or less?
Thanks.

Answer:Might buy, need assistance.

no, san diego is the best, has a larger cache

6 more replies
Relevance 29.11%

This is the HJT log for my friends PC running Windows XP. He downloaded some sort of rogue spyware. The computer was rebooting itself several times after start up. I was able to get it to stay booted up long enough to install HJT and run a scan and save the log file.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:18:14 PM, on 8/6/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IObit\Advanced SystemCare 4\PMonitor.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Documents and Settings\All Users\Application Data\OfficeGuardianV2\reminder\SacReminder.exe
C:\Program F... Read more

More replies
Relevance 29.11%

First and foremost, I would like to thank the ones who contribute to this site and provide idiots like myself with support.

This past week has been quite eventful. I have a notebook that just was shipped off for repair and now my desktop is having issues. I am experiencing very erratic cpu usage and it is affecting the performance of my machine. I have researched quite a bit before resorting to this method.

I hope you fine folks can help me out with this. Here is my log:

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
C:\windows\System32\nvsvc32.exe
C:\Program Files\Dell\Support\Alert\bin\DAMon.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
C:\Program Files\Pure Networks\Network Magic\nmapp.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\windows\system32\ctfmon.exe
C:\windows\System32\svchost.exe
C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
C:\windows\system32\wscntfy.exe
C:\windows\System32\svchost.exe
C:\Program Files\Mozilla Fire... Read more

More replies
Relevance 29.11%

I updated my computer and did the read and run me first scans. I also did the vundo fix program off this site because my original antivirus software kept findin it. i ran it three times.

Here are the attached files
 

Answer:I need some assistance please.

and here are the scans. I forgot to save bitdefenders log.
 

5 more replies
Relevance 29.11%

I am finally back! I had some personal problems and I wasnt able to come on much, any wayz..

I decided to build a new computer because my old one which wasnt really old, got destroyed. Long story, dont ask.

I have a budget around 2.5 grand.

i need, everything, even mice, keyboards,speakers,soundcard,monitor. I want wireless mice and keyboard, anyhting besides a logitech, i need a good big lcd monitor. i will use this for media, web browsing and games. I do play games a lot but i also run a lot of apps. please help me, and could u please post links because i need this pc within the next week. thanks very much.

Answer:I would like assistance.

well wow, good luck i know www.newegg.com is a great site, and no shipping charge is required so you pay the price that you see. and i found this site http://xoxide.com/cases.html (that wil take you to the cases, but you can find your way around from there) its not as confusing as newegg, and also has decient selection. have fun, and good luck

pccc

9 more replies
Relevance 29.11%
Question: Assistance Please

first off i would like to say that these forums are dying. and now my question.


i need to have 5.1 sound. but dont have much dought to spend. so what are some cheap good quality speakers. i am going to get the creative lams gamer edition sound card, and want speakers to go with those. also what is the best mouse keyboard combo i can get without going above 80 bucks? ( i am big gamer)

Answer:Assistance Please

How about this:
http://www.newegg.com/app/ViewProduc...116-137&depa=0

7 more replies
Relevance 29.11%
Question: Need Assistance

I don't know what it is, but often I get very poor connections to the internet. They seem to originate with my browsers. What do I do?Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:56:33 AM, on 5/4/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16640)Boot mode: NormalRunning processes:D:\WINDOWS\System32\smss.exeD:\WINDOWS\system32\csrss.exeD:\WINDOWS\system32\winlogon.exeD:\WINDOWS\system32\services.exeD:\WINDOWS\system32\lsass.exeD:\WINDOWS\system32\svchost.exeD:\WINDOWS\system32\svchost.exeD:\WINDOWS\System32\svchost.exeD:\WINDOWS\System32\svchost.exeD:\WINDOWS\System32\svchost.exeD:\WINDOWS\system32\spoolsv.exeD:\WINDOWS\Explorer.EXED:\Program Files\Java\jre1.6.0_03\bin\jusched.exeD:\Program Files\BellSouth\AM\BellSouthAlertManager.exeD:\Program Files\Bellsouth\HelpCenter40b\bin\sprtcmd.exeD:\Program Files\Comodo\Firewall\cfp.exeD:\Program Files\Messenger\msmsgs.exeD:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exeD:\WINDOWS\system32\ctfmon.exeD:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeD:\Program Files\Comodo&#... Read more

Answer:Need Assistance

Hi Todd 1 I apologize for the delay in response to your thread.If you have since resolved the original problem you were having, I would appreciate you letting us know.. If not please perform the following below so I can have a look at the current condition of your machine.Please download Deckard's System Scanner (DSS) and save to your Desktop.alternate download siteDSS will do the following:Create a new System Restore point in Windows XP and Vista.Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.Check some important areas of your system and produce a report for me to analyze.Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.You must be logged onto an account with administrator privileges when using.Close all applications and windows.Double-click on dss.exe to run it and follow the prompts.If your anti-virus or firewall complains, please allow this script to run as it is not
malicious.When the scan is complete, two text files will open in Notepad:main.txt <- this one will be maximizedextra.txt <- this one will be minimizedIf not, they both can be found in the C:\Deckard\System Scanner folder.Please copy (Ctrl+C) and paste (Ctrl+V) the contents of main.txt and extra.txt in your next reply.-- When running DSS, some fire... Read more

1 more replies
Relevance 29.11%

Ok. I have a slight dilemma here. I have a Dell computer that is very old. It is a Dell Optiplex GXI. manufactured in 1998. I am trying to get WMP installed and I'm unable to. I need to know what version needs to be installed. I'm using windows xp but dell does not support it due to the age of the comp. I tried to install WMP 10 but it won't allow me to do so. If someone could help me I would greatly appreciate it.

Answer:need some assistance here

Hi there...

Do you get any error messages when you try? if yes, what are they?

Also, have you tried updating to WMP10 via Windows Updates?

2 more replies
Relevance 29.11%

I'm a noob to this reading processes stuff and I need assistance, because my little brothers have seem to contracted the "Online Security Guide and Security Troubleshooting" disease and I have run the system scan on Hijackthis, but from there it is Greek to me... :confused The pop-ups are KILLING me!! Is there anybody out there that can tell me what to do next?

Please,
Heather

I have attached the logfile.... thanks so much in advance.:cry
 

Answer:Need assistance...please?

Welcome to Major Geeks!

Please uninstall HJT as it will be properly installed when you do the following:

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide
 

1 more replies
Relevance 29.11%
Question: need assistance

Hi, everyone

I am using windows 2000 server and recently i set an password for administrator and after few days when i press ctrl+alt+del while running windows the task manager option is greyed out it is like disabled. If anyone had encountered this problem please help me out in this regard.

Regards OMER.
 

Answer:need assistance

I wonder, are you logged on as administrator?
 

1 more replies
Relevance 29.11%

I'm trying to find If Possible (A free) program to help with Registry problems
and those pesty spywear problems
 

Answer:Looking for Assistance

There are a lot, just google for free registry cleanup program and you will find a lot
 

2 more replies
Relevance 29.11%

I just reinstalled my O/S Windows XP Pro and I need help with 2 things;

1. I have a yellow flag in the device manager on "Other devices" under "Multi Media Audio Controller". Where can I find one of those to install?

2. I don't see any other yellow flags, however the appearance of the screen seems a little different, not easy to look at, kind of annoying. I'm told that I need to install a video driver.

Can anyone help me with this in terms of what I need to do?

Thanks! Looking forward to your insights.

Ronhughes
 

Answer:Need a little assistance>>>>

do you have the make and model of the machine - then you can find out if the manufacturer has the drivers for audio and video on thier website

or we may be able to work out the hardware

one of these programs may tell us (however, some may need the driver installed to correctly identify )

http://www.belarc.com

online scan
http://www.d-a-l.com/hardware-scan.php

Great standalone program with pdf and email output
http://www.pxserver.com/WinAudit.htm

Does not require installation - can be run off a flash drive
http://www.gtopala.com/
 

1 more replies
Relevance 29.11%

I said in another post that recently i've been having alot of virus and infection problems on my comp. I thought I had it all taken care of, using various programs. But i seem to keep having problems.
When I firust start my comp, it's very slow. And sometimes it doesnt even turn on completely. It'll freeze. I have to restart it manually a number of times sometimes to get it going.
Occasionally, my taskbar will change color and seem to go into some kind of windows default mode for a moment, but then go back to the blue scheme I have.
My comp also no longer registers that I have a soundcard. I thought I fixed that last night when I installed a new driver.. I could hear my MP3's.. but then I went on youtube and had no sound.. and then I tried to listen to an MP3 again, and no sound. It said I had no sound device.
I had been getting Win32 errors ("Generic Host Process For Win32 Services"), but I have fixed those. Could they be related to my other problems?
I think I got rid of all my infections, I just need to fix the damage they did.. I think..

Her'es my HiJackThis log. Anyone have any input that could help me out?
Thank you in advance for your help.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:10:11 PM, on 1/14/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\w... Read more

More replies
Relevance 29.11%
Question: Assistance Please

Hey, so I have given up all hope of solving this problem myself. I have searched many forums for an answer and have tried most everything that I know.

Story:
About a year and a half ago my brother wanted a new computer. He video edits and stuff so I built him one cause it was cheaper than buying a pre-con.

Fatality nforce 570i Mobo
radeon hd2900
500gb HD WD
OCz 800 watt power
intel e6600 2.6Ghz
4Gb 2x2Gb OC 800mhz ram recently changed to Cosair
LiteOn DVD-RW w/ lightscribe

Problems started arising about a half year ago, mostly hangups and stalls on loading Dawn of War Dark Crusade. Eventually this spread to system hangups, and error messages aplenty. Long story short I had to reload windows and the system worked. I replaced all the windows registry files and had everything working. Problems again started arising when the computer started failing to boot into XP and would only do so with the mouse and all external HDs removed. Then it again came to the hangup stage where it currently is. The hangup occurs at all times mostly in loading processes and in safe mode!! When booting in safe mode rarely do we get past MUP. Then recently he got MOM.implementation as a error and BSOD with reference to rt2500.sys being less than or equal to. In response I told him to remove the linksys wifi card and uninstall the linksys drivers and try to get rid of the Catalyst Controller by ATI. After he did so he got a message about a Kernel error fault without a system sited for the cause and ju... Read more

Answer:Assistance Please

Surprisingly enough I know someone who had similar issues as to your having sean, ive just emailed him asking how he resolved it. So when i get a reply i'll post it up here.
 

1 more replies
Relevance 29.11%

Logfile of HijackThis v1.99.1
Scan saved at 20:56:06, on 20/06/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Platinum Internet Security\passrv.exe
C:\Program Files\Panda Software\Panda Platinum Internet Security\Firewall\PavFires.exe
C:\WINDOWS\system32\GSICON.EXE
C:\WINDOWS\system32\dslagent.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\Program Files\Panda Software\Panda Platinum Internet Security\APVXDWIN.EXE
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\Panda Platinum Internet Security\pavsrv51.exe
C:\Program Files\Panda Software\Panda Platinum Internet Security\psimsvc.exe
C:\Program Files\Panda Software\Panda Platinum Internet Security\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\Messenger\... Read more

Answer:Would like some Assistance

What seems to be the problem?

3 more replies
Relevance 29.11%
Question: I need assistance

Hello people, first time using this forum. I know almost nothing in usage of a couple of applications. I need to know how to write commands for Microsoft Visual C++ 2008.
 

Answer:I need assistance

I would ask a moderator to move this to the Software Development forum where you will likely get more response.

Regards,
Rollin
 

2 more replies
Relevance 29.11%

Hi guys,
Can any of you guys help me with finding a webbsite to tell me about a motherboard? The board is a pc100 systemboard build m741 lmrt. Ive looked and looked and now ive had to come to the pros.
thanks

Brad
 

Answer:Need some assistance Pls

6 more replies
Relevance 29.11%

Hey everyone. Today i got ravaged by a bunch of trojans out of the blue. I used Malwarebytes AM and Avast. I was infected with... a lot. I can attempt to provide more answers on what i was infected with if needed. The machine is running smoothly now but im not quite sure if im out of the forest yet. Would anyone more skilled than I please take a look at my Hijackthis log and give their opinion on my outlook? Any help is much appreciated. Thanks!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:08:05 PM, on 9/22/2010Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exeC:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exeC:\Program Files\Lenovo\HOTKEY\tpfnf6r.exeC:\Program Files\Lenovo\HOTKEY\TPONSCR.exeC:\Program Files\Lenovo\Zoom\TpScrex.exeC:\Program Files (x86)\RocketDock\RocketDock.exeC:\Program Files (x86)\Rainlendar2\Rainlendar2.exeC:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exeC:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exeC:\Program Files (x86)\Scrybe\scrybe.exeC:\Program Files (x86)\Winamp\winampa.exeC:\Program Files (x86)\Java\jre6\bin\jusched.exeC:\Program Files ... Read more

Answer:Assistance Please? :)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEmsconfigsafebootminimalactivexdrivers32netsvcs%SYSTEMDRIVE%\*.exe/md5st... Read more

2 more replies
Relevance 29.11%

Removed everything I could- but still cant get rid of :

ffisearch
edmound
isearch.xpi
mfiltis.dll
msdbhk.dll
sysupd.dll

All of which AVG has deemed viruses.
I have ran adaware/spybot/spyblaster/shut of system restore/deleted all temp
internet files/cookies/ and deleted what I thought necessary out of remove
programs in control panel (this is a friends computer).

From a total of 300+ viruses I am down to the (6) listed above.

Any help would be appreciated.

Andy (933mhs/Win XP upgrade (over ME)/384 RAM/SP2)

====================================================================
Log was analyzed using KRC HijackThis Analyzer - Updated on 4/1/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~... Read more

Answer:Assistance PLEASE!!!!!!

Hello, and welcome to TSF!

Quite a lot of infection, which will take some time to clear up.


Download, unzip to your desktop CWShredder and run it, then:

1. Click "Check For Update"

(If an update isn't available, skip to step #4.)

2. Click "Click here to Download the upate".
3. When the new version has been downloaded, click "Save".
4. Click "Fix ->"


===============

Let's look for, and delete, any program segments(prefetches) that might be present, and are associated with the 'problems' we're trying to remove from this system. To do this, let's:

1) Click "Start | Search", then search for each of these program's base name(s), in all files and folders:

srcmg32.exe*

2) Then if any are found in the 'prefetch' folder, delete them.

Look closely, since the 'base' name will have a bunch of random numbers and letters attached to it.

===============

Go to Add/Remove programs and remove(uninstall) the following, if present:

Desktop Search
WinTools

The above could appear anywhere within the entry. Be careful not to remove any personal or system software.

===============

Download LSPFix and unzip to your desktop, then run it. Now, we need to:

1. check(tick) "I know what i'm doing".
2. click on (highlight) each occurance of the following, on... Read more

6 more replies
Relevance 29.11%
Question: Need Assistance

Hello again....my old laptop was stolen and I recently acquired a dell inspiron 9200...Of late Ive been having shutdown problems and when Im on the internet something flashes across the bottom on my desktop toolbar to fast for me to see it...any assistance is appreciated. I ran ad-aware, spybot s&d, cwshredder and ran a complete virus scan...Here is my log:

Log was analyzed using KRC HijackThis Analyzer - Updated on 4/1/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\mcafee.com\mps\mscifapp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll
O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com... Read more

Answer:Need Assistance

Hello playa759,

Please print out or copy this page to Notepad since you will not have any of browsers open while you are fixing this.. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. Again, you should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that 'Display the contents of system folders' is checked. If you have Windows XP, the search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that 'Search system folders', 'Search hidden files and folders', and 'Search subfolders' are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Download Spybot 1.3 from this site Spybot 1.3. Install the program, update the definitions file and run a scan. Fix all the entries, which are indicated in RED.

Please download Adaware SE and install it if you don't have it already. Make sure it's the newest v... Read more

3 more replies
Relevance 29.11%
Question: Assistance

Would anyone know if its safe to delete the files in the Malwarebytes list?
Also the trojan there is the one detected by Eset that was running in memory but Eset failed to clean it.

Still beats me how the hell I ended up with that collection on the host. Last time I scanned was before installing Avast.

Also, anyone know where I could get a sample of the Worm and perhaps the others listed by Malwarebytes?

Thanks


[attachment=1298][attachment=1299]
 

Answer:Assistance

It is indeed safe to delete the files in mbam's list (quarantine) Have you run a scan with anything else?
 

6 more replies
Relevance 29.11%
Question: HJT log assistance

Here's my HJT log. Prior to obtaining log, I first ran the following in SAFE MODE: CWS, Spybot S&D, AD-Aware, MS Antispy, WebRoot SpySweep... and then HJT.
Here's the log:

Logfile of HijackThis v1.99.0
Scan saved at 10:17:12 PM, on 3/23/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\OLYMPUS\DeviceDetector\DM1Service.exe
C:\WINDOWS\System32\GEARSEC.EXE
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\Program Files\PurgeIE\PurgeIE_Service.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\program files\umsd\umsd.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\OLYMPUS\DeviceDetector\DevDtct2.exe
C:\Palm\HOTSYNC.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\... Read more

Answer:HJT log assistance

Hi Todd.

Did you run this scan in Safe Mode???

If so, please redo another scan in Normal Mode. Save the log file and run KRC HijackThis Analyzer in the same folder to get the result.txt log. Just post the contents of the result.txt file in the forum.

5 more replies
Relevance 29.11%
Question: Assistance please

ComputerWindows Vista Home PremiumService Pack 1Manufacturer: Hewlett PackardCompaq Presario f700 Notebook PC2.00 GB32 BITOk, so I encountered a problem today when I was attempting to take a screenshot with snag-it editor.After taking the screenshot, when I went to my desktop, I saw the picture file icon would not load and then Windows Explorer would restart.Windows Explorer would keep crashing until I took the new picture file & moved it to the recycle bin and deleted it.Then I restarted my comp to see if that would rectify the problem - it did not.I tried saving a image from the internet - same thing. Windows Explorer keeps crashing until the newly saved pic is deleted. All other picture files on my comp prior to today work fine - just new ones crash.Anyone know how to fix this or what problem I have?Also this may correlate to the problem but it popped up like a week b4 this problem happened"nvsvc.dll is not a valid Win32 application"

Answer:Assistance please

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the ... Read more

2 more replies
Relevance 29.11%
Question: hd assistance

Okay, I got a win2k harddrive here. When I load it into a system that I know is working, I get to the windows splash screen and then get a stop: 0x0000006F (0xc0000102, remaining string are all zero's) BSOD. After the error, it states taht I can boot into dos and run chkdsk /f. Okay, no worries there. I boot into what I think is safe mode, but the only 2 optoins are win2k and command. Boot into command, get the c prompt, type in chkdsk /f, and get the 'chkdsk is not a valid DOS command'. Hmmm. This has me puzzled, to say the least. I can hit dir and get a response. I can hit some of the directories, such as prime, but not windows or programs. I can't seem to run chkdsk or scndsk or any other executable file.

Ideas?

tia,

v
 

Answer:hd assistance

11 more replies
Relevance 29.11%
Question: Hi need assistance

I purchased my acer laptop 6 months ago, acer aspire E 14, Then performance get very slow, I decided to restore it to factory settings, now it is not capable of burning a blueray disc. What shall I do?

Answer:Hi need assistance

dominicrosalyn,
 
What specific model are you having an issue with so we can help narrow an answer down for you?

3 more replies
Relevance 29.11%
Question: need assistance

Hello Everyone:  Greetings from Cape Cod! I bought my sister an Acer Aspire E Laptop E11-731-4669, 17.3" HD Laptop and the password I put in for her doesn't seem to work. Can someone help me figure out how to have her start over and put in a password? Thanks for your help. Lucy

Answer:need assistance

Maybe you had caps on when you entered the password.You can try to factory restore it by, as soon as you start, hold down ALT and start tapping F10. I don't know if it will ask for the password. If you can't remember the password and restore won't work, you will probably have to get recovery disks from Acer and buy a new Hard drive.

1 more replies
Relevance 29.11%
Question: Assistance

Does any one have knowledge using HDM PRO. especially when it comes to creating an image file?
 

Answer:Assistance

What is HDM PRO? Can you provide the url to the product page?
 

2 more replies
Relevance 29.11%

having probs galore!! have a look at the HJT i just ran...help!!!! PLEASE!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:16:47 AM, on 12/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
E:\Program Files\POL\POL.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\DOCUME~1\Natalie\LOCALS~1\Temp\IXP009.TMP\Setup_ver1.1595.0.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
E:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$ALAMODE\Binn\sqlservr.exe
C:\WINDOWS\System32\NMSSvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System3... Read more

Answer:assistance please...thanks!!!!!!!

16 more replies
Relevance 29.11%
Question: need assistance

i cant watch videos anymore for some reason my computer acted up i guess i fixed it but now i cant get the flash player to install on my computer
 

Answer:need assistance

6 more replies
Relevance 29.11%

i was tricked and now have a trojan. i've tried everything (avg, spybot, windows live, adawre) and nothing can get rid of it. here's the hijack file- if anyone see's anyting or has any adive it will be much appreciated. thanksLogfile of Trend Micro HijackThis v2.0.2Scan saved at 11:19:57 AM, on 11/1/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\AVG\AVG8\avgwdsvc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeC:\PROGRA~1\AVG\AVG8\avgrsx.exeC:\PROGRA~1\AVG\AVG8\avgnsx.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless&#... Read more

Answer:need assistance please

Hello,We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up.My name is Syler and I will be helping you to solve your Malware issues. If you have since resolved your issues I would appreciate if youwould let me no so I can close this topic, if you still need help please let me no what issues you are still having, in your next reply.Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)Then please post back here with the following: log.txt info.txtThanks

2 more replies
Relevance 29.11%
Question: Assistance, please

Hello, recently a tech guy told me that I had a virus on my comp, and I was wanting to know if I could use hijackthis to detect it. I've gone through the registry looking for this thing, but couldn't find it. I was wanting to know if he's jerking me around. If one of you guys would take a look it would be much appreciated.

Logfile of HijackThis v1.99.1
Scan saved at 1:56:16 PM, on 6/20/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\r_server.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\Gris... Read more

Answer:Assistance, please

Hi and welcome to TSF.

Your log is clean. Are you having any problems at all?

3 more replies
Relevance 29.11%
Question: Need assistance!

My WoW account was hacked early this morning, I ran a virus scan via webroot. Nothing was shown. Please check my hijackthis log to see if I missed anything. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:43:40 PM, on 12/24/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Creative\Shared Files\CTAudSvc.exeC:\WINDOWS\Explorer.EXEC:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXEC:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exeC:\Program Files\Creative\Shared Files\Module Loader\DLLML.exeC:\WINDOWS\system32\CTHELPER.EXEC:\WINDOWS\system32\CTXFIHLP.EXEC:\PROGRA~1\AVG\AVG8\avgtray.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\WINDOWS\SYSTEM32\CTXFISPI.EXEC:\Progr... Read more

Answer:Need assistance!

Hello,My name is Syler and I will be helping you to solve your Malware issues. If you have since resolved your issues I would appreciate if youwould let me no so I can close this topic, if you still need help please let me no what issues you are still having, in your next reply.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up.Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)Please download GMER from one of the following locations, and save it to your desktop:Main Mirror
This version will download a randomly named file (Recommended)Zip Mirror
This version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Disconnect from the Internet and close all running programs, as this process may crash your computer.Temporarily disable any real-time active protection so your security program drivers will not conflict with gmer's driver.Double click on Gmer to run it.Allow the gmer.sys driver to load if asked.You may see a rootkit warning window, If you do, click No.Untick the following boxes on the right side of the Gmer screen.
... Read more

2 more replies
Relevance 29.11%

Hello. A few days ago while surfing the internet i saw that i wasnt able to hear any audio on any sites such as youtube, myspace, etc.. However i am getting sound from windows media player.When i tried clicking on internet options something kept coming up saying that it was restricted from letting me in So i ran a search and destroy and it found a whole lot of problems, some of which it couldnt fix. I also ran this virus softwar called avast. It keeps telling me i have a trojan virus thats effecting my memory but its not destroying it. Also ever since i did the search n destroy and ran the avast thing my computer is just goin very slow as iff the viruses are taking over everything.My computer keeps freezing and now its like sometimes im getting volume from the internet and sometimes im not. Im confused :-( . Could you be of assistance? Thanks in advance!
 

More replies
Relevance 29.11%
Question: needs assistance

my computer would't start after i tried to install a router, it became very slow and after two days it went black screen when switched on. after a while windows comes on starts to try fixing the problem but after a scan it writes indows can not fix this problem. can anyone help or direct me as to how to set it to factor default
 

Answer:needs assistance

Ok, I can try to help you but I am afraid I am having trouble understanding what exactly is wrong. From what I have gathered so far is

1.Your computer was going real slow and after two days of it going slow your computer went to a black screen.
2.After a while windows comes on saying "trying to fix problem" but after the computer is done scanning for a solution it returns the message "windows can not fix problem"

In no way trying to sound like a jerk just having trouble understanding how you wrote it I'm sorry lol. You also mentioned something about "installing" a router.
 

1 more replies
Relevance 29.11%
Question: Wi-Fi Assistance

Hi everyone.I've got an HP pavilion desktop using XP and have used it for the past coupple of years connected to my BT homehub using an ethernet cable.I now want to move the Hub somewhere else and so I've got a wireless card for the PC - Broadcom I think. Now I've loaded the drivers and stuff that came with it, but where do I find the utility that finds and selects available WiFi networks. I've got this on the laptop and it works great, but can't find it on the desktop. Is it a download??ThanksJohn

Answer:Wi-Fi Assistance

When I look at Hardware under system details in the control panel it shows a huge Question mark against this card, so it may not have installed propoerly either.HELP !!!

3 more replies
Relevance 29.11%
Question: Assistance?

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Symantec\Ghost\ngserver.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
D:\Programs\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
D:\Symantec\Ghost\bin\rteng7.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\gmlinek.ANC\Desktop\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Device... Read more

Answer:Assistance?

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted.

You have posted a an incomplete HijackThis log. Plese ensure that all your HJT logs have the top header.

Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding. Please ensure that there aren't any any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.


* * * *


Please disable Webroot SpySweeper, as it hinders the removal of some entries. You can re-enable it after you're clean.
To disable Webroot SpySweeper:Go to the Options>Program Options
Uncheck Load at Windows Startup
Click Shields & uncheck all items there
Uncheck Home page shield.
Automaticly restore default without notification

* * * * * * ADDITIONAL DOWNLOADS * * * * * * * * * * * * * *


Download & install CleanUp.exe (not recommended for WinXP64)

Download and install Ewido Security SuiteWhen installing, under "Additional Options",uncheck - Install background guard

Have Ewido update itself & then exit the program.
If you are having problems with the updater, you can use this link to manually update Ewido

Please download & Install - FixWareout.exe

When you reach the final page of the installation process, make sure... Read more

1 more replies
Relevance 29.11%
Question: Assistance

Good day,
Everytime I plan to make changes to my pc a user control dialog box appears that says please enter admin password and click yes to continue but the dialog box is locked to the "No" option and I cant do many things, any one with help please be so kind to assist in this regard.

Thank you very much in advance
 

Answer:Assistance

Hi qwerty123456, and welcome to TSG.

For starters, are you entering a known to be valid admin password?
 

1 more replies
Relevance 29.11%

Good morning,

I have SpySweeper on my system and have been fighting a losing battle against Win32 Driver & smsc.exe! Can you tell what I need to do to rid my system of these major inconviences once and for all?

Here is my HiJackThis filelog:

Logfile of HijackThis v1.98.2
Scan saved at 8:02:54 PM, on 10/27/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\csrss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\System32\CTsvcCDA.exe
f:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
F:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
f:\PROGRA~1\mcafee.com\vso\mcshield.exe
F:\WINDOWS\Explorer.EXE
F:\PROGRA~1\mcafee.com\agent\mcregwiz.exe
F:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
F:\PROGRA~1\mcafee.com\agent\mcagent.exe
F:\PROGRA~1\mcafee.com\agent\McUpdate.exe
F:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
f:\progra~1\mcafee.com\vso\mcvsescn.exe
F:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
F:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
F:\WINDOWS\System32\wuauclt.exe
F:\WINDOWS\System32\wuauclt.exe
F:\WINDOWS\System32\svchost.exe
F:\hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,S... Read more

Answer:HJT LOG - Assistance Please

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - F:\WINDOWS\System32\ms.exe
O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - F:\WINDOWS\System32\ms.exe

Besides those, there's nothing else that looks wrong here. What is the exact error message you are getting?

13 more replies
Relevance 29.11%

Hi, I have been having a lot of trouble over the last year maintaining my privacy and have actually been getting illegaly harassed and have been losing business over the issue. I know who my adversary is and unfortunately I am about 30 million dollars poorer the him which puts me at a HUGE disadvantage. Anyway, in my search for what to do about this I have discovered that I need to start documenting IP addresses from when harrassing ads or emails come through so I have some evidence to build a case. Also, I have begun to explore the world of networking and email encryption and using a whole different OS such as tails from tor. I am really having a serious problem with this individual and with out some real evidence I am not getting a response from law enforcement so I am trying to figure out how to work online (which is vital for me) without being tracked and subsequently harassed by this person. I recently downloaded tor and have now put tor browser bundle on a flash drive so I can hopefully browse with more confidence (however it sounds like I may still be getting hit by the ManintheMiddle attack even when using tor). I have researched and found that this may be a safer way to browse but not necessarily to conduct business. Then I ran into some info on tails and I tried to download it and use it and I was unsuccessful (I am not fully clear as to why) and in the process a program called PC cleaner or something was downloaded and it keeps popping up and trying to run a scan a... Read more

More replies
Relevance 29.11%

Dear all...I am a disabled student. My dell vista home premium is great that i've had since 2008. However, sometimes when i turn on my computer i hear what is similar to either a grinding or choke sound running in few second intervals coming from the cpu. As seconds & a minute or so passes it's quiet. I'm not sure if it could be the fan or the motor. Are there any suggestions from the experts out there? In addition, since most of my work is done on my computer, it seems to run either slow or it's just running as if the motor is working hard & loud...it was not like this last year & i maintain my computer by cleaning the disk drives and defraging it, etc. Any suggestions would be most appreciated. Thank you...ccf

Answer:Cpu assistance/help

Originally Posted by CFLORES0552


Dear all...I am a disabled student. My dell vista home premium is great that i've had since 2008. However, sometimes when i turn on my computer i hear what is similar to either a grinding or choke sound running in few second intervals coming from the cpu. As seconds & a minute or so passes it's quiet. I'm not sure if it could be the fan or the motor. Are there any suggestions from the experts out there? In addition, since most of my work is done on my computer, it seems to run either slow or it's just running as if the motor is working hard & loud...it was not like this last year & i maintain my computer by cleaning the disk drives and defraging it, etc. Any suggestions would be most appreciated. Thank you...ccf



Sounds to me like the bearings are going in the CPU fan, or it may just be clogged up with dust, if you can, is it possible to take your computer to a PC shop and ask them to blow out the dust with compressed air? you could do this yourself but it does mean removing the side cover and blowing air from a compressed air can directly at your processor fan.

5 more replies
Relevance 29.11%

I had win200 and winXP installed on PC and i wanted to remove the win200 so again i installed winXP and now i have 2 winXP installed on my PC. How i can remove on of these winXP. When i reboot my system a menu appear with the both winXP options.Thanks

Answer:i need your assistance

http://support.microsoft.com/kb/q308233/http://support.microsoft.com/kb/q303661/  or maybe disk management may do it....

1 more replies
Relevance 29.11%

Greetings.

I followed all the steps on the "Read and Run Me First..." Stickie at least three times to try to completely clean my PC but still getting a rediculous amount of pop-up ads.

Also, I can't seem to delete guard.tmp - which bitdefender identifies as a malicious file.

Any help will be appreciated. my Hijackthis and Bit Defender logs arre attached.
 

Answer:Still in need of Assistance

Welcome to MGs!

You have a Look 2 Me infection and some other problems too. Let's take care of Look 2 Me and a few others by running the steps in the below link. Make sure you attach the spysweeper.txt log when finished.

Running Spy Sweeper

Also please read step 7 of the READ & RUN ME again and get HijackThis install properly.
 

16 more replies
Relevance 29.11%

Hello,
I have followed the Read and Run this first steps twice over but still have a problem.

The task bar on the bottom right hand side of my screen has a red bubble with an exclamation mark in it which keeps saying ' Your computer is infected. click here to protect your computer.'

Additionally, I now have a new popup which says ' Notice- A change to the default user folders requires approval' Allow/ Block.

Any help to rectify these problems will be appreciated. Here is my HJT log.
Thanks
RC
 

Answer:In need of assistance

Please attach the two logs from the online scans.
 

14 more replies
Relevance 29.11%
Question: need assistance

i have all three PCI slot..is there any kind of 3d card compatible to it...

Answer:need assistance

What model is the motherboard?

4 more replies
Relevance 29.11%
Question: Need assistance

I'm hoping that I've correctly followed all the direction in order to get assistance with my mess. I've run the Spybot Search & Destroy (which I've been using in the past, and had set up to keep me "immunized" so I'm not sure how things got out of control). I downloaded the latest updates and ran it several times. I'd never heard of Ad-Aware before, but I downloaded it and used it, and it got rid of a lot of the ca-ca, but not all of it. So I downloaded Hijack and hopefully created a log.Just as additional info in case it's needed....I've been using Norton Internet Security and Anti-Virus. Part of it was supposedly corrupted and I couldn't update the dat files, so I uninstalled all the pieces and reinstalled it. It still seems to have problems, and somewhere in that process it seems that suddenly I was getting ads and junk popping up all over the place. Driving me nuts!!! Please let me know if any other info would help you to help me....and thank you so much for any assistance you can provide.Logfile of HijackThis v1.99.0Scan saved at 8:36:05 PM, on 2/8/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Pr... Read more

Answer:Need assistance

I need to get samples of some of your files. Please create a folder called c:\submit. Now copy the following files into that directory:c:\windows\system32\jah.exeC:\windows\system32\eliteaok32.exeTo copy the files simply navigate to the directory they are in and right click on them and then click on copy. Then paste these files into the c:\submit directory. Once the files are all copied I need you to zip the folder and rename submit.zip to yourmembername.zip (for example grinler.zip). If you are using XP or ME right-click on the folder and click on the Send To option and then send it to a compressed folder. You will now see a file called submit.zip. If you are using another version of Windows, please download a program called Winzip and zip it using that. Then go to http://www.bleepingcomputer.com/submit-malware.php fill in the required fields, and browse to the file. Then click on the Send File button.Please download registry lite from HereOnce it is installed, please double click on the icon that should now be on your desktop. If an icon is not there, then check under programs portion of the Start Menu.Once it is opened, copy and paste the below line, into the address field of Registrar Lite.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunAnd press enter. In the right section of the screen right click on each entry that contains the following words C:\Program Files\ISTsvc�... Read more

9 more replies
Relevance 29.11%
Question: Need assistance

So Im pretty sure I have a something affecting my computer negatively. I need help to figure out what I should do. :[
Im getting kind of hopeless.

Answer:Need assistance

What symptoms do you have?

1 more replies
Relevance 29.11%

Was playing the game spore & was asked if i wanted to download the newest patch. I said yes & then my computer froze up. I turned it off & back on & after I when it started back up, spyware guard & avg told me I had infections & i selected to have them removed. I restarted again & then spybot s&d was giving me probs. It kept asking me if I wanted to allow changes to certain registries (some added, some deleted). I kept saying deny change & it just keeps popping up.

I ctrl+alt+del & saw numerous processes running that shouldn't be (from rundll33.exe, iexplore.exe even though I never tried opening the internet, & wuauclt.exe). I ended all the processes & the spybot s&d requests keep coming.

I also have spywareguard popups telling me the following BHO has been added to my system:
{d5bf4552-94f1-42bd-f434-3604812c807d}
I keep selecting to remove the BHO but it just pops back up

I try running malwarebyte's anti-malware, but it won't start. Anyways, I disconnected that comp from the net & am on a different computer asking what you guys suggest I do??
Edit: I was running avg scan on it when a popup said the computer was about to restart (a 1 minute countdown began to run in the popup). The popup said this was due to the dcom process launcher unexpectedly closing.

Answer:Need some assistance

This is malware ,possibly the Lsass virus. Let's try to get malwarebyte's --MBam to run again.Some types of malware will disable MBAM and other security tools. If MBAM will not install, try renaming it. Right-click on the mbam-setup.exe file and change the .exe extension to .bat, .com, .pif, or .scr and then double-click on it to run.If after installation, MBAM will not run, open the Malwarebytes' Anti-Malware folder in Program Files, right-click on mbam.exe and change the .exe as noted above. Then double-click on it to run..***Another work around is by not using the mouse to install it, Just use the arrow keys, tab, and enter keys.Next run ATF:Please download ATF Cleaner by Atribune & save it to your desktop.Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox browser click Firefox at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser click Opera at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".Next run MBAM:Please download Malwarebytes Anti-Malware (v1.32) and save it to your desktop.alternate download li... Read more

10 more replies
Relevance 29.11%

Hi All,

Well somehow I got my network back 50% of the way. I swapped network cards between the 2 machines. Computer #2 had a flashing light, computer #1 had no lights on the card. I put the network card into a different slot on computer #1, and used the 3Com disc to install the drivers etc. Changed the phone cable to a piece of networking cable (phone cord in appearance) from a exbusiness network.

Computer #2 now has a solid and flashing light on the network card and can see, access and ping computer #1.

Computer #1 now has a logon box at startup but still can't access the network until I have been on the internet. For all I know it is another one of those AOHell problems .
Computer #1 can also ping itself and computer #2 with the proper results although Computer #1 still refuses to see or find computer #2.

Sure wish I knew exactly what change fixed (well, half fixed) things but I sure am happy now!!!!

Thanks again to all who tried to assist me.

Anne
 

More replies
Relevance 29.11%

Hi, i've been having trouble with spyware & a few trojans. I've run adaware SE, spybot S&D, Housecall, and AVG all coming up clean & all of them are current versions. I know how to use safe mode, show hidden files, & use system restore so you can skip any of those explanations. Symptoms: Many pop-ups when on internetComputer freezes when online gaming (Not computer, i've played these before with no troubles.)Here's my HJT log :Logfile of HijackThis v1.99.1Scan saved at 12:39:33 PM, on 3/20/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\RUNDLL32.EXEC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\WINDOWS\System32\CTSvcCDA.EXEC:\WINDOWS\System32\nvsvc32.exeC:\Program Files\Grisoft\AVG Free\avgcc.exeC:\HijackThis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.comR0 - HKLM\Software\Microsoft\Internet ... Read more

Answer:Some assistance please

Hi there, * Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:R3 - Default URLSearchHook is missingO2 - BHO: RsyncHlpr Class - {16B238D5-80DE-47CE-8F17-B3ECE2C2248D} - C:\WINDOWS\System32\rsyncmon.dllO2 - BHO: ohb - {22B720C7-5FA6-40A8-9F8F-8584BF669690} - C:\WINDOWS\System32\trgen.dllO2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~2\tools\iesdsg.dll (file missing)O2 - BHO: Xbrowse Class - {83DC91DB-7896-43E3-B34D-A7D043F16BB1} - C:\Documents and Settings\All Users\Application Data\RDSA\rdsa.dllO2 - BHO: ohb - {999A06FF-10EF-4A29-8640-69E99882C26B} - C:\WINDOWS\System32\rtneg2.dllO2 - BHO: (no name) - {AC109D01-32D6-4EB5-8300-D3C5EBAC7C83} - (no file)O9 - Extra button: (no name) - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)O16 - DPF: {68BCE50A-DC9B-4519-A118-6FDA19DB450D} (Info Class) - http://support.vugames.com/betasubmission/sysinfo/Si.cabO16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} (Sinstaller Class) - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cabO16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - http://akamai.downloadv3.com/binaries/IA/netslv32_EN_XP.cabO18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\... Read more

10 more replies
Relevance 29.11%

Hello,Recently I have been experiencing sudden freezes of my monitor. When it freezes, I can not move my mouse-cursor nor can I do anything. The only solution to force it back to work is rebooting. The thing is, I recently noticed I only had like 40MB free space on my Windows drive. I have freed up to 3,39GB free space. I reckoned that this was the cause of my monitor freezing. Am I correct? Is there anything else I could do to prevent this?___________I have 1024MB RAM, Ati Radeon X1650 Pro (256MB RAM). I don't know if this matters but I felt like putting this in my request for help.Thanks in advance,Trinox

Answer:In serious need of assistance

That could well be the cause of your freezing. Windows does not like it when such a small amount of free space is left. You were definitely on the limit. has the freezing stopped now?To prevent this,1. Uninstall programs you don't use.2. Download less.3. Look through your hard drive for stuff you don't need. Burn all those movies to optical media.4. Get a bigger hard drive. You have not said the size of your drive.5. Make a habit of knowing how much free space you have.Google for "free up disk space"

14 more replies
Relevance 29.11%
Question: Assistance Please!

OS Windows 7, 64 bit

It appears that the last round of Microsoft updates caused some errors? deletion? of an important file folder .... App Data\Local\Temp\7zS63E\Setup.\Setup\blocksysuser... on my Toshiba L750 laptop, I have seemingly corrected most of the problems, but I cannot reinstall all the software for my HP Photosmart Printer. System Restore proved to be not up to the task of repairing the problem, and running sfc \scannow did not detect any apparent errors?

Is there anything I can do to correct this problem, short of running my 5 rescue disks to reinstall everything?

Assistance would be greatly appreciated!

Answer:Assistance Please!

App Data\Local\Tempis just a folder fot temporary things!
What's not working now?

9 more replies
Relevance 29.11%

Hello. First time poster here. I apologize if this info has already been answered; I have not been able to find it. I am attempting to fix an issue with MSN running on a Vista Home Premium laptop. When the issue was presented to me, MSN would crash whenever a user would try to launch the program, ie; double click MSN, immediate "MSN has stopped working" window. I have been attempting to re-install MSN, but the error I am coming across now is that once the user login info is entered, MSN states that no internet connection can be detected, or that the MSN server may be down. I have my doubts that it is the latter.

I hope this is enough information. If it is not, please say so and I will attempt to recover whatever is needed to fully solve this problem.

Thank you for your time and info in advance!

Answer:Assistance with MSN

Welcome to the forum.

First, I need you to confirm that the laptop PC can connect to the Internet.

Once you have done that please provide as much other information as you can regarding how this is achieved.

i.e. Wireless or wire connected networking & are there any user restrictions applied to the laptop
(Business Vista or company user restrictions, etc. etc.)

OK?

1 more replies
Relevance 29.11%

iam using A4tech web cam there is no software required cam works fine on offline, mean work fine on taking pics but not works online on any website which have live chats plx help i wana use it live

Answer:Need web Cam assistance

Have a look through there websitehttp://www.a4tech.com/

1 more replies
Relevance 29.11%
Question: Need assistance.

Can someone get this out for me and let me know what you think of it.
 
https://www.virustotal.com/pl/file/d7aeba2b8ee95590d9f0bc039fe0f12e8b6b46acefb591d216744869bc63164c/analysis/

Answer:Need assistance.

Could be false positive. Please download SystemLook from one of the links below and save it to your Desktop.Download Mirror #1Download Mirror #264-bit users go HEREDouble-click SystemLook.exe to run it.Vista users:: Right click on SystemLook.exe, click Run As AdministratorCopy the content of the following box and paste it into the main textfield:
:filefind
RSUpdate.exeClick the Look button to start the scan.When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.Note: The log can also be found on your Desktop entitled SystemLook.txt

8 more replies
Relevance 29.11%

Error signature
AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: msctf.dll
ModVer: 5.1.2600.2180 Offset: 0003d0fb

what kind of info would be needed for proper trouble shooting

thank you for the help

Answer:IE assistance please

Hello and welcome to TSF

When you see the error is there a details button if so click it and paste the contents back into this thread.

4 more replies
Relevance 29.11%
Question: Assistance please?

Can anyone assist me with removal of a worm called "ronoper"? I found a way to rid of it from my registry, however, when I looked on my registry, it was not there. I know it is there, because my virus scan picks it up, but can not seem to completely rid of it. I am having quite the difficult time here and would really appreciate assistance.

I downloaded and used the program Hijack this, however, I dont' know what to delete or not, and didn't see a thread/forum on this subject.

Thank you.
 

Answer:Assistance please?

theyellowdart said:



Can anyone assist me with removal of a worm called "ronoper"? I found a way to rid of it from my registry, however, when I looked on my registry, it was not there. I know it is there, because my virus scan picks it up, but can not seem to completely rid of it. I am having quite the difficult time here and would really appreciate assistance.

I downloaded and used the program Hijack this, however, I dont' know what to delete or not, and didn't see a thread/forum on this subject.

Thank you.Click to expand...

HiJaak This is not for virus removal. Which OS are you running and what is the name of your virus scan program? You could try downloading and running Avast from here: http://www.majorgeeks.com/download1968.html

Checkout this info from Symantec: http://securityresponse.symantec.com/avcenter/venc/data/w32.ronoper.worm.html
 

9 more replies
Relevance 29.11%
Question: need assistance

hi.
having trouble getting into secure web sites with explorer after running a hijack this scan. any suggestions on how to fix the problem?
thanks.
 

More replies
Relevance 29.11%
Question: need assistance

I have an old computer---with Windows 98. I've read the tutorials and have followed your recommended scanning and cleaning instructions, including Hijack this, but can't fix the problem. My homepage keeps getting directed by Win-Eto and the address bar indicates "swapx..." or something to that effect. The scans that you have recommended identify the problems, but they don't fix it. The Win-eto homepage keeps reappearing as my homepage. Note that the last time I tried Hijack this, then ran explorer, I saw "about blank" in the address bar. That was the first time I saw that one.

I appreciate any suggestions anyone might have. Thanks.
 

Answer:need assistance

You should have run a search in this forum. Loads of these have been fixed already.

If you have followed ALL the steps in this Sticky thread < READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal > and you are still having a problem, you should read the tutorial in this Sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting.

Now post a HijackThis log file as an attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!

Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file. Place it in its own folder, for example C:\Program Files\HJT

Make sure you have HJT version 1.98.2 and follow the guidelines on where to install it and how to post a log as an attachment.

 

16 more replies
Relevance 29.11%
Question: JGH.EXE assistance

Hello, i'm jason i need help i read in topics that jgh.exe is a malicious virus but my TRENDmicro Titanium wont find it i don't know what else to do so i was wondering if anyone knows what i can do thats free and downloadable.. It lags my computer to all heck..
Now a Jgl.exe is comming up too...

Answer:JGH.EXE assistance

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be found here:C... Read more

14 more replies
Relevance 29.11%

I have been dealing with my computer for several weeks now.  And to say the least it is getting frustrating for me. My computer WinXP Home, is just 2 yrs old.  100 Gig HD, plenty of memory, etc.  (I'm at work right now) If anyone needs anymore details to help me solve this mystery I can find out when I go home for lunch and re-post.My computer re-starts constantly I've tried a few things myself, but to no avail.  I have ran Ad Aware and thought I was getting it cleaned up as it wasn't re-starting as often as it was for about a week, I ran the virus scan (Norton) and it came back clear.Well, now it seems it is re-starting after only a mere 5 minutes!  Everytime!  I ran Norton in Safe Mode, and it stopped very shortly after it began said there was an error of some sort and could not continue, that it couldn't scan my computer.  That I would need to go to the Norton website and check it out.  Well, at least I can't get online in safe mode! So, any suggestions, ideas troubleshooting, etc.  Thank You In AdvanceKelly

Answer:Need assistance, please...

Control Panel/System/Advanced/Settings (Startup & Recovery)/System Failure/Uncheck-Automatically Restart  Try it in safe mode...........have you adding any new hardware.......??maybe the inside/case needs a clean??dust/dirt .....has it been cleaned since you have owned it...

8 more replies
Relevance 29.11%

Thanks for all the help so far from bleeping computer. Your presence is an invaluable resource to the novice user and it is greatly appreciated. I have a problem with a lot of program files showing up without warning in program files and the subfolder common files. I have had problems with spyware and such, and an app called newdotnet that spybot cannot delete. also, a lot of the files that shouldn't be there cannot be deleted with errors "ACCESS DENIED..." or "...currently being used by another person or program...". I use Netscape more than IE, though it is not the default browser. If you need a second log with netscape as default, let me know.Please assist if you can. Thanks again.Logfile of HijackThis v1.98.2Scan saved at 11:08:34 PM, on 06/12/2004Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Executive Software\Diskeeper\DkService.exec:\PROGRA~1\mcafee.com\vso\mcvsrte.exeC:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINDO... Read more

Answer:HJT log, need assistance

Hi Download Ad-aware SE 1.05: hereInstall it. When you get the last screen, with the "Finish" button and 3 options, uncheck those three items.Open AdAware and click the "Check for updates now" link. Close AdAware. Don't use it yet.Download System Security Suite here:System Security Suite Download & Tutorial. Unzip it to your desktop.Install the program. Don't use it yet.Please print or copy these instructions because you are not able to access the Internet in SafeMode.Make sure you are set to show hidden files and folders: A. On the Tools menu in Windows Explorer, click Folder Options.B. Click the View tab.C. Under Hidden files and folders, click Show hidden files and folders.D. Uncheck Hide extensions for known filetypes and Hide protected operating system files.How to see hidden files in WindowsREBOOT into SafeMode by tapping F8 key repeatedly at bootup: Starting your computer in Safe modeRun HijackThis!, press Scan, and put a check mark next to all these:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blankR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)O4 - HKLM\..\Run: [sais] c:\program files\180solutions\sais.exeClose all other windows and browsers, and press t... Read more

5 more replies
Relevance 29.11%
Question: Need Assistance

Hi I had a virus and i downloaded Rkill and it worked then i did malware and it found 34 viruses and i got rid of them but now i can't get onto the internet also tried safe mode my computer is xp the message i got was an internal error occured :the request is not supported please contact microsoft product support service for further help unable to query host name please help thanks

Answer:Need Assistance

Please try this:Log on to your account (with the internet access problem).Open Internet Explorer > Tools > Internet Options > Connections > LAN settings.... and under "Proxy Server", remove the checkmark from the box beside "Use a proxy server ... " (if it is checked).Click "OK" > "OK".Does that fix the issue with your internet connection?--------------------Please post the Malwarebytes Anti-Malware logs: The MBAM log is automatically saved and can be viewed by clicking the Logs tab in MBAM. Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.Please post the logs and let us know how the system is running now.

8 more replies
Relevance 29.11%

Hello.

My pc is Dell Inspiron 1300 lap top.

My TV is Sony KD 32DX100U

The connection is VGA from pc to tv's s-video and yellow video input.

The pc monitor view displays on tv but is repeated three or four times depending on resolution settings or is flickering white lines. It is black and white.

The windows graphics card driver has been updated.

Refresh is 60hz.

Powerstrip has since been installed but the "Advanced Timing Options" is greyed out.

Can you assist?

Answer:PC to TV, Set up assistance please

You shouldn't need both yellow RCA and s-video cables plugged in, it will use either one or the other.

Seeing as it is standard definition, I think you should set the resolution to 1024x768 if it is a 4:3 TV, for widescreen I'd choose 1024 x 576, refresh rate(depending on region, I would choose 50hz for USA or 60hz for everywhere else

9 more replies
Relevance 29.11%

My PC is crashing (stucked) approximately evey 5-10 minutes. I have to press the resset button to operate it again.I cannot run Safe-Mode. When I am cliking on "Safe-Mode" then on Operating System "Windows XP Pro" it crashes (stucked)I cannot run completely an AV program (deep scan).I run NOD32 normal scan (not the deep one) - found nothing.Win Anti-spyware ran with no findingsWill try to run Ewido, A2 and/or Antivir if I can (if the OS will not crashes during scanning time)I noted that running time (before crash0 is longer when I am using FirefoxAttached my HJT logPlease your assistanceLogfile of HijackThis v1.99.1Scan saved at 22:17:55, on 09/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Sygate\SPF\smc.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\AVPersonal\AVGUARD.EXEC:\Program Files\AVPersonal\AVWUPSRV.EXEC:\Pr... Read more

Answer:HJT Log- Please your assistance

I would like to add that from time to time, before "crash" I got an information window:
"Generic Host Process for Win32 Services has encountered a problem and need to close" than I have 60 to save my jobs.

4 more replies
Relevance 29.11%

Hi guys, would really like some help with this. Not sure how to go about the rest of it and unsure as to what to delete etc. So please any assisstance would be greatly appreciated.Okay here's the log file scan:Logfile of HijackThis v1.99.1Scan saved at 4:23:16 PM, on 7/15/2005Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\Program Files\AVPersonal\AVWUPSRV.EXEC:\WINDOWS\System32\tcpsvcs.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\EZAUDIO.EXEC:\Program Files\Messenger\msmsgs.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXEC:\Program Files\Yahoo!\Messenger\ymsgr_tray.exeC:\WINDOWS\System32\wuauclt.exeC:\Program Files\Internet Explorer\iexplore.exeC:\HJT\HijackThis\Hijack... Read more

Answer:Please we need some assistance

Download smitRem.zip and save the file to your desktop.Right click on the file and extract it to it's own folder on the desktop.Place a shortcut to Panda ActiveScan on your desktop.Please download the trial version of Ewido Security Suite here:http://www.ewido.net/en/download/Please read Ewido Setup InstructionsInstall it, and update the definitions to the newest files. Do NOT run a scan yet.If you have not already installed Ad-Aware SE 1.06, follow these download and setup instructions, otherwise, check for updates:Ad-Aware SE SetupDon't run it yet!Next, please reboot your computer in SafeMode by doing the following:Restart your computerAfter hearing your computer beep once during startup, but before the Windows icon appears, press F8.Instead of Windows loading as normal, a menu should appearSelect the first option, to run Windows in Safe Mode.Now scan with HJT and place a checkmark next to each of the following items:===================================================O4 - HKLM\..\Run: [PSGuard] C:\Program Files\PSGuard\PSGuard.exe===================================================Open the smitRem folder, then double click the RunThis.bat file to start the tool. Follow the prompts on screen.Wait for the tool to complete and disk cleanup to finish.The tool will create a log named smitfiles.txt in the root of your drive, eg; Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in ... Read more

1 more replies
Relevance 29.11%
Question: Assistance please

Attached are the necessary logs. Could not run the Panda online scan in safe mode or normal mode.

Thanks very much.
 

Answer:Assistance please

What about the BitDefender log and also you did not attach the log from CounterSpy. Both are requested in the READ ME.

It would also be nice if you describe what problems you are having. Think of it this way. You bring your car to a mechanic and ask him to fix it but you never tell him what needs fixing. Now compound it by the fact that I cannot even see your car (your PC) .

Even without the above logs and information, I will say that you need to run the below procedure and attach the requested log from it:

Look2Me VX2 Removal
 

1 more replies
Relevance 29.11%
Question: Assistance please

Hello,

I think I may have 'contracted' a virus. It seems to be serious as it has already disabled the task manager and my computer seems to be running a bit slower than usual. The computer I use is almost totally custom built and uses Windows XP. I made the poor choice of attempting to eliminate the virus/trojan or what ever with out advice from someone who knows more than I do... DDS log :


DDS (Version 1.1.0) - NTFSx86
Run by Jacob Bush at 14:36:29.57 on Sat 12/27/2008
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1382 [GMT -6:00]

AV: AVG 7.5.552 *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\a-squared Free\a2service.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Viewpoint\Common\V... Read more

Answer:Assistance please

You are strongly advised to do the following immediately:

1. Disconnect infected computer from the internet and from any networked computers until the computer can be cleaned.

2. Call all of your banks, credit card companies, financial institutions and inform them that you may be a victim of identity theft and to put a watch on your accounts or change all your account numbers.

3. From a clean computer, change *all* your online passwords -- for ISP login, email, for banks, financial accounts, PayPal, eBay, online companies, any online forums or groups you belong to.

Do NOT change passwords or do any transactions while using the infected computer because the attacker will get the new passords and transaction information.
------------------

Please visit this webpage for download links, and instructions for running combofix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Please include the C:\ComboFix.txt in your next reply for further review.

2 more replies
Relevance 29.11%

I asked this ? in another forum and noboday is responding.  So I found this site.  Okay, I don't know if I posted this ? in the right thread, but I'm going to ask anyway. The past few weeks I have been experiencing some problems with my PC. I do have Vista btw. Certain websites do not load for me like Target for an example and my outlook express is all whacked out. Just today whenever I'm on my outlook express checking my emails, I have to reconnect to the internet. I have DSL. I have the Norton Internet security installed also. I have cleaned out the cookies and use the ccleaner. I bummed too because I can't use the selling features on ebay!! It won't let me type a description or load pics. I think alot of the problems have to do with my son playing that computer game called Runescape and I found out today that he was looking at alot of porn. What do you think I should do??? Oh and I can't do a system restore because it says ERROR. I can't even sign into my yahoo mail.

Answer:Need Some Assistance Please : )

Did you try Firefox as cross reference?

5 more replies
Relevance 29.11%

OK - I posted this problem I am having and I received no responses. I thought perhaps I had not explained well enough so I am attempting a second post in hopes of assistance!As I had previously mentioned, in normal browsing, I am getting blocked from entering sites I have had access to before (non-porn!). I will also see this "message" in odd places, such as in place of ad banners within my email account. I was attemtping to access a friend's MySpace page and was blocked access when I have had access in the recent past. Now... I do not have children in my home so blocking any site would not be an issue. Also, I have tried to adjust my internet security settings to no avail. There is nothing that I can do to eliminate this block. If this is my computer and I am the Administrator, I wouldn't have blocked my own usage. I guess I am asking if there is a virus or malware out there that would be blocking me from free browsing? Here is an example of the message: ACCESS HAS BEEN DENIED: Access to the page: http://(etc... this can vary but this was a MySpace page) has been denied for the following reason: Weighted phrase limit exceeded. You are seeing this error because what you attempted to access apprears to contain; or is labeled as containing, material that hs been deemed inappropriate.I purposely attempted to access a site that I knew would be blocked and anot... Read more

Answer:Just Need A Little Assistance, Please

Hi Mo_reen,Have you checked your Firewall settings?Read up on the Guide to what the DansGuardian Blocking Messages really mean. Scan your computer with Ad-Aware and Spybot - Search and DestroyDownload Ad-aware SE and update it (the Globe icon, then Connect). Then click on Perform Full System Scan. Uncheck Search for negligible risk entries and click on Next. Eliminate all that Ad-aware finds. Download Ad-Aware SE Download SpyBot - Search and Destroy and install the program. After installing the program, click on Search for Updates and download what the program finds. Click on Search & Destroy and on Check for problems. Delete what it finds.Download Spybot - Search and Destroy

1 more replies
Relevance 29.11%

Hello all,

I have a problem on my computer. It seems like everytime I restart my computer or reboot it it would freeze on me after a few seconds. My Avast! Antivirus detects a.bat and sometimes a number.bat in C:/. I have 3 Hard Drives.

D:/ (Used)
C:/ (System Files or what not)
I:/ (Back Up Drive for any material)

Whenever it freezes, the taskbar would not work and the hourglass sign would display on my mouse. I cannot click anything. I would have to press F8 before accessing the login of my computer and continue to the login by selecting "Last Known Good Configuration" or something like that because the computer wouldn't act weird. It still does appear on my antivirus that a.bat or a number.bat has been detected. Can anybody help? I have already downloaded a HJT installer and continued by saving a log. Here it is below:


Quote:




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:53:09 PM, on 6/6/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\ALCXMNTR.EXE
D:\Program Files\Java\jre1.6.0_05\bin\jusched... Read more

Answer:Need Assistance Please.

Welcome to TSF....

Posting the HJT log file here actually is in the wrong portion of the forum It really should be posted in the HJT Help forum but only after going thru a slight procedure here that will follow. Please do this procedure and then post if necessary.

To get Expert Help with malware removal:

I recommend that you read this article… ( "Simply, click on the links to be re-directed.)

"Having problems with spyware and pop-ups? - First Steps";
http://www.techsupportforum.com/secu...oval-help.html

Please follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the
HiJackThis Log Help Forum.
http://www.techsupportforum.com/secu...this-log-help/

Please ensure that you create a new thread in the HiJackThis Log Help Forum;
not back here in this one.

When carrying out The 5 Steps,
http://www.techsupportforum.com/secu...oval-help.html

if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to HiJackThis Log Help Forum.
http://www.techsupportforum.com/secu...this-log-help/

where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can. .

1 more replies
Relevance 29.11%

Heres the prob:any audio playback on my media players skips. i have also noticed that my computer is taking longer to start or run a program. i have pc-cillen, updated. i have done a disk clean up and also a defrag. i ran a scan disk it locked up the first time, then i ran it a second time and it didnt find any probs. this computer just started this all of a sudden. havent installed any new programs. under task manager all of my processes are almost microsoft based. but a couple of them fluctuate at 99%. maybe thats normal? i have a hijackthis log file, but im not sure where to post it. the computer is an HP Pavilion dv8245nr AMD turion 64. 1.79ghz, 1.0 gb of ram running windows xp 2nd edition. anyone have a clue what i might need to do? thanks,Gary(Moderator edit: added Topic Description and moved to more appropriate forum. jgweed)

Answer:Need A Little Assistance.

First, take a look in Event Viewer. Your concern will be errors, not warnings. All 3 tabs.What is the Event Viewer, and Should I Care - Ask Leo! - http://ask-leo.com/what_is_the_event_viewe...uld_i_care.html When chkdsk locks up, it's usually a sign of a hard drive problem, in my experience.Louis

3 more replies
Relevance 29.11%
Question: aim assistance

hey does anyone know how to put a saved wav file into your aim outgoing that other buddies can hear when it when you send messages not just you on your computer

Answer:aim assistance

I do not believe you can do anything that would affect how their computer reacts. They would have to place it on their machine.

1 more replies
Relevance 29.11%

I had Win XP Pro on my computer, and due to some unforseen mistakes on my part, i had to reinstall Win XP Pro. Now my computer is telling me that I have no drivers and I am unable to procure an internet connection. This is driving me absolutely insane and I don't know how to fix it. Any help would be great!!

Answer:Just need a little assistance.

Hi this is probably the case, that when you reformatted and installed XP, the drivers were also wiped off.

You will need to go into device manager (Right click my computer > properties > hardware tab > device manager).

Where you see the yellow question/exclamation marks is where the driver is missing. You will need to reinstall the drivers, the best way to do this is to use the motherboard disk you had with your computer. Failing this, you will need to find the manufacturer of each of the devices and visit the support section of their website.

If you need assistance with this, do not hesitate to ask.

Reguards,

Scotty.

1 more replies
Relevance 29.11%

I have a malware problem with pop ups,etc. I hope I did the Read and Run thing correctly. i've attached the results.
 

Answer:I need assistance please

other attachments
 

14 more replies
Relevance 29.11%
Question: Assistance Please

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:51:03 AM, on 10/1/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\Intel\Wi... Read more

Answer:Assistance Please

Hi, I posted this earlier today & haven't received any responses yet. I'm not impatient,so please don't take this post the wrong way...I just noticed that a whole bunch of other posts had been made after mine, and most of them received responses. I was just wondering if I did something wrong??

Please advise. Thank you,

April

3 more replies
Relevance 29.11%
Question: need assistance

My computer is new (only about 1 year old) and I havent had any problems with it until recently. Its running extremely and unusually slow, and whenever I run any programs at all the fan inside the computer turns on and is extremely loud, and wont shut off until I restart my computer (so loud and annoying that I have to restart my computer just to hear myself think). I have never had this problem before, and it is not a hardware problem. The only thing I can think of is that a lot of malware or viruses on my computer are eating up all of the virtual memory and causing my computer to overwork itself. I have run all of the 'read me and do me first' programs, and it hasnt seemed to have helped a lot. Ive noticed that in my task manager processes there are a lot of things running with names that I do not recognize, they could be normal programs but I really just dont know. I have attached the hijackthis log that I have from the scan that I did. Any help would be really appreciated.
 

Answer:need assistance

Since you complaint is a slow PC which does not necessarily mean malware, first please goto Add/Remove programs and uninstall all software that you do not use. The largest factor to your performance may just be Symantec.

Is your copy of CounterSpy a paid version or a free trial version. If free, when was it installed?

To determine if you are having malware problems, you must complete the below. HJT logs are insufficient reports!

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, renaming, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
Make sure you check version numbers and get all updates.
Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
Downloading, Installing, and Running HijackThis​Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.​
When you return to make your next post, make sure... Read more

1 more replies