Computer Support Forum

Unable to remove CD Drive (Z:)

Question: Unable to remove CD Drive (Z:)

Greetings, Nothinglynothing here. I need some help with the removal of CD Drive (Z
It only appeared after I accidentally downloaded a bunch of virus from a website. I managed to clear out all the virus but I cant seem to find the way to delete this CD Drive. From my searches, I think this CD Drive might be some kind of Virtual Hard Disk (VHD). I am not sure about it though. Hope someone can help me with it. Thanks in advance.

More replies
Relevance 100%
Preferred Solution: Unable to remove CD Drive (Z:)

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Relevance 52.48%

unable to remove autorun.inf from flash drive
hi,
last weekend i found autorun.inf (i suspect a virus) in my pen drive, and my antivirus mcafee unable to detect it, though i update it daily.

whenever i delete it manually, it got deleted but it reappears when i eject and plug in my flash drive again.

plz if any one cud suggest me sum measure.
thanks in advance.


with regards,
SHUBHAM GORE

Answer:unable to remove autorun.inf from flash drive

ALKOHOLU


this folder, always reside in my usb drive , though i format it frequently.
CAN any one could give me some information to remove this recursive virus.

2 more replies
Relevance 52.48%

Last week i bought an Mp3 player, which can also be used as a flash drive/ USB Mass Storage, Last Night I loaded a video onto it to transfer it to another PC, i deleted all of the music off it so that the video would fit on, But After i had finished transfering the video over onto the other PC, I could not delete the video off my MP3 Player! it fills almost all of the room (512mb) on the Mp3, so i cannot put any of my music on it.

When I try to delete the file it comes up the an error message that the file is being used by another person or program, even though i am not using any programs with the USB drive. It never used to do this when i just had mp3s on it, so what has gone wrong?

Any help will be appriciated, Thank you
 

Answer:Unable to Remove Data From Flash Drive?!!!!??? Please Help!!

I Forgot to mention that my opperating system is windows XP.

I can put other files onto the Drive, and take them off again, just i cant remove the goddam video taht takes up all the memory. PLEASE Help getting flustrated with the fact that i only bought it last week and its already srewed up.

I have tryed to format it, however a similar error message is displayed about the drive currently being in use, however it diesnt do it with any other files that i can put on.
:dead:
Please Help Before i get the hammer out....... :knock:
 

6 more replies
Relevance 52.48%

Hi all,
Please can somebody help me, I've a relatively new SanDisk Cruzer Slice 64GB USB pen drive, which I use for work mainly. It has somehow managed to write protect itself and no matter what I do I simply cannot remove it!

I've scanned with Antivirus, nothing found

I've tried regedit - Computer\HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\StorageDevicePolicies

StorageDevicePolices didn't exist so I created a 32 bit Dword string, set to 0 this hasn't done anything

I've tried Diskpart as administrator -
DISKPART> list disk
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 298 GB 1024 KB
Disk 1 Online 59 GB 0 B
DISKPART> select disk 1
Disk 1 is now the selected disk.
DISKPART> attributes disk clear readonly
Disk attributes cleared successfully.
DISKPART> clean
DiskPart has encountered an error: The request could not be performed because of
an I/O device error.
See the System Event Log for more information.

I've checked the logs and it doesn't seem to list anything for the drive

Answer:USB Drive Write Protected itself, unable to remove

How is the disk formatted? FAT32 (I believe the default, could be wrong) or NTFS?

If it's FAT32, and you are trying to copy a file larger than 4GB, then it's not going to let you write to it due to the limitations of FAT32. You would have to re-format the disk to NTFS.

It also could be possible that the disk became corrupted during a write operation (ie., not using "remove") in the system tray when unplugging the drive from the computer...

Copy whatever files you currently have on the disk to your HD for temporary safekeeping and format the disk again.

Also, what version of Windows are you using? Is it the Professional version or Home version? Are you using, or did use, bitlocker on this machine? Or a TPM? If you did, bitlocker automatically changes some policies to read only for removeable drives, and if you have Windows 8 Pro, we can go in a fix that throught the group policy editor.

3 more replies
Relevance 52.48%

A friend brought a computer over for me to see what is wrong with her DVD drive. The drive isn't working at all but I can't figure this case out. I took the screws out but it won't come out the back at all....moves about an inch. Any suggestions?? I have looked on their website but found nothing. Thanks in advance for any advice.
 

More replies
Relevance 52.07%

Hey guys I have a question involving an external hard drive and windows 7 libraries. I have this external hard drive (WD500GB My book) which has all my backup information (as per Windows Backup feature; great stuff) as well as all my music and movies. I really like the idea of using libraries to list all the music and movies from both my internal and external hard drives in one place; so I've included the external hard drive folders in the various libraries. The problem I run into is that I cannot safely remove the external hard drive; it refuses to do so.

I know it is due to the external being included in the libraries and not due to Windows Backup storage location being the external hard drive because I kept the Windows Backup settings the same (with the storage being the external hard drive) and removed the folders on the external from the libraries and it safely removes fine.

I realize I could set it so that write cacheing is disabled and I could remove it whenever, but this yields lesser performance (correct?) I'd rather keep write cacheing on; is there any way for me to include the external hard drive in the libraries while having the ability to safely remove the hard drive?

Thanks in advance

Answer:unable to safely remove external hard drive

WD has released all new software for the MyBook series drives; I had the same problem you mention and after installing the new Drive Manager and MyBook software it is working nicely for me now.

1 more replies
Relevance 52.07%

My Uncle's computer (HP XP SP2) detected Trojans throughout his computer last night and some were in the D: drive under system restore points so like always he disabled system restore and some of the Trojans were able to be removed, however 6 are still left. Two in the C Drive and 4 in his D drive. This is AVG's results from today:"C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected"Here is his Hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:11:25 P... Read more

Answer:Unable to remove Trojan infections from Recovery Drive

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 51.25%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

More replies
Relevance 51.25%

Hello. In my last post, I had a problem mounting my external HDD, so bought a new external enclosure, but now I can't get the hard drive out of the first case. After opening the back of the case where everything connects, I cannot retrieve the hard drive itself. It won't slide out.

I have the same "Smart Drive"external hard drive case as the one in this video http://www.youtube.com/watch?v=4slNzGLUDv4 except mine is not an empty enclosure. In the video, the guy removes a slide from the top and bottom of the case with such ease, whereas, I am unable to further remove any part of the shell around the hard drive itself. I can clearly see it, but it's just stuck in place.

What should I do? Please help.
 

Answer:Solved: I am unable to remove the hard drive from my external shell. Please help.

7 more replies
Relevance 51.25%

Hello, I am trying to replace the hard drive on my desktop computer, but I am currently having trouble  with removing the metal cage that encloses the hard drive. This is the recommended method of replacing the hard drive, according to these instructions: http://www.manualslib.com/manual/359309/Hp-Pavilion-P6230f.html?page=21#manual I am stuck on step 13 for that manual in particular. I push down on the "#1" latch, and pull forward, but it's not sliding forward. I am unsure what I am doing wrong, but the thing is not moving. Do you guys have any idea what I may be doing wrong? Thank you.

Answer:Unable to Remove Hard Drive Cage from Desktop computer

Hi, Slide the HDD cage towards the top of the PC  while depressing the latch. Then pull the cage out of the tower. I have an h8 1380t with the same HDD cage. Jay   

1 more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Welcome to Major Geeks!





videobruce said:





Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,Click to expand...

Yes but this rarely occurs.





videobruce said:





2. In a hard drive after one wipes the drive with zeros'?Click to expand...

Yes. The FBI and CIA recover files all the time from systems where people think they have erased; however it is very unlikely that you have become reinfected from a drive that you have done this to. Did you delete your Windows partition before formatting and reinstalling. Are you reconnecting this PC to a network with other PCs? They could be the cause of your reinfection or you may not have a properly protected PC and you could be getting infected from the internet.





videobruce said:





I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.Click to expand...

See this: http://www.symantec.com/security_response/writeup.jsp... Read more

3 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

3 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Originally Posted by Windows Central Question I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely. I understand that you're extremely frustrated however I'm not sure what anyone could do to help without you clarifying three things.
Three questions.
1) Are you using a NAS Enclosure?
2) Are you using a Server Rack?
3) Which O/S are you using?
We're not mind readers you know , so please join and provide more information in this thread.

more replies
Relevance 50.84%

Ok, Im working on a relatives computer. Im sure its got at least some malware. Its running XP SP2, but some individual decided to install VistaMizer on it, which makes it look like Vista. Thats a problem. Its got a couple programs that Im flagging as bad for now: Babylon, Winning Eleven 7 International, and possible WinAmp Remote.
Flagged Tasks running: Domino.exe, ZSSNP211.exe, and FrzState2k.exe
Antivirus program is Avira AntiVir Personal edition.

Every time I restart the computer, even from safe mode, everything is back to the way it was before. Temp files I deleted are back. Programs I removed are back. Programs I installed are gone. Im working on doing the basic removal steps now, and Ill post my logs as soon as I have them.
 

Answer:Hard drive restores itself to previous state, unable to remove malware.

Heres my logs.
 

7 more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Wiping the hard drive should get rid of any trace of virii. It can't be a BIOS virus either (it can't do something as complex as what your computer is going through; as far as I know anyway).

Chances are you're installing infected software or you're not securing you computer adequately before allowing it Internet access (Firewalls, Windows service packs, Anti-virus, etc.).
 

26 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

0 more replies
Relevance 50.43%

  hey bro help me solve this problem. I m unable to remove usb write protection from my flash drive in win7 using given solution. what should i do please suggest as fast as u can

Answer:unable to remove usb write protection frrom my sandisk flash drive in windows 7

Using given solution? Is url reference missing that you meant to include?As far as this flash drive goes... I would backup the contents of it to a hard drive or another flash drive before making any attempts to make it read/write enabled again.Then once you have backed up the data on it, delete the partition on this drive if allowed. Then create a new partition and format that partition. But with write protection enabled you might not be able to do this. However if the flash drive is simply corrupt you may be able to delete the partition and create new and format fresh.Given the price of flash drives these days I wouldnt spend too much trouble with trying to fix it. Some flash drives when they fail internally no longer accept write requests, and your lucky that they will even read.I am assuming that this USB flash drive doesnt have a slide switch like some USB flash drives have to make them write protected.

1 more replies
Relevance 45.92%

Hi! I'm hoping someone can help me with this problem... I've been trying to backup my computer to an external drive and I keep getting the error code: 0x8078002A. I've tried numerous times in the past few weeks with no success and the same error code each time. My laptop is a Dell XPS 17 (L702X, Early 2011) with an Intel® Core™ i7-2760QM CPU @ 2.40GHz processor with 8.00 GB of installed memory (RAM). The Windows edition I'm running is Windows 7 Professional. The size of the backup that I'm trying to run is 327.56 GB (and I know there is plenty of space on the external drive to accommodate the backup).The external drive I'm trying to back up the laptop to is a WD (Western Digital) My Book external hard drive that is a 4 TB hard drive. It currently has 1.88 TB free of 3.63 TB according to its properties. I recently performed an "Error-Checking" run with the external hard drive (by clicking on 'Properties' and then the tab that said 'Tools' and then 'Error Checking' and it went through that process and fixed whatever errors it might have found. I had read on some other forum that I should try doing this to see if that would make the backup work, but it still won't work and I'm still getting the same error code.
 
I read on another forum that you could possibly be getting the error code 0x8078002A if you had a virus or malware or some other type of problem.  I'm not sure what else to try or do...  I do run Super Anti-Spyware Free Edition regularly as ... Read more

Answer:Unable to Backup Laptop and Unable to Remove VSO Downloader Program

Hello there,From this article, it appears to be a bug in Windows Backup.Can you try using a third-party backup utility? Good choices are Macrium Reflect (for imaging) or EaseUS Todo Backup.Since you have a Western Digital drive, it is also possible to use Acronis True Image WD Edition.Let us know how that goes.Regards,Alex

12 more replies
Relevance 45.51%

Hello all,

i am trying to uninstall a program called "Scanner utility for Windows" (from 'Add/Remove programs'), but once its removed it still shows up under 'Add/remove programs', it doesnt disapear from there.
i tried rebooting the computer afterwards, but it still shows up in there.

i am able to remove it from another computer, so not sure what the issue is.

i am logging with administrator rights on both computers, so what could the issue be?

thank you

PS Both computers run on Windows XP.

Answer:Unable To Remove Software- It Still Shows Up Under 'add/remove Programs'

Hello alexcirnuThis should help solve the problem http://windowsxp.mvps.org/AddRemove.htm

1 more replies
Relevance 44.69%

I am having win xp as my operating system. I am unable to remove following programs from add or  remove programs:1. Internet Security Add-On2. Public Messenger ver 2.03and when I attempt to remove these I get an error message window saying that "You should reboot your computer prior to uninstalling this software. Reboot now?" Even after rebooting the same thing is repeated.In addition there is one more problem in internet explorer whenever I try to open www.yahoo.com http://awarninglist.com/ gets opened. I dont want to format and put win-xp again, I want an alternative solution. I read REFERENCE NUMBER: CH000568 in www.computerhope.com regarding TweakUI and tried it but could not find any add/remove tab...

Answer:unable to remove programs from add or remove progr

Try CCleaner.  You can download it from:http://www.majorgeeks.com/download.php?det=4191After installing it, I suggest you first run its Windows scan and remove stuff it finds.  Then, run its Issues scan, backup the registry when prompted, and then delete the items it found.  Then, use its Uninstall tool, under Tools, to try deleting the programs.  

1 more replies
Relevance 44.69%

Hi, I performed the runme part and have listed all results below. I cannot seem to add or remove some unknown programs from my list. I do not believe that they're malware. Help anyone? I've already done a system restore and don't want to delete using ccleaner in case it's something I need.

1. Basic Computer Maintenance:
Add/Remove Programs: Encountered long list of programs that are unknown and unremovable.
Cleaned hard drive using CCleaner
Removed invalid registry entries using CCleaner:ran 4x
Startup: only 2 programs run on startup: AGRSMMSG and ATIModeChange
Defragmented C drive using both Microsoft and IObit SmartDefrag

2. House Cleaning and Setup
Am not using Multiple Antivirus Apps or Firewalls
Under control panel/add remove programs, no malware programs listed, only unknown and unremovable programs.
Msconfig changed back to Normal Startup Mode from Selective Startup
No Quarantined folders
Emptied recycling bin
Reran CCleaner and removed excess items from startup, only above 2 remain
Repeated above step on all other users

3. Enabled viewing of hidden files etc.

4. Followed Windows XP Cleaning procedure
Downloads: Combofix to desktop
Spybot search and destroy download new version
AVG Anti-Spyware
MGtools to C drive

Install & Run Scans
When I ran AVG it did not produce a log even though I followed the steps.
 

Answer:unable to access add remove key in add remove programs

Your logs look clean.
However, use add/remove programs to uninstall:
Viewpoint Media Player

Then please install:
SevicePack2

If you are not having any other malware problems, it is time to do our final steps:

1. If we used Pocket Killbox during your cleanup, do the below
* Run Pocket Killbox and select File, Cleanup, Delete All Backups
2. If we used ComboFix, you can delete the ComboFix.exe file, C:\ComboFix folder, C:\QooBox folder, C:\WINDOWS\nircmd.exe, C:\combofix.txt and C:\ComboFix-quarantined-files.txt logs that was created.
3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
4. If we used SmitFraudFix, you can delete all files and folders related to it now including the c:\rapport.txt log.
5. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
6. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
7. If we had you run Avenger, you can delete all files related to Avenger now.
8. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
9. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
10. If you are running Windows XP or Windows ME, do the below:
* Refer to the cleaning steps in the READ ME for your... Read more

1 more replies
Relevance 44.69%

Hi..I have a Program that has been installed on my PC which I wish to remove using Add/Remove program from Control Panel...but it will not uninstall. Please let me know if this can be done from the Registry....and how I actually perform the task If not, is there another way? The uninstallation continues for a few minutes and then stops . Your assistance would be much appreciated....Ray.

Answer:[SOLVED] Unable to remove Program from Add/Remove

Open Task manager>Process to check whether this program is running or not. If not, you can try to uninstall by uninstall file,located in program files. If still not, you can use some third party uninstaller software.

3 more replies
Relevance 43.05%

In add and remove I have program Dan Elwells speed test which I want to remove but it says I can`t as it doesn`t exist. I have run a search and it says nothing found. How can I remove the entry in add and remove please. OS is XPhome.

Answer:Unable to Remove program using add & remove.

Have you tried the Ccleaner uninstaller click here

10 more replies
Relevance 43.05%

OS is xphome sp1. I am trying to remove Google Earth using add and remove but get a message saying that it has encountered an error and is unable to remove it. I have tried doing it in Safe Mode but get the same message. Any suggestions please?

Answer:Unable to remove a program from add&remove.

Remove while in safemode or click here

10 more replies
Relevance 43.05%

My son downloaded an inappropriate game and I am unable to remove it in the add and remove program. It gives me the message that it is unable to locate the installation log file, and the uninstallation will not continue. How do I get rid off this??
 

Answer:unable to remove game from add and remove

8 more replies
Relevance 41.41%

After online researching, I ended up into this forum >> disk 1 is unknown, not initialized, unallocated

I downloaded the Partition Wizard from Jumanji's link, installed, and followed instructions until the end.

After assigning drive letter (G:\), the PW shows that it is indeed assigned to drive G:\ BUT, I still can't see it in My Computer so I checked Disk Management and it still shows the same status/problem as it was from the beginning.

Is/are there any further necessary step/s after assigning Drive letter to the recovered disk?

When I try to close the PW, it says "You are about to quit the program and cancel all pending operations. The changes you have made will be lost."

I don't know what to do from here. Please help

Thanks in advance..

Answer:Disk unallocated, unable to initialise, unable to assign drive letter

OK, It could be a simple matter.

But I want to have a clear picture of what exactly your problem was.

1. Are we dealing with in internal drive or external drive?

2. Was the drive suddenly not accessible in My Computer?

3. Was it seen in Disk Management? What did it show? Even now you can take a screenshot of how the drive appears in Windows Disk Management and post it
Disk Management - Post a Screen Capture Image

We will then proceed step by step. I am here for the next 11 or 12 hours but peep in once in an hour or two and follow up.

I know you had used PW. But we shall get on to it after you post the Windows Disk Management screenshot.

BTW what is your local time? If you are in USA you can go to sleep and come back after six or eight hours. No problem.

9 more replies
Relevance 41%

Been buggering around with this for a while now.

I have an 2 internal hdd, and an external hdd, which is pretty much always on, and it appears in the 'safely remove hardware' in the systray.

I also have a portable HDD, for bringing files to and from work, which appears there also.

I want to be able to remove the portable safely, without accidentally removing the external hdd as i keep forgetting which drive is which!

I've dinkered around with making either/or drive 'Optimized for quick removal or Optimized for performance' in the hopes that they wouldn't appear - ideally I only want the portable listed (I can always disconnect the external when the machine is off).

Anyone any ideas?
 

More replies
Relevance 40.59%

Each time I try to remove "Web Search" with add/Remove programs I get an error dialog - "The Microsoft Java Virtual Machine cannot find main class; will exit".

FYI...
I was just reading another forum after googling for removal tools...
...and someone suggested that the only way to remove it was to format the drive and start over... ......I'm still laughing!! (but I guess it's sad, because someone is going to believe that advice.)

Anyways.. looking for good suggestions and directions.

(I'm still laughing)
edited:
I'm unable to run the new version of HJT it keeps giving me an error and knock me out.
added a HJT for good measure using the older versions

Logfile of HijackThis v1.98.2
Scan saved at 1:15:12 AM, on 2/8/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\msiexec.exe
C:\Utilities\hijack this\HijackThis old.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Sear... Read more

Answer:Unable to remove "Web Search" with Add/Remove Programs

Hello ucurl!

Your HijackThis log is clean.

Your error message suggests that you have something missing or in error with the installation of the Microsoft version of the java virtual machine.

I am not sure how to help you with this problem, but I can tell you that it is not a security threat.

I suggest that you post your problem in the Windows XP forum on this website.

Good Luck!
 

1 more replies
Relevance 39.77%

Hello all. I'd like to start by saying I'm a big fan of this site, it has been helpful many times in the past.
A little bit of background on me. I have been running a small on call/on site computer repair service for a few years and have some CompTia certs. I am a Moderator for a forum at a well respected and large fps game site, so i do truly understand what you guys deal with and appreciate all the time and effort.

This is the first thing I've run across that I have failed to fix/remove

Ok on to my issue. I did get a version of the '11 security tools virus (kids get on this pc sometimes lol)
I was able to remove it and all the BHO's that went with it using rkill/combofix, HijackThis and Malwarebytes. But one thing that remains in my cp. It calls itself aaa and uses the java icon (publisher bbb comments ccc). I have hit a wall trying to figure out what this exactly is. I have nothing "going wrong" on this pc, but it still bothers me and can't be good.
When i try to uninstall it simply says it can't.
I have tried searching these forums and doing what another thread suggested, which is pretty much the same things i did to rid myself of the virus in the first place, but the person infected never responded and the thing remains.
So I am asking for some help on this.

My stats;
win xp pro.
AMD Athlon 64 X2 Dual Core Processor 6000+ | Socket AM2 | 3013/201mhz
FireFox 3.6.16
Avira AV

Many thanks for your time.

Answer:unable to remove aaa from add/remove

If Add/Remove Programs is showing an entry but the program/folder has been removed, then its likely an orphaned entry in the Windows registy. Orphaned entries can be removed by going the registry but a much safer and easier way to do this is to download and use a third party program like MyUninstaller or RevoUninstaller. After launching the program, right-click on the entry and choose the option to "Delete the selected entry".To fix manually in the registry, refer to:How to Manually Remove Programs from the Add/Remove Programs ListRemoving invalid entries from Add or Remove ProgramsKellys Korner: Removing Invalid Entries in the Add/Remove Programs ToolCAUTION: This step involves making changes in the registry. Always back up your registry before making any changes. If you are not familiar with working in the registry, then you should NOT attempt to make any changes on your own. Improper changes to the registry could adversely affect your computer and render it inoperable. ERUNT is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.

7 more replies
Relevance 39.77%

Running XP Professional

A friend gave me a copy of XP Plus ... loaded alright ...everything seemed to work ... although now when I try to uninstall ... comes up not installed properly.

Whenever I insert the disc [copy that I had installed with] and hit setup it shuts down my computer. Even if I try 'Explore'...then setup...same problem!

Really would like to remove..as I don't like or use it...memory hog

Hope someone can help

Thanking all in advance

Gary
 

Answer:Unable to remove XP Plus

Maybe it can't uninstall because Windows is using it's files...

Start/Control Panel/Display
Select Themes @ top
Hit drop down list & select Windows XP or another that is not in "Plus"...

...then try to uninstall Plus
 

1 more replies
Relevance 39.77%

below is a link to a full screen capture of my spybot scan results. i have tried everything to remove these entries but to no avail. i am also posting my hijack this log file. please post detailed removal instructions as i am a self-proclaimed ad/mal/spyware removal "noob"! thank you and regards.

-AudioWave80

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:15:09 AM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\PROGRA~1\CACHEM~1\CachemanXP.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\SnoopFreeSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shar... Read more

Answer:[ Unable To Remove These ] - [ HELP ]!!

16 more replies
Relevance 39.77%

I?ve uninstalled IE8 before on 2 other Windows 7 installs with no problems. I go to Control Panel\All Control Panel Items\Programs and Features\turn windows features on or off And uncheck IE 8 , and press ok and I get this error message: ?An error has occurred. Not all of the features were successfully changed.? And it doesn't get rid of IE8. Any idea how to fix this? I'm using Win 7 64bit thanks.

More replies
Relevance 39.77%
Question: unable to remove

hi helpers, everytime i start PC i get this annoying window which says "diconnected blackberry desk manager " my son installed it ages ago and i remember trying to uninstall and it refused to uninstall kept re installing !anyway when i try to remove now a box comes up saying " this action is only valid for products that are currently installed thanks

Answer:unable to remove

Download this click here, then run it and see if it can do the job.

6 more replies
Relevance 39.77%
Question: Unable to remove

I keep getting pop-ups from SysProtect and WinAntiVirus. I have no idea how to remove these spywares and it is very frustrating. Can anyone help. Here is a copy of my HJ log:

Logfile of HijackThis v1.99.1
Scan saved at 2:37:00 PM, on 6/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\EPSON\ESM2\eEBSVC.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.... Read more

Answer:Unable to remove

10 more replies
Relevance 39.77%

Hi, I hav been having some pop-ups that I haven't been able to get rid of with Spybot or Ad-Aware. These include AVSystemcare and other ads which relate to pages I'm currently viewing.

I have a Dell Inspiron 9300 (with an upgrade to 2GB of RAM) and am running Vista Business.

Also, when I have an external hardrive plugged in, the mouse becomes hard to control, stalling for a bit. Similarly, the keyboard misses letters when typing into webpages (not necersarily with the HD plugged in) but is always ok in Word or Notepad - which is where I'm typing this message now to copy across.

Many thanks,
Cpt Black
 

Answer:Unable to remove pop-ups

Here is a Hijack this log if that helps:

Logfile of HijackThis v1.99.1
Scan saved at 5:28:53 PM, on 01/09/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Thomson\ST330\diagnostics\diagnostics.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\I8kfanGUI\I8kfanGUI.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Chris\Documents\HijackTh... Read more

2 more replies
Relevance 39.77%

Been having problems with windows security centre not monitoring sygate firewall and avast antivirus, i am not able to access windows firewall atall,ithought if i remove sp2 and reload it, it may solve the problem,i go to add/remove and click delete,it gets so far then a small window appears saying it has failed to uninstall,then i get nine windows updates to install,as i said in my previous thread two weeks ago i am waiting for my legal copy of windows xp pro,i found that my copy was illegal so i paid for a legal copy from microsoft,92,i received a new key via email and i am waiting for cd so i can try a repair,thanks in advance,

Answer:unable to remove sp2

Windows Security Centre does not monitor all brands of security software. If you have Sygate firewall installed and functioning then you should not need Windows Firewall as well. If you're waiting for your XP CD to arrive, then I'd just wait untill you reinstall - all should be OK then. Not being able to access Windows Firewall may be a side effect of your illegal copy of Windows.

10 more replies
Relevance 39.77%

I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.

Answer:unable to remove....

  
Quote: Originally Posted by terz


I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.


Have you checked "Device Manager" for any entries with an "!" mark. You may be able to delete any entry that relates to the Pinnacle program there, also.

HTH

5 more replies
Relevance 39.77%

Ran Hijack this per another members request, this is what was pulled, any suggestions? Thanks in advance!!!!BrianLogfile of HijackThis v1.99.1Scan saved at 2:12:06 PM, on 5/24/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYSC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\MI3AA1~1\wcescomm.exeC:\Documents and Settings\hodgson.POLTDESIGN\My Documents\T?sks\csrss.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\PROGRA~1\MI3AA1~1\rapimgr.exeC:\Program Files\HP\digital imaging\bin\hpq... Read more

Answer:Unable To Remove Pop-ups

Hello O-turn and welcome to BC My name is SNOWHITE and I will be helping you with your Malware problem.As I am still in training I will be helping you under supervision of our expert teachers, so there may be a delay between posts. I will be analyzing your log now, and be back with you as soon as possible!Regards,

25 more replies
Relevance 39.77%
Question: unable to remove

hello this is my first time on the site,i recently had winblue soft install itself on my system, the computer kept restarting by itself my dsl internet seemed to slow down, and to no avail could i get it to go away, each time i switched the computer on and went into "my computer" and went to open "c:\" threatfire would start a quarrantine process and log to unknow proceccs by removable drives, upon restarting i had no explorer bar or icons on the screen, the only way i could get the explorer bar back on the bottom of the screen was to click cntrol alt delete and run new task and open threatfire up from there and remove to 2 logs from quarrantine and restart, but the same thing happens everytime i go into "my compute" then c:\" the same thing would occur.i uninstalled winbluesoft with the uninstaller and then deleted the folder in "program folders"then searched the registry in regedit, and found 2 registry files with winbluesoft in the title, removed them, and after that winbluesoft never appeared again,while this was happening, i found that my internet explorer was not opertating properly, i would click on tools then windows update, and get taken to a dodgey google site with "www.windowsupdate.microsoft.com" still in the address bar. everytime i tried anything to do with an update connection or downloading an update on the windows site, it would come up with the page could not be connected, everytime i try to do... Read more

Answer:unable to remove

Topic closed at member's request as he/she has reformatted.

Orange Blossom

1 more replies
Relevance 39.77%
Question: unable to remove

Im trying to remove kazaa media desktop from my computer,but it not possible via add/remove because of...The system file cannot be specified ..Error loading C:\windows\system\cd-chnt.dll,and so any help would be appreciated,o/s is windows me .....
 

Answer:unable to remove

telecom69
The only way I know of to remove Kazaa now is to reinstall it over the top of itself and use the new add-remove programs entry in control panel.
After you have successfully uninstalled Kazaa run Ad-Aware 5.83 from http://housecall.antivirus.com/housecall/start_corp.asp and allow it to clean up any scraps left behind. Also review this website to make sure Brilliant is also removed properly.
http://news.com.com/2100-1023-875274.html

Dave
 

2 more replies
Relevance 39.77%
Question: Unable to remove

am asking this on behalf of a friend....had the problem myself, but I can't remember how I fixed it. When using Internet Explorer, if one goes to tools/options, you should be able to delete history,files and cookies. Try as hard as you like, some files will just not disappear. If I go to Control Panel , Internet and attempt to delete from there, same problem.
how to delete them
anitaa
 

Answer:Unable to remove

What version of Internet Explorer, 6.1, 7, or 8?
 

4 more replies
Relevance 39.77%

Hi I need help to remove 888, celldorado,adult friend finder and many others pop upI had tried to used spybot ,lava and clear all the cookies ,temporary files for the explorer but the problems still exist please help thank you.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:46:45 PM, on 11/4/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\system32\svchost.exeC... Read more

Answer:Unable To Remove Pop Up

Welcome to the BleepingComputer HijackThis Logs and Analysis forum seraya My name is Richie and i'll be helping you to fix your problems.The current formatting of your log makes it difficult to read/evaluate.Open 'Notepad',click on 'Format' at the top,then uncheck 'Word Wrap' if it's checked.If you have previously downloaded ComboFix,please delete that version now.Now download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop Close any open browsers.Disconnect from the Internet. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Do NOT post the ComboFix-quarantined-files.txt unless I ask.*NOTE*In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix,please disable your scanner and redownload Combofix again.Some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.Download Deljob.exe and save it on your desktop.Double click on Deljob.exe.A log,(logit.txt) should open afterwards. This log will be present on your desktop.Post the contents of the logfile into your next reply,along with a new Hijack This log.

1 more replies
Relevance 39.77%

My McAffe virus scan detected two PUPs that could not be deleted, cleaned or quarentined. I rebooted in safe mode and found seven PUPs that I deleted. However I still get a pop up whenever I start my computer and approximately every half hour or so after that. The pop says "powered by zedo' and this is the url:

http://c5.zedo.com/jsc/c5/ff2.html?n=350;c=585/6;s=363;d=16;w=720;h=300

I have run "Hijack This" and below I have attatched the log file. Can anyone help

Thanks
Pete
 

Answer:Unable to remove pop up

7 more replies
Relevance 39.77%

A friend of mine keeps getting a pop up from some sort of movie site stating his free trial is over and He needs to give his credit card info to continue the subscription. How can we keep this from coming up? Hopefully the below HiJack this log will help. thanks!!Logfile of HijackThis v1.99.1Scan saved at 9:19:14 PM, on 12/16/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\wltrysvc.exeC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exeC:\Program Files\Apoint\Apoint.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Dell�... Read more

Answer:Unable To Remove Pop Ups

Please click here http://www.majorgeeks.com/Sun_Java_Runtime...ment_d4648.html to download the latest version of JAVA Install the application, then go to the Add/Remove Programs options in the Control Panel and Remove ALL previous versions of JAVA.Add remove programs ? remove MyWay SearchYou may want to print this or save it to notepad as we will go to safe mode.Fix these with HiJackThis ? mark them, close IE, click fix checkedR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dllO4 - HKLM\..\Run: [MediaPipe P2P Loader] "C:\Program Files\p2pnetworks\mpp2pl.exe" /H O4 - HKCU\..\Run: [License Manager] "C:\Program Files\License_Manager\license_manager.exe " /silentDownLoad http://www.downloads.subratam.org/KillBox.zip orhttp://www.thespykiller.co.uk/files/killbox.exeRestart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a tim... Read more

4 more replies
Relevance 39.77%

I have been searching for a solution to solve the "Safe Remove" problem in Windows XP.It always happens whenever I try to safely remove any of my USB HDD regardless of brand-name using the safely remove hardware icon in the Taskbar.I get an error message: 'The device 'Generic volume' cannot be stopped because a program is still accessing it.' There are no programs accessing the drive as I only use it for storage. I have always to restart my PC before I can safely remove the USB HDD.I am sure most of you should ecounter this problem at least once in the past!So, anyone know how to eliminate this problem?

Answer:unable to remove the USB HDD

It may be your virus scanner or something else that is continually monitoring your hard drive.More details about what is loaded, etc. would be helpful.

3 more replies
Relevance 39.36%

Can someone help me remove this from my computer? I can't remove it via the add/remove programs in Windows 7. 

More replies
Relevance 39.36%

My first post everyone please be gentle

I am trying to change the ram on my nb100. I am unable to remove the old ram.
I have changed the ram on previous laptops without problem! tilt ram, remove, replace!
I am unable to tilt the ram to remove.

Grateful for any help thanks

Answer:NB100 - I am unable to remove the old ram

Its the same as any other laptop, pull away the side latches and the module will lift up.

If that doesn't work, the mechanism may be broken requiring repair at an ASP.

2 more replies
Relevance 39.36%

I have tried removing them with norton and malwarebytes but they keep coming back.
 
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\4.4.0.12\ccsvchst.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\4.4.0.12\ccsvchst.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java... Read more

Answer:Unable to remove several PUPs - Please help!

download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
You will be prompted to restart your computer. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.
 
download Junkware Removal Tool to your desktop.
Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.
Run the ESET Online Scanner.
Hold down Control and click on this link to open ESET OnlineScan in a new window.
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
Double click on the icon on your desktop.
Check "YES, I accept the Terms of Use."
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove ... Read more

15 more replies
Relevance 39.36%

I tried to follow the Prep Guide but was unable to get DDS to run
 
Logfile of random's system information tool 1.10 (written by random/random)
Run by Scott at 2014-12-18 23:52:28
Microsoft Windows 8.1 
System drive C: has 293 GB (77%) free of 381 GB
Total RAM: 8075 MB (79% free)
 
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:52:45 PM, on 12/18/2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Boot mode: Normal
 
Running processes:
C:\Program Files (x86)\Norton Security Suite\Engine\21.6.0.32\N360.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files\ASUS\ASUS Console\ASUS Console Starter.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files (x86)\Constant Guard Protection Suite\IDVault.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
C:\Program Files\Mic... Read more

Answer:Unable to remove Searchscopes and having some pop ups

Did you ask for assistance in GeeksToGo?

35 more replies
Relevance 39.36%

Hello from 1st time user, don't know how but I've managed to get a browser/virus called MyStart by Incredibar.com. Have tried everything to get rid of it but no luck. Tried removing Google (computer wouldn't let me), did a virus check (doesn't show), changed Google settings (no luck), visited YouTube and still no luck in getting rid of it. Uninstalled the programme but it still shows!!!
Anyone got any ideas as to how I get rid of this?confusedconfused
Cheers
Kiwi68
 

Answer:MyStartbyIncredibar - Unable To Remove

Welcome to Major Geeks!

Please follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.
 

7 more replies
Relevance 39.36%

Spybot S&D detects isearchtech but is unable to remove or fix it. I know this topic has been discussed in previous posts that I found when I searched, but I dont really understand any of them. I have done hijackthis and this is what popped up in the notepad:

Edit by chaslang: Unrequested, incomplete, inline log removed

If someone could help me out it would be greatly appreciated...I just don't know what to do and these popups are driving me crazy.

Thanks so much!!!
 

More replies
Relevance 39.36%

My computer seems to have a generic rootkit.d! rootkit trojan. This is what McAfee calls it when it comes up in scan results. McAfee says that 1 item is detected and 1 item is fixed, but the computer is still symptomatic. When searching in google, I click on a result and am redirected to another website. Website like move.com, advancequotes.com, gklife.com. When redirecting, it goes through several websites before stopping on one. I scanned my computer with both McAfee and Malware Bytes. Ad-Aware brought up the blue screen of death. It's the first time it has brought up that screen.

I'm running on Windows XP Home Edition on a Dell Dimension E520.
2 GB RAM
228 GB Hard drive
Intel Core™2
Service Pack 3
Windows Firewall
Firefox is my default browser

I'm including a Malware Bytes log.

------------------------------------------------------------------------------------------
Malwarebytes' Anti-Malware 1.31
Database version: 1475
Windows 5.1.2600 Service Pack 3

7/30/2009 6:34:43 PM
mbam-log-2009-07-30 (18-34-43).txt

Scan type: Full Scan (C:\|)
Objects scanned: 155682
Time elapsed: 30 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\S... Read more

Answer:Unable to remove rootkit

Hello and welcome!First your MBAM is very old...Rerun MBAM (MalwareBytes) like this:Open MBAM in normal mode and click Update tab, select Check for Updates,when doneclick Scanner tab,select Quick scan and scan.After scan click Remove Selected, Post new scan log and Reboot into normal mode.Next run RootRepealNext Please install RootRepealNote: Vista users ,, right click on desktop icon and select "Run as Administrator."Fatdcuk at Malwarebytes posted a comprehensive tutorial - Self Help guide can be found here if needed.: Malwarebytes Removal and Self Help Guides. Go HERE, and download RootRepeal.zip to your Desktop. Tutorial with images ,if needed >> [email protected]@K.Unzip that,(7-zip tool if needed) and then click RootRepeal.exe to open the scanner. Next click on the Report tab, now click on Scan. A Window will open asking what to include in the scan. Check all of the below and then click OK.DriversFilesProcesses Not this >>> SSDTStealth ObjectsHidden ServicesNow you'll be asked which drive to scan. Check C: and click OK again and the scan will start. Please be patient as the scan runs. When the scan has finished, click on Save Report. Name the log RootRepeal.txt and save it to your Documents folder (it should automatically save it there). Please copy and paste that into your next reply. Please note: If Rootrepeal fails to run, try this step: Click Settings - Options. Set the Disk Access slider to High

9 more replies
Relevance 39.36%

I am unable to delete this small (52 byte) file.
At first glance the name of the file is:
"Microsoft.Flight.Simulator.X.Deluxe.Serial-RAZOR1911", but when I look under properties the file is named:
"MICROS~1.EXE"

I am aware that I have brought this problem upon myself, but I would be gratefull for any help.

Regards

Answer:MICROS~1.EXE (unable to remove)

Hello aidan111

Try deleting it from Safe Mode

If that does not work try these free programs
MoveOnBoot
http://www.snapfiles.com/get/moveonboot.html

UNLOCKER
http://ccollomb.free.fr/unlocker/

FileASSASSIN
http://www.snapfiles.com/get/fileassassin.html

One of them should help you delete it

3 more replies
Relevance 39.36%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 16:52:58, on 05/05/2008Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\Ati2evxx.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\PROGRA~1\Compaq\COMPAQ~1\hibserv.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINNT\System32\NMSSvc.exeC:\WINNT\system32\regsvc.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINNT\system32\stisvc.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\system32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\svchost.exeC:\WINNT\Explorer.EXEC:\WINNT\system32\PRPCUI.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Compa... Read more

Answer:Unable To Remove "trojansc.sbi"

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computer http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.Have a look here: http://forums.spybot.info/showthread.php?t=14869If that is not what you are looking for, try posting Spybot S&D questions here:http://forums.spybot.info/forumdisplay.php?f=4 For other issues, please read and follow the directions posted above and pinned to the top of the forum.ThanksIf your issue is resolved, post to let me know so I can close your topic.

2 more replies
Relevance 39.36%

I have a PC with Windows 8.1 operating system. I have malware that I am unable to remove.
 
Background: The PC is used by my 10 yr old son for Minecraft. I suspect he sought out a mod to download and clicked where he should not have, all the warnings about downloading without dad being around.
 
Symptoms: Unwanted ads pop up at the lower right corner of the screen. They can be closed clicking the X with no issue. They will reappear randomly every 10 minutes or so. I will receive pop up notifications courtesy of Malwarebytes Anti Malware in the same area that provide me with the following warning:
 
KDV.decipheringwarns.com
38.134.106.126
Port 51456
Outbound
 
or 
 
adnetworkperformance.com
130.211.186.109
Port 51763
Outbound
 
Steps taken:
Ran Malwarebytes program with updated database. Removed over 370 items. Issue remained, but not as extensive. I have some logs generated that may be helpful - see below
 
Reviewed previous assistance from LoPhat at Gladiator a couple of years ago when he helped me remove Shopping Assistant and ran the following thinking that those programs may help:
 
Ran Adware Cleaner - See Log posted below
Ran Junk Removal Tool - see log posted below
 
The pop ups and notifications still persist. 
 
Any help to remove the remaining pieces would be greatly appreciated.
 
 Malwarebytes Anti-Malware
www.malwarebytes.org
 
 
Update, 2016-11-02 3:48 PM, SYSTEM, GAMING-PC, Schedule... Read more

More replies
Relevance 39.36%

Hello,

I am trying to correct issues with a friends system. AVG is his Anti-Virus software and he has Windows Defender and Super Anti-Spyware loaded also. When I received the machine the AVG indicated two files; CP1041.nls as a "Trojan Horse Spam Tool.VH" and Kernel32.dll as "Changed". I have tried just about everything listed in the forum related to turning off System Restore, re-running Super Anti-Spyware and then re-enabling System Restore. Everything appears to regenerate after rebooting. Attached is the latest HighJackThis log for examination.

Thanks in advance for any help.
 

Answer:Unable to Remove Malware

Hello nriacone and welcome to TSG. For future reference, just copy and paste the contents of the reports in your replies. Easier then uploading the file, then we need to download it to
view it.

Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.

Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to Clipboard ready for posting back on the forum).
Finally paste the contents of the Report.txt back on the forum with a new HijackThis lo... Read more

1 more replies
Relevance 39.36%

I discovered that my laptop used much more cpu/ram than it used to so I had a virus check up on MSE and found
this :VirTool:Win32/Obfuscator.XZ.

I tried to remove it without success can someone please help me?
 

Answer:Unable to remove a virus please help

16 more replies
Relevance 39.36%

I've run Spybot S&D and Spysweeper and it persists.

Any help would be greatly appreciated.

Thanks,

-- Mark --
 

Answer:Unable to remove nCase

13 more replies
Relevance 39.36%

Hey, first of all i apologize for the length of this post but i think the more info given the easier it would be for someone here to pinpoint the problem? upon the desktop opening after a boot i always get the the following error message, ClympO4aDyy3mA....(it goes on a bit further) has stopped responding and in the problem details section it says:

C:\Users\dee\AppData\Local\Temp\WER195F.tmp.version.txt
C:\Users\dee\AppData\Local\Temp\WER2E7E.tmp.appcompat.txt
C:\Users\dee\AppData\Local\Temp\WER2E7F.tmp.mdmp

this never happened up untill i got this trojan.

AVG gives the following report:

"C:\Windows\System32\msnet\server.exe (3012):\memory_00400000";"Trojan horse Generic14.CCKX";"Reboot is required to finish the action"
"C:\Windows\System32\msnet\server.exe (3012)";"Trojan horse Generic14.CCKX";"Reboot is required to finish the action"

but after a reboot and a rescan the virus remains there...

The Server.exe process once ended in task manager stays gone but always comes back after a reboot, i tried opening the file location and deleting the exe file there but again always comes back after a reboot.

I also tried Spybot S&D but that didnt find anything but a bunch of cookies, since this infection my pc boot up has slowed down considerably and especially firefox takes ages opening, it hangs for about 2 minutes before becoming useable. The hardrive is also constantly busy doing something which... Read more

Answer:unable to remove trojan

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

1 more replies
Relevance 39.36%

Hello,

Unfortunately, malware has infused itself into my system:
XP Home, SP3, up-to-date, dual proc, 4GB RAM (I know - XP cannot take advantage of it all).

Initial symptoms:
csrss.exe would occupy both processors.

Suspicion:
Infected when opening a spoofed website with IE8 (also up-to-date).
Known malware files/folders:
WINDOWS/system32/2251727459.dat
WINDOWS/Temp/pdk-SYSTEM/

The above return when deleted with Administrator account, unable to delete with user/admin account.

Other attempts:
1. With Adminstrator account, remove all access to 2251727459.dat. Result: window with focus border flashes many times/second, a dos prompt appears in task bar for each flash (thus difficult to read) with title of "c:WINDOWS/system 32", mouse primary button does not perform as expected (suspect event is being intercepted), and machine is pretty much unusable.
2. With Adminstrator account, restore access to 2251727459.dat and remove all access to WINDOWS/Temp/pdk-SYSTEM/. None of the symptoms appear as described in 1. Appears to be extraneous disk access.
Current situation:
As described in 2., above.

Suggestions?

More replies
Relevance 39.36%

After I run a scan with Spybot Search and Destroy, everything except "Log" is cleared. How do I remove "Log"?

Answer:Unable to remove "Log" with Spybot S and D

click tools / click view report / click clean out old reports.

1 more replies
Relevance 39.36%

Hi

First thank you for having such a forum for the technically challenged as myself.
Yesterday my AVG alerted to a trojan. I isolated them in the vault because it said they
were embedded and could not be deleted. The next scan showed none found. The computer was slower. Has blank windows popping up all the time.
I attempted to delete them manually which was probably not the best move because
I think I deleted things that I might have needed.
Any help you can give me will be deeply appreciated.
I am trying to avoid reformat as I
am Area Director for Arizona and Nevada for an organization that matches uid
deceased persons to missing persons and the work that would be lost is
devastating.

Thanks

Logfile of HijackThis v1.99.1
Scan saved at 9:12:36 PM, on 7/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe... Read more

More replies
Relevance 39.36%

Hi, i had read up on
http://forums.techguy.org/security/556307-need-help-removing-can-not.html
http://forums.techguy.org/security/551431-solved-autorun-vbs-bat-problem.html
http://forums.techguy.org/malware-removal-hijackthis-logs/556776-autorun-vbs.html

but my case is a bit different as i cannot find any wscript at the process. And i had manually del the autorun.* files which its keep on coming back after i had deleted them.

here is my info on the autorun.vbs:

http:[email protected]/1359854499/
http:[email protected]/1359854951/
http:[email protected]/1359855203/

here is my HijackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:30:21 PM, on 11/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Fil... Read more

Answer:Unable to Remove Autorun.vbs

Is there anyone can help me? Or i just try one of the method by those link i copy on top?

Thanks
 

2 more replies
Relevance 39.36%

Hi, I have been trying to remove this cws swapx all day. When I follow the steps of the tutorial, the random named dll (020) file just keeps coming back no matter what I do. I have deleted it in safe mode, in recovery console, using killbox over and over, but it just comes back. Here is my log. If somebody could help me out, that would be great. Logfile of HijackThis v1.98.0Scan saved at 12:47:24 PM, on 11/24/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\hkcmd.exeC:\WINDOWS\System32\pctspk.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Dell\QuickSet\quickset.exeC:\Program Files\McAfee.com\Agent\mcagent.exeC:\Program Files\Common Files\Dell\EUSW\Support.exeC:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exeC:\WINDOWS\System32\hphmon04.exeC:\Program Files\Hewlett-Packard\HP Share-to-W... Read more

Answer:unable to remove, help appreciated

Go here to download the free version of Grisoft's AVG AntiVirus program. Install the program, check for updates and scan your system allowing it to remove whatever it finds.Make sure that you have no browser windows open as this could prevent the fix from working properly. Open HijackThis, scan and when complete, remove the following entries by checking the box to the left and clicking 'fixed checked':R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://win-eto.com/hp.htm?id=9O2 - BHO: (no name) - {467FAEB2-5F5B-4c81-BAE0-2A4752CA7F4E} - C:\WINDOWS\System32\W8C6S4~2.DLL (file missing)O20 - AppInit_DLLs: w8c6s4xcm66s.dllClick on Config then click on Misc Tools. At the new screen click on the "Delete a file on reboot" button. You will be presented with a dialog asking you to pick a file. Copy and paste C:\WINDOWS\System32\w8c6s4xcm66s.dllinto the file name field and press the open button.Hijackthis will prompt you to reboot, please do so. Rescan with HJT and post a new log here for a final check over.

1 more replies
Relevance 39.36%

Hello, I have been trying for the past few days to remove CoolWWWSearch.Cameup and CoolWWWSearch.Toolband, since it has been giving me random popups to sites, from my computer when I came across Hijack this. Here is my report! Oh, I am not sure if this is related, but I have been getting blue screen crashes rather frequently, I have had two this week alone, as well as video drivers becoming unresponsive while I am playing a game. My school requires me to use Sophos, but the searches are always coming up blank. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:30:40 AM, on 7/25/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Windows\System32\TpShocks.exeC:\Program Files\ThinkPad\Utilities\EZEJMNAP.EXEC:\Windows\System32\rundll32.exeC:\Program Files\Lenovo\AwayTask\AwaySch.EXEC:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXEC:\Program Files\ThinkVantage\PrdCtr\LPMLCHK.EXEC:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exeC:\Progr... Read more

Answer:Spybot Unable To Remove

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

6 more replies
Relevance 39.36%

A couple of months ago Notepad began closing after a few minutes of me using it, a popup would say something to the effect that Notepad needs to close because a malicious program is trying to use it. I did a full scan with MSE and it found a bunch of trojans which I proceeded to remove. I did a full scan again and my computer came up clean but when I turned the computer on later MSE was giving a warning that there's a virus which I again removed, did a full scan and MSE found nothing, but again on reboot the same thing happened. I removed it again, did several full scans and my computer came up clean even after rebooting.

So I thought the virus was gone, but a few days ago I noticed that some links I clicked in Google are redirected to another site. I did a full scan with MSE and this time it found a Java exploit (java/CVE-1202-1723.OA), I removed it, did a full scan and MSE didn't find anything but I continued to be redirected in Google. I downloaded Malwarebytes and it found 2 trojans which I removed, did a full scan with Malwarebytes then with MSE and both found nothing but some Google links were still being redirected. I tried Avast and Gmer and they too did not find anything.

So what do I do now? I now I got something on the computer but don't know what or how to get rid of it.

Answer:Unable to find and remove

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

15 more replies
Relevance 39.36%

Hi, I have a few problems with my computer that I have spent days trying to resolve, but couldn't

The problems are as described:
1) Windows Live Messenger would hang, with a popout appearing later with a message that says something to the effect of "Windows Live Messenger has stopped working". I have tried resolving this problem by using the tools provided by Control Panel, to no avail. The problem still persists.

2) 2) Windows Live Messenger also sends links like http://5.gp/N without my knowledge to random contacts.

I have tried the following for the past few days:
1) I did a full scan using Norton Internet Security (trial version). A virus and a tracking cookie were detected. But it did not solve my problems
2) I did a full scan Malwarebyes Anti-malware. Trojan.Agent was detected. It was impossible to remove; it kept getting detected on subsequent scans by mbam

Here is the contents of my logfile:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:54:16 PM, on 12/9/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Program Files\Norton Internet Security\Engine\16.7.2.11

\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\Mouse Driver\StartAutorun.exe
C:\Program Files\iTunes\iTunesHe... Read more

Answer:Help - Unable to remove malware

post teh MBAM report & rthen

Delete any existing version of ComboFix you have sitting on your desktop
Please read and follow all these instructions very carefully​
Download ComboFix from Here to your Desktop.

**Note: It is important that it is saved directly to your desktop and run from the desktop and not any other folder on your computer**
--------------------------------------------------------------------
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Very Important! Temporarily disable your anti-virus and anti-malware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results" or stop combofix running at all
Click on THIS LINK to see instructions on how to temporarily disable many security programs while running combofix. The list does not cover every program. If yours is not listed and you don't know how to disable it, please ask.
Remember to re enable the protection again after combofix has finished
--------------------------------------------------------------------
2. Close any open browsers and any other programs you might have running
Double click on combofix.exe & follow the prompts.​If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to i... Read more

1 more replies
Relevance 39.36%

I'm Using Avira and Malware bytes, They can't seem to get rid of this persistent virus.Every 5-10mins while browsing the net I am receiving a warning on Avira that I'm infected with thisC:\Windows\System32\x.exe. I even reformatted my system, thinking that it will get rid the virus totally but it keeps on coming back. I even use combofix but to no avail, Pls help me. Thanks(Moderator edit: post moved to more appropriate forum.jgw)

Answer:unable to remove x.exe virus

With the information you have provided I believe you will need help from the malware removal team. Please make sure that you read the information about getting started first.Then start a new thread HERE and include or required logs.Including a link to this thread will be helpful. Good luck and be patient. Help is on the way!

1 more replies
Relevance 39.36%

Complete noob. Having trouble with "system security" software, cannot remove it or the links attached. Dosent appear in the add or remove programs list, and website states the removal option has been disabled. Help me please? :-o
 

Answer:unable to remove programs

Not entirely sure what you are trying to uninstall and even if it SHOULD be uninstalled. You'll need to give further details to determine that if you are unsure, such as its full name and what it does etc.

If you feel confident with its removal try this http://majorgeeks.com/Revo_Uninstaller_d5706.html
 

1 more replies
Relevance 39.36%

Hi
I need help urgently. Got this spyware called Trojan Vundo or something else. I get all these ads poping up including winantivirus, yahoo with rogers and others. I searched the web for solutions and i followed them but no success as those ads are still poping up. (one of the solution was to use the program called Roguefix). Anyway i just did a hijack. Can you have a look for me please. Much appreciated with ur help.


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 12:29:19 PM, on 5/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Google\Google Talk\... Read more

Answer:Unable to remove those nasty ads

Hello and welcome to TSF

Please download ComboFix

Note: It is important that it is saved directly to your desktop.

Close all browsers. Double click combofix.exe & follow the prompts.
When finished, it will produce a log for you. Post that log in your next reply
Note: Do not mouseclick combofix's window while it's running. That may cause it to stall.

===============================

You are using a beta version of HijackThis. Remove HijackThis v.2.0.0 using Add/Remove Programs in Control Panel.

You can get a complete installer that installs HijackThis to C:\Program Files\HijackThis, making an entry in the start menu and also providing a desktop shortcut from here.

Click on the link and select Save, save it to your desktop and double click HJTsetup.exe.

Open HijackThis and select: Do a system scan and save a log file.

When the scan is finished, Click Edit> Select All> Edit> Copy> and paste its contents here.

17 more replies
Relevance 39.36%

I installed Adobe Flash Player which came embedded with dosearches. This is now my home page in IE10, Firefox & Chrome. I tried running all the steps in your blog to remove dosearches. They failed. I have now registered here in desperation. NB: We have three accounts on our computer & the problem is only on my account, not my husband's our daughter's.
 

Answer:Unable to remove dosearches

Hi and welcome to the MalwareTips.com forums!

I'm Kuttus and I am going to try to assist you with your problem. Please take note of the below:

I will start working on your malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for this issue on this machine!
The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Refrain from running self fixes as this will hinder the malware removal process.
It may prove beneficial if you print of the following instructions or save them to notepad as I post them.
Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
Before we start:
Please be aware that removing malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to nece... Read more

3 more replies
Relevance 39.36%

hi
I have tried by all means to remove a toolbar from my browsers but it wont go

"mystartsearch"

it has taken over all my browsers IE firefox and chrome

tried all the instructions but no avail
any suggestions

Regards

Answer:unable to remove a toolbar

HitmanPro 3 (64-bit) - Free download and software reviews - CNET Download.com

AdwCleaner - Free download and software reviews - CNET Download.com
Download and run one of the above. I prefer hitman pro.

2 more replies
Relevance 39.36%

i tried to clean the reg/doshye virus by the steps in the forum, i downloaded combofix and then ran it....after running combofix i thought that the virus would have been removed but when i again scanned it there is a virus in C:/qoobox/quarantine/c/dup2....i again ran combofix ...but still the virus is there itself ...HELP...wanna remove this virus... i had this problem earlier and couldnot remove the virus at that time and my com got infected this time too the same thing has happened... please help...

ComboFix 08-02.01.5 - xyz 2008-02-01 13:54:16.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.177 [GMT 5.5:30]
Running from: C:\Documents and Settings\xyz\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-01-01 to 2008-02-01 )))))))))))))))))))))))))))))))
.

2008-02-01 13:25 . 2008-02-01 13:25 <DIR> d-------- C:\Documents and Settings\NetworkService.NT AUTHORITY\Application Data\Intel
2008-01-31 22:03 . 2008-01-31 22:03 <DIR> d---s---- C:\Documents and Settings\xyz\UserData
2008-01-29 13:20 . 2008-01-29 13:20 <DIR> d-------- C:\Documents and Settings\xyz\Application Data\Corel
2008-01-29 13:20 . 2008-01-29 13:28 394 --a------ C:\WIN\capture.ini
2008-01-29 13:15 . 2008-01-29 22:35 69 --a------ C:\WIN\NeroDigital.ini
2008-01-29 13:12 . 2008-01-29 13:12 <DIR> d-------- C:\Program Files\Common Files\Corel
2008-01-29 13:11... Read more

Answer:reg/doshye unable to remove please help

ComboFix should not be run unless directed to by an experienced helper. Do not run ComboFix again unless directed.

Qoobox is ComboFix quarantine.

Go to Start > Run and copy/paste the following, then press Enter:

C:\Qoobox\ComboFix2.txt

A text file will open. Post that in your next reply.

Also do this:

Please do this:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also insta... Read more

1 more replies
Relevance 39.36%

Hi,

My anti-virus is unable to remove some viruses that it has found in my computer. Could you please help me locating them?

Thanks in advance!!


Logfile of HijackThis v1.99.1
Scan saved at 18:42:01, on 05/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Arquivos de programas\Roxio\GoBack\GBPoll.exe
C:\ARQUIV~1\NORTON~2\NORTON~2\GHOSTS~2.EXE
C:\Arquivos de programas\Arquivos comuns\Microsoft Shared\VS7Debug\mdm.exe
C:\Arquivos de programas\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Arquivos de programas\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\ARQUIV~1\NORTON~2\SPEEDD~1\nopdb.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\Arquivos de programas\Arquivos comuns\Real\Update_OB\realsched.exe
C:\Arquivos de programas\Arquivos comuns\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Arquivos de programas\iTunes\iTunesHelper.exe
C:\Arquivos de programas\QuickTime\qttask.exe
C:\Arquivos de programas\Java\jre1.5.0_03\bin\jusched.exe
C:\Arquivos de programas\iPod\bin\iPodService.exe
C:\W... Read more

Answer:Please Help! Unable to remove virus

6 more replies
Relevance 39.36%

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 7912 Mb
Graphics Card: Intel(R) HD Graphics Family, -139 Mb
Hard Drives: C: Total - 99899 MB, Free - 6821 MB; D: Total - 199999 MB, Free - 125763 MB; E: Total - 176937 MB, Free - 31018 MB;
Motherboard: ASRock, H61M/U3S3
Antivirus: Microsoft Security Essentials, Updated and Enabled
Hi, I am unable to remove Omiga Plus adware in the Add & Remove and running Malwarebytes Anti malware. Need expert help from here. Thanks .
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:06:48 PM, on 2/11/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\WordWeb\wweb32.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXP... Read more

Answer:Unable to remove adware

16 more replies
Relevance 39.36%

Since using Internet Explorer in order to download som dotnetfx from MSoft I have been plagued with a popup from http://professionalscan.c*m.
I use FireFox for absolutely everything else.
The automatic update for windows is being turned off.
I run Nod32 which is updated several times a day, Trojan Remover, also up to date and Look'n'Stop Firewall.

Nod finds win32 Kryptik on a regular basis.

Trjan Scanner finds VirtuMonde which seems to be acting with ie Explorer. I follow all the proceedures that TR asks for but to no avail.
I hope someone can help so I may avoid a format and all the attached hassle.
Here is my HJT Log

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:09:15, on 17.11.2008
Platform: Windows XP SP3, v.5657 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Google\Google Talk\googletalk.exe
D:\Program Files\FlashGet\flashget.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Everything\Everything.exe
C:\Progra... Read more

More replies
Relevance 39.36%

I have just uploaded the free version of SuperAntiSpyware, but unfortunately pressed the wrong tab and got the pro trial version, which I didn't want. But when I've tried to delete the download and start again, it won't let me. A big box appears telling me this isn't possible. Can anyone help.
 

Answer:Unable to remove SuperAntiSpyware

8 more replies
Relevance 39.36%

I have a PC with Windows 8.1 operating system. I have malware that I am unable to remove.
 
Background: The PC is used by my 10 yr old son for Minecraft. I suspect he sought out a mod to download and clicked where he should not have, all the warnings about downloading without dad being around.
 
Symptoms: Unwanted ads pop up at the lower right corner of the screen. They can be closed clicking the X with no issue. They will reappear randomly every 10 minutes or so. I will receive pop up notifications courtesy of Malwarebytes Anti Malware in the same area that provide me with the following warning:
 
KDV.decipheringwarns.com
38.134.106.126
Port 51456
Outbound
 
or 
 
adnetworkperformance.com
130.211.186.109
Port 51763
Outbound
 
Steps taken:
Ran Malwarebytes program with updated database. Removed over 370 items. Issue remained, but not as extensive. I have some logs generated that may be helpful - see below
 
Reviewed previous assistance from LoPhat at Gladiator a couple of years ago when he helped me remove Shopping Assistant and ran the following thinking that those programs may help:
 
Ran Adware Cleaner - See Log posted below
Ran Junk Removal Tool - see log posted below
 
The pop ups and notifications still persist. 
 
Any help to remove the remaining pieces would be greatly appreciated.
 
 Malwarebytes Anti-Malware
www.malwarebytes.org
 
 
Update, 2016-11-02 3:48 PM, SYSTEM, GAMING-PC, Schedule... Read more

Answer:Malware - unable to remove

Hello, Run RKill, now before any reboot run a MALWAREBYTES scanPlease download Rkill by Grinler and save it to your desktop.Link 1Link 2Double-click on the Rkill desktop icon to run the tool.If using Vista/Windows7, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.Do not reboot the computer, you will need to run the application again.ESET Online ScannerClick here to download the installer for ESET Online Scanner and save it to your Desktop.Disable all your antivirus and antimalware software - see how to do that here.Right click on esetsmartinstaller_enu.exe and select Run as Administrator.Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.Select Enable detection of potentially unwanted applications.Click Advanced Settings, then place a checkmark in the following:Remove found threatsScan archivesScan for potentially unsafe applicationsEnable Anti-Stealth technologyClick Start to begin scanning.ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.When the scan is done, click List threats... Read more

7 more replies
Relevance 39.36%

I have tried everything to remove this stupid programme and nothing is working. When i try to uninstall i get the following error. Installer initialization failed due to following error: Error: @AvgErrorCode_0x0253 %FILE% = "C:\Program Files\AVG\AVG8" @AvgErrorCode_0x0020I have tried the remover tool and also hundreds of clear up tools and nothing is working. SOMEONE PLEASE HELP :o)

Answer:Unable to remove AVG 8.5 from my programmes

WOW... 100's of clean up tools, that's alot.Try revo uninstaller and it will also clean out all the registry entries of AVG.Then I would suggest Avast free, much better real-time protection and no scheduled scans needed.If you had Norton or McAfee installed before trying AVG, be sure to get the uninstallers from their respective websites...add/remove leaves all kinds of trash in the registry.Some HELP in posting on Computing.net plus free progs and instructions Cheers

7 more replies
Relevance 39.36%

I have gone through all of the steps to the best of my ability. I followed the steps all the way. I downloaded Hijack This and performed a first scan. The problems are removed then they return. The first registry entry keeps changing. It then loads more BHO and DPF's. Can you please help?
 

Answer:unable to completely remove lop.com

HiJack This works right if you follow the directions correctly.

Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post)
 

4 more replies
Relevance 39.36%

Today a scan with spybot s&d showed numerous entries of mywebsearch, but was unable to remove them. I have uninstalled the program, and deleted any file that I can find relating to it, but spybot still comes up with entries, and still cannot remove them. Anyone able to help?

Answer:Unable to remove mywebsearch

Try using Malwarebytes instead."I've always been mad, I know I've been mad, like the most of us..."

4 more replies
Relevance 39.36%

Hello I've been told to move here.
 
Here my topic  http://www.bleepingcomputer.com/forums/t/505874/my-pc-maybe-infected/
 
 
DDS Logs:
 

DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 7/15/2010 1:24:18 PM
System Uptime: 8/28/2013 3:07:10 PM (2 hours ago)
.
Motherboard: Dell Inc. |  | 0TP406
Processor: Intel® Core™2 Quad CPU    Q6600  @ 2.40GHz | CPU | 2394/1066mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 466 GiB total, 331.692 GiB free.
D: is FIXED (NTFS) - 283 GiB total, 206.329 GiB free.
E: is CDROM ()
F: is FIXED (NTFS) - 15 GiB total, 5.052 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
 Update for Microsoft Office 2007 (KB2508958)
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.4)
AIM 7
AMD APP SDK Runtime
AMD Catalyst Install Manager
ANIWZCS2 Service
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVG 2013
AVG PC TuneUp
AVG PC TuneUp Language Pack (en-US)
Bandisoft MPEG-1 Decoder
Bigasoft Total Video Converter 3.7.6.4626
Bonjour
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
ccc-utility
CCC Help English
CCleaner
D-Lin... Read more

Answer:Unable to remove Virus

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/505965 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

18 more replies
Relevance 39.36%

After a couple weeks of frustration, I deleted my partition in order to start fresh. I moved all of my music files and a couple folders to a different computer and then reloaded them onto this computer. It was roughly 1500 files - mostly music, a few essays, and a couple pictures. Kind of assumed the likelihood of these being the issue was minimal. So I move all the files back, download winamp, steam, firefox, the virus protection that came with the computer, and spybot search and destroy. Spyboy S & D still comes up with the same spyware results. I delete them, restart my computer, and there they are again. Zedo is one of the things I delete on a regular basis. I think I had a trojan that I thought I got rid of, but i guess there is must still be a presence on my PC? Is it possible for it to stick around even though I deleted the partition? Is it probably an issue with the files I saved?

I'm not sure what else to say. Here is the log as requested.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:31:35 PM, on 11/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.e... Read more

Answer:Unable to remove spyware

I love you long time for help?
 

1 more replies
Relevance 39.36%

My AVG scan hass picked up a trojan - however i have been unable to delete the infection as it's size is too big! - it did say it has moved it to the vault...what can i do to get rid of it!?thanks

Answer:Unable to remove trojan

delete it from the vault, scan again, see if all is clear.

4 more replies
Relevance 39.36%

a while ago i tried to pirate a program from pirate bay. only time ive ever used and i am still receiving adware from it. I am stuck with the "Protectio.search.com" virus. i have been searching endlessly for a solution. i have tried 3 different adware removers, deleted it through my registry, chrome, task manager, task scheduler, and it STILL shows up. and when it doesnt show up i get redirected to pirate bay whenever i search something. i badly need to get rid of this virus and need help!!!

Answer:Tried everything, unable to remove Malware

hi,
 
Need to see a FRST log as a starting point. You can download and post a FRST log by reading step 6 at the link below, then we will go from there:
 
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/

9 more replies
Relevance 39.36%

I can't remove it and it keeps getting infected every 20 seconds by TrojanhorseCryptic.AXV

Any suggestions?

Also do you have any suggestions on how to get round error 1935 from failed install microsoft office 2007?

Thanks.
 

More replies
Relevance 39.36%

I run Win7.During an AVG scan it turned up a threat called MalSign.Generic.834.However,AVG was unable to remove it as the threat repeatedly replicated itself.
Has anyone come across this threat and if so how is it removed permanently?

Answer:Unable to remove a threat

I had a similar problem. They are called a PUP.I could not remove it. I got on to Norton and they took over my computer and removed it. It meant going into the registry.I was impressed.

2 more replies
Relevance 39.36%

Windows XP SP3 on a PC
Yesterday I removed AVG Free using Revo Uninstaller but I had to do a System Restore today and when I used my add/delete programs, even though it shows the AVG as there when I click remove nothing happens.
When I click the uninstall button in my Start list nothing happens.
I've had Revo working for about 30 minutes and it is also unable to get the uninstaller to work.

So - did I remove it or not? I want to know for certain because I am now using Avast and I don't want both of them working.

Is there a way to de-activate AVG if I'm unable to remove it?

Thanks!
 

Answer:Unable to remove AVG Free

16 more replies
Relevance 39.36%

I downloaded the Avast 7.0 Internet Security program onto my desktop. I am unable to remove it as it states I need permission from the computer's administrator to make changes to this file.

I am the only user on this computer. Under the User accounts section (Windows 7), I see that I am the administrator as well.
 

Answer:Unable to remove a program

Do you have an uninstaller for that program? If so, right-click on it and select 'Run as Administrator'.
 

4 more replies
Relevance 39.36%

HI, I unable to remove a virus from my computer. Norton detected the virus but access was denied. How can I remove a virus when acces is denied?
Here are the virus s detected : ieaclu.exe and mgmdeps.exe. Can someone please help me on this matter? thank you.

grenudo

Answer:unable to remove a virus

Please download HijackThis - this program will help us determine if there are any spyware/malware on your computer. Create a folder at C:\HJT and move HijackThis.exe there. Double click on the program to run it.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Get HijackThis Analyzer and save it to the same folder as the hijackthis.log file. Run HijackThis Analyzer and type in y if you agree. The result.txt file will open up in Notepad. Copy the whole result.txt log and post it in the forum. We do not need the original hijackthis.log (unless we ask for it). Do not fix anything in HijackThis since they may be harmless.

8 more replies
Relevance 39.36%

Hi folks.

My old dad didn't use a computer until after he retired, as a result he seems incapable of not installing every piece of adware nonsense that comes across his desktop. Normally I'm able to remove all the spyware, however this time I've failed.

I've been trying to sort this PC out for the past couple of days, but I can't seem to get hold of the infection. As a result I can only clear up some of the symptoms, and it of course simply replaces them.

I've found SuperAntiSpyware to be effective in the past, however this time it doesn't quite do it all. I did have the free AVG installed, it picked up nothing. I upgraded to the free trial, and again it picked up nothing - that was the final nail in the coffin for AVG so it's gone.

I've removed all Java installations, and installed the latest one.

I've removed all the Apple/Adobe software.

He had Desktop Weather from the Weather Channel installed, which came with a package of Adware, probably not the payload that caused this problem, however it's gone now too, and I've installed a much cleaner alternative.

I've also run CCleaner to reduce the time scans and so forth take.

I'd appreciate any advice on solving this issue, and I thank anyone for their time.

I've installed Checkpoint's ZoneAlarm, to attempt to put some sort of barrier up to prevent the malware snowballing and adding more components.

I thought I'd check for rootkits as well, so I've run Panda's anti-rootkit, but found nothing.

I've also run Malwarebyte... Read more

Answer:Unable to remove malware

Just in case these are useful, please find attached some additional logs.

3 more replies