Computer Support Forum

Unable to remove CD Drive (Z:)

Question: Unable to remove CD Drive (Z:)

Greetings, Nothinglynothing here. I need some help with the removal of CD Drive (Z
It only appeared after I accidentally downloaded a bunch of virus from a website. I managed to clear out all the virus but I cant seem to find the way to delete this CD Drive. From my searches, I think this CD Drive might be some kind of Virtual Hard Disk (VHD). I am not sure about it though. Hope someone can help me with it. Thanks in advance.

More replies
Relevance 52.48%

Last week i bought an Mp3 player, which can also be used as a flash drive/ USB Mass Storage, Last Night I loaded a video onto it to transfer it to another PC, i deleted all of the music off it so that the video would fit on, But After i had finished transfering the video over onto the other PC, I could not delete the video off my MP3 Player! it fills almost all of the room (512mb) on the Mp3, so i cannot put any of my music on it.

When I try to delete the file it comes up the an error message that the file is being used by another person or program, even though i am not using any programs with the USB drive. It never used to do this when i just had mp3s on it, so what has gone wrong?

Any help will be appriciated, Thank you
 

Answer:Unable to Remove Data From Flash Drive?!!!!??? Please Help!!

I Forgot to mention that my opperating system is windows XP.

I can put other files onto the Drive, and take them off again, just i cant remove the goddam video taht takes up all the memory. PLEASE Help getting flustrated with the fact that i only bought it last week and its already srewed up.

I have tryed to format it, however a similar error message is displayed about the drive currently being in use, however it diesnt do it with any other files that i can put on.
:dead:
Please Help Before i get the hammer out....... :knock:
 

6 more replies
Relevance 52.48%

unable to remove autorun.inf from flash drive
hi,
last weekend i found autorun.inf (i suspect a virus) in my pen drive, and my antivirus mcafee unable to detect it, though i update it daily.

whenever i delete it manually, it got deleted but it reappears when i eject and plug in my flash drive again.

plz if any one cud suggest me sum measure.
thanks in advance.


with regards,
SHUBHAM GORE

Answer:unable to remove autorun.inf from flash drive

ALKOHOLU


this folder, always reside in my usb drive , though i format it frequently.
CAN any one could give me some information to remove this recursive virus.

2 more replies
Relevance 52.48%

A friend brought a computer over for me to see what is wrong with her DVD drive. The drive isn't working at all but I can't figure this case out. I took the screws out but it won't come out the back at all....moves about an inch. Any suggestions?? I have looked on their website but found nothing. Thanks in advance for any advice.
 

More replies
Relevance 52.48%

Hi all,
Please can somebody help me, I've a relatively new SanDisk Cruzer Slice 64GB USB pen drive, which I use for work mainly. It has somehow managed to write protect itself and no matter what I do I simply cannot remove it!

I've scanned with Antivirus, nothing found

I've tried regedit - Computer\HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\StorageDevicePolicies

StorageDevicePolices didn't exist so I created a 32 bit Dword string, set to 0 this hasn't done anything

I've tried Diskpart as administrator -
DISKPART> list disk
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 298 GB 1024 KB
Disk 1 Online 59 GB 0 B
DISKPART> select disk 1
Disk 1 is now the selected disk.
DISKPART> attributes disk clear readonly
Disk attributes cleared successfully.
DISKPART> clean
DiskPart has encountered an error: The request could not be performed because of
an I/O device error.
See the System Event Log for more information.

I've checked the logs and it doesn't seem to list anything for the drive

Answer:USB Drive Write Protected itself, unable to remove

How is the disk formatted? FAT32 (I believe the default, could be wrong) or NTFS?

If it's FAT32, and you are trying to copy a file larger than 4GB, then it's not going to let you write to it due to the limitations of FAT32. You would have to re-format the disk to NTFS.

It also could be possible that the disk became corrupted during a write operation (ie., not using "remove") in the system tray when unplugging the drive from the computer...

Copy whatever files you currently have on the disk to your HD for temporary safekeeping and format the disk again.

Also, what version of Windows are you using? Is it the Professional version or Home version? Are you using, or did use, bitlocker on this machine? Or a TPM? If you did, bitlocker automatically changes some policies to read only for removeable drives, and if you have Windows 8 Pro, we can go in a fix that throught the group policy editor.

3 more replies
Relevance 51.66%

Hey guys I have a question involving an external hard drive and windows 7 libraries. I have this external hard drive (WD500GB My book) which has all my backup information (as per Windows Backup feature; great stuff) as well as all my music and movies. I really like the idea of using libraries to list all the music and movies from both my internal and external hard drives in one place; so I've included the external hard drive folders in the various libraries. The problem I run into is that I cannot safely remove the external hard drive; it refuses to do so.

I know it is due to the external being included in the libraries and not due to Windows Backup storage location being the external hard drive because I kept the Windows Backup settings the same (with the storage being the external hard drive) and removed the folders on the external from the libraries and it safely removes fine.

I realize I could set it so that write cacheing is disabled and I could remove it whenever, but this yields lesser performance (correct?) I'd rather keep write cacheing on; is there any way for me to include the external hard drive in the libraries while having the ability to safely remove the hard drive?

Thanks in advance

Answer:unable to safely remove external hard drive

WD has released all new software for the MyBook series drives; I had the same problem you mention and after installing the new Drive Manager and MyBook software it is working nicely for me now.

1 more replies
Relevance 51.66%

My Uncle's computer (HP XP SP2) detected Trojans throughout his computer last night and some were in the D: drive under system restore points so like always he disabled system restore and some of the Trojans were able to be removed, however 6 are still left. Two in the C Drive and 4 in his D drive. This is AVG's results from today:"C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected"Here is his Hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:11:25 P... Read more

Answer:Unable to remove Trojan infections from Recovery Drive

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 51.25%

Hello. In my last post, I had a problem mounting my external HDD, so bought a new external enclosure, but now I can't get the hard drive out of the first case. After opening the back of the case where everything connects, I cannot retrieve the hard drive itself. It won't slide out.

I have the same "Smart Drive"external hard drive case as the one in this video http://www.youtube.com/watch?v=4slNzGLUDv4 except mine is not an empty enclosure. In the video, the guy removes a slide from the top and bottom of the case with such ease, whereas, I am unable to further remove any part of the shell around the hard drive itself. I can clearly see it, but it's just stuck in place.

What should I do? Please help.
 

Answer:Solved: I am unable to remove the hard drive from my external shell. Please help.

7 more replies
Relevance 51.25%

Hello, I am trying to replace the hard drive on my desktop computer, but I am currently having trouble  with removing the metal cage that encloses the hard drive. This is the recommended method of replacing the hard drive, according to these instructions: http://www.manualslib.com/manual/359309/Hp-Pavilion-P6230f.html?page=21#manual I am stuck on step 13 for that manual in particular. I push down on the "#1" latch, and pull forward, but it's not sliding forward. I am unsure what I am doing wrong, but the thing is not moving. Do you guys have any idea what I may be doing wrong? Thank you.

Answer:Unable to Remove Hard Drive Cage from Desktop computer

Hi, Slide the HDD cage towards the top of the PC  while depressing the latch. Then pull the cage out of the tower. I have an h8 1380t with the same HDD cage. Jay   

1 more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Wiping the hard drive should get rid of any trace of virii. It can't be a BIOS virus either (it can't do something as complex as what your computer is going through; as far as I know anyway).

Chances are you're installing infected software or you're not securing you computer adequately before allowing it Internet access (Firewalls, Windows service packs, Anti-virus, etc.).
 

26 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

3 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Originally Posted by Windows Central Question I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely. I understand that you're extremely frustrated however I'm not sure what anyone could do to help without you clarifying three things.
Three questions.
1) Are you using a NAS Enclosure?
2) Are you using a Server Rack?
3) Which O/S are you using?
We're not mind readers you know , so please join and provide more information in this thread.

more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

0 more replies
Relevance 50.43%

  hey bro help me solve this problem. I m unable to remove usb write protection from my flash drive in win7 using given solution. what should i do please suggest as fast as u can

Answer:unable to remove usb write protection frrom my sandisk flash drive in windows 7

Using given solution? Is url reference missing that you meant to include?As far as this flash drive goes... I would backup the contents of it to a hard drive or another flash drive before making any attempts to make it read/write enabled again.Then once you have backed up the data on it, delete the partition on this drive if allowed. Then create a new partition and format that partition. But with write protection enabled you might not be able to do this. However if the flash drive is simply corrupt you may be able to delete the partition and create new and format fresh.Given the price of flash drives these days I wouldnt spend too much trouble with trying to fix it. Some flash drives when they fail internally no longer accept write requests, and your lucky that they will even read.I am assuming that this USB flash drive doesnt have a slide switch like some USB flash drives have to make them write protected.

1 more replies
Relevance 45.92%

Hi! I'm hoping someone can help me with this problem... I've been trying to backup my computer to an external drive and I keep getting the error code: 0x8078002A. I've tried numerous times in the past few weeks with no success and the same error code each time. My laptop is a Dell XPS 17 (L702X, Early 2011) with an Intel® Core™ i7-2760QM CPU @ 2.40GHz processor with 8.00 GB of installed memory (RAM). The Windows edition I'm running is Windows 7 Professional. The size of the backup that I'm trying to run is 327.56 GB (and I know there is plenty of space on the external drive to accommodate the backup).The external drive I'm trying to back up the laptop to is a WD (Western Digital) My Book external hard drive that is a 4 TB hard drive. It currently has 1.88 TB free of 3.63 TB according to its properties. I recently performed an "Error-Checking" run with the external hard drive (by clicking on 'Properties' and then the tab that said 'Tools' and then 'Error Checking' and it went through that process and fixed whatever errors it might have found. I had read on some other forum that I should try doing this to see if that would make the backup work, but it still won't work and I'm still getting the same error code.
 
I read on another forum that you could possibly be getting the error code 0x8078002A if you had a virus or malware or some other type of problem.  I'm not sure what else to try or do...  I do run Super Anti-Spyware Free Edition regularly as ... Read more

Answer:Unable to Backup Laptop and Unable to Remove VSO Downloader Program

Hello there,From this article, it appears to be a bug in Windows Backup.Can you try using a third-party backup utility? Good choices are Macrium Reflect (for imaging) or EaseUS Todo Backup.Since you have a Western Digital drive, it is also possible to use Acronis True Image WD Edition.Let us know how that goes.Regards,Alex

12 more replies
Relevance 45.51%

Hello all,

i am trying to uninstall a program called "Scanner utility for Windows" (from 'Add/Remove programs'), but once its removed it still shows up under 'Add/remove programs', it doesnt disapear from there.
i tried rebooting the computer afterwards, but it still shows up in there.

i am able to remove it from another computer, so not sure what the issue is.

i am logging with administrator rights on both computers, so what could the issue be?

thank you

PS Both computers run on Windows XP.

Answer:Unable To Remove Software- It Still Shows Up Under 'add/remove Programs'

Hello alexcirnuThis should help solve the problem http://windowsxp.mvps.org/AddRemove.htm

1 more replies
Relevance 44.69%

I am having win xp as my operating system. I am unable to remove following programs from add or  remove programs:1. Internet Security Add-On2. Public Messenger ver 2.03and when I attempt to remove these I get an error message window saying that "You should reboot your computer prior to uninstalling this software. Reboot now?" Even after rebooting the same thing is repeated.In addition there is one more problem in internet explorer whenever I try to open www.yahoo.com http://awarninglist.com/ gets opened. I dont want to format and put win-xp again, I want an alternative solution. I read REFERENCE NUMBER: CH000568 in www.computerhope.com regarding TweakUI and tried it but could not find any add/remove tab...

Answer:unable to remove programs from add or remove progr

Try CCleaner.  You can download it from:http://www.majorgeeks.com/download.php?det=4191After installing it, I suggest you first run its Windows scan and remove stuff it finds.  Then, run its Issues scan, backup the registry when prompted, and then delete the items it found.  Then, use its Uninstall tool, under Tools, to try deleting the programs.  

1 more replies
Relevance 44.69%

Hi..I have a Program that has been installed on my PC which I wish to remove using Add/Remove program from Control Panel...but it will not uninstall. Please let me know if this can be done from the Registry....and how I actually perform the task If not, is there another way? The uninstallation continues for a few minutes and then stops . Your assistance would be much appreciated....Ray.

Answer:[SOLVED] Unable to remove Program from Add/Remove

Open Task manager>Process to check whether this program is running or not. If not, you can try to uninstall by uninstall file,located in program files. If still not, you can use some third party uninstaller software.

3 more replies
Relevance 43.05%

My son downloaded an inappropriate game and I am unable to remove it in the add and remove program. It gives me the message that it is unable to locate the installation log file, and the uninstallation will not continue. How do I get rid off this??
 

Answer:unable to remove game from add and remove

8 more replies
Relevance 41.41%

After online researching, I ended up into this forum >> disk 1 is unknown, not initialized, unallocated

I downloaded the Partition Wizard from Jumanji's link, installed, and followed instructions until the end.

After assigning drive letter (G:\), the PW shows that it is indeed assigned to drive G:\ BUT, I still can't see it in My Computer so I checked Disk Management and it still shows the same status/problem as it was from the beginning.

Is/are there any further necessary step/s after assigning Drive letter to the recovered disk?

When I try to close the PW, it says "You are about to quit the program and cancel all pending operations. The changes you have made will be lost."

I don't know what to do from here. Please help

Thanks in advance..

Answer:Disk unallocated, unable to initialise, unable to assign drive letter

OK, It could be a simple matter.

But I want to have a clear picture of what exactly your problem was.

1. Are we dealing with in internal drive or external drive?

2. Was the drive suddenly not accessible in My Computer?

3. Was it seen in Disk Management? What did it show? Even now you can take a screenshot of how the drive appears in Windows Disk Management and post it
Disk Management - Post a Screen Capture Image

We will then proceed step by step. I am here for the next 11 or 12 hours but peep in once in an hour or two and follow up.

I know you had used PW. But we shall get on to it after you post the Windows Disk Management screenshot.

BTW what is your local time? If you are in USA you can go to sleep and come back after six or eight hours. No problem.

9 more replies
Relevance 41%

Been buggering around with this for a while now.

I have an 2 internal hdd, and an external hdd, which is pretty much always on, and it appears in the 'safely remove hardware' in the systray.

I also have a portable HDD, for bringing files to and from work, which appears there also.

I want to be able to remove the portable safely, without accidentally removing the external hdd as i keep forgetting which drive is which!

I've dinkered around with making either/or drive 'Optimized for quick removal or Optimized for performance' in the hopes that they wouldn't appear - ideally I only want the portable listed (I can always disconnect the external when the machine is off).

Anyone any ideas?
 

More replies
Relevance 40.59%

Each time I try to remove "Web Search" with add/Remove programs I get an error dialog - "The Microsoft Java Virtual Machine cannot find main class; will exit".

FYI...
I was just reading another forum after googling for removal tools...
...and someone suggested that the only way to remove it was to format the drive and start over... ......I'm still laughing!! (but I guess it's sad, because someone is going to believe that advice.)

Anyways.. looking for good suggestions and directions.

(I'm still laughing)
edited:
I'm unable to run the new version of HJT it keeps giving me an error and knock me out.
added a HJT for good measure using the older versions

Logfile of HijackThis v1.98.2
Scan saved at 1:15:12 AM, on 2/8/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\msiexec.exe
C:\Utilities\hijack this\HijackThis old.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Sear... Read more

Answer:Unable to remove "Web Search" with Add/Remove Programs

Hello ucurl!

Your HijackThis log is clean.

Your error message suggests that you have something missing or in error with the installation of the Microsoft version of the java virtual machine.

I am not sure how to help you with this problem, but I can tell you that it is not a security threat.

I suggest that you post your problem in the Windows XP forum on this website.

Good Luck!
 

1 more replies
Relevance 39.77%

Hello all. I'd like to start by saying I'm a big fan of this site, it has been helpful many times in the past.
A little bit of background on me. I have been running a small on call/on site computer repair service for a few years and have some CompTia certs. I am a Moderator for a forum at a well respected and large fps game site, so i do truly understand what you guys deal with and appreciate all the time and effort.

This is the first thing I've run across that I have failed to fix/remove

Ok on to my issue. I did get a version of the '11 security tools virus (kids get on this pc sometimes lol)
I was able to remove it and all the BHO's that went with it using rkill/combofix, HijackThis and Malwarebytes. But one thing that remains in my cp. It calls itself aaa and uses the java icon (publisher bbb comments ccc). I have hit a wall trying to figure out what this exactly is. I have nothing "going wrong" on this pc, but it still bothers me and can't be good.
When i try to uninstall it simply says it can't.
I have tried searching these forums and doing what another thread suggested, which is pretty much the same things i did to rid myself of the virus in the first place, but the person infected never responded and the thing remains.
So I am asking for some help on this.

My stats;
win xp pro.
AMD Athlon 64 X2 Dual Core Processor 6000+ | Socket AM2 | 3013/201mhz
FireFox 3.6.16
Avira AV

Many thanks for your time.

Answer:unable to remove aaa from add/remove

If Add/Remove Programs is showing an entry but the program/folder has been removed, then its likely an orphaned entry in the Windows registy. Orphaned entries can be removed by going the registry but a much safer and easier way to do this is to download and use a third party program like MyUninstaller or RevoUninstaller. After launching the program, right-click on the entry and choose the option to "Delete the selected entry".To fix manually in the registry, refer to:How to Manually Remove Programs from the Add/Remove Programs ListRemoving invalid entries from Add or Remove ProgramsKellys Korner: Removing Invalid Entries in the Add/Remove Programs ToolCAUTION: This step involves making changes in the registry. Always back up your registry before making any changes. If you are not familiar with working in the registry, then you should NOT attempt to make any changes on your own. Improper changes to the registry could adversely affect your computer and render it inoperable. ERUNT is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.

7 more replies
Relevance 39.77%

My McAffe virus scan detected two PUPs that could not be deleted, cleaned or quarentined. I rebooted in safe mode and found seven PUPs that I deleted. However I still get a pop up whenever I start my computer and approximately every half hour or so after that. The pop says "powered by zedo' and this is the url:

http://c5.zedo.com/jsc/c5/ff2.html?n=350;c=585/6;s=363;d=16;w=720;h=300

I have run "Hijack This" and below I have attatched the log file. Can anyone help

Thanks
Pete
 

Answer:Unable to remove pop up

7 more replies
Relevance 39.77%

A friend of mine keeps getting a pop up from some sort of movie site stating his free trial is over and He needs to give his credit card info to continue the subscription. How can we keep this from coming up? Hopefully the below HiJack this log will help. thanks!!Logfile of HijackThis v1.99.1Scan saved at 9:19:14 PM, on 12/16/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\wltrysvc.exeC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exeC:\Program Files\Apoint\Apoint.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Dell�... Read more

Answer:Unable To Remove Pop Ups

Please click here http://www.majorgeeks.com/Sun_Java_Runtime...ment_d4648.html to download the latest version of JAVA Install the application, then go to the Add/Remove Programs options in the Control Panel and Remove ALL previous versions of JAVA.Add remove programs ? remove MyWay SearchYou may want to print this or save it to notepad as we will go to safe mode.Fix these with HiJackThis ? mark them, close IE, click fix checkedR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dllO4 - HKLM\..\Run: [MediaPipe P2P Loader] "C:\Program Files\p2pnetworks\mpp2pl.exe" /H O4 - HKCU\..\Run: [License Manager] "C:\Program Files\License_Manager\license_manager.exe " /silentDownLoad http://www.downloads.subratam.org/KillBox.zip orhttp://www.thespykiller.co.uk/files/killbox.exeRestart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a tim... Read more

4 more replies
Relevance 39.77%

below is a link to a full screen capture of my spybot scan results. i have tried everything to remove these entries but to no avail. i am also posting my hijack this log file. please post detailed removal instructions as i am a self-proclaimed ad/mal/spyware removal "noob"! thank you and regards.

-AudioWave80

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:15:09 AM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\PROGRA~1\CACHEM~1\CachemanXP.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\SnoopFreeSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shar... Read more

Answer:[ Unable To Remove These ] - [ HELP ]!!

16 more replies
Relevance 39.77%

Running XP Professional

A friend gave me a copy of XP Plus ... loaded alright ...everything seemed to work ... although now when I try to uninstall ... comes up not installed properly.

Whenever I insert the disc [copy that I had installed with] and hit setup it shuts down my computer. Even if I try 'Explore'...then setup...same problem!

Really would like to remove..as I don't like or use it...memory hog

Hope someone can help

Thanking all in advance

Gary
 

Answer:Unable to remove XP Plus

Maybe it can't uninstall because Windows is using it's files...

Start/Control Panel/Display
Select Themes @ top
Hit drop down list & select Windows XP or another that is not in "Plus"...

...then try to uninstall Plus
 

1 more replies
Relevance 39.77%

I?ve uninstalled IE8 before on 2 other Windows 7 installs with no problems. I go to Control Panel\All Control Panel Items\Programs and Features\turn windows features on or off And uncheck IE 8 , and press ok and I get this error message: ?An error has occurred. Not all of the features were successfully changed.? And it doesn't get rid of IE8. Any idea how to fix this? I'm using Win 7 64bit thanks.

More replies
Relevance 39.77%
Question: unable to remove

hello this is my first time on the site,i recently had winblue soft install itself on my system, the computer kept restarting by itself my dsl internet seemed to slow down, and to no avail could i get it to go away, each time i switched the computer on and went into "my computer" and went to open "c:\" threatfire would start a quarrantine process and log to unknow proceccs by removable drives, upon restarting i had no explorer bar or icons on the screen, the only way i could get the explorer bar back on the bottom of the screen was to click cntrol alt delete and run new task and open threatfire up from there and remove to 2 logs from quarrantine and restart, but the same thing happens everytime i go into "my compute" then c:\" the same thing would occur.i uninstalled winbluesoft with the uninstaller and then deleted the folder in "program folders"then searched the registry in regedit, and found 2 registry files with winbluesoft in the title, removed them, and after that winbluesoft never appeared again,while this was happening, i found that my internet explorer was not opertating properly, i would click on tools then windows update, and get taken to a dodgey google site with "www.windowsupdate.microsoft.com" still in the address bar. everytime i tried anything to do with an update connection or downloading an update on the windows site, it would come up with the page could not be connected, everytime i try to do... Read more

Answer:unable to remove

Topic closed at member's request as he/she has reformatted.

Orange Blossom

1 more replies
Relevance 39.77%
Question: unable to remove

Im trying to remove kazaa media desktop from my computer,but it not possible via add/remove because of...The system file cannot be specified ..Error loading C:\windows\system\cd-chnt.dll,and so any help would be appreciated,o/s is windows me .....
 

Answer:unable to remove

telecom69
The only way I know of to remove Kazaa now is to reinstall it over the top of itself and use the new add-remove programs entry in control panel.
After you have successfully uninstalled Kazaa run Ad-Aware 5.83 from http://housecall.antivirus.com/housecall/start_corp.asp and allow it to clean up any scraps left behind. Also review this website to make sure Brilliant is also removed properly.
http://news.com.com/2100-1023-875274.html

Dave
 

2 more replies
Relevance 39.77%

I have been searching for a solution to solve the "Safe Remove" problem in Windows XP.It always happens whenever I try to safely remove any of my USB HDD regardless of brand-name using the safely remove hardware icon in the Taskbar.I get an error message: 'The device 'Generic volume' cannot be stopped because a program is still accessing it.' There are no programs accessing the drive as I only use it for storage. I have always to restart my PC before I can safely remove the USB HDD.I am sure most of you should ecounter this problem at least once in the past!So, anyone know how to eliminate this problem?

Answer:unable to remove the USB HDD

It may be your virus scanner or something else that is continually monitoring your hard drive.More details about what is loaded, etc. would be helpful.

3 more replies
Relevance 39.77%

I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.

Answer:unable to remove....

  
Quote: Originally Posted by terz


I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.


Have you checked "Device Manager" for any entries with an "!" mark. You may be able to delete any entry that relates to the Pinnacle program there, also.

HTH

5 more replies
Relevance 39.77%
Question: Unable to remove

am asking this on behalf of a friend....had the problem myself, but I can't remember how I fixed it. When using Internet Explorer, if one goes to tools/options, you should be able to delete history,files and cookies. Try as hard as you like, some files will just not disappear. If I go to Control Panel , Internet and attempt to delete from there, same problem.
how to delete them
anitaa
 

Answer:Unable to remove

What version of Internet Explorer, 6.1, 7, or 8?
 

4 more replies
Relevance 39.77%

Hi, I hav been having some pop-ups that I haven't been able to get rid of with Spybot or Ad-Aware. These include AVSystemcare and other ads which relate to pages I'm currently viewing.

I have a Dell Inspiron 9300 (with an upgrade to 2GB of RAM) and am running Vista Business.

Also, when I have an external hardrive plugged in, the mouse becomes hard to control, stalling for a bit. Similarly, the keyboard misses letters when typing into webpages (not necersarily with the HD plugged in) but is always ok in Word or Notepad - which is where I'm typing this message now to copy across.

Many thanks,
Cpt Black
 

Answer:Unable to remove pop-ups

Here is a Hijack this log if that helps:

Logfile of HijackThis v1.99.1
Scan saved at 5:28:53 PM, on 01/09/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Thomson\ST330\diagnostics\diagnostics.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\I8kfanGUI\I8kfanGUI.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Chris\Documents\HijackTh... Read more

2 more replies
Relevance 39.77%

Ran Hijack this per another members request, this is what was pulled, any suggestions? Thanks in advance!!!!BrianLogfile of HijackThis v1.99.1Scan saved at 2:12:06 PM, on 5/24/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYSC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\MI3AA1~1\wcescomm.exeC:\Documents and Settings\hodgson.POLTDESIGN\My Documents\T?sks\csrss.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\PROGRA~1\MI3AA1~1\rapimgr.exeC:\Program Files\HP\digital imaging\bin\hpq... Read more

Answer:Unable To Remove Pop-ups

Hello O-turn and welcome to BC My name is SNOWHITE and I will be helping you with your Malware problem.As I am still in training I will be helping you under supervision of our expert teachers, so there may be a delay between posts. I will be analyzing your log now, and be back with you as soon as possible!Regards,

25 more replies
Relevance 39.77%

Hi I need help to remove 888, celldorado,adult friend finder and many others pop upI had tried to used spybot ,lava and clear all the cookies ,temporary files for the explorer but the problems still exist please help thank you.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:46:45 PM, on 11/4/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\system32\svchost.exeC... Read more

Answer:Unable To Remove Pop Up

Welcome to the BleepingComputer HijackThis Logs and Analysis forum seraya My name is Richie and i'll be helping you to fix your problems.The current formatting of your log makes it difficult to read/evaluate.Open 'Notepad',click on 'Format' at the top,then uncheck 'Word Wrap' if it's checked.If you have previously downloaded ComboFix,please delete that version now.Now download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop Close any open browsers.Disconnect from the Internet. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Do NOT post the ComboFix-quarantined-files.txt unless I ask.*NOTE*In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix,please disable your scanner and redownload Combofix again.Some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.Download Deljob.exe and save it on your desktop.Double click on Deljob.exe.A log,(logit.txt) should open afterwards. This log will be present on your desktop.Post the contents of the logfile into your next reply,along with a new Hijack This log.

1 more replies
Relevance 39.77%
Question: unable to remove

hi helpers, everytime i start PC i get this annoying window which says "diconnected blackberry desk manager " my son installed it ages ago and i remember trying to uninstall and it refused to uninstall kept re installing !anyway when i try to remove now a box comes up saying " this action is only valid for products that are currently installed thanks

Answer:unable to remove

Download this click here, then run it and see if it can do the job.

6 more replies
Relevance 39.77%
Question: Unable to remove

I keep getting pop-ups from SysProtect and WinAntiVirus. I have no idea how to remove these spywares and it is very frustrating. Can anyone help. Here is a copy of my HJ log:

Logfile of HijackThis v1.99.1
Scan saved at 2:37:00 PM, on 6/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\EPSON\ESM2\eEBSVC.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.... Read more

Answer:Unable to remove

10 more replies
Relevance 39.36%

Rename and Delete are not allowed

I also scan the files with Antivirus

Answer:Unable to remove and delete

Soo, It looks to me that you have a corrupted disk. After backing up all the files that you really need, I would recommend a re-install of your windows.

Rich

4 more replies
Relevance 39.36%

Hey, first of all i apologize for the length of this post but i think the more info given the easier it would be for someone here to pinpoint the problem? upon the desktop opening after a boot i always get the the following error message, ClympO4aDyy3mA....(it goes on a bit further) has stopped responding and in the problem details section it says:

C:\Users\dee\AppData\Local\Temp\WER195F.tmp.version.txt
C:\Users\dee\AppData\Local\Temp\WER2E7E.tmp.appcompat.txt
C:\Users\dee\AppData\Local\Temp\WER2E7F.tmp.mdmp

this never happened up untill i got this trojan.

AVG gives the following report:

"C:\Windows\System32\msnet\server.exe (3012):\memory_00400000";"Trojan horse Generic14.CCKX";"Reboot is required to finish the action"
"C:\Windows\System32\msnet\server.exe (3012)";"Trojan horse Generic14.CCKX";"Reboot is required to finish the action"

but after a reboot and a rescan the virus remains there...

The Server.exe process once ended in task manager stays gone but always comes back after a reboot, i tried opening the file location and deleting the exe file there but again always comes back after a reboot.

I also tried Spybot S&D but that didnt find anything but a bunch of cookies, since this infection my pc boot up has slowed down considerably and especially firefox takes ages opening, it hangs for about 2 minutes before becoming useable. The hardrive is also constantly busy doing something which... Read more

Answer:unable to remove trojan

Hello and Welcome to TSF.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

1 more replies
Relevance 39.36%

my mcafee keeps catching the same virus everytime i restart the computer

FILE NAME GAOPDXRJBPJENB.DLL
ORIGINAL LOCATION C:WINDOWS\SYSTEM32
VIRUS generic PWS.y
IEMS C:WINDOWS\SYSTEM32\GAOPDXRJBPJENB.DLL

I run the anti virus it catches it i quarentine it i re-boot the visus is in the same location again. i cant update spybot or adaware for some reason. and my browser (IE) isnt running properly either. wether these probplems are related i dont know.

i can only presume the virus reloads itself somehow from a different location the anti virus cant find. please any help would be mint
many thanks PB
 

Answer:generic PWS.y unable to remove

6 more replies
Relevance 39.36%

Not sure if I posted in the right forum, if not please move thanksAnd also thank you for the warm welcome, I like it here more than othercomputer forums. ^^Well I used the StartUp Database and searched for many exe(s) in my task manager.I came along many searches but I'm not sure if they are good or bad.I came across regedit.exe that runs in my task manager, I already knew that file is up to no good. I follow many tutorials on how to remove it and such but it didn't work. I can't find the file and delete it. (yes, I also followed "How to show hidden files tutorial")This is what I don't get also...You see that blank line? I dunno what is that got any ideas?This is how I found out regedit is a bad one.The real one suppose to be in the Windows folder, not system32And it is connect to some place I don't know, and I knew from that pointclickspring is no good.See that regedit? It just runs after I end process it. And it keeps coming back.Yea uses a lot ...28000+KI tried to search for the file but I can't seem to find it in the system32 folder.Any ideas how to get rid of it? Thanks in advance.

Answer:Unable to remove regedit.exe

Read this http://sarc.com/avcenter/venc/data/adware.purityscan.html then go to this sites tutorials page and read up on Hijackthis download it run it and post your saved scan file to the hijackthis forum on this site. You may have more severe malicious issues.

2 more replies
Relevance 39.36%

I have a computer that is running Vista Home Premium. I also have the Trend Micro PC-cillin Internet Security 14 software installed and running in mostly the default configuration.

The Trend software is popping up messages about an infection that it is unable to quarantine or remove. The messages all mention something about a DLL file that I could remove manually. The DLL files that it prompts about are slightly different file names but are all usually something like rtkt_tdss.dll or tdss_crxx.dll or something along those lines. I saw some other people asking about tdss.dll. Attached is what the HijackThis scan reports on the machine.

I would appreciate any feedback or suggestions anyone might have about how to permanently remove this infection.

Thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:47:13 PM, on 1/19/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Pitn... Read more

More replies
Relevance 39.36%

Dear Sir

'm unable to remove virus from my system,even thow with latest update containing antivirus. I have avira antivirus.I wanted to know which is the bes antivirus which can remove all virus especially .exe virus.Please suggest me on this issue....

Thanks & Regards
Hari

Answer:Unable to remove virus

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

There is no antivirus that will remove all viruses all the time. Avira is as good as any.

------------------------------------------------------

1 more replies
Relevance 39.36%

my pc is having problem. some application is not functioning. unable to run regedit or services. pop up message shows "error 429 activex component cant create object" when try to execute host application. Attached is the hjt log. pls helllpppppp. tq

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:28:18 PM, on 06/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\WINDOWS\SOUNDMAN.EXE
D:\Program Files\FileZilla Server\FileZilla Server Interface.exe
D:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\PROGRA~1\MICROS~2\rapimgr.exe
C:\Program Files\StormII\stormSrv.exe
D:\Program Files\FileZilla Server\FileZilla Server.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\babas\temp\TeamViewer\Version4\TeamViewer.exe
C:\Program Files\StormII\stormSrv.exe
C:\Program Files\StormII\stormSrv.exe
C:\Program Files\StormII\stormSrv.exe
C:\Documents and Settings\babas\Desktop\hijackthis.exe
C:\Program F... Read more

More replies
Relevance 39.36%

Hi:I have tried every numerous spyware removal tools (Ad-Aware, Spy Sweeper and MS beta app) to remove the vcmnet11.exe trojan, but it keeps coming back. I have also followed numerous self-help suggestions, but it keeps coming back.Following is a HJT log from a normal boot. Fortunately/Unfortunately, my anti-virus app quarantines it each time that I start my PC, but I wonder if that is why I cannot find the files in HJT.FYI, I got it by mistakenly following a link to www.emp3.com. Don't know if you keep a list of bad sites, but this one should be on it.Any help is appreciated.Logfile of HijackThis v1.99.1Scan saved at 11:09:56 AM, on 6/4/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exeC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Symantec_Client_Security\Sy... Read more

Answer:Unable to remove VCMNET11.EXE

Welcome peldi to Bleeping Computer.You have a nasty combination. It will take us some posts to clean this up.Please read these instructions carefully. You may want to print them. Copy the text to a Notepad file and save it to your desktop! We will need the file later. Be sure to follow ALL instructions!***Disable Antispyware for the duration of this advise. It will stand in the way of us cleaning this computer.Open Microsoft AntiSpyware.Click on Options, Settings.In the left pane, click on Real-time Protection.Under Startup Options uncheck: Enable the Microsoft AntiSpyware Security Agents on startup (recommended).Under Real-time spyware threat protection uncheck: Enable real-time spyware threat protection (recommended).After you uncheck these, click on the Save button and close Microsoft AntiSpyware.Right click on the Microsoft AntiSpyware icon on the taskbar and select Shutdown Microsoft AntiSpyware.***Open HijackThis.Go to ?config?Go to ?misc tools?Press the button ?open uninstall manager?In the list find:Windows AFA Internet EnhancementeXact Search BarPress ?delete this entry?.Press ?back?Than press ?scan?***Close all programs leaving only HijackThis running. Place a check against each of the following, making sure you get them all and not any others by mistake:R3 - URLSearchHook: (no name) - _{02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)O2 - BHO: VBRunDLL Class - {197B8CA4-E215-46DD-8F33-E0544A80E5C4} - C:\WINDOWS\system32\vbrundll.dllO4 - HKL... Read more

15 more replies
Relevance 39.36%

I just noticed this guy around my folder and when i try to delete this it says file not found, tried scanning for virus but doesn't work at all.

http://prntscr.com/5bm1na

Answer:Unable to remove file.

Tried booting into Safe Mode and deleting it?

2 more replies
Relevance 39.36%

After a couple weeks of frustration, I deleted my partition in order to start fresh. I moved all of my music files and a couple folders to a different computer and then reloaded them onto this computer. It was roughly 1500 files - mostly music, a few essays, and a couple pictures. Kind of assumed the likelihood of these being the issue was minimal. So I move all the files back, download winamp, steam, firefox, the virus protection that came with the computer, and spybot search and destroy. Spyboy S & D still comes up with the same spyware results. I delete them, restart my computer, and there they are again. Zedo is one of the things I delete on a regular basis. I think I had a trojan that I thought I got rid of, but i guess there is must still be a presence on my PC? Is it possible for it to stick around even though I deleted the partition? Is it probably an issue with the files I saved?

I'm not sure what else to say. Here is the log as requested.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:31:35 PM, on 11/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.e... Read more

Answer:Unable to remove spyware

I love you long time for help?
 

1 more replies
Relevance 39.36%

Hi folks.

My old dad didn't use a computer until after he retired, as a result he seems incapable of not installing every piece of adware nonsense that comes across his desktop. Normally I'm able to remove all the spyware, however this time I've failed.

I've been trying to sort this PC out for the past couple of days, but I can't seem to get hold of the infection. As a result I can only clear up some of the symptoms, and it of course simply replaces them.

I've found SuperAntiSpyware to be effective in the past, however this time it doesn't quite do it all. I did have the free AVG installed, it picked up nothing. I upgraded to the free trial, and again it picked up nothing - that was the final nail in the coffin for AVG so it's gone.

I've removed all Java installations, and installed the latest one.

I've removed all the Apple/Adobe software.

He had Desktop Weather from the Weather Channel installed, which came with a package of Adware, probably not the payload that caused this problem, however it's gone now too, and I've installed a much cleaner alternative.

I've also run CCleaner to reduce the time scans and so forth take.

I'd appreciate any advice on solving this issue, and I thank anyone for their time.

I've installed Checkpoint's ZoneAlarm, to attempt to put some sort of barrier up to prevent the malware snowballing and adding more components.

I thought I'd check for rootkits as well, so I've run Panda's anti-rootkit, but found nothing.

I've also run Malwarebyte... Read more

Answer:Unable to remove malware

Just in case these are useful, please find attached some additional logs.

3 more replies
Relevance 39.36%

After running a rootkit scan with AVG, it keeps detecting a 'hidden driver'. However when I remove it, and i scan again, it just keep picking up more rootkits, with different names.

Here's some pics, this just keeps happening every time I remove it and re scan.



HJT log...

View attachment hijackthis.log
Any help is much appreciated. Thanks!
 

More replies
Relevance 39.36%

There are a bunch of folders in my TEMP that I can't seem to get rid of. I have tried using those cleaning softwares but they can't be deleted. And also they(the folders) always hang Scan Disk whenever I run it.

Please can anyone help me out here??
 

Answer:Unable to remove files!

Welcome to MajorGeeks.

Have you tried booting in Safe Mode and deleting them?

If that doesn't work, try [email protected] (Freeware, bottom of page)
 

3 more replies
Relevance 39.36%

Hi there,
I have noticed that during backups that one of my files can't be removed.
It's actually an old short cut and when I right click on it I only get two options, "Print" and "Send to".
When I hit delete, I get the error "source path too long"...."the source file name(s) are larger than is supported by the file system".
The file name is 206 characters.
Any ideas please?
Thanks
Paul

Answer:Unable to remove a file

Hi, you need to reduce the path length. There are many references and solutions posted on the internet. Essentially try renaming elements of the path so the total path + file name is < 255.

Here's just one:
How to fix Path Too Long and File Name is Too Long errors in Windows 2016 - YouTube

You can also use 3rd party tools to help e.g.
7-zip:
"Source Path Too Long": How to Delete, Rename or Move these files/ folders in Windows | Easy Tipz
Robocopy:
Clint Boessen's Blog: How to Delete Files which exceed 255 Characters Without 3rd Party Tools

15 more replies
Relevance 39.36%

So yes I am trying to remove UTubErAdBBlOocker but I am unable to and don't know why.
 

Answer:Unable to remove UTubErAdBBlOocker

Hi, and welcome to MT

Please download zoek.zip or zoek.rar by smeenk () from here or here and save it to your Desktop.
Unpack the archive...

Close any open browsers
Temporarily disable your AntiVirus program. (If necessary)
If you are unsure how to do this please read this or this Instruction.

Double click on zoek.exe to run the tool .
Please wait while the tool does not start...

Copy the text present inside the code box below and paste it into the large window in the zoek tool:
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Code:
createsrpoint;
gpt.ini;z
C:\Windows\System32\GroupPolicy;v
C:\Windows\SysWOW64\GroupPolicy;v
StandardSearch;
emptyfolderscheck;
installer-list;
installedprogs;
uninstall-list;

Click on button.
Please wait until a logreport will open (this can be after reboot)

Save notepad to your Desktop and attach here zoek-results.log
Note: It will also create a log in the C:\ directory named "zoek-results.log"

 

9 more replies
Relevance 39.36%

Hi

First thank you for having such a forum for the technically challenged as myself.
Yesterday my AVG alerted to a trojan. I isolated them in the vault because it said they
were embedded and could not be deleted. The next scan showed none found. The computer was slower. Has blank windows popping up all the time.
I attempted to delete them manually which was probably not the best move because
I think I deleted things that I might have needed.
Any help you can give me will be deeply appreciated.
I am trying to avoid reformat as I
am Area Director for Arizona and Nevada for an organization that matches uid
deceased persons to missing persons and the work that would be lost is
devastating.

Thanks

Logfile of HijackThis v1.99.1
Scan saved at 9:12:36 PM, on 7/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe... Read more

More replies
Relevance 39.36%

greetings:My computer has been riddled with viruses and spyware for over 6 months. Every time i would run norton anti-v, i would show 5 viruses that i could not delete. from another online forum, i learned to run norton in safemode, which got rid of the viruses. my computer was still running slow, and i am getting a toolbar on the lower half of the screen every time i open iexplorer.A friend had me remove all of the questionable programs i could and download/run adaware in both safe and normal modes after shutting off system restore. I also ran spybot. It came up with over 400 enties(Adaware), but every time i run it, it comes back with more objects. The internet explorer toolbar was able to close for about a week by clicking on the x, but now the only way to close it is to end the iexplorer process(the are 2 when explorer is running). I also have a get incessant norton firewall pop ups notifying my that thnall1z.exe or thnall1a.exe is attempting to access the internet.After googling thnallz.exe, i found a forum that suggested i download nailfix, ewido, and ccleaner. I couldn't figure out how to unzip nailfix. I then updated the remaining two, restarted in safe mode and scanned. I deleted all entried returned by ewido. The explorer toolbar and thnailz.exe messages continue. And adaware is still finding more spyware. I ran Hijack this and this is my log:Logfile of HijackThis v1.99.1Scan saved at 1:56:15 PM, on 9/21/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSI... Read more

Answer:Unable to remove spyware

Hello CarPeDiem.mil and welcome to BleepingComputer.Lot's of pieces here, it's hard to tell what the main infection is. Let's take a first shot and see what we can get rid of and what comes back.Configure Windows to enable viewing of Hidden and System files. If you still have Ewido installed, be sure it is updated. If it is not still installed:Download and install the trial version of Ewido Security Suite.When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".- Launch Ewido, there should be an icon on your desktop double-click it.- When you run Ewido for the first time, you will get a warning "Database could not be found!".- The program will prompt you to update; click the OK button.- The program will now go to the main screen.- On the left hand side of the main screen click update.- Click on Start.The update will start and a progress bar will show the updates being installed.Once the updates are installed, close Ewido.Do not run Ewido yet.Reboot into Safe Mode.Start HJT and click on the SCAN button. Put a check mark in front of the following lines if they still show:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.iksmnunnhfafkkxilqjnujc.com/X5/...ofLuVnGanJ.htmlF2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Nail.exeO2 - BHO: (no name) - {5102D637-0CBE-F8D4-AC02-449E99B8CB42} - C:\DOCUME~1\User1\... Read more

2 more replies
Relevance 39.36%

Hi all,
Recently i accidentally some warz file without knowing and now my computer is infected with some sort of virus. Spybot keeps trying to change registry values everytime i start up and Norton is not willing to scan. Ad-aware says my comp is clean although i know its not true. Im at a loss at what else I could do other than system restore which is what I did. It only made the problem worse as Norton keeps quarantining the system restore files. I am posting a HJT log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:01:45 PM, on 11/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
D:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
D:\Program Files\eSnips\ClientG... Read more

More replies
Relevance 39.36%

Please help me with this!

For some thing that I don't know, I was unable to add/remove programs on my windows xp pro sp2

At the same time I start to see many instaled applications started with "m" as you can see on the attachment.

How can I resolve this??

Could you guys give me some help??

there is my hijack:

Logfile of HijackThis v1.99.1
Scan saved at 20:11:58, on 29-08-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programas\Intel\Wireless\Bin\EvtEng.exe
C:\Programas\Intel\Wireless\Bin\S24EvMon.exe
C:\Programas\Intel\Wireless\Bin\WLKeeper.exe
C:\Programas\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programas\Ficheiros comuns\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programas\Intel\Wireless\Bin\OProtSvc.exe
C:\Programas\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Programas\Intel\Wireless\Bin\ZcfgSvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\Explorer.EXE
C:\Programas\Java\j2re1.4.2_08\bin\jusched.exe
C:\Programas\Winamp\winampa.exe
C:\Programas\Ficheiros comuns\PCSuite\DataLayer\DataLayer.exe
C:\Programas\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fp... Read more

Answer:unable to add/remove programs

You might try these solutions:

Add/Remove Programs tool displays installed programs incorrectly
or this one:
Add/Remove Programs dialog box does not appear or is corrupted.

Or you could try an alternative tool like MyUninstaller.
 

1 more replies
Relevance 39.36%

Everytime I open a program i receive an error, press ok, and then the program starts.

Answer:Unable to remove virus or bug

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Remove this program in bold using the Add/Remove Programs applet.Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.22.26.1 - Client Connect LTD) <==== ATTENTION===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. 
start

CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2027179381-268509625-1709291523-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2027179381-268509625-1709291523-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trovi.com/?gd=&ctid=CT3330189&octid=EB_ORIGINAL_CTID&ISID=&SearchSource=55&CUI=&UM=6&UP=SPF96E84DB-0648-4487-8BA7-2235DE1D3574&SSPV=&TID=3264
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKU\S-1-5-21-2027179381-268509625-1709291523-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com/Results.aspx?gd=&ctid=CT3330189&octid=EB_ORIGINAL_CTID&ISID=&SearchSource=58&CUI=&UM=6&UP=SPF96E84DB-0648-4487-8BA7-2235DE1D3574&q={searchTerms}&SSPV=&TI... Read more

7 more replies
Relevance 39.36%

Ok.. just ran CF on two machines and the Qoobox directory won't delete on either of them like in the past. I tried doing it in safe mode but the problem seems to be with the "BackEnv" folder. It is empty but still says that the folder is in use/write protected etc. etc. I have major OCD and do not want any unnecessary folders in the root of drive. How can I get rid of the directory?

Answer:Unable to Remove Qoobox

Nevermind. Thought too hard on this one. Start->run->combofix /uninstall did the trick. Close this sucker up...

43 more replies
Relevance 39.36%

My OS is XP and I have updated all of my definition files and MS Updates. I am unable to remove what seems to be a virus. My IE homepage keeps reverting back to 3929.cn no matter what I do.

Please help!!

Here are my log files


DDS (Ver_09-01-07.01) - NTFSx86
Run by Jillian at 15:22:09.09 on Mon 02/02/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.511.121 [GMT -5:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\... Read more

Answer:3929.cn - unable to remove

Hi, welcome to TSF!

It seems that you zipped up GMER.exe. Please follow the instructions regarding GMER again.

http://www.techsupportforum.com/f50/...lp-305963.html

1 more replies
Relevance 39.36%

I have done my level best to remove "Outfox.tv - Does anyone have an understandable walk-through of how to remove this pernicious piece of garbage????Please Help!

Answer:Unable to remove Outfox.tv

According to the FAQ on their home page you should use "Start / All Programs / OutfoxTV / Uninstal". Doesn't that work?NigelWind slow

4 more replies
Relevance 39.36%

I have tried removing them with norton and malwarebytes but they keep coming back.
 
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\4.4.0.12\ccsvchst.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\4.4.0.12\ccsvchst.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java... Read more

Answer:Unable to remove several PUPs - Please help!

download AdwCleaner by Xplode onto your desktop.
Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Delete.
Confirm each time with Ok.
You will be prompted to restart your computer. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.
 
download Junkware Removal Tool to your desktop.
Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.
Run the ESET Online Scanner.
Hold down Control and click on this link to open ESET OnlineScan in a new window.
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
Double click on the icon on your desktop.
Check "YES, I accept the Terms of Use."
Click the Start button.
Accept any security warnings from your browser.
Under scan settings, check "Scan Archives" and "Remove ... Read more

15 more replies
Relevance 39.36%

Since using Internet Explorer in order to download som dotnetfx from MSoft I have been plagued with a popup from http://professionalscan.c*m.
I use FireFox for absolutely everything else.
The automatic update for windows is being turned off.
I run Nod32 which is updated several times a day, Trojan Remover, also up to date and Look'n'Stop Firewall.

Nod finds win32 Kryptik on a regular basis.

Trjan Scanner finds VirtuMonde which seems to be acting with ie Explorer. I follow all the proceedures that TR asks for but to no avail.
I hope someone can help so I may avoid a format and all the attached hassle.
Here is my HJT Log

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:09:15, on 17.11.2008
Platform: Windows XP SP3, v.5657 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Google\Google Talk\googletalk.exe
D:\Program Files\FlashGet\flashget.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Everything\Everything.exe
C:\Progra... Read more

More replies
Relevance 39.36%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 08:36:49, on 2/11/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\brsvc01a.exeC:\WINDOWS\system32\brss01a.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\program files\common files\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeC:\Program Files�... Read more

Answer:Unable to remove the viruses...

btw, currently i have a number of anti-virus software. Please advise on which ones to keep and which to uninstall. And i just downloaded the recommended Sygate Firewall but it hangs everytime it loads. Are there conflicts of programmes or what may i do?

Thank you.

28 more replies
Relevance 39.36%

My virus program can not remove Adware-Onestep.k. My computer is not safe, can anyone tell me what to do.

Answer:Unable to remove virus

Hello tvdvmv,

Please follow the instructions in our pre-posting topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Relevance 39.36%

Let me know what to do next?Here is a screenshot of my AVG:Link to: <a href="http://www.geocities.com/aaronmaxa/AVG_Screenshot.JPG" target="_blank" rel="nofollow">http://www.geocities.com/aaronmaxa/AVG_Screenshot.JPG://http://www.geocities.com/aaronmaxa/...inked-image" /></a>----------------------------------------------------I ran the combofix also in attempt to get rid of it, and here is the log:ComboFix 09-01-01.02 - Owner 2009-01-03 10:31:09.2 - NTFSx86Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2038.1441 [GMT -8:00]Running from: f:\programs\AV\ComboFix.exeAV: AVG Internet Security *On-access scanning enabled* (Updated)FW: AVG Firewall *enabled* * Created a new restore point.((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))).c:\windows\IE4 Error Log.txt.((((((((((((((((((((((((( Files Created from 2008-12-03 to 2009-01-03 ))))))))))))))))))))))))))))))).No new files created in this timespan.(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))).2009-01-03 02:42 --------- d-----w c:\documents and settings\Owner\Application Data\dvdcss2009-01-02 06:04 --------- d-----w c:\documents and settings\Owner\Application Data\Orbit2009-01-02 05:12 --------- d-----w c:\documents and settings\Owner\Application Data\uTo... Read more

Answer:Unable to Remove Trojan

Hello Aaron Max,

Did you click the "Remove all threats" button in AVG ?

If so, did another system scan reveal any more threats ?

Do you experience problems ?

Greetings,
Thunder

2 more replies
Relevance 39.36%

Hi,I think I am infected with the virut virus and probably other malware as well. I am somewhat of an advanced user and in so many years never had a problem finding and removing virus on my computer and on others until now. That aside, let me begin with my story.OS: WIndows Vista Business SP1CPU: Intel Core 2 Duo E7400AV/malware scanner: Avast/malwarebytes/spybot/adware/windows defenderProblems: Unable to connect to certain sites (eg; microsoft.com-no updates, some antivirus websites, repeated found virus/malwares/problems after scanners fixing it)I wasn't sure how I was infected with a virus(most likely something I downloaded) but I ran malwarebytes almost every week or so and that is how i found out that i was hit. I usually find for solutions online and most of them being on bleepingcomputer.com. So i immediately started running a full scan on my system with avast, malwarebytes, and ad-aware. All 3 scanners found the problems and successfully remove the problems found. I even did a bootscan with avast and it removes all found problem. However, everytime i rescan my system again, the same problem is found so i figured that the original problem hasn't been fixed. I then downloaded combofix and running it and that is when it gives the error!! ALERT !! It is NOT SAFE to continue!The contents of the ComboFix package has been compromised.Please download a fresh copy from:http://www.bleepingcomputer.com/combofix/how-to-use-combofixNote: You may be infe... Read more

Answer:Unable to remove virut

I'm afraid I have very bad news.Your system is infected with a nasty variant of Virut, a polymorphic file infector with IRCBot functionality which infects .exe, .scr files, downloads more malicious files to your system, and opens a back door that compromises your computer. According to this Norman White Paper Assessment of W32/Virut, some variants can infect the HOSTS file and block access to security related web sites. Other variants of virut can even penetrate and infect .exe files within compressed files (.zip, .cab, rar). Virux is an even more complex file infector which can embed an iframe into the body of web-related files and infect script files (.php, .asp, .htm, .html, .xml). When Virut creates infected files, it also creates non-functional files that are corrupted beyond repair and in some instances can disable Windows File Protection. In many cases the infected files cannot be disinfected properly by your anti-virus. When disinfection is attempted, the files become corrupted and the system may become irreparable. The longer virut remains on a computer, the more critical system files will become infected and corrupt so the degree of infection can vary.The virus disables Windows File Protection by injecting code into the "winlogon.exe" process that patches system code in memory.CA Virus detail of W32/VirutThe virus has a number of bugs in its code, and as a result it may misinfect a proportion of executable files....some W32/Virut.h infections are corru... Read more

5 more replies
Relevance 39.36%

I got this URL in my IE Address bar. It will not go away. I deleted/cleared all my History Folder & Cookies & Temporary Internet Files.

All the URL and other address have got cleared except this one. I do not see any new programs installed in my Program files and no new icon on my task bar. Some one Please kindly help me in getting rid this URL/address from my system.

Thank you in advance.
 

Answer:Unable to remove Imposter URL

Maybe a silly question, but what url???
 

2 more replies
Relevance 39.36%

My first post everyone please be gentle

I am trying to change the ram on my nb100. I am unable to remove the old ram.
I have changed the ram on previous laptops without problem! tilt ram, remove, replace!
I am unable to tilt the ram to remove.

Grateful for any help thanks

Answer:NB100 - I am unable to remove the old ram

Its the same as any other laptop, pull away the side latches and the module will lift up.

If that doesn't work, the mechanism may be broken requiring repair at an ASP.

2 more replies
Relevance 39.36%

Windows XP SP3 on a PC
Yesterday I removed AVG Free using Revo Uninstaller but I had to do a System Restore today and when I used my add/delete programs, even though it shows the AVG as there when I click remove nothing happens.
When I click the uninstall button in my Start list nothing happens.
I've had Revo working for about 30 minutes and it is also unable to get the uninstaller to work.

So - did I remove it or not? I want to know for certain because I am now using Avast and I don't want both of them working.

Is there a way to de-activate AVG if I'm unable to remove it?

Thanks!
 

Answer:Unable to remove AVG Free

16 more replies
Relevance 39.36%

I have just uploaded the free version of SuperAntiSpyware, but unfortunately pressed the wrong tab and got the pro trial version, which I didn't want. But when I've tried to delete the download and start again, it won't let me. A big box appears telling me this isn't possible. Can anyone help.
 

Answer:Unable to remove SuperAntiSpyware

8 more replies
Relevance 39.36%

Hello all,

i am trying to uninstall a program called "Scanner utility for Windows" (from 'Add/Remove programs'), but once its removed it still shows up under 'Add/remove programs', it doesnt disapear from there.
i tried rebooting the computer afterwards, but it still shows up in there.

i am able to remove it from another computer, so not sure what the issue is.

i am logging with administrator rights on both computers, so what could the issue be?

thank you

PS Both computers run on Windows XP.

More replies
Relevance 39.36%

My kid installed MySpaceIM on my windows XP computer. When I attempt to remove it in control panel, I get a blue screen with an "OPEN" box which shows a list of file names, notably "INSTALL.LOG". What is this telling me? When I click OK, I get "FILE NOT FOUND". Thanks.
 

Answer:Unable to remove MySpaceIM

6 more replies
Relevance 39.36%

I'm Using Avira and Malware bytes, They can't seem to get rid of this persistent virus.Every 5-10mins while browsing the net I am receiving a warning on Avira that I'm infected with thisC:\Windows\System32\x.exe. I even reformatted my system, thinking that it will get rid the virus totally but it keeps on coming back. I even use combofix but to no avail, Pls help me. Thanks(Moderator edit: post moved to more appropriate forum.jgw)

Answer:unable to remove x.exe virus

With the information you have provided I believe you will need help from the malware removal team. Please make sure that you read the information about getting started first.Then start a new thread HERE and include or required logs.Including a link to this thread will be helpful. Good luck and be patient. Help is on the way!

1 more replies
Relevance 39.36%

Hi,I've experienced several malware problems over the past few weeks and have been completely worn down trying to resolve it. I am running Win XP with SP2. Since I've been experiencing several problems, I want to list all the problems I experienced and the steps I have taken so far:1. About two weeks ago, my computer was infected by the "Security Suite" malware, which kept saying my computer is infected and that I need to purchase the security suite. In order to resolve this, I downloaded MalwareBytes program and I was able to remove "Security Suite" malware.2. About 5 days ago, I started getting the message :" This application could not initialize property (Ox0000 etc). Click OK to terminate this application". I kept getting this message several times and it seemed to be attempting to terminate all my applications. I used Malware bytes in safe mode to try to resolve this, but it could not get the job done. So, I searched on the internet for solutions to this and there seemed to several posts with similar messages, but I think their problems were related to Google Chrome, IE or some visual studio error. But, I think mine is different, because my errors seemed to be related to several programs. In order to try to solve this, I switched to Safe Mode and ran SpyBot Search & Destroy. S&D seemed to remove several threats. Next I installed AVG Antivirus 9 in safe mode also and ran the scan atleast 3 times. Now when I went back to the no... Read more

Answer:Unable to remove malware

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

34 more replies
Relevance 39.36%

Hi, I have been trying to remove this cws swapx all day. When I follow the steps of the tutorial, the random named dll (020) file just keeps coming back no matter what I do. I have deleted it in safe mode, in recovery console, using killbox over and over, but it just comes back. Here is my log. If somebody could help me out, that would be great. Logfile of HijackThis v1.98.0Scan saved at 12:47:24 PM, on 11/24/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\hkcmd.exeC:\WINDOWS\System32\pctspk.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Dell\QuickSet\quickset.exeC:\Program Files\McAfee.com\Agent\mcagent.exeC:\Program Files\Common Files\Dell\EUSW\Support.exeC:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exeC:\WINDOWS\System32\hphmon04.exeC:\Program Files\Hewlett-Packard\HP Share-to-W... Read more

Answer:unable to remove, help appreciated

Go here to download the free version of Grisoft's AVG AntiVirus program. Install the program, check for updates and scan your system allowing it to remove whatever it finds.Make sure that you have no browser windows open as this could prevent the fix from working properly. Open HijackThis, scan and when complete, remove the following entries by checking the box to the left and clicking 'fixed checked':R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://win-eto.com/hp.htm?id=9O2 - BHO: (no name) - {467FAEB2-5F5B-4c81-BAE0-2A4752CA7F4E} - C:\WINDOWS\System32\W8C6S4~2.DLL (file missing)O20 - AppInit_DLLs: w8c6s4xcm66s.dllClick on Config then click on Misc Tools. At the new screen click on the "Delete a file on reboot" button. You will be presented with a dialog asking you to pick a file. Copy and paste C:\WINDOWS\System32\w8c6s4xcm66s.dllinto the file name field and press the open button.Hijackthis will prompt you to reboot, please do so. Rescan with HJT and post a new log here for a final check over.

1 more replies
Relevance 39.36%

I have an older computer but keep getting pop up at time I have ran housecall and superantispyware and clean most of it but not able to remove one call TROJ_BOAXXE.BJ. thaks for yout ime reading this.
 

Answer:unable to remove troj_boaxxe.bj

here is a copy my my hi jac k log if needed, thanks
Logfile of HijackThis v1.99.1
Scan saved at 8:11:11 PM, on 10/21/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\zHotkey.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\eMachines Bay Reader\shwiconem.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\LVComS.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Logitech\Desk... Read more

1 more replies
Relevance 39.36%

I ran Hickjack this and unsure what to do after a scan
 

Answer:unable to remove Mislead.App

I am posting my log file
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:04:05 PM, on 10/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WIND... Read more

1 more replies
Relevance 39.36%

I know that i have something as Sophos has caught it but it will not go away once it's cleaned. When I rebooted my work laptop I was seeing the copying box and I was able to see that it looked like the same thing. Rather than redoing the whole laptop ( I have some stuff that I need to back up first) I would like to see if I can clean it out.

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Enterprise, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz, Intel64 Family 6 Model 61 Stepping 4
Processor Count: 4
RAM: 8085 Mb
Graphics Card: Intel(R) HD Graphics 5500, 1024 Mb
Hard Drives: C: Total - 475761 MB, Free - 243637 MB;
Motherboard: Dell Inc., 0DCPV1
Antivirus: Sophos Anti-Virus, Updated and Enabled
 

More replies
Relevance 39.36%

I don't know if this is the right place to put this...if not please let me know.

I have officexp installed on a workstation and I am trying to delete it to re-install, but when I go to add and remove software, Office xp doesn't give me the remove or modify buttons. I am running WinXP on this machine.

I need to re-install because the software and outlook are not working properly and I need to add this end user back onto the network because she is not getting any emails. I suspect that this end user has been messing with the files.

Thanks
 

Answer:Office xp....unable to remove...help

6 more replies
Relevance 39.36%

My IE has been hijacked and the home page continually resets to about:blank.
I have run Ad-Aware, Spybot S&D, and Trend PC-cillin and removed all problems. HJT shows the culprits and allows me to remove them but they continually reappear. I have run CWShredder and it keeps "restoring 6 files" but they show up again immediately.

Here is my HJT log

(P.S. AMD Athlon 1.1Ghz, 512MB RAM, WinXP 2002 Home Service Pack 1)
Logfile of HijackThis v1.96.0
Scan saved at 6:36:36 PM, on 4/7/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\System32\wfxsnt40.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program Files\ahead\InCD\InCD.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Trend Micro\Internet Security\pccguide.exe
C:\Program Files\Trend Micro\Internet Security\PCClient.exe
C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe
C:\Program Files\NoAds\NoAds.exe
C:\Program Files\AWS\WeatherBug\Weather.exe
C:\Program Files\SpamPal\spampal.exe
C:\Progr... Read more

Answer:Hijacked and unable to remove

16 more replies
Relevance 39.36%

I installed Adobe Flash Player which came embedded with dosearches. This is now my home page in IE10, Firefox & Chrome. I tried running all the steps in your blog to remove dosearches. They failed. I have now registered here in desperation. NB: We have three accounts on our computer & the problem is only on my account, not my husband's our daughter's.
 

Answer:Unable to remove dosearches

Hi and welcome to the MalwareTips.com forums!

I'm Kuttus and I am going to try to assist you with your problem. Please take note of the below:

I will start working on your malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for this issue on this machine!
The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Refrain from running self fixes as this will hinder the malware removal process.
It may prove beneficial if you print of the following instructions or save them to notepad as I post them.
Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
Before we start:
Please be aware that removing malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to nece... Read more

3 more replies
Relevance 39.36%

Hi, everyone. I've had this adware for a few days now. Whenever I have an open window in Firefox, ads will pop up every 2 minutes or so. It gets really frustrating. I've run Ad-aware, Spybot S&D, TrendMicro House Call, and NOD32. Every time I run them, a trojan and a bunch of other malware is detected. It gets deleted, yet keeps coming back. It doesn't even take a reboot for it to come back. It just keeps happening and the scans keep showing and removing the malware, to no avail. So I'm going to post my logs, and hopefully someone here will know what to do. Thanks!


DDS (Version 1.1.0) - NTFSx86
Run by Admin at 14:49:22.23 on Sat 12/27/2008
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_07
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.52 [GMT -5:00]

AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\B... Read more

Answer:Unable to remove adware

Please download Malwarebytes' Anti-Malware from HERE or HERENote: If you already have Malwarebytes' Anti-Malware, just run and update it.. Then do a "Perform Full Scan"Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Full Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.NEXTPlease download RSIT by random/random and save it to your Desktop.Double click on RSIT.exe to run RSITBefore you click "Continue", make sure you change the List files/folders created or modified in the last 3 monthsClick Continue at the disclaimer screen.Once it has finished, two lo... Read more

2 more replies
Relevance 39.36%

Tonight, I thought I might as well get rid of the Windows.old and the Windows10upgrade. First, I used Revo Uninstaller to take out Windows10Upgrade. When it came up to uninstall, I thought no, I'll do this later. So hitting the X up in the right hand corner did nothing. So I went to Task Manager and hit the End Task. Great But then Revo came up to do a search in the Registry to I let it go. Clicked deleted on what it found and no problem.
Then I went to Diskcleanup and cleaned up all the files, including Clean up System files. In there I made sure to check off everything actually. Doing this twice, Windows.old and Windows10upgrade are still showing in File Explorer. I might add, that "previous windows installation" is not showing in the Disk Cleanup. Yet it is still there in File Explorer.
I guess my question is, is there another way to remove this stuff so I can free up Disk space?

Answer:Unable to remove Window.old

I had the same experience trying to remove windows.old and its subfolders (which were all empty after doing the disk cleanup). I had to take ownership of all, change permissions to full control for my account, remove read only, and then delete all, including windows.old.

20 more replies
Relevance 39.36%

Tonight, I thought I might as well get rid of the Windows.old and the Windows10upgrade. First, I used Revo Uninstaller to take out Windows10Upgrade. When it came up to uninstall, I thought no, I'll do this later. So hitting the X up in the right hand corner did nothing. So I went to Task Manager and hit the End Task. Great But then Revo came up to do a search in the Registry to I let it go. Clicked deleted on what it found and no problem.
Then I went to Diskcleanup and cleaned up all the files, including Clean up System files. In there I made sure to check off everything actually. Doing this twice, Windows.old and Windows10upgrade are still showing in File Explorer. I might add, that "previous windows installation" is not showing in the Disk Cleanup. Yet it is still there in File Explorer.
I guess my question is, is there another way to remove this stuff so I can free up Disk space?

More replies
Relevance 39.36%

Hello Tech Support,

I have tried all I know including Malware-bytes and alike, reset all browsers, uninstall all browsers and reinstall to no avail . Adds keep popping up every time I search in the internet. I have gotten great help from you before please help me again.

I would greatly appreciate it.

Roger

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz, Intel64 Family 6 Model 42 Stepping 7
Processor Count: 4
RAM: 6038 Mb
Graphics Card: NVIDIA GeForce GT 525M, 1024 Mb
Hard Drives: C: Total - 456835 MB, Free - 312133 MB;
Motherboard: Dell Inc., 0FRK44
Antivirus: McAfee Anti-Virus and Anti-Spyware, Updated and Enabled
 

Answer:Unable to remove CoudScout! Please Help

9 more replies
Relevance 39.36%

I have three adware programs that keep coming back.  They are
 
NexttCouep
PprIceChop
SaVeMass
 
I have uninstalled them using control panel.  I have uninstalled them using adware.cleaner 3.3 program, and they keep returning causing countless windows to pop up.
 
I am running on Windows 7 with Chrome browser
 
Please help me.

Answer:Unable to remove adware...Need help

Hello and welcome to Bleeping Computer! My nickname is Pystryker , and I will be helping you with your issue today.Before we get started, I have a few things I need to go over with youIf you are receiving help for this issue at another forum, please let me know so I can close this thread.Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process.Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.At the top of your post, please click on the "Follow this topic" button and make sure that the "Received notification" box is checked and set to "Instantly" This will send an email to you as soon as I reply to your topic, allowing us to solve your problem faster.If any of your security programs give you a warning about any tool I ask you to use, please do not worry. All the links and tools I provide to you will be safe.Please read through my instructions carefully and completely before executing them. I will lay the instructions out in a step by step order to make them easy to follow.Please make sure that all the programs I ask you to download are downloaded to and run from your Desktop.Please make sure you (if you are able) to print out these instructions so that you will be able to refer to them while working on your machine. Part of the solution(s) to your problem may in... Read more

14 more replies
Relevance 39.36%

Logfile of Trend Micro HijackThis v2.0.2Scan saved at 16:52:58, on 05/05/2008Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\Ati2evxx.exeC:\WINNT\system32\svchost.exeC:\WINNT\System32\svchost.exeC:\WINNT\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\PROGRA~1\Compaq\COMPAQ~1\hibserv.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINNT\System32\NMSSvc.exeC:\WINNT\system32\regsvc.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINNT\system32\stisvc.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\WINNT\system32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\WINNT\system32\svchost.exeC:\WINNT\Explorer.EXEC:\WINNT\system32\PRPCUI.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Compa... Read more

Answer:Unable To Remove "trojansc.sbi"

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computer http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.Have a look here: http://forums.spybot.info/showthread.php?t=14869If that is not what you are looking for, try posting Spybot S&D questions here:http://forums.spybot.info/forumdisplay.php?f=4 For other issues, please read and follow the directions posted above and pinned to the top of the forum.ThanksIf your issue is resolved, post to let me know so I can close your topic.

2 more replies
Relevance 39.36%

NOTE: The "attach.txt" file is attached to this reply
Note:  these files posted here per request of Broni
 
Mod Edit:  Previous AII topic, http://www.bleepingcomputer.com/forums/t/543923/malwarebytes-reports-it-blocked-fixraycom/#entry3446901 - Hamluis.
 
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16561  BrowserJavaVersion: 10.67.2
Run by louis at 10:59:32 on 2014-08-14
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.3069.1277 [GMT -5:00]
.
AV: Norton Internet Security *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program ... Read more

Answer:unable to remove FIXRAY.COM - DDS log is below

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.
 
If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===
 
Please download AdwCleaner by Xplode onto your Desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click the  Scan  button and wait for the process to complete.
Click the Report button and the report will open in Notepad.

 
IMPORTANT
 

If you click the Clean button all items listed in the report will be removed.

 
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
 

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click the  Scan  button and wait for the process to complete.
Check off the element(s) you wish to keep.
Click on the Clean button follow the prompts.
A log file will automatically open after the scan has finished.
Please post the content of that log file with your next answer.
You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).

===
 
Download the  version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press ... Read more

29 more replies
Relevance 39.36%

I have been unable to get rid of this browser hijacker.  Things I've tried:
 
Full Norton 360 scan
Full Malwarebytes scan
Full Emsisoft scan
Autoruns - I searched but could not find a matching startup entry.
 
dds.txt attached.  You nice folks helped me with a problem four years ago and I"m confident you can help again.
 
Thanks
KMS

Answer:Unable to remove safesear,ch

Hello and welcome to Bleeping Computer! My nickname is Pystryker , and I will be helping you with your issue today.Before we get started, I have a few things I need to go over with youIf you are receiving help for this issue at another forum, please let me know so I can close this thread.Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process.Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.At the top of your post, please click on the "Follow this topic" button and make sure that the "Received notification" box is checked and set to "Instantly" This will send an email to you as soon as I reply to your topic, allowing us to solve your problem faster.If any of your security programs give you a warning about any tool I ask you to use, please do not worry. All the links and tools I provide to you will be safe.Please read through my instructions carefully and completely before executing them. I will lay the instructions out in a step by step order to make them easy to follow.Please make sure that all the programs I ask you to download are downloaded to and run from your Desktop.Please make sure you (if you are able) to print out these instructions so that you will be able to refer to them while working on your machine. Part of the solution(s) to your problem may in... Read more

4 more replies
Relevance 39.36%

I have a PC with Windows 8.1 operating system. I have malware that I am unable to remove.
 
Background: The PC is used by my 10 yr old son for Minecraft. I suspect he sought out a mod to download and clicked where he should not have, all the warnings about downloading without dad being around.
 
Symptoms: Unwanted ads pop up at the lower right corner of the screen. They can be closed clicking the X with no issue. They will reappear randomly every 10 minutes or so. I will receive pop up notifications courtesy of Malwarebytes Anti Malware in the same area that provide me with the following warning:
 
KDV.decipheringwarns.com
38.134.106.126
Port 51456
Outbound
 
or 
 
adnetworkperformance.com
130.211.186.109
Port 51763
Outbound
 
Steps taken:
Ran Malwarebytes program with updated database. Removed over 370 items. Issue remained, but not as extensive. I have some logs generated that may be helpful - see below
 
Reviewed previous assistance from LoPhat at Gladiator a couple of years ago when he helped me remove Shopping Assistant and ran the following thinking that those programs may help:
 
Ran Adware Cleaner - See Log posted below
Ran Junk Removal Tool - see log posted below
 
The pop ups and notifications still persist. 
 
Any help to remove the remaining pieces would be greatly appreciated.
 
 Malwarebytes Anti-Malware
www.malwarebytes.org
 
 
Update, 2016-11-02 3:48 PM, SYSTEM, GAMING-PC, Schedule... Read more

Answer:Malware - unable to remove

Hello, Run RKill, now before any reboot run a MALWAREBYTES scanPlease download Rkill by Grinler and save it to your desktop.Link 1Link 2Double-click on the Rkill desktop icon to run the tool.If using Vista/Windows7, right-click on it and Run As Administrator.A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.If not, delete the file, then download and use the one provided in Link 2.If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.If the tool does not run from any of the links provided, please let me know.Do not reboot the computer, you will need to run the application again.ESET Online ScannerClick here to download the installer for ESET Online Scanner and save it to your Desktop.Disable all your antivirus and antimalware software - see how to do that here.Right click on esetsmartinstaller_enu.exe and select Run as Administrator.Place a checkmark in YES, I accept the Terms of Use, then click Start. Wait for ESET Online Scanner to load its components.Select Enable detection of potentially unwanted applications.Click Advanced Settings, then place a checkmark in the following:Remove found threatsScan archivesScan for potentially unsafe applicationsEnable Anti-Stealth technologyClick Start to begin scanning.ESET Online Scanner will start downloading signatures and scan. Please be patient, as this scan can take quite some time.When the scan is done, click List threats... Read more

7 more replies