Computer Support Forum

Seems Worse than 6 months ago

Question: Seems Worse than 6 months ago

About 6 months ago I was infected w Trojan/Vundo and the BC gang helped me get back on my feet. I ran ComboFix, use Ad-Aware, AVG, Malwarebytes, Spybot, Spyware Blaster.

I enjoyed 6 worry-free months and now I'm stuck again. Windows will not complete loading--freezes. I tried to use my windows recovery in safe mode and clicking "next" prompts no further action after I've chosen a previous date. I have done a HJT log in safe mode only.

Symptoms when windows was working still:

Google results were links to other ad sites.
IE would not allow me to go to BC.com and other helpful forums but would allow me to go to youtube, google, yahoo, etc.
Updating Ad-Aware, Spybot, and AVG was not allowed.
Malwarebytes would no longer load (would show to load in the Task Manager but nothing further.)

So I feel frustrated because I can't use any malware/virus programs to clean. And I can't load windows in anything but safe mode.

Any advice would be extremely appreciated. Thank you in advance!!

Relevance 100%
Preferred Solution: Seems Worse than 6 months ago

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Seems Worse than 6 months ago

Hi and welcome back. I am sending you a private message with instructions. Please follow those first and then run malwarebytes according to these instructions.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list of any malware that was found.Make sure that everything is checked, and click Remove Selected.When removal is completed, a log report will open in Notepad.The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.Copy and paste the contents of that report in your next reply and exit MBAM.Note:-- If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware. -- MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes (like Spybot's Teatimer), they may interfere with the fix or alert you after scanning with MBAM. Please disable such programs until disinfection is complete or permit them to allow the changes.

12 more replies
Relevance 66.01%

I have been getting the BSOD almost every time i use my laptop. Been getting worse over the last few months. Any help would be appreciated!!
I have zipped and attached the dump files..

Answer:BSOD Getting worse over months

Hello and Welcome !

Seems like the Dumps are pointing to igdkmd64.sys i.e. Intel Graphics Kernel Mode Drive go to this website and download appropriate drivers including chip set drivers and install it http://downloadcenter.intel.com/Default.aspx.

Run a Hardware Diagnostic (Memory and Hard Drive) follow this link for instructions Hardware Diagnostic !! ? Captain Debugger

Run SFC /SCANNOW Command - System File Checker

Update the Following Drivers:


Code:
SiSRaid2.sys Wed Sep 24 23:58:20 2008
nfrd960.sys Wed Jun 07 02:41:48 2006
mdmxsdk.sys Tue Jun 20 02:57:26 2006
lsi_fc.sys Wed Dec 10 04:16:09 2008
arc.sys Fri May 25 02:57:55 2007
adpu320.sys Wed Feb 28 05:34:15 2007
adpahci.sys Tue May 01 23:00:09 2007
adp94xx.sys Sat Dec 06 05:24:42 2008
Bugcheck:


Code:
INTERRUPT_EXCEPTION_NOT_HANDLED (3d)
Arguments:
Arg1: fffff80000b9c0c0
Arg2: 0000000000000000
Arg3: 0000000000000000
Arg4: fffff880044b8f59

Debugging Details:
------------------
CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x3D

PROCESS_NAME: System

CURRENT_IRQL: 8

EXCEPTION_RECORD: fffff80000b9c858 -- (.exr 0xfffff80000b9c858)
ExceptionAddress: fffff880044b8f59 (igdkmd64+0x00000000000b3f59)
ExceptionCode: c0000005 (Access violation)
ExceptionFlags: 00000000
NumberParameters: 2
Parameter[0]: 0000000000000000
Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

TRAP_FRAME: fffff80000b9c900 -- (.trap 0xfffff80000b9... Read more

4 more replies
Relevance 66.01%

Hello,

since beginning of 2011 I have system shutdowns that partially come with a BSOD. It happens randomly and is not depending on specific programs running. It also might not happen for a week or so and then out of a sudden several times within an hour.
I tried to solve the problem by formatting my C-Drive and do a fresh reinstallation without success. Updating graphics drivers did not help either. Running Memtest+ and hard drive diagnosis tools did not show a hardware related problem.

Anyone who can help?

I added dump files and system information to this post:

Attachment 146739

Attachment 146740

Answer:BSOD over the last 3 months, getting worse

Hi and welcome,
Run Driver Verifier: Driver Verifier - Enable and Disable

Dean

Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D1, {1c, 2, 1, fffff880018e787e}

Probably caused by : tcpip.sys ( tcpip!TcpBeginTcbSend+33e )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 000000000000001c, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0... Read more

5 more replies
Relevance 66.01%

Hey

My computer has been BSODing since early summer. I've tried literally everything I can think of. All my drivers are up to date, I've taken my computer apart, checked every connection, cleaned everything with compressed air, cooling is sufficient, ran memtest and chkdsk, etc. etc.

It used to only happen when I was running recent-ish games (Fallout 3 mostly) for a few hours, but now I can't run any resource-heavy application for more than ten minutes and sometimes it BSODs when the most I'm doing is listening to music on Windows Media Player. I only bought this computer less than a year ago and it ran perfectly for about 6 or 7 months until this problem started, gradually becoming worse and worse.



Specs:
Windows 7 x64

Asus M4A79XTD EVO motherboard
AMD PhenomII X4 965 3.4GHz cpu
4GB Kingston DDR3 ram
ATI Radeon HD5770 1GB GDDR5 PCI-e graphics
M-Audio Firewire Solo interface for sound (I'm running studio monitors (speakers). They have their own seperate power sources.)



The BSOD errors are all completely different. I seem to get the same 6 or 7, including IRQL_NOT_LESS_OR_EQUAL, BAD_POOL_HEADER, MEMORY_MANAGEMENT, BUGCODE_USB_DRIVER.

Attached are the latest 3 bugdumps. Thanks!
 

Answer:BSODing for months, getting worse, tried everything

I will look it up and get back to you.
 

2 more replies
Relevance 65.19%

I don't even know where to begin with this. I've never been defeated so horribly. I cannot make any sense of this problem. I'm having the problems on the system shown below. Beginning about six months ago I started having these problems.
I would get blue screens once inawhile and there would be different error messages every time. Finally the o.s. hard drive started making a horrible buzzing and so I swapped it out for a different one. Alright... things seem to be going alright.
I leave my computer on for a week or so and there's no problems...until something causes me to have to restart. Half the time the drives aren't recogonized upon boot-up and if they are windows freezes mid boot. Usually after an hour of tinkering.. reorganizing the drives, shouting profanities and putting my fist through a wall it will reboot again.. until another week goes by and the same process repeats itself.
Now the o.s. drive I swapped out before is making excessive clicking sounds when booting. So I think maybe this one is bad.. just like the last one was bad.. I'm really burning through the drives here.. but that's alright, i've got drives laying all over. So today I pull out my seagate drive that i bought new a month ago. Naturally my motherboard doesnt recogonize the seagate...but in only 1 configuration... three drives have to be hooked up including the clicky one with the o.s. on it now and the jumper settings have to... Read more

Answer:6 months and I've only made the problem worse.

You bought a new seagate ....have you tried removing all the other drives (hard) and booting up with the seagate setup utility ...then try install os in it?

Have you run Everest on it to look at what it reports or run memtest?
Everest:
http://www.majorgeeks.com/download.php?det=4181
Memtest
http://www.majorgeeks.com/MemTest_d350.html

What is the exact error code on the BSOD?

How are all your three drives hooked up? Assuming master on last primary IDE/ slave on middle connection and....third on the secondary IDE along with the cd rom?

Have you run a disk check on the master?
 

18 more replies
Relevance 64.78%

I am in serious need of help if anyone can assist me in getting this straightened out. Using this heavily at home, and now at work.

Microsoft Outlook 2007 Problems have been progressively getting worse for several months. I am running Win Vista Ultimate and the MS Office Suite of programs 2007 version.

For the past few months, more and more functions of Outlook 2007 cease to function. For example, if I try to enter a new appointment the program simply shuts down ? every time. Right now the only functions still working are just for email and sometimes entering a new contact.
Here is what I have done:
I have run several different AntiVirus and Malware programs ? not all at once though.
I have run a number of different programs to check hard drive, etc.
I have uninstalled and reinstalled the Windows Installer program
I have uninstalled and reinstalled Outlook 2007

I am totally out of ideas. Tried to follow up with the error messages regarding a hdmp file but could not locate the file. Did a screen capture of error messages.

Now, what really scares the stuff out of me is that tonight, for the first time, MS Word decided to shut down too just like Outlook does.

At this point I am wondering if it would help any at all to simply reinstall all office 2007 on top of existing programs in hopes that by choosing the repair option will hope (I think the repair option is part of these programs).

Any suggestions are most appreciated.








&nbs... Read more

Answer:MS Outlook 2007 Progressively worse months

MS just released a new service pack for Office 2007. Be sure to install that after you reinstall!
 

2 more replies
Relevance 63.96%

For around two or three months the system has been crashing on a weekly or biweekly basis and wasn't so much of a problem as to interfere and warrant investigation on my part. Within the past few days, however, it has gotten much worse and now crashes at least once daily. I have done what I can with my limited computer skills and determined ntoskrnl.exe is the culprit and followed some potential solutions found on this forum as well as other sites but to no avail. Although it may be mere coincidence, I feel it is worth noting that the vast majority of crashes (90%+) occur when the computer has been left on but I am not currently at the desk working on anything. Any help would be much appreciated, thank you!

Answer:BSOD problem for months, getting worse, caused by ntoskrnl.exe

Welcome to SevenForums.

A BCC F4 is common when SSD's are present.

Code:
Model OCZ-SOLID3 ATA Device
Is the firmware for your SSD up-to-date?

Check for one and see if the stability returns.

What security software do you use?

Perform a System File Check:Click on the start
Type CMD on Search
Left click and Run as Administrator
Type SFC /scannow
Full tutorial here:SFC /SCANNOW Command - System File Checker
Disk Check on your hard drive for file system errors and bad sectors on it:Disk Check
Reduce items at start-up. Nothing except anti-virus is required:Startup Programs - Change
Troubleshoot Application Conflicts by Performing a Clean Startup

SUMMARY:

Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, fffffa800e057b30, fffffa800e057e10, fffff80003bcc460}

----- ETW minidump data unavailable-----
Probably caused by : csrss.exe

Followup: MachineOwner
---------
*******************************************************************************
* *
* ... Read more

7 more replies
Relevance 57.4%

Just tweeted this to Gabe Aul:https://twitter.com/cardellip/status/676289402524590081
The link in the Tweet mirrors to the biggest thread ever made on official Microsft Community forums:It was splitted by MS Mods because it was becoming too big to handle for their entire forum and for performance resons;New thread is here (Post #3 is the one kept updated)First part, original thread, is here;150+ pages / 1.500+ posts of Feedback, Over 300+ registered and valid Users/Insiders upvoted it, Over 30.000+ Votes combined on UserVoice official feedback channels (now discontinued).;But only less than 50% of Windows 10 Tablet Mode problems got fixed after 5 months:
Tablet Mode is still a worse tablet/hybrid/touch experience than 8.1 Start Screen on same devices, as biggest limitations and drawbacks remains:No Back/Forward swipes gesture for Edge in Tablet ModeNo Full Screen "Immersive" Edge in Tablet ModeNo TPLs or AdBlock for EdgeVisual bugs/glitches in Tablet Mode (example: white flashes on Task Switching, and more)Calendar Live tile stopping updating itselfLaggy animations even on high-end hardware in Tablet ModeBugged and Laggy Swipe-Down to close from Task SwitcherBad Multi-Display support while in Tablet Mode (no way to split Tablet Mode on tablet, and Desktop mode on big screen)And many more
If you think the same about Tablet Mode being far away comparable to the excellent 8.1 Tablet experience, please:Star, reply and share that Twitter postUpvote, Reply and Share the new officia... Read more

Answer:"Tablet Mode" still worse than 8.1 after 5 months W10 launched.

Come back Windows RT, all is forgiven....
But yes, this is a great post, Paulo, and does a good job of describing how to get things highlighted to Microsoft. Microsoft seems to prefer MS Answers/Community as it's community offering, so pressure there works as well as the feedback app.
A clear demonstration of need and business (and customer) use is what Microsoft needs as a prompt to prioritise these pieces of work - however, ranting isn't really all that constructive and just creates noise.
It would be really great if people put themselves in Microsoft's place when writing feedback/forum posts - would they prefer to hear reasoned feedback or just streams of censored **** ranting? If my manager or users yelled at me the way I've seen in forums, I sure wouldn't have a whole lot of motivation.

16 more replies
Relevance 47.97%

My icons are disappearing
The computer is running slow
Viruses have completely taken over my computer
I am going through financial difficulties right now and would REALLY appreciate help.
I understand computers therefore I can take direction fairly well..
Just please tell me what I need to do.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:19:43 AM, on 5/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\WINDOWS\system32\svcd\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDO... Read more

Answer:It's Getting Worse & Worse. PLEASE. I cannot afford to bring it anywhere:( LOG INSIDE

7 more replies
Relevance 47.97%

Hi all,

I started the day on a high note, before turning on the computer that is, thinking I was going to get some things done. This was not to be: So we start at:

FAIR:
After XP loaded it said that it had recovered from a serious error Product ID _251... so I did some digging around and got some info from microsoft's web pages complete with registry fixes (deleting bad entries, etc.)

I did a quick scan with malwarebytes and it found some stuff that I deleted and when I did a restart it didn't come up correctly.

Went into safe mode and it came up.
(made a HUGE mistake here. Did not copy files I wanted to save when I had the opportunity)
Closed out of safe mode and let it start normally.
Would not boot normally.
Tried to boot in to safe mode and now its recycling back to POST, we have gone to...
BAD:
Hmmm. So I thought how about putting the XP disk in and then do an install leaving file system intact.
When I got to the point of doing the install I chickened out because it said that it might delete the My Documents folder (had some things in there I didn't want to lose) I've done this procedure before and perhaps I should have taken the second opportunity to recover gracefully but I did not.

I hit F3 to cancel out of the install to try and boot from my other HD that has XP (but with some driver issues that I had yet fixed.)

I went into the CMOS to change boot order and notice that the hard drive (the one that I was trying to boot into is not showing ... Read more

Answer:HD/Filesystem prob:Went from fair to bad; then to worse, much worse

Test the HDD with the drive manufacturers disk tools (preferably using a different PC). Run the short and long tests. If either test fails or has errors, the drive is faulty.

4 more replies
Relevance 47.97%

I update and save quite a few files each day, and I can see in File History that there are many saved versions for these files.
This would fill up my backup drive fairly quickly, and therefore, I need to reduce 'Keep saved versions' from the default of 'forever' to about 3 months.  But does this mean that all files older than 3 months will be deleted my File History backup?
 What happens to all my files that have only ever been saved once, but are older than 3 months?  Are these retained in File History or deleted?
The forums on File History do no make this very clear.

More replies
Relevance 47.56%

Hello,
 
Okay first of all I would like to say I have been having on going issues for months to almost a year... I have tried everything I can think of... Including wiping harddrives to DoD standards with dban, gparted etc.... I have tried monitering my connections with wireshark...  I have tried several differet anti- (virus and malware) programs including paid version of kaspersky, malwarebytes, bitdefender, eset.....
 
This problem also has involved some black hat hackers compromising my system and bank account, credit card etc all being hit and continueing to do so... I have switched ISPs , changed hardware, thrown away devices including cell phones and laptops... It seems that they were also backdoored into several of my devices and were using several different methods to continue to spread and infect other devices.. These devices include android, iphone, ipod, ipad, netbook, laptop, smart tv and even my dvd player (java).. I have tried to ask for help and seek help for this and no one can figure it out or think this cant be real.
 
I have now thrown out all laptops, and all phones at the same time and started from scratch but having issues on a brand new laptop... I am not sure this is the same issue as before... However, I would like and really appreciate if someone could help me out and view my logs and make sure.. because I have been through hell and back with all these issues.. Loss of finances, time, and sleep... SO, I truly appreciate any and a... Read more

Answer:Malware, Spyware, And hackers...equals months and months of going insane!! help!

GMER 2.1.19357 - http://www.gmer.net
3rd party scan 2015-06-29 18:38:16
Windows 6.3.9600  x64 \Device\Harddisk0\DR0 -> \Device\00000036 HGST_HTS721075A9E630 rev.JB2OA3J0 698.64GB
Running: 11ybrc3o.exe; Driver: C:\Users\M4M8A\AppData\Local\Temp\kxldypow.sys
---- Modules - GMER 2.1 ----
Module   \SystemRoot\System32\drivers\iaStorA.sys (Intel Rapid Storage Technology driver - x64/Intel Corporation SIGNED)(2014-09-02 06:28:41)                                                fffff800f9c65000-fffff800f9f1b000 (2842624 bytes)
Module   \SystemRoot\system32\DRIVERS\edevmon.sys (Devmon monitor/ESET SIGNED)(2015-01-30 23:13:30)                                                                                          fffff800fa393000-fffff800fa3d2000 (258048 bytes)
Module   \SystemRoo... Read more

3 more replies
Relevance 47.15%

I purchased said unit Sept. last year and within a few months the battery started discharging for no reason I could see. Battery returned to Lenovo, tested and a new battery sent out (old one apparently kaput). I thought the problem was solved until a few days ago when... Battery starts discharging again for no reason I can see. Laptop eventually went into hibernation. Unplugged charger, plugged back in, switched on then powered up the laptop and the battery started charging. This sequence of events was repeated 3 times in 1 week, until yesterday when powering up the laptop failed. Took the battery out and tried laptop on charger only. Nothing. Put battery back in and tried to power up - then noticed battery indicator gave 3 orange flashes 1 second apart before stopping. Did the battery discharge thing (pressing in the power button etc.). Still nothing. The unit seems to have failed completely. Can someone tell my what I might be dealing with here - a failed motherboard? Yet again I'm going to have to send this laptop back for repair, and it's been nothing short of a nightmare because I rely on it to do work. I've never experienced something like this before with a purchased laptop and I suspect the original battery problem was caused by a fault inside the laptop. As the machine is still within warranty can I request a new machine or a full refund because I simply don't want to use something which may be inherently unstable? Looking at the views ... Read more

Answer:Ideapad Z580 only 10 months old - Battery failure 3 months ago and now this....

Hi Stephenbtc,
 
Thanks for posting and Welcome to Lenovo Community,
 
Would you please try to below steps
      
1-      Switch off the machine, remove the battery and keep the charger plugged in and press and hold the power button for 15 sec.
 
2-      Remove the battery and the charger and press and hold the power button for 20 sec.
Plug them back in and check if problem still exist or not if yes please go with the rest of steps
 
3-      Remove the energy management from control panel and install the below
Windows 8 : Energy Management
Windows 7 : Energy Management
 
Please let me know if you still facing the same problem
 
Hope the information helps
 
Regards,
 

Ayman

2 more replies
Relevance 46.33%

i've had verizondsl for about half a year or so now, and from last month to present, the connection has been horrible.. sometimes it would just hang for up to a minute at a time, with the modem activity light blinking slowly (loss of connectivity).. before it started, speeds were decent, and although slow compared to the optimum cable i was used to, it was sufficient. now it's just pure garbage. if it weren't for the fact that we're getting free cable, i would immediately switch to roadrunner

i figure asking you guys is probly much more helpful than those scripted outsourced fools at tech support. i tried all that "reset your modem" "unplug the ethernet cord" "make sure you're computer is on" crap already and would like some REAL answers..

PS- at my old house, we used to have verizon as well, and after a while it just stopped all of a sudden and when we called to see what happened, they said since there was construction in the area, they must have switched our phone line over to one with a further CO, and we were now too far to service. verizon is teh gay.
 

Answer:verizondsl getting worse and worse speeds

Well try plugging the modem into the demark jack if you have one (by where the phone line comes into your house). See if this still happensl. If it doesn't maybe something happened to your internal phone lines. (this probalby won't be the issue I'm betting).

Beyond doing that phone your ISP and get them to file a support ticket or whatever they call it there. When I was having trouble with my DSL connection a couple years ago I phoned up, they sent a guy from the telephone company to test the line and they replaced a device at the CO and the connection has been perfect ever since.




The [H]orde needs You!
 

15 more replies
Relevance 46.33%

I bought a Think Pad in April last year which does not start anymore, no lights,nothing.I wanted to send it back to Lenovo for guarantee.Ther ist only ONE problem, there is no sticker on the laptop which shows me the serial numer. Obviously there supposed to be on, but it is missing!!!I do have the invoice which shows the purchase date, but no serial either.I already quit wasted some time to with this bull**bleep**, I hopefully do not need a layer for that.Here you see the last response of the "support" manager -Dear Michael Mueller,Unfortunately I have to inform you that you have no guarantee for this machine.Repair of machines that do not have a sticker can only be carried out by a Lenovo service partner.Lenovo Service Partner:https://pcsupport.lenovo.com/de/de/serviceproviderIf you have any further questions about this service case, please send us an e-mail to [email protected] or call us on the free phone number DE 0800 - 500 4618 / AT 0810-100-654 / CH 0800-55-54-54. Lenovo regularly conducts customer surveys on service quality.If you are selected, please take a few minutes to answer the questions.We thank you in advance.  Yours sincerely, Davor KrpanLenovo Technical Support IBM Hrvatska d.o.o. za proizvodnju i trgovinuMiramarska 23, 10 000 Zagreb, HrvatskaUpisan kod Trgova?kog suda u Zagrebu pod br. 080011422Temeljni kapital: 788,000.00 kuna - upla?en u cijelostiDirektor: ?eljka Ti?i??iro ra?un kod: RAIFFEISENBANK AUSTRIA d.d. Zagreb,... Read more

Answer:guarantee handling - bad worse than worse

I just forgot to mentioned, that the purchase was done through the Leonovo online shop itself -  VERSANDBESTÄTIGUNG Ihre Bestellung wurde versendetSehr geehrte(r) Michael Müller,vielen Dank für Ihre Bestellung im Lenovo Online-Shop, der von Digital River unterstützt wird.Die folgenden Produkte wurden versendet.Bestelldatum14. April 2017Bestellnummer23856585462Tracking-nummer1ZAF68846704024055Folgende Artikel wurden versendet: BestellmengeProdukt-SKUProduktnameVersandmengeVersandmenge gesamtBetrag120J1CTO1WWThinkPad 13 2G11800,52EURWenn Sie per Kreditkarte bezahlt haben, wurde Ihre Karte nun belastet.

1 more replies
Relevance 46.33%

Hi everyone,
My bottom fan on my PC was being very loud, so I opened up my case and unplugged the power supply, and flicked off the power switch on the back. I unscrewed the bottom fan and dusted it a little bit, and then I put it back together how it was before.

The part that I unscrewed also contained my hard drive, and now that it is reseated I cannot boot.


At first I got an error when booting:
Loading operating system . . .
disk boot failure, insert system disk and press enter.

THEN, I tried making sure everything was connected well and tight, and now I am not getting anything displayed on my screen.

Apologies for the lack of knowledge and thanks for the help.

Jeremy
 

Answer:Boot problem, getting worse and worse

It is possible that when you removed the fan and hard drive, you plugged the hard drives SATA cable into a different SATA port on the motherboard. Get into the bios, and make sure that the hard drive is being detected properly
 

1 more replies
Relevance 46.33%

Initially it was Edge not working properly, now it mostly crashes. Even the new "amazing" feature of tab previews doesn't work properly. Imagine, I moved back to Chrome after so many years of being a happy IE user. Cortana was a bit iffy with "Hey Cortana". Now she doesn't listen to what I say at all, even when I press the button. The notification center has its own mood. Often decides to hide until I restart for absolutely no reason at all. Same goes for the sound volume and other flyouts on the desktop.
In short, there is massive degradation of various major features with every new build. And since I post all the issues I find using the feedback app, I know it is not just me experiencing these things. This is disastrous.
So, is it just me or you experience similar issues yourself?

Answer:Is it just me or does Windows 10 get worse and worse with every new build?

It's just you.

10 more replies
Relevance 46.33%

I was curious if anyone out there knows anything about this...

I have a self-built computer, three years old now...and day by day it's getting worse and worse!

AMD Athalon XP @ 1.1 GHz
512MB PC2700 DDR-SDRAM
Windows XP Pro.
Radeon 9500 Pro. 128MB DDR

The problems started about six months ago--every time I'd turn on the computer, it'd scan the hard drive for errors, claiming an improper shutdown. Then, two months ago, it started going to a black screen saying a windows file is corrupt, use the XP CD to restore the file--but simply restarting the computer at that point would get it going (only came up on a fresh start).

Then in the recent times, the screen is completely black. I turn on the computer, and no signal is sent (I'm guessing) to the monitor, so it's just flashing the power light...but after waiting approximently 10seconds, and restarting ('reset button'), it would go to the other problems--file corrupt screen, then the error scan...and this latest time, it took 4 resets for the screen to catch a signal...

All wires are plugged in good, and everything seems to be functioning properly, except for, of course, this problem I have...and I really have no idea where to start on fixing this. I planned on keeping this computer for another year or so--and hope this can be fixed! Anyways, any ideas/suggestions, please let me know!

Thanks,
-X

Answer:My Computer - Getting Worse & Worse! Is there hope?

take the graphics card out and insert it back in firmly making sure it is sat properly in its slot. check the manufacturers websites for your motherboard and graphics card and see what the bios updates do, and see if they have any FAQ's to check if anyone else has been having similiar problems to you in terms of people who have the same motherboard or graphics card??

Email the manufacturer(s) for your motherboard company and graphics company.

2 more replies
Relevance 44.69%

The battery in my first gen S10 died after about 7 months. Fortunately, I was still well within my warranty so Lenovo held up their end and replaced it. However, after about 8 months that second battery too no longer holds a charge and my original warranty has since expired. Phone support reiterated as much and denied any help.  This leads me to ask, shouldn't the second battery carry with it a full one year warranty? How can Lenovo not stand by a battery that dies in less than a year? This seems like more than just bad luck and has me questioning whether I will purchase another Lenovo product in the future.  Any help would be greatly appreciated. 

More replies
Relevance 42.64%

Hello my new bestest friends. I need help ! (as does everyone who comes here) My computer has been running like a bag of you know what for about 3 weeks. IE became corrupt and will not start even after uninstalling and re installing Versions 6 & 7. However this is not the problem as I am currently using safari and finding it great. The problem lies with my computer and it's sluggishness, ever since IE became corrupt my computer seems to have slowed. I am getting occasional Internal memory (blue dos screen) errors and several other little glitches like windows XP's search program will not close after I perform a file search. I have performed several Virus & spyware checks such as AVG and Spyware Doctor also several registry progs like registry Booster.AVG comes up clean, however Spyware Doctor and Registry Booster both show a lot of Registry errors inluding heaps of lnk file and url files. I removed most of these the first time around but discovered it to have deleted all my shortcuts and bookmarks that I much needed (well not so much the shortcuts) It did not remove the actual .exe files but was a major hassle as my dektop shortcuts where wiped. So I performed a system restore and now have everything back.I am wondering are/have these files become corrupt or is this just overkill on the software (spyware Doc & reg booster) behalf?? I have also noticed in my Hijack this log that there are several (missing files).I am so in need of help as i use my computer to p... Read more

Answer:Need Help Computer Getting Worse And Worse!

Hello Krisso,

Welcome to Bleeping Computer

Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Thanks,
tea

2 more replies
Relevance 34.44%
Question: It's worse

my computer has been acting up for awhile running really slow, but now it's started this trick of adjusting the screen every little bit. It either moves up or down. It changes the sizes of the window as well. Then i noticed down at the bottom in the task bar, a button appears for just a second with a little icon in it. Then it disappears before i can do anything. Now, my email has started bouncing and i can't get outlook express to connect. Also, i was kicked off yahoo messenger and then all i could get was page cannot be displayed on even my home page. Here is my HJT log. I would appreciate your help.

Demi

Logfile of HijackThis v1.99.1
Scan saved at 1:01:23 AM, on 3/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton Internet Security\NISUM.EXE
C:\Program Files\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\sistray.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Dig... Read more

Answer:It's worse

6 more replies
Relevance 34.44%

Like all AOL software, I'm wondering if the new AIM version is worse than the previous. Has anyone tried it yet?

It seems to have a lot of the features that AIM mods have introduced. I use DeadAIM myself, and have loved it for years. I tend to like things minimal. I've tried GAIM and Trillian, but I only use AIM, and GAIM messes up direct connections and profiles. I've tried AIMutation (sp?) and didn't like it much either.

What do you guys think?
 

Answer:AIM 6: worse because it's new?

i like it, but alot of people don't.
you just have to tweak it to the way you want it.
 

3 more replies
Relevance 34.44%

Just a curiosity question. I found an old AMD K6 chip in a scrap computer.
I would like to know if it is better/faster than my "Cyrix Instead" with MMX?
Both I think are 266's and socket 7.......

It's for my first PC that is now used for solitaire and surfing the net...

And what steps, if any, should I do to swap them, if the K-6 turns out better?
 

Answer:Better/Worse? Two old CPU's for old PC..

10 more replies
Relevance 34.44%

 Can anyone help??? It all started when I installed a new game (well new for my old PC) the other day, when ever I tried to load it, once it got past the intro video it just returned to the desktop, most of the time, it did occasionally work. So I went to look on the web for advice and was told to update my sound and video drivers. My PC is an old PII 350 with windows 98. I went to ATI and downloaded what it said was the latest driver for my card, now when the game does play the colours are all wrong and blocky (I have also updated direct X above the one the game needs). So I tried a sligthly older driver, which was even worse, so I put the newer one back on. To add to this the company who made my sound card (Aureal) have gone out of business, so don't give drivers now. I have found on another page what was supposed to the the latest driver they did release, but when I load the diagnostic tool on my computer (some sort of direct X thing) when I test the sound, it says there is a fault there too. It seems that what ever I try to do, the thing just gets worse, I am starting to think about getting another PC, but when it works, it does everything I need. Does anyone have and advice how I should try and fix all this? Thanks James

Answer:It just keeps getting worse

Did you simply overwrite the videocard drivers? If yes, you may wish to thoroughly clean your computer by uninstalling them and running a program such Advanced System Optimizer V2 or Advanced Uninstaller Pro 2004 There is also a useful tool that removes drivers for you.. I'll get back to you on that once I recall the name. Even though your soundcard manufacturer has gone out of business, use Google to search for drivers. There is quite a high chance of still finding them.As for DirectX, see to it that you have the latest version from Mirosoft.Buying a new PC will not solve your problems. It is not the PC's fault, it is the users fault. Your problems will just start anew if you donot know what you're doing.

1 more replies
Relevance 34.44%
Question: From Bad to Worse

Hello to all the experts here at Bleeping Computers.

I was in the process of following your steps from the "Preparation Guide" when my computer decided to crash big time.
Initially I had my homepage hijacked by something called start.search.us. That by itself didn't seem to be a big deal. I was proceeding through the steps and made it to step 8 (Create a GMER Log). Approximately 5 minutes into the scan my entire screen went all screwy. It looked like the GMER scan program filled the screen and scrambled itself.

Now my computer won't work at all. After a restart, the computer locks up on the black screen with the green progress bar (Microsoft Corp underneath). I tried a safe mode reboot but it stops loading at the following line of text, "Windows\System32\Drivers\avgidshx.sys" This was the same line of text that was being scanned during the GMER scan.

After another restart (so many I lost count) my computer reads the following, "Windows failed to start. A recent hardware or software change might be the cause. To fix the problem:...." Several options are listed but even after inserting the original operating disc to repair, I can't get past the green progress bar thing.

Help!!! I'm moments away from turning this laptop into a very unaerodynamic flying brick.

(I'm typing this on my wife's Macbook, in case anyone was wondering how I could post)

More replies
Relevance 34.44%

I have a virus on my computer in which my Windows Defender warning pops up every few minutes I remove it and it keeps coming back. I am also getting lots of internet pop-up ads. Please help before I throw my lap top out of my window. I ran hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:44:47 PM, on 12/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\MBK\MBackMonitor.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HP\HP Softw... Read more

Answer:Please help! It's getting worse

it is:
browser modifier: win32/fotomoto
 

2 more replies
Relevance 34.44%

I tried to run a payment on a website and the submit button did nothing but make the cursor blink which it still is.  I looked under inspect Element and there was a JS file that downloaded.  I looked at it and it looked fishy.  I tried to run the normal cleaning techniques (ADW Cleaner, JRT, RKiill etc) and they all returned a messagge. "the service cannot accept control messages at this time "
 
It is slowly getting worse by the minute so I am not sure that this will even get to someone in tim,e cause I know u guys are backed up but if possible I dont know what to do I tried to use msconfig.exe , and the search functions to get safe mode to work but I just get either nothing happening or the same message.  I am afraid that if I turn off the computer to shift into safe mode that it will loack up..  Any helop would be appreciated.

Answer:I have something bad going on and ts getting worse byt the second

Sorry, but it seems that your pc is infected with a virus or malware which is going to take some more work and a deeper look. No sense running a bunch of tools here.Please follow this Preparation Guide, post in a new topic and include a link to this thread.Let me know if all went well.

3 more replies
Relevance 34.44%

dear all, any softwares that can fix this...

3 men go into a hotel for the night. The clerk informs them that it's $30 for the room, so they each take out a $10 bill to pay for the room. So far they paid $30, correct? You with me so far? Good.

A few moment after the men went up to the room, the manager reminds the clerk that there was a special promotion that night, and that the room was only $25. So the clerk gives the bell boy five dollars to bring back to the men. On his way up to the room, the bell boy says. "Hey, I'm not stupid, I'll give each of the man a dollar back and keep two for myself, $5 right, 30-5=25.

Well, since the bell boy gave each man a dollar back, that means each man only paid $9, correct?

Well, the last time I checked, 9x3=27, plus the 2 that the bell boy took makes 29, what happened to the other dollar??????

[This message has been edited by kokaik (edited 07-03-2000).]
 

Answer:the more you think, the worse it gets

7 more replies
Relevance 34.44%

I have been workin on this for several days now and I am at my wits end. I am attaching my Bitdefender log and an HJT log. I have followed all of the instructions in the "Before Posting" page. And should tell you the following. My Add/Remove programs hasn't worked in years so when necessary I use the free trials downloadable from various places.
When I try and run Microsoft Windows Defender it says I need to perform an upgrade, and will not open.
I tried running Pandascan this morning and waited for over two hours and it never did complete downloading.
As I mentioned, I am at my wits end and believe it's time for some help.
Thanks
 

Answer:The more I try the worse it gets! I need Help!

Welcome to Majorgeeks!

You did not attach your HJT log. Make sure you follow all instructions in step 7 properly and then attach your HJT log.

You should look at your Bitdefender log (change the .txt to .html and then double click on it and you can see it in your browser) You need to delete those items it is pointing out in your email.

Is your copy of Windows licensed to you and has it been activated with Microsoft?

What happens when you try to use Add/Remove programs? Be specific.
 

9 more replies
Relevance 34.44%
Question: Bad to worse

I posted a previous problem in regards to my computer shutting down at random and suspect virus. It seems things have gone from bad to worse in rapid time. I have lost internet connection, I open a program "regedit" and it closes, same with "msconfig" I cannot boot in safe mode. Suddenly all that was in my "connections" are completely gone, that folder is now blank. I know in the past I have tested your patience here but am throwing myself at your mercy once more. Sorry if this should have been posted with my previous question but I am unsure as to how protocol is.

btw forgot to give the basics.
Winxp
Medion computer.
should be current on updates.
again tia.
 

More replies
Relevance 34.44%

I've been trying to fix this computer for several days now, and it keeps getting worse instead of better

I know from my Ad-Aware scans that it has coolwebsearch on it, but CWShredder doesnt find anything wrong when I run it. ad-Aware does and keeps fixing it, but it's back within seconds. I've also run spybot search, about buster, and pest patrol. My HJT logs are getting worse, not better.

I would be much obliged if someone could help me; I can't figure out what else to do.
Thanks!
-Vanessa

Here is my HJT log, let me know what if anything else will help.

Logfile of HijackThis v1.97.7
Scan saved at 11:41:07 PM, on 2/4/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program... Read more

Answer:It's Getting Worse....

I downloaded the newer version of HJT...new log file is:

Logfile of HijackThis v1.99.0
Scan saved at 12:13:41 AM, on 2/5/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\iety.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\msbo32.exe
C:\DOCUME~1\ness\LOCALS~1\Temp\Temporary Directory 9 for hijackthis.zip\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system... Read more

3 more replies
Relevance 34.44%
Question: Getting worse

I followed your advise to rid my computer of a BHO and virus (red circle w/white X in system tray). Now my computer takes 20 minutes to boot, asks what mode to load in, (safe, normal, MS-DOS, etc), and only loads in 640 x 480 video. I've also lost the printer driver.

Logfile of HijackThis v1.99.1
Scan saved at 12:49:56 PM, on 12/12/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\SYMTRAY.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\NORTON SYSTEMWORKS\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\ATIPTAAB.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant ... Read more

Answer:Getting worse

hi, welcome to TSG.
you don't appear to have a firewall, even if you have a router you still need
a software frewall, downlaod the one from the link below!
Filseclab Personal Firewall Professional Edition

http://www.filseclab.com/eng/download/downloads.htm

http://www.wilderssecurity.com/showthread.php?t=92710
Download the pocket killbox

http://www.bleepingcomputer.com/files/killbox.php
Download A2

http://www.emsisoft.com/en/software/free/

update A2 and run a full scan.
*Download Cleanup from Here

http://www.stevengould.org/software/cleanup/download.html

* A window will open and choose SAVE, then DESKTOP as the destination.
* On your Desktop, click on Cleanup40.exe icon.
* Then, click RUN and place a checkmark beside "I Agree"
* Then click NEXT followed by START and OK.
* A window will appear with many choices, keep all the defaults as set when the Slide Bar to the left is set to Standard Quality.
* Click OK
* run cleanup

have hijack this fix these entries. close all browsers and programmes before
clicking FIX.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Ex... Read more

1 more replies
Relevance 34.44%
Question: Bad to Worse

Friends,

It appears my browser (IE/XPpro non-sp2) has been hijacked - at boot time I get an IE page that advertises WinAnti-Virus and demands I purchase. I can close the window and continue, but there are 37 processes running and the drive is constantly active, where an identical box has 28 processes running. I have downloaded (but not run) all the software you recommend, but apparently nudged the wrong bad actor and now the system won't boot at all. I have backed up some data, but don't want to loose everything if I can help it. I don't know how to use command line recovery and I can't remember the Admin password to use it anyway.

This happened once before and I let the system just run and reboot itself and after about 4 hours it was successful. I have about 4 hours on it now and no luck. I will let it run all night to be sure it doesn't heal itself.

If I reload XP, will all my data still be there?

Things started to go south about 2months ago when McAfee found Vundo and couldn't seem to kill it off.....

thanks, GearHead.
 

Answer:Bad to Worse

Hi GearHead,

Check out this link and try the removal tool from Symantec.

READ ME: Virtumundo Problems/Resolution Threads

Should that fail, I would suggest following the steps here:

READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Best luck
PP
 

2 more replies
Relevance 34.44%
Question: bad to worse

Now I'm getting a little spooked.First it was just some irritating re-directs from Google searchers.Then multiple windows began propagating, sometimes blaring music, voices, phone sounds.Then, trying to work my way through the instructions in the preparation guide, I discovered that attempting to run the gmer.exe crashed me, locked up the processor, prevented me to restarting, the whole thing.Now, my touchpad has stopped responding. I uninstalled and restarted to replace the driver, but no effect. I am having to use a USB mouse, which works OK, but has not improved the touchpad.What's next?!Just curious. A question, for those of you who have experience with this forum--how long does it usually take to get help? Should I assume that all topics are addressed eventually, as folks find time? If I have failed to supply some bit of information, or violated some etiquette, I'd rather know, make my amends and start over that wait on the sidelines longer than necessary.Or should I just throw this piece-of-crap netbook out the window and get a real machine?

Answer:bad to worse

Hello pfosinger,It's hard to say how long it will take for a topic to get picked up. I know how frustrating it is when your computer isn't working properly. Let me assure you that your topic isn't lost, forgotten, or ignored. We work with hundreds of logs every day, so we have devised a means of seeing only those topics that don't have responses yet. At the moment, we have nearly 300 unanswered topics, the oldest dated Aug. 26, 2010 at 5:14 pm Eastern Daylight Savings time in the U.S.A. Your log topic is dated Aug. 30 2010 at 10:00 pm using the same time zone.Our volunteer MRT team members have various levels of expertise and training, so while we try to take the oldest DDS/HJT logs, it is often the skill level of the particular helper and sometimes the operating system that dictates which logs get selected first. Some infections are more complicated than others and require a higher skill level to remove. Without that skill level attempted removal could result in disastrous results. In other instances, the helper may not be familiar with the operating system that you are using, since they use another. In either case, neither of us would want someone to assist you who is not familiar with your issue and attempt to fix it.Please be patient. It may take a few more days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.Orange ... Read more

2 more replies
Relevance 34.44%

I just finished a download that had some pretty nasty side effects. I am getting a pop up saying "It is recommended to update you antispyware protection to prevent data loss. Please install the most up-to-date antispyware for you" then an ok button. This isn't the only one, there are about 2 or 3 that seem random, none of which seem encouraging at all. Please help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:48:46 PM, on 1/26/2009Platform: Windows XP SP3, v.5657 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.20935)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\Program Files\LSI SoftModem\agrsmsvc.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\TVersity\Media Server\MediaServer.exeC:\WINDOWS\explorer.exeC:\Program Files\Unlocker\Un... Read more

Answer:pop ups and probably worse

Hi,Your system is severly infected. Problem with these infections nowadays is, it causes a lot of damage. Even if we clean the malware off your system, I can't guarantee that your system will be clean afterwards, because these infections/bundles leave a lot of leftovers behind that most scanners won't even recognise and logs won't show.Also, I can't promise you we can repair all the damage it caused... Even after cleaning the malware, you can still get errors afterwards because of the damage. Solving these is not always possible since it will be searching for a needle in a haystack to find the right cause and solution.So, we can try to clean this up and do what we can, but keep in mind that we can't solve ALL problems this malware already caused.In light of this it would be wise for you to back up any files and folders that you don't want to lose before we start. Reason I am telling this is because when a system is so terribly infected and we try to clean this up manually, the damage that is already present may interfere with our removal attempts. Actually, this doesn't suprise me at all.I notice that you never scanned with an Antivirus previously before starting this thread - because you don't even have an Antivirus installed!This is somewhat suicidal in today's digital world.That's why I want you to install one first!!* Please install Avira Antivirus: http://www.free-av.com/This is a free Antivirus.Perform a full scan with Avira and let it delete everything it i... Read more

18 more replies
Relevance 34.44%

Hi,

I just wanted to start by saying a very big thankyou to all of you that help people on this forum. It is very generous of you and it is appreciated.

I have been infected by this fake security application that says "Windows Security has found critical process activity on your system". It keeps redirecting our web searches. In safe mode I have ran malware bytes, super anti spyware and created a hijack this log all before finding this forum. Both these scans found problems initially however upon following the instructions of this forum no more were found. I tightened up my zonealarm resetting it to default and searching programs that try to run as they popped up, mshta.exe was one of the programs.

I have followed the instruction on this web site to the best of my knowledge and i will attach the logs of the various scans. All scans went well except for the combo fix scan that ran through to stage 50, flashed a page suggesting it was deleting files and then restarted my computer. I repeated it with the same result.

I now have a message that says "SQL Server could not find the default instance (MSSQLSERVER) - please specify the name of an existing instance on the invocation of sqlservr.exe." whenever i start my computer and it takes a long time before all the applications are loaded and ready to be accessed. It seems to run faster if the internet is turned off?

I am posting this from another computer.


Here are the logs - Thankyou for yo... Read more

Answer:Please Help, its getting worse

I am not seeing much in the way of malware on your system. Let's do this and see where you are after:

Download The Avenger by Swandog469, and save it to your Desktop.

* Extract+ avenger.exe from the Zip file and save it to your desktop

Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:




R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:50370
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - (no file)
O3 - Toolbar: (no name) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - (no file)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present --Unless you set this.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present --Unless you set this.Click to expand...

After clicking Fix, exit HJT.

* Run avenger.exe by double-clicking on it.
* -Do not change any check box options!!
* Copy everything in the Quote box below, and paste it into the Input script here: part of the window:



Files to delete:
C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Ta... Read more

5 more replies
Relevance 34.44%

Hello, I never write posts to ask questions when it comes computers, but this time I saw myself having to do so.
I have had many problems recently, and it just got to the point where stuff just doesnt work anymore.
I upgraded to Win 10 about 10 days after its launch. I loved it. I had that often problem everyone had but I could solve it.
About 20 days ago, everything worked greatly. Then, I don't remember what exactly happened, but all of a sudden I couldn't access the Groove Music App. Then I realized I couldnt open any other Windows built in apps, not even store worked. However, Edge and apps like calendar for some reason do work. So in an attempt to repair this, I messed up the Appdata folders's permissions. I had recently installed this context menu button when I right clicked, that let me take ownership of a folder, so I took the ownership "administrators."
Then, the hidden items check box in the View Tab on Explorer suddenly unchecked itself when I checked it. I looked up online and there it said it had to do with the Administrator account, but hell, I am the admin account on my PC, so this just didnt make sense. Then I read a simple reboot would help, so I rebooted and it was fixed.
This is where I mention my recent installs. Around the time, I installed this now piece of software on my pc, and this software was Bit defender Total Security. I had replaced my previous antivirus, Avast Internet Security, with this. Now, I highly doubt this program contributed to this in ... Read more

Answer:Help! My pc is getting worse

That last part went wrong somehow, here are the links:
click here
href
10-windowsstore/store-not-opening-in-windows-10-this-app-cant-open/c0de1565-9c33-4604-a1cd-b4ce18b72117?page=2&auth=1
10-windowsstore/windows-10-app-store-will-not-run-cannt-add-a-user/682d6bd8-39ae-4ee4-b0fc-c19027b44552?rtAction=1444233209744&auth=1
storeandappswontopenreregistering/
1-windowsstore/windows-store-app-not-opening-in-windows-81/9882357f-ae86-4e4d-ba37-209aa960063c

7 more replies
Relevance 34.44%
Question: from bad to worse

please help-got a new laptop trying to use the wi fi.there is no wireless connection icon any where.maybe there no driver,im guessing. do i need to use the disc that came with my router.my other laptop works fine.maybe i need to use another keycode,i dont know please help.thanks

Answer:from bad to worse

I think you're already running a thread on this: click herePlease don't double-post.

1 more replies
Relevance 34.44%

Ok my computer has been progressivly getting worse becuase before i wasnt able to enter my control panel becuase explorer would just crash. And now i started up my computer and restarted a couple of times and i cannot see my tool bar(the one with the start button) and my cousin is bringing my xp disk christmas.. what can i do in the meantime? oh and when i click my windows key it doesnt do anything.

Answer:it just got worse...

looks like a virus to me
what antivirus program are you using? and is it up to date?

9 more replies
Relevance 34.44%

Hi,
I made a post about my windows 7 explorer crashing, it seem to only happen when I move files from my internal to my external hard drive. it was still happening, nothing i tried fixed it.but NOW its gotten worse. Its crashing on a loop...every single second.this happens as SOON as I SIGN ON...in seconds it crashing and looping
and I cannot do a thing but use my internet...I get a message that tells me my program
fences (stardock program) has detected that there is problem with 7, and it disables itself, Then windows7 explorer crashes. sends info. then restarts...If I start a video or a program before it closes (which is seconds) then it will run. I have been up for HOURS trying to get this solved. I have NO clue what is going on. I ran Anti-Spyware free edition, found 8 harmful things, had them deleted. I also ran my microsoft essentials...BEFORE that..and it Finds nothing...it NEVER does. but anti does...that confuses me.

SO what is going on? what do I do? PLEASE anyone, I am computer illiterate...
I have windows 7 (genuine)
32bit home premium.
I was tryng to get the rest of the info. but I can't as the explorer is completely locked up as I type this...please help I am so frustrated, I want to make Bill Gates come fix my computer lol...who has his number!?
ASLO! After it crashes and re-opens it keeps bringing up the c drive file location library? every single time, so now i have a list of these file locations open...also I JUST get a message saying that my firewall is... Read more

Answer:Oh no its worse! Help!

Can you get into Safe mode instead? If so, does it happen in safe mode?
Safe Mode

EdiT:--------------------------------------
Do you have a system restore point you can revert to?
http://www.sevenforums.com/tutorials/700-system-restore.html

Oops sorry just read last line of your post.

9 more replies
Relevance 34.44%

I've had 10 for a few months now. During that time I've had several automatic updates. Most have been unnoticeable, a few others were anti productive. The first and the last (two days ago) have been horrible. When I first downloaded 10 I immediately lost my CD/DVD drive. No matter where I look my computer can't find the old one. It also disabled sound from anything I recorded. The latest update is making me log in if I leave the computer for more than a couple of minutes. It also makes me wait before the log in window pops up. I'm beginning to think that switching from 8 to 10 was not a good decision.

Answer:Just when you think it can't be worse!

Would you consider doing an in-place upgrade install, also known as Repair install ?
Repair Install Windows 10 with an In-place Upgrade

9 more replies
Relevance 34.44%

Hi. I hate to be a nooge, but I posted a problem I had a week ago with a single search term being redirected in Google -- only that one search term was redirected. That much has stayed constant -- I've been using Google all week and only that one search term is redirected. My post has dropped down to page 12 and I think it's pretty much off the grid by now.Tonight I tried to run Hostsman to update my Hosts file and Avast! immediately put up the Warning notice that:12/2/2009 11:40:42 PM SYSTEM 2016 Sign of "Win32:Delf-MZG [Trj]" has been found in "C:\Program Files\HostsMan\hm.exe" file.I quarantined the file, but now I'm very concerned. When it was just the one redirect it was interesting, but this has me a bit panicked.I've copied last week's post here.Can anyone help?EDIT: Okay, it looks like Avast! may be reporting false positives right now with virus database 091203-0, the one I'm using right now, according to what I read in the various forums. I'll keep a good thought, anyway.But my redirect problem IS still there, and I'd like to get to the bottom of it, if anyone can help. Thanks!Hello again -- I was here with a severe problem about a year ago. It took several weeks, and a lot of help, but I got cleaned.I also learned a few things. I have since installed the NoScript and Cookie Whitelist addons to Firefox, I installed the free version of ZoneAlarm, and I installed a Hosts file manage... Read more

More replies
Relevance 34.44%

my topic is here http://www.bleepingcomputer.com/forums/t/134217/virus-and-rootkits/ and it has been a couple days since a reply, and i was told not to reply again until i get a reply from someone to help me. but my computer is now losing the whole task bar whenever i close anything...i can bring up the task manager and see everything there, and i can ALT+TAB between programs and they will come up, but when i press the windows button will not bring up the start menu. the HJT log is in that other topic. thank you for looking

Answer:I Think My Pc Is Getting Worse

Hi dizz15,I know it's frustrating, but please be patient. It may take a while to get a response, because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible.If after 5 days you still have received no response, then post a link to your HJT log in the thread titled "Haven't Had A Reply In Five Days?".To avoid confusion, I am closing this topic.

1 more replies
Relevance 34.44%

new note pad mesgwhen I boot up.
[.ShellClassInfo]
[email protected]%SystemRoot%\system32\shell32.dll,-21787

I get this on start up and firefox is giving me an error

Well, this is embarrassing.

Firefox is having trouble recovering your windows and tabs. This is usually caused by a recently opened web page
Can any one help me out?

Thank you so much
 

More replies
Relevance 34.44%
Question: Bad to Worse.

Hi all,  So not only does the Control Panel on my T520's nVidia card fail to work, but safe mode doesn't either. It gets stuck in a reboot loop for memory reasons. Using last known boot configuration I can get it to boot normally but the networking cards/drivers don't work. They are detected in Windows 7 but ipconfig only gives the Tunneling adapters.  Any ideas? Or should I just send it in for servicing?













Solved!

Go to Solution.

Answer:Bad to Worse.

Hi kingofthering
 
If you need to use the machine temporary or to ensure your Nvidia GPU is defect, you could change the graphics settings in the BIOS to Integrated Graphics.
 
If you are not technical savvy or / and wish to save the hassle, it's probably good to send it in for servicing.
Have a nice day!
Peter
W520 (4284-A99)
Does someone?s post help you? Give them kudos as a reward, as they will do better to improve | Mark it as solved if the solution works for you, so it could be reference for others in the future
=====================================
Sound Enthusiast and Enhancement (Post comments, share mixes, etc.)
http://forums.lenovo.com/t5/General-Discussion/Dol?by-Home-Theater-v4-for-most-Lenovo-Laptops/td-p/6...
http://forums.lenovo.com/t5/IdeaPad-Slate-Tablets/?IdeaPad-Tablet-Sound-Enhancement-Thread/td-p/7150

9 more replies
Relevance 34.44%

I've had 10 for a few months now. During that time I've had several automatic updates. Most have been unnoticeable, a few others were anti productive. The first and the last (two days ago) have been horrible. When I first downloaded 10 I immediately lost my CD/DVD drive. No matter where I look my computer can't find the old one. It also disabled sound from anything I recorded. The latest update is making me log in if I leave the computer for more than a couple of minutes. It also makes me wait before the log in window pops up. I'm beginning to think that switching from 8 to 10 was not a good decision.

Answer:Just when you think it can't be worse!

Would you consider doing an in-place upgrade install, also known as Repair install ?
Repair Install Windows 10 with an In-place Upgrade

0 more replies
Relevance 34.44%

i now cannot access my e-mail since doing an update every time i click on the e-mail icon nothing happens its just blank, nutty norm again

Answer:its seems to get worse

What email icon?????????????

3 more replies
Relevance 34.44%

Hi, I have been using PC tools for the last couple of years with no bother. However, when I wanted to put it on my laptop I lost the ability to access the internet. They told me (eventuallY) to reboot using my windows XP home edition disc. having done that I was initially able to access the internet, but I could not open links or download any thing, and now explorer won't open at all, I just get error reporting. Things have gone from bad to worse and I need some help.Thanks

Answer:going from bad to worse

sorry - spyware doctor

2 more replies
Relevance 34.44%
Question: It could be worse

I come to this forum and read all the time in search of knowledge . With the reading and help of the fine people here I have fixed many problems . Some posts I have read complain about a program taking a minute to start up . Some complain about a slow boot up . Well when I said it could be worse I found one that couldn't be . Uncle brought his PC out to me to see iffin I could make it work for him . HP Pailion with 128 ram and XP Home . Hooked it up to my monitor and turned it on . One hour and 15 minutes later I could finally do something . First thing I attempted to do was run defrag . It took 15 minutes for the menue to work enough to let me click on defrag and another 29 minutes to open defrag . Now I have it open and click on derag to run , 7 hours later it finished . Pc Was still slow . A bit better but not much . Started to empty temp folders . One temp folder took 15 minutes to empty . Emptied all the temp folders and the history then deleated some programs . Only deleted 3 small programs but with them and the temp folders I regained 17 gigs of hard drive . Did another defrag and this time it went much faster . Then I started on malware and viruses . Did the ususal scans I learned from here and took a bunch of them out . Got to the point that the PC was healthy again . Took out the 128 megs of ram and replaced it with 512 which is the max for this HP . Now it is running very smooth and probably as fast as it ever will . So when you think you are running slow do t... Read more

More replies
Relevance 34.44%
Question: Gotten Worse...

I know i posted about it a couple days ago with my computer going down the pooper. Well it was running real smooth untill recently. i had lots of disk drive space open now today it says i have 55.6GB of free space now i have a total of 74.5. I have been running virus protectors and spyware programs but its not working and there are icons showing up on my desktop that i cannot get rid of.... Do i have to re install windows or something? Sorry to ask again but i need help. Also i forgot to mention in my add remove programs there is a new program called search plug in and also micromedia flash player which im unfimiliar with and they are the biggest files in there.
 

Answer:Gotten Worse...

Please don't start a new thread for the same issue

If you are not getting any responses bump the original back to the top by simply posting to it...

here's the oiriginal... http://forums.techguy.org/t313054.html

closing this one

buck
 

1 more replies
Relevance 34.44%

Is a 635 slower than a 640? Is the camera worse? Is there less internal memory? What are the differences?

Answer:How much worse is a 635 than a 640?

Here's the differences compared to the 640...
The 635...
...has half the RAM, which meant Facebook and Messenger refused to run in my case on W10M, multitasking is less smooth and whatnot. But it works for the basics.
HOWEVER, there are some 635's that have 1 GB of RAM, matching the 640.
...is not supported currently so you won't be getting Windows 10 Mobile easily, although some 635's have indeed been getting it with little effort oddly enough.
...has an inferior, lower-resolution 5 MP camera with no LED flash. (the 640 has a flash and an 8 MP shooter)
...is smaller than the 640.
...does not have a proximity sensor.
...does not have double-tap to wake or Glance.
...has a smaller and lower-resolution display.
...has a smaller battery.
Although the 635 and 640 share the same Snapdragon 400 processor and 8 GB of storage + microSD.
The 640 is the better all-around phone but I your needs are very basic and the 635 is significantly cheaper then the 635 may make sense.

2 more replies
Relevance 34.44%

Sorry to be such a bother but this problem is driving me bonkers!
Every turn develops into a new drama-here's the situation so far-

(1.) When I go to click on a program (any program) my computer either immediately or soon afterwards pops up a window that says "program error-process has already been exited-has generated errors and will be closed by windows. You will need to restart the program. An error log is being created." Of course restarting the process only sends me in circles-the same thing continues to happen-sometimes, obviously, I'm able to start the program but usually during the course of operation the "program error" window pops up and it's back to musical chairs again!
My system is, O/S Windows 2000 Pro, P4-1.6GHz 400MHz/P4FAN (P4-1600AR), Motherboard-D850MVL -MB Intel D850MV w/LAN, Rambus 256MB (2).

(2.) Now if I didn't already have enough problems I've apparently been infected with the Fortnight.E virus-it gets worse, in turn, I infected my ex-wife with the virus via an email (well, I'm sure you can imagine my situation-it would be better to have my nipples dipped in honey and dangled over a pool of hungry piranhas-she's pissed! Of course, the fact that the virus installed porno weblinks into her favorite file made matters even more unbearable-you'd think she was a nun or something! At any rate,
I have run a Panda On-Line AV-Scan-several Norton AV scans-SpyBot, Ad-Aware and SpySweeper-nothing works!
... Read more

Answer:Sos....from Bad 2 Worse!

6 more replies
Relevance 34.44%

Hey all.
I am loaded with popups. I went through all my prelim scans, booted safe mode, all that jazz. I didn't notice anything for about three minutes, then it all came back. If anything, they just seem to be getting worse. Anyway, here's my log, thank you much for your time.

Logfile of HijackThis v1.97.7
Scan saved at 11:43:05 PM, on 11/27/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\Tablet.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\mllcrap.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\wsxsvc\wsxsvc.exe
C:\WINDOWS\system32\vmss\vmss.exe
C... Read more

Answer:Keeps getting worse.

Hi
You will need to get rid of the Peper Trojan first so run the PeperFix from my list..

After that
Make sure you have already run Adaware, Spybot S & D(check for updates) as these will do a preliminary clean first.Some files below may not be present after running the above programs.

Then....
Turn off your System Restore SEE HERE Reinstate it when your log is cleaned and then create a new restore point.Close your browser window and run hjt in safe mode... HOW TO RUN SAFE MODE and have "Hijack This" fix all the following items by placing a check in the appropriate boxes and selecting "fix checked".
Folders that have been highlighted RED in the log will need to be uninstalled.Check first as some folders maybe uninstalled via the Add/Remove program. Files highlighted in BLACK in the log will need to be removed from your hard drive. Make sure to have your system set to show hidden files and folders.. HOW TO SHOW FILES ..Please post a new log when finished...

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\WINDOWS\system32\SearchBar.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Program Files\CxtPls\cxtpls.dll
O2 - BHO: (no name) - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
O3 - Toolbar: Band Class - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
O4 - HKLM\..\Run: [W7ABA] c:\documents and settings\... Read more

5 more replies
Relevance 34.03%

Hi Folks,

I somehow got nailed with Virtumonde two weeks ago and have been fighting with it ever since. Having tried everything I've been able to find on the web (short of attacking things in HJT), I've finally admitted defeat. I noticed some great postings here, so thought I'd ask for some help from the experts at Geeks. I've followed all of the steps in the READ & RUN ME FIRST sticky already, but have managed to end up worse off somehow. That's not a shot at the process, but typical of my last two weeks fighting this thing.

After finishing step 7 last night, I shut down. When I tried to boot into normal mode today, I am now getting a popup window with a title bar of RUNDLL and the message "Error loading C:\WINDOWS\system32\yekrmujm.dll. The specified file could not be found." When I click the OK button on that box, it pretty much causes the system to either grind to a halt or hang (can't tell which- the mouse moves, but nothing came back after an hour, and I can't get task manager to come up).

I can still get into safe mode OK, so I'm trying step 5 again in desperate hope it will at least let me boot into normal mode (it's my work laptop, so I'm a little unproductive right now...).

I've attached all the logs from yesterday's efforts and would greatly appreciate any help with getting back into normal mode, and even better, getting rid of Virtumonde. I was unable to get a log from Co... Read more

Answer:Virtumonde- From bad to worse

And the rest of the logs...

And I forgot to mention that I followed the additional step for Virtumonde and ran Vundofix, so that log is attached as well.
 

9 more replies
Relevance 34.03%

Hi,
I have an XP Home computer that picked up UAC yesterday and has proven very difficult to clean up. I have cleaned other systems before with instructions and tools recommended here, but this time, each attempt I make seems to make it madder. It has blocked safe mode, MBAM and ComboFix from running, and now on reboot won't even start up the Windows UI correctly (meaning no menu bar, no desktop icons). I can ctl+alt+del and get task manager, and that's about it.

From task manager, I can get RootRepeal to run (by browsing to a USB stick that has the .exe) but it runs a few seconds and then disappears.

There are two .exe's and a .bat in c:\ with random characters as the file names. I can see c:\windows\system32\uacinit.dll and 5 other UAC+10 random character.dll files and a few UAC .dat files but no good idea of how to remove them.

Any thoughts on how to get started with a clean up will be greatly appreciated.
-- rke

Answer:very bad UAC and getting worse [Moved]

As no logs have been posted, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.==>PLEASE DO NOT NOW POST LOGS<== unless a log is specifically requested.

3 more replies
Relevance 34.03%

Hey everyone.. you have always been fantastic in the past and helping me to fix my pc. I am in way over my head on this one though, and do not know what to do.

I woke up this morning to find a big black and red message on my screen that said :

Your System Is Infected!!!

I knew right away it was some kind of Malware, and it kept directing me to install it. I know better and tried to right click it off, but it did not work, more and more bubbles and pop ups came up. It disabled my System Restore and my Firewall, and I get error codes when I try to go online through Firefox. I did get one AVG scan in, and it found 36 items and said it healed them all, but upon reboot, this monster is still here.

It will not allow me to run MalwareBytes or AVG now, it sends me error codes.

I am seriously lost now..I am a teacher and also a student who just started this semester's online classes...please help me asap. I am usually very good at working with you all. I have even gotten good at helping myself, but this is a bad one, I am afraid.

I will be anxiously waiting for a reply..thanks so much.

Answer:Help, worse infection I have ever had

To add.. I cannot access the internet at all on it now. It redirects to fastbrowser search and says nothing can be found, etc. I am on my fiances pc which is in the same room if that helps.

10 more replies
Relevance 34.03%

I have succesfully removed viruses in the past, and have been able to use system recovery to get around an issue not too long ago, but now I have some periodic issues causing my PC to run slow at times and even giving me coniptions with opening some programs. I cannot use Mozilla because of a ruined proxy server setup, I have to go without a proxy for Internet Explorer, and my Malware Bytes program is hit and miss. (Sometimes it opens and scans, other times it gives a failure message and I have to reload it.)

Bottom line: I got stupid and visited some sites, where my SpySweeper proteced my PC, but I got hit bad going into a site for my daughters animal husbandry class. (My wife and kid watched as a photo download of a giraffe crashed the whole deal and locked me out of Mozilla.) This time System Recovery did not help, so as mentioned, I reloaded IE without the proxy sever option and have been cruising along at an OK pace until just recently, where sometimes sites take FOREVER to load and I cannot always get Malware Bytes or Hijack This to work properly or show any issues.

If I clean everything out each time I start using the PC, it works fair at best. Any ideas??

More replies
Relevance 34.03%

I have several issues and am completely perplexed and need direction and your expertise badly.
 
Vista Home premium, 64 bit....SP 2.
AVG ...detected nothing
MBAM..nothing
SuperAntiSpyware took an hour to removing 256 threats...usually takes 1-2 minutes.
 
Issues I am having.......
  * connecting to some/not all websites in IE.  Can connect to them in Google Chrome which I used out of desperation as I have it downloaded but never use it.
 
  *occasional 502 errors when clicking on a topic
 
  *back button is blocked by constant facebook/twitter plugin.
 
  *Windows Mail was wiped clean, and can no longer connect to server.  Yet it left my contacts in Mail intact.
 
  * slow and at times nonresponsive to some websites, especially Yahoo.
 
I do have a clean laptop (which does receive my Windows Mail) for backup use and research.
 
My computer knowledge, well I can follow directions pretty well.
 
My Windows Mail I am not worried about at this point, am trying to work with Verizon to restore it, but wanted to list everything I could remember.
 
Any help will be greatly appreciated.
 
Mike

Answer:Various symptoms and keeps getting worse

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click mbam-se... Read more

19 more replies
Relevance 34.03%

http://www.bleepingcomputer.com/forums/topic400223.html

My problem with the computer just gets worse. The browser gets redirected. I can't load IE. The computer is running very slow. Any help would be appreciated.

More replies
Relevance 34.03%

Hi there! While I've been lurking here in the shadows learning from all of you, a nasty virus has decended upon my computer. It's the dreaded FBI virus, even though the pictures do not look exactly like the ones posted on this site, it's a moneygram, pay up or this will stay on your computer forever virus.

So I did some research here on what to do, but it's getting worse. Here are the steps I've taken:

Using Windows 7, Premium Home edition
Boot in safe mode with networking.
Downloaded Rkill and ran it.
Downloaded emsisoft antimal and ran it.
It quarantined 7 threats - 6 high risk, 1 medium risk.
I selected for it to quarantine, but it gave me a message that there was an error and it could not quarantine 3 of the files.
I tried to delete the items out of the recycle bin and it gave me the message that my recycle bin was corrupt.
I was trying to figure out what to do next when the white FBI screen took over in safe mode.
I rebooted in safe mode again, and every time, the FBI screen appears.
I'm also getting the message that emsisoft has encountered an error and it cannot load.

Please help. I'm at my wits end.

Answer:FBI Virus - getting worse!

Can you boot into safemode with networking?

Do not run any other tools when you are being assisted.

11 more replies
Relevance 34.03%

Hello, thank you for taking the time to view this. For some reason some links don't work on my home computer but do at my school. I tried them in both FireFox and IE, and nothing worked.

Links like:

Grinler's HiJackThis Tutorial

Said: "Not Found

The requested URL /forums/HijackThis_Tutorial_How_to_use_HijackThis_to_remov e_Browser_Hijackers_and_Spyware-tut42.html was not found on this server."

But they work perfectly at my school, or at my friends house. I'm starting to think its Mal-Ware vs. a problem with my browsers.

But I have the best of the best (pretty much every program Geek to Go admin's and staff has recommended) Anti Mal-Ware applications, and have been scanning non stop all day, and yesterday. Some have detected 1 or 2 problems, others have not, but nothing is better. I think things are getting worse, because now things are slowing down a lot, and programs are taking longer to open up.....and such.

So here is a HiJackThis Log:


Edit by chaslang: Inline HJT log removed. READ & RUN ME sticky not followed.


Help me please this is pissing me off
 

Answer:Serious Problems getting worse

Welcome to Majorgeeks!

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, renaming, running, and posting HijackThis logs as attachments.
Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
Make sure you check version numbers and get all updates.
Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
Downloading, Installing, and Running HijackThis​Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.​
When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
CounterSpy - only for Windows XP, 2K, & NT users
AVG Antispyware log - ONLY IF NEEDED you were not able to run CounterSpy. - only for Windows XP, 2K, & NT users
Bitdefender - from step 6
Panda Scan - from step 6
runkeys.txt - the log from GetRunKey.bat
newfiles.txt - the log from ShowNew.bat
HijackThis

NOTE: You can o... Read more

49 more replies
Relevance 34.03%

Okay, so I have an ASUS Barebone Pundit P1-PH1 system, with a gig of ram, 3ghz processor, and lots of experience.

I usually have no problems getting rid of spyware, malware, etc, especially after looking in these forums countless times.

I have Rkill, mbam, dds, and hijack this. In case that helps.

Anyways, I seem to have aquired some viruses or malware or SOMETHING that is really wearing down my computer. I'm getting pop ups on firefox, i have 5 new processes all running under the name of lsass, im having some really slow times where it seems like nothing will work, my browser freezes, now im getting these error messages having to do with windows .net framework, and plenty of other problems.

My big thing is this. I have been trying to work on fixing everything, but im starting to get worn down. I cant even dfo a system restore point now, everytime i do it goes through the whole process and restarts the comp, but then boom. "System could not be restored to that point blah blah blah"

Please help. I'll upload whatever logs are needed, just please help me get my computer running like it once was :D

(And i'm sorry if this is the wrong forum :/, also I apologize for the grammar and spelling mistakes, its late, the babys crying, and im exhausted lol)

Answer:Need help!! Problems only getting worse!

Why is it that noone is helping me? Come on, I have so much faith in the techs of this site, what the heck

4 more replies
Relevance 34.03%

Hello.

I need your help guys. I have some kind of virus on my computer and i cant delete it. I cant run any program and a cant run " RUN m first pograms all i do virus desabeles the program. Right now i am running my computer in safe mode, and trying to turn on the Search and Destroy program but once i do it it tell me "Error Invalid floating point operation". Whats seems now i can only run SUPERAnitSpyware... Milware bites is messed up too. Whan i press scan it scans my computer and once scan is finnished i pre3ss delete all selected and it sends my computer to lala land. ( different colors start to pop out and then blue screen of death ). Whan i start my pc windows is not starting explorer.exe. Just to let u know this happend in 2 days. Things like "AntiVirus 2009, and all the things from that category showed up before this happend, tried to delete them, but nothing was a succes.

Please help me and sorry for my english.
 

Answer:!Please HELP... fast before something worse happens

This might help.... Malwarebytes worked.... here is the log from that
 

13 more replies
Relevance 34.03%

Sorry if this is too long...Starting Problem:
xp Home has been slowing down for about 6 months. IE pages would close line by line, and there was always a slight sound delay. Thought I could help myself - Here's what Ive done and the results ( all suggested by forums):
1. Downloaded Drivermax to update drivers. Before I could finish updating I lost my Wintv2000. Had to start undoing to get it back. I know this screwed up other stuff too.
2. Did all windows updates. This gave me the res:\\ieframe.dll error. Could not access my connected internet. After so much fiddling and changing settings, I decided to do a system restore.
3. Did a system restore ( after learning thru all this that it wasnt even turned on!?!) On reboot it said it "could not load personal profile" , so I lost all saved data. Undid the restore back to where I was.
4. Now the error changed to res:\\ieframe.dll\dnserrordiagoff. Started undoing the windows updates til I found it - for me it was KB960714. Now I dont know which updates to do.
5. Lost Google toolbar during this. Twice it asked to repair, but it still does not work.
6. Ran CCleaner ( ok - shoot me now). Did do a backup. Cleaned everyting except tv entries. Im sure this has mucked this further, yes?

NEW PROBLEMS
monitor goes black after random periods of time. On reboot it does chkdsk. Computer still slow. Systray icons load in different order every day.

7. Started at your READ ME OR YOU DIE page. Yes, I have ... Read more

Answer:Everything I do makes it worse!

Welcome to Major Geeks!

Actually none of this really sounds like malware problems. Yes you could have malware, but the problems you are mentioned do not sound like malware. Sounds like you problems within your Windows OS.

Attach the logs requested in the READ & RUN ME. Yes ComboFix too. Check to see if MBAM made a log. If not, just skip it for now.
 

11 more replies
Relevance 34.03%

I tried everything in my power to get rid of this virus. This the third time I've been infected with this virus. Any help will be appreciated.Logfile of HijackThis v1.99.1Scan saved at 3:55:09 PM, on 5/21/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16441)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\brsvc01a.exeC:\WINNT\System32\brss01a.exeC:\WINNT\system32\LEXBCES.EXEC:\WINNT\system32\spoolsv.exeC:\WINNT\system32\LEXPPS.EXEC:\WINNT\Explorer.EXEC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\WINNT\system32\CTsvcCDA.exeC:\Program Files\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton AntiVirus\IWP\NPFMntor.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\WINNT\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.... Read more

Answer:Vundo Getting Worse

Welcome to the BleepingComputer HijackThis Logs and Analysis forum Download KillBox,unzip/extract it to your desktop.http://download.bleepingcomputer.com/spyware/KillBox.zipStart up Killbox and place a check in 'Delete on Reboot'.In the 'Full path of file to delete' box,copy and paste:C:\WINNT\svhost.exeThen press the red button with the white cross.It will then provide a window for you to confirm the delete.Next it will ask if you now wish to reboot,select YES.Allow it to reboot.If it does'nt reboot automatically,reboot manually.****************************Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This will change from what we know in 2006 read this article: http://www.clickz.com/news/article.php/3561546You are well advised to remove the program now. Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present:ViewpointViewpoint ManagerViewpoint Media PlayerThen restart your pc.****************************Please download VundoFix.exe to your desktop.Double-click VundoFix.exe to run it.When VundoFix re-opens,click the "Scan for Vundo" button.Once it's done scanning,click the "Remove Vundo" button.You will receive a prompt asking if you want to remove the files, click "YES".Once you click yes, your desktop will go blank as it starts removing Vundo.When completed,it will... Read more

9 more replies
Relevance 34.03%

Hi,Somehow I am being blocked from creating any log files and from running the suggested program "DSS.exe". My browser has been hyjacked. Things are progressivly getting worse. I ran the scan with Hyjackthis and I was able to save a copy that I sent to Trend for a comparasion to other users but I was not able to save it to a log file and I was not able to fix the log file because I could not see the text to erase it plus I could not save the file with another name. Here it is === I sure hope you can help. VictoriaIndex % of PCs with item Code Data1 0.2% O1 ::1 localhost2 0.2% O13 java script:void(0)3 0.0% O16 {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst...ctDetection.cab4 0.0% O17 NameServer = 205.188.146.1455 0.8% O2 Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll6 0.5% O2 Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll7 0.2% O2 SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll8 0.1% O2 (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll9 0.0% O2 Spybot-S&D IE Protection - {... Read more

Answer:Please Help-it's Getting Worse By The Minute

HelloApologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having would appreciate you letting us know If not please perform the following below so I can have a look at the current condition of your machine.Thanks and again sorry for the delay.Please download Deckard's System Scanner (DSS) and save to your Desktop.alternate download siteDSS will do the following:Create a new System Restore point in Windows XP and Vista.Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.Check some important areas of your system and produce a report for an analyst to review.Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.You must be logged onto an account with administrator privileges when using.Close all applications and windows.Double-click on dss.exe to run it and follow the prompts.If your anti-virus or firewall complains, please allow this script to run as it is not
malicious.When the scan is complete, two text files will open in Notepad:main.txt <- this one will be maximizedextra.txt <- this one will be minimizedIf not, they both can be found in the C:\Deckard\System Scanner folder.Please copy (Ctrl+C) and paste (Ctrl+V) the c... Read more

4 more replies
Relevance 34.03%

Ok I had another thread open so I appologize if this new one shouldn't have been made. I just freaked out cause i have a major problem that i think isn't related to the other one. (At least i think it isnt) I logged on to my computer and noticed this program force-fuc*ed me into downloading it. It was called Create A Monster.....Im pretty sure u've seen someone else with this problem before. Anyways, ever since then, my computer has gone EXTREMELY slow...At least when i log on to my User account. And i do mean EXTREMELY slow. I dont know if this has anything to do with createamonster.exe.....but im really wanting to finally get rid of all this crap on my computer. Im getting fed up with it and im about to just throw my hands up in the air and format...and i dont wanna do that...Thanx people for ur time....Here's my HIJ log.


Logfile of HijackThis v1.98.2
Scan saved at 9:28:13 PM, on 10/27/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\M-Audio Ozone\Install\Ozinst.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\AutoUpdate\AutoUpdate.exe
C:\WINDOWS\System32\scn... Read more

Answer:Woa!!! Computer worse than ever!

Hi
Make sure you have already run Adaware, Spybot S & D(check for updates) as these will do a preliminary clean first.Some files below may not be present after running the above programs.

Then....
Turn off your System Restore.(if using xp) SEE HERE Reinstate it when your log is cleaned.Close your browser window and run hjt in safe mode... HOW TO RUN SAFE MODE and have "Hijack This" fix the following by placing a check in the appropriate boxes and selecting "fix checked".
Folders that have been highlighted in RED will need to be uninstalled.Check first as some folders maybe uninstalled via the Add/Remove program. Files highlighted in BLACK will need to be removed from your hard drive. Make sure to have your system set to show hidden files and folders.. HOW TO SHOW FILES ..Please post a new log when finished...

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - C:\Program Files\SurfSideKick 2\SskBho.dll
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O1 - Hosts: 69.20.16.183 ieautosearch
O2 - BHO: (no name) - {01C5BF6C-E699-4CD7-BEA1-786FA05C83AB} - C:\Program Files\CxtPls\CxtPls.dll
O4 - HKLM\..\Run: [SurfSideKick 2] C:\Program Files\SurfSideKick 2\Ssk.exe
O4 - HKLM\..\Run: [WebRebates0] "C:\Program Files\Web_Rebates\WebRebates0.exe"
O4 - HKLM\..\Run: [AutoUpdater] "C:\Program F... Read more

1 more replies
Relevance 34.03%

Thank you in advance for taking the time to review this and offer any help ....

a few of the problems windows has been having includestart menu stalling out
computer running really slow with every program
rtclick-->send to freezing up the system
cannot "save as" when downloading a file with mozilla
along with svchost.exe pop ups from McAfee


DDS (Ver_09-10-26.01) - NTFSx86
Run by cbellson at 12:05:45.25 on Mon 11/09/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2046.838 [GMT -6:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: McAfee VirusScan Enterprise *On-access scanning enabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\SYSTEM32\DWRCS.EXE
C:\Program Files\McAfee\... Read more

Answer:Windows is getting worse

Hi,

Please do the following:

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


Click on Yes, to continue scanning for malware.
When finished, it sh... Read more

2 more replies
Relevance 34.03%

Very recently removed "Security Tool" virus but now have contracted sdra64.exe, know how to delete it, but the problem has got mysteriously worse.
When logging in on Admin(or any) account, it logs me straight back out, how can I get my windows XP to stay logged on, long enough to solve the problem? (It logs me out a second after I log in, even in safemode)
I can't run it with the command prompt because I can't GET to the command prompt otherwise I'd use it to get to the system restore screen, help?

Answer:Sdra64.exe gotten worse

Hi,

Please do the following:


I hope you have acces to a PC that can burn CD's



We will need to make a BOOT CD

Print these instruction out so that you know what you are doing.

Two programs to download

First

Please download ISOBurner and save it to your desktop. This program will allow you to burn OTLPE.ISO to make a bootable CDDouble click the ISOBurner set up icon to install the program, from there on in it is fairly automatic.
There are Instructions for the iso burner here if you need them.

Second
Download OTLPE.iso save it to your desktop. Now burn OTLPE.iso to a CD using ISO Burner. {NOTE: This file is 292Mb in size so it may take some time to download.)
When downloaded double click OTLPE.iso > this will then open ISOBurner to burn the file to CD

Reboot the infected system using the boot CD you just created.
Note : If you do not know how to set your computer to boot from CD follow the steps here
Your system should now display a REATOGO-X-PE desktop.
you will find an icon on the desktop called OTLPE > Double-click on the OTLPE icon.
When asked "Do you wish to load the remote registry", select Yes
When asked "Do you wish to load remote user profile(s) for scanning", select Yes
Ensure the box "Automatically Load All Remaining Users" is checked and press OK
OTL should now start. Change the following settingsChange Drivers to SafeList

Press Run... Read more

4 more replies
Relevance 34.03%

Got a PC here that the lights on the MOBO come on, when you hit the power button, it clicks like it should, the green light comes on, but when you release the button, it goes back off. Initially I thought this was a PSU problem, but now I'm thinking maybe the power switch itself.

Answer:PSU, switch, or worse

Check the front panel header, to make sure the power switch wire is connected properly.

2 more replies
Relevance 34.03%

Hi,

I'm experiancing some very strange behaviour with my Asus V9280S-TVP and WINXP. If I load up a game or any software that's in any way graphics heavy my system performance decreases steadily, strange patterns start appearing on buttons and lables, textures become distorted and discolored, and then a drop out to desktop with an error message stating that "Windows has recovered from a device failure, blah blah". Screen resolution is set to something very low and color depth looks like 8bit or lower color. Shortly after the displaying of this message the system becomes unresponsive and I must power down(not much of a recovery). This problem takes a variety of differant time to manifest itself depending on the game. If I restart the system immediatly as the POST screen ticks over I can see out of place characters and similar graphics error to my ingame ones. However if I wait a few minutes before restart this does not occur and system starts up fine and runs fine untill I decide to try out another game or even 3dsmax. I've pretty much tried every driver there is for the card and found the vast majority of them actually decreased the performance of the card even further than the performance with the inbox driver (v31.40).I suspect overheating but I'm not sure if these problems are symptoms of overheating. I have considered redoing all the thermal connections to headsink with new thermal paste, but I've decided to put it off untill I get an opinion as the heatsink ... Read more

Answer:Overheating or Worse

have it being doing that before as well?

or u have just installed the card?

try newest version of forceware
2: if still doesnt works, some transistors might be faulty.

2 more replies
Relevance 34.03%

There is an ongoing study out now about the use of technology and the impact it has on the human condition. Always being available, whether it is through IM's or Email os TXT messaging, is a major source of stress... And IQ lowering. For people who spend all day on the computer, messaging peopel and emailing people, their IQ lowers (approimately) 10 points. To put that in perspective, smoking pot only lowers it 4 points.

This is for all you people out there who say that smokign weed is the worst thign in the world, but you spend all day in front of the computer. Bunch of hypocrites.

Stoners: 1, You: 0

http://www.sfgate.com/cgi-bin/articl....TMP&type=tech

Answer:Technology worse than pot?

I don't say smoking pot is the worst thing in the world, I just don't do it. Little would change with the legalization if it. Its not like they strictly enforce the marijuana laws now. Also, it is talking about using instant messaging services and email while on the job...not merely using the computer a little too much.

8 more replies
Relevance 34.03%

Hi,
I have a customer who has a Compaq 7151wma which is running a problem plagued version of Windows ME.

My customer has the “Windows XP version 2000 Upgrade” and I am thinking of either upgrading or repartitioning the hard drive, formatting and doing a new install.

I am relatively new at computers although I have upgraded a few computers to Windows 98SE and am somewhat familiar with partitioning and formatting.

I am currently doing computer repair for a living in a small town in Mexico. This customer is very well connected socially and my reputation is riding on this project going smoothly.

First when the box says “upgrade” I assume it means I can do a fresh install on a clean hard drive not just run over the existing OS, is this correct?

Second I know this was one of the first versions of XP to come out, is it worth using? Are there better versions out now that make it wiser to buy the new version rather than go through XX MB of upgrades?

Is there any proprietary software on the Compaq 7151 wma that will prevent me from having a successful install if I were to format the hard drive?

I have used the Windows XP upgrade advisor and it reports this.......

HARDWARE THAT IS INCOMPATIBLE OR MAY NEED ADDITIONAL FILES-

Hard disk controllers - USB Optical storage Device (not currently present)
USB to ATAPI Adapter (not currently present)

Network Adapters - Wan Miniport (ATW)

WDM Modem Enumerator - Intel 537 Data Fax V.90 Modem

SOFTWAR... Read more

Answer:Bad Win ME to worse WinXP?

well you should probably ask the guy whether he wants it formatted or not but you should probbably uninstall ME, then install XP because Win ME has a lot of bugs
about 2 hours before i posted this i installed a backup of XP (from upgrade CD) and it only required me to put in the 98 CD for the time it needed to verify that i have an existing operating system, from there i had to replace "C:\Windows\System32\hal.dll" (copying from the Backup XP)
if you really prefer not having ME first just run the upgrade and it should prompt you for a Windows CD of previous Version

as for the errors they may or may not cause faults when you actually install XP but Drivers can always be a big issue with XP

9 more replies
Relevance 34.03%

Is it just me or do they make hotmail worse every time they update it?
If you have unread emails, filter the inbox to view the unread emails. Select an email off the list and up it comes, a second later hotmail suddenly realises that the email is now "read" and navigates you back to the list sans the email. If you didn't manage to actually read the email in the 1 second you were given then it's tough.

Grrrrr!!

Answer:Hotmail keeps getting worse?

Doesn't do this to me when I go there. I find the hotmail interface loads much quicker then it did! I'm usin IE8.

7 more replies
Relevance 34.03%

I have recently assembled a new system and it was working fine until a week ago i noticed that sometimes when i am not at the system it had restarted and now its getting worse. It turns off and turns back on with a very little gap sometimes hours sometimes just after i turn it back on after the shutdown (it turns off immediately without any warning or shutting down screen). When it turns off, the pcs power turns back on like as if it restarts but nothing would happen, even after holding the power button to force shutdown and then turn back on it wont start but twice or so it loaded up till the boot menue i guess but thwn it would go blank. i would have to cut the power and turn the power back on so that it turns on. It happens when i watch video and even when i play games also while the pc is idling. Few days ago before it was this worse when i was using my system, a bluescreen appeared and it said critical process died or something like that..
My system spec is:
Asus Z170 pro gaming
Intel core i7 6700 3.4GHz
Power supply Cooler master 600w
Asus GTX960 2GB black
Kingston HX426C15FB Hyperx 8gb x2
Cpu cooler fan cooler master 120v

Answer:pc keeps turning off and getting worse

Run Bluescreen view
post the results back on this page.
Its possibly a bad driver
1]: [click here

10 more replies
Relevance 34.03%

Help. Internet explorer keeps freezing on me and when it does, I can't shut down iexplore.exe in the processes. I have a feeling this part of a larger problem since I've had a lot of problems with Vista Home Premiere since I bought this PC a few months ago.
I've run virus scans with both AVG and PC Tools. And scanned for malware with Adaware. (my windows defender will not update.) I just installed hijack this and when I run it, I get 2 error screens before the log.

The first error reads "For some reason your system denied access to the hosts file. If any highjacked domains are in this file, Highjack this may NOT be able to fix this"

The second error reads "An unexpected error has occurred at procedure:ModMain_CheckOther1Item()Error#75-path/file access error

Then I get my log file. Also, I don't know if it is related but I tried to download and install Mozilla Firefox yesterday and I kept receiving an error message saying it could not install.

Here is the log file from Highjack this:

Logfile of HijackThis v1.99.1
Scan saved at 1:58:25 AM, on 2/21/2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.... Read more

More replies
Relevance 34.03%
Question: Bsod got worse

Hello, my laptop is not turning on after this error. I used to see this error almost every other day. I thought it's nothing serious.. I even don't see any battery light (on laptop) when I connect it with the charger. I really don't understand what's the main problem.. I bought the laptop 9months ago. I can't say if I need to change the battery. It's aspire v17 nitro. One last thing I want to add is I'm having this error after upgrading to Windows 10 from Windows 8.1. Please someone help me

Answer:Bsod got worse

Hi Zarminaehsan,

This sounds like a bug due to the upgrade.
I suggest to perform a clean install and let me know how it goes.
Windows 10 - Clean Install - Windows 10 Forums

1 more replies
Relevance 34.03%

Hello and thank you in advance.

My mother-in-law's lap top has a sudden problem.

Window's XP

Computer boots up, and log in screen appears. There are two account login options: Nana & Nicole (granddaughter). Click on either one, it say loading personal preferences, then logs off, back to log in screen.

Please help!

Thanks!!

Jeff

Answer:Mother-In-Law's lap top (what could be worse)

Hi .

Laptop manufacturer and model?

Do you have a Microsoft XP CD?

Louis

3 more replies
Relevance 34.03%
Question: Trojan and worse?

I discovered I had a problem when I couldn't keep "Show hidden files and folders" active in Folder Options. I re-download Avast AV and ran a scan and found some bad stuff. For the past 24 hours I've been reading info on the Web and trying to fix things on my own, but I need help, please. Thanks very much in advance!
Here's my DDS log and my attach.txt is attached.
DDS (Ver_09-02-01.01) - NTFSx86
Run by Kiko at 4:08:53.71 on Wed 02/11/2009
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.339 [GMT -6:00]

AV: avast! antivirus 4.8.1335 [VPS 090210-0] *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\taskswitch.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\SUPERAntiSpyware\SUPERAn... Read more

Answer:Trojan and worse?

Hello. I am PropagandaPanda (Panda or PP for short), and I will be helping you.Disable Realtime ProtectionAntimalware programs can interfere with ComboFix and other tools we need to run. Please temporarily disable all realtime protections you have enabled. Refer to this page, if you are unsure how.Download and Run ComboFixDownload Combofix by sUBs from any of the links below, and save it to your desktop.Link 1, Link 2, Link 3 Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix. Refer to this page if you are not sure how.Double click on ComboFix.exe and follow the prompts. If you are using Windows Vista, right click the icon and select "Run as Administrator". You will not recieve the prompts below if you are not using Windows XP. ComboFix will check to see if you have the Windows Recovery Console installed.If you did not have it installed, you will see the prompt below. Choose YES.
When the Recovery Console has been installed, you will see the prompt below. Choose YES.
When finished, ComboFix will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.Download and Run Scan with GMERWe will use GMER to scan for rootkits.Please download GMER.zip to your desktop from any of the links below:LINK1, LINK2Right click on GMER.zip and select "Extract All".Close all other open p... Read more

14 more replies
Relevance 34.03%

I have a series of problems. When booting up, a bright green light rises from bottom of the normally black Windows boot-up screen. Also, I am no longer able to prompt Safe Mode when I hit F8 during the start up. My screen is blurry (to the point that I can barely read text) and flickers. CPU is VERY slow (typing seems to make it slower). I have Symantec Antivirus and Spyware Doctor, but I don't believe either is working properly. Please help.
DDS (Ver_09-02-01.01) - NTFSx86
Run by Tom H at 8:09:49.23 on Wed 03/11/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.298 [GMT -5:00]

AV: Spyware Doctor with AntiVirus *On-access scanning enabled* (Updated)
AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMg... Read more

Answer:Possible virtumonde or worse

Hello.Install Recovery Console and Run ComboFixDownload Combofix from any of the links below, and save it to your desktop. Link 1Link 2 Link 3Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix. Refer to this page if you are not sure how.Close any open windows, including this one.Double click on ComboFix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware. If you did not have it installed, you will see the prompt below. Choose YES.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.Note:The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help youshould your computer have a problem after an attempted removal of malware. It is a simple procedure that w... Read more

3 more replies
Relevance 34.03%

DDS (Ver_09-12-01.01)Microsoft Windows XP ProfessionalBoot Device: DeviceHarddiskVolume1Install Date: 18/06/2009 4:43:21 AMSystem Uptime: 12/02/2009 10:09:40 PM (7034 hours ago)Motherboard: MSI | | MS-7374Processor: AMD Athlon™ 64 X2 Dual Core Processor 5200+ | CPU 1 | 2700/200mhz==== Disk Partitions =========================A: is RemovableC: is FIXED (NTFS) - 466 GiB total, 375.161 GiB free.==== Disabled Device Manager Items ================= System Restore Points ===================RP100: 04/09/2009 3:12:42 AM - System CheckpointROOTREPEAL ? AD, 2007-2009==================================================Scan Start Time: 2009/12/03 00:04Program Version: Version 1.3.5.0Windows Version: Windows XP SP3==================================================Drivers-------------------Name: 1394BUS.SYSImage Path: C:WINDOWSsystem32DRIVERS1394BUS.SYSAddress: 0xB80C8000 Size: 57344 File Visible: - Signed: -Status: -Name: Aavmker4.SYSImage Path: C:WINDOWSSystem32DriversAavmker4.SYSAddress: 0xB8340000 Size: 19072 File Visible: - Signed: -Status: -Name: ACPI.sysImage Path: ACPI.sysAddress: 0xB7F79000 Size: 187776 File Visible: - Signed: -Status: -Name: ACPI_HALImage Path: DriverACPI_HALAddress: 0x804D7000 Size: 2150400 File Visible: - Signed: -Status: -Name: afd.sysImage Path: C:WINDOWSSystem32driversafd.sysAddress: 0xB43BE000 Size: 138496 File Visible: - Signed: -Status: -Name: AmdK8.sysImage Path: C:WINDOWSsystem32DRIVERSAmdK8.sysAddress: 0xB7745000 Size: 57344 File Visible: - Sign... Read more

Answer:help ive tried everything and i think im making it worse!!!!!

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 34.03%

I have a Toshiba Satalite laptop (from around 2001) running Windows XP Pro. I bought it 2nd hand. About a month ago, we came down with a few viruses because my Windows Live One Care subscription ran out so I was naked for awhile...a friend bought Webroot, after installing program...within a couple of minutes every thing was back to good. Within 2 weeks, Total Security was making more of a mess than ever. So much so that I uninstalled Webroot and figured I would go with CA security suite only for it to load with errors, therefore it wouldn't do anything...Now it will let me connect to the internet but if I try to access my e-mail it says access denied. I am wondering if I am going to have to erase my hard drive (which might br harder than anything I've thought about doing. I have another computer that I am using for now but it's very slow! Can I download anything, put it oin a disk and run it on my laptop to clean it up? I don't know how to go about erasing/ (re/formatting). I have a disk that I made that says back-up from 2007. Would that have all numbers/files neccesary as I didn't get an original disk. I also found a 'registration number' file...Any and all help will be greatly absorbed.   

Answer:2nd time is far worse!!!

do you have your xp install disk and cd key?if not do not reformatdo you have anything important on it?did you try malware bytes super anti malware?also try avria and or AVGp.s. i am tring to use free soultions()

14 more replies
Relevance 34.03%

Kept trying to power up the computer-see latest posts:   http://www.computerhope.com/forum/index.php/topic,87693.0.htmlAll of a sudden the motherboard started to power up, and the chip that reads "Nividia nForce" next to the graphics card started to smoke.  Shut down the system.Not good. 

Answer:Ouch---When bad goes to worse

The good news is we have a new suspect!  Sorry about the vid card.

4 more replies
Relevance 34.03%

Hello... my sisters computer is totally messed up..

everytime I scan with adaware my sisters computer crashes once it finds something in the system32 folder, I managed to cancel the scan before it crashes and saw the name winfixer pop up in files found right b4 it crashed....

I also keep getting popups on her comp saying "your computer may be infected with blackworm virus!" and then it takes me to a antivirus site that wants me to buy thier stuff....

here is her HJT log...


Logfile of HijackThis v1.99.1
Scan saved at 10:05:08 PM, on 2/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\System32\snmp.exe
C:\windows\Explorer.EXE
C:\windows\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\AOL\1139284886\ee\AOLSoftware.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
c:\program files\common files\aol\1139284886\ee\aim6.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\windows\system32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe... Read more

Answer:Winfixer? or something worse?

Hi and welcome to TSF

I'm Jet Ian, and I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem as soon as possible. Please be patient with me during this time.

We also recommend that you Subscribe to this thread so that when I or the other experts replied, you will get an email notification. To do this: Click on then and make sure you set it to Instant notification by email.

7 more replies
Relevance 34.03%

A few weeks ago I let a random person from this video game I play (Diablo 2) into my computer using team viewer 9. He said he was going to help me set up a bot to run the game..well he installed something alright.. I had no idea what it was that he put into my computer and I can't find it now but he was able to take my password that day after he told me to relog into Diablo 2 but at that point he was still in my computer so I figure once he was out i might be safe.
I ran malware bytes, avg antivirus and spybot search and destroy, I thought I got rid of any key logger that he might have installed and began using my computer regularly again. Nothing happened over a period of two weeks however just last night I saw him in the game(Diablo 2) and he was laughing about private conversations I was having with my girlfriend... So he is obviously still in my computer and has seen soo much information such as all my passwords for every website I use, where I live, my debit card number and etc.
I would just reinstall windows 7 altogether but I had a friend "build" my computer and this dude didn't even install a CDROM!! And I guess he used a bootleg version of windows even though I had the windows 7 cd?!?
Any ideas what I can do... Should I just throw away my computer??

Answer:I've been key logged or worse!!

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/517181 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 34.03%

I have a friends computer that won't allow the internet browser to function properly and won't play youtube videos. I noticed the following in the task manager: (refer to screenshot060, screenchot090). In which the things that look a little fishy like csrss.exe I try to close them and it comes back as access denied. When I restart the computer it says "Unable to set hook?" with an Nvidia header.  Any help will be much appreciated!![recovering disk space, attachment deleted by admin]

Answer:Virus or something worse?

Sorry I ran out of room on the OP. Also sorry for the size I would use an image host but the virus(s) won't allow it.[recovering disk space, attachment deleted by admin]

14 more replies
Relevance 34.03%

What brought me here is a problem reinstalling my adobe CS1 - I had problems with acrobat and had to uninstall the entire suite.  I was unable to reinstall...it got just so far and then just 'hung'.  I spoke the the Dell cust. svc person who insisted I had to reinstall windows (which is a last resort).  I thought I may have an intruder on my computer so I followed all the directions or what to do BEFORE I post my question...all the downloads, scans and logs.  I am currenly running windows xp professional on a dell laptop.  I am posting my logs and hope someone can HELP ME!! [recovering space - attachment deleted by admin]

Answer:do I have a virus ...or worse?

Open Hijackthis and select Do a system scan only.Place a check mark next to the following entries: (if there)O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)O3 - Toolbar: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - (no file)Important: Close all windows except for Hijackthis and then click Fix checked.Exit Hijackthis.I don't see anything malicious, have you tried to do any repairs to windows?Here are a few methods to try.Do you have an XP CD?If so, place it in your CD ROM drive and follow the instructions below:Click on Start > Run and type sfc /scannow then press Enter (note the space between scf and /scannow)Let this run undisturbed until the window with the blue  progress bar goes awaySFC - Which stands for System File Checker, retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file.If you want to see what was replaced, right-click My Computer and click on Manage. In the new window that appears, expand the Event Viewer (by clicking on the + symbol next to it) and then click on System.----------1. Download IEFix.zip and run it.2. Click the Apply button.3. You'll be prompted for the Operating System CD or the Service Pack Files location.4. Once finished Restart Windows. If you�... Read more

1 more replies
Relevance 34.03%

Before when i had a different monitor i had 250-300 fps on CS:GO on max settings, now i just get 20-120 fps and it usually drops to 60 fps. Could this be a problem with the monitor or just the hardware.(I have checked VSync and also this problem applies to other games)

Answer:Got a new monitor but now my fps is worse???

Monitors have very variable response times - some just a few milliseconds, others much higher. It might be worth checking out the specs of your old and new monitors. In theory, though, that shouldn't affect fps - monitor response time would only affect how quickly what's on screen reacts to any action you take (e.g. shooting).

1 more replies
Relevance 34.03%

Hello!

Running windows XP.

Had Google redirects, ran SuperAnti Spyware, found vundo but couldn't clean. Ran MAM same results. Now today several new problems. SAS and MAM show no infections but I suspect otherwise. My McAfee icon vanishes when I hover over it. I can't access this website (bleepingcomputer) on the infected computer. On startup, the screen looks fine then goes blank for a second then reappears with anti-spyware icons gone. Except for the volume control, the lower left toolbar is empty. I tried to install the hijackthis version you have elsewhere on this site but the computer won't install it.

Your help is much appreciated.

Answer:Infected and getting worse

Please download Dr.Web CureIt, the free version & save it to your desktop. DO NOT perform a scan yet.Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".Scan with Dr.Web CureIt as follows:Double-click on launch.exe to open the program and click Start. (There is no need to update if you just downloaded the most current versionRead the Virus check by DrWeb scanner prompt and click Ok where asked to Start scan now? Allow the setup.exe to load if asked by any of your security programs.The Express scan will automatically begin.
(This is a short scan of files currently running in memory, boot sectors, and targeted folders).If prompted to dowload the Full version Free Trial, ignore and click the X to close the window.If an infected object is found, you will be prompted to move anything that cannot be cured. Click Yes to All.When complete, click Select All, then choose Cure > Move incurable.
(This will move any detected files to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if they can't be cured)Now put a check next to Complete scan to scan all local disks and removable media.In the top menu, click Settings > Change settings... Read more

8 more replies
Relevance 34.03%

Ok so anyone who uses GMX knows that it's often down or bugged in some way or another, but this one just ices the cake:
And since GMX has zero tech support,

Tried saving it, logging out and back in and re-sending.

Recomposed it also to no avail.

What can I do?

Didn't want to change mail provider but I've had so many incidents with them now I'm really considering it. Anybody know any good ones (dont say gmail, my name has already been taken)

Answer:GMX mail is getting worse.

Solved,

Clearing my cookies and restarting my browser resloved this.

1 more replies
Relevance 34.03%

I disliked the nagging every 10 minutes and the forced closer if you weren there to say "No" I don't want to log off at this time.

Just now I was in the middle of a very lengthy and difficult SQL statement and without notice my computer just logged off.. It came back up, just pleased with itself for doing a windows upgrade and the recovery only returned 1/2 of the statement I was building..

I don't mind automatically setting up the update (without it I update maybe every 6 months) but why can't I choose when I want to log off for the upgrade completion?

And is this log off without notification the new way?

Answer:Is W7 worse when doing upgrades?

Go into the Updates and set it to notify you but allow you to do them manually.
This will eliminate the potential problem.

However, I have never had that problem. It always notifies me at the bottom right and counts down from 10 minutes. But, now I have it set as manual, cause I want to see what updates are being done out of curiosity.

And it is generally better to do a fresh install rather than an upgrade.
Win 7 is better about it, but it is just a rule of thumb.
Start fresh and you will have fewer potential problems.

1 more replies