Computer Support Forum

Unable to remove CD Drive (Z:)

Question: Unable to remove CD Drive (Z:)

Greetings, Nothinglynothing here. I need some help with the removal of CD Drive (Z
It only appeared after I accidentally downloaded a bunch of virus from a website. I managed to clear out all the virus but I cant seem to find the way to delete this CD Drive. From my searches, I think this CD Drive might be some kind of Virtual Hard Disk (VHD). I am not sure about it though. Hope someone can help me with it. Thanks in advance.

More replies
Relevance 100%
Preferred Solution: Unable to remove CD Drive (Z:)

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Relevance 52.48%

A friend brought a computer over for me to see what is wrong with her DVD drive. The drive isn't working at all but I can't figure this case out. I took the screws out but it won't come out the back at all....moves about an inch. Any suggestions?? I have looked on their website but found nothing. Thanks in advance for any advice.
 

More replies
Relevance 52.48%

unable to remove autorun.inf from flash drive
hi,
last weekend i found autorun.inf (i suspect a virus) in my pen drive, and my antivirus mcafee unable to detect it, though i update it daily.

whenever i delete it manually, it got deleted but it reappears when i eject and plug in my flash drive again.

plz if any one cud suggest me sum measure.
thanks in advance.


with regards,
SHUBHAM GORE

Answer:unable to remove autorun.inf from flash drive

ALKOHOLU


this folder, always reside in my usb drive , though i format it frequently.
CAN any one could give me some information to remove this recursive virus.

2 more replies
Relevance 52.48%

Last week i bought an Mp3 player, which can also be used as a flash drive/ USB Mass Storage, Last Night I loaded a video onto it to transfer it to another PC, i deleted all of the music off it so that the video would fit on, But After i had finished transfering the video over onto the other PC, I could not delete the video off my MP3 Player! it fills almost all of the room (512mb) on the Mp3, so i cannot put any of my music on it.

When I try to delete the file it comes up the an error message that the file is being used by another person or program, even though i am not using any programs with the USB drive. It never used to do this when i just had mp3s on it, so what has gone wrong?

Any help will be appriciated, Thank you
 

Answer:Unable to Remove Data From Flash Drive?!!!!??? Please Help!!

I Forgot to mention that my opperating system is windows XP.

I can put other files onto the Drive, and take them off again, just i cant remove the goddam video taht takes up all the memory. PLEASE Help getting flustrated with the fact that i only bought it last week and its already srewed up.

I have tryed to format it, however a similar error message is displayed about the drive currently being in use, however it diesnt do it with any other files that i can put on.
:dead:
Please Help Before i get the hammer out....... :knock:
 

6 more replies
Relevance 52.48%

Hi all,
Please can somebody help me, I've a relatively new SanDisk Cruzer Slice 64GB USB pen drive, which I use for work mainly. It has somehow managed to write protect itself and no matter what I do I simply cannot remove it!

I've scanned with Antivirus, nothing found

I've tried regedit - Computer\HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\StorageDevicePolicies

StorageDevicePolices didn't exist so I created a 32 bit Dword string, set to 0 this hasn't done anything

I've tried Diskpart as administrator -
DISKPART> list disk
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 298 GB 1024 KB
Disk 1 Online 59 GB 0 B
DISKPART> select disk 1
Disk 1 is now the selected disk.
DISKPART> attributes disk clear readonly
Disk attributes cleared successfully.
DISKPART> clean
DiskPart has encountered an error: The request could not be performed because of
an I/O device error.
See the System Event Log for more information.

I've checked the logs and it doesn't seem to list anything for the drive

Answer:USB Drive Write Protected itself, unable to remove

How is the disk formatted? FAT32 (I believe the default, could be wrong) or NTFS?

If it's FAT32, and you are trying to copy a file larger than 4GB, then it's not going to let you write to it due to the limitations of FAT32. You would have to re-format the disk to NTFS.

It also could be possible that the disk became corrupted during a write operation (ie., not using "remove") in the system tray when unplugging the drive from the computer...

Copy whatever files you currently have on the disk to your HD for temporary safekeeping and format the disk again.

Also, what version of Windows are you using? Is it the Professional version or Home version? Are you using, or did use, bitlocker on this machine? Or a TPM? If you did, bitlocker automatically changes some policies to read only for removeable drives, and if you have Windows 8 Pro, we can go in a fix that throught the group policy editor.

3 more replies
Relevance 52.07%

Hey guys I have a question involving an external hard drive and windows 7 libraries. I have this external hard drive (WD500GB My book) which has all my backup information (as per Windows Backup feature; great stuff) as well as all my music and movies. I really like the idea of using libraries to list all the music and movies from both my internal and external hard drives in one place; so I've included the external hard drive folders in the various libraries. The problem I run into is that I cannot safely remove the external hard drive; it refuses to do so.

I know it is due to the external being included in the libraries and not due to Windows Backup storage location being the external hard drive because I kept the Windows Backup settings the same (with the storage being the external hard drive) and removed the folders on the external from the libraries and it safely removes fine.

I realize I could set it so that write cacheing is disabled and I could remove it whenever, but this yields lesser performance (correct?) I'd rather keep write cacheing on; is there any way for me to include the external hard drive in the libraries while having the ability to safely remove the hard drive?

Thanks in advance

Answer:unable to safely remove external hard drive

WD has released all new software for the MyBook series drives; I had the same problem you mention and after installing the new Drive Manager and MyBook software it is working nicely for me now.

1 more replies
Relevance 52.07%

My Uncle's computer (HP XP SP2) detected Trojans throughout his computer last night and some were in the D: drive under system restore points so like always he disabled system restore and some of the Trojans were able to be removed, however 6 are still left. Two in the C Drive and 4 in his D drive. This is AVG's results from today:"C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected"Here is his Hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:11:25 P... Read more

Answer:Unable to remove Trojan infections from Recovery Drive

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 51.25%

Hello, I am trying to replace the hard drive on my desktop computer, but I am currently having trouble  with removing the metal cage that encloses the hard drive. This is the recommended method of replacing the hard drive, according to these instructions: http://www.manualslib.com/manual/359309/Hp-Pavilion-P6230f.html?page=21#manual I am stuck on step 13 for that manual in particular. I push down on the "#1" latch, and pull forward, but it's not sliding forward. I am unsure what I am doing wrong, but the thing is not moving. Do you guys have any idea what I may be doing wrong? Thank you.

Answer:Unable to Remove Hard Drive Cage from Desktop computer

Hi, Slide the HDD cage towards the top of the PC  while depressing the latch. Then pull the cage out of the tower. I have an h8 1380t with the same HDD cage. Jay   

1 more replies
Relevance 51.25%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

More replies
Relevance 51.25%

Hello. In my last post, I had a problem mounting my external HDD, so bought a new external enclosure, but now I can't get the hard drive out of the first case. After opening the back of the case where everything connects, I cannot retrieve the hard drive itself. It won't slide out.

I have the same "Smart Drive"external hard drive case as the one in this video http://www.youtube.com/watch?v=4slNzGLUDv4 except mine is not an empty enclosure. In the video, the guy removes a slide from the top and bottom of the case with such ease, whereas, I am unable to further remove any part of the shell around the hard drive itself. I can clearly see it, but it's just stuck in place.

What should I do? Please help.
 

Answer:Solved: I am unable to remove the hard drive from my external shell. Please help.

7 more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Wiping the hard drive should get rid of any trace of virii. It can't be a BIOS virus either (it can't do something as complex as what your computer is going through; as far as I know anyway).

Chances are you're installing infected software or you're not securing you computer adequately before allowing it Internet access (Firewalls, Windows service packs, Anti-virus, etc.).
 

26 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

0 more replies
Relevance 50.84%

Ok, Iīm working on a relativeīs computer. Iīm sure itīs got at least some malware. Itīs running XP SP2, but some individual decided to install VistaMizer on it, which makes it look like Vista. Thatīs a problem. Itīs got a couple programs that Iīm flagging as bad for now: Babylon, Winning Eleven 7 International, and possible WinAmp Remote.
Flagged Tasks running: Domino.exe, ZSSNP211.exe, and FrzState2k.exe
Antivirus program is Avira AntiVir Personal edition.

Every time I restart the computer, even from safe mode, everything is back to the way it was before. Temp files I deleted are back. Programs I removed are back. Programs I installed are gone. Iīm working on doing the basic removal steps now, and Iīll post my logs as soon as I have them.
 

Answer:Hard drive restores itself to previous state, unable to remove malware.

Hereīs my logs.
 

7 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Originally Posted by Windows Central Question I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely. I understand that you're extremely frustrated however I'm not sure what anyone could do to help without you clarifying three things.
Three questions.
1) Are you using a NAS Enclosure?
2) Are you using a Server Rack?
3) Which O/S are you using?
We're not mind readers you know , so please join and provide more information in this thread.

more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

3 more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Welcome to Major Geeks!





videobruce said:





Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,Click to expand...

Yes but this rarely occurs.





videobruce said:





2. In a hard drive after one wipes the drive with zeros'?Click to expand...

Yes. The FBI and CIA recover files all the time from systems where people think they have erased; however it is very unlikely that you have become reinfected from a drive that you have done this to. Did you delete your Windows partition before formatting and reinstalling. Are you reconnecting this PC to a network with other PCs? They could be the cause of your reinfection or you may not have a properly protected PC and you could be getting infected from the internet.





videobruce said:





I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.Click to expand...

See this: http://www.symantec.com/security_response/writeup.jsp... Read more

3 more replies
Relevance 50.43%

  hey bro help me solve this problem. I m unable to remove usb write protection from my flash drive in win7 using given solution. what should i do please suggest as fast as u can

Answer:unable to remove usb write protection frrom my sandisk flash drive in windows 7

Using given solution? Is url reference missing that you meant to include?As far as this flash drive goes... I would backup the contents of it to a hard drive or another flash drive before making any attempts to make it read/write enabled again.Then once you have backed up the data on it, delete the partition on this drive if allowed. Then create a new partition and format that partition. But with write protection enabled you might not be able to do this. However if the flash drive is simply corrupt you may be able to delete the partition and create new and format fresh.Given the price of flash drives these days I wouldnt spend too much trouble with trying to fix it. Some flash drives when they fail internally no longer accept write requests, and your lucky that they will even read.I am assuming that this USB flash drive doesnt have a slide switch like some USB flash drives have to make them write protected.

1 more replies
Relevance 45.92%

Hi! I'm hoping someone can help me with this problem... I've been trying to backup my computer to an external drive and I keep getting the error code: 0x8078002A. I've tried numerous times in the past few weeks with no success and the same error code each time. My laptop is a Dell XPS 17 (L702X, Early 2011) with an Intel® Core™ i7-2760QM CPU @ 2.40GHz processor with 8.00 GB of installed memory (RAM). The Windows edition I'm running is Windows 7 Professional. The size of the backup that I'm trying to run is 327.56 GB (and I know there is plenty of space on the external drive to accommodate the backup).The external drive I'm trying to back up the laptop to is a WD (Western Digital) My Book external hard drive that is a 4 TB hard drive. It currently has 1.88 TB free of 3.63 TB according to its properties. I recently performed an "Error-Checking" run with the external hard drive (by clicking on 'Properties' and then the tab that said 'Tools' and then 'Error Checking' and it went through that process and fixed whatever errors it might have found. I had read on some other forum that I should try doing this to see if that would make the backup work, but it still won't work and I'm still getting the same error code.
 
I read on another forum that you could possibly be getting the error code 0x8078002A if you had a virus or malware or some other type of problem.  I'm not sure what else to try or do...  I do run Super Anti-Spyware Free Edition regularly as ... Read more

Answer:Unable to Backup Laptop and Unable to Remove VSO Downloader Program

Hello there,From this article, it appears to be a bug in Windows Backup.Can you try using a third-party backup utility? Good choices are Macrium Reflect (for imaging) or EaseUS Todo Backup.Since you have a Western Digital drive, it is also possible to use Acronis True Image WD Edition.Let us know how that goes.Regards,Alex

12 more replies
Relevance 45.51%

Hello all,

i am trying to uninstall a program called "Scanner utility for Windows" (from 'Add/Remove programs'), but once its removed it still shows up under 'Add/remove programs', it doesnt disapear from there.
i tried rebooting the computer afterwards, but it still shows up in there.

i am able to remove it from another computer, so not sure what the issue is.

i am logging with administrator rights on both computers, so what could the issue be?

thank you

PS Both computers run on Windows XP.

Answer:Unable To Remove Software- It Still Shows Up Under 'add/remove Programs'

Hello alexcirnuThis should help solve the problem http://windowsxp.mvps.org/AddRemove.htm

1 more replies
Relevance 44.69%

Hi, I performed the runme part and have listed all results below. I cannot seem to add or remove some unknown programs from my list. I do not believe that they're malware. Help anyone? I've already done a system restore and don't want to delete using ccleaner in case it's something I need.

1. Basic Computer Maintenance:
Add/Remove Programs: Encountered long list of programs that are unknown and unremovable.
Cleaned hard drive using CCleaner
Removed invalid registry entries using CCleaner:ran 4x
Startup: only 2 programs run on startup: AGRSMMSG and ATIModeChange
Defragmented C drive using both Microsoft and IObit SmartDefrag

2. House Cleaning and Setup
Am not using Multiple Antivirus Apps or Firewalls
Under control panel/add remove programs, no malware programs listed, only unknown and unremovable programs.
Msconfig changed back to Normal Startup Mode from Selective Startup
No Quarantined folders
Emptied recycling bin
Reran CCleaner and removed excess items from startup, only above 2 remain
Repeated above step on all other users

3. Enabled viewing of hidden files etc.

4. Followed Windows XP Cleaning procedure
Downloads: Combofix to desktop
Spybot search and destroy download new version
AVG Anti-Spyware
MGtools to C drive

Install & Run Scans
When I ran AVG it did not produce a log even though I followed the steps.
 

Answer:unable to access add remove key in add remove programs

Your logs look clean.
However, use add/remove programs to uninstall:
Viewpoint Media Player

Then please install:
SevicePack2

If you are not having any other malware problems, it is time to do our final steps:

1. If we used Pocket Killbox during your cleanup, do the below
* Run Pocket Killbox and select File, Cleanup, Delete All Backups
2. If we used ComboFix, you can delete the ComboFix.exe file, C:\ComboFix folder, C:\QooBox folder, C:\WINDOWS\nircmd.exe, C:\combofix.txt and C:\ComboFix-quarantined-files.txt logs that was created.
3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
4. If we used SmitFraudFix, you can delete all files and folders related to it now including the c:\rapport.txt log.
5. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
6. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
7. If we had you run Avenger, you can delete all files related to Avenger now.
8. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
9. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
10. If you are running Windows XP or Windows ME, do the below:
* Refer to the cleaning steps in the READ ME for your... Read more

1 more replies
Relevance 44.69%

Hi..I have a Program that has been installed on my PC which I wish to remove using Add/Remove program from Control Panel...but it will not uninstall. Please let me know if this can be done from the Registry....and how I actually perform the task If not, is there another way? The uninstallation continues for a few minutes and then stops . Your assistance would be much appreciated....Ray.

Answer:[SOLVED] Unable to remove Program from Add/Remove

Open Task manager>Process to check whether this program is running or not. If not, you can try to uninstall by uninstall file,located in program files. If still not, you can use some third party uninstaller software.

3 more replies
Relevance 44.69%

I am having win xp as my operating system. I am unable to remove following programs from add or  remove programs:1. Internet Security Add-On2. Public Messenger ver 2.03and when I attempt to remove these I get an error message window saying that "You should reboot your computer prior to uninstalling this software. Reboot now?" Even after rebooting the same thing is repeated.In addition there is one more problem in internet explorer whenever I try to open www.yahoo.com http://awarninglist.com/ gets opened. I dont want to format and put win-xp again, I want an alternative solution. I read REFERENCE NUMBER: CH000568 in www.computerhope.com regarding TweakUI and tried it but could not find any add/remove tab...

Answer:unable to remove programs from add or remove progr

Try CCleaner.  You can download it from:http://www.majorgeeks.com/download.php?det=4191After installing it, I suggest you first run its Windows scan and remove stuff it finds.  Then, run its Issues scan, backup the registry when prompted, and then delete the items it found.  Then, use its Uninstall tool, under Tools, to try deleting the programs.  

1 more replies
Relevance 43.05%

My son downloaded an inappropriate game and I am unable to remove it in the add and remove program. It gives me the message that it is unable to locate the installation log file, and the uninstallation will not continue. How do I get rid off this??
 

Answer:unable to remove game from add and remove

8 more replies
Relevance 43.05%

In add and remove I have program Dan Elwells speed test which I want to remove but it says I can`t as it doesn`t exist. I have run a search and it says nothing found. How can I remove the entry in add and remove please. OS is XPhome.

Answer:Unable to Remove program using add & remove.

Have you tried the Ccleaner uninstaller click here

10 more replies
Relevance 43.05%

OS is xphome sp1. I am trying to remove Google Earth using add and remove but get a message saying that it has encountered an error and is unable to remove it. I have tried doing it in Safe Mode but get the same message. Any suggestions please?

Answer:Unable to remove a program from add&remove.

Remove while in safemode or click here

10 more replies
Relevance 41.41%

After online researching, I ended up into this forum >> disk 1 is unknown, not initialized, unallocated

I downloaded the Partition Wizard from Jumanji's link, installed, and followed instructions until the end.

After assigning drive letter (G:\), the PW shows that it is indeed assigned to drive G:\ BUT, I still can't see it in My Computer so I checked Disk Management and it still shows the same status/problem as it was from the beginning.

Is/are there any further necessary step/s after assigning Drive letter to the recovered disk?

When I try to close the PW, it says "You are about to quit the program and cancel all pending operations. The changes you have made will be lost."

I don't know what to do from here. Please help

Thanks in advance..

Answer:Disk unallocated, unable to initialise, unable to assign drive letter

OK, It could be a simple matter.

But I want to have a clear picture of what exactly your problem was.

1. Are we dealing with in internal drive or external drive?

2. Was the drive suddenly not accessible in My Computer?

3. Was it seen in Disk Management? What did it show? Even now you can take a screenshot of how the drive appears in Windows Disk Management and post it
Disk Management - Post a Screen Capture Image

We will then proceed step by step. I am here for the next 11 or 12 hours but peep in once in an hour or two and follow up.

I know you had used PW. But we shall get on to it after you post the Windows Disk Management screenshot.

BTW what is your local time? If you are in USA you can go to sleep and come back after six or eight hours. No problem.

9 more replies
Relevance 41%

Been buggering around with this for a while now.

I have an 2 internal hdd, and an external hdd, which is pretty much always on, and it appears in the 'safely remove hardware' in the systray.

I also have a portable HDD, for bringing files to and from work, which appears there also.

I want to be able to remove the portable safely, without accidentally removing the external hdd as i keep forgetting which drive is which!

I've dinkered around with making either/or drive 'Optimized for quick removal or Optimized for performance' in the hopes that they wouldn't appear - ideally I only want the portable listed (I can always disconnect the external when the machine is off).

Anyone any ideas?
 

More replies
Relevance 40.59%

Each time I try to remove "Web Search" with add/Remove programs I get an error dialog - "The Microsoft Java Virtual Machine cannot find main class; will exit".

FYI...
I was just reading another forum after googling for removal tools...
...and someone suggested that the only way to remove it was to format the drive and start over... ......I'm still laughing!! (but I guess it's sad, because someone is going to believe that advice.)

Anyways.. looking for good suggestions and directions.

(I'm still laughing)
edited:
I'm unable to run the new version of HJT it keeps giving me an error and knock me out.
added a HJT for good measure using the older versions

Logfile of HijackThis v1.98.2
Scan saved at 1:15:12 AM, on 2/8/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\msiexec.exe
C:\Utilities\hijack this\HijackThis old.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Sear... Read more

Answer:Unable to remove "Web Search" with Add/Remove Programs

Hello ucurl!

Your HijackThis log is clean.

Your error message suggests that you have something missing or in error with the installation of the Microsoft version of the java virtual machine.

I am not sure how to help you with this problem, but I can tell you that it is not a security threat.

I suggest that you post your problem in the Windows XP forum on this website.

Good Luck!
 

1 more replies
Relevance 39.77%

Hello all. I'd like to start by saying I'm a big fan of this site, it has been helpful many times in the past.
A little bit of background on me. I have been running a small on call/on site computer repair service for a few years and have some CompTia certs. I am a Moderator for a forum at a well respected and large fps game site, so i do truly understand what you guys deal with and appreciate all the time and effort.

This is the first thing I've run across that I have failed to fix/remove

Ok on to my issue. I did get a version of the '11 security tools virus (kids get on this pc sometimes lol)
I was able to remove it and all the BHO's that went with it using rkill/combofix, HijackThis and Malwarebytes. But one thing that remains in my cp. It calls itself aaa and uses the java icon (publisher bbb comments ccc). I have hit a wall trying to figure out what this exactly is. I have nothing "going wrong" on this pc, but it still bothers me and can't be good.
When i try to uninstall it simply says it can't.
I have tried searching these forums and doing what another thread suggested, which is pretty much the same things i did to rid myself of the virus in the first place, but the person infected never responded and the thing remains.
So I am asking for some help on this.

My stats;
win xp pro.
AMD Athlon 64 X2 Dual Core Processor 6000+ | Socket AM2 | 3013/201mhz
FireFox 3.6.16
Avira AV

Many thanks for your time.

Answer:unable to remove aaa from add/remove

If Add/Remove Programs is showing an entry but the program/folder has been removed, then its likely an orphaned entry in the Windows registy. Orphaned entries can be removed by going the registry but a much safer and easier way to do this is to download and use a third party program like MyUninstaller or RevoUninstaller. After launching the program, right-click on the entry and choose the option to "Delete the selected entry".To fix manually in the registry, refer to:How to Manually Remove Programs from the Add/Remove Programs ListRemoving invalid entries from Add or Remove ProgramsKellys Korner: Removing Invalid Entries in the Add/Remove Programs ToolCAUTION: This step involves making changes in the registry. Always back up your registry before making any changes. If you are not familiar with working in the registry, then you should NOT attempt to make any changes on your own. Improper changes to the registry could adversely affect your computer and render it inoperable. ERUNT is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.

7 more replies
Relevance 39.77%

My McAffe virus scan detected two PUPs that could not be deleted, cleaned or quarentined. I rebooted in safe mode and found seven PUPs that I deleted. However I still get a pop up whenever I start my computer and approximately every half hour or so after that. The pop says "powered by zedo' and this is the url:

http://c5.zedo.com/jsc/c5/ff2.html?n=350;c=585/6;s=363;d=16;w=720;h=300

I have run "Hijack This" and below I have attatched the log file. Can anyone help

Thanks
Pete
 

Answer:Unable to remove pop up

7 more replies
Relevance 39.77%
Question: unable to remove

hi helpers, everytime i start PC i get this annoying window which says "diconnected blackberry desk manager " my son installed it ages ago and i remember trying to uninstall and it refused to uninstall kept re installing !anyway when i try to remove now a box comes up saying " this action is only valid for products that are currently installed thanks

Answer:unable to remove

Download this click here, then run it and see if it can do the job.

6 more replies
Relevance 39.77%

Running XP Professional

A friend gave me a copy of XP Plus ... loaded alright ...everything seemed to work ... although now when I try to uninstall ... comes up not installed properly.

Whenever I insert the disc [copy that I had installed with] and hit setup it shuts down my computer. Even if I try 'Explore'...then setup...same problem!

Really would like to remove..as I don't like or use it...memory hog

Hope someone can help

Thanking all in advance

Gary
 

Answer:Unable to remove XP Plus

Maybe it can't uninstall because Windows is using it's files...

Start/Control Panel/Display
Select Themes @ top
Hit drop down list & select Windows XP or another that is not in "Plus"...

...then try to uninstall Plus
 

1 more replies
Relevance 39.77%

I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.

Answer:unable to remove....

  
Quote: Originally Posted by terz


I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.


Have you checked "Device Manager" for any entries with an "!" mark. You may be able to delete any entry that relates to the Pinnacle program there, also.

HTH

5 more replies
Relevance 39.77%
Question: Unable to remove

am asking this on behalf of a friend....had the problem myself, but I can't remember how I fixed it. When using Internet Explorer, if one goes to tools/options, you should be able to delete history,files and cookies. Try as hard as you like, some files will just not disappear. If I go to Control Panel , Internet and attempt to delete from there, same problem.
how to delete them
anitaa
 

Answer:Unable to remove

What version of Internet Explorer, 6.1, 7, or 8?
 

4 more replies
Relevance 39.77%
Question: unable to remove

hello this is my first time on the site,i recently had winblue soft install itself on my system, the computer kept restarting by itself my dsl internet seemed to slow down, and to no avail could i get it to go away, each time i switched the computer on and went into "my computer" and went to open "c:\" threatfire would start a quarrantine process and log to unknow proceccs by removable drives, upon restarting i had no explorer bar or icons on the screen, the only way i could get the explorer bar back on the bottom of the screen was to click cntrol alt delete and run new task and open threatfire up from there and remove to 2 logs from quarrantine and restart, but the same thing happens everytime i go into "my compute" then c:\" the same thing would occur.i uninstalled winbluesoft with the uninstaller and then deleted the folder in "program folders"then searched the registry in regedit, and found 2 registry files with winbluesoft in the title, removed them, and after that winbluesoft never appeared again,while this was happening, i found that my internet explorer was not opertating properly, i would click on tools then windows update, and get taken to a dodgey google site with "www.windowsupdate.microsoft.com" still in the address bar. everytime i tried anything to do with an update connection or downloading an update on the windows site, it would come up with the page could not be connected, everytime i try to do... Read more

Answer:unable to remove

Topic closed at member's request as he/she has reformatted.

Orange Blossom

1 more replies
Relevance 39.77%

Hi, I hav been having some pop-ups that I haven't been able to get rid of with Spybot or Ad-Aware. These include AVSystemcare and other ads which relate to pages I'm currently viewing.

I have a Dell Inspiron 9300 (with an upgrade to 2GB of RAM) and am running Vista Business.

Also, when I have an external hardrive plugged in, the mouse becomes hard to control, stalling for a bit. Similarly, the keyboard misses letters when typing into webpages (not necersarily with the HD plugged in) but is always ok in Word or Notepad - which is where I'm typing this message now to copy across.

Many thanks,
Cpt Black
 

Answer:Unable to remove pop-ups

Here is a Hijack this log if that helps:

Logfile of HijackThis v1.99.1
Scan saved at 5:28:53 PM, on 01/09/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Thomson\ST330\diagnostics\diagnostics.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\I8kfanGUI\I8kfanGUI.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Chris\Documents\HijackTh... Read more

2 more replies
Relevance 39.77%

Been having problems with windows security centre not monitoring sygate firewall and avast antivirus, i am not able to access windows firewall atall,ithought if i remove sp2 and reload it, it may solve the problem,i go to add/remove and click delete,it gets so far then a small window appears saying it has failed to uninstall,then i get nine windows updates to install,as i said in my previous thread two weeks ago i am waiting for my legal copy of windows xp pro,i found that my copy was illegal so i paid for a legal copy from microsoft,Ģ92,i received a new key via email and i am waiting for cd so i can try a repair,thanks in advance,

Answer:unable to remove sp2

Windows Security Centre does not monitor all brands of security software. If you have Sygate firewall installed and functioning then you should not need Windows Firewall as well. If you're waiting for your XP CD to arrive, then I'd just wait untill you reinstall - all should be OK then. Not being able to access Windows Firewall may be a side effect of your illegal copy of Windows.

10 more replies
Relevance 39.77%

A friend of mine keeps getting a pop up from some sort of movie site stating his free trial is over and He needs to give his credit card info to continue the subscription. How can we keep this from coming up? Hopefully the below HiJack this log will help. thanks!!Logfile of HijackThis v1.99.1Scan saved at 9:19:14 PM, on 12/16/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\wltrysvc.exeC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exeC:\Program Files\Apoint\Apoint.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Dell�... Read more

Answer:Unable To Remove Pop Ups

Please click here http://www.majorgeeks.com/Sun_Java_Runtime...ment_d4648.html to download the latest version of JAVA Install the application, then go to the Add/Remove Programs options in the Control Panel and Remove ALL previous versions of JAVA.Add remove programs ? remove MyWay SearchYou may want to print this or save it to notepad as we will go to safe mode.Fix these with HiJackThis ? mark them, close IE, click fix checkedR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dllO4 - HKLM\..\Run: [MediaPipe P2P Loader] "C:\Program Files\p2pnetworks\mpp2pl.exe" /H O4 - HKCU\..\Run: [License Manager] "C:\Program Files\License_Manager\license_manager.exe " /silentDownLoad http://www.downloads.subratam.org/KillBox.zip orhttp://www.thespykiller.co.uk/files/killbox.exeRestart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a tim... Read more

4 more replies
Relevance 39.77%

Ran Hijack this per another members request, this is what was pulled, any suggestions? Thanks in advance!!!!BrianLogfile of HijackThis v1.99.1Scan saved at 2:12:06 PM, on 5/24/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYSC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\MI3AA1~1\wcescomm.exeC:\Documents and Settings\hodgson.POLTDESIGN\My Documents\T?sks\csrss.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\PROGRA~1\MI3AA1~1\rapimgr.exeC:\Program Files\HP\digital imaging\bin\hpq... Read more

Answer:Unable To Remove Pop-ups

Hello O-turn and welcome to BC My name is SNOWHITE and I will be helping you with your Malware problem.As I am still in training I will be helping you under supervision of our expert teachers, so there may be a delay between posts. I will be analyzing your log now, and be back with you as soon as possible!Regards,

25 more replies
Relevance 39.77%

I?ve uninstalled IE8 before on 2 other Windows 7 installs with no problems. I go to Control Panel\All Control Panel Items\Programs and Features\turn windows features on or off And uncheck IE 8 , and press ok and I get this error message: ?An error has occurred. Not all of the features were successfully changed.? And it doesn't get rid of IE8. Any idea how to fix this? I'm using Win 7 64bit thanks.

More replies
Relevance 39.77%
Question: Unable to remove

I keep getting pop-ups from SysProtect and WinAntiVirus. I have no idea how to remove these spywares and it is very frustrating. Can anyone help. Here is a copy of my HJ log:

Logfile of HijackThis v1.99.1
Scan saved at 2:37:00 PM, on 6/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\EPSON\ESM2\eEBSVC.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.... Read more

Answer:Unable to remove

10 more replies
Relevance 39.77%

Hi I need help to remove 888, celldorado,adult friend finder and many others pop upI had tried to used spybot ,lava and clear all the cookies ,temporary files for the explorer but the problems still exist please help thank you.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:46:45 PM, on 11/4/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\system32\svchost.exeC... Read more

Answer:Unable To Remove Pop Up

Welcome to the BleepingComputer HijackThis Logs and Analysis forum seraya My name is Richie and i'll be helping you to fix your problems.The current formatting of your log makes it difficult to read/evaluate.Open 'Notepad',click on 'Format' at the top,then uncheck 'Word Wrap' if it's checked.If you have previously downloaded ComboFix,please delete that version now.Now download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop Close any open browsers.Disconnect from the Internet. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Do NOT post the ComboFix-quarantined-files.txt unless I ask.*NOTE*In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix,please disable your scanner and redownload Combofix again.Some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.Download Deljob.exe and save it on your desktop.Double click on Deljob.exe.A log,(logit.txt) should open afterwards. This log will be present on your desktop.Post the contents of the logfile into your next reply,along with a new Hijack This log.

1 more replies
Relevance 39.77%

I have been searching for a solution to solve the "Safe Remove" problem in Windows XP.It always happens whenever I try to safely remove any of my USB HDD regardless of brand-name using the safely remove hardware icon in the Taskbar.I get an error message: 'The device 'Generic volume' cannot be stopped because a program is still accessing it.' There are no programs accessing the drive as I only use it for storage. I have always to restart my PC before I can safely remove the USB HDD.I am sure most of you should ecounter this problem at least once in the past!So, anyone know how to eliminate this problem?

Answer:unable to remove the USB HDD

It may be your virus scanner or something else that is continually monitoring your hard drive.More details about what is loaded, etc. would be helpful.

3 more replies
Relevance 39.77%

below is a link to a full screen capture of my spybot scan results. i have tried everything to remove these entries but to no avail. i am also posting my hijack this log file. please post detailed removal instructions as i am a self-proclaimed ad/mal/spyware removal "noob"! thank you and regards.

-AudioWave80

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:15:09 AM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\PROGRA~1\CACHEM~1\CachemanXP.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\SnoopFreeSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shar... Read more

Answer:[ Unable To Remove These ] - [ HELP ]!!

16 more replies
Relevance 39.77%
Question: unable to remove

Im trying to remove kazaa media desktop from my computer,but it not possible via add/remove because of...The system file cannot be specified ..Error loading C:\windows\system\cd-chnt.dll,and so any help would be appreciated,o/s is windows me .....
 

Answer:unable to remove

telecom69
The only way I know of to remove Kazaa now is to reinstall it over the top of itself and use the new add-remove programs entry in control panel.
After you have successfully uninstalled Kazaa run Ad-Aware 5.83 from http://housecall.antivirus.com/housecall/start_corp.asp and allow it to clean up any scraps left behind. Also review this website to make sure Brilliant is also removed properly.
http://news.com.com/2100-1023-875274.html

Dave
 

2 more replies
Relevance 39.36%

Hi:I have tried every numerous spyware removal tools (Ad-Aware, Spy Sweeper and MS beta app) to remove the vcmnet11.exe trojan, but it keeps coming back. I have also followed numerous self-help suggestions, but it keeps coming back.Following is a HJT log from a normal boot. Fortunately/Unfortunately, my anti-virus app quarantines it each time that I start my PC, but I wonder if that is why I cannot find the files in HJT.FYI, I got it by mistakenly following a link to www.emp3.com. Don't know if you keep a list of bad sites, but this one should be on it.Any help is appreciated.Logfile of HijackThis v1.99.1Scan saved at 11:09:56 AM, on 6/4/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exeC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Symantec_Client_Security\Sy... Read more

Answer:Unable to remove VCMNET11.EXE

Welcome peldi to Bleeping Computer.You have a nasty combination. It will take us some posts to clean this up.Please read these instructions carefully. You may want to print them. Copy the text to a Notepad file and save it to your desktop! We will need the file later. Be sure to follow ALL instructions!***Disable Antispyware for the duration of this advise. It will stand in the way of us cleaning this computer.Open Microsoft AntiSpyware.Click on Options, Settings.In the left pane, click on Real-time Protection.Under Startup Options uncheck: Enable the Microsoft AntiSpyware Security Agents on startup (recommended).Under Real-time spyware threat protection uncheck: Enable real-time spyware threat protection (recommended).After you uncheck these, click on the Save button and close Microsoft AntiSpyware.Right click on the Microsoft AntiSpyware icon on the taskbar and select Shutdown Microsoft AntiSpyware.***Open HijackThis.Go to ?config?Go to ?misc tools?Press the button ?open uninstall manager?In the list find:Windows AFA Internet EnhancementeXact Search BarPress ?delete this entry?.Press ?back?Than press ?scan?***Close all programs leaving only HijackThis running. Place a check against each of the following, making sure you get them all and not any others by mistake:R3 - URLSearchHook: (no name) - _{02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)O2 - BHO: VBRunDLL Class - {197B8CA4-E215-46DD-8F33-E0544A80E5C4} - C:\WINDOWS\system32\vbrundll.dllO4 - HKL... Read more

15 more replies
Relevance 39.36%

I am struggling to remove CouponDropDown from IE. I have looked in programs and nothing is showing up for it I have tried Revo Uninstaller, but it isn't showing. I have done a virus scan with Kaspersky and also scans with SUPERAntiSpyware and Malwarebytes and nothing.

Can anyone advise me what to do next as this is very frustrating indeed.

Thanks in advance...
 

Answer:Unable to remove CouponDropDown

Welcome to the Malware Removal Forum.

Please read ALL of this message including the notes before doing anything.

Please follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide


and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.


After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:


If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
If you cannot seem to login to an infected user accou... Read more

13 more replies
Relevance 39.36%

greetings:My computer has been riddled with viruses and spyware for over 6 months. Every time i would run norton anti-v, i would show 5 viruses that i could not delete. from another online forum, i learned to run norton in safemode, which got rid of the viruses. my computer was still running slow, and i am getting a toolbar on the lower half of the screen every time i open iexplorer.A friend had me remove all of the questionable programs i could and download/run adaware in both safe and normal modes after shutting off system restore. I also ran spybot. It came up with over 400 enties(Adaware), but every time i run it, it comes back with more objects. The internet explorer toolbar was able to close for about a week by clicking on the x, but now the only way to close it is to end the iexplorer process(the are 2 when explorer is running). I also have a get incessant norton firewall pop ups notifying my that thnall1z.exe or thnall1a.exe is attempting to access the internet.After googling thnallz.exe, i found a forum that suggested i download nailfix, ewido, and ccleaner. I couldn't figure out how to unzip nailfix. I then updated the remaining two, restarted in safe mode and scanned. I deleted all entried returned by ewido. The explorer toolbar and thnailz.exe messages continue. And adaware is still finding more spyware. I ran Hijack this and this is my log:Logfile of HijackThis v1.99.1Scan saved at 1:56:15 PM, on 9/21/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSI... Read more

Answer:Unable to remove spyware

Hello CarPeDiem.mil and welcome to BleepingComputer.Lot's of pieces here, it's hard to tell what the main infection is. Let's take a first shot and see what we can get rid of and what comes back.Configure Windows to enable viewing of Hidden and System files. If you still have Ewido installed, be sure it is updated. If it is not still installed:Download and install the trial version of Ewido Security Suite.When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".- Launch Ewido, there should be an icon on your desktop double-click it.- When you run Ewido for the first time, you will get a warning "Database could not be found!".- The program will prompt you to update; click the OK button.- The program will now go to the main screen.- On the left hand side of the main screen click update.- Click on Start.The update will start and a progress bar will show the updates being installed.Once the updates are installed, close Ewido.Do not run Ewido yet.Reboot into Safe Mode.Start HJT and click on the SCAN button. Put a check mark in front of the following lines if they still show:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.iksmnunnhfafkkxilqjnujc.com/X5/...ofLuVnGanJ.htmlF2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exeO2 - BHO: (no name) - {5102D637-0CBE-F8D4-AC02-449E99B8CB42} - C:\DOCUME~1\User1\... Read more

2 more replies
Relevance 39.36%

My virus program can not remove Adware-Onestep.k. My computer is not safe, can anyone tell me what to do.

Answer:Unable to remove virus

Hello tvdvmv,

Please follow the instructions in our pre-posting topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 39.36%

Hi there,Tried my best to fix it on my own, but this one just won't go away. Also, something it or I didhas disabled the Internet connection, and I was only able to pull a HijackThis log out and putit on my other computer via flash drive, hopefully without spreading the infection. I haveno DDS logs unfortunately as I wasn't able to download it before losing the Internet connection.Here's the HJT log. Thanks forany help you can give!!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:54:30 PM, on 4/24/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16827)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehS... Read more

Answer:Unable to remove malware, HJT log

Hello.I am sorry to say, but your computer is infected with a file infector known as Virut. The only option to go is to FORMAT the whole computer and start all over.Virut File Infector WarningYour system is infected with a polymorphic file infector called Virut and also has IRC bot functionality. Virut is capable of infecting all the machine's executable files (.exe) and screensaver files (.scr) and also web pages (.html and .htm). However, the problem is that the virus has a number of bugs in its code, and as a result, it may misinfect a proportion of executable files and therefore, the files are corrupted beyond repair. In addition, when it infects, sometimes it will destroy the file it tries to latch onto. For these reasons, you really can't truly fix Virut. You will need to reinstall and format the operating system on this machine. As of now, security experts suggest that a clean Reformat is the only way to clean the infection and it is the only way to return the machine to its normal working state. Backup all your documents and important items (personal data, work documents, pictures etc..) only. DO NOT backup any executable files (softwares) and screensavers (*.scr) or any web pages (*.html or *.htm). It attempts to infect any accessed .exe or .scr or .html/.htm files by appending itself to the executable.Also, try to avoid backing up compressed files (zip/cab/rar) files that have .exe or .scr files inside them. Virut can penetrate and infect .exe f... Read more

2 more replies
Relevance 39.36%

My computer seems to have a generic rootkit.d! rootkit trojan. This is what McAfee calls it when it comes up in scan results. McAfee says that 1 item is detected and 1 item is fixed, but the computer is still symptomatic. When searching in google, I click on a result and am redirected to another website. Website like move.com, advancequotes.com, gklife.com. When redirecting, it goes through several websites before stopping on one. I scanned my computer with both McAfee and Malware Bytes. Ad-Aware brought up the blue screen of death. It's the first time it has brought up that screen.

I'm running on Windows XP Home Edition on a Dell Dimension E520.
2 GB RAM
228 GB Hard drive
Intel Core™2
Service Pack 3
Windows Firewall
Firefox is my default browser

I'm including a Malware Bytes log.

------------------------------------------------------------------------------------------
Malwarebytes' Anti-Malware 1.31
Database version: 1475
Windows 5.1.2600 Service Pack 3

7/30/2009 6:34:43 PM
mbam-log-2009-07-30 (18-34-43).txt

Scan type: Full Scan (C:\|)
Objects scanned: 155682
Time elapsed: 30 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\S... Read more

Answer:Unable to remove rootkit

Hello and welcome!First your MBAM is very old...Rerun MBAM (MalwareBytes) like this:Open MBAM in normal mode and click Update tab, select Check for Updates,when doneclick Scanner tab,select Quick scan and scan.After scan click Remove Selected, Post new scan log and Reboot into normal mode.Next run RootRepealNext Please install RootRepealNote: Vista users ,, right click on desktop icon and select "Run as Administrator."Fatdcuk at Malwarebytes posted a comprehensive tutorial - Self Help guide can be found here if needed.: Malwarebytes Removal and Self Help Guides. Go HERE, and download RootRepeal.zip to your Desktop. Tutorial with images ,if needed >> [email protected]@K.Unzip that,(7-zip tool if needed) and then click RootRepeal.exe to open the scanner. Next click on the Report tab, now click on Scan. A Window will open asking what to include in the scan. Check all of the below and then click OK.DriversFilesProcesses Not this >>> SSDTStealth ObjectsHidden ServicesNow you'll be asked which drive to scan. Check C: and click OK again and the scan will start. Please be patient as the scan runs. When the scan has finished, click on Save Report. Name the log RootRepeal.txt and save it to your Documents folder (it should automatically save it there). Please copy and paste that into your next reply. Please note: If Rootrepeal fails to run, try this step: Click Settings - Options. Set the Disk Access slider to High

9 more replies
Relevance 39.36%

Hi

First thank you for having such a forum for the technically challenged as myself.
Yesterday my AVG alerted to a trojan. I isolated them in the vault because it said they
were embedded and could not be deleted. The next scan showed none found. The computer was slower. Has blank windows popping up all the time.
I attempted to delete them manually which was probably not the best move because
I think I deleted things that I might have needed.
Any help you can give me will be deeply appreciated.
I am trying to avoid reformat as I
am Area Director for Arizona and Nevada for an organization that matches uid
deceased persons to missing persons and the work that would be lost is
devastating.

Thanks

Logfile of HijackThis v1.99.1
Scan saved at 9:12:36 PM, on 7/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe... Read more

More replies
Relevance 39.36%

Hi I am new to this forum and am asking for help to remove some spyware that continues to be present whatever I try to remove it. I have used Hijackthis and the output is below. Any help would be very much appriciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:47:27, on 28/08/2007
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINNT\system32\crypserv.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\Tablet.exe
C:\WINNT\system32\usrbridg.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\Program Files\CpuIdle\cpuidle.exe
C:\WINNT\System32\CTHELPER.EXE
C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Motherboard Monitor 5\MBM5.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\ATI Technologi... Read more

Answer:Unable to remove Spyware

Yep, you is infected with nasties ...


Interesting to see Win2000 being used, you do know that you have not got the latest ServicePack 4 ... please install after, and if, we fix your PC


Please download this program :

http://www.techsupportforum.com/sect...s/ComboFix.exe
or
http://download.bleepingcomputer.com...a/ComboFix.exe

Double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you. Post that log along with the others below.

Note: Do not mouse click combofix's window while its running. That may cause it to stall.

Also NOTE: If you have downloaded ComboFix previously please delete that version and download it again!


Next: Download SuperAntiSpyware free home version.

Install SAS, it will ask to be updated, do so.

Under Configuration and Preferences, click the Preferences button.
Click the Scanning Control tab.

Under Scanner Options make sure the following are checked:
Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining.
​Please leave the others as they are.

Click the Close button to leave the control center screen.

On the main screen, under Scan for Harmful Software click Scan your computer.
On the left check C:\Fixed Drive.
On the right, under Complete Scan, choose Perform Complete Scan.
Click Next to start the scan.

Please be patient while it scans your computer.

After the scan is complete a summary box will appear. Click OK.

Make sure eve... Read more

16 more replies
Relevance 39.36%

I've tried uninstalling WiseFixer and I get the following msg:
file "C:\Program Files\WiseFixer\unins000.dat" does not exist. Cannot uninstall.
 

Answer:WiseFixer - unable to remove

The (free) Revo Uninstaller may help.
 

3 more replies
Relevance 39.36%

HI- I was redirected here by a security expert from spybot's search and destroy forums. He was unable to help me after him giving me many scann options/registry scans/& in the end he gave a final resort of telling me to go into run type sfc /scannow -- and even that finished dat 64% verification then told me Windows Resource Protection could not perform the requested operation. He said there is no malware that can be causing my problem but I Still DO have this virus/file RDPWD.SYS when I ran AVG AntiVirus. ALSO my computer is crashing-it started with blue screens-Kernel Dumps-sometimes saying the ntfs.sys file on the blue screen. I would LOOVE any sort of help..I know you guys are the combofix kings but the guy from spybot never ran me through that program. HERES HIJACK LOG! HOPE YOU CAN HELP!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:09:14 PM, on 3/26/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18372)Boot mode: NormalRunning processes:C:\Windows\System32\smss.exeC:\Windows\system32\csrss.exeC:\Windows\system32\wininit.exeC:\Windows\system32\csrss.exeC:\Windows\system32\services.exeC:\Windows\system32\lsass.exeC:\Windows\system32\lsm.exeC:\Windows\system32\winlogon.exeC:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exeC:\Windows\System32&... Read more

Answer:UNABLE to REMOVE ROOTKIT!

Please! dont drop my post either! SPYBOT ADMIN. REFERRED me to you master[s] of the hackzors. I just saw that you don't take people who post on other forums, but after so long with spybot forums trying to fix my problems- I'm just trying whomever answers first (like who bleep up the other in Perfect Dark and comes in first). The computer is slowly deteriorating and I am continually doing my SCHOOL work saying :bleep you: to every :reboot:. By the way Im wondering if it is a hardware problem because yes the bleep does get hot (fan problem) but I mean it has come back twice from HP's department of fix-it (re-do BIOS or whatever and say its brand new)...so its getting so hot I think thats the reason it shuts doing (periodically) and farts up to start up, but the only way to get it going then..is to drop out the battery for few sec(x)..Like Will Farrell's note to Luke Wilson..IloveYou.Thanks for thehelp!

3 more replies
Relevance 39.36%

Dear Sir

'm unable to remove virus from my system,even thow with latest update containing antivirus. I have avira antivirus.I wanted to know which is the bes antivirus which can remove all virus especially .exe virus.Please suggest me on this issue....

Thanks & Regards
Hari

Answer:Unable to remove virus

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

There is no antivirus that will remove all viruses all the time. Avira is as good as any.

------------------------------------------------------

1 more replies
Relevance 39.36%

I can't remove it and it keeps getting infected every 20 seconds by TrojanhorseCryptic.AXV

Any suggestions?

Also do you have any suggestions on how to get round error 1935 from failed install microsoft office 2007?

Thanks.
 

More replies
Relevance 39.36%

Hi

I have had some problems with my laptop running really slow lately, so I added bitdefender security suite to my laptop 2 nights ago, and after 3 scans, I have removed all viruses that I had, apart from 3 issues that it says are hidden in my AppData\local files. The file name is ngvafcakae.exe, can you please tell me how to remove it. I have tried to do the PC scan on your 5 steps procedure, but I am on windows Vista, and it said it wouldn't work with that.

Thanks for any help you can give me, it is much appreciated. My Hijack This log is pasted below.

Regards

Lisa

Logfile of HijackThis v1.99.1
Scan saved at 21:24:32, on 07/02/2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\Common Files\aol\1193267908\ee\aolsoftware.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\AOL\Loader\aolload.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\ehome\ehtray.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe
C:\Program Files\Pando Networks\Pando\pando.exe
C:... Read more

Answer:unable to remove ngvafcakae.exe please help

Bumps

8 more replies
Relevance 39.36%

Hey, first of all i apologize for the length of this post but i think the more info given the easier it would be for someone here to pinpoint the problem? upon the desktop opening after a boot i always get the the following error message, ClympO4aDyy3mA....(it goes on a bit further) has stopped responding and in the problem details section it says:

C:\Users\dee\AppData\Local\Temp\WER195F.tmp.version.txt
C:\Users\dee\AppData\Local\Temp\WER2E7E.tmp.appcompat.txt
C:\Users\dee\AppData\Local\Temp\WER2E7F.tmp.mdmp

this never happened up untill i got this trojan.

AVG gives the following report:

"C:\Windows\System32\msnet\server.exe (3012):\memory_00400000";"Trojan horse Generic14.CCKX";"Reboot is required to finish the action"
"C:\Windows\System32\msnet\server.exe (3012)";"Trojan horse Generic14.CCKX";"Reboot is required to finish the action"

but after a reboot and a rescan the virus remains there...

The Server.exe process once ended in task manager stays gone but always comes back after a reboot, i tried opening the file location and deleting the exe file there but again always comes back after a reboot.

I also tried Spybot S&D but that didnt find anything but a bunch of cookies, since this infection my pc boot up has slowed down considerably and especially firefox takes ages opening, it hangs for about 2 minutes before becoming useable. The hardrive is also constantly busy doing something which... Read more

Answer:unable to remove trojan

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

1 more replies
Relevance 39.36%

Good Day:

I have gone through the procedures twice in the posting "READ & RUN ME FIRST Before Asking for Support", dated 10-09-05. I found and removed numerous spyware programs. Alas, I still have popups to ubid.com and that damned ad.oinadsever.com. In fact one appeared while I was posting this advertising PC security software.

Thanks
 

Answer:Unable to Remove Malware

Welcome to MGs!

Had you tried running a fullscan with Ewido? It should have fixed some of your problems.

Look in Add/Remove programs for MediaPipe and uninstall if found.


Make sure viewing of hidden files is enabled (per the tutorial).

Please run HijackThis and click on the "Open the Misc Tools Section" button on the open page. Then select "Open process manager" on the left-hand side. Look for the following process (or processes) and one at a time kill them by selecting it and then click "Kill process". Then click yes.
C:\WINDOWS\system32\??erinit.exe
C:\Program Files\nrpn\osoa.exe

After killing all the above processes, click "Back".
Then please click "Scan" and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: (no name) - {5CA3D70E-1895-11CF-8E15-001234567890} - (no file)
O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - (no file)
O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O4 - HKCU\..\Run: [Ajfhsw] C:\WINDOWS\system32\??erinit.exe
O4 - HKCU\..\Run: [Imbof] C... Read more

5 more replies
Relevance 39.36%

a while ago i tried to pirate a program from pirate bay. only time ive ever used and i am still receiving adware from it. I am stuck with the "Protectio.search.com" virus. i have been searching endlessly for a solution. i have tried 3 different adware removers, deleted it through my registry, chrome, task manager, task scheduler, and it STILL shows up. and when it doesnt show up i get redirected to pirate bay whenever i search something. i badly need to get rid of this virus and need help!!!

Answer:Tried everything, unable to remove Malware

hi,
 
Need to see a FRST log as a starting point. You can download and post a FRST log by reading step 6 at the link below, then we will go from there:
 
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

9 more replies
Relevance 39.36%

i tried to clean the reg/doshye virus by the steps in the forum, i downloaded combofix and then ran it....after running combofix i thought that the virus would have been removed but when i again scanned it there is a virus in C:/qoobox/quarantine/c/dup2....i again ran combofix ...but still the virus is there itself ...HELP...wanna remove this virus... i had this problem earlier and couldnot remove the virus at that time and my com got infected this time too the same thing has happened... please help...

ComboFix 08-02.01.5 - xyz 2008-02-01 13:54:16.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.177 [GMT 5.5:30]
Running from: C:\Documents and Settings\xyz\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-01-01 to 2008-02-01 )))))))))))))))))))))))))))))))
.

2008-02-01 13:25 . 2008-02-01 13:25 <DIR> d-------- C:\Documents and Settings\NetworkService.NT AUTHORITY\Application Data\Intel
2008-01-31 22:03 . 2008-01-31 22:03 <DIR> d---s---- C:\Documents and Settings\xyz\UserData
2008-01-29 13:20 . 2008-01-29 13:20 <DIR> d-------- C:\Documents and Settings\xyz\Application Data\Corel
2008-01-29 13:20 . 2008-01-29 13:28 394 --a------ C:\WIN\capture.ini
2008-01-29 13:15 . 2008-01-29 22:35 69 --a------ C:\WIN\NeroDigital.ini
2008-01-29 13:12 . 2008-01-29 13:12 <DIR> d-------- C:\Program Files\Common Files\Corel
2008-01-29 13:11... Read more

Answer:reg/doshye unable to remove please help

ComboFix should not be run unless directed to by an experienced helper. Do not run ComboFix again unless directed.

Qoobox is ComboFix quarantine.

Go to Start > Run and copy/paste the following, then press Enter:

C:\Qoobox\ComboFix2.txt

A text file will open. Post that in your next reply.

Also do this:

Please do this:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also insta... Read more

1 more replies
Relevance 39.36%

I'm Using Avira and Malware bytes, They can't seem to get rid of this persistent virus.Every 5-10mins while browsing the net I am receiving a warning on Avira that I'm infected with thisC:\Windows\System32\x.exe. I even reformatted my system, thinking that it will get rid the virus totally but it keeps on coming back. I even use combofix but to no avail, Pls help me. Thanks(Moderator edit: post moved to more appropriate forum.jgw)

Answer:unable to remove x.exe virus

With the information you have provided I believe you will need help from the malware removal team. Please make sure that you read the information about getting started first.Then start a new thread HERE and include or required logs.Including a link to this thread will be helpful. Good luck and be patient. Help is on the way!

1 more replies
Relevance 39.36%

(Note this is a different issue to the previous poster)

Windows BT stack has always been flakey, but this problem has me stumped.

I've been using a number of HC-05 serial bluetooth adapters, and I need to delete their pairing info and virtual serial port association.

If I go 'Device and Printers', right click, Remove Device, Confirm. Nothing happens, no error, no change in the Status of the device.
If I go to Device Manager-> BlueTooth and remove the device there, it deletes, but on refresh, it reappears.
If I look at properties->Events for the device I see <time spamp> Device Deleted then several seconds later <time stamp> Device Installed (bth.inf). with Information

saying Driver Management concluded the process to install driver bth.inf_amd64_7ac329009c88b2a2\bth.inf for Device Instance ID BTHENUM\DEV_201408201112\7&364C998&0&BLUETOOTHDEVICE_201408201112 with the following status: 0x0.


The same thing happens if I attempt to delete the actual Port (Standard Serial Over Bluetooth link(COMx) in this case the Information is

Driver Management concluded the process to install driver bthspp.inf_amd64_d2676314a8c299d9\bthspp.inf for Device Instance ID BTHENUM\{00001101-0000-1000-8000-00805F9B34FB}_LOCALMFG&0000\7&1A018E8E&0&000000000000_00000005 with the following status: 0x0.

Does anyone know what is causing windows to automatically reinstall the devices?

Answer:Unable to Remove BT Devices

Does anyone know what is causing windows to automatically reinstall the devices?



Are you physically removing these devices from the computers?

2 more replies
Relevance 39.36%

Using the uninstaller for quiknowledge results in the program terminating and then windows searches for a solution to the problem. The return from this is that Windows was unable to find a solution. The last time I ran it hung on nsExec.dll but that varies every time I try the uninstall

Below is the dds.txt file and attach.txt is attached. 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.16521
Run by Joan at 13:28:05 on 2014-04-26
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8184.5355 [GMT -4:00]
.
AV: Norton Internet Security *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpe... Read more

Answer:Unable to remove quiknowledge

Good evening.
I would start by reinstalling it and seeing if that enables you to uninstall it successfully - it may just be a corrupted file issue.

6 more replies
Relevance 39.36%

Hello,
I have recently found whitesmoke installed, I'm unable to remove it and its making laptop run very slow even though its new and rarely used.

Answer:Unable to remove whitesmoke

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE:... Read more

22 more replies
Relevance 39.36%

I discovered that my laptop used much more cpu/ram than it used to so I had a virus check up on MSE and found
this :VirTool:Win32/Obfuscator.XZ.

I tried to remove it without success can someone please help me?
 

Answer:Unable to remove a virus please help

16 more replies
Relevance 39.36%

I run Win7.During an AVG scan it turned up a threat called MalSign.Generic.834.However,AVG was unable to remove it as the threat repeatedly replicated itself.
Has anyone come across this threat and if so how is it removed permanently?

Answer:Unable to remove a threat

I had a similar problem. They are called a PUP.I could not remove it. I got on to Norton and they took over my computer and removed it. It meant going into the registry.I was impressed.

2 more replies
Relevance 39.36%

Hi,

My anti-virus is unable to remove some viruses that it has found in my computer. Could you please help me locating them?

Thanks in advance!!


Logfile of HijackThis v1.99.1
Scan saved at 18:42:01, on 05/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Arquivos de programas\Roxio\GoBack\GBPoll.exe
C:\ARQUIV~1\NORTON~2\NORTON~2\GHOSTS~2.EXE
C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7Debug\mdm.exe
C:\Arquivos de programas\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Arquivos de programas\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\ARQUIV~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe
C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Arquivos de programas\iTunes\iTunesHelper.exe
C:\Arquivos de programas\QuickTime\qttask.exe
C:\Arquivos de programas\Java\jre1.5.0_03\bin\jusched.exe
C:\Arquivos de programas\iPod\bin\iPodService.exe
C:\W... Read more

Answer:Please Help! Unable to remove virus

6 more replies
Relevance 39.36%

About three weeks ago my computer had been just fine, no problems at all. Then in the middle of playing LOTRO, my sound just stopped. I posted about it on The PC Guide and someone told me to reinstall the sound driver and update Directx. I downloaded the sound driver from Dell and the most up to date Directx from Microsoft and installed them. My sound started to work but then Internet Explorer started to periodically pop up with various ads. I don't use IE at all. I ran AVG and it found Trojan Horse Downloader.Generic9.CAXD in c:\System Volume Information\Microsoft\services.exe and also in c:\System Volume Information\Microsoft\smss.exe. At that time, AVG was unable to remove them saying they were inaccessible. I was not being able to register on AVGs forums in order to post about it there so I posted back on The PC Guide and was told to download Trend Micro Housecall which removed the infections but as soon as I restarted my computer, they were right back and IE was running again. They had me try several things but every time I restart the infection was back. I did disable System Restore to try to get rid of the files but that didn't work. At one time I found instructions to make System Volume Information accessible and after that AVG could remove the infections but every time I restarted, they came back.

I dealt with this for a couple of weeks during which I was finally able to get registered on AVG's forum and they sta... Read more

Answer:Infections AVG unable to remove

Fixed.

2 more replies
Relevance 39.36%

I ran Hickjack this and unsure what to do after a scan
 

Answer:unable to remove Mislead.App

I am posting my log file
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:04:05 PM, on 10/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WIND... Read more

1 more replies
Relevance 39.36%

Windows XP SP3 on a PC
Yesterday I removed AVG Free using Revo Uninstaller but I had to do a System Restore today and when I used my add/delete programs, even though it shows the AVG as there when I click remove nothing happens.
When I click the uninstall button in my Start list nothing happens.
I've had Revo working for about 30 minutes and it is also unable to get the uninstaller to work.

So - did I remove it or not? I want to know for certain because I am now using Avast and I don't want both of them working.

Is there a way to de-activate AVG if I'm unable to remove it?

Thanks!
 

Answer:Unable to remove AVG Free

16 more replies
Relevance 39.36%

I ran Norton as part of my regular maint, discovered two viruses, but Norton was unable to quarrantine or remove. Ran Spybot, AdAware. I have included my HJT log. Any help would be greatly appreciated. Thanks
Ken Campbell

Logfile of HijackThis v1.98.2
Scan saved at 11:48:03 AM, on 12/6/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\TPPALDR.EXE
C:\WINDOWS\syst... Read more

Answer:Unable to remove virus. Pls help

7 more replies
Relevance 39.36%

hello
I am new to these forums (obviously) so please forigive me if I do something wrong. I have read the sticky and followed as many of the steps as i am able, however most scan prgrams (adaware se, bitdefender and spybot search and destroy to name a few) lock up halfway through scanning,even in safe mode.
Using panda antivirus i was able to learn that I have contracted something called downloader.zlob.DEZ (though the program was unable to remove it). Since infection, I am unable to browse any folder containing movie files through windows explorer, in normal or safe mode - the window just crashes. The same thing happens if i use IE to browse my C drive. I would just format, but that would mean losing about 20gb of files i really want to keep - and cant backup due to the explorer crashes.
Enclosed are the log files i was able to generate. Please can someone advise me what to do next? I would be eternally grateful. If i have missed anything, let me know and I will add it in a future post.

thomas
 

Answer:unable to remove malware - please help :(

hello again

just a quick note in case anyone has the same problem and finds this post. Using a tiny bit of initiative I managed to find a work around. Using an alternative to windows explorer called Universal explorer (trial version available at http://www.spadixbd.com/) I was able to navigate to the relevant folders and move them out of the "my documents" folder, and now I can access them through either program. I'm going to cut my losses, back everything up and format. Not exactly a fix but at least I wont lose any data now.
 

5 more replies
Relevance 39.36%

I know that i have something as Sophos has caught it but it will not go away once it's cleaned. When I rebooted my work laptop I was seeing the copying box and I was able to see that it looked like the same thing. Rather than redoing the whole laptop ( I have some stuff that I need to back up first) I would like to see if I can clean it out.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Enterprise, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz, Intel64 Family 6 Model 61 Stepping 4
Processor Count: 4
RAM: 8085 Mb
Graphics Card: Intel(R) HD Graphics 5500, 1024 Mb
Hard Drives: C: Total - 475761 MB, Free - 243637 MB;
Motherboard: Dell Inc., 0DCPV1
Antivirus: Sophos Anti-Virus, Updated and Enabled
 

More replies
Relevance 39.36%

I have run both AdAware and SpyBot S&D in safe mode and it cannot remove this piece of spyware. It is a small icon on the taskbar that tells me that I should get an up to date antispyware solution. However, it sends me to SpyCrush.com (with an affiliate id). It's a piece of spyware itself. Please analyze my HijackThis! logfile below and provide me with directions to remove this SpyCrush notifier. Thanks!

C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Turbose\Desktop\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/go/notebookaccessories
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc... Read more

Answer:SpyCrush.com - unable to remove

Follow the instructions from this webpage: http://siri.urz.free.fr/Fix/SmitfraudFix_En.php

When you're finished, there shall be a log produced. Please post that log & a fresh Hijackthis log

1 more replies
Relevance 39.36%

I have just uploaded the free version of SuperAntiSpyware, but unfortunately pressed the wrong tab and got the pro trial version, which I didn't want. But when I've tried to delete the download and start again, it won't let me. A big box appears telling me this isn't possible. Can anyone help.
 

Answer:Unable to remove SuperAntiSpyware

8 more replies
Relevance 39.36%

Hi,I think I am infected with the virut virus and probably other malware as well. I am somewhat of an advanced user and in so many years never had a problem finding and removing virus on my computer and on others until now. That aside, let me begin with my story.OS: WIndows Vista Business SP1CPU: Intel Core 2 Duo E7400AV/malware scanner: Avast/malwarebytes/spybot/adware/windows defenderProblems: Unable to connect to certain sites (eg; microsoft.com-no updates, some antivirus websites, repeated found virus/malwares/problems after scanners fixing it)I wasn't sure how I was infected with a virus(most likely something I downloaded) but I ran malwarebytes almost every week or so and that is how i found out that i was hit. I usually find for solutions online and most of them being on bleepingcomputer.com. So i immediately started running a full scan on my system with avast, malwarebytes, and ad-aware. All 3 scanners found the problems and successfully remove the problems found. I even did a bootscan with avast and it removes all found problem. However, everytime i rescan my system again, the same problem is found so i figured that the original problem hasn't been fixed. I then downloaded combofix and running it and that is when it gives the error!! ALERT !! It is NOT SAFE to continue!The contents of the ComboFix package has been compromised.Please download a fresh copy from:http://www.bleepingcomputer.com/combofix/how-to-use-combofixNote: You may be infe... Read more

Answer:Unable to remove virut

I'm afraid I have very bad news.Your system is infected with a nasty variant of Virut, a polymorphic file infector with IRCBot functionality which infects .exe, .scr files, downloads more malicious files to your system, and opens a back door that compromises your computer. According to this Norman White Paper Assessment of W32/Virut, some variants can infect the HOSTS file and block access to security related web sites. Other variants of virut can even penetrate and infect .exe files within compressed files (.zip, .cab, rar). Virux is an even more complex file infector which can embed an iframe into the body of web-related files and infect script files (.php, .asp, .htm, .html, .xml). When Virut creates infected files, it also creates non-functional files that are corrupted beyond repair and in some instances can disable Windows File Protection. In many cases the infected files cannot be disinfected properly by your anti-virus. When disinfection is attempted, the files become corrupted and the system may become irreparable. The longer virut remains on a computer, the more critical system files will become infected and corrupt so the degree of infection can vary.The virus disables Windows File Protection by injecting code into the "winlogon.exe" process that patches system code in memory.CA Virus detail of W32/VirutThe virus has a number of bugs in its code, and as a result it may misinfect a proportion of executable files....some W32/Virut.h infections are corru... Read more

5 more replies
Relevance 39.36%

Let me know what to do next?Here is a screenshot of my AVG:Link to: <a href="http://www.geocities.com/aaronmaxa/AVG_Screenshot.JPG" target="_blank" rel="nofollow">http://www.geocities.com/aaronmaxa/AVG_Screenshot.JPG://http://www.geocities.com/aaronmaxa/...inked-image" /></a>----------------------------------------------------I ran the combofix also in attempt to get rid of it, and here is the log:ComboFix 09-01-01.02 - Owner 2009-01-03 10:31:09.2 - NTFSx86Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2038.1441 [GMT -8:00]Running from: f:\programs\AV\ComboFix.exeAV: AVG Internet Security *On-access scanning enabled* (Updated)FW: AVG Firewall *enabled* * Created a new restore point.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\windows\IE4 Error Log.txt.((((((((((((((((((((((((( Files Created from 2008-12-03 to 2009-01-03 ))))))))))))))))))))))))))))))).No new files created in this timespan.(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))).2009-01-03 02:42 --------- d-----w c:\documents and settings\Owner\Application Data\dvdcss2009-01-02 06:04 --------- d-----w c:\documents and settings\Owner\Application Data\Orbit2009-01-02 05:12 --------- d-----w c:\documents and settings\Owner\Application Data\uTo... Read more

Answer:Unable to Remove Trojan

Hello Aaron Max,

Did you click the "Remove all threats" button in AVG ?

If so, did another system scan reveal any more threats ?

Do you experience problems ?

Greetings,
Thunder

2 more replies
Relevance 39.36%

i've recently noticed some new programs added in my Add/Remove programs list, but the ones that concern me are:

23_24_2500Tour
2400
2400_2500Help
2400_2500trb
AiO_scan
AIOMinimal
AiOSoftware
Copy
CreativeProjects
Director
DocProc
Fax
hpmdtab
InstantShare

when i click them they dont have a remove button at the right making me unable to remove them, and they dont have any additional info button either.
could someone please enlighten me to what these are and how i can get rid of them?
 

Answer:unable to remove programs?

Try programs like spybot, or adaware and see if they remove them. if not you may have to go to more extreme measures like formatting the system if they are malware.
 

3 more replies
Relevance 39.36%

My first post everyone please be gentle

I am trying to change the ram on my nb100. I am unable to remove the old ram.
I have changed the ram on previous laptops without problem! tilt ram, remove, replace!
I am unable to tilt the ram to remove.

Grateful for any help thanks

Answer:NB100 - I am unable to remove the old ram

Its the same as any other laptop, pull away the side latches and the module will lift up.

If that doesn't work, the mechanism may be broken requiring repair at an ASP.

2 more replies
Relevance 39.36%

I just noticed this guy around my folder and when i try to delete this it says file not found, tried scanning for virus but doesn't work at all.

http://prntscr.com/5bm1na

Answer:Unable to remove file.

Tried booting into Safe Mode and deleting it?

2 more replies
Relevance 39.36%

Malware Alarm 2.1 keeps popping up and messing up my work space. The contact address on their ad does not work. I don't know how the program got on my system.

When I go to my control panel to remove the program is says it can not be removed until it is shut down. And that's my problem. I can not shut the program down. Right click, left click, nothing works.

I have Windows XP home edition and am using a Dell Dimension 9150l

Jack
 

Answer:Unable to remove program

Hi....dont try to remove it because it will not go on its own.

Download and scan with SUPERAntiSypware Free for Home Users
Double-click SUPERAntiSypware.exe and use the default settings for installation.
An icon will be created on your desktop. Double-click that icon to launch the program.
If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)
Under "Configuration and Preferences", click the Preferences button.
Click the Scanning Control tab.
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.

Click the "Close" button to leave the control center screen.
Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
On the left, make sure you check C:\Fixed Drive.
On the right, under "Complete Scan", choose Perform Complete Scan.
Click "Next" to start the scan. Please be patient while it scans your computer.
After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
Make sure everything has a checkmark next to it and click "Next".
A notification will appear that &q... Read more

2 more replies
Relevance 39.36%

I am unable to remove a file on my laptop as it states the file name is larger than that is supported by the file system. I am using Windows 7 and have run all of the anti virus, spam, malware program (Avast, Spybot, SuperAntiSpyware, Glary Utilities, CC Cleaner), so I don't think it is anything malicious. I cannot rename the file in Windows nor DOS, I cannot remove or move the file in DOS as I get the same error. When I right click on the file, the DELETE, PROPERTIES, RENAME, CUT, COPY as well as some other options are not there.

I have rebooted the computer numerous times and tried removing it the first thing after it rebooted to no avail. I can rename the folder the file is in but not delete the folder itself, as I get the same error.
 

Answer:Unable to remove a file

Unlocker
 

4 more replies
Relevance 39.36%
Relevance 39.36%

Hey, so i tried to install ZoneAlarm on my Win10, it failed and said the program cant run on windows 10, i then noticed i still got it in my TaskManager so i cloed it, i then checked the "Programs and Feautures" and there is ZoneAlarm in there, so i clicked it and pressed uninstall, but it wont let me remove it, it says the windows failed to close the program from running! I tried SafeMode, still same problem.
Spent 1 hour googling for a fix, but everything is from 5 years ago and doesnt work.
Help
 

More replies
Relevance 39.36%

My homepage has been taken over by ESURF.BIZ
I have tried to remove /clean it using the following but shown all ok ?
Avg
Avast
Malwarebytes anti malware
Jrt
Hitmanpro
Adwcleaner

Restarted pc but still loads as home page.
Please advise steps to remove this.

Thanks
 

Answer:Unable to remove maleware

What browser are you using? You may just have to reset it to defaults.
 

23 more replies
Relevance 39.36%

Windows xp home pc infected with trojan.
I have identified three  files 
c:\windows\installer\{BF8B97AB-1D7E-BEB8-3D55-AF7-F1B36DE43}\syshost.exe
c:\windows\system32\drivers\1455094.sys
c:\windows\system32\drivers\63a9e79ebe0aa8c2.sys
All my attempts to remove have failed.
tried Norton, Autoruns and via dos in safe mode.
always get access denied or similar.
 
Any ideas ?
thx

Answer:Unable to remove syshost.exe et al

Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:  aswMBR will create M... Read more

8 more replies
Relevance 39.36%

Hello.

First of all let me say thanks for taking your time to analyse my problem.

My problem started when i was surfing through some webpages, with the computer running smoothly and in a heart beat he reboot.
Suspecting of some malware or spyware problem i decided to make a scan using Malwarebytes'Anti-Malware. When wanted to start using the program he blocked so i suspected there was something going on. Tried to change the *.exe file to another name and i managed to run the program and he detected some infected files wich, i guess, was able to remove with the exception of "uacinit.dll".
Googled a little a bit and i read that its a tough ******* to remove so i decided to use your guidances (wich helped me a lot in the past) to help me to remove this problem.

Here's my dds log -

DDS (Ver_09-06-26.01) - NTFSx86
Run by Propriet?rio-de-HP at 2:59:45,39 on 20-08-2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Home Edition 5.1.2600.3.1252.351.2070.18.1023.564 [GMT 1:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Programas\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Programas\Java\jre6\bin\jusched.exe
C:\Programas\Ficheiros comuns\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\rundll32.exe
C:\W... Read more

Answer:Unable To Remove - uacinit.dll

hi.

Please explain why this computer has no antivirus program installed and running. This is an open invitation for infection.

It can take as little as eight seconds to infect an unprotected computer.

We will install one later.

-------------------------------------------------------------------------

Download ComboFix from one of these locations:

Link 1
Link 2


* IMPORTANT !!! Save ComboFix.exe to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. You can find instructions HERE.

Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.





Once th... Read more

9 more replies
Relevance 39.36%

After I run a scan with Spybot Search and Destroy, everything except "Log" is cleared. How do I remove "Log"?

Answer:Unable to remove "Log" with Spybot S and D

click tools / click view report / click clean out old reports.

1 more replies
Relevance 39.36%

Complete noob. Having trouble with "system security" software, cannot remove it or the links attached. Dosent appear in the add or remove programs list, and website states the removal option has been disabled. Help me please? :-o
 

Answer:unable to remove programs

Not entirely sure what you are trying to uninstall and even if it SHOULD be uninstalled. You'll need to give further details to determine that if you are unsure, such as its full name and what it does etc.

If you feel confident with its removal try this http://majorgeeks.com/Revo_Uninstaller_d5706.html
 

1 more replies