Computer Support Forum

Unable to remove CD Drive (Z:)

Question: Unable to remove CD Drive (Z:)

Greetings, Nothinglynothing here. I need some help with the removal of CD Drive (Z
It only appeared after I accidentally downloaded a bunch of virus from a website. I managed to clear out all the virus but I cant seem to find the way to delete this CD Drive. From my searches, I think this CD Drive might be some kind of Virtual Hard Disk (VHD). I am not sure about it though. Hope someone can help me with it. Thanks in advance.

More replies
Relevance 52.48%

A friend brought a computer over for me to see what is wrong with her DVD drive. The drive isn't working at all but I can't figure this case out. I took the screws out but it won't come out the back at all....moves about an inch. Any suggestions?? I have looked on their website but found nothing. Thanks in advance for any advice.
 

More replies
Relevance 52.48%

unable to remove autorun.inf from flash drive
hi,
last weekend i found autorun.inf (i suspect a virus) in my pen drive, and my antivirus mcafee unable to detect it, though i update it daily.

whenever i delete it manually, it got deleted but it reappears when i eject and plug in my flash drive again.

plz if any one cud suggest me sum measure.
thanks in advance.


with regards,
SHUBHAM GORE

Answer:unable to remove autorun.inf from flash drive

ALKOHOLU


this folder, always reside in my usb drive , though i format it frequently.
CAN any one could give me some information to remove this recursive virus.

2 more replies
Relevance 52.48%

Hi all,
Please can somebody help me, I've a relatively new SanDisk Cruzer Slice 64GB USB pen drive, which I use for work mainly. It has somehow managed to write protect itself and no matter what I do I simply cannot remove it!

I've scanned with Antivirus, nothing found

I've tried regedit - Computer\HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\StorageDevicePolicies

StorageDevicePolices didn't exist so I created a 32 bit Dword string, set to 0 this hasn't done anything

I've tried Diskpart as administrator -
DISKPART> list disk
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 298 GB 1024 KB
Disk 1 Online 59 GB 0 B
DISKPART> select disk 1
Disk 1 is now the selected disk.
DISKPART> attributes disk clear readonly
Disk attributes cleared successfully.
DISKPART> clean
DiskPart has encountered an error: The request could not be performed because of
an I/O device error.
See the System Event Log for more information.

I've checked the logs and it doesn't seem to list anything for the drive

Answer:USB Drive Write Protected itself, unable to remove

How is the disk formatted? FAT32 (I believe the default, could be wrong) or NTFS?

If it's FAT32, and you are trying to copy a file larger than 4GB, then it's not going to let you write to it due to the limitations of FAT32. You would have to re-format the disk to NTFS.

It also could be possible that the disk became corrupted during a write operation (ie., not using "remove") in the system tray when unplugging the drive from the computer...

Copy whatever files you currently have on the disk to your HD for temporary safekeeping and format the disk again.

Also, what version of Windows are you using? Is it the Professional version or Home version? Are you using, or did use, bitlocker on this machine? Or a TPM? If you did, bitlocker automatically changes some policies to read only for removeable drives, and if you have Windows 8 Pro, we can go in a fix that throught the group policy editor.

3 more replies
Relevance 52.48%

Last week i bought an Mp3 player, which can also be used as a flash drive/ USB Mass Storage, Last Night I loaded a video onto it to transfer it to another PC, i deleted all of the music off it so that the video would fit on, But After i had finished transfering the video over onto the other PC, I could not delete the video off my MP3 Player! it fills almost all of the room (512mb) on the Mp3, so i cannot put any of my music on it.

When I try to delete the file it comes up the an error message that the file is being used by another person or program, even though i am not using any programs with the USB drive. It never used to do this when i just had mp3s on it, so what has gone wrong?

Any help will be appriciated, Thank you
 

Answer:Unable to Remove Data From Flash Drive?!!!!??? Please Help!!

I Forgot to mention that my opperating system is windows XP.

I can put other files onto the Drive, and take them off again, just i cant remove the goddam video taht takes up all the memory. PLEASE Help getting flustrated with the fact that i only bought it last week and its already srewed up.

I have tryed to format it, however a similar error message is displayed about the drive currently being in use, however it diesnt do it with any other files that i can put on.
:dead:
Please Help Before i get the hammer out....... :knock:
 

6 more replies
Relevance 51.66%

My Uncle's computer (HP XP SP2) detected Trojans throughout his computer last night and some were in the D: drive under system restore points so like always he disabled system restore and some of the Trojans were able to be removed, however 6 are still left. Two in the C Drive and 4 in his D drive. This is AVG's results from today:"C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected"Here is his Hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:11:25 P... Read more

Answer:Unable to remove Trojan infections from Recovery Drive

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 51.66%

Hey guys I have a question involving an external hard drive and windows 7 libraries. I have this external hard drive (WD500GB My book) which has all my backup information (as per Windows Backup feature; great stuff) as well as all my music and movies. I really like the idea of using libraries to list all the music and movies from both my internal and external hard drives in one place; so I've included the external hard drive folders in the various libraries. The problem I run into is that I cannot safely remove the external hard drive; it refuses to do so.

I know it is due to the external being included in the libraries and not due to Windows Backup storage location being the external hard drive because I kept the Windows Backup settings the same (with the storage being the external hard drive) and removed the folders on the external from the libraries and it safely removes fine.

I realize I could set it so that write cacheing is disabled and I could remove it whenever, but this yields lesser performance (correct?) I'd rather keep write cacheing on; is there any way for me to include the external hard drive in the libraries while having the ability to safely remove the hard drive?

Thanks in advance

Answer:unable to safely remove external hard drive

WD has released all new software for the MyBook series drives; I had the same problem you mention and after installing the new Drive Manager and MyBook software it is working nicely for me now.

1 more replies
Relevance 51.25%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

More replies
Relevance 51.25%

Hello, I am trying to replace the hard drive on my desktop computer, but I am currently having trouble  with removing the metal cage that encloses the hard drive. This is the recommended method of replacing the hard drive, according to these instructions: http://www.manualslib.com/manual/359309/Hp-Pavilion-P6230f.html?page=21#manual I am stuck on step 13 for that manual in particular. I push down on the "#1" latch, and pull forward, but it's not sliding forward. I am unsure what I am doing wrong, but the thing is not moving. Do you guys have any idea what I may be doing wrong? Thank you.

Answer:Unable to Remove Hard Drive Cage from Desktop computer

Hi, Slide the HDD cage towards the top of the PC  while depressing the latch. Then pull the cage out of the tower. I have an h8 1380t with the same HDD cage. Jay   

1 more replies
Relevance 51.25%

Hello. In my last post, I had a problem mounting my external HDD, so bought a new external enclosure, but now I can't get the hard drive out of the first case. After opening the back of the case where everything connects, I cannot retrieve the hard drive itself. It won't slide out.

I have the same "Smart Drive"external hard drive case as the one in this video http://www.youtube.com/watch?v=4slNzGLUDv4 except mine is not an empty enclosure. In the video, the guy removes a slide from the top and bottom of the case with such ease, whereas, I am unable to further remove any part of the shell around the hard drive itself. I can clearly see it, but it's just stuck in place.

What should I do? Please help.
 

Answer:Solved: I am unable to remove the hard drive from my external shell. Please help.

7 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

0 more replies
Relevance 50.84%

Ok, Iīm working on a relativeīs computer. Iīm sure itīs got at least some malware. Itīs running XP SP2, but some individual decided to install VistaMizer on it, which makes it look like Vista. Thatīs a problem. Itīs got a couple programs that Iīm flagging as bad for now: Babylon, Winning Eleven 7 International, and possible WinAmp Remote.
Flagged Tasks running: Domino.exe, ZSSNP211.exe, and FrzState2k.exe
Antivirus program is Avira AntiVir Personal edition.

Every time I restart the computer, even from safe mode, everything is back to the way it was before. Temp files I deleted are back. Programs I removed are back. Programs I installed are gone. Iīm working on doing the basic removal steps now, and Iīll post my logs as soon as I have them.
 

Answer:Hard drive restores itself to previous state, unable to remove malware.

Hereīs my logs.
 

7 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Originally Posted by Windows Central Question I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely. I understand that you're extremely frustrated however I'm not sure what anyone could do to help without you clarifying three things.
Three questions.
1) Are you using a NAS Enclosure?
2) Are you using a Server Rack?
3) Which O/S are you using?
We're not mind readers you know , so please join and provide more information in this thread.

more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

3 more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Welcome to Major Geeks!





videobruce said:





Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,Click to expand...

Yes but this rarely occurs.





videobruce said:





2. In a hard drive after one wipes the drive with zeros'?Click to expand...

Yes. The FBI and CIA recover files all the time from systems where people think they have erased; however it is very unlikely that you have become reinfected from a drive that you have done this to. Did you delete your Windows partition before formatting and reinstalling. Are you reconnecting this PC to a network with other PCs? They could be the cause of your reinfection or you may not have a properly protected PC and you could be getting infected from the internet.





videobruce said:





I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.Click to expand...

See this: http://www.symantec.com/security_response/writeup.jsp... Read more

3 more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Wiping the hard drive should get rid of any trace of virii. It can't be a BIOS virus either (it can't do something as complex as what your computer is going through; as far as I know anyway).

Chances are you're installing infected software or you're not securing you computer adequately before allowing it Internet access (Firewalls, Windows service packs, Anti-virus, etc.).
 

26 more replies
Relevance 50.43%

  hey bro help me solve this problem. I m unable to remove usb write protection from my flash drive in win7 using given solution. what should i do please suggest as fast as u can

Answer:unable to remove usb write protection frrom my sandisk flash drive in windows 7

Using given solution? Is url reference missing that you meant to include?As far as this flash drive goes... I would backup the contents of it to a hard drive or another flash drive before making any attempts to make it read/write enabled again.Then once you have backed up the data on it, delete the partition on this drive if allowed. Then create a new partition and format that partition. But with write protection enabled you might not be able to do this. However if the flash drive is simply corrupt you may be able to delete the partition and create new and format fresh.Given the price of flash drives these days I wouldnt spend too much trouble with trying to fix it. Some flash drives when they fail internally no longer accept write requests, and your lucky that they will even read.I am assuming that this USB flash drive doesnt have a slide switch like some USB flash drives have to make them write protected.

1 more replies
Relevance 45.92%

Hi! I'm hoping someone can help me with this problem... I've been trying to backup my computer to an external drive and I keep getting the error code: 0x8078002A. I've tried numerous times in the past few weeks with no success and the same error code each time. My laptop is a Dell XPS 17 (L702X, Early 2011) with an Intel® Core™ i7-2760QM CPU @ 2.40GHz processor with 8.00 GB of installed memory (RAM). The Windows edition I'm running is Windows 7 Professional. The size of the backup that I'm trying to run is 327.56 GB (and I know there is plenty of space on the external drive to accommodate the backup).The external drive I'm trying to back up the laptop to is a WD (Western Digital) My Book external hard drive that is a 4 TB hard drive. It currently has 1.88 TB free of 3.63 TB according to its properties. I recently performed an "Error-Checking" run with the external hard drive (by clicking on 'Properties' and then the tab that said 'Tools' and then 'Error Checking' and it went through that process and fixed whatever errors it might have found. I had read on some other forum that I should try doing this to see if that would make the backup work, but it still won't work and I'm still getting the same error code.
 
I read on another forum that you could possibly be getting the error code 0x8078002A if you had a virus or malware or some other type of problem.  I'm not sure what else to try or do...  I do run Super Anti-Spyware Free Edition regularly as ... Read more

Answer:Unable to Backup Laptop and Unable to Remove VSO Downloader Program

Hello there,From this article, it appears to be a bug in Windows Backup.Can you try using a third-party backup utility? Good choices are Macrium Reflect (for imaging) or EaseUS Todo Backup.Since you have a Western Digital drive, it is also possible to use Acronis True Image WD Edition.Let us know how that goes.Regards,Alex

12 more replies
Relevance 45.51%

Hello all,

i am trying to uninstall a program called "Scanner utility for Windows" (from 'Add/Remove programs'), but once its removed it still shows up under 'Add/remove programs', it doesnt disapear from there.
i tried rebooting the computer afterwards, but it still shows up in there.

i am able to remove it from another computer, so not sure what the issue is.

i am logging with administrator rights on both computers, so what could the issue be?

thank you

PS Both computers run on Windows XP.

Answer:Unable To Remove Software- It Still Shows Up Under 'add/remove Programs'

Hello alexcirnuThis should help solve the problem http://windowsxp.mvps.org/AddRemove.htm

1 more replies
Relevance 44.69%

Hi, I performed the runme part and have listed all results below. I cannot seem to add or remove some unknown programs from my list. I do not believe that they're malware. Help anyone? I've already done a system restore and don't want to delete using ccleaner in case it's something I need.

1. Basic Computer Maintenance:
Add/Remove Programs: Encountered long list of programs that are unknown and unremovable.
Cleaned hard drive using CCleaner
Removed invalid registry entries using CCleaner:ran 4x
Startup: only 2 programs run on startup: AGRSMMSG and ATIModeChange
Defragmented C drive using both Microsoft and IObit SmartDefrag

2. House Cleaning and Setup
Am not using Multiple Antivirus Apps or Firewalls
Under control panel/add remove programs, no malware programs listed, only unknown and unremovable programs.
Msconfig changed back to Normal Startup Mode from Selective Startup
No Quarantined folders
Emptied recycling bin
Reran CCleaner and removed excess items from startup, only above 2 remain
Repeated above step on all other users

3. Enabled viewing of hidden files etc.

4. Followed Windows XP Cleaning procedure
Downloads: Combofix to desktop
Spybot search and destroy download new version
AVG Anti-Spyware
MGtools to C drive

Install & Run Scans
When I ran AVG it did not produce a log even though I followed the steps.
 

Answer:unable to access add remove key in add remove programs

Your logs look clean.
However, use add/remove programs to uninstall:
Viewpoint Media Player

Then please install:
SevicePack2

If you are not having any other malware problems, it is time to do our final steps:

1. If we used Pocket Killbox during your cleanup, do the below
* Run Pocket Killbox and select File, Cleanup, Delete All Backups
2. If we used ComboFix, you can delete the ComboFix.exe file, C:\ComboFix folder, C:\QooBox folder, C:\WINDOWS\nircmd.exe, C:\combofix.txt and C:\ComboFix-quarantined-files.txt logs that was created.
3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
4. If we used SmitFraudFix, you can delete all files and folders related to it now including the c:\rapport.txt log.
5. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
6. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
7. If we had you run Avenger, you can delete all files related to Avenger now.
8. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
9. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
10. If you are running Windows XP or Windows ME, do the below:
* Refer to the cleaning steps in the READ ME for your... Read more

1 more replies
Relevance 44.69%

Hi..I have a Program that has been installed on my PC which I wish to remove using Add/Remove program from Control Panel...but it will not uninstall. Please let me know if this can be done from the Registry....and how I actually perform the task If not, is there another way? The uninstallation continues for a few minutes and then stops . Your assistance would be much appreciated....Ray.

Answer:[SOLVED] Unable to remove Program from Add/Remove

Open Task manager>Process to check whether this program is running or not. If not, you can try to uninstall by uninstall file,located in program files. If still not, you can use some third party uninstaller software.

3 more replies
Relevance 44.69%

I am having win xp as my operating system. I am unable to remove following programs from add or  remove programs:1. Internet Security Add-On2. Public Messenger ver 2.03and when I attempt to remove these I get an error message window saying that "You should reboot your computer prior to uninstalling this software. Reboot now?" Even after rebooting the same thing is repeated.In addition there is one more problem in internet explorer whenever I try to open www.yahoo.com http://awarninglist.com/ gets opened. I dont want to format and put win-xp again, I want an alternative solution. I read REFERENCE NUMBER: CH000568 in www.computerhope.com regarding TweakUI and tried it but could not find any add/remove tab...

Answer:unable to remove programs from add or remove progr

Try CCleaner.  You can download it from:http://www.majorgeeks.com/download.php?det=4191After installing it, I suggest you first run its Windows scan and remove stuff it finds.  Then, run its Issues scan, backup the registry when prompted, and then delete the items it found.  Then, use its Uninstall tool, under Tools, to try deleting the programs.  

1 more replies
Relevance 43.05%

OS is xphome sp1. I am trying to remove Google Earth using add and remove but get a message saying that it has encountered an error and is unable to remove it. I have tried doing it in Safe Mode but get the same message. Any suggestions please?

Answer:Unable to remove a program from add&remove.

Remove while in safemode or click here

10 more replies
Relevance 43.05%

In add and remove I have program Dan Elwells speed test which I want to remove but it says I can`t as it doesn`t exist. I have run a search and it says nothing found. How can I remove the entry in add and remove please. OS is XPhome.

Answer:Unable to Remove program using add & remove.

Have you tried the Ccleaner uninstaller click here

10 more replies
Relevance 43.05%

My son downloaded an inappropriate game and I am unable to remove it in the add and remove program. It gives me the message that it is unable to locate the installation log file, and the uninstallation will not continue. How do I get rid off this??
 

Answer:unable to remove game from add and remove

8 more replies
Relevance 41.41%

After online researching, I ended up into this forum >> disk 1 is unknown, not initialized, unallocated

I downloaded the Partition Wizard from Jumanji's link, installed, and followed instructions until the end.

After assigning drive letter (G:\), the PW shows that it is indeed assigned to drive G:\ BUT, I still can't see it in My Computer so I checked Disk Management and it still shows the same status/problem as it was from the beginning.

Is/are there any further necessary step/s after assigning Drive letter to the recovered disk?

When I try to close the PW, it says "You are about to quit the program and cancel all pending operations. The changes you have made will be lost."

I don't know what to do from here. Please help

Thanks in advance..

Answer:Disk unallocated, unable to initialise, unable to assign drive letter

OK, It could be a simple matter.

But I want to have a clear picture of what exactly your problem was.

1. Are we dealing with in internal drive or external drive?

2. Was the drive suddenly not accessible in My Computer?

3. Was it seen in Disk Management? What did it show? Even now you can take a screenshot of how the drive appears in Windows Disk Management and post it
Disk Management - Post a Screen Capture Image

We will then proceed step by step. I am here for the next 11 or 12 hours but peep in once in an hour or two and follow up.

I know you had used PW. But we shall get on to it after you post the Windows Disk Management screenshot.

BTW what is your local time? If you are in USA you can go to sleep and come back after six or eight hours. No problem.

9 more replies
Relevance 41%

Been buggering around with this for a while now.

I have an 2 internal hdd, and an external hdd, which is pretty much always on, and it appears in the 'safely remove hardware' in the systray.

I also have a portable HDD, for bringing files to and from work, which appears there also.

I want to be able to remove the portable safely, without accidentally removing the external hdd as i keep forgetting which drive is which!

I've dinkered around with making either/or drive 'Optimized for quick removal or Optimized for performance' in the hopes that they wouldn't appear - ideally I only want the portable listed (I can always disconnect the external when the machine is off).

Anyone any ideas?
 

More replies
Relevance 40.59%

Each time I try to remove "Web Search" with add/Remove programs I get an error dialog - "The Microsoft Java Virtual Machine cannot find main class; will exit".

FYI...
I was just reading another forum after googling for removal tools...
...and someone suggested that the only way to remove it was to format the drive and start over... ......I'm still laughing!! (but I guess it's sad, because someone is going to believe that advice.)

Anyways.. looking for good suggestions and directions.

(I'm still laughing)
edited:
I'm unable to run the new version of HJT it keeps giving me an error and knock me out.
added a HJT for good measure using the older versions

Logfile of HijackThis v1.98.2
Scan saved at 1:15:12 AM, on 2/8/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\msiexec.exe
C:\Utilities\hijack this\HijackThis old.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Sear... Read more

Answer:Unable to remove "Web Search" with Add/Remove Programs

Hello ucurl!

Your HijackThis log is clean.

Your error message suggests that you have something missing or in error with the installation of the Microsoft version of the java virtual machine.

I am not sure how to help you with this problem, but I can tell you that it is not a security threat.

I suggest that you post your problem in the Windows XP forum on this website.

Good Luck!
 

1 more replies
Relevance 39.77%

Hello all. I'd like to start by saying I'm a big fan of this site, it has been helpful many times in the past.
A little bit of background on me. I have been running a small on call/on site computer repair service for a few years and have some CompTia certs. I am a Moderator for a forum at a well respected and large fps game site, so i do truly understand what you guys deal with and appreciate all the time and effort.

This is the first thing I've run across that I have failed to fix/remove

Ok on to my issue. I did get a version of the '11 security tools virus (kids get on this pc sometimes lol)
I was able to remove it and all the BHO's that went with it using rkill/combofix, HijackThis and Malwarebytes. But one thing that remains in my cp. It calls itself aaa and uses the java icon (publisher bbb comments ccc). I have hit a wall trying to figure out what this exactly is. I have nothing "going wrong" on this pc, but it still bothers me and can't be good.
When i try to uninstall it simply says it can't.
I have tried searching these forums and doing what another thread suggested, which is pretty much the same things i did to rid myself of the virus in the first place, but the person infected never responded and the thing remains.
So I am asking for some help on this.

My stats;
win xp pro.
AMD Athlon 64 X2 Dual Core Processor 6000+ | Socket AM2 | 3013/201mhz
FireFox 3.6.16
Avira AV

Many thanks for your time.

Answer:unable to remove aaa from add/remove

If Add/Remove Programs is showing an entry but the program/folder has been removed, then its likely an orphaned entry in the Windows registy. Orphaned entries can be removed by going the registry but a much safer and easier way to do this is to download and use a third party program like MyUninstaller or RevoUninstaller. After launching the program, right-click on the entry and choose the option to "Delete the selected entry".To fix manually in the registry, refer to:How to Manually Remove Programs from the Add/Remove Programs ListRemoving invalid entries from Add or Remove ProgramsKellys Korner: Removing Invalid Entries in the Add/Remove Programs ToolCAUTION: This step involves making changes in the registry. Always back up your registry before making any changes. If you are not familiar with working in the registry, then you should NOT attempt to make any changes on your own. Improper changes to the registry could adversely affect your computer and render it inoperable. ERUNT is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.

7 more replies
Relevance 39.77%
Question: unable to remove

hi helpers, everytime i start PC i get this annoying window which says "diconnected blackberry desk manager " my son installed it ages ago and i remember trying to uninstall and it refused to uninstall kept re installing !anyway when i try to remove now a box comes up saying " this action is only valid for products that are currently installed thanks

Answer:unable to remove

Download this click here, then run it and see if it can do the job.

6 more replies
Relevance 39.77%
Question: unable to remove

hello this is my first time on the site,i recently had winblue soft install itself on my system, the computer kept restarting by itself my dsl internet seemed to slow down, and to no avail could i get it to go away, each time i switched the computer on and went into "my computer" and went to open "c:\" threatfire would start a quarrantine process and log to unknow proceccs by removable drives, upon restarting i had no explorer bar or icons on the screen, the only way i could get the explorer bar back on the bottom of the screen was to click cntrol alt delete and run new task and open threatfire up from there and remove to 2 logs from quarrantine and restart, but the same thing happens everytime i go into "my compute" then c:\" the same thing would occur.i uninstalled winbluesoft with the uninstaller and then deleted the folder in "program folders"then searched the registry in regedit, and found 2 registry files with winbluesoft in the title, removed them, and after that winbluesoft never appeared again,while this was happening, i found that my internet explorer was not opertating properly, i would click on tools then windows update, and get taken to a dodgey google site with "www.windowsupdate.microsoft.com" still in the address bar. everytime i tried anything to do with an update connection or downloading an update on the windows site, it would come up with the page could not be connected, everytime i try to do... Read more

Answer:unable to remove

Topic closed at member's request as he/she has reformatted.

Orange Blossom

1 more replies
Relevance 39.77%

Hi I need help to remove 888, celldorado,adult friend finder and many others pop upI had tried to used spybot ,lava and clear all the cookies ,temporary files for the explorer but the problems still exist please help thank you.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:46:45 PM, on 11/4/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\system32\svchost.exeC... Read more

Answer:Unable To Remove Pop Up

Welcome to the BleepingComputer HijackThis Logs and Analysis forum seraya My name is Richie and i'll be helping you to fix your problems.The current formatting of your log makes it difficult to read/evaluate.Open 'Notepad',click on 'Format' at the top,then uncheck 'Word Wrap' if it's checked.If you have previously downloaded ComboFix,please delete that version now.Now download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop Close any open browsers.Disconnect from the Internet. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Do NOT post the ComboFix-quarantined-files.txt unless I ask.*NOTE*In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix,please disable your scanner and redownload Combofix again.Some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.Download Deljob.exe and save it on your desktop.Double click on Deljob.exe.A log,(logit.txt) should open afterwards. This log will be present on your desktop.Post the contents of the logfile into your next reply,along with a new Hijack This log.

1 more replies
Relevance 39.77%

below is a link to a full screen capture of my spybot scan results. i have tried everything to remove these entries but to no avail. i am also posting my hijack this log file. please post detailed removal instructions as i am a self-proclaimed ad/mal/spyware removal "noob"! thank you and regards.

-AudioWave80

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:15:09 AM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\PROGRA~1\CACHEM~1\CachemanXP.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\SnoopFreeSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shar... Read more

Answer:[ Unable To Remove These ] - [ HELP ]!!

16 more replies
Relevance 39.77%

Running XP Professional

A friend gave me a copy of XP Plus ... loaded alright ...everything seemed to work ... although now when I try to uninstall ... comes up not installed properly.

Whenever I insert the disc [copy that I had installed with] and hit setup it shuts down my computer. Even if I try 'Explore'...then setup...same problem!

Really would like to remove..as I don't like or use it...memory hog

Hope someone can help

Thanking all in advance

Gary
 

Answer:Unable to remove XP Plus

Maybe it can't uninstall because Windows is using it's files...

Start/Control Panel/Display
Select Themes @ top
Hit drop down list & select Windows XP or another that is not in "Plus"...

...then try to uninstall Plus
 

1 more replies
Relevance 39.77%
Question: unable to remove

Im trying to remove kazaa media desktop from my computer,but it not possible via add/remove because of...The system file cannot be specified ..Error loading C:\windows\system\cd-chnt.dll,and so any help would be appreciated,o/s is windows me .....
 

Answer:unable to remove

telecom69
The only way I know of to remove Kazaa now is to reinstall it over the top of itself and use the new add-remove programs entry in control panel.
After you have successfully uninstalled Kazaa run Ad-Aware 5.83 from http://housecall.antivirus.com/housecall/start_corp.asp and allow it to clean up any scraps left behind. Also review this website to make sure Brilliant is also removed properly.
http://news.com.com/2100-1023-875274.html

Dave
 

2 more replies
Relevance 39.77%

Ran Hijack this per another members request, this is what was pulled, any suggestions? Thanks in advance!!!!BrianLogfile of HijackThis v1.99.1Scan saved at 2:12:06 PM, on 5/24/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYSC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\MI3AA1~1\wcescomm.exeC:\Documents and Settings\hodgson.POLTDESIGN\My Documents\T?sks\csrss.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\PROGRA~1\MI3AA1~1\rapimgr.exeC:\Program Files\HP\digital imaging\bin\hpq... Read more

Answer:Unable To Remove Pop-ups

Hello O-turn and welcome to BC My name is SNOWHITE and I will be helping you with your Malware problem.As I am still in training I will be helping you under supervision of our expert teachers, so there may be a delay between posts. I will be analyzing your log now, and be back with you as soon as possible!Regards,

25 more replies
Relevance 39.77%
Question: Unable to remove

I keep getting pop-ups from SysProtect and WinAntiVirus. I have no idea how to remove these spywares and it is very frustrating. Can anyone help. Here is a copy of my HJ log:

Logfile of HijackThis v1.99.1
Scan saved at 2:37:00 PM, on 6/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\EPSON\ESM2\eEBSVC.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.... Read more

Answer:Unable to remove

10 more replies
Relevance 39.77%

I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.

Answer:unable to remove....

  
Quote: Originally Posted by terz


I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.


Have you checked "Device Manager" for any entries with an "!" mark. You may be able to delete any entry that relates to the Pinnacle program there, also.

HTH

5 more replies
Relevance 39.77%

Been having problems with windows security centre not monitoring sygate firewall and avast antivirus, i am not able to access windows firewall atall,ithought if i remove sp2 and reload it, it may solve the problem,i go to add/remove and click delete,it gets so far then a small window appears saying it has failed to uninstall,then i get nine windows updates to install,as i said in my previous thread two weeks ago i am waiting for my legal copy of windows xp pro,i found that my copy was illegal so i paid for a legal copy from microsoft,Ģ92,i received a new key via email and i am waiting for cd so i can try a repair,thanks in advance,

Answer:unable to remove sp2

Windows Security Centre does not monitor all brands of security software. If you have Sygate firewall installed and functioning then you should not need Windows Firewall as well. If you're waiting for your XP CD to arrive, then I'd just wait untill you reinstall - all should be OK then. Not being able to access Windows Firewall may be a side effect of your illegal copy of Windows.

10 more replies
Relevance 39.77%

I have been searching for a solution to solve the "Safe Remove" problem in Windows XP.It always happens whenever I try to safely remove any of my USB HDD regardless of brand-name using the safely remove hardware icon in the Taskbar.I get an error message: 'The device 'Generic volume' cannot be stopped because a program is still accessing it.' There are no programs accessing the drive as I only use it for storage. I have always to restart my PC before I can safely remove the USB HDD.I am sure most of you should ecounter this problem at least once in the past!So, anyone know how to eliminate this problem?

Answer:unable to remove the USB HDD

It may be your virus scanner or something else that is continually monitoring your hard drive.More details about what is loaded, etc. would be helpful.

3 more replies
Relevance 39.77%

Hi, I hav been having some pop-ups that I haven't been able to get rid of with Spybot or Ad-Aware. These include AVSystemcare and other ads which relate to pages I'm currently viewing.

I have a Dell Inspiron 9300 (with an upgrade to 2GB of RAM) and am running Vista Business.

Also, when I have an external hardrive plugged in, the mouse becomes hard to control, stalling for a bit. Similarly, the keyboard misses letters when typing into webpages (not necersarily with the HD plugged in) but is always ok in Word or Notepad - which is where I'm typing this message now to copy across.

Many thanks,
Cpt Black
 

Answer:Unable to remove pop-ups

Here is a Hijack this log if that helps:

Logfile of HijackThis v1.99.1
Scan saved at 5:28:53 PM, on 01/09/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Thomson\ST330\diagnostics\diagnostics.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\I8kfanGUI\I8kfanGUI.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Chris\Documents\HijackTh... Read more

2 more replies
Relevance 39.77%

A friend of mine keeps getting a pop up from some sort of movie site stating his free trial is over and He needs to give his credit card info to continue the subscription. How can we keep this from coming up? Hopefully the below HiJack this log will help. thanks!!Logfile of HijackThis v1.99.1Scan saved at 9:19:14 PM, on 12/16/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\wltrysvc.exeC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exeC:\Program Files\Apoint\Apoint.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Dell�... Read more

Answer:Unable To Remove Pop Ups

Please click here http://www.majorgeeks.com/Sun_Java_Runtime...ment_d4648.html to download the latest version of JAVA Install the application, then go to the Add/Remove Programs options in the Control Panel and Remove ALL previous versions of JAVA.Add remove programs ? remove MyWay SearchYou may want to print this or save it to notepad as we will go to safe mode.Fix these with HiJackThis ? mark them, close IE, click fix checkedR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dllO4 - HKLM\..\Run: [MediaPipe P2P Loader] "C:\Program Files\p2pnetworks\mpp2pl.exe" /H O4 - HKCU\..\Run: [License Manager] "C:\Program Files\License_Manager\license_manager.exe " /silentDownLoad http://www.downloads.subratam.org/KillBox.zip orhttp://www.thespykiller.co.uk/files/killbox.exeRestart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a tim... Read more

4 more replies
Relevance 39.77%
Question: Unable to remove

am asking this on behalf of a friend....had the problem myself, but I can't remember how I fixed it. When using Internet Explorer, if one goes to tools/options, you should be able to delete history,files and cookies. Try as hard as you like, some files will just not disappear. If I go to Control Panel , Internet and attempt to delete from there, same problem.
how to delete them
anitaa
 

Answer:Unable to remove

What version of Internet Explorer, 6.1, 7, or 8?
 

4 more replies
Relevance 39.77%

I?ve uninstalled IE8 before on 2 other Windows 7 installs with no problems. I go to Control Panel\All Control Panel Items\Programs and Features\turn windows features on or off And uncheck IE 8 , and press ok and I get this error message: ?An error has occurred. Not all of the features were successfully changed.? And it doesn't get rid of IE8. Any idea how to fix this? I'm using Win 7 64bit thanks.

More replies
Relevance 39.77%

My McAffe virus scan detected two PUPs that could not be deleted, cleaned or quarentined. I rebooted in safe mode and found seven PUPs that I deleted. However I still get a pop up whenever I start my computer and approximately every half hour or so after that. The pop says "powered by zedo' and this is the url:

http://c5.zedo.com/jsc/c5/ff2.html?n=350;c=585/6;s=363;d=16;w=720;h=300

I have run "Hijack This" and below I have attatched the log file. Can anyone help

Thanks
Pete
 

Answer:Unable to remove pop up

7 more replies
Relevance 39.36%

I have a PC with Windows 8.1 operating system. I have malware that I am unable to remove.
 
Background: The PC is used by my 10 yr old son for Minecraft. I suspect he sought out a mod to download and clicked where he should not have, all the warnings about downloading without dad being around.
 
Symptoms: Unwanted ads pop up at the lower right corner of the screen. They can be closed clicking the X with no issue. They will reappear randomly every 10 minutes or so. I will receive pop up notifications courtesy of Malwarebytes Anti Malware in the same area that provide me with the following warning:
 
KDV.decipheringwarns.com
38.134.106.126
Port 51456
Outbound
 
or 
 
adnetworkperformance.com
130.211.186.109
Port 51763
Outbound
 
Steps taken:
Ran Malwarebytes program with updated database. Removed over 370 items. Issue remained, but not as extensive. I have some logs generated that may be helpful - see below
 
Reviewed previous assistance from LoPhat at Gladiator a couple of years ago when he helped me remove Shopping Assistant and ran the following thinking that those programs may help:
 
Ran Adware Cleaner - See Log posted below
Ran Junk Removal Tool - see log posted below
 
The pop ups and notifications still persist. 
 
Any help to remove the remaining pieces would be greatly appreciated.
 
 Malwarebytes Anti-Malware
www.malwarebytes.org
 
 
Update, 2016-11-02 3:48 PM, SYSTEM, GAMING-PC, Schedule... Read more

Answer:Malware - unable to remove

Hello, Run RKill, now before any reboot run a MALWAREBYTES scanPlease download Rkill by Grinler and save it to your desktop.Link 1Link 2Double-click on the Rkill desktop icon to run the tool.If using Vista/Windows7, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.Do not reboot the computer, you will need to run the application again.ESET Online ScannerClick here to download the installer for ESET Online Scanner and save it to your Desktop.Disable all your antivirus and antimalware software - see how to do that here.Right click on esetsmartinstaller_enu.exe and select Run as Administrator.Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.Select Enable detection of potentially unwanted applications.Click Advanced Settings, then place a checkmark in the following:Remove found threatsScan archivesScan for potentially unsafe applicationsEnable Anti-Stealth technologyClick Start to begin scanning.ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.When the scan is done, click List threats... Read more

7 more replies
Relevance 39.36%

Hi, After a restart of the notebook. My wired and wireless failed on me. I did some troubleshooting and notice that there are some devices installed without my knowledge. I am sure i did not install those. These devices have the yellow exclaimation marks. ASUS USB Wireless Network Adapter - CorSnid MiniportBluetooth LAN Access Server Driver - CorSnid MiniportIntel(R) 82566MM Gigabit Network Connection - CorSnid MiniportIntel(R) Wireless WiFi Link 4965AGN - CorSnid Miniport PLANEX GW-US54Mini 54Mbps Wireless Mini USB Dongle - CorSnid MiniportPLANEX GW-US54Mini 54Mbps Wireless Mini USB Dongle #2 - CorSnid MiniportPLANEX GW-US54Mini 54Mbps Wireless Mini USB Dongle #3 - CorSnid Miniport I tried to remove these devices by uninstalling, all give the same message. "Failed to uninstall the device. The device may be required to boot up the computer." I also did disabled all these devices and hoping either my wired or wireless can but. But this does not solve. Can someone tell me what had happened? How can i get rid of all those devices and how do i get back my network connections. ThanksLC  

More replies
Relevance 39.36%

I ran Hickjack this and unsure what to do after a scan
 

Answer:unable to remove Mislead.App

I am posting my log file
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:04:05 PM, on 10/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WIND... Read more

1 more replies
Relevance 39.36%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 16:52:58, on 05/05/2008Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\Ati2evxx.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\PROGRA~1\Compaq\COMPAQ~1\hibserv.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINNT\System32\NMSSvc.exeC:\WINNT\system32\regsvc.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINNT\system32\stisvc.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\system32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\svchost.exeC:\WINNT\Explorer.EXEC:\WINNT\system32\PRPCUI.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Compa... Read more

Answer:Unable To Remove "trojansc.sbi"

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computer http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.Have a look here: http://forums.spybot.info/showthread.php?t=14869If that is not what you are looking for, try posting Spybot S&D questions here:http://forums.spybot.info/forumdisplay.php?f=4 For other issues, please read and follow the directions posted above and pinned to the top of the forum.ThanksIf your issue is resolved, post to let me know so I can close your topic.

2 more replies
Relevance 39.36%

Dear Sir

'm unable to remove virus from my system,even thow with latest update containing antivirus. I have avira antivirus.I wanted to know which is the bes antivirus which can remove all virus especially .exe virus.Please suggest me on this issue....

Thanks & Regards
Hari

Answer:Unable to remove virus

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

There is no antivirus that will remove all viruses all the time. Avira is as good as any.

------------------------------------------------------

1 more replies
Relevance 39.36%

I don't know if this is the right place to put this...if not please let me know.

I have officexp installed on a workstation and I am trying to delete it to re-install, but when I go to add and remove software, Office xp doesn't give me the remove or modify buttons. I am running WinXP on this machine.

I need to re-install because the software and outlook are not working properly and I need to add this end user back onto the network because she is not getting any emails. I suspect that this end user has been messing with the files.

Thanks
 

Answer:Office xp....unable to remove...help

6 more replies
Relevance 39.36%

Since using Internet Explorer in order to download som dotnetfx from MSoft I have been plagued with a popup from http://professionalscan.c*m.
I use FireFox for absolutely everything else.
The automatic update for windows is being turned off.
I run Nod32 which is updated several times a day, Trojan Remover, also up to date and Look'n'Stop Firewall.

Nod finds win32 Kryptik on a regular basis.

Trjan Scanner finds VirtuMonde which seems to be acting with ie Explorer. I follow all the proceedures that TR asks for but to no avail.
I hope someone can help so I may avoid a format and all the attached hassle.
Here is my HJT Log

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:09:15, on 17.11.2008
Platform: Windows XP SP3, v.5657 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Google\Google Talk\googletalk.exe
D:\Program Files\FlashGet\flashget.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Everything\Everything.exe
C:\Progra... Read more

More replies
Relevance 39.36%

Rename and Delete are not allowed

I also scan the files with Antivirus

Answer:Unable to remove and delete

Soo, It looks to me that you have a corrupted disk. After backing up all the files that you really need, I would recommend a re-install of your windows.

Rich

4 more replies
Relevance 39.36%

Hijackthis below. PC will not go to half the sites suggested for a fix so I am kind of stuck. If you can help, thanks. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:52:03 PM, on 11/6/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\hkcmd.exeC:\Program Files\Intel\Modem Event Monitor\IntelMEM.exeC:\Program Files\Dell\Media Experience\PCMService.exeC:\Program Files\Common Files\Dell\EUSW\Support.exeC:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exeC:\PROGRA~1\Yahoo!\browser\ybrwicon.exeC:\Program Files\Yahoo!\Search Protection\SearchProtection.exec:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exeC:\PROGRA~1\Yahoo!\b... Read more

Answer:Virtumonde and others unable to remove any of them

hello, you can close this thread. I decided that restoring this dell is the best way to go since there really is no data on it. Thanks

2 more replies
Relevance 39.36%

My virus program can not remove Adware-Onestep.k. My computer is not safe, can anyone tell me what to do.

Answer:Unable to remove virus

Hello tvdvmv,

Please follow the instructions in our pre-posting topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 39.36%

Malware Alarm 2.1 keeps popping up and messing up my work space. The contact address on their ad does not work. I don't know how the program got on my system.

When I go to my control panel to remove the program is says it can not be removed until it is shut down. And that's my problem. I can not shut the program down. Right click, left click, nothing works.

I have Windows XP home edition and am using a Dell Dimension 9150l

Jack
 

Answer:Unable to remove program

Hi....dont try to remove it because it will not go on its own.

Download and scan with SUPERAntiSypware Free for Home Users
Double-click SUPERAntiSypware.exe and use the default settings for installation.
An icon will be created on your desktop. Double-click that icon to launch the program.
If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)
Under "Configuration and Preferences", click the Preferences button.
Click the Scanning Control tab.
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.

Click the "Close" button to leave the control center screen.
Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
On the left, make sure you check C:\Fixed Drive.
On the right, under "Complete Scan", choose Perform Complete Scan.
Click "Next" to start the scan. Please be patient while it scans your computer.
After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
Make sure everything has a checkmark next to it and click "Next".
A notification will appear that &q... Read more

2 more replies
Relevance 39.36%

Hello Tech Support,

I have tried all I know including Malware-bytes and alike, reset all browsers, uninstall all browsers and reinstall to no avail . Adds keep popping up every time I search in the internet. I have gotten great help from you before please help me again.

I would greatly appreciate it.

Roger

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 6038 Mb
Graphics Card: NVIDIA GeForce GT 525M, 1024 Mb
Hard Drives: C: Total - 456835 MB, Free - 312133 MB;
Motherboard: Dell Inc., 0FRK44
Antivirus: McAfee Anti-Virus and Anti-Spyware, Updated and Enabled
 

Answer:Unable to remove CoudScout! Please Help

9 more replies
Relevance 39.36%

Hi there! I recently scanned my computer using AVG7 and it was apparently unable to remove some unwanted malware..I'm hoping someone here will be able to help me clean up all the malware in my computer ^__^My logs:Deckard's System Scanner v20071014.68Run by Julie on 2008-08-10 15:25:30Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --16: 2008-08-10 19:25:38 UTC - RP186 - Deckard's System Scanner Restore Point15: 2008-08-10 18:39:06 UTC - RP185 - System Checkpoint14: 2008-08-09 18:36:44 UTC - RP184 - System Checkpoint13: 2008-08-08 15:50:07 UTC - RP183 - Installed Java™ 6 Update 712: 2008-08-07 20:14:12 UTC - RP182 - System Checkpoint-- First Restore Point -- 1: 2008-07-06 02:45:27 UTC - RP171 - System CheckpointBacked up registry hives.Performed disk cleanup.System Drive D: has 11.04 GiB (less than 15%) free.-- HijackThis (run as Julie.exe) -----------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:27:01 PM, on 8/10/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:D:\WINDOWS\System32\smss.exeD:\WINDOWS\system32\winlogon.exeD:\WINDOWS\system32\services.exeD:\WINDOWS\sys... Read more

Answer:Unable To Remove Malware

Hello, Buggie. to BleepingComputer.comMy name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)Please give me some time to look over your computer's log(s).Please take note of the following:In the meantime, please refrain from making any changes to your computer.Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.Finally, please reply using the button in the lower left hand corner of your screen.We need to run OTScanItBefore running a new scan let's clean out the temporary folders. Download ATF Cleaner to your Desktop.Double-click ATF-Cleaner.exe to run the program.Click Select All found at the bottom of the list.Click the Empty Selected button.If you use Firefox browser, do this also:Click Firefox at the top and choose Select All from the list.Click the Empty Selected button.NOTE : If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser, do this also:Click Opera at the top and choose Select All from the list.Close ALL Internet browsers (very important).Click the Empty Select... Read more

2 more replies
Relevance 39.36%

I have an older computer but keep getting pop up at time I have ran housecall and superantispyware and clean most of it but not able to remove one call TROJ_BOAXXE.BJ. thaks for yout ime reading this.
 

Answer:unable to remove troj_boaxxe.bj

here is a copy my my hi jac k log if needed, thanks
Logfile of HijackThis v1.99.1
Scan saved at 8:11:11 PM, on 10/21/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\eMachines Bay Reader\shwiconem.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\LVComS.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Logitech\Desk... Read more

1 more replies
Relevance 39.36%

Hey, first of all i apologize for the length of this post but i think the more info given the easier it would be for someone here to pinpoint the problem? upon the desktop opening after a boot i always get the the following error message, ClympO4aDyy3mA....(it goes on a bit further) has stopped responding and in the problem details section it says:

C:\Users\dee\AppData\Local\Temp\WER195F.tmp.version.txt
C:\Users\dee\AppData\Local\Temp\WER2E7E.tmp.appcompat.txt
C:\Users\dee\AppData\Local\Temp\WER2E7F.tmp.mdmp

this never happened up untill i got this trojan.

AVG gives the following report:

"C:\Windows\System32\msnet\server.exe (3012):\memory_00400000";"Trojan horse Generic14.CCKX";"Reboot is required to finish the action"
"C:\Windows\System32\msnet\server.exe (3012)";"Trojan horse Generic14.CCKX";"Reboot is required to finish the action"

but after a reboot and a rescan the virus remains there...

The Server.exe process once ended in task manager stays gone but always comes back after a reboot, i tried opening the file location and deleting the exe file there but again always comes back after a reboot.

I also tried Spybot S&D but that didnt find anything but a bunch of cookies, since this infection my pc boot up has slowed down considerably and especially firefox takes ages opening, it hangs for about 2 minutes before becoming useable. The hardrive is also constantly busy doing something which... Read more

Answer:unable to remove trojan

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

1 more replies
Relevance 39.36%

After a couple weeks of frustration, I deleted my partition in order to start fresh. I moved all of my music files and a couple folders to a different computer and then reloaded them onto this computer. It was roughly 1500 files - mostly music, a few essays, and a couple pictures. Kind of assumed the likelihood of these being the issue was minimal. So I move all the files back, download winamp, steam, firefox, the virus protection that came with the computer, and spybot search and destroy. Spyboy S & D still comes up with the same spyware results. I delete them, restart my computer, and there they are again. Zedo is one of the things I delete on a regular basis. I think I had a trojan that I thought I got rid of, but i guess there is must still be a presence on my PC? Is it possible for it to stick around even though I deleted the partition? Is it probably an issue with the files I saved?

I'm not sure what else to say. Here is the log as requested.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:31:35 PM, on 11/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.e... Read more

Answer:Unable to remove spyware

I love you long time for help?
 

1 more replies
Relevance 39.36%

I have been unable to get rid of this browser hijacker.  Things I've tried:
 
Full Norton 360 scan
Full Malwarebytes scan
Full Emsisoft scan
Autoruns - I searched but could not find a matching startup entry.
 
dds.txt attached.  You nice folks helped me with a problem four years ago and I"m confident you can help again.
 
Thanks
KMS

Answer:Unable to remove safesear,ch

Hello and welcome to Bleeping Computer! My nickname is Pystryker , and I will be helping you with your issue today.Before we get started, I have a few things I need to go over with youIf you are receiving help for this issue at another forum, please let me know so I can close this thread.Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process.Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.At the top of your post, please click on the "Follow this topic" button and make sure that the "Received notification" box is checked and set to "Instantly" This will send an email to you as soon as I reply to your topic, allowing us to solve your problem faster.If any of your security programs give you a warning about any tool I ask you to use, please do not worry. All the links and tools I provide to you will be safe.Please read through my instructions carefully and completely before executing them. I will lay the instructions out in a step by step order to make them easy to follow.Please make sure that all the programs I ask you to download are downloaded to and run from your Desktop.Please make sure you (if you are able) to print out these instructions so that you will be able to refer to them while working on your machine. Part of the solution(s) to your problem may in... Read more

4 more replies
Relevance 39.36%

I run Win7.During an AVG scan it turned up a threat called MalSign.Generic.834.However,AVG was unable to remove it as the threat repeatedly replicated itself.
Has anyone come across this threat and if so how is it removed permanently?

Answer:Unable to remove a threat

I had a similar problem. They are called a PUP.I could not remove it. I got on to Norton and they took over my computer and removed it. It meant going into the registry.I was impressed.

2 more replies
Relevance 39.36%

(Note this is a different issue to the previous poster)

Windows BT stack has always been flakey, but this problem has me stumped.

I've been using a number of HC-05 serial bluetooth adapters, and I need to delete their pairing info and virtual serial port association.

If I go 'Device and Printers', right click, Remove Device, Confirm. Nothing happens, no error, no change in the Status of the device.
If I go to Device Manager-> BlueTooth and remove the device there, it deletes, but on refresh, it reappears.
If I look at properties->Events for the device I see <time spamp> Device Deleted then several seconds later <time stamp> Device Installed (bth.inf). with Information

saying Driver Management concluded the process to install driver bth.inf_amd64_7ac329009c88b2a2\bth.inf for Device Instance ID BTHENUM\DEV_201408201112\7&364C998&0&BLUETOOTHDEVICE_201408201112 with the following status: 0x0.


The same thing happens if I attempt to delete the actual Port (Standard Serial Over Bluetooth link(COMx) in this case the Information is

Driver Management concluded the process to install driver bthspp.inf_amd64_d2676314a8c299d9\bthspp.inf for Device Instance ID BTHENUM\{00001101-0000-1000-8000-00805F9B34FB}_LOCALMFG&0000\7&1A018E8E&0&000000000000_00000005 with the following status: 0x0.

Does anyone know what is causing windows to automatically reinstall the devices?

Answer:Unable to Remove BT Devices

Does anyone know what is causing windows to automatically reinstall the devices?



Are you physically removing these devices from the computers?

2 more replies
Relevance 39.36%

my mcafee keeps catching the same virus everytime i restart the computer

FILE NAME GAOPDXRJBPJENB.DLL
ORIGINAL LOCATION C:WINDOWS\SYSTEM32
VIRUS generic PWS.y
IEMS C:WINDOWS\SYSTEM32\GAOPDXRJBPJENB.DLL

I run the anti virus it catches it i quarentine it i re-boot the visus is in the same location again. i cant update spybot or adaware for some reason. and my browser (IE) isnt running properly either. wether these probplems are related i dont know.

i can only presume the virus reloads itself somehow from a different location the anti virus cant find. please any help would be mint
many thanks PB
 

Answer:generic PWS.y unable to remove

6 more replies
Relevance 39.36%

I have had this infection for about a month. CWS Shredder and Spybot keep removing it, but in an hour or so, or if I restart my computer it comes back. I have turned off system restore. I have no idea how to get rid of it.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:23:16 AM, on 9/23/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\ehome\ehtray.exeC:\Program Files\Java\jre1.6.0_02\bin\jusched.exeC:\Program Files\LogMeIn\x86\LogMeInSystray.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\Yah... Read more

Answer:Cws.smartsearch Unable To Remove

Hello,* Download Combofix to your desktop.In case you have used Combofix before, please delete the version you are having and redownload it again, because Combofix is being updated everyday.In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix, please disable your scanner and redownload Combofix again. Because some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.* Doubleclick combofix.exeFollow the prompts.Don't click on the window while the fix is running, because that will cause your system to hang.When finished and after reboot (in case it asks to reboot), combofix will open again to gather the necessary information for the log. This may take a bit. When done, Combofix will close and a log should open, combofix.txt. Post the contents of this log in your next reply together with a new hijackthislog.Do NOT post the ComboFix-quarantined-files.txt - unless I ask you to.

2 more replies
Relevance 39.36%

I have a file pmnk.dll that I cannot remove. Says it is in use by another program.An internet search shows this file as a malware, how do I remove it.Here is my Hijackthis log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:23:14 AM, on 12/1/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\Program Files\a-squared Free\a2service.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Comodo\CBOClean\BOCORE.exeC:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeC:\Program Files\Sandboxie\SbieSvc.exeC:\WINDOWS\system32\svchost.exeC:\Prog... Read more

Answer:Pmnk.dll Unable To Remove

Let me know if I need to post anymore logs.
Thanks.

3 more replies
Relevance 39.36%

A couple of months ago Notepad began closing after a few minutes of me using it, a popup would say something to the effect that Notepad needs to close because a malicious program is trying to use it. I did a full scan with MSE and it found a bunch of trojans which I proceeded to remove. I did a full scan again and my computer came up clean but when I turned the computer on later MSE was giving a warning that there's a virus which I again removed, did a full scan and MSE found nothing, but again on reboot the same thing happened. I removed it again, did several full scans and my computer came up clean even after rebooting.

So I thought the virus was gone, but a few days ago I noticed that some links I clicked in Google are redirected to another site. I did a full scan with MSE and this time it found a Java exploit (java/CVE-1202-1723.OA), I removed it, did a full scan and MSE didn't find anything but I continued to be redirected in Google. I downloaded Malwarebytes and it found 2 trojans which I removed, did a full scan with Malwarebytes then with MSE and both found nothing but some Google links were still being redirected. I tried Avast and Gmer and they too did not find anything.

So what do I do now? I now I got something on the computer but don't know what or how to get rid of it.

Answer:Unable to find and remove

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

15 more replies
Relevance 39.36%

After running a rootkit scan with AVG, it keeps detecting a 'hidden driver'. However when I remove it, and i scan again, it just keep picking up more rootkits, with different names.

Here's some pics, this just keeps happening every time I remove it and re scan.



HJT log...

View attachment hijackthis.log
Any help is much appreciated. Thanks!
 

More replies
Relevance 39.36%

My homepage has been taken over by ESURF.BIZ
I have tried to remove /clean it using the following but shown all ok ?
Avg
Avast
Malwarebytes anti malware
Jrt
Hitmanpro
Adwcleaner

Restarted pc but still loads as home page.
Please advise steps to remove this.

Thanks
 

Answer:Unable to remove maleware

What browser are you using? You may just have to reset it to defaults.
 

23 more replies
Relevance 39.36%

Hi, trying to sort out my mates laptop. Receiveing a pop up trying to get me to install PC-Antispyware, also receiveing an exclamation mark in the system tray stating that the pc contains spyware blah blah blah.

Have done the usuals (all in safe mode) Spybot, superantispyware, smitfraudfix & combofix but to no avail.

All haelp is very much appreciated!

Panda activescan log:


Incident Status Location

Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\jay\Cookies\[email protected][1].txt
Virus:Trj/Bancos.RQ Not disinfected C:\Documents and Settings\jay\Desktop\ComboFix.exe[327882R2FWJFW\pv.cfexe] ... Read more

Answer:PC-Antispyware - unable to remove!

Hello and welcome to TSF.


Quote:




Have done the usuals (all in safe mode) Spybot, superantispyware, smitfraudfix & combofix but to no avail.




Combofix is a very powerful tool and should not be used without the supervision of a trained analyst. The system is still infected. Please delete the existing Combofix from your desktop and install the latest version. . Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/comb...o-use-combofix
When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system.

Also, please post the Combofix.txt from your previous run.

1 more replies
Relevance 39.36%

Windows xp home pc infected with trojan.
I have identified three  files 
c:\windows\installer\{BF8B97AB-1D7E-BEB8-3D55-AF7-F1B36DE43}\syshost.exe
c:\windows\system32\drivers\1455094.sys
c:\windows\system32\drivers\63a9e79ebe0aa8c2.sys
All my attempts to remove have failed.
tried Norton, Autoruns and via dos in safe mode.
always get access denied or similar.
 
Any ideas ?
thx

Answer:Unable to remove syshost.exe et al

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:  aswMBR will create M... Read more

8 more replies
Relevance 39.36%

I believe the problem is this rundl32.exe, since I noticed it originally come up I've been unable to use the search function in firefox, and my automatic update has been turned off and resues to turn back on even after going to the website and doing what it recommended to turn it back on by going into services. I have pop ups show up in firefox every now and then when I navigate to different pages that never popped up before, and I can no longer right click and save pictures via firefox. I've tried searching for this rundl32.exe but the name of the file continually changes, the names in question "iwuthnsm", "wlddusgw", "rceqcflm", and "bwgesvls".

So they constantly change everytime I try and disable them in msconfig start up. Anyways heres my hijack this log file that I got with DSS.

Thank you for your time and helping me with this matter.

Deckard's System Scanner v20071014.68
Run by Compaq_Owner on 2008-07-28 12:12:36
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
97: 2008-07-28 19:12:41 UTC - RP142 - Deckard's System Scanner Restore Point
96: 2008-07-27 19:16:40 UTC - RP141 - System Checkpoint
95: 2008-07-26 16:10:01 UTC - RP140 - Last known good configuration
94: 2008-07-26... Read more

More replies
Relevance 39.36%

NOTE: The "attach.txt" file is attached to this reply
Note:  these files posted here per request of Broni
 
Mod Edit:  Previous AII topic, http://www.bleepingcomputer.com/forums/t/543923/malwarebytes-reports-it-blocked-fixraycom/#entry3446901 - Hamluis.
 
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16561  BrowserJavaVersion: 10.67.2
Run by louis at 10:59:32 on 2014-08-14
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.3069.1277 [GMT -5:00]
.
AV: Norton Internet Security *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program ... Read more

Answer:unable to remove FIXRAY.COM - DDS log is below

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.
 
If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===
 
Please download AdwCleaner by Xplode onto your Desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click the  Scan  button and wait for the process to complete.
Click the Report button and the report will open in Notepad.

 
IMPORTANT
 

If you click the Clean button all items listed in the report will be removed.

 
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
 

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click the  Scan  button and wait for the process to complete.
Check off the element(s) you wish to keep.
Click on the Clean button follow the prompts.
A log file will automatically open after the scan has finished.
Please post the content of that log file with your next answer.
You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).

===
 
Download the  version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press ... Read more

29 more replies
Relevance 39.36%

My OS is XP and I have updated all of my definition files and MS Updates. I am unable to remove what seems to be a virus. My IE homepage keeps reverting back to 3929.cn no matter what I do.

Please help!!

Here are my log files


DDS (Ver_09-01-07.01) - NTFSx86
Run by Jillian at 15:22:09.09 on Mon 02/02/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.511.121 [GMT -5:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\... Read more

Answer:3929.cn - unable to remove

Hi, welcome to TSF!

It seems that you zipped up GMER.exe. Please follow the instructions regarding GMER again.

http://www.techsupportforum.com/f50/...lp-305963.html

1 more replies
Relevance 39.36%

Hi,

My anti-virus is unable to remove some viruses that it has found in my computer. Could you please help me locating them?

Thanks in advance!!


Logfile of HijackThis v1.99.1
Scan saved at 18:42:01, on 05/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Arquivos de programas\Roxio\GoBack\GBPoll.exe
C:\ARQUIV~1\NORTON~2\NORTON~2\GHOSTS~2.EXE
C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7Debug\mdm.exe
C:\Arquivos de programas\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Arquivos de programas\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\ARQUIV~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe
C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Arquivos de programas\iTunes\iTunesHelper.exe
C:\Arquivos de programas\QuickTime\qttask.exe
C:\Arquivos de programas\Java\jre1.5.0_03\bin\jusched.exe
C:\Arquivos de programas\iPod\bin\iPodService.exe
C:\W... Read more

Answer:Please Help! Unable to remove virus

6 more replies
Relevance 39.36%

Hi,

This is my first post, so if I'm not providing enough information please let me know!!

Over the past week or so I've encountered alot of problems on my PC (Windows XP Home, currently using IE 8.0). Last week I was infected with the "Yoog Search" trojan (which I believe was successfully removed), but ever since then I've been encountering pop-ups while using IE 8.0. Until recently this has never been a problem.

One file that continues to get flagged by anti-malware programs (such as Malewarebytes) is "ykhemah.dll". This file is always flagged but never seems to get successfully removed. Does anyone know any information about this? Could this be the cause of the pop-ups I'm getting?

Like I mentioned above, I'm totally new to this so please let me know what further information I can provide. Thanks!!!

Answer:Unable to remove ykhemah.dll

Please download ATF Cleaner by Atribune & save it to your desktop. alternate download link DO NOT use yet. Please download and install SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If asked to update the program definitions, click "Yes". If not, update the
definitions before scanning by selecting "Check for Updates". (If you encounter
any problems while downloading the updates, manually download them from
here and
unzip into the program's folder.)Under the "Configuration and Preferences", click the Preferences... button.Click the "General and Startup" tab, and under
Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.Click the "Scanning Control" tab, and under Scanner
Options, make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program.Do not run a scan just yet.Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arr... Read more

3 more replies
Relevance 39.36%

I've tried uninstalling WiseFixer and I get the following msg:
file "C:\Program Files\WiseFixer\unins000.dat" does not exist. Cannot uninstall.
 

Answer:WiseFixer - unable to remove

The (free) Revo Uninstaller may help.
 

3 more replies
Relevance 39.36%

My AVG scan hass picked up a trojan - however i have been unable to delete the infection as it's size is too big! - it did say it has moved it to the vault...what can i do to get rid of it!?thanks

Answer:Unable to remove trojan

delete it from the vault, scan again, see if all is clear.

4 more replies
Relevance 39.36%

Hi. I want to remove 3 profiles from my laptop (an old Dell Latitude CPx, running XP), leaving just one but have not been able to do it.

To do this I have done the following:
control panel>user accounts>(selected the account to delete)>change account>delete account>delete files>delete account.

The trouble is, when I get to the delete account screen and press the button, it just hangs, nothing happens. When I click the red x to get out I get the message
End Program. mshta.exe program not responding.

I've searched for mshta.exe but can't find it!

any idea what I need to do to get round this one and delete the accounts?

Thanks in advance.
 

Answer:Unable to remove profiles

I would think the best alternative would be to delete the profiles using Windows Explorer. By default they are located in the "C:\documents and settings" folder.
 

2 more replies
Relevance 39.36%

my pc is having problem. some application is not functioning. unable to run regedit or services. pop up message shows "error 429 activex component cant create object" when try to execute host application. Attached is the hjt log. pls helllpppppp. tq

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:28:18 PM, on 06/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINDOWS\SOUNDMAN.EXE
D:\Program Files\FileZilla Server\FileZilla Server Interface.exe
D:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\PROGRA~1\MICROS~2\rapimgr.exe
C:\Program Files\StormII\stormSrv.exe
D:\Program Files\FileZilla Server\FileZilla Server.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\babas\temp\TeamViewer\Version4\TeamViewer.exe
C:\Program Files\StormII\stormSrv.exe
C:\Program Files\StormII\stormSrv.exe
C:\Program Files\StormII\stormSrv.exe
C:\Documents and Settings\babas\Desktop\hijackthis.exe
C:\Program F... Read more

More replies
Relevance 39.36%

Hello everyoneFor the last couple of days my pc has been infected by a trojan and i just cant get rid of it. I managed to find a link about this at http://www.bleepingcomputer.com/forums/lof...hp/t207815.html and then i was directed to this website http://www.trendmicro.com/vinfo/virusencyc...EI&VSect=Sn.Now even though i have used malwarebytes anti-malware program to remove the trojan and followed all the instructions on the website, a file keeps appearing on my pc at start up, which resets my firefox proxy settings to http proxy locol host port 7070 socks v5 and firefox only works if i return the settings to auto detect. The file that keeps showing up on my scan is located at appdata\local\temp and no matter how many times i delete this file "tt_1236298941.exe" it keeps coming back on start up.Can anyone please recommend anything that will help with this problem.

Answer:Unable to remove TROJ_PROXY.AEI from my pc

Hi and welcome to BC.

Let's start with a Malwarebytes log. Please update and rerun MBAM and post its log - Thanks!

1 more replies
Relevance 39.36%

I have three adware programs that keep coming back.  They are
 
NexttCouep
PprIceChop
SaVeMass
 
I have uninstalled them using control panel.  I have uninstalled them using adware.cleaner 3.3 program, and they keep returning causing countless windows to pop up.
 
I am running on Windows 7 with Chrome browser
 
Please help me.

Answer:Unable to remove adware...Need help

Hello and welcome to Bleeping Computer! My nickname is Pystryker , and I will be helping you with your issue today.Before we get started, I have a few things I need to go over with youIf you are receiving help for this issue at another forum, please let me know so I can close this thread.Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process.Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.At the top of your post, please click on the "Follow this topic" button and make sure that the "Received notification" box is checked and set to "Instantly" This will send an email to you as soon as I reply to your topic, allowing us to solve your problem faster.If any of your security programs give you a warning about any tool I ask you to use, please do not worry. All the links and tools I provide to you will be safe.Please read through my instructions carefully and completely before executing them. I will lay the instructions out in a step by step order to make them easy to follow.Please make sure that all the programs I ask you to download are downloaded to and run from your Desktop.Please make sure you (if you are able) to print out these instructions so that you will be able to refer to them while working on your machine. Part of the solution(s) to your problem may in... Read more

14 more replies
Relevance 39.36%

I have a computer that is running Vista Home Premium. I also have the Trend Micro PC-cillin Internet Security 14 software installed and running in mostly the default configuration.

The Trend software is popping up messages about an infection that it is unable to quarantine or remove. The messages all mention something about a DLL file that I could remove manually. The DLL files that it prompts about are slightly different file names but are all usually something like rtkt_tdss.dll or tdss_crxx.dll or something along those lines. I saw some other people asking about tdss.dll. Attached is what the HijackThis scan reports on the machine.

I would appreciate any feedback or suggestions anyone might have about how to permanently remove this infection.

Thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:47:13 PM, on 1/19/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Pitn... Read more

More replies
Relevance 39.36%

HI,i am not able to remove vbzip10.dll file, I remove this file by logging on with another user on my VISTA machine and when I log back in with my user id, it gets created again. I can see setup and x.zip file with it. I happened after I downloaded some software from limewire. Is it something to be worried about.. I don't feel comfortable with it and want to get rid of it.. pls advise. here is the logfile of hijackthis.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 00:06:54, on 04/01/2008Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v7.00 (7.00.6000.16575)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\Program Files\DellTPad\Apoint.exeC:\Windows\OEM02Mon.exeC:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exeC:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exeC:\Program Files\Java\jre1.6.0\bin\jusched.exeC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exeC:\Program Files\Dell\MediaDirect\PCMService.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Program Files\McAfee... Read more

Answer:Unable To Remove Vbzip10.dll

Welcome to the BleepingComputer HijackThis Logs and Analysis forum. My name is Richie and i'll be helping you to fix your problems.Apologies for the late response,as i'm sure you can appreciate we are absolutely snowed under with logs.If you still require help,please post a new Hijackthis log into your next reply.

1 more replies
Relevance 39.36%

Using the uninstaller for quiknowledge results in the program terminating and then windows searches for a solution to the problem. The return from this is that Windows was unable to find a solution. The last time I ran it hung on nsExec.dll but that varies every time I try the uninstall

Below is the dds.txt file and attach.txt is attached. 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.16521
Run by Joan at 13:28:05 on 2014-04-26
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8184.5355 [GMT -4:00]
.
AV: Norton Internet Security *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpe... Read more

Answer:Unable to remove quiknowledge

Good evening.
I would start by reinstalling it and seeing if that enables you to uninstall it successfully - it may just be a corrupted file issue.

6 more replies
Relevance 39.36%

Hi,I've experienced several malware problems over the past few weeks and have been completely worn down trying to resolve it. I am running Win XP with SP2. Since I've been experiencing several problems, I want to list all the problems I experienced and the steps I have taken so far:1. About two weeks ago, my computer was infected by the "Security Suite" malware, which kept saying my computer is infected and that I need to purchase the security suite. In order to resolve this, I downloaded MalwareBytes program and I was able to remove "Security Suite" malware.2. About 5 days ago, I started getting the message :" This application could not initialize property (Ox0000 etc). Click OK to terminate this application". I kept getting this message several times and it seemed to be attempting to terminate all my applications. I used Malware bytes in safe mode to try to resolve this, but it could not get the job done. So, I searched on the internet for solutions to this and there seemed to several posts with similar messages, but I think their problems were related to Google Chrome, IE or some visual studio error. But, I think mine is different, because my errors seemed to be related to several programs. In order to try to solve this, I switched to Safe Mode and ran SpyBot Search & Destroy. S&D seemed to remove several threats. Next I installed AVG Antivirus 9 in safe mode also and ran the scan atleast 3 times. Now when I went back to the no... Read more

Answer:Unable to remove malware

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

34 more replies
Relevance 39.36%

Hello,

I am trying to correct issues with a friends system. AVG is his Anti-Virus software and he has Windows Defender and Super Anti-Spyware loaded also. When I received the machine the AVG indicated two files; CP1041.nls as a "Trojan Horse Spam Tool.VH" and Kernel32.dll as "Changed". I have tried just about everything listed in the forum related to turning off System Restore, re-running Super Anti-Spyware and then re-enabling System Restore. Everything appears to regenerate after rebooting. Attached is the latest HighJackThis log for examination.

Thanks in advance for any help.
 

Answer:Unable to Remove Malware

Hello nriacone and welcome to TSG. For future reference, just copy and paste the contents of the reports in your replies. Easier then uploading the file, then we need to download it to
view it.

Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.

Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to Clipboard ready for posting back on the forum).
Finally paste the contents of the Report.txt back on the forum with a new HijackThis lo... Read more

1 more replies
Relevance 39.36%

Hi, i had read up on
http://forums.techguy.org/security/556307-need-help-removing-can-not.html
http://forums.techguy.org/security/551431-solved-autorun-vbs-bat-problem.html
http://forums.techguy.org/malware-removal-hijackthis-logs/556776-autorun-vbs.html

but my case is a bit different as i cannot find any wscript at the process. And i had manually del the autorun.* files which its keep on coming back after i had deleted them.

here is my info on the autorun.vbs:

http:[email protected]/1359854499/
http:[email protected]/1359854951/
http:[email protected]/1359855203/

here is my HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:30:21 PM, on 11/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Fil... Read more

Answer:Unable to Remove Autorun.vbs

Is there anyone can help me? Or i just try one of the method by those link i copy on top?

Thanks
 

2 more replies
Relevance 39.36%

Complete noob. Having trouble with "system security" software, cannot remove it or the links attached. Dosent appear in the add or remove programs list, and website states the removal option has been disabled. Help me please? :-o
 

Answer:unable to remove programs

Not entirely sure what you are trying to uninstall and even if it SHOULD be uninstalled. You'll need to give further details to determine that if you are unsure, such as its full name and what it does etc.

If you feel confident with its removal try this http://majorgeeks.com/Revo_Uninstaller_d5706.html
 

1 more replies
Relevance 39.36%

Tonight, I thought I might as well get rid of the Windows.old and the Windows10upgrade. First, I used Revo Uninstaller to take out Windows10Upgrade. When it came up to uninstall, I thought no, I'll do this later. So hitting the X up in the right hand corner did nothing. So I went to Task Manager and hit the End Task. Great But then Revo came up to do a search in the Registry to I let it go. Clicked deleted on what it found and no problem.
Then I went to Diskcleanup and cleaned up all the files, including Clean up System files. In there I made sure to check off everything actually. Doing this twice, Windows.old and Windows10upgrade are still showing in File Explorer. I might add, that "previous windows installation" is not showing in the Disk Cleanup. Yet it is still there in File Explorer.
I guess my question is, is there another way to remove this stuff so I can free up Disk space?

Answer:Unable to remove Window.old

I had the same experience trying to remove windows.old and its subfolders (which were all empty after doing the disk cleanup). I had to take ownership of all, change permissions to full control for my account, remove read only, and then delete all, including windows.old.

20 more replies