Computer Support Forum

How to force a user log off at a set time

Question: How to force a user log off at a set time

i would like to set my computer to log my user off at 9:00 pm weather i am using it or not. is there a way to set a specific user to do exactly this on my home computer. i have a relatively standard pc operating windows XP.

Relevance 100%
Preferred Solution: How to force a user log off at a set time

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: How to force a user log off at a set time

http://samanathon.com/windows-tip-s...Further down the page are instructions on using the task scheduler.

3 more replies
Relevance 56.58%

Does anyone know how to force Windows 10 to perform its user preparation steps after a user already has a profile. I'm attempting to migrate a profile from Windows 7 to Windows 10, but the Start menu isn't working. I suspect this is because the OS never performs its preparations. Any ideas?

Answer:Force User Preparation on User Logon

Hi Chekmayte, welcome to Ten Forums. The start menu not working is a known bug that sometimes occurs. You could try using the system file checker command (SFC) to check system file integrity. This is from the tutorial forum. SFC Command - Run in Windows 10 - Windows 10 Forums . See if that gets your start menu working.

more replies
Relevance 56.58%

Does anyone know how to force Windows 10 to perform its user preparation steps after a user already has a profile. I'm attempting to migrate a profile from Windows 7 to Windows 10, but the Start menu isn't working. I suspect this is because the OS never performs its preparations. Any ideas?

Answer:Force User Preparation on User Logon

Hi Chekmayte, welcome to Ten Forums. The start menu not working is a known bug that sometimes occurs. You could try using the system file checker command (SFC) to check system file integrity. This is from the tutorial forum. SFC Command - Run in Windows 10 - Windows 10 Forums . See if that gets your start menu working.

1 more replies
Relevance 51.66%

This link contains WinRar software (wrar501.exe 1.68MB):
WinRAR download and support: Pre-Download
This software can be installed on Windows XP by a standard user (not administrator). It will ask which folder to install into.
But on Windows 8 I can't install the same software as standard user. It always prompts for administrator's password to continue (let's just say I do not have the password).
How can I force to install software as standard user on Windows 8 ?
Thanks

Answer:How to force installing as standard user?

You cannot install software without administrative rights. A great deal of work went into the design to ensure that this would not be possible. There is no workaround.

2 more replies
Relevance 51.66%

On first boot of a PC with WinXP (Home) installed what procedure should one follow to avoid being prompted for a user login on subsequent boots?

Answer:Force no user / password on first boot of XP

Accounts options --- To stop your system from displaying the Welcome Screen, go to "Start->Run" and type in "control userpasswords2" (but without the quatations). Untick the "Users must enter a username and password to use this computer" option and click OK

3 more replies
Relevance 51.66%

We run several PCs for our library patrons and one of the most annoying scenarios we face is the fact that users will often CTRL+ALT+DEL at the end of their sessions. Because we use a third party commercial product to manage time and printing ... this can cause issues. Is their a way ... if CTRL+ALT+DEL is used that Windows 7 can be forced to automatically log back in? I saw this once on some HP Thin Clients ... but I cannot duplicate (user hits CTL+ATL+DEL thinking they will get to a login box but Windows logs them right back in). Many thanks for any and all suggestions -

Answer:Force A User To Stay Logged In

I think you can change c-a-d to something like shift ctrl-alt-del.A Pit Bull is like a gun you can pet. And there is no safety on it.

3 more replies
Relevance 51.25%

I have an issue with my Vizio tv when trying to use it as a monitor for my computer where the computer thinks the screen is on when it is off and off when it is on. So when I turn my tv on the computer thinks it just turned off and the tv reads no input. If I reset my computer with the screen on it will then work and send a signal to the tv. This does not happen on my Sharp tv or Magnovox tv so I am assuming there is a problem with the Vizio tv but I am hoping I can solve it with the computer. I would like to force the computer to send a signal to the tv no matter what state it thinks the tv is in (off or on). Is this possible? I am using an hdmi output and the tv works fine with my comcast box using the same hdmi port.

Answer:Force screen output all the time?

 Not knowing what kind of computer you have, all I can tell you is that I have a Dell Inspiron 620 desktop with HDMI out that connects fine to my 32" Vizio TV whether the TV is on or off when I power up the computer.  
 
Good luck. 

4 more replies
Relevance 51.25%

Hi,

I looking for a way to limit time on the PC - auto lock Windows after 30 minutes, even (and especially) when the computer is not idle.
When the user will log back into Windows by entering the Windows password, the counter will start again from 30 minutes.

The app should start automatically and silent with Windows, and the user should not be able to stop this app without a password.

Thanks, Nir.

Answer:Force lock windows after set time

Use parental controls. Only works on user accts, not admins.

9 more replies
Relevance 51.25%

I'm implementing a new policy that forces our computers to sleep after 30 minutes. The problem is that this interferes with our off-hours virus scanning and scheduled shutdown procedures.

Is there a way to force Windows to wake up at certain times? Preferably a way that could be pushed out via SMS or something else.

This would solve all my problems.

Thanks.
 

Answer:Force Windows to wake at a certain time

Create a scheduled task, in its properties set a check box next to 'Wake the computer to run this task'.

If that does not work follow http://support.microsoft.com/kb/929463
and make sure that S3 sleep mode is not disabled in BIOS.
 

12 more replies
Relevance 51.25%

Hi,

is there a way to force all applications of several Windows users to use a different local IP address? So user A has all his applications bind to .1, user B traffic only comes from .2 etc.

I know about ForceBindIP but it doesn't work with all applications.

Edit: No suggesting VMs please, I'm exactly trying to move away from that since it's overkill for the task.

Thx
 

Answer:Force Windows user to a specific IP address?

You want the IP address to follow the user, regardless of the computer they log on to?
 

7 more replies
Relevance 51.25%

Just want to start off by saying I'm a noob so bear with me.

Background: We have multiple fire stations running Vista Business where there could be 20 users logged onto the PC at any given time, thanks to "fast user switching" We encourage fast user switching its just, the users never log off and after weeks of not rebooting its starting to cause issues.

Goal: I' am trying to write a script or a task that will run that would log off users who have been inactive for 2-3 days. I do not want this to affect the others users who are already logged on the the PC.

Thanks,
Alex

Answer:Force user logoff after 3 days of inactivity

Hello Alex, and welcome to Vista Forums.

I'm not sure how to do what you are wanting, but as a workaround for now, you can use Task Manager in an administrator account to log off these users.

Task Manager Users - Log Off a Local User

Hope this helps some,
Shawn

3 more replies
Relevance 51.25%

I have a machine with a fresh install of windows seven. After creating the user, I decided that they should not be an administrator so I enabled the administrator account for me, and set their user privileges to standard. I wanted to force the user to have to change their password the next time they log in. For some reason when I go through the computer management to the user and go to the properties of the standard user, I am not able to check the box to force them to change their password at next log in. This may be a simple thing to fix, but I am still not used to all of the UAC on seven and am unsure of how to resolve this. Thank you.

Answer:Force user to change password at login

U will need to uncheck the other two boxes("User cannot change password"and "Password never expires.") before you can click the "User must change password at next logon"

2 more replies
Relevance 51.25%

Hi there

I've trying to invoke a fix on the fly and have got a mixed windows workstation environment on my network. For particular reasons, I don't want my windows XP users to use a Windows 7 machine and equally I don't want a Windows 7 user to use a Windows XP machine. Silly I know but there you go.

I've set up a couple of WMI filters that determine the machine type and have used the following script to ensure that each user type is logged off and the PC restarted.

Option Explicit
Dim objShell
MsgBox"The detected logon method is not supported " & chr(13) & chr(13) & "Please revert to using your own computer." & chr(13) & chr(13) & "This computer will now restart" & chr(13) & chr(13),0,"Invalid Logon Detected."
Set objShell = WScript.CreateObject("WScript.Shell")
objShell.Run "C:\WINDOWS\system32\shutdown.exe -r -f -t 0"

For the Windows XP users on Windows 7 machines it works fine, however when a Windows 7 user logs into a Windows XP machine, it displays the message but won't do the restart bit on the Windows 7 machines.

Do I need to create some elevated permissions for my windows 7 machines.

Answer:Can I force a user to log off automatically through a logon script?

Try to run interactively.

C:\WINDOWS\system32\shutdown.exe -r -f -t 0

works on winxp?
------------
Why did you create those user accounts? You don't let them logon! You don't simply log them off but even shutdown.

8 more replies
Relevance 50.43%

Hi Everyone,

I'm using SCCM to setup Windows 8.1 on a large batch of computers for
unmanaged deployment to end-users. SCCM is used to install a couple applications and activate Windows. Afterward, Windows should return to first-time setup and the User Account Creation screen (OOBE default). The problem is that somewhere during
SCCM OSD, Windows goes through OOBE and then comes up without any configured user account.

Think of it like an OEM shipping a new computer with pre-installed software. The end-user will need to create an account to start using Windows. Any thoughts on how to invoke this screen without re-sysprepping after software installs?



Note: Before SCCM, I would simply remove the user account line(s) from my unattend answer file and on next boot Windows would act like it would out-of-the-box (OOBE).



Thanks in advance - dom.nick

More replies
Relevance 50.43%

Hello! Edge is not too bad as a tablet (SP4) browser, especially when browsing in portrait mode. Most sites have responsive design and automatically resize to fit the width if you switch to portrait. And if you zoom to 300% or more you mostly get only one column and avoid the annoying ad-column. If sites don't do this automatically they often have a m.* version of their site, like m.windowscentral.com. But what really annoys me is that it is impossible to get to the mobile version of google.com, honestly, google.com in edge is awful on a SP4. I know that there is a mobile version of google.com, the one where you see "View Google in: Mobile | Classic" at the bottom, I get it on my Nexus 7.
Those of you with w10m, do you get the mobile version of google in Edge?

More replies
Relevance 50.02%

Is there any command to make all the workstations on a domain sync to the time on the server?


Im looking for a command i can put in that will do this from the server if possible.
 

Answer:How to force time sync to workstations in Win2k Server?

Set the DHCP options on your DHCP server for a time server. Specifiy one of your servers to sync to. Whenever a PC gets a IP from the DHCP server, it'll get the Time Server option and sync with it.
 

4 more replies
Relevance 50.02%

I have a workbook that has 3 sheets that should not be seen unless a password is put in. I have accomplished this by inputting the following module for the workbook:

Option Explicit
Option Compare Text
'Password to unhide sheets
Const pWord = "MyPassword"

Sub HideSheets()
'Set worksheet to Very Hidden so that it can only be unhidden by a macro
Worksheets("Castle").Visible = xlSheetVeryHidden
Worksheets("Hibbert").Visible = xlSheetVeryHidden
Worksheets("Laroche").Visible = xlSheetVeryHidden
End Sub

Sub ShowSheets()
'Prompt the user for a password and unhide the worksheet if correct
Select Case InputBox("Please enter the password to unhide the sheet", _
"Enter Password")

Case Is = pWord
With Worksheets("Castle")
.Visible = xlSheetVisible
.Activate
.Range("A1").Select
End With
With Worksheets("Hibbert")
.Visible = xlSheetVisible
.Activate
.Range("A1").Select
End With
With Worksheets("Laroche")
.Visible = xlSheetVisible
.Activate
.Range("A1").Select
End With
Case Else
MsgBox "Sorry, that password is incorrect!", _
vbCritical + vbOKOnly, "You are not authorized!"
End Select
... Read more

Answer:Force user to enable macros and links on worksheet_open object

Hi.
I create a main workbook(A) that call other workbooks. I use information from one workbook and i update other workbooks accorderly. The problem that i face is that when i hide activemenu, commandbar enable to false, and displayfullscreen to true and i use application.screenupdating to false and then set it to true a light blue line appears on top of my screen

This is a code i use to hide menu
'
Application.DisplayFullScreen = True
Application.CommandBars.ActiveMenuBar.Enabled = False
Dim Cbar As CommandBar
For Each Cbar In Application.CommandBars
Cbar.Enabled = False
Next
'
Please help!!!!!!!!1

1 more replies
Relevance 50.02%

A PC has Windows 10 (version 1703, build 15063.726) installed on it. A person named Robert has a user account on it, named Robert. A person named Jennifer has a user account on it, named Jennifer. The user accounts Robert and Jennifer are "Standard" type accounts. There is a third user account, named Adm, and it's type is "Administrator".

The PC specs are: laptop, brand Asus, model X550CA, cpu Intel Celeron 1007U 1.50GHz, 8 GB RAM DDR3, 500 GB HDD 5200 RPM, 120 GB SSD.

Windows 10 default behavior, case 1 - the Robert and Jennifer user accounts are both password protected
Jennifer turns PC on.At the sign-in screen, the password field for the account Robert is shown.At the sign-in screen, Jennifer clicks on the account Jennifer in the lower left part of the sign-in screen, then types her password and presses Enter.Jennifer clicks on the "Start" button on the taskbar, clicks on the "Power" button, then clicks "Shut down".Robert turns PC on.At the sign-in screen, the password field for the account Jennifer is shown.Robert clicks on the account Robert in the lower left part of the sign-in screen, then types his password and presses Enter.

Windows 10 default behavior, case 2 - the Robert user account is password protected, the Jennifer user account is not password protected
Jennifer turns PC on.At the sign-in screen, the password field for the account Robert is shown.At the sign-in screen, Jennifer clicks on the account Jenn... Read more

Answer:force default user account to always be selected on sign-in screen

Originally Posted by Explorer9


Question 1

Is it possible for Robert to change Windows 10's default behavior, to the behavior described below?

Robert or Jennifer turns on the PC.At the sign-in screen, the password field for the Robert user account is shown, even if Jennifer was the last person to sign-in and then click on "Shut down" from the "Start" menu.

Question 2

If the answer to question 1 is yes, then what settings does Robert have to make, in order to get the behavior described at question 1?




Yes, or at least a close approximation. Set Robert to log in automatically, but do not give Robert's password when setting it up.

Sign in User Account Automatically at Windows 10 Startup

It will say 'the name or password is incorrect' with an 'OK' button. Click OK and you go to the sign in screen with Robert's name and the password box.

0 more replies
Relevance 50.02%

I have made a couple registry entries to try to resolve it (adding an application data string) but 2 of the 3 users have to enter their passwords everytime (the box to make them do it is not checked) and one of my users has to enter bother user name and password. We use an exchange server, if that matters.

I would appreciate any help you good people can offer.
 

Answer:How can I force Outlook 2007 to maintain user name and passwords, using exchange?

16 more replies
Relevance 49.61%

I am wondering if there is a way to make a popup for an application (balloon, notification, etc) from the system tray to stay open until the user manually closes it? I know that you can adjust the timing of how long they stay up but we have an application that we want a popup indicating a new communication to stay open on the desktop until the user closes it. Any ideas? Thanks for any help.

Answer:Force popup balloons and notificaitons to stay open until user closes

You can set them to stay open (until user clicks close) for a maximum of 136 years. I suppose that's long enough.

Notifications - Change How Long to Stay Open

Option Two = Step 6

Time in seconds. For 136 years try 4294967295 seconds.

1 more replies
Relevance 49.61%

I'm finalizing a new Group Policy for a call center which my initial setup was to use Internet Explorer (no Kiosk mode) as the replacement UI, but this removes any ability to have a desktop wallpaper as it's just a black background. Is there a way to write a script to force a wallpaper through?

Honestly I wouldn't mind just having IE in kiosk mode, but the users need to have tabbed and multi-window browsing, and having a required corporate wallpaper is a must. :/

Any thoughts would be great!

BTW - i'm using Server 2008 w/ Win7 end-users.
 

Answer:Custom User Interface w/Group Policy..no way to force desktop background?

use bginfo to set it...
 

1 more replies
Relevance 49.61%

Is there any way for an administrator to force a user to log off a locked workstation when Fast User Switching is disabled? 

Answer:Administrator force logoff of locked workstation without Fast User Switching

I assume you've "disabled" Fast User Switching by the Group Policy Hide entry points for Fast User Switching.
Very good question.  There is certainly no way at the "locked" screen to enter an alternate user or force a logoff.
I suppose you could connect in remotely via RDP, or maybe (if you want to get tricky) schedule a SHUTDOWN /L command to run via remote connection to the Task Scheduler (e.g., via MMC).
It's occurred to me that the above policy change isn't really disabling Fast User Switching at all, but just the points of control.  What is it you're specifically trying to protect against by "disabling" Fast User Switching?
-Noel

15 more replies
Relevance 49.2%

Hi, On my new T61 something is happening. I create my user local profile and then create a user on domain.I already copy my data into my folder Document.But everytime that I log on my user account, appears a new folderon the Folder Users with my "account.domain.001", "account.domain.002", "account.domain.003"What is happening? I need to reinstall my T61 from my Start Recovery Disc?  Thanks in advance, Ruben Elizondo

More replies
Relevance 49.2%

Hi, I am using Teamviewer to remotely control my friend's computer and help him with tech problems, and I need to help him with a certain thing that will take a long time. He gets bored of me controlling the computer for so long, so I want him to be able to do something else on his computer while he waits. Can I control his computer in the background while he has a different window open so he can watch videos while I work on his computer?

And if not, is it possible to make a 'plugin' for teamviewer to do this?

I really need this feature, so thank you so much to anyone that can help me with this.
 

Answer:Solved: Teamviewer MultiTasking (Local User and Remote User Using At The Same Time)

7 more replies
Relevance 45.51%

So... Before anyone tells me to send it to Logitech for repairs, I should mention that there are none that I know of in my area, and I'm not willing to pay R300 (ZAR) postage to send a big box 600km away to get my wheel 'checked'. Other than that, it's already nearly 3 years old and way out of warranty...

Now, onto the finer details. The force feedback suddenly stopped working one day a few months back. There was no funny smell or smoke or unusual amount of heat, etc.. Anyways, long story short: I suspect the motor is the culprit here, I can't see any damage or burn marks on the IC boards..

A Google search for the details on the side of the motor returns nothing even remotely related to Logitech or electronics in general, so I'm hoping someone can help point me in the right direction here.

Markings on the side:
RS-545PH-12320
* Made in China
TD417427
50.0V

The * above is a symbol, almost like a logo, but I don't recognise it... I've redrawn it in Paint (see attached), perhaps someone else knows it...? Other than that, I've also attached a photo of the motor with a CD beneath it for a size reference.

I don't play racing games enough to warrant buying a new wheel, and everything else on the wheel still works, I simply don't have any force feedback and the wheel obviously doesn't center itself anymore (no springs, all done with the motor). If anybody can help point me in the right direction with looking for a way to either test / repair / replace this motor, I would be eter... Read more

Answer:Logitech Driving Force EX - Force Feedback Motor Query

Hello, I am also facing the same problem as faced by you. The wheel is working fine but there is no ff. I dont know whether the fault lies with adapter or with motor or it is a circuit problem. Could you please tell me how did you manage to solve your problem??

1 more replies
Relevance 45.51%

Windows 10 won't install because NVIDIA Ge Force 6150 n Force 430 incompatible

Answer:Windows 10 won't install because NVIDIA Ge Force 6150 n Force 430 incompatible

Originally Posted by Windows Central Question Windows 10 won't install because NVIDIA Ge Force 6150 n Force 430 incompatible That's a Invidia iussue. Uninstall it and retry, then Win 10 should auto install your video card or if fails you can do it manually via nvidia.com site

more replies
Relevance 45.1%

Hello everyone!

I am looking for information on a issue I have when I open Delta Force Task Force Dagger.

The game will actually open two instances of itself, I will be able to play in the one that pops up but when I click on the Exit button there is still a instance on the start bar. I have to maximize that then it goes back into the game which at that point I have to click the exit button again and then the program is closed.

I checked on Novalogic's web site support and even emailed them but no resolve either way.

Thanks in advance for any help!
Ken

 

More replies
Relevance 44.69%

So I was browsing the web, looking for a way to disable the Start background for a certain user (he keeps toying around with windows 8) and other permissions too. Most things I disabled were meant to be used with gpedit.exe, but I used a user Snap-In in mmc.exe. However, I and some other people want to change the background. So how do I disable this setting for a specific user?

Answer:Force specific background color for a specific user??

It's been a week and no answer...

1 more replies
Relevance 42.64%

I'm a first time user of this program, was given instructions how to scan, and log for any mischievious files or virus'. My computer has been running really slow lately, and i'm trying to get to the root of its problems.



================================================== ==================
Log was analyzed using KRC HijackThis Analyzer - Updated on 2/10/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\Program Files\NavNT\defwatch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [McAfee.InstantUpdate.Monitor] "C:\Program Files\McAfee\McAfee Shared Components\Instant Updater\RuLaunch.exe" /STARTMONITOR

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.98.2
Scan saved at 945 PM, on 2/27/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
C:\Program Files\Visual Networks\Visual IP InSight\Sympat... Read more

Answer:First time user, log help

You have an outdated version of HijackThis. Click here to get the latest version of HijackThis and run it.

Before you give us a new log here, if we gave you instructions for a fix, please do the fixes first and then post the new log with this updated version.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Get HijackThis Analyzer and save it to the same folder as the hijackthis.log file. Run HijackThis Analyzer and type in y if you agree. The result.txt file will open up in Notepad. Copy the whole result.txt log and post it in the forum. We do not need the original hijackthis.log (unless we ask for it). Do not fix anything in HijackThis since they may be harmless.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' ... Read more

1 more replies
Relevance 42.64%

Hi my computer has been running extremely slow and i would like to know if it is malware or something else. here are my logs, i can really use some help.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:42:21, on 02/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\System32\svchost.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\windows\system32\svchost.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Google\Web Accelerator\GoogleWebAccWarden.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Google\Web Accelerator\googlewebaccclient.exe
C:\Documents and Settings\user\Bureau\Trojan Guarder.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\... Read more

More replies
Relevance 42.64%
Question: first time user

I'm new and clueless! My originating problem was Outlook Express spell check in French rather than English. Solution links brought me here to MajorGeeks. Anything I hover the mouse on shows an add. Everything I click goes somewhere I didn't think it would. How do I identify which link to choose from the MG page I was sent to?
 

Answer:first time user

What version of OE are you using. Do you have MS Office.
MS indicated that the 2 software versions are not compatible. I found this article on their help section.
http://support.microsoft.com/kb/932974
 

2 more replies
Relevance 42.64%

I've just recently stumbled accross your forum and let me first say "THANK YOU!" I've followed a few threads and actually found some problems within my own system, i had that Win Common Module, so i got rid of that, I've downloaded AVG Anti-spyware that found like 26 spywares in safe-mode and one trojan, i've followed many steps that other's have posted trying to free up my system of un-needed clutter. Also updating things and downloading programs you've suggested from majorgeeks, such as the new Java.
anyways, without further thank you, thank you!

my question could you have a look at my HJT log, and tell me if i should do anything, the thing is I haven't actually told HJT to fix anything, I dont' personally see what needs fixing if you could look it over and give me any suggestions I'd be extremely appreciative.
thank you!

Jarrod, p.s. i am an intermediate to expert user ( i refrain from saying expert ) cause i'm here for help, but i know how to do most things without tutorials

Logfile of HijackThis v1.99.1
Scan saved at 11:55:40 AM, on 12/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\asuskbservice.exe
C:\Prog... Read more

Answer:First time user (HJT)

found a plethora of problems i'm just going to fix them so i hope that doesnt take away from any suggestions. let me know if you need any more information
 

1 more replies
Relevance 42.64%
Question: first time user

i am sorry if i post wrong or am confused about what is going on because i do not know what i am doing. i try to go to certain websites and a red page comes up saying that this sites security certificate is out of date or that it isnt safe to proceeed. i went to hijack this and i have a log from their scan and i clicked on your link from them because they said i should post my log to you. i tried to read your guidelines,etc. and am not sure if i am allowed to post that log or not. please, be patient with me. i do my bills online and i have 6 children who use our computer for school and fun. unfortunately they are to young to help me with this problem. they know more about computers than i do. thank you for your time.

Answer:first time user

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the ... Read more

2 more replies
Relevance 42.64%

I have never used this program but decided to try it to see if I could find out what's wrong with my computer. Here is the results of the scan from Trend Micro HijackThisLogfile of Trend Micro HijackThis v2.0.2Scan saved at 6:19:11 AM, on 7/14/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\acs.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exeC:\WINDOWS\system32\DVDRAMSV.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exeC:\Program Files\AVG\AVG9\avgnsx.exeC:\WINDOWS\system32\TPSMain.exeC:\Progr... Read more

Answer:First time user needs help

Hello, amandaloveall.My name is aommaster and I will be helping you with your log.I apologize for the delay in response we get overwhelmed at times but we are trying our best to keep up.If you have since resolved the original problem you were having, I would appreciate you letting us know. If not please perform the following below so I can have a look at the current condition of your machine.ThanksShould you still require assistance, please take note of the points below:Please track this topic by either adding it to your favourites or clicking the Options button at the top of this thread and then Track this topic.Please disable word-wrap before posting logs. This can be done by clicking Format and un-ticking the word-wrap feature in notepad. The logs that you post should be copied and pasted directly into the reply. Only attach them if requested or if they do not fit into the post.If you do not reply within 5 days, I will have to close your topic. Should you not be able to meet this, please notify me so that I will leave the topic open.Please do not install, update, or run any programs for the duration of the fix.If you do not understand the instructions I provide, please don't hesitate to ask. That's what I'm here for Please continue to reply to this topic until I give you the all clean. Just because there are no symptoms of infection doesn't mean that the computer is clean.If you are running Vista, please run all the fixes as an administrator. This is done ... Read more

3 more replies
Relevance 42.64%

want to buy dvd writer for sons christmas pc rns windows 98SE with Intel celeron (tm) think it its 500 mhz 63mb ram what should i buy and how do i find if processer speed is correct ie 500mhz not to tech help as am a pc dummie thanks

Answer:help first time user

Start > settings > control panel. Click on System. The CPU speed is shown.

5 more replies
Relevance 42.64%
Question: First time user

My family is filled with careless siblings and parents, so naturally spyware on my computer is common, but recently pop ups have been showing up randomly, even when a browser isnt openi ran Spybot S&D, Ad-aware, CWshredder, and HijackThis!i think i am on a good track to fix the problem, but i dont know what to fix when i searched my computer with HijackThis, please help!!!Logfile of HijackThis v1.97.7Scan saved at 5:46:06 PM, on 5/25/2004Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\System32\drivers\CDAC11BA.EXEC:\WINDOWS\System32\CTsvcCDA.EXEc:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\System32\nvsvc32.exeC:\Program Files\Softex\OmniPass\Omniserv.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\WINDOWS\system32\winlogon.exeC:\Program Files\Softex\OmniPass\OPXPApp.exeC:\WINDOWS\Explorer.EXEC:\windows... Read more

Answer:First time user

O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEThis file is your sound driver's error reporting feature. I recommend removing it and verifiying that your sound still works. Technically, it's not totally malicous, just not nessicary however, so you may leave it.Kill these entries:R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)O2 - BHO: (no name) - {AF9118B5-D861-4818-90E2-946641DCC561} - C:\WINDOWS\areeqhzb.dllO4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"Registration reminder. Kill if you don't want to register.O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeQuicktime does not need to load at startup.O4 - Startup: StripSaver.lnk = C:\Program Files\StripSaver\StripSaver.exeO4 - Startup: VirtuaGirl2.lnk = C:\Program Files\Vg\VirtuaGirl2.exeO4 - Global Startup: VTAgentReboot.exeO10 - Broken Internet access because of LSP provider 'xfire_lsp_6390.dll' missingThis one can probably be fixed by the LSPfix utility. http://cexx.org/lspfix.htmO16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} - http://cabs.roings.com/cabs/chedownzip.cab---O4 - HKLM\..\Run: [awhdqpb] C:\WINDOWS\System32\numgudob.exeO4 - HKLM\..\Run: [mbqlibsz] C:\WINDOWS\mbqlibsz.exeO4 - HKLM\..\Run: [yhqd] C:\WINDOWS\yhqd.exeThese three entries look vi... Read more

4 more replies
Relevance 42.64%
Question: 2nd time user

Hey, I just got rid of a bunch of spyware on my computer. I'm at my uncle's now, helping with his computer. Ready for the Logs. I've done the preliminary scans.
 

Answer:2nd time user

double check everything and make sure you did do everything in READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal:
and all software is up to date

and run through this before attaching a log
NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting:
*Note that your HijackThis should be up-to-date (v1.99.1) and MUST be extracted to its own safe folder - C:\Program Files\HijackThis! Please do this!!!*

do not post an inline log
 

8 more replies
Relevance 42.64%
Question: First time user

I read just about everything on the "techguy" site about how to post a "hijackthis" log IN ORDER to receive general feedback on if my log looks "NORMAL". If by posting here I am breaking a rule of etiquette, please inform me OF what I should do instead.

MANY THANKS!

PMG141

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:10:02 a.m., on 25/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
C:\Program Files\Common Files\Lenovo\Logger\logmon.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
C:\WINDOWS\Explorer.EXE
... Read more

More replies
Relevance 42.64%

Hey, Im new to this forum and actually to Hijack this as well. I've been having some problems with internet explorer and a coworker of mine told me to check out hijack but i dont know what any of it means.If any one could help out it would be greatly appreciated...here is a copy of my log.Logfile of HijackThis v1.99.1Scan saved at 6:18:16 PM, on 5/31/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\ibmpmsvc.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\S24EvMon.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exec:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exec:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\System32\QCONSVC.EXEC:\WINDOWS\System32\RegSrvc.exeC:\WINDOWS\system32\TpKmpSVC.exec:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\wscntfy.exeC:\Program... Read more

Answer:Need Help - First Time HJ user

Hello dsp009 and welcome to the BC forums. After reviewing your log I see a few items that require our attention. Please print these directions and then proceed with the following steps in order.Step #1Download CCleaner and install it but do not run it yet.Remove these installed programs using Add or Remove Programs in the Control Panel:Click Start.Click Control Panel.Double-click Add or Remove Programs.Look in the Currently installed programs box for each program listed below and if it is there:Click on it to select it.Click Change (or Change/Remove) button.If you are prompted to confirm the removal of the program, click Yes.LimeWireStep #2Start in Safe Mode Using the F8 method:Restart the computer.As soon as the BIOS is loaded begin tapping the F8 key until the boot menu appears.Use the arrow keys to select the Safe Mode menu item.Press the Enter key.Step #3Start HijackThis and click the Scan button to perform a scan. Look for the following items and click in the checkbox in front of each item to select it:R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =O2 - BHO: SDWin32 Class - {04C454CE-BCCC-47A7-8ED5-496F9992AB60} - C:\WINDOWS\System32\mnhih.dll (file missing)O2 - BHO: SDWin32 Class - {3A8FF901-D17B-4B3C-8235-4519CE5A8463} - C:\WINDOWS\System32\gfsfl.dll (file missing)O4 - HKLM\..\Run: [CSV10P70] C:\Program Files\CSBB\CSv10P070.exeO4 - HKLM\..\Run: [ffucrlq] c:�... Read more

4 more replies
Relevance 42.64%

Shaw Security (F-Secure) reported a Trojan (sorry can't find name of it) and computer is running very slow:Thanks.DerekLogfile of Trend Micro HijackThis v2.0.2Scan saved at 10:29:45 PM, on 13/04/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\system32\bgsvcgen.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Shaw Secure\Anti-Virus\fsgk32st.exeC:\Program Files\Shaw Secure\Common\FSMA32.EXEC:\Program Files\Shaw Secure\Anti-Virus\FSGK32.EXEC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\Program Files\Common Files\LightScribe\LSSrvc.exeC:\Program Files\Shaw Secure\Common\FSMB32.EXEC:\Program Files\Shaw Secure... Read more

Answer:HJT log - new user, first time

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 42.64%
Question: User Time!

Can someone tell me if there is a way that i can monitor for how long a user has used my pc a day? or any software that can do that? My OS is XP Home Edition.

Answer:User Time!

click hereclick hereBut they cost, and i have no idea if they are any good, worth using, or are malware. So it is possible. These two from a google, monitor use pc

2 more replies
Relevance 42.64%
Question: First Time User

I am attempting to get through the "first steps", however, I keep receiving error messages and my computer is shutting down. I apologize in advance for improper procedures. I have already attempted a scan. Here we go. Thanks
RJ

Logfile of HijackThis v1.99.1
Scan saved at 10:53:01 PM, on 4/8/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\GWMDMMSG.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FinePixViewer\QuickDCF.exe
C:\Program Files\Wireless\Client Manager\CMAGS.EXE
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Rick\Desktop\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BhoApp Class - {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} - C:\Program Files\WinBudget\bin\matrix.dll
O2 - BHO: Root.CERT - {D6EAC4ED-2842-4FB6-A8B4-B1A300... Read more

Answer:First Time User

Here is the report requested during initial setup:
Incident Status Location

Adware:Adware/FastFind Not disinfected C:\DOCUME~1\ALLUSE~1\APPLIC~1\root\root.dll
Virus:trj/downloader.aee Disinfected Operating system
Spyware:spyware/apropos Not disinfected Windows Registry ... Read more

4 more replies
Relevance 42.64%

Logfile of HijackThis v1.99.1
Scan saved at 1:18:48 PM, on 9/30/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Documents and Settings\Administrator\My Documents\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090... Read more

Answer:First time user in need of help.

I just ran Combofix. here is that log and new hijackthis log.
ComboFix 07-09-30.10 - Administrator 2007-09-30 13:40:43.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.89 [GMT -5:00]
Running from: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\video ax object
C:\WINDOWS\system32\hgghe.dll
C:\WINDOWS\system32\wintisu32.exe
C:\WINDOWS\system32\yabby.dll

.
((((((((((((((((((((((((( Files Created from 2007-08-28 to 2007-09-30 )))))))))))))))))))))))))))))))
.

2007-09-30 13:39 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-09-30 09:41 <DIR> d-------- C:\VundoFix Backups
2007-09-30 09:23 <DIR> d-------- C:\WINDOWS\BDOSCAN8
2007-09-30 09:13 487,424 --a------ C:\WINDOWS\system32\msvcp70.dll
2007-09-30 07:49 36,352 --a------ C:\WINDOWS\system32\nnnmnki.dll
2007-09-30 07:20 <DIR> d-------- C:\Program Files\sony
2007-09-30 03:39 <DIR> d-------- C:\NVIDIA
2007-09-30 03:36 96,384 --a------ C:\WINDOWS\system32\drivers\Rtnicxp.sys
2007-09-30 03:36 <DIR> d-------- C:\WINDOWS\OPTIONS
2007-09-30 03:36 <DIR> d-------- C:\Program Files\Realtek
2007-09-30 02:56 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\VersionTracker Pro
2007-09-30 02:36 23,600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS... Read more

9 more replies
Relevance 42.64%

Hey everyone. This is my first time posting as I am a new member. I've been having a lot of computer trouble. I consider myself an established computer user. However, I'm stuck. I downloaded your software and the following are the results. I want mail.yahoo.com to be my homepage. I also use yahoo as my main mail source. Please help. Thanks.


Logfile of HijackThis v1.99.1
Scan saved at 3:03:10 AM, on 4/9/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Greatis\RegRunSuite\WatchDog.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\default\Local Settings\Temporary Internet Files\Content.IE5\85MNS1YV\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http:/... Read more

Answer:HJT Log Help for 1st Time User

Hello and Welcome to TSF

Not much in your log just a few ....

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

You have placed HJT in a Temporary location. Please move to a proper location before doing the fix.
(Always create a Folder for HiJackThis anywhere but your Temp/Temporary Internet Folders or Desktop. A good place to make a folder would be in My Documents, as this is where it will save the backup files needed if there's a problem.)


The Temp folders should be cleaned out periodically as installation programs and hijack programs leave a lot of junk there. Download CleanUp! ( Alternate Link if main link don't work) and install it. You will use this later.


Go to My Computer >Tools >View >Folder Options tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing / visible. Uncheck the Hide protected operating system files option.

Reboot your system in Safe Mode (By repeatedly tapping the F8 key until the menu appears).


Open Hijack This and click on Scan. Check the following entries (make sure you do not miss any)

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - C:\PROGRAM FILES\MCA... Read more

6 more replies
Relevance 42.64%

Hey, Im new to this forum and actually to Hijack this as well. I've been having some problems with internet explorer, and the overall performance of my computer, and a coworker of mine told me to check out hijack but i dont know what any of it means.If any one could help out it would be greatly appreciated...here is a copy of my log.Logfile of HijackThis v1.99.1Scan saved at 9:22:31 PM, on 6/6/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\QuickTime\qttask.exeC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\AIM95\aim.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\Soulseek\slsk.exeC:\WINDOWS\system... Read more

Answer:Need Help - First Time HJ user, HJT

Well I do not see anything wrong with the computer. You may want to go into add/remove programs and uninstall Viewpoint manager.

1 more replies
Relevance 42.23%

so i've been using winamp for the last couple years
but all these excellent reccomendations of itunes
fianlly took me over and i decided to install it today.

as i was trying to edit the playlist in itunes, i decided to delete some of the songs
from the list.

i right clicked the file and pressed clear.
it then asked me to put the file in the recycle bin, or to keep the file
i thought that it just meant remove the file from the playlist, not my whole hardrive
so i went and clicked remove to recycle bin.

after about 10 mins, i opened my recycle bin, and noticed that all these songs were being deleted. so i selected all of them and pressed restore.

now this is where the problem is.

usually when i press restore on a file, it goes back to exactly where it used to be
but this time, when i clicked restore none of the files moved.
i dont know if it was because there were a bunch of files (say, 100-200)
or if something else was the case.

i did highlight all of them and try to restore them at once, and i duno if thats a no no.

so now im missing a grip of songs, and i cant find where they went.
i definitely clicked restore, and not empty.

pleaseeeeee ! help
- thank you.
 

Answer:first time user, need help big time !

have a look in the following directory

My Documents>
------> my music>
----------> Itunes>
----------------> Itunes Music>

search there - it may be in the directory but not in the Itunes database
you could also do a search on your harddrive -
use
windows explorer
in XP
start >
my programs>
accessories>
windows explorer

and then search
look for files and folders
and out a name you know you deleted
 

1 more replies
Relevance 41.82%

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:56:05 PM, on 7/11/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18975)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\rundll32.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
C:\Windows\system32&... Read more

Answer:first time user for hijackthis =)

Hello kindle143 ,Can you please tell me what problems you're having? Sometimes the logs don't tell us everything we need to know so we can help you.Thanks,tea

12 more replies
Relevance 41.82%

I have just removed MS Office 2003 from an old laptop and installed it on my new Vista laptop. However, every time I open Outlook, Word or Excel the End User agreement needs to be accepted. Anyone know how to stop this? Thanks.

Answer:MS End-User agreement every time

A couple of thoughts:1 - when the EULA comes up, do you accept it or cancel it?2 - have you tried to run "detect and repair"?

2 more replies
Relevance 41.82%

Hello,

I have done a symantec online scan and know I have at least two viruses. backdoor.graybird (/system32/ope9.exe) and Downloader Trojan (system32/opeB.exe).

I also ran the Hijack this software and attached the log.

Also ran ad-aware and cleaned up all found issues with that.

Any help would be appreciated.

Below is the DDS.txt
--------------------------
DDS (Ver_09-02-01.01) - NTFSx86
Run by HP_Administrator at 17:17:28.79 on Wed 03/04/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_12
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1982.1223 [GMT -6:00]
============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Microsoft Shared ... Read more

Answer:First Time User - Getting Ad Popups

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. Please download Trend Micro - HijackThis. Do a new scan with Trend Micro - HijackThis and post it in your next reply.] Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until instructed to do so! Let me know if any of the links do not work or if any of the tools do not work. Tell me about problems or symptoms that occur during the fix. Do not run any other programs or open any other windows while doing a fix. Ask any questions that yo... Read more

2 more replies
Relevance 41.82%

Hey guys, I'm new to WPCentral, though I have been lurking because of my SP3. I've been over at Crackberry for the last few years and love me BlackBerry Z10 (you guys should give it a try, simply as tech enthusiasts).
Anyways, I was thinking about buying a WP just for the fun of trying a new phone.
I was hoping you guys could help advise me on what phone to look at to balance the following features:
- Reasonable price (a phone to try a new OS not necessarily be a daily driver)
- Want quality performance as to not hamper my experience (not a spec chase as can be seen from me still using my Z10, as long as the phone works well I'll be happy)
- A phone that is supposed to get the WP10 upgrade (so I'm not wasting my time on an OS that is being replaced) Also, I'd like to try out the integration between my SP3 and this phone when Win10 comes out.
Oh and I'm on AT&T in case anyone needs to know.
Anyway thanks in advance!

Answer:First time WP user, what phone should I get?

Either the 635 or wait for the Lumia 640 XL

14 more replies
Relevance 41.82%

I dont have any major issues as of this moment. I keep my computer pretty clean with Anti-Vir and A-squared free. I use to use Zone Alarm fire wall but have recently moved on to Comodo Firewall. I'm still learning the controls on Comodo but it seems alot more feature rich.current minor issues: Occasional PC freezes (may be due to aging ram from 2001), World of Warcraft lag spikes (may be due to server/isp traffic load), explorer browser slow down with no increase in cpu usage.I would like to knockout or minimize some of the svchost.exe, I went through and cleaned up my services to help but I dont think I caught all my un-need items/processIf anyone could point out if i missed anything that I should be concerned with I would be grateful. Even a peace of mind of a clean bill of health would be awesome as well.Thanks in advance,Logfile of Trend Micro HijackThis v2.0.2Scan saved at 7:27:15 PM, on 7/13/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\AntiVir PersonalEdition Classic\sched.exeC:\Program File... Read more

Answer:1st Time Poster/ Hjt User

Hello and welcome to BCWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. We aim to provide the valuable service known to come from BC to every member we can, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.Upon completing the steps below a staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.Thanks and again sorry for the delay. Please download Deckard's System Scanner (DSS) and save to your Desktop.alternate download siteDSS will do the following:Create a new System Restore point in Windows XP and Vista.Clean your Temporary Files, Downloaded Program Files, Internet Cache Files, and empty the Recycle Bin on all drives.Check some important areas of your system and produce a report for an analyst to review.Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.You must be logged onto an account with administrator priv... Read more

2 more replies
Relevance 41.82%

Hello folks, I will be receiving my T530 either tomorrow or on Monday, because they don't deliver on weekends correct?  I am planning not to do a fresh install of Windows on my laptop, because I simply don't want to screw things up. Yes I know don't make fun of me. I am not great with computers and I figured without a fresh install the laptop would function smooth as well? However, I will be doing some uninstalls. Can anybody give me advice on what programs to uninstall or keep? Are there additional drivers I need to download or does it come with all the latest drivers?Are there any other things I have to watch out for? Thanks for your input. I would appreciate it if somebody can list a step by step process.  Thanks again for taking the time. Jon  

Answer:First time user question

Others might disagree, but I don't take much off. I prefer to use one of the free anti-virus programs (I like Microsoft Security Essentials) so I take off the trial version that is installed originally. You should run Windows Update to get any new hotfixes, and I would run Thinkvantage System Update to do driver updates.

8 more replies
Relevance 41.82%

this is what the logfile said after running highjack this and im not sure what to do. basically my toshiba computer will not boot into normal mode but will boot into safe mode. i ran malwarebytes and removed over 300 adware. some were consisting within the registry. Help pleaseLogfile of Trend Micro HijackThis v2.0.2Scan saved at 6:17:27 PM, on 11/18/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: Safe mode with network supportRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.toshiba.com/searchR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.toshibadirect.com/dpdstartR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshibadirect.com/dpdstartR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.toshibadirect.com/dpdstartO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE... Read more

Answer:First time user of highjack this. Please Help!

Hello sith 24Welcome to BleepingComputer ==========================Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Under the Standard Registry box change it to All.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.===========Download This file. Note its name and save it to your root folder, such as C:\.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security program drivers will not conflict with this file.Click on this link to see a list of programs that should be disabled.Double-click on the downloaded file to start the program. (If running Vista, right click on it and select "Run as an Administrator")Allow the driver to load if asked.You may be prompted to scan immediately if it detects rootkit activity.If you are prompted to scan your system click "Yes" to begin the scan.If not prompted, click the "Rootkit/Malware" tab.On the right-side, all items to be scanned should be checked by d... Read more

1 more replies
Relevance 41.82%

Hi just used CWShredder then Spybot(found 11 entries and fixed) then Ad-aware (found crititical trojan and fixed) and then used Hijackthis last and have the following log file to show any professionals. I'm scared of deleting anything and would like to know from someone what's good and what's bad? I'll read up on the Malware help link in this forums also to educate myself. Thanks in advance.

Logfile of HijackThis v1.99.1
Scan saved at 3:51:33 PM, on 21/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\Styles\LOCALS~1\Temp\Rar$EX00.703\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dl... Read more

Answer:HijackThis Log first time user

I'm hoping there's nothing dangerous in the list..please let me know if anyone sees anything potentially harmful to my system.

8 more replies
Relevance 41.82%

Hi, I just downloaded HiJackThis today and ran a scan, It showed up with a lot of stuff and it said that I shouldn't use the fix now option on everything because it might not be bacd. AnalyzeThis does not work, I have tried to donwload that thing from the link it gave me, but even after downloading it did not work, so what do I do? here is my log

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 6:56:13 PM, on 3/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LxrSII1s.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Co... Read more

More replies
Relevance 41.82%

do i have anything to be concerned about?

thank you very much

Answer:New User - First Time Log File

Hello moltoparticolareWelcome to the Bleeping Computer Malware Removal Forum, sorry for the delay in responding, but the amount of people posting with infected computers is through the roof and we sometimes can't get to logs as fast as we would like to. If you have not resolved this issue and still need assistance, post a new HJT log as your system may have changed since your original post.Please copy and paste your HJT log into this thread and do not attach it please.Ken

2 more replies
Relevance 41.82%

Well my laptop will be coming (Laptop Computers - Satellite L305-S5883) Between Thursday and Monday. I have never used Vista before and are there any things that I should change in my settings when I get it? Or in that case, anything in general that I should do for it?

I know some people do not like Vista at all. I for one could care less what they say...I know there are people here that have had no problems. I see it that as long as you know what you are doing, you won't have any issues. I would really like to keep this from becoming one of those threads where people say that I should just put XP on it.

Answer:First Time Vista User...

Hello,

You are in luck. Microsoft just released a new PDF file in reagrds to this very question.

Download details: Windows Vista&#174; Performance and Tuning

A guide direct from Microsoft on how to tune Vista. That will be of better help than anything.

I do not do anything special with my Vista install. I just run it and it works for me jsut like XP does. But this will be of benefit to read and follow.

Cheers,
Mak

2 more replies
Relevance 41.82%

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:20:22 PM, on 12/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Windows Utilities\Hotkey.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray... Read more

Answer:First time Hijackthis user

bump one time?

2 more replies
Relevance 41.82%

Accountant, 26yo, Jacksonville, FL. Trying to fix my parents' computer. I've run S&D and AdAware many times, and I did just now before running HijackThis. Some annoying items that won't die are Xuron55 and AVGold; and I'm sure there's tons more. Thanks for looking my log over; you guys are great!Logfile of HijackThis v1.99.1Scan saved at 10:00:34 AM, on 6/28/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\drivers\CDAC11BA.EXEC:\WINDOWS\System32\DRIVERS\CDANTSRV.EXEC:\WINDOWS\System32\svchost.exeC:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exeC:\WINDOWS\wanmpsvc.exeC:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exeC:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exeC:\WINDOWS\inet20057\services.exeC:\WINDOWS\System32\msole32.exeC:\WINDOWS\System32\shnlog.exeC:\Program Files\Java\jre1.5.0_01\bin\jusched... Read more

Answer:First Time Hijackthis User

Welcome John Sapp to Bleeping Computer.That's a fine collection you have there .Let's see if we can that it on in one blow.First, let's download some helpers.Please download and install these programs - don't run them yet!!Download CWShredder.Update CWShredderOpen CWShredder and click I AGREEClick Check For UpdateClose CWShredder***Download 'SpSeHjfix' to the desktop.Rightclick a blank part of the desktop and select new folder, call it ?spfix?.Unzip the file into that folder.***Please download and unzipAbout:Buster to a folder. Inside the folder is a readme file that has instructions on the use of the program.AboutBuster MUST be updated before you use it.Update About:BusterUnzip the contents of AboutBuster.zip and an AboutBuster directory will be created.Navigate to the AboutBuster directory and double-click on AboutBuster.exe.Click "OK" at the prompt with instructions.Click "Update" and then "Check For Update" to begin the update process.If any updates exist please download them by clicking "Download Update" then click the X to close that window.Now close About:Buster***Download and unzip cwsserviceremove to your desktop. use either link below:http://computercops.biz/modules.php?name=F...ownload&id=3002http://www.mytechsupport.ca/helpwithpcs/up...rviceremove.zip***Download the Hoster from here. Press "Restore Original Hosts" and press "OK". Exit Program.***Download and install CleanUp! HereIf that doe... Read more

2 more replies
Relevance 41.82%

i've downloaded hijackthis and ran my log.my computer got infected with some spyware that is playing random noises a lot of my computer and my computer is just running much slower and such since it's been on here. and i can not figure out what to do to get it off. i got the names of some of the files it said were infected and tried to go find and delete them but it keeps telling me what i'm trying to delete is in use and i am unable to delete it.here's my log.. is anyone could help it'd be so much appreciated.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:43:37 PM, on 7/25/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\msa.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exeC:\Program Files\PrivacyCenter\protector.exeC:\Windows\sttray.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Camera Assistant Software for Gateway\traybar.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Program Files\Java\jre1.6.0_05\bin\jusched.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files&#... Read more

Answer:first time hijackthis user

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 41.82%

Can anyone help me evaluate first problem report?any advice will help.

Answer:Spybot - S&D First time user

one presumes you did fully update thed program before running it?can you tell us what the report says?

10 more replies
Relevance 41.82%

Hey everybody,This is my first time using HijackThis and I desperately need help because the spyware removal program I have isn't doing it's job. I hope I picked a good forum to get help me with HijackThis. I followed the How to instructions on posting my HijackThis log and here it is. Basically I am getting a lot of pop ups from Z1.adserver.com and others. Please HELP!Logfile of HijackThis v1.98.2Scan saved at 8:34:12 PM, on 11/23/2004Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exeC:\WINDOWS\system32\cisvc.exeC:\Program Files\Softex\OmniPass\Omniserv.exeC:\WINDOWS\system32\ScsiAccess.EXEC:\WINDOWS\System32\svchost.exeC:\WINDOWS\wanmpsvc.exeC:\WINDOWS\System32\MsPMSPSv.exeC:\Program Files\Softex\OmniPass\OPXPApp.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\system32\InetCntrl\InetCntrl.exeC:\WINDOWS\system32\RUNDLL32.exeC:\Program Files�... Read more

Answer:First time HijackThis user

Ok well, I didn't follow all the instructions (I didn't label the topic right...). Please excuse me for not doing so becuase I am a noob at this.

7 more replies
Relevance 41.82%

- Hello, as the title says, I'm new to this HJT stuff.
- I'm semi-knowledgeable about computers, I know more then how to turn it on and off, but I'm not a computer whiz by no means.
- I read the sticky on top, so here is my situation. I play WoW, and my account got hacked. That was the only thing that lead me to believe my computer has bad things in it. After much research, I found I probably have a Keylogger. So, after much more research, I was instructed to do a lot of cleaning, then do a HJT and post it here, then wait for further guidance because you know what it means, lol.
- I cleaned my system with "ATF Cleaner" "Malwarebyte's Anti-Malware" "Spy-bot search & destroy" and "Ad-Aware" per instruction I received to clean my computer of Keyloggers and other bad things.
- Plus, I use "Symantic End Point" as my Virus protection software, and I use "Windows Defender" a lot too.
- Please keep in mind that my knowledge of the internal workings of computers and software is limited at best, so feel free to break it down Barney style.

- Thank you VERY MUCH in advance for all your help in this matter.
- here is my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:58:18 PM, on 9/18/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18813)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\P... Read more

Answer:HJT Log (first time HJT user and poster)

Just curious if anybody has had a chance to look at this.

Once again, thank you in advance for your help.
 

1 more replies
Relevance 41.82%

I have a new lap top with windows 8 . So much to learn! I do not know how to see the time and date. It suddenly appears on lower left for some reason but I cannot see where to access it when I want it. I am happy that I have found this forum as Windows 8 does not look like fun!!!! Thanks.

Answer:New user - Time, date box

Hello Maine Lady, and welcome to Eight Forums.

The "Metro" clock displays anytime you open the Charms bar. Pressing the Windows + C keys is a keyboard shortcut for it.

It does take a bit to get used to the new Metro style UI in Windows 8, but once you do, you'll find Windows 8 just as easy to use as Windows 7.

Hope this helps,
Shawn

1 more replies
Relevance 41.82%

Just wondering if there is anything I should check before installing adware spyware guard and blaster Thanks for your help!

Logfile of HijackThis v1.97.7
Scan saved at 12:47:07 PM, on 3/21/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\ACSD.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\NISUM.EXE
C:\PROGRAM FILES\NORTON INTERNET SECURITY\CCPXYSVC.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\AHEAD\INCD\INCD.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\SIMPLE STAR\PHOTOSHOW DELUXE\DATA\XTRAS\MSSYSMGR.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOLTRAY.EXE
C:\PROGRAM FILES\HP DESKJET 810C SERIES\EREG\REMIND32.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\WUAUCLT.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\DESKTOP\DRIVERS\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
F1 - win.ini: run=hpfsched
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A... Read more

Answer:[Solved] First time user

7 more replies
Relevance 41.82%

I have never run High Jack This before. I hope I have done all things necessary for you to help me.
My computer is running slow and not reponding to websites like it used to. It takes forever for things to load.
Dell Demension 8300
Windows XP Home edition w/SP3 installed and IE7. All up to date. 1 gig memory, 120 gig hard drive, 3.00 Intel Pentium 4 Processor.
I use AOL for most everything I do.
When I open my Address book, on the left side where "Catagories" are, there is a line of symbols and or letters that of a font I do not recognize. They keep changing every time I open it up and I can not delete them.
I do not know if I have a Virus/Malware/etc. of have nothing to worry about.

Any and all help would be greatly appreciated.
Thank you...
DDS (Ver_09-05-14.01) - NTFSx86
Run by Owner at 0:48:24.04 on Mon 06/15/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1023.519 [GMT -7:00]

AV: COMODO Antivirus *On-access scanning enabled* (Updated) {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: COMODO Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\Program Files\Windows Defender\MsMpEng.exe
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\... Read more

Answer:1st time user of this forum

Hello MAKRLM,Please download Malwarebytes' Anti-Malware from one of these places:http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.htmlhttp://www.besttechie.net/mbam/mbam-setup.exeDouble Click mbam-setup.exe to install the application. * Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select "Perform Quick Scan", then click Scan. * The scan may take some time to finish,so please be patient. * When the scan is complete, click OK, then Show Results to view the results. * Make sure that everything is checked, and click Remove Selected. * When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note) * The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. * Copy&Paste the entire report in your next reply along with a fresh HijackThis log.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea

62 more replies
Relevance 41.82%

After being a desktop user for 10 years I finally bought a laptop today. It's the samsung notebook series 3. I haven't even switched it on yet, as I want to make sure I'm doing everything safely!The instructions in the box are brief and a complete novice like me isn't too sure of a few points. How do I charge the laptop? Do I do this before turning the laptop on? How long do I have to charge for?
It does say connect the AC adaptor before pressing the power on, but it does't say how long for. When and how often do I have to use the AC adaptor.
If there's anything vital I need to know and haven't mentioned, I'd love to hear.
Many thanks, Richard.

Answer:Help!!I'm a first-time laptop user.

Just plug the AC adapter into the wall and then into the AC jack on the laptop. Should be on one of the sides or the rear of the laptop.

Charge it when you want to or whenever the battery is getting low. You can't overcharge a laptop battery because they're Lithium-Ion batteries with circuits built in to stop from overcharging. The only things that will killthe battery are age, and heat. Heat is the biggest issue, because laptops tend to run a little hotter than desktops due to less airflow among the components.
Check this thread for more info: Useful Lithium Battery Information

It's geared towards phones, but also applies to laptop batteries somewhat.

You can plug in the laptop and turn it on and begin using it immediately. Don't have to wait for it to fully charge or anything.

9 more replies
Relevance 41.82%

I just got a 250gb SATA maxtor maxline III. I know with SATA you have to put drivers on a floppy and install them when you go to install windows, i could not find any drivers for the hard drive and i was wondering if i have to get the driver for the MoBo's raid chip instead?
 

Answer:First Time SATA100 user

You do not have to have drivers for the HDD but the actual SATA chipset that is on your motherboard.

you should have gotten a floppy disk with your motherboard that had the drivers on it.
 

2 more replies
Relevance 41.82%

This was my Hijack This Log: Thank you!!Logfile of HijackThis v1.99.0Scan saved at 12:35:35 PM, on 12/23/2004Platform: Windows ME (Win9x 4.90.3000)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\SYSTEM\KERNEL32.DLLC:\WINDOWS\SYSTEM\MSGSRV32.EXEC:\WINDOWS\SYSTEM\mmtask.tskC:\WINDOWS\SYSTEM\MPREXE.EXEC:\WINDOWS\SYSTEM\MSTASK.EXEC:\WINDOWS\SYSTEM\SSDPSRV.EXEC:\WINDOWS\SYSTEM\DEVLDR16.EXEC:\WINDOWS\SYSTEM\RESTORE\STMGR.EXEC:\WINDOWS\EXPLORER.EXEC:\WINDOWS\TASKMON.EXEC:\WINDOWS\SYSTEM\SYSTRAY.EXEC:\PROGRAM FILES\MOUSEWARE\SYSTEM\EM_EXEC.EXEC:\WINDOWS\SYSTEM\WMIEXE.EXEC:\PROGRAM FILES\DELL\RESOLUTION ASSISTANT\COMMON\BIN\RXMON9X.EXEC:\PROGRAM FILES\DELL\RESOLUTION ASSISTANT\MOTIVEASSISTANT\BIN\MAD.EXEC:\WINDOWS\SYSTEM\LTMSG.EXEC:\PROGRAM FILES\CREATIVE\SBLIVE\AUDIOHQ\AHQTB.EXEC:\PROGRAM FILES\CREATIVE\SHAREDLL\AHQ\CTMIX32.EXEC:\PROGRAM FILES\MUSICMATCH\MUSICMATCH JUKEBOX\MM_TRAY.EXEC:\WINDOWS\LOADQM.EXEC:\PROGRAM FILES\MOTIVE\MOTMON.EXEC:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXEC:\WINDOWS\EMSW.EXEC:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXEC:&#... Read more

Answer:First Time User Needs Assistance

Hi Please uninstall from Add\Remove Programs:HelpExpress - Please print or copy these instructions because you are not able to access the Internet in SafeMode.Download Ad-aware SE 1.05: hereInstall it. When you get the last screen, with the "Finish" button and 3 options, uncheck those three items.Open AdAware and click the "Check for updates now" link. Close AdAware. Don't use it yet.Download System Security Suite here:System Security Suite Download & Tutorial. Unzip it to your desktop.Install the program. Don't use it yet.Make sure you are set to show hidden files and folders: A. On the Tools menu in Windows Explorer, click Folder Options.B. Click the View tab.C. Under Hidden files and folders, click Show hidden files and folders.D. Uncheck Hide extensions for known filetypes and Hide protected operating system files.How to see hidden files in WindowsREBOOT into SafeMode by tapping F8 key repeatedly at bootup: Starting your computer in Safe modeRun HijackThis!, press Scan, and put a check mark next to all these:O4 - HKLM\..\Run: [emsw.exe] C:\WINDOWS\emsw.exeO4 - HKLM\..\Run: [RebateNation0] "C:\PROGRAM FILES\REBATE_NATION\RebateNation0.exe"O4 - HKCU\..\Run: [emsw.exe] C:\WINDOWS\emsw.exeO4 - HKCU\..\Run: [HELPEXP.EXE] C:\Program Files\Alset\HelpExpress\default\Client\HelpExp.exeO8 - Extra context menu item: Rebate Nation - file://C... Read more

5 more replies
Relevance 41.82%
Question: user's Login time

I am admin user and i want to monitor those using my computer everytime i am outside my home.what software do i need?

Answer:user's Login time

Why do you want to do this  There is also how much you would pay for such a software. They don't come cheap.

2 more replies
Relevance 41.82%

Logfile of HijackThis v1.97.7Scan saved at 2:01:33 PM, on 26/04/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\system32\svchost.exeC:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exeC:\WINDOWS\system32\cisvc.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXEC:\WINDOWS\System32\nvsvc32.exeC:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\wdfmgr.exeC:\WINDOWS\System32\alg.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~... Read more

Answer:plz help, 'hijackthis' log (first time user)

Hi and welcome to Bleeping. You have several problems which need attention. The first of which is the very outdated version of HijackThis you're using. Please delete it entirely off your machine. Download the HijackThis Self Extracting zip file from here to your desktop. Double click 'hijackthis_sfx.exe' and select "Unzip" to extract hijackthis.exe to C:\program files\hijackthis.Before posting a log with the new verion, I want you to run through the following procedure to remove the Lop parasite which comes bundled with Messenger Plus!. Please print these instructions out or copy them to notepad.1. Go to Add/Remove programs. Double click on "Messenger Plus!" (or click on Remove) 2. The "Messenger Plus! - Setup" is now displayed. Click on the Uninstall button. Note: options displayed on the first screen are not related to the sponsor program. 3. The sponsor screen is now displayed (if you don't see it, search for it in your Task Bar). To prove that someone is currently reading the screen, you have to type the code that is displayed. Once you enter the code, press Uninstall.4. If you entered the code properly, the program will ask you to confirm that you want to uninstall. You MUST answer "Yes" to this question or you won't have another chance of uninstalling. 5. To complete the uninstallation, follow the instructions that are displayed (the first one is to close all your Internet Explorer windows, that's very im... Read more

1 more replies
Relevance 41.82%

I've been using FrontPage strictly as a HTML editor, making text look nicer to send out in advertisements and such.

Now I'm trying to publish a simple page.

After much trial and error, and hair-pulling, I've waded through the techno-babble enough to know how and where to send my page so that it reaches my domain at my host.

My problem is that when I click "publish", every page I've ever worked on and saved for future reference is being sent to the host as well as the one page I'm trying to send!

I've isolated the one page in it's own folder.

I've moved all other pages into a separate folder.

What am I missing?

Thanks in advance...
 

Answer:1st time FrontPage user...

I need to search for my installation disk, but before I dig that out,

every file that is associated with the file that you want to upload will be uploaded to.. so any links to other pages, pictures, fonts, anything that FP thinks that one page needs to operate will be uploaded too.. thats one reason why I cant stand using it.. microsoft, the most unfriendly user-friendly software
 

1 more replies
Relevance 41.82%

HiA friend recommended using hijack this to check over my parents computer as it is running very slowly, he also recommended your forums has a place to paste the log for very good advice.Hopefully nothing is wrong but any advice will be greatly appreciated, thanks in advance Logfile of Trend Micro HijackThis v2.0.4Scan saved at 23:17:37, on 26/07/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Alwil Software\Avast5\AvastSvc.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\SOUNDMAN.EXEC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXEC:\Program Files\Alwil Software\Avast5\avastUI.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS\System32\svchost.exeC:\WINDOWS\syste... Read more

Answer:first time hijack this user

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you let... Read more

7 more replies
Relevance 41.82%

First of all, I would like to apologize for incorrectly posting this if in case I am in the wrong area or
wasting your time as I very well may be. I do not know the ropes yet, but happy to have found this site !
I scanned my near brand-new win7 64 machine out of curiosity with rkill and received back the report with
C/prog86/HewPac/HP conn mgr/HPCMdelaystart.exe and C/win/syswow64/rundll32.exe
I notice under properties of these 2 files they were created and accessed before I purchase the PC new from HP. It is only 3 weeks old.
Are these anything to be real concerned about?

Ok now let me have it for asking something that I should have known better to ask

Thanks
Woodsman

Answer:First time rkill user

HPCMDelayStart.exe is a legitimate process related the HPConnectionManager.RKill is designed to terminate the most common malicious processes that prevent other security tools from being executed and used to disinfect the system. In addition to killing common malicious processes, RKill always terminates explorer whether you are clean or not and terminates executable files running from a user profile by design. Programs should not be running from a user profile as they are meant to hold data, preferences, settings, and configuration files. After it runs RKill will create a log of what was terminated while it was running. All files listed in an RKill log are not necessarily malware related...it may show legitimate as well as malicious processes. The list of processes shown as terminated are any processes that were killed while RKill was running even if those processes were not terminated directly by RKill. This means that if someone manually shuts a program down it will show up in the log but that does not mean it was killed by RKill. Thus, RKill logs contain all processes that were terminated, either by RKill itself or manually, during the running the script. When running RKill it will indicate the tool is terminating known malware processes regardless of whether it terminated any processes or not. If RKill finds processes that matched its definitions and terminated them, it will list them in its log. If RKill did not find anything to terminiate, it will not list any processe... Read more

3 more replies
Relevance 41.82%

where do you find the setting where you can choose whether to single click or double click to open somthing. vista is exceptionally confusing:-(

i know where it is in XP my computer>folder options>General Tab 'single click to open an item' underline icon titles consistant with my browser'
 

Answer:Help..First Time Vista User

6 more replies
Relevance 41.82%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:00:43 AM, on 1/27/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Viewpoint\Common\ViewpointService.exec:\WINDOWS\system32\ZuneBusEnum.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\AGRSMMSG.exeC:\WINDOWS\system32\hphmon06.exeC:\HP\KBD\KBD.EXEC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\WINDOWS\ALCXMNTR.EXEC:\W... Read more

Answer:First Time User. Anything Suspicious?

Welcome to the BleepingComputer HijackThis Logs and Analysis forum. My name is Richie and i'll be helping you to fix your problems.Apologies for the late response,as i'm sure you can appreciate we are extremely busy.If you've already recieved help at another forum and your issues have been resolved,or you're presently recieving help elsewhere then please let us know.If you have not followed the info in the link below prior to posting your log then please do so now:Preparation Guide for use before posting a HijackThis Log:http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/If you still require help,please post a new Hijackthis log into this topic in your next reply.Also post a detailed description of the issues you're experiencing.*Note*Post all reports/logs directly into this topic,not as attachments,thanks.

1 more replies
Relevance 41.82%

I am a first time user of the Firefox web browser and I have to admit, it's really quite fast and easy to use. I have been an IE user from day one of having my pc but last year when IE8 came out and was downloaded, I was not impressed at all. Web pages were slow to load and though I didn't deal with alot of things some dealt with, I just wasn't happy. So I decided to try the Firefox web browser. For those of you who have used it for some time now, my question is this, is this browser pretty secure? I realize that when you go to a secure site that you should see the https: but I keep looking for the lock symbol which this doesn't have so I rely on my anti- virus/firewall to tell me that the site is secure when making purchases or using passwords. Any other insight I should know about? Thanks for any tips.

Answer:First Time User Of Firefox

Hi,

Firefox is a good browser overall. IE doesn't have the best track record in terms of security, quite alot of criticism towards IE regarding ActiveX. Firefox has become the second most popular browser, after IE. Due to this, it has also become the second most attacked browser.

Bear in mind both IE and FF have new versions of their browsers at Beta stage, so probably a release for both within the next few months. IE9 has greatly improved security, and is in general a much faster browser. While I am not much of a fan of IE myself, it is something to consider when it comes out. Firefox won't give you symbols to tell you whether you are on an encrypted site, although in the the Beta for FF 4, which is the version I'm running, you can click on the logo next to the URL, which will give you more information, and tell you whether or not the site is encrypted.

NoScript is a good add on that can improve security:
https://addons.mozilla.org/en-US/firefox/addon/722/

There are pro's and con's to all the major browsers, I personally use Opera as my main browser. But for the more used ones, it's always going to be a constant battle to patch exploits as they become apparent. As said, the security rating for both IE and FF is likely to change with the upcoming released, and in the case of IE it has become much more secure. Firefox is a decent browser, and providing you follow the security tips elsewhere in this forum you should have very little trouble with security.

5 more replies
Relevance 41.82%

hi
i wanted to create a server using linux. how do i go about this. is Redhat v9 ok to use? will it be ok to use with my other computer that currently is using winxp? do i need a firewall for this?

appreciate your advice
 

Answer:first time linux user

Welcome to the club!

You need to read this thread, which will explain everything you need to know.

There is a built in firewall in Red Hat and other linuxes, called lokkit. You will be asked to input some parameters during installation (provided you did a custom install) and you can modify the settings later using lokkit. Its pretty secure.

Also, try to switch off (or not install in the first place) services that you will not be using, as "less is more" - i.e. the less you put on, the more secure your box is, as you have less potential for security holes.

Install Ximian GNOME and use Red Carpet to keep the box up to date with fixes, etc. Use ssh, and never ftp or telnet.
 

16 more replies
Relevance 41.82%

I have read many of the forums and need some help. My computer all of the sudden started running extremely slow and I have ran and saved the hijack this log. Please help.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 8:08:18 PM, on 10/3/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\WINDOWS\Sys... Read more

Answer:hijackthis log. First time user. Please help

Hello and welcome to TSF.

You are running two antivirus applications. Network Associates/McAfee and AVG. Multiple antivirus programs can bog down your system, interfere with each other, and may even cause crashes. Please remove all but one of them using the Add/Remove Programs in the Control Panel.

=============================

HijackThis needs to have a folder of its own to function properly. Please right click on an empty space on your desktop and choose New>Folder to create a new folder. Name the folder HijackThis. Drag and drop HijackThis.exe into this new folder please.

=============================

We need to disable the AVG Anti Spyware guard so that it will not interfere with the fix.

Open AVG Anti Spyware.
Under 'Status',click on "change status" to make it 'inactive'. Once your log is clean you can re-enable it.


=============================

Scan with HijackThis and put a checkmark against the following entries:

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/noc...up1.0.0.15.cab


Close all browsers/windows other than HijackThis and click on "fix checked".

=============================

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please fo... Read more

3 more replies
Relevance 41.82%

My sister will soon be downloading her wedding music from ITunes to my laptop & i would like to know how she can tell itunes to only download her wedding music because we don't want all of her purchased music on my laptop & she doesn't want her wedding music on her IPod touch since we'll be playing the wedding music off of my laptop with some rented speakers. Plus i've never used itunes before so any advice you can give me will be very much appreciated.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Media Center Edition 2005, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) M processor 1.73GHz, x86 Family 6 Model 13 Stepping 8
Processor Count: 1
RAM: 1271 Mb
Graphics Card: Mobile Intel(R) 915GM/GMS,910GML Express Chipset Family, 128 Mb
Hard Drives: C: Total - 50995 MB, Free - 34580 MB;
Motherboard: Dell Inc., 0HC416
Antivirus: AVG AntiVirus Free Edition 2014, Updated: Yes, On-Demand Scanner: Enabled
 

More replies
Relevance 41.82%

Accessing accounts online, specifically Barclaycard and Lloyds TSB. On my work laptop (XP, IE6) and the desktop at home (XP, IE8) it remembers the login details so we only have to remember the next 2 PIN / security questions. On the home laptops (Vista, Win 7, IE8) occasionally the number is there, but frequently it is blank and we have to go rummaging for the paper version to enter it again.Is this a Windows thing, or an Internet Explorer thing, and how do I fix it?

Answer:have to enter user ID every time

Have you ran C Cleaner recently as that will remove log on details and cookies if you have them ticked.

8 more replies
Relevance 41.82%

I wanted to run combofix for the first time. My machine seems to be free of any major problems. Just want to be extra safe. Thanks

Answer:First time combofix user

Hello JR001Please note the message text in blue at the top of the Am I infected? What do I do? forum.ComboFix logs should not to be posted outside the HijackThis forums and then only when requested by a HJT Team member. It is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again. Please create a new topic explaining the nature of your problem in the Am I infected? What do I do? forum. Describe pop-ups and system tray or desktop icons that have appeared. Explain what is "going wrong" with your computer. Note any tools you have used and their respective results.If needed, we will direct you to our HJT Preparation Guide.Thank you for using BleepingComputer as your malware removal source.This topic is now closed. If you have any questions, please PM me or another Moderator. The BC Staff

1 more replies
Relevance 41.82%

I've never used Bitlcoker before

Have win 8.1 pro

Can I use this to encrypt my office 365 access database files or folders, too?

If so, how?

Also, I'm currently saving files to 'skydrive / myusername'. Is that the same as the new Onedrive pro?

I want to understand where to save my files to have BOTH local & onedrive copies. THANKS !
 

Answer:How to use BitLocker for first time user

Bitlocker is only for Drives, USBs, partitions and other forms of drive. However Bitlocker is not available for skydrive for it is not a drive. You can encrypt files by using Microsoft Office's built-in encryption. If you want you can put your local files on a usb or you can make a partition and then encrypt it with bitlocker.

There is no other way that I know that can encrypt BOTH local and Onedrive, your best option is to encrypt all the files one by one using Microsoft office's encryption (or password lock)
 

1 more replies
Relevance 41.82%

Hi All!!

First of all, thanks so much for the opportunity to consult you all on problems that we have!! You're all absolute champs, and godsends for ppl like me who have no idea what we're doing!!

I was having alot of problems with IE and so a friend suggested Mozilla Firefox.. This is going great! But he also advised that I use HijackThis, I believe that I should "post my log file" from the scan onto the net and then get your advice as to what I should delete, as I know that if I delete just anything this could prove harmful, as I may delete a running program...

Please can you help me with regards to this.. do i just paste the info onto this Message area, or do I need to attach it (As I've done with the one attached???)

I realise that Im NOT a pc genius, but I really am eager and open to learning...

Should you wish to respond to this (Which I am praying you will) my direct email is:- email edited out....

Thanks a million in advance!!

Cheers,
Hayley

Answer:First Time HijackThis User, Please Help!!

Please post the contents IN the post.


halzbelz's Log..............


Logfile of HijackThis v1.99.1
Scan saved at 10:52:22 PM, on 3/9/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\Geoff Botha\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.optusnet.com.au/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://rd.yahoo.com/customize/ymsgr/.../www.yahoo.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [S... Read more

3 more replies
Relevance 41.82%

Logfile of HijackThis v1.99.1
Scan saved at 12:13:27 PM, on 12/11/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMKEYBD.EXE
C:\WINDOWS\SYSTEM\HPSYSDRV.EXE
C:\PROGRAM FILES\ADAPTEC\DIRECTCD\DIRECTCD.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\KEYBDMGR.EXE
C:\PROGRAM FILES\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\ZONELABS\ISAFE.EXE
C:\PROGRAM FILES\NETROPA\ONE-TOUCH MULTIMEDIA KEYBOARD\MMUSBKB2.EXE
C:\PROGRAM FILES\HP\HPCORETECH\COMP\HPTSKMGR.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\MAILFRONTIER\MANTISPM.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\PROGRAM FILES\HJT\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sh... Read more

Answer:First Time User - First HJT Logfile

Hello and Welcome to TSF!

Let's start with a couple of things first.

Download CWShredder and run it. Click on 'I Agree' button if you agree with it. Click on 'Fix' (it will automatically fix anything it finds for you) and OK. If it asks if you want to delete a certain random file, choose No and post that filename here. Let it finish the scan and then hit Next and Exit.

Download and install Spybot S&D. Run Spybot and click on the 'Search for Updates' button. Install any updates that are available. Next click on the 'Check for Problems' button. Let it run the scan. If it finds something, check all those in RED and hit the Fix Selected Problems button. Exit Spybot. If you keep getting the DSO Exploit entries, even after you updated Windows and fixed them, then download the Spybot DSO Exploit Fix and install it over the current Spybot installation.

Please download Ad-aware SE and install it if you don't have it already. Make sure it's the newest version and check for any updates before running it. Also go here to get the plug-in for fixing VX2 variants. To run this tool, go into Ad-aware->Add-ons and select VX2 Cleaner. Then click Run Tool and OK to start it. If it's clean, it will say Status System Clean. Otherwise, you will have to click on the Clean button to remove the VX2 infection. Also make sure to customize the settings in Ad-aware for better scan results. Run the scan and fix everything that it finds.

Please print out or copy thi... Read more

5 more replies
Relevance 41.82%

I search the internet and found that you guys are the best capable of helping me out. I keep getting w-find homepage. here is my log file

Logfile of HijackThis v1.99.1
Scan saved at 1:34:04 PM, on 6/22/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\HP Share-to-Web\hpgs2wnd.exe
C:\WINDOWS\System32\hphmon03.exe
C:\Program Files\Hewlett-Packard\PhotoSmart\Photo Imaging\Hpi_Monitor.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\combop.exe
C:\WINDOWS\System32\combo.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\HEWLET~1\PHOTOS~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Dell Support\DSAgnt.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\FinePixV... Read more

Answer:hjt log file, first time user

what am I doing wrong. I can`t attach an image
 

3 more replies
Relevance 41.82%

Thanks in advance

here is my log:

Logfile of HijackThis v1.99.1
Scan saved at 4:48:14 PM, on 6/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Razer\razerhid.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Razer\razertra.exe
C:\Program Files\Razer\razerofa.exe
F:\Program Files\Trillian3\trillian.exe
C:\WINDOWS\explorer.exe
F:\Program Files\mIRC\mirc.exe
C:\Program Files\The All-Seeing Eye\eye.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Downloads\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.excite.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: ... Read more

Answer:Hijack This log, need help, first time user

Please go to start - run - type in msconfig and click OK. Put a check mark beside everything there and then post a new Hijack This log but DO NOT reboot.

Exactly what problems are you experience?
 

3 more replies
Relevance 41.82%

I have installed and run Combofix as described by the on line instructions. The result is a Log.txt that i am supposed to post to a "helper". I do not know where to do this. Can someone please enlighten me?? I was not asked by anyone form the forum to run this program. It was suggested by a friend who is in IT. Are there any helpers out there that can decifer my log and tell me what needs to happen next??

Rick

Answer:First Time User Of Combofix

ComboFix is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. Please read Combofix's Disclaimer. Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.With that said, please follow this topic to prepare you to post a HJT log. At that time, the HJT team member may ask you for a ComboFix log. Alternatively, you may create a new topic in the Am I Infected forum - without HJT or Combofix logs. If you have any questions, please let us know!

1 more replies
Relevance 41.82%

Hey Amigo's... Earlier today I received an Acer desktop with Vista premium installed as a gift. After reading about all the difficulties people seem to have using "Vista" I'm feeling a little "spooked." (I've always had WinXP.)

So, here is where all you fine brains come in: Are there any steps... must-do's.... or should-do's or don't do's I should be aware of when I fire this baby up? For example: Partitioning the hard drive? Setting up Windows Mail? Or steps I should take encase I want to (downgrade) to Windows XP later on?

Also, it's been a while since I broke in a new computer. What would you suggest I install before I start browsing the Web (Spybot, Avast etc..) Will these work with Vista?

And one last thing is there anyway to tell if the PC's was just upgraded from XP too Vista or whether Vista is the original OS?
Thank you'll for your time. Shelly
 

Answer:First time Vista user???

Well one way to tell is to look at the "Windows" sticker. My laptop has "Designed for Windows XP Windows Vista Capable". Yes Spybot will work most programs will work, the only thing I had trouble with Vista was it didnt like older games...Also sometimes you will get a program that wont work on Vista but if you go to the website of what ever program wont work, they will usually have a Vista version or will say they are working on Vista.
 

3 more replies
Relevance 41.41%

My mother has never used a cell phone but I recently persuaded her to get one. It would be for emergencies and infrequent calls. I use a blackberry through work so not very savvy about the best phones & plans appropriate for her.

Any advice would be appreciated!!

 

Answer:Cell Phone FIRST TIME USER

7 more replies
Relevance 41.41%

Hi, both ny acer aspire one and my older desktop have crashed and i cant boot them.
I didnt wanna pay just yet for a technician then somebody told me about hirens boot cd.
I have downloaded it along with extra bits for booting from a flash drive.
Twice i have tried launching it with a dvd on my desktop but it doesnt seem to like the disc and doesnt launch it, even after i have changed boot order.
So i need to try launching from usb. Do i need a clean pc to run the grubdos and usb exe to copy to flash drive? I cant do that on my screwed pcs can i? I amgathering this is just preparing the usb and isnt doing anything to the pc im running them from? Also do i have to format usb before copying these files onto it?
 

More replies