Computer Support Forum

wats the right thing to do?

Question: wats the right thing to do?

ok, this is probably in the wrong section but o well, anyway, when i finally get a job as a computer tech, if i recieve an order for a format and reinstall, but i have a suspicion about the issue or with the person, something having to do with being a stolen computer or an illegal serial/license, do i go on with the order or do I call the manufacturer asking for information or call MS asking who the license belongs to?

Relevance 100%
Preferred Solution: wats the right thing to do?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: wats the right thing to do?

Hello,

Simple answer...it's entirely up to you!!!

Do as you please... .

But if I were you, I'd just do the format anyways! Saves hassle, and probably prevents me from possibly being attacked by suspected computer stealing guy .

5 more replies
Relevance 47.15%
Question: wats up

actually in my boyfriend cell.there is one number which is always flash whenever we open the wats up.we know that contact,but save nahi kiya,but still always vo number aa jata hai,,jab bhi hum wats up on karte hai..reason..is dere any technical problemmm

Answer:wats up

No offense but could you please retype your question in English and not using short forms.
Thanks.

4 more replies
Relevance 47.15%

What is the different between a 512mb kingston ddr 400 CL 3 with a 512mb kingston ddr400 CL 2.5?

I am confused. i have a Gigabyte GA-8IPE775 Pro Intel 865PE chipset. izzit able to take both rame or there is a specific ram dat i cannot use..?
 

Answer:Wats the different?

the latency is less on the 2nd one so it should be quicker. You should use ram sticks that have the same CS value.
 

3 more replies
Relevance 46.74%

I use vlc!

can anyone suggest if theres better? and it shud be free!haha
 

Answer:wats the best dvd player?

I don't know the best, but I have an HP USB drive that works great Not light and portable if you are looking to carrying in your briefcase, but I am happy with it.
 

2 more replies
Relevance 46.74%

hello...i hav ideapad y550 so my problem is that when i am listening music or doing any work and if i turn off the AC power suddenly my lappi speed lowers down n abot  music it sounds like someone lowred down pitch of d music.....so can anybody tellme wat d problem with my laptop???

Answer:please tell me wats d problem

Most likely your power management policy is what is affecting the speed. As for sound... no idea.

2 more replies
Relevance 46.74%

Whats up w task mgr? Win 7 does not appear to be the same, only [systems] report. I wont shut off, and you must hit escape?

Answer:wats up w task mgr?

Rod Gouin TECH said:

Whats up w task mgr? Win 7 does not appear to be the same, only [systems] report. I wont shut off, and you must hit escape?






Sorry, i don't understand what you're talking about.

5 more replies
Relevance 46.74%

hi
i have a DSL connection n recently my PC is getting infected daily by trojans and internet explorer keeps giving errors n closing.
i use grisoft's avg free antivirus and i update it daily. i also use a process guard v3 free edition and also a start page protector. i have been using these for lalmost a year now and they work well.

i am posting HJT log

please help!!!!!!!!!!!

Logfile of HijackThis v1.99.1
Scan saved at 12:44:32 AM, on 2/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
D:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
D:\PROGRA~1\Grisoft\AVG7\avgemc.exe
D:\Program Files\ProcessGuard\dcsuserprot.exe
D:\Program Files\Airtel\NetXpert\bin\sprtsvc.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\carpserv.exe
D:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
D:\Program Files\ProcessGuard\pgaccount.exe
D:\NOSPY.ORG\start1.exe
D:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
D:\PROGRA~1\Grisoft\AVG7\avgcc.exe
D:\Program Files\Airtel\NetXpert\bin\sprtcmd.exe
D:\Program Files\ProcessGuard\procguard.exe
D:\Program Files\palmOne\HOTSYNC.EXE
D:\Program Files\MSN Messenger\msnmsgr.exe
D:\Program Files\Internet Ex... Read more

More replies
Relevance 46.74%

whats the differnece bettween a wired router and wired switch . ethernet?
 

Answer:wats the difference

A router is a device that forwards data packets along networks. In home networks the router is given the IP addy assigned by your ISP and then distributes IP addy's to the terminals connected to network -- most commonly with DHCP.

A switch works much the same way, without the IP address control.
 

3 more replies
Relevance 46.74%

Whats up w task mgr? Win 7 does not appear to be the same, only [systems] report. I wont shut off, and you must hit escape?

Answer:wats up w task mgr?

Originally Posted by Rod Gouin TECH


Whats up w task mgr? Win 7 does not appear to be the same, only [systems] report. I wont shut off, and you must hit escape?






Sorry, i don't understand what you're talking about.

0 more replies
Relevance 46.33%

i was wondering wats the difference between the windows xp x64 version is between the old one
 

Answer:wats the difference between the new windows xp?

Read this page for a start

http://news.softpedia.com/news/Windows-versus-Windows-or-32-bit-versus-64bit-1349.shtml
 

2 more replies
Relevance 46.33%

I want to buy a mobo with a Intel i875P chipset. would a i865P chipset be much different......by the way, is the i915P chipset good? can u OC ur chipset??? [enough Chipset rite!] lol

Answer:Wats the best Intel chipset??????????

I've heard that i875P is good from some people and that it isn't so great from others...so I'm guessing that it doesn't really matter which of the 2 you pick. I have no clue as to if the i915P chipset is any good. I imagine that it is really good, only 'cause the # is higher...I don't really know if you can o.c. the chipset or not.

4 more replies
Relevance 46.33%

Hey everyone i m new to all the overclockign and i was wondering wats the most juice(optimal Perfomance) i can get out of my system
Following are the specs (none is overclocked or modded in anyway)

1.6GHz P4
256MB pc133
40GIG Seagate Baracuda
INTELD845GLLY MOBO

ATI Radeon 9200SE video Card(<--how can i overclock this)
Hercules MUSE 5.1DVD sound card

If you guys can tell me how to get the most outta this system that wud b gr8 thanks alot :giddy:
 

Answer:Wats the most juice i can get out of my system

hmmm

Hey man, looking at your specs im guesing you would not get much out of ur RAM seeing as it is 133MHz and prob unbranded, the cpu however has got potential, i have never owned a P4 so i dunno much bout them but i have seen people get an increase o about 400/500Mhz with 1.4ghz P4's so there is hope! I had a 9200 once an i couldn't get much out of it, got bout 30mhz core increase and 40 mhz ram increase before i started getting artifacts all over the screen!

Tips - If overclocking the CPU invest in a high quality cooler to let you get the most out of it.

To be honest you could do with a complete upgrade but if thats all you got then happy overclocking! let us know how u get on!
 

6 more replies
Relevance 46.33%

I cannot access one of my PC on my network to see its shared folders. even though they are on the same workgroup, have netbios installed and every other service,protcol,etc installed. I have a shared folders on the "un-accessable PC" the pcs that i want to connect through have netbios installed as well and i can acess all of them just fine.


 

Answer:wats causing me not to b able to access my LAN PC?

Check windows firewall, and try pinging the computer.
 

4 more replies
Relevance 46.33%

i want to buy my self a computer with a fast proseser, is relyalbe, so i found these two, plz could someone tell me which 1 is better, the dell xps 700 or the alienware for 899 pounds
 

Answer:wats better dell xps or alienware

wats better writing messages in gibberish or posting them in the wrong places
 

17 more replies
Relevance 46.33%

network:

comp specs 1: 1.63 Ghz Athlon XP 1800+, 512 MB RAM DDR, 64MB Winfast Geforce 3 ti 200, Windows XP Pro Build 2600 w/ SP1
comp specs 2: 500 Mhz, 128 MB SDRAM, 16MB Integrated Motherboard Video Card, Windows XP Pro Build 2600 w/ SP1

router: Linksys BEFSR41 firmware 1.44.2z

problem:
i cant believe im having problems with this (ive taken the cisco CCNA course), but after reformatting the older comp (comp 2), i cant get the newer comp (comp 1) onto the network. ive done the normal xp network wizard, but the newer comp will error out no matter what setting i put it on. so i did everything manually, setting the ip addresses, resetting and reconfiguring the router, but all i can get is that each computer can see the other, and i can access files on the newer computer using the older computer. however, the newer computer cannot access the older computers files. thanks for any help.
 

Answer:dunno wats wrong...

I'll recommend the easy way, even though some forum members can't seem to understand why it works. Install the NETBEUI protocol on both machines, and I suspect you'll be browsing after that. It's on the XP CD in the VALUEADD directory.
 

1 more replies
Relevance 46.33%

i have mcafee professinal if i was downloading a virus would it pop up and tell me and delete the file like Norton anti virus does on my other computer?
 

Answer:Wats the best virus scaner out there?

10 more replies
Relevance 46.33%

recently i just upgraded my macromedia flash player to the new version 9. then after that i cannot load a single webpage with flash needed properly. for e.g yahoo.com.. where there are flash ads and stuff and the whole internet webpage takes ages to load as compared to the past ( 10 times slower). whereas google.com can be loaded within seconds as it does not requires flash. i tried uninstalling and installing the adobe flash 9 again but to no avail. the same problem persists. this problem is very irritating as i cant load any webpage properly now........help pls!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:46:03 PM, on 9/28/2007Platform: Windows 2000 SP3 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:WINNTSystem32smss.exeC:WINNTsystem32winlogon.exeC:WINNTsystem32services.exeC:WINNTsystem32lsass.exeC:WINNTsystem32svchost.exeC:WINNTsystem32spoolsv.exeC:Program FilesNavNTdefwatch.exeC:WINNTSystem32svchost.exeC:Program FilesNavNTrtvscan.exeC:WINNTSystem32r_server.exeC:WINNTsystem32regsvc.exeC:WINNTsystem32MSTask.exeC:Program FilesAnalog DevicesSoundMAXSMAgent.exeC:WINNTSystem32WBEMWinMgmt.exeC:WINNTSystem32mspmspsv.exeC:WINNTsystem32svchost.exeC:WINNTsystem32MsgSys.EXEC:WINNTExplorer.EXEC:Program FilesAnalog DevicesSoundMAXSmtray.exeC:WINNTanvshell.exeC:Program FilesNavNTvptray.exeC:WINNTSystem32spooldriversw32x863hpztsb04.exeC:Program FilesD-LinkAirPlus GAirGCFG.exeC:Program FilesANIANIWZCS2 ServiceWZCSLDR2... Read more

Answer:Wats Happening To My Computer? Help!

Your system is terribly infected. Problem with these infections nowadays is, it causes a lot of damage. Even if we clean the malware off your system, I can't guarantee that your system will be clean afterwards, because these infections/bundles leave a lot of leftovers behind that most scanners won't even recognise and logs won't show.Also, I can't promise you we can repair all the damage it caused... Even after cleaning the malware, you can still get errors afterwards because of the damage. Solving these is not always possible since it will be searching for a needle in a haystack to find the right cause and solution.So, we can try to clean this up and do what we can, but keep in mind that we can't solve ALL problems this malware already caused.In light of this it would be wise for you to back up any files and folders that you don't want to lose before we start. Reason I am telling this is because when a system is so terribly infected and we try to clean this up manually, the damage that is already present may interfere with our removal attempts.One or more of the identified infections is a backdoor trojan.This allows hackers to remotely control your computer, steal critical system information and Download and Execute filesI would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords wh... Read more

35 more replies
Relevance 46.33%

Heres the Stuff

Logfile of HijackThis v1.96.1
Scan saved at 22:45:34, on 18/08/2003
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\pctspk.exe
C:\Program Files\Common Files\CMEII\CMESys.exe
C:\WINDOWS\SYSTEM32\P2P NETWORKING\P2P NETWORKING.EXE
C:\WINDOWS\System32\SahAgent.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\GMT\GMT.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\cmd32.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Scott\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.blueyonder.co.uk/dial
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by blueyonder
F0 - system.ini: Shell=Explorer.exe C:\WINDOWS\System32\cmd32.exe
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: CCHelper - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\Program File... Read more

Answer:Please analyse me this and tell me wats wrong

Hi scott, welcome, I've split you into your own thread for better assistance.
 

2 more replies
Relevance 45.92%

Logfile of HijackThis v1.97.7
Scan saved at 12:08:30 AM, on 2/17/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP1 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program Files\A4Proxy\A4Proxy.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\unzipped\hijackthis[1]\HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: @msdxmLC.dll,[email protected],&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\... Read more

Answer:OMG! I tried everyting.. cant figure out wats wrong...Please take a look at this log

10 more replies
Relevance 45.92%

i don't know because i wanna play gunz but i been played on this computer and the requirements didn't change so im trying to figure out whayts wrong
 

Answer:wats better pentium III or intel celeron D?

As much as I loathe the Celeron D, I will admit it is newer and more capable of playing games that the Pentium III. What are the speeds of the 2 processors?
 

6 more replies
Relevance 45.92%

ive got this new computer (spec.. 3.2Ghz intel 4, 2GB RAM, radeon 9550 128mb graphics card, audigy 2 sound card, xp sp 2 etc..)

i installed Rome: Total War and the Return of the King games today - and either only a small amount of time (after the intro for rome) or a longer time (when i wanted to exit on rotk) the game freezes, u get a jit jit repeated through the speakers and its inexitable. u have to restart to get out of there. these games played ok in my other comp, jst was very slow when running huge battles in rome.

im jst wondering if this sounds like a problem anyone here has had before, or if they have an idea wat it cld be. i think its pretty impossible that its RAM or hard drive related - coz they are top end. i intall the directx 9.0b that rome comes with - doesnt seem to take much time installing tho - its jst the acceptance screen and then the finished screen. i also downloaded and installed directx 9.0c and its not helping.. also, my old and favourite game 'civilisation: call to power' doesnt play at all. u click on play and nothing happens. i think that's all i know really... any help appreciated
 

Answer:graphics card? wats wrong plz?

most likely it's a graphics driver related problem. Try the latest ATi Drivers, or maybe the modded Omega ATi drivers.

for proper driver installation, get Driver Cleaner Pro, uninstall the driers from add/remove programs, boot to safe mode--run driver cleaner, reboot and install new drivers.
 

2 more replies
Relevance 45.92%

i cant install any software... its say windows cannot access the specified device, path, of file. you may not have the appropriate permissions to access the item. =.= so i cant install any sas or mbam trying using combofix now.. my laptop is extremely lagging ...
 

Answer:dono wats wrong with this laptop

NezKydn said:





i cant install any software... its say windows cannot access the specified device, path, of file. you may not have the appropriate permissions to access the item. =.= so i cant install any sas or mbam trying using combofix now.. my laptop is extremely lagging ...Click to expand...

sry.. somehow i can get my mbam running... i cant find the edit key.. :-o
 

20 more replies
Relevance 45.92%

Hey wats the most effective anti virus software available.....

Answer:Wats The Most Effective Antivirus Software?

You can look up reviews of software such as this one. The trouble is though that all these different reviews use somewhat different methods to evaluate the various software packages, and as such their rankings will be different.If you want some suggestions from Bleeping Computer members then please let us know what you are after.Free or paid for version?Anti-virus only or a suite containing anti-virus, anti-spyware and firewall?I am currently using AVG Anti-virus (free) and am happy with it.

3 more replies
Relevance 45.1%

I'm not sure how my pc has been infected with virus/spyware.

AVG reports virus with IE7 and opera 9.25. and whenever I open any site the pc hangs for a while and then shows connection to this site

http://791224.com (reported as spyware site by stopbadware.org)

and whenever I open any site
in the source there is this code at the top.

<iframe src=http://791224.com/ width=0 height=0 frameborder=0></iframe>

I have placed the hijack this logs. and also scanned with AVG and SuperAntispyware. And the firefox downloads window doesn't open anymore. this is the only browser which does not hang.
 

Answer:dont know wats happening - isp site hacked or my pc

16 more replies
Relevance 45.1%

I RAN A SCAN ON NOD32 AND DIS POPPED UP:

"File c:\windows\system32\drivers\et... is infected with application Win32/HideWindow. The file can be deleted. It is strongly recommended that you back up any crucial data before you proceed. "

i think im infected by jeefo

SHULD I DELETE IT?
IS IT SAFE?

i am using:
windows xp home edition sp2 version 2002

plez help thanx
 

Answer:Solved: Shuld I Delete? Wats Wrong?

This will be closed as you have waited an entire 8 muute for a response to an incomplete and un-intelligible post - speak English!
 

1 more replies
Relevance 45.1%

Umm. I currently have 260W power supply and i use nvidia 8400gs video card (recommended minimum 300W power supply)

But i havent seen any problems

So i decided to buy

Nvidia 240GT (recommended min also 300W)

But since i havent had any problems so far with 8400gs though min req is 300W but i have 260W

BAsically

I shouldnt have problems with 240GT also right?
 

Answer:Power Supply and VIdeo card Wats

14 more replies
Relevance 45.1%

wat difference with xp pro?

Answer:wats good about window xp media center?

Enhanced Media...... Your computer must meet certian hardware requirements for it to even work and you can view media files on your TV and not your moniter. I know it can do that but I'm not knowledgable on this version of XP. But I also know it has all the cababilities of the origanal XP pro plus the media aspect of it.

1 more replies
Relevance 44.28%

I am having trouble with Outlook express. Every email I get shows up twice back to back.
For example:
From Subject Received

Brian Hello 6/1/2004
Brian Hello 6/1/2004
Maria It's me 5/29/2004
Maria It's me 5/29/2004

WHY IS THIS HAPPENING...AND HOW COULD I CHANGE THIS...IT'S REALLY ANNOYING SOMETIMES.

-Thanks
 

Answer:Outlook Express - My inbox messages are always double...wats the deal?

9 more replies
Relevance 43.87%

ok people brace yourself for this one...

my computer is connected to my house network through a usb wireless device and it has worked fine since i got it. i use p2p programs often and found that the limit on half-open connections is too low for me so i set out to find a fix after finding many sites that resommened and used the lvllord fix for this i got it and ran it. it said i had to reboot which i decided 2 do since i had also installed a utility for a new mouse that i got, which also needed a reboot.

so i rebooted my comp, can connect to the network fine, signal strength good, dhcp is working, but i cant access anything on the network. i cant get google, the router, the modem or even other computers on the network. so i think that the patch did somethin bad to the tcpip.sys file when i ran it so i hit the unistall button on it (though it says that the limit is still at 10 andnot 50 which is wat i changed it to??) i hit unistall, says it failed somethin 2 do with windows changin the file or somethin. anyway i thought that possibly the utility i installed did somethin (very remote, but nonetheless) so i unistalled it and rebooted, nuthin.

so i tried disconnecting the usb dongle and running a network cable and hooray it all works again. so that ruled out the .sys file being bad. so i thought id unistall the usb dongle and reinstall (maybe the driver didnt like the patch). but device manager locked up.

so i thought ah well, deal with it later gunna watch a video then maybe... Read more

Answer:Solved: god knows wats wrong but somethin is broked.. prob device manager

11 more replies
Relevance 34.03%

So apparently, I was able to remove some wildtangent spyware. However, there is a command somewhere that is trying to start the program.

Upon cold boot I get this message:

"Cannot file file: c:\programfiles\wildtangent\apps\cda\cdaengine0400.dll"

Any help on this? Maybe a regedit???

Answer:The good thing is wildtangent. The bad thing is wildtangent

HJT is easier to fix that.....

Please download HijackThis - this program will help us determine if there are any spyware/malware on your computer. Create a folder at C:\HJT and move HijackThis.exe there. Double click on the program to run it.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Get HijackThis Analyzer and save it to the same folder as the hijackthis.log file. Run HijackThis Analyzer and type in y if you agree. The result.txt file will open up in Notepad. Copy the whole result.txt log and post it in the forum. We do not need the original hijackthis.log (unless we ask for it). Do not fix anything in HijackThis since they may be harmless.

6 more replies
Relevance 29.93%

I'm trying to open this e-mail that has an attqchment that ends with ".pdf" it doesn't matter if I try to open it or save it, I get this message that says "Invalid menu handle" Soooo what's a menu handle and why is mine invalid?

Answer:Why Is @#$%@# Thing Doing This?

It means its not in the correct place to be opened. Try using adobe reader, microsoft word, or paint, or if you have any kind of photo software try opening it there.

3 more replies
Relevance 29.93%

I work with digital media where scratch space is essential. I can no longer add any more RAM to my system because I've maxed out all my DIMMS. But I still consistantly require 4GB-16GB of scratch space while editing my documents.

Currently I use my data drive as scratch space. It consists of 4 x 7200RPM in RAID-0. But even though my transfer rate is steady over 200MBps for sequential r/w's, the slowdowns from random file access is killing me. As soon as my programs fill the RAM and start using the HDD I notice jumpiness, slow image rebuilding times... and when I copy selections of my work, it can take forever to cache it all. I would like to achieve scratch performance similar to what I experience when everything is cached to RAM. This would help me to continue working, as I say, at the speed of thought.

So I am looking for a solution to my current bottleneck. I have examined the Raptor and SCSI drives, but I am not convinced that speeding up my access times by 10 milliseconds is going to make a big difference.

I'm looking for suggestions on what the next best thing to RAM would be (not the second best or third best thing...)... whether it's 10 SCSI dives in RAID-0 or a couple Gigabyte i-RAMS or a few solid state drives... or something entirely unique... like, I dunno, 30 cheap USB thumb drives in RAID-0.

If you have an idea of how to create high performing scratch drives, I'd love to hear it.
 

Answer:Next best thing to RAM?

the best way to make a really quick drive like you described is, like u stated, a few i-RAM drives

review and benchmarks: http://www.maximumpc.com/article/Gigabyte-i-RAM

im not too familiar with SCSI drives but they get really costly really quickly...it sounds like an i-ram or 2 will be enough for ya. 4 gigs per drive is quite a bit of "scratch space" though for media, it would fill up pretty quickly it seems...

maybe some raptors in raid-0? doesnt sound like $$ is an issue here though lol. good luck with your setup

EDIT: wow it appears you can run i-RAM drives in RAID...a few of those in RAID-0 is sure to be zippy

also, there SHOULD be an i-ram2 out that uses SATA2 and DDR2 rather than PCI+SATA and DDR

just checked the gigabyte site, they only have different revisions out (1.1, 1.2, 1.3) still on the PCI+SATA bus
 

9 more replies
Relevance 29.93%

Hello,
My IE Settings don't seem to want to take. I am running Win98,IE 5.5 but need to upgrade to 6.1 because of work..Everytime I connect to the net my settings are moved To Never Dial A Connection..
I think I need to get in through tools and ultimately into Auto Configuration to take a look at the boxes..I just need to know if this is the correct step? Thanks.
 

Answer:Am I doing the right thing?

9 more replies
Relevance 29.93%

Ok I used to be good working with win xp.
I recently received a laptop from a friend.
toshiba satellite a215 with windows vista home premium sp1.
i repartitioned the hd and tried to install xp on the uallocated sector. that failed.
now i can't access vista either, i also do not have the vista dvd.
what can be done??????
 

Answer:i did a bad bad thing

What was the error when trying to istall xp?What did you use tpartition the drive with?
Did you try to install to C
Have you hosed the recovery partition D
 

3 more replies
Relevance 29.93%
Question: No big thing

My picture disappeared from the top of my XP start menu. I've tried choosing others but I just get a blank spot where my smiling face used to be. I've tried the ones that come with xp to no avail. I miss me!

Answer:No big thing

I surrender to technology - My photo is lost - case closed.

2 more replies
Relevance 29.93%

at random time a BSOD with something called ''ALPHA2r '' ?

Answer:anybody see this thing before?

Do you have Linux installed on this computer?You might wish to peruse this article.

1 more replies
Relevance 29.93%

First, I would like to say thank you very much to Tenebrous for telling me about this DownThemAll. Even though I'm running into some problems with it, which that is why I'm here, it looks like it will be a lifesaver on backing up my sites since right clicking on each file just causes me even more pain in my wrists and arms than I already am in. Anyways, the problem I'm running into is some of the files it says it already exists and the files it says already exists are not even files I'm trying to backup in the first place like login.htm is one of them and it asks what I want to do with the file. Here is the url to the program I'm trying to use http://laibcoms.asia/blog/laibeus/general2/download-your-files-from-yahoo-geocitiesThanks,Amy

More replies
Relevance 29.93%

Yet another weepy frustrated plea for help.

I've done everything in the sticky threads, in some cases several times (many before coming here and finding this forum) but I've gone back and done everything in the DO NOT POST UNTIL... thread (by the numbers) in the hopes that I'd missed something on my own. I had not.

AdAware gives me six occurances of Virtumundo that won't stay deleted, but otherwise my problem acts more like StopGuard: I have a process that gets rerun automatically, and manual deletion of references to it via regedit don't work: the references appear again. So whatever the culprit, I just can't find it and kill it for good.

My manifestation is the process "dvdplay.exe" - and "yalpdvd" files that show up in c:\windows\system (hidden INI, and bak, and tmp). No combination of Adaware / SpyBot / HJT (including the Delete a file on Reboot, just not the right file) AND file and registry entry deletion has yet found the source that keeps spitting this hairball back up. I've read several (hundred?) of the similar threads, and tried to apply the steps and advice given to what HJT etc. was showing me on my screen, but I haven't had any success.

I've never ever seen anything like this, and I've repaired lots and lots and lots of sick and broken computers...

Please help.

Thank you,
Keith
 

Answer:I've done everything but the RIGHT thing...

axtogrind......

I'm a relative newbie to the spyware battle, and most of my knowledge has come from doing what people suggest in these threads. My most recent problem involved a .exe running constantly and utilizing 85%-90% of my CPU, which may be similar to the problem you are encountering.

All I can tell you is what worked for me the best was completing a Trend-Micro Scan in safe mode with all hidden files and extensions enabled (not-hidden). Then installing and running a trial version of Giant Antispyware (smart scan), which got most of the items that were non-cleanable from the Trend-Micro Scan. The BitDefender scan also helped to pick out more hidden trojans. I used the scan first, determined where most of the spyware was located (in my case, c:\winnt), and then did another scan on those specific folders with the "autoclean" function clicked on. The items remaining which could not be removed by BitDefender were cleaned out by a-squared free edition. I followed all the directions in the "Read me first..." thread, so you may have done this all, except for maybe the Giant Anti-spy part. Sorry if this doesn't help.
 

9 more replies
Relevance 29.93%

I went form Windows 2000 to Winodws XP Pro x/ SP2 and now I don't see that USB thing in the system tray. They one that lets you safely remove hardware. I have a USB thing plugged in, my wireless adapter, so it should show up...
 

Answer:Where did my USB thing go?

if your USB thing you are talking about is a usb flash drive...you can remove it as long as it isn't writing data. Mine has a light on it's butt end...so when it stops flashing for a while, it's safe to pull out.


as far as the real problem...I got no idea. one would think there'd be something in the control panel for that...but there isn't.
 

1 more replies
Relevance 29.93%
Question: bad bad thing

client host127.0.0.1 localhost127.0.0.1 www.f1organizer.com #REMOVED ADWARE URL127.0.0.1 www.netpalnow.com #REMOVED ADWARE URL127.0.0.1 www.addictivetechnologies.com #REMOVED ADWARE URLLogfile of HijackThis v1.99.1Scan saved at 11:50:09 PM, on 8/17/2005Platform: Windows XP (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\Explorer.EXEC:\Program Files\AIM95\aim.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Adobe\Photoshop 7.0\Photoshop.exeC:\Program Files\hijack this\HijackThis.exeC:\WINDOWS\system32\NOTEPAD.EXEO4 - HKLM\..\Run: [Runonce] C:\WINDOWS\System32\runouce.exeO16 - DPF: {38578BF0-0ABB-11D3-9330-0080C6F796A1} (Create & Print ActiveX Plug-in) - http://www.imgag.com/cp/install/AxCtp.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1122842571608O23 - Service: Canon BJ Memory Card Manager (Bjmcmng) - CANON INC. - C:\Program Files\Canon\BJCard\Bjmcmng.exeO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exeO23 - Service: Intel® NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exeO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS... Read more

Answer:bad bad thing

here something interesting. i just noticed that my AIM profile has modified itself, and said soemthing about readme.. i updated aim recently.. so maybe this is aol's fault.

... and now my computer wont read the cd drive.....

and its modified ewido and adaware as well.

lol. i deleted the readme file from the location it gave me, now it just says cannot find file or whatever, but its still making 4 instances of foxfire whenever i open it, and the first 3 do the file not found thing. i never opened the readme file i always canceled.

3 more replies
Relevance 29.93%

Hello

Every Time that I reboot I get an icon in the system tray, the icon is of a red sphere containing a white exclamation mark. I have run both a virus scan and spyware scan using CA eTrust anitivirus and Windows Defender but with no result shown.
 

Answer:can get rid of this thing yet...

16 more replies
Relevance 29.93%

I was monkeying with my computer, deleting a few things that were
taking extra space, old programs and such, and a few minutes later, I
tried to download ICQ, after (accidentally) GO FIGURE!, deleting the
entire program, when I was merely trying to delete the old outdated
version in my files... upon trying to re-d/l icq, instead of dl'ing ,
it went to a blank error page, with a tiny little diamond shaped icon
top left corner, i right click to see what it says, and it says,
something like missing active x or something like that, and it says
would you like to go to microsoft to download the correct component,
(which i must have had before i went on a delete spree) UGH....... and
so i go to this page, and well, its quite a confusing page, it has all
the 'behaviors'? listed, i try to dl the thing I need on that page,
and it gives me the same silly error page, and I REALLY REALLY need to
dl two very important things!!! One being restoring my icq! HELP!!!
PLEASE!!
Kim

please email me at [email protected]
 

Answer:PLEASE, please help!!! Can't d/l a THING!!

7 more replies
Relevance 29.93%

While trying to correct a problem in Search On The Internet, somehow, Windows Picture and Fax Viewer was erased. Never to be found again.
Any one know how I can get this program reinstalled? I do not have the Windows XP disc to reboot with.
 

Answer:If It Ain't One Thing............

7 more replies
Relevance 29.93%

Here is my log. I just updated to WINXP SP2 and I found this in the startup and in the HJT log that wasnt there before...it is RUNDLL32.EXE NvQTwk,NvCplDaemon initialize Does anyone know what this is, please see the log below and Please advise ASAP. Is this a virus?

Logfile of HijackThis v1.98.2
Scan saved at 11:50:42 PM, on 12/28/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\LTSMMSG.exe
C:\Program Files\sony\giga pocket\usbsircs.exe
C:\Program Files\sony\... Read more

Answer:help for one thing on HJT Log

8 more replies
Relevance 29.93%
Question: So every thing

looks good for my first PC build....


AMD Athlon 64 3700+ "San Diego" @ 2.2 GHz
DFI LANPARTY UT nF4 Ultra-D Socket 939 NVIDIA nForce4 Ultra mobo
Leadtek PX6800GT TDH Geforce 6800GT 256MB GDDR3 PCI-Express x16 Video Card
CREATIVE Sound Blaster Audigy2 ZS 8 (7.1) Channels PCI Interface Sound Card
Seagate Barracuda 7200.7 160GB 7200 RPM IDE Ultra ATA100 Hard Drive
OCZ ModStream ATX 520W Power Supply
Lian Li PC-65B Black Aluminum ATX Mid Tower Computer Case

Answer:So every thing

that looks awesome man, but you know you can OC a 3500 to a 3700, and you can save a few bucks

9 more replies
Relevance 29.93%

I can't seem to find out were this 'search2find.com' has latched itselft on my brower or what find. I have cleaned every thing suspicious ; I have cleaned out every temp files and still cannot locate how or WHERE this hijack of my browser. Can SOMEOne please help in telling me where or how to get rid of a toolbar hijack... called --- search2find.com. If I so much as go into my internet explorer it downloads all it's icons on my desktop; ie...dating...poker...killspyware..my daily horoscope.

Please can you help....

All exhausted resources have led me to try for help on this website.
 

Answer:The thing that won't go away...

this will get you started follow it exactly....
pay attention to the kill2me part....
please post back if it is fixed....


http://forums.majorgeeks.com/showthread.php?t=35407
 

10 more replies
Relevance 29.93%
Question: An Odd Thing

Just changed to TalkTalk today and installed everything but when I click on the Broadband icon it says its making a dialup connection!Ive been into the control panel to check the 'Never dial a connection' box but in the Network connections box the Broadband symbol/icon is also under the heading of Dial Up.I worry in case I get a phone bill for dialling.Am I worrying over nothing?

Answer:An Odd Thing

yes some isp's still provide a "number to be dialed" but it is not actually making a phone call because on broadband there is no dial tone.johnny.

2 more replies
Relevance 29.93%
Question: such a thing

hello all,i`m looking for a free internet provider which doesn`t require a credit card for a friend with none........anything out there ?
 

Answer:such a thing

7 more replies
Relevance 29.93%

Hi! I've recently had some problems with my computer. It's been running fine for years, but it was recently infected with trojans (Popups and restarting of the computer and such) and now I can't get rid of them. My antivirus programs no longer recognize them, so there's no way for me to get rid of them.I found pcload.dll and frmwrk32.dll in my system32 folder. I deleted those, but the problem keeps coming back. I was browsing this site for information and these two threads described my problem almost exactly:http://www.bleepingcomputer.com/forums/lof...hp/t187763.htmlhttp://www.bleepingcomputer.com/forums/t/128698/infected-with-repeated-occurance-of-virtumonde/I get messages at the top of my browser window saying things like "Too many errors and faults WERE found in your system. Possibly that IT WAS THE RESULT of virus attack.YOU MUST scan your system." Sometimes the whole browser page goes blank and shows the text, "ERROR! Connection was RESET by remote server.This can be a reason for system faults, errors or critical data corruption. To prevent your critical data loss please do the full system scaning!"A new message:"Page cannot be displayed Possible problems: * No connection with Internet. * Some problems with server. * Your computer is being attacked by a virus. Please scan your system: Conection problems diagnostics."Problem is, I can't get ComboFix or Malwarebytes to run at all. I get lots of error messages saying "Windows cannot access the specified de... Read more

Answer:I can't get rid of this thing

Try running MBAM in safe mode. If you were unable to install MBAM after downloading it, find the MBAM.exe and rename it.
Rename by right clicking on the .exe and choose rename. Name it something like sam.com and then click on it to install before rebooting into safe mode to run the scan.

3 more replies
Relevance 29.93%

It's my birthday this week (Fri), and i am going to treat myself with an upgrade, excluding the GTX 260 i ordered, as stated in the other thread. I am looking at a case upgrade to a full tower, from a mid tower NZXT Gamma.

Budget 280 ($340) , i currently have 3 options in mind

1.) Cooler Master HAF 932, with a full WC setup, Incl Lights etc, Total 275

2.) Corsair Obsidian 800D Total 210, (WC at a later date when money comes available)

3.) Antec 1200 Fully WC, Incl Lights etc, Total 280

Please rate my suggestion, AND/OR give me any other suggestions.

1.) AND 3.) would mean that i could save up much quicker for a CPU/MB/RAM upgrade to the i7 in the future.

Thankyou
 

Answer:The best thing to do with £280?

The Corsair Obsidian 800d is generally considered to be the finest case currently available, and the price certainly reflects that. However, personally, I'd go with a cheaper case (like the CoolerMaster CM 690-II Advanced), drop the watercooling gear, and grab a mobo/CPU combo with the saved money. The CM690-II case is less than half the cost of any of the cases you listed, and going with quality air-cooling will save some money also..... just my opinion

(I recently upgraded my case to a NZXT Beta EVO and I couldn't be happier! After promo code discounts, mail-in rebates, and free shipping, the case cost me only $30US!! It has mounts for at least six 120mm fans, and some of those mounts will take 140mm fans - and that's why I got it, was for the cooling; no other case with the features of the NZXT Beta EVO was even close to the price I paid; IMO, it is the BEST value in cases right now)
 

13 more replies
Relevance 29.93%
Question: did a bad thing...

Batty did a bad thing after Budapest so wonderfully cleaned up the house computer. I let my ex use it. Just got it back and it announced to me that it had Trojan spm/lx along with it's friends. Please note I can not run the computer in safe mode, all scanning has been done in regular mode and I ran all the scans complete, ie no express. I have run MBAM, Anti-Spy and Dr Web over the past few days to now have "clean" reports. All this I did on disk cause I did not want to risk being online. However, I have no idea if I got all the little demons, and I still can't, don't know if it matters, run in safe mode. I am ready to Format C: but my ex needs a file on the computer that he can't save to disk...it's a cd cover he designed. I am posting from another, outside of my house, computer so please be patient! but I have freed myself up to run pretty quick. Oh yes, and the weather has been thunderstorms...I don't need to fry a computer, too. Just to let whomever know I will try to get back as quick as I can. An advance Thanks! to whoever wants to figure this mess out! that I got myself in. Oh yes, this would help it's an emachine running Windows XP home edition, 32bit. Again, Thanks! and Peace.

More replies
Relevance 29.93%

I too have been having problems with explorer and ads. Here is what I have done so far:

Ran virus scan
always use a firewall (zonealarm)
downloaded and ran ad aware
downloaded and ran spybot
have installed and ran spyware blaster
ran hijack this
Not necessarily in that order though

Am using Firefox but I need to use explorer for a couple sites so want it fixed.

I am running windows 98 on this machine and may be the only person on the face of this earth that is experiencing fewer problems with the XP I have at my office. The kids use some sights with jokes and stuff on them so I am pretty sure that is where we pick up this stuff.

Anyhow, please look at my hijack this log and tell me what is in there I need to get rid of. I am really concerned about a couple files: C:\windows\qzyrqkspq and C:\windows\IHzzq and in my task manager there are a couple other gobbledy goop processes. Thing is I am not 100 percent sure which are just part of programs.

What is with the 016 and the "http://" for the game sites? does this mean they are tracking with these links? What does DPF mean?

Thank you so much in advance

Brenda

Logfile of HijackThis v1.97.7
Scan saved at 7:55:04 PM, on 7/20/04
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\MSTASK... Read more

Answer:One way or another this ad thing is going down!!!Help please!

6 more replies
Relevance 29.93%

I was trying to delete everything assoc with ati drivers (needed to go back to 10.10) ...I searched for anything ati*.* and deleted those...then I went into the registry and got rid of anything ati...and I turned off a couple services (trying to get rid of a couple files that were unchangeable because they were in use) and now my printer won't print.

The strange thing is that it printed fine until I installed the legacy ati driver???! I can't even get win to seach for ne hardware and find it. I dl'ed the hp 5550 drivers for the printer (which i've used forever) and when I try to run the exe file is starts to unpack then nothing... (hp's stuff is still in my registry tho!)

If I pop in my windows intstall cda nd did a repair do you think it would help...any other ideas??

Thanks!
 

Answer:I done a bad thing...

I would attempt a system restore first. A repair install can cause a lot of interesting issues, sometimes more than it fixes. Driver files are part of what gets backed up in a system restore, so it should take care of the problem. Next time just go to device manager, right click your ati card and hit uninstall.
 

3 more replies
Relevance 29.93%

My antivirus just found this :nnrun.exe .. .
Its full location is :C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CDERMTUP\upgrade[1].cab ?CAB ?upgrade.exe ?NSIS ?nnrun.exe - Win32/BlinkSearch application.
all started like this :
It showed me a dialog after i was atacked by a virus and when it asked me to delete it or not ,i imedietely pushed on the terminate button ,but then my computer crashed o.o . The virus alert came when i was downloading a file from the net just before i push the * save as * button and the antivirus stopped me . But why did it crash when i tried to terminate it ..????And it didnt even start to download the file ,becouse i never pushed the save as * button .
Enyway ..I restarted the machine and turned on the in depth scan and..whooo . It showed me this thing :C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CDERMTUP\upgrade[1].cab ?CAB ?upgrade.exe ?NSIS ?nnrun.exe - Win32/BlinkSearch application. It said that it is a thread but it did not give me to delete it .
When i cheked in the net about the aplication nnrun.exe ,i found out that it is a dangerous programme o.o .
So how should i delete it ? . Will this harm my comp ?
It also showed me this :File C:\WINDOWS\Temp\NN_57.tmp\upgrade.exe is infected with application Win32/BlinkSearch. The file can be deleted. It is stron... Read more

Answer:What Should I Do About This Thing ....: ?

Try cleaning your Temp and temp internet files with Ccleaner and run your scan again.http://www.filehippo.com/download_ccleaner/The download is to the right, click on the green arrow. It is pretty easy to run this you just click "Analyze "and wait for it to finish, it will show you the files to be cleaned an then click "Clean", it will also clean your recycled bin, saved passwords and browsers. You can deselect anything you don't want it to clean to the left of the program. Be sure to clean your Cookies,Temp files and Temporary Internet files at least.

3 more replies
Relevance 29.93%

Everytime I shutdown or restart my PC i get a error message
it says


Quote:




RTHDCOL.EXE- Illegal System DLL Relocation

the system DLL user 32.dll was relocated in memory. the application will not run properly. the relocation occurred because the DLL C:\Windows\system32\HHCTRL.OCX occupied an address range reserved for windows system DLLs. the vendor supplying the DLL should be contacted for new DLL




and everytime I close internet explorer i get a endtask pop up

so is there anyone who had this problem before or anyone who can help me pls.

mail me at [email protected]
or repost ty...

Answer:hi... anyone hir know this thing...

Check this out.
http://www.techsupportforum.com/f104...es-148753.html


Andy

4 more replies
Relevance 29.93%

When i open my browser this page pops up res://tzzxe.dll/index.html#96676 or something else res://????.dll/index.html#96676 plus some pop up advertising spyware removel appz.
I tried all kind of applications to get rid of this browser hijacker...ad-aware, CW shredder, spy bot S&D, Spy sweeper... but i can't get my browser clean..A friend sent me to this forum telling me there are some ppl here who could point me in to the right direction..
are there some specialists out there who could help me get on the good way removing this terrible thing from my hd..?

here is the file in my hijackthis log:

Logfile of HijackThis v1.97.7
Scan saved at 18:52:19, on 28-6-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Medion\PowerCinema\PCMService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ntgj32.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\WINDOWS\mfc... Read more

Answer:Please help me out...can't get rid of this thing

Logfile of HijackThis v1.97.7
Scan saved at 20:31:50, on 28-6-2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Medion\PowerCinema\PCMService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ntgj32.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\system32\mfceq32.exe
C:\Documents and Settings\olyslager wettstein\Bureaublad\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\tzzxe.dll/sp.html#96676
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://tzzxe.dll/index.html#96676
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = res://tzzxe.dll/index.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\tzzxe.dll/sp.html#96676
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://tzzxe.dll/index.html#96676
R1 - HKLM\S... Read more

3 more replies
Relevance 29.93%

C:\WINDOWS\system32\bits\qmgr.dll
This thing is making my life a living hell! What is it and how do i get rid of it. I've tried all I know, but everytime I try to download something it blocks it by asking me "what would I like to open the file with" THIS THING IS PURE EVIL! pLEASE hELP!

Answer:What Is This Thing?

Try looking here.http://www.bleepingcomputer.com/startups/qmgr.dll-21990.html

2 more replies
Relevance 29.93%

... a connector that two laptops can share an ethernet cable from the modem? It's probably a dumb question I know ... but I don't know. It's where, instead of using a wireless router you can have an ethernet cable in the back of the modem into a connector (or hub) so that 2 laptops (or more) can use it in the same room. Wireless is ok but it's really slow. I only found how how much faster plugging straight into the modem can be. I like the portability of wireless but I usually sit in the same place at home so it's not worth the slow speed.

Also, are there any drawbacks to plugging straight into the modem?
 

Answer:Is there such a thing as ....

Hi maryanjo. I use a Netgear Wireless Router/Modem with 2 Ethernet cables plugged into the back of it.

One cable is about 15-20 inches long and runs from my Router/Modem into my laptop alongside. The other cable is around 15-20 feet long and runs from the Router/Modem into another room where my son plugs his laptop in when he visits me.

I am not sure if this is what you are, but it works for me.
Hope this helps.

Bazza

===





maryanjo said:





... a connector that two laptops can share an ethernet cable from the modem? It's probably a dumb question I know ... but I don't know. It's where, instead of using a wireless router you can have an ethernet cable in the back of the modem into a connector (or hub) so that 2 laptops (or more) can use it in the same room. Wireless is ok but it's really slow. I only found how how much faster plugging straight into the modem can be. I like the portability of wireless but I usually sit in the same place at home so it's not worth the slow speed.

Also, are there any drawbacks to plugging straight into the modem?Click to expand...


 

5 more replies
Relevance 29.93%

I've followed this thread http://forums.techguy.org/showthread.php?t=306017&page=2&pp=15 the last few days and am pretty sure that I have the same thing. Not only do the same registry items appear on my computer, but both Spybot and Adaware either give an error message (spybot's appears to be in German!) or appear to be not locked but don't delete the problem files. CWS shredder locks up as well. I've also run online virus scans and nothing showed up. It appears that now my computer has a mind of it's own. New icons appear on my desktop on their own. Other's (such as the newest CWS shredder) disappear. I'm an AOL user (yes, I know that many hate it, but my family isn't going to change!) and AOL will open on it's own and attempt to sign on the the internet.

Here's my HJT scan.

Logfile of HijackThis v1.99.0
Scan saved at 12:19:59 PM, on 12/19/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE FIREWALL\CPD.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSRTE.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\TOPSPEED\2.0\AOLTSMON.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLACSD.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\TOPSPEED\2.0\AOLTPSPD.EXE
C:\PROGRAM FILES\MCAFEE\MCAFEE FIREWALL\CPDCLNT.EXE
C:\WINDOW... Read more

Answer:UGH - I think I have that new VX2 thing!!!

16 more replies
Relevance 29.93%
Question: Cannot see a thing

Dear friends, I am having a problem with my old winxp machine. I thing that I have a problem either with the agp slot of the motherboard, or with the video card. I had changes the video card, I bought one second hand, and it was working at the previous owner. Can you please help me cause i am getting insane.

When i am switching on the computer, there is nothing on the screen, just a black screen. No bios info, nothing.
 

More replies
Relevance 29.93%

Hello again everyone.

I have sorted the problem out, just need to find out what network card I have so I can download the drivers. Problem is I have forgot what network card it is, is there anyway to get the name of the network card even if it's not installed?

Thanks ELLIS.
 

Answer:Need to know one thing please

Open the case and take a look.

Most NICs do not really have a name but usually the chipset manufacturer name is visible and you can get OEM drivers from the manufacturer's support site.

Otherwise you are a Lucy Man. A new NIC can be found for $5 or less.
 

5 more replies
Relevance 29.93%

I recently pulled a hard drive from a laptop. I purchased an External Hard Drive shell for it.
Everything works, and I can now completely see the contents of the HD.
Here's the question, is there anyway to use the programs on the hard drive? For instance, I have MSOffice on the laptop HD, but if I click any of the programs, ie word, excel, powerpoint etc, I'm prompted that the operating system is not configured to run it.
Any way I can more everything to the C: drive? Or run then from what now is the external "F" drive?
Thanks.
 

Answer:Any thing I can do?

You are essentially SOL.

All of the "knowledge" about the installed apps is in the Registry, which you obviously can not move and integrate.
 

2 more replies
Relevance 29.93%

I have been trying to get rid of multiple viruses for weeks with no luck. I am unable to access the internet unless in safe mode and unable to get any updates on Norton. I have gone through all of the steps of "DO NOT POST UNTIL YOU HAVE READ THIS: How to: Spyware, Trojan And Virus Removal"
Please help. We are at the point where we think we just need to wipe everything out and start over.
 

Answer:Still Can't Get Rid of This Thing

Hi Daniely,

If you have exhausted all of the options in the Cleanup Tutorial, please go ahead and send us a HijackThis Log. Be sure to follow the instructions below:

Note that your HijackThis should be up-to-date (v1.98.2) and MUST be extracted to its own safe folder ? C:\Program Files\HijackThis!

If you need a Fresh Download of HJT, get it HERE: HijackThis 1.98.2

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

I have been tied up with work lately, but somebody will take a look when they get a chance.

Best luck
PP
 

13 more replies
Relevance 29.93%

just want to say thank you for all your help yesterday.... mangaed to format my pc and is now working great...however i seem to have lost my sound...i do not know anything about the sound card or anything else connected to it.is there anything i can do to retrieve my sound.once again... thanks guys.

Answer:thank you all.... just one more thing...

Did you install the motherboard drivers??Check the motherboard maker site and download the motherboard driver if you do not have the motherboard CD

4 more replies
Relevance 29.93%
Question: Can't do a thing!!

I am posting on behalf of my sister. She has a trojan horse on her computer that has disabled everything. Her rundll32.exe file has been corrupted, so she cannot get into internet explorer, her control panel, nothing. When the issue happened, her son was booted from the website he was working on and directed to antispymv.com. That is the only thing that will come up is their website to purchase their software. She normally runs spybot, but cannot run it now because none of her executables work. I did some searching for her, and to fix the rundll32.exe error I found that she either needed her XP disk (which she does not have) or needed to download a registry cleaner (which she can't get on the internet). Is there any other way to fix this registry file? I believe that needs to be done before she can get spybot to execute and run a scan. PLEASE HELP!
Thanks!
Jamie
 

More replies
Relevance 29.93%

Every day when I sit down to the computer for the first time, before I do anything else, before opening a folder, before checking my email, and certainly before firing up Internet Explorer... I set a System Restore Point.

System Restore points have saved me COUNTLESS times!!

Especially from the felons that run Exact Search. You know... Bargain Buddy, Cashback, Navi Search, Exact Search Toolbar... all that crap.

When I get those things I run AdAware(free), Spybot Search & Destroy(free), and NoAdware($30.00)... and then reset my system to the latest restore point before the problems began.

It has worked EVERY SINGLE time.

So kids.... set your System Restore settings like this:

I only know for Windows XP Home

Right click on My Computer and select Properties.
Select the System Restore tab.
Make sure the box labeled Turn Off System Restore is UNchecked
Under "Disk space to use:" Set the slider to MAX
Click OK

Then every day... FOR THE REST OF YOUR LIFE... set a system restore point like this:

Click... Start >All Programs >Accessories >System Tools Then right-click System Restore and select send to: desktop (create shortcut) ...so you see the thing EVERY DAY FOR THE REST OF YOUR LIFE!

Answer:The BEST thing I ever did!!

excellent suggestion

1 more replies
Relevance 29.93%

Hey Everyone,
I am here today requesting help with some type of hijacker/malware/spyware/pop up thingie.. I'm not really sure exactly what this thing is, but it's on my work computer and my boss isn't going to be happy with me if I don't get rid of it.
I have tried everything.
I've gone online searching everywhere for what it is and ways to stop it and what I should do and so far have had no luck.
The good thing is I got rid of everything else that was wrong with this computer.
But I still haven't been able to get rid of what started me on my virus adventure.
I have installed Spy-Bot, Ad-Aware, AVG, and McAfee. I have scanned with ALL of them.
I have removed/quarantined everything all of those programs found.
Still, this thing remains. It shows up in the taskbar as a little yellow triangle saying my computer needs to be fixed. Then randomly maybe every 30/45minutes a window pops up with links to this website:
Here is what it looks like:


If you click on either of the two screens it takes you to this webpage:

I have also run HiJackThis.. the logfile is here:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:52:55 PM, on 3/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program File... Read more

Answer:Please Help; I can't get rid of this thing.

Here is what the thing in the taskbar looks like:
 

2 more replies
Relevance 29.93%
Question: An msn thing

On msn u got the option to have ur personal message linked to what music ur listening to thru windows media player. This was worknig fine the other day but now it wo't work. No settings have been adjusted whatsoever, msn is checked to show the music but it won't...any ideas?

Answer:An msn thing

Have you tried a system restore to a point when it was working properly..

3 more replies
Relevance 29.93%
Question: One more thing...

I did the hijackthis thing and here are the results. I use windows xp. Any suggestions would be appreciated. Thanks

Logfile of HijackThis v1.97.7
Scan saved at 11:40:13 PM, on 5/20/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\carpserv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\Program Files\Hewlett-Packard\HP Notebook Utilities\hptasks.exe
C:\PROGRA~1\HEWLET~1\ONE-TO~1\OneTouch.EXE
C:\windows\system\hpsysdrv.exe
C:\Windows\system32\HpSrvUI.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\RadioSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us4nb.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us4... Read more

Answer:One more thing...

6 more replies
Relevance 29.93%

hi again just my pc up and running and installed a netgear wireless adapter. but now the adapter is installed when i start the pc i get a login box asking for password as i have no password i just press enter. allso when i shut down i get a box with a drop down menu asking if i wont to shut the pc down or restart. is there a way of stopping this. the pc as win xp home meny thanks

Answer:need help with one more thing

hi rockerthere is no way of stopping the drop down box to close your pc down when you are running windows xp home or pro editions martan

2 more replies
Relevance 29.93%
Question: I did a BAD THING!

I followed Help Me Rick's computer antivirus plan...
? CCleaner.
?Install and run MalwareBytes and SuperAntiSpyware and ComobFix

Original content found here: Extricating Spy ware | Castellini on Computers - Computer help for beginners hxxp://helpmerick.com/extricating-sp...#ixzz0v1JvvH49
All did well till combofix
Am working on daughters desktop windows xp, pack 3 at my home doing downloads with cd from my computer.
SO- got to Combofix, and it said machine had no Microsoft recovery console...I clicked no, because did not have a connection....WELL, Now I cannot do anything..When booting up, it shuts down...Safe mode I cannot download anything...So can I connect in safe mode/with Internet and run Combofix again? I think I'M in too deep! Can anyone help?

Thanks, Joy

Answer:I did a BAD THING!

Hello -

I'm sorry to hear you've run into troubles following some ill-conceived advice.

ComboFix should never be deployed without an initial analysis of the machine's condition using non-invasive scan tools.

A Reminder....

As seen in Post #2 of our sticky topic 'NEW INSTRUCTIONS Read this Before Posting For Malware Removal Help'

Quote:




Why we don't ask you to run ComboFix from the onset

As stated by the author of ComboFix:

ComboFix is a very powerful tool which when improperly used may render your machine to a doorstop.

We first need to verify if there's any rootkits present and how they could affect our tools. DDS & GMER are preliminary scans. We use their logs to map our strategy for attack.

With these logs we can determine the infections present & decide whether to deploy ComboFix




I'm not sure if we can get you out of this situation, as we don't know the state of the machine before removal tools were run.


Run the scans in this topic using Safe mode with networking.


http://www.techsupportforum.com/f50/...lp-305963.html

Also include any details you can from the run of ComboFix (warnings of rootkits, deletion notices, file names to write down). If there's a log at C:\ComboFix.txt, please post it.

3 more replies
Relevance 29.93%

Why is it that my IE6 either sits on a blank white screen and just cant be bothered to ask me if it can connect to the internet (56K dial up). I get the same problem when I ctrl+n for a new IE screen. The globe spins but thats about it. My home page is google (so that i know if its slow to connect then there may be a problem)

Answer:IE6 does its own thing?

'fraid we need more info to help; tell us your spec...

3 more replies
Relevance 29.93%

Hi Everyone,

Clear understanding okay (hehehe) - this is not my computer. It acutally belongs to a very nice family and I am trying my best to help.

Okay - something bad is happening - else I wouldn't be here.

1) Cannot right click on my computer - no menu pops up as supposed to. DblClick on my computer - nothing happens.
2) Cannot access regedit
3) Despite settings via WinExplorer - when there is a click on a *.txt file, nothing happens
4) Cannot access control panel - no action occurs when attempting add/remove programs, or user settings/passwords
5) As above, cannot access via Start/File/Run.... processes
6) Desktop settings (right click on desktop) cannot be accessed.
7) System time (double click on the clock) cannot be accessed.
8) Cannot access safe mode
9) Cannot uninstall norton (expired)
10) Cannot install AVG correctly
11) Cannot install firewall
12) I have a trillion IE helper bars and want them removed (see add/remove above)


Running the 'do this before you ask...' via the MalWare thread ran into severe problems:
a - no safe mode
b - WinDefender did not work initially
c - Some scans would not work
d - SunJava had problems getting in


I have found (I think) the culprit. A review of the Windows and Windows System32 shows:
1) a dialer.ini and system.ini curiously created at exactly the same time (windows)
2) a inetmodl.exe file (windows/system32)
 

Answer:A really bad thing!!!

More about a very bad thing..

Logs Attached
 

6 more replies
Relevance 29.93%
Question: I have some thing

I got some thing. my computer is XP. It dose not run any thing it acts like it will load but it dose not. i ran a virus scaner and a spyware scaner. They have not found anything. I restart my computer some time ( almost never) it works once ever 5th or so time. but when it dose work it is nice and quick. when it dose not it is very slowI would like any help i could get.
It might not be spyware or a virus but i would bet it is.
 

Answer:I have some thing

Sounds like there could be a possible hardware issue here. But lest check for malware first.

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
Make sure you check version numbers and get all updates.
Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
Downloading, Installing, and Running HijackThis


When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
runkeys.txt - the log from GetRunKey.bat
newfiles.txt - the log from ShowNew.bat[/B]
CounterSpy - ONLY IF you were not able to run Windows Defender
Bitdefender - from step 6
Panda Scan - from step 6
HijackThis

NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!
 

1 more replies
Relevance 29.93%

My PC I brand new and it already not booting and it got the blue screen of death and all I did was turn it on and there it was the blue screen of death  also I don't have a warenty and it says HP please help thank you.

More replies
Relevance 29.93%
Question: Same Old Thing

Pop-ups, running slow, ... The same things everybody here needs fixed, haha. Here's the log:

Logfile of HijackThis v1.99.1
Scan saved at 3:33:18 PM, on 8/7/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\DOCUME~1\Jocelyn\LOCALS~1\Temp\sysnet.exe
C:\WINDOWS\etb\pokapoka62.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKL... Read more

Answer:Same Old Thing

Hi and Welcome to TSF

Please DISABLE spybot's teatimer and LEAVE IT OFF until the fix is complete.


Please download LQfix batch here:
http://www.downloads.subratam.org/LQfix.zip
Unzip it to the desktop but do NOT run it yet.

Next, please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

For additional help in booting into Safe Mode, see the following site:
http://www.pchell.com/support/safemode.shtml


Once in Safe Mode, please run LQfix.bat. When finished, restart your computer and continue...

Before attacking an adware/spyware problem with hijackthis make sure you have already run the following tools. Download and update the databases on each program before running. Ad-Aware? SE Personal Edition
Spybot Search & Destroy
CWShredder

Also make sure you are using the the latest version (1.99.1) of HijackThis and it's installed in it's own folder on the root drive. (C:\HJT)

Download and install CleanUp! but do not run it yet.

*NOTE* Cleanup deletes EVERYTHING out of temp/temporary folders and does not make backups.

Download, install, and update Ewido Security SuiteInstall ewido security suite
Launch ewido, there should be a big E icon on your desktop, double-click it.
The program will... Read more

10 more replies
Relevance 29.93%
Question: Odd thing...

Virus scans from AVG come up empty, as do malware scans by WebRoot Spysweeper. System is XP Pro SP3, all the newest updates. Running Firefox 3.0.6

Here's what's happening: Randomly, I'll see just the right and bottom shadow edges of a box appear overlaid over my Firefox window. Doesn't happen at any particular website, completely random. Maybe once a week or so. It's "always on top" except this time it went away when I brought up the "about Firefox" window to get the version. It stays where it is, and is visible on the desktop if I move FFX around.

Not sure if this is maybe a problem or not. System runs normally, not slow, and no unusual network activity seen on DUMeter.

I suspect this is just a glitch in one of my programs... but thought I'd post in case this is a known symptom of something.
 

More replies
Relevance 29.93%

this thing is really anyyoning here is my log and my status bar keeps going off and search.com takes over or wat ever that thing it is thats all thanks



Logfile of HijackThis v1.97.7
Scan saved at 10:13:10 PM, on 12/4/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\2Wire HomePortal Monitor\2portalmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\wuauclt.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\AIM\aim.exe
C:\Program Files\AIM\aim.exe
C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\??oolsv.exe
C:\Documents and Settings\Rashmi\My Documents\Backup\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.begin2search.com/googlesidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search... Read more

Answer:i need help really this thing...

Hi
Make sure you have already run CWShreader, Adaware, Spybot S & D(check for updates) as these will do a preliminary clean first.Some files below may not be present after running the above programs.

Then....
Turn off your System Restore SEE HERE Reinstate it when your log is cleaned and then create a new restore point.Close your browser window and run hjt in safe mode... HOW TO RUN SAFE MODE and have "Hijack This" fix all the following items by placing a check in the appropriate boxes and selecting "fix checked".
Folders that have been highlighted RED in the log will need to be uninstalled.Check first as some folders maybe uninstalled via the Add/Remove program. Files highlighted in BLACK in the log will need to be removed from your hard drive. Make sure to have your system set to show hidden files and folders.. HOW TO SHOW FILES ..Please get the latest HJT v1.98.2,reboot and post a new log when finished...

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.begin2search.com/googlesidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOCUME~1\Rashmi\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOCUME~1\Rashmi\LOCALS~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://C:\DOCUME~1\Rashmi\LOCALS~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\D... Read more

1 more replies
Relevance 29.93%

Is there such a thing?? My friend doesnt have a TV out connection, but want to connect his laptop to his TV. What would be the best way? or is there such a thing as a USB to tv out???Anyone help??

Answer:USB TO TV OUT - is there such a thing??

Dont think so. Will look it up.

5 more replies
Relevance 29.93%

msn has taken over windows update sending hjt log hope it helps
 

More replies
Relevance 29.93%

I am having a terrible time...i hope i can explain the problems coherently:
1. Task bar stays hidden when changing pages in IE, or when running adware or spybot.
2. Adware freezes when using customized scan (per a post in tgs forum).
3. Sound is delayed-when i minimize a window the sound plays 5-10 sec later.
4. Delay in loading from sign-on screen. (from other posts i know it is something in my startup but can't figure out what specifically is causing it.)
Someone please help.

I enabled show all files and ran hjt:

Logfile of HijackThis v1.96.0
Scan saved at 7:58:41 PM, on 2/26/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Atiptaxx.exe
C:\Program Files\Grisoft\AVG6\avgcc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\spider.exe
C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.my.yahoo.com/
O2 - BHO: (no name) - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} - C:\Program Files\Kontiki\bin\bh309190.dll
O3 - Toolbar:... Read more

Answer:If it's not one thing it's another

I would get rid of the follow supicious elements...

***O2 - BHO: (no name) - {029CA12C-89C1-46a7-A3C7-82F2F98635CB} - C:\Program Files\Kontiki\bin\bh309190.dll
***O4 - HKCU\..\Run: [cnet] "C:\Program Files\Kontiki\bin\kontiki.exe" -s cnet -q
***O8 - Extra context menu item: Get It With Kontiki -
res://C:\Program Files\Kontiki\bin\bh309190.dll/201

(These are Kontiki which is known for problems and spyware (Optional))

O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/1...22/cpbrkpie.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A0D205BE-EA72-42D2-B57C-862814BC8C0A}: NameServer = 206.230.149.34

(These are suspicious elements... they should be removed for they are not required...)

The Computer Wiz Himself!

 

1 more replies
Relevance 29.93%

Ive got an Antec Sonata II case and I am curious about this black vent thing that covers the CPU heatsink/fan.

http://img248.imageshack.us/my.php?i...mpthingbw0.jpg

http://www.newegg.com/Product/Produc...82E16811129155

The vent makes it a huge pain to clean the dust out of the case because i have to remove it to get behind it.

I am just curious if it actually makes a difference in terms of keeping the CPU cool. Altough there is a place for a fan inside of the vent, I dont currently have one installed (only the CPU fan). So it seems like this thing is just preventing the cpu heat from being carried out more quickly by the other two fans in my case...

So do you think there would be anything wrong with just keeping it out?

Answer:Is this thing necessary?

no, i dont see any problems at all, ive notied in all my builds that those ducts that are sposed to take air from the back just make the system hotter...weird, so i just take all mine out, plus it makes the inside look better

3 more replies
Relevance 29.93%

Hi guys,

My PC has Instant access spyware on it and cant get it out no matter what I try. Spyware doctor finds 3 instances of it :

1)Instant Access HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\62119EF862C6B3A0D853419B87EB3E2F6C78640A
2)Instant Access HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\62119EF862C6B3A0D853419B87EB3E2F6C78640A##
3)Instant Access HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\62119EF862C6B3A0D853419B87EB3E2F6C78640A##Blob High

Ive tried avg and sd but after quarantine or removal it keeps coming back.

Ive also cleaned my c with CCleaner .

my hijack this log is as follows:

Logfile of HijackThis v1.99.1
Scan saved at 20:16:10, on 30/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfServic... Read more

Answer:cant get rid of this thing!!!!!!

1. Download & save this file to Desktop -> http://download.bleepingcomputer.com...a/ComboFix.exe

2. Double click on combofix.exe & follow the prompts.

3. When finished, it shall produce a log for you. Post that log & a fresh HJT log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

19 more replies
Relevance 29.93%

I though I have seen it all

I was surfing and got hit by something that kept installing something on the computer as it was grinding away. First it disabled all admin ability ( i.e task man ) then started in with fake pop ups saying my drives were bad and needed to restart. After a bit I realize I could not do a thing, I figure I'd reset via button. First thing I did was go in to safe mode and restore. The restore look full, like it was made to look like a restore, but I didnt have much choice. After that I tried to run a few checks like ccleaner and hijack this. As soon as I hit cclearner the computer restarted. I then tried to look at DM on the next restart and the computer restarted. I then did recover con, and fixed up the drive and tried again. ccleaner restarted... So Next I tried kasper Sky boot dics, ran a check all ok. Did an update and ran a check again and it close out. What kind a virus is this...

So I have yet to run the OS out side of safe mode as I can not get any tools to check my system. I need like the latest and best boot disk but searching the net does not help much. Any one have a though or suggestion.

Answer:Ok this little thing is mean...

I guess no edit after x minutes? I tried kav rescue 10 but the linux kernal can mount the root block device? Was wondering if there are any known "2011 end times" viruses. I have not been able to locate any.

4 more replies
Relevance 29.93%

My friend got an error message and came to me to fix it. So i got my windows disk and repaired the windows files. The computer was running really slow, Had pop ups comining up, the "Windows Allert" message.(i counted a total of like 98 trojans) So i ran hijack this,combo fix, and SDfix. I would like to know if i have gotten everything thanks. See that this is not my computer there is not too many things that i can uninstall limewire is one of them... i will advise my friend of how it can compromise his system.

HIJACKTHIS LOG
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 1:16:04 PM, on 12/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\Media Expe... Read more

Answer:Help..would like to know if i got every thing

COMBO FIX LOG
ComboFix 07-12-16.3 - Marie 2007-12-16 12:40:58.1 - NTFSx86
Running from: E:\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\check_LSA7.txt
C:\Documents and Settings\LocalService\Application Data\NetMon
C:\Documents and Settings\LocalService\Application Data\NetMon\domains.txt
C:\Documents and Settings\LocalService\Application Data\NetMon\log.txt
C:\Documents and Settings\Marie\Application Data\install.dat
C:\Documents and Settings\Marie\Application Data\trant.exe
C:\Documents and Settings\Marie\Application Data\ultra
C:\Documents and Settings\Marie\Application Data\ultra\uninstall.bat
C:\Documents and Settings\Marie\Application Data\WinTouch
C:\Documents and Settings\Marie\Application Data\WinTouch\wintouch.cfg
C:\Documents and Settings\Marie\Application Data\WinTouch\WTUninstaller.exe
C:\Documents and Settings\Marie\Start Menu\Programs\Outerinfo
C:\Documents and Settings\Marie\Start Menu\Programs\Outerinfo\Terms.lnk
C:\Documents and Settings\Marie\Start Menu\Programs\Outerinfo\Uninstall.lnk
C:\Documents and Settings\Marie\Start Menu\Programs\Startup\findfast.exe
C:\Documents and Settings\Marie\Start Menu\Programs\Startup\TA_Start.lnk
C:\Documents and Settings\NetworkService\Application Data\NetMon
C:\Documents and Settings\NetworkService\Application Data\NetMon\domains.txt
C:\Documents and Settings\NetworkService\Application Data\NetMon\log.txt
C:\P... Read more

2 more replies
Relevance 29.93%

Is there such a thing as someone that has constant access to your modem for a DSL account or a modem that could give a computer a virus?
I just reinstalled my OS on a newer hard drive because the older one was 5400RPM
But with in 10 mins after setting up my DSL account (EarthLink total access) i got the windows must restart because RPC service terminated unexpectedly and then the timer count down. I wouldn't even think of having a virus with the system so new.

Is this possible?

I have read some other things to do in the service.msc with the RPC but need to know if i could have a bad ISP connection?
 

Answer:Is there such a thing

you can get a virus as soon as you connect to the internet - i have seen this a few times on a company network after a build before putting all the updates on.....
 

1 more replies
Relevance 29.93%
Relevance 29.93%
Question: Same thing

sorry to jump in here, but i noticed that Krystie hadn't responded yet and i have the exact same problem.
i followed your instructions cheeseball and here are my two logfiles. any help is HUGELY appreciated!
many thanks in advanced
Fixwareout
Last edited 1/1/2006
Post this report in the forums please
...
Prerun check
HKLM run and Winlogon System values
C:\WINDOWS\system32\dmikg.exe will be moved to C:\WINDOWS\temp\dmikg.ren at reboot.
C:\WINDOWS\system32\cslbc.exe will be moved to C:\WINDOWS\temp\cslbc.ren at reboot.
System restarted
...
Reg Entries that were deleted
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}9837657C1045-17DA-14E4-21D8-AAC3009A{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\}005B525DC48E-A76A-DE04-76F8-75D38091{
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins\gkimd
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion "dpid"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion "pid"
...
Random Runs removed from HKLM
"dmikg.exe"=-
...

PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.

Searching by size/names...


Search five digit cs, dm kd and jb files.
This WILL/CAN also list Legit Files, Submit them at Virustotal

Other suspects.
C:\WINDOWS\system32\{B203538E-83F4-4B00-88F1-4B0CB9F13105}.exe Deleted

Misc files.

C... Read more

Answer:Same thing

Hi and welcome

Download AVG Anti-Spyware from HERE and save that file to your desktop.

When the trial period expires it becomes feature-limited freeware but is still worth keeping as a good on-demand scanner.

Once you have downloaded AVG Anti-Spyware, locate the icon on the desktop and double click it to launch the set up program.
Once the setup is complete you will need run AVG Anti-Spyware and update the definition files.
On the main screen select the icon "Update" then select the "Update now" link.
Next select the "Start Update" button. The update will start and a progress bar will show the updates being installed.

Once the update has completed, select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
Under "Reports"
Select "Automatically generate report after every scan"
Un-Select "Only if threats were found"

Close AVG Anti-Spyware. Do Not run a scan just yet, we will run it in safe mode.
Reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.

IMPORTANT: Do not open any other windows or programs while AVG Anti-Spyware is scanning as it may interfere with the scanning process:

Launch AVG Anti-Spyware by double ... Read more

1 more replies
Relevance 29.93%

I'm on an older Gateway 500S. My problem started with an ArcCon Bad Image error preventing me from doing anything. On someones advice I ended process in task manager so I could access something anything! Then its a LiveUpdate error . Suspecting a virus or malware I tried to run a scan. Norton AV wouldn't open but was able to run Malwarebytes scan which found nothing.
So I was able to contact Symantec support through chat but could not remote connect. IE would not launch or open browser. So they suggest uninstall and reinstall my 360 AV.
I do that but still no IE ArcCon is back etc.
I was able to go into network and get online with MS browser so I did system restore to see if IE would return. After reboot my desktop is gone! Start bar task bar everything. I get error Ordinal 685 not found Mib Tcp library not found.
Any help would be greatly appreciated. This is the family PC and if I have to listen to my kids whine all summer I don't know what I'll do.

Answer:one thing after another

control alt del (at same time)

File New Task - type "explorer.exe" (without quotes) Hit Enter (I hope this is accurate as I am on a Windows Seven machine right now--might be slightly different).

13 more replies
Relevance 29.93%

Ive bought 4GB of RAM and am only getting 3GB recognized by Windows XP (SP3 32bit).

I have added the /3GB and /PAE switches so my bootini now looks like:

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /3GB /PAE /noexecute=optin /fastdetect

This is an audio workstation so having the extra gig in my RAM and thus more Memory would be awesome.

I heard somewhere that the 4gb cap may be to do with total system memory including video cards and the such but my video card only has 256megs on there so I should still see 3.75GB in the System Properties no?

System Specs:
Pentium D 3.00ghz
4GB DDR2 800 RAM
Asus P5dwd2-E Premium Motherboard
NVIDIA GeForce 6600GT

Any ideas why it doesnt seem to be working for me?

Answer:The old 4gb /PAE thing...

if your computer is only 32 bit and you are running 32 bit operating system, then all you will see is 3 gigs.

For 4 gigs to be recognize you must have both a 64bit system and 64bit operating system.

13 more replies
Relevance 29.93%

help me somebody plese! my computer gets all kind of error messages! i cant play sound anymore ! i compleatly stupid when it comes to these old computers it wont download any updates from microsoft! it gives me pci slot 1 failure this comuter kinda stupid! i have to press f2 just about every time i tun this thing on! my e-mail is [email protected] sombody help me do somthing! if its free of course! im very poor so i cant afford to up grade this thing!
 

Answer:help me fix this thing!

if anyone that answers your post thinks my way is not necessary than please feel free. i have had major problems in the past, i suggest that save as much work that you want on to cd/disks whatever...and start over. how old is your computer. what operating system do you have (98/XP/ME). when you boot up your computer you should have the option to start in recovery console. select restore to factory settings. it is tedious i understand but sometimes i get sick of messing with it and just start over. also, you can download and program called "hijackthis" and post your report on this thread and someone can look at it and might be able to help you more than i.
 

2 more replies