Computer Support Forum

Unable to remove CD Drive (Z:)

Question: Unable to remove CD Drive (Z:)

Greetings, Nothinglynothing here. I need some help with the removal of CD Drive (Z
It only appeared after I accidentally downloaded a bunch of virus from a website. I managed to clear out all the virus but I cant seem to find the way to delete this CD Drive. From my searches, I think this CD Drive might be some kind of Virtual Hard Disk (VHD). I am not sure about it though. Hope someone can help me with it. Thanks in advance.

More replies
Relevance 100%
Preferred Solution: Unable to remove CD Drive (Z:)

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Relevance 52.48%

Hi all,
Please can somebody help me, I've a relatively new SanDisk Cruzer Slice 64GB USB pen drive, which I use for work mainly. It has somehow managed to write protect itself and no matter what I do I simply cannot remove it!

I've scanned with Antivirus, nothing found

I've tried regedit - Computer\HKEY_LOCAL_MACHINE\SYSTEM\
CurrentControlSet\Control\StorageDevicePolicies

StorageDevicePolices didn't exist so I created a 32 bit Dword string, set to 0 this hasn't done anything

I've tried Diskpart as administrator -
DISKPART> list disk
Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 298 GB 1024 KB
Disk 1 Online 59 GB 0 B
DISKPART> select disk 1
Disk 1 is now the selected disk.
DISKPART> attributes disk clear readonly
Disk attributes cleared successfully.
DISKPART> clean
DiskPart has encountered an error: The request could not be performed because of
an I/O device error.
See the System Event Log for more information.

I've checked the logs and it doesn't seem to list anything for the drive

Answer:USB Drive Write Protected itself, unable to remove

How is the disk formatted? FAT32 (I believe the default, could be wrong) or NTFS?

If it's FAT32, and you are trying to copy a file larger than 4GB, then it's not going to let you write to it due to the limitations of FAT32. You would have to re-format the disk to NTFS.

It also could be possible that the disk became corrupted during a write operation (ie., not using "remove") in the system tray when unplugging the drive from the computer...

Copy whatever files you currently have on the disk to your HD for temporary safekeeping and format the disk again.

Also, what version of Windows are you using? Is it the Professional version or Home version? Are you using, or did use, bitlocker on this machine? Or a TPM? If you did, bitlocker automatically changes some policies to read only for removeable drives, and if you have Windows 8 Pro, we can go in a fix that throught the group policy editor.

3 more replies
Relevance 52.48%

unable to remove autorun.inf from flash drive
hi,
last weekend i found autorun.inf (i suspect a virus) in my pen drive, and my antivirus mcafee unable to detect it, though i update it daily.

whenever i delete it manually, it got deleted but it reappears when i eject and plug in my flash drive again.

plz if any one cud suggest me sum measure.
thanks in advance.


with regards,
SHUBHAM GORE

Answer:unable to remove autorun.inf from flash drive

ALKOHOLU


this folder, always reside in my usb drive , though i format it frequently.
CAN any one could give me some information to remove this recursive virus.

2 more replies
Relevance 52.48%

Last week i bought an Mp3 player, which can also be used as a flash drive/ USB Mass Storage, Last Night I loaded a video onto it to transfer it to another PC, i deleted all of the music off it so that the video would fit on, But After i had finished transfering the video over onto the other PC, I could not delete the video off my MP3 Player! it fills almost all of the room (512mb) on the Mp3, so i cannot put any of my music on it.

When I try to delete the file it comes up the an error message that the file is being used by another person or program, even though i am not using any programs with the USB drive. It never used to do this when i just had mp3s on it, so what has gone wrong?

Any help will be appriciated, Thank you
 

Answer:Unable to Remove Data From Flash Drive?!!!!??? Please Help!!

I Forgot to mention that my opperating system is windows XP.

I can put other files onto the Drive, and take them off again, just i cant remove the goddam video taht takes up all the memory. PLEASE Help getting flustrated with the fact that i only bought it last week and its already srewed up.

I have tryed to format it, however a similar error message is displayed about the drive currently being in use, however it diesnt do it with any other files that i can put on.
:dead:
Please Help Before i get the hammer out....... :knock:
 

6 more replies
Relevance 52.48%

A friend brought a computer over for me to see what is wrong with her DVD drive. The drive isn't working at all but I can't figure this case out. I took the screws out but it won't come out the back at all....moves about an inch. Any suggestions?? I have looked on their website but found nothing. Thanks in advance for any advice.
 

More replies
Relevance 52.07%

Hey guys I have a question involving an external hard drive and windows 7 libraries. I have this external hard drive (WD500GB My book) which has all my backup information (as per Windows Backup feature; great stuff) as well as all my music and movies. I really like the idea of using libraries to list all the music and movies from both my internal and external hard drives in one place; so I've included the external hard drive folders in the various libraries. The problem I run into is that I cannot safely remove the external hard drive; it refuses to do so.

I know it is due to the external being included in the libraries and not due to Windows Backup storage location being the external hard drive because I kept the Windows Backup settings the same (with the storage being the external hard drive) and removed the folders on the external from the libraries and it safely removes fine.

I realize I could set it so that write cacheing is disabled and I could remove it whenever, but this yields lesser performance (correct?) I'd rather keep write cacheing on; is there any way for me to include the external hard drive in the libraries while having the ability to safely remove the hard drive?

Thanks in advance

Answer:unable to safely remove external hard drive

WD has released all new software for the MyBook series drives; I had the same problem you mention and after installing the new Drive Manager and MyBook software it is working nicely for me now.

1 more replies
Relevance 52.07%

My Uncle's computer (HP XP SP2) detected Trojans throughout his computer last night and some were in the D: drive under system restore points so like always he disabled system restore and some of the Trojans were able to be removed, however 6 are still left. Two in the C Drive and 4 in his D drive. This is AVG's results from today:"C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""C:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\hp\patches\51WW1ITG\Intel_Video_B6_6_14_10_3889_ALL_ALL_WW-01.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected""D:\I386\drv\APP07399\App07399.exe:\hp\tmp\src\igfxext.exe";"Trojan horse BackDoor.Generic11.MDQ";"Infected"Here is his Hijackthis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:11:25 P... Read more

Answer:Unable to remove Trojan infections from Recovery Drive

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 51.25%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

More replies
Relevance 51.25%

Hello, I am trying to replace the hard drive on my desktop computer, but I am currently having trouble  with removing the metal cage that encloses the hard drive. This is the recommended method of replacing the hard drive, according to these instructions: http://www.manualslib.com/manual/359309/Hp-Pavilion-P6230f.html?page=21#manual I am stuck on step 13 for that manual in particular. I push down on the "#1" latch, and pull forward, but it's not sliding forward. I am unsure what I am doing wrong, but the thing is not moving. Do you guys have any idea what I may be doing wrong? Thank you.

Answer:Unable to Remove Hard Drive Cage from Desktop computer

Hi, Slide the HDD cage towards the top of the PC  while depressing the latch. Then pull the cage out of the tower. I have an h8 1380t with the same HDD cage. Jay   

1 more replies
Relevance 51.25%

Hello. In my last post, I had a problem mounting my external HDD, so bought a new external enclosure, but now I can't get the hard drive out of the first case. After opening the back of the case where everything connects, I cannot retrieve the hard drive itself. It won't slide out.

I have the same "Smart Drive"external hard drive case as the one in this video http://www.youtube.com/watch?v=4slNzGLUDv4 except mine is not an empty enclosure. In the video, the guy removes a slide from the top and bottom of the case with such ease, whereas, I am unable to further remove any part of the shell around the hard drive itself. I can clearly see it, but it's just stuck in place.

What should I do? Please help.
 

Answer:Solved: I am unable to remove the hard drive from my external shell. Please help.

7 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Originally Posted by Windows Central Question I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.
I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).
I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."
Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.
Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely. I understand that you're extremely frustrated however I'm not sure what anyone could do to help without you clarifying three things.
Three questions.
1) Are you using a NAS Enclosure?
2) Are you using a Server Rack?
3) Which O/S are you using?
We're not mind readers you know , so please join and provide more information in this thread.

more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Wiping the hard drive should get rid of any trace of virii. It can't be a BIOS virus either (it can't do something as complex as what your computer is going through; as far as I know anyway).

Chances are you're installing infected software or you're not securing you computer adequately before allowing it Internet access (Firewalls, Windows service packs, Anti-virus, etc.).
 

26 more replies
Relevance 50.84%

Ok, Im working on a relatives computer. Im sure its got at least some malware. Its running XP SP2, but some individual decided to install VistaMizer on it, which makes it look like Vista. Thats a problem. Its got a couple programs that Im flagging as bad for now: Babylon, Winning Eleven 7 International, and possible WinAmp Remote.
Flagged Tasks running: Domino.exe, ZSSNP211.exe, and FrzState2k.exe
Antivirus program is Avira AntiVir Personal edition.

Every time I restart the computer, even from safe mode, everything is back to the way it was before. Temp files I deleted are back. Programs I removed are back. Programs I installed are gone. Im working on doing the basic removal steps now, and Ill post my logs as soon as I have them.
 

Answer:Hard drive restores itself to previous state, unable to remove malware.

Heres my logs.
 

7 more replies
Relevance 50.84%

Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,
2. In a hard drive after one wipes the drive with zeros'?

I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.

My Virus program (NOD32) see that file, but it can't find what is producing it.

I have wiped the drive using the manufactures 'write zeros to the drive', reformatted and reloaded the O/S (orginally XP, now 2k), but this is still here.

Any ideas as this never happened to me before that I couldn't get rid of the 'problem'.
 

Answer:Unable to remove 'hidden' virus/trojan/worn after wipeing drive

Welcome to Major Geeks!





videobruce said:





Can a virus/trojan/malware/worm etc. reside;

1. In a motherboards Bios,Click to expand...

Yes but this rarely occurs.





videobruce said:





2. In a hard drive after one wipes the drive with zeros'?Click to expand...

Yes. The FBI and CIA recover files all the time from systems where people think they have erased; however it is very unlikely that you have become reinfected from a drive that you have done this to. Did you delete your Windows partition before formatting and reinstalling. Are you reconnecting this PC to a network with other PCs? They could be the cause of your reinfection or you may not have a properly protected PC and you could be getting infected from the internet.





videobruce said:





I have 'something' that is creating a duplicate Windows file and putting in the Windows\Systen32\Wins folder called "DLLHOST.EXE" and possibly "SVCHOST.EXE" (in all caps) that starts up by itself and starts sending data over by DSL connection.

I use a program called DU Meter and I see this upload activity. I then check Task Manager and this "DLLHOST.EXE" shows (again, in all caps) which I notice right off the bat. I can't stop the process unless I boot into Safe Mode.Click to expand...

See this: http://www.symantec.com/security_response/writeup.jsp... Read more

3 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

3 more replies
Relevance 50.84%

I had 3x 3TB drives in a parity pool. It started to fill up so i added a fourth 3TB drive and months later one of the original 3 began to fail on me. Performance was slow, then slower, then it showed disconnected.

I retired the drive and added a replacement, literally the same model 3TB drive. I cannot however, get it to remove the failed physical disk and repair the pool. I even tried adding another 2TB drive i had available in case it needed the extra space (didn't make sense but i was reaching).

I get the "drive could not be removed because not all data could be reallocated. add an additional drive to this pool and reattempt this operation."

Any ideas on what i need to do? I have searched a lot and don't really seem to be getting anywhere. The only way i was able to retire the drive was through powershell. I'm assuming it's a GUI issue and perhaps i'm not approaching it correctly via powershell. Attempting to repair virtual disk didn't work.

Any help is appreciated! I really don't want to lose this data. I wasn't able to backup much before the drive failed completely.

Answer:Storage Spaces - Unable to Remove Failed Drive / Repair Pool

Nada??

0 more replies
Relevance 50.43%

  hey bro help me solve this problem. I m unable to remove usb write protection from my flash drive in win7 using given solution. what should i do please suggest as fast as u can

Answer:unable to remove usb write protection frrom my sandisk flash drive in windows 7

Using given solution? Is url reference missing that you meant to include?As far as this flash drive goes... I would backup the contents of it to a hard drive or another flash drive before making any attempts to make it read/write enabled again.Then once you have backed up the data on it, delete the partition on this drive if allowed. Then create a new partition and format that partition. But with write protection enabled you might not be able to do this. However if the flash drive is simply corrupt you may be able to delete the partition and create new and format fresh.Given the price of flash drives these days I wouldnt spend too much trouble with trying to fix it. Some flash drives when they fail internally no longer accept write requests, and your lucky that they will even read.I am assuming that this USB flash drive doesnt have a slide switch like some USB flash drives have to make them write protected.

1 more replies
Relevance 45.92%

Hi! I'm hoping someone can help me with this problem... I've been trying to backup my computer to an external drive and I keep getting the error code: 0x8078002A. I've tried numerous times in the past few weeks with no success and the same error code each time. My laptop is a Dell XPS 17 (L702X, Early 2011) with an Intel® Core™ i7-2760QM CPU @ 2.40GHz processor with 8.00 GB of installed memory (RAM). The Windows edition I'm running is Windows 7 Professional. The size of the backup that I'm trying to run is 327.56 GB (and I know there is plenty of space on the external drive to accommodate the backup).The external drive I'm trying to back up the laptop to is a WD (Western Digital) My Book external hard drive that is a 4 TB hard drive. It currently has 1.88 TB free of 3.63 TB according to its properties. I recently performed an "Error-Checking" run with the external hard drive (by clicking on 'Properties' and then the tab that said 'Tools' and then 'Error Checking' and it went through that process and fixed whatever errors it might have found. I had read on some other forum that I should try doing this to see if that would make the backup work, but it still won't work and I'm still getting the same error code.
 
I read on another forum that you could possibly be getting the error code 0x8078002A if you had a virus or malware or some other type of problem.  I'm not sure what else to try or do...  I do run Super Anti-Spyware Free Edition regularly as ... Read more

Answer:Unable to Backup Laptop and Unable to Remove VSO Downloader Program

Hello there,From this article, it appears to be a bug in Windows Backup.Can you try using a third-party backup utility? Good choices are Macrium Reflect (for imaging) or EaseUS Todo Backup.Since you have a Western Digital drive, it is also possible to use Acronis True Image WD Edition.Let us know how that goes.Regards,Alex

12 more replies
Relevance 45.51%

Hello all,

i am trying to uninstall a program called "Scanner utility for Windows" (from 'Add/Remove programs'), but once its removed it still shows up under 'Add/remove programs', it doesnt disapear from there.
i tried rebooting the computer afterwards, but it still shows up in there.

i am able to remove it from another computer, so not sure what the issue is.

i am logging with administrator rights on both computers, so what could the issue be?

thank you

PS Both computers run on Windows XP.

Answer:Unable To Remove Software- It Still Shows Up Under 'add/remove Programs'

Hello alexcirnuThis should help solve the problem http://windowsxp.mvps.org/AddRemove.htm

1 more replies
Relevance 44.69%

Hi, I performed the runme part and have listed all results below. I cannot seem to add or remove some unknown programs from my list. I do not believe that they're malware. Help anyone? I've already done a system restore and don't want to delete using ccleaner in case it's something I need.

1. Basic Computer Maintenance:
Add/Remove Programs: Encountered long list of programs that are unknown and unremovable.
Cleaned hard drive using CCleaner
Removed invalid registry entries using CCleaner:ran 4x
Startup: only 2 programs run on startup: AGRSMMSG and ATIModeChange
Defragmented C drive using both Microsoft and IObit SmartDefrag

2. House Cleaning and Setup
Am not using Multiple Antivirus Apps or Firewalls
Under control panel/add remove programs, no malware programs listed, only unknown and unremovable programs.
Msconfig changed back to Normal Startup Mode from Selective Startup
No Quarantined folders
Emptied recycling bin
Reran CCleaner and removed excess items from startup, only above 2 remain
Repeated above step on all other users

3. Enabled viewing of hidden files etc.

4. Followed Windows XP Cleaning procedure
Downloads: Combofix to desktop
Spybot search and destroy download new version
AVG Anti-Spyware
MGtools to C drive

Install & Run Scans
When I ran AVG it did not produce a log even though I followed the steps.
 

Answer:unable to access add remove key in add remove programs

Your logs look clean.
However, use add/remove programs to uninstall:
Viewpoint Media Player

Then please install:
SevicePack2

If you are not having any other malware problems, it is time to do our final steps:

1. If we used Pocket Killbox during your cleanup, do the below
* Run Pocket Killbox and select File, Cleanup, Delete All Backups
2. If we used ComboFix, you can delete the ComboFix.exe file, C:\ComboFix folder, C:\QooBox folder, C:\WINDOWS\nircmd.exe, C:\combofix.txt and C:\ComboFix-quarantined-files.txt logs that was created.
3. If we user SDFix you can delete all the SDFix related files and folders from your Desktop or whereever you installed it.
4. If we used SmitFraudFix, you can delete all files and folders related to it now including the c:\rapport.txt log.
5. If we used VundoFix, you can delete the VundoFix.exe file and the C:\VundoFix Backups folder and C:\vundofix.txt log that was created.
6. If we had your run FixWareOut, you can delete the Fixwareout.exe file and the C:\fixwareout folder.
7. If we had you run Avenger, you can delete all files related to Avenger now.
8. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
9. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
10. If you are running Windows XP or Windows ME, do the below:
* Refer to the cleaning steps in the READ ME for your... Read more

1 more replies
Relevance 44.69%

I am having win xp as my operating system. I am unable to remove following programs from add or  remove programs:1. Internet Security Add-On2. Public Messenger ver 2.03and when I attempt to remove these I get an error message window saying that "You should reboot your computer prior to uninstalling this software. Reboot now?" Even after rebooting the same thing is repeated.In addition there is one more problem in internet explorer whenever I try to open www.yahoo.com http://awarninglist.com/ gets opened. I dont want to format and put win-xp again, I want an alternative solution. I read REFERENCE NUMBER: CH000568 in www.computerhope.com regarding TweakUI and tried it but could not find any add/remove tab...

Answer:unable to remove programs from add or remove progr

Try CCleaner.  You can download it from:http://www.majorgeeks.com/download.php?det=4191After installing it, I suggest you first run its Windows scan and remove stuff it finds.  Then, run its Issues scan, backup the registry when prompted, and then delete the items it found.  Then, use its Uninstall tool, under Tools, to try deleting the programs.  

1 more replies
Relevance 44.69%

Hi..I have a Program that has been installed on my PC which I wish to remove using Add/Remove program from Control Panel...but it will not uninstall. Please let me know if this can be done from the Registry....and how I actually perform the task If not, is there another way? The uninstallation continues for a few minutes and then stops . Your assistance would be much appreciated....Ray.

Answer:[SOLVED] Unable to remove Program from Add/Remove

Open Task manager>Process to check whether this program is running or not. If not, you can try to uninstall by uninstall file,located in program files. If still not, you can use some third party uninstaller software.

3 more replies
Relevance 43.05%

My son downloaded an inappropriate game and I am unable to remove it in the add and remove program. It gives me the message that it is unable to locate the installation log file, and the uninstallation will not continue. How do I get rid off this??
 

Answer:unable to remove game from add and remove

8 more replies
Relevance 43.05%

In add and remove I have program Dan Elwells speed test which I want to remove but it says I can`t as it doesn`t exist. I have run a search and it says nothing found. How can I remove the entry in add and remove please. OS is XPhome.

Answer:Unable to Remove program using add & remove.

Have you tried the Ccleaner uninstaller click here

10 more replies
Relevance 43.05%

OS is xphome sp1. I am trying to remove Google Earth using add and remove but get a message saying that it has encountered an error and is unable to remove it. I have tried doing it in Safe Mode but get the same message. Any suggestions please?

Answer:Unable to remove a program from add&remove.

Remove while in safemode or click here

10 more replies
Relevance 41.41%

After online researching, I ended up into this forum >> disk 1 is unknown, not initialized, unallocated

I downloaded the Partition Wizard from Jumanji's link, installed, and followed instructions until the end.

After assigning drive letter (G:\), the PW shows that it is indeed assigned to drive G:\ BUT, I still can't see it in My Computer so I checked Disk Management and it still shows the same status/problem as it was from the beginning.

Is/are there any further necessary step/s after assigning Drive letter to the recovered disk?

When I try to close the PW, it says "You are about to quit the program and cancel all pending operations. The changes you have made will be lost."

I don't know what to do from here. Please help

Thanks in advance..

Answer:Disk unallocated, unable to initialise, unable to assign drive letter

OK, It could be a simple matter.

But I want to have a clear picture of what exactly your problem was.

1. Are we dealing with in internal drive or external drive?

2. Was the drive suddenly not accessible in My Computer?

3. Was it seen in Disk Management? What did it show? Even now you can take a screenshot of how the drive appears in Windows Disk Management and post it
Disk Management - Post a Screen Capture Image

We will then proceed step by step. I am here for the next 11 or 12 hours but peep in once in an hour or two and follow up.

I know you had used PW. But we shall get on to it after you post the Windows Disk Management screenshot.

BTW what is your local time? If you are in USA you can go to sleep and come back after six or eight hours. No problem.

9 more replies
Relevance 41%

Been buggering around with this for a while now.

I have an 2 internal hdd, and an external hdd, which is pretty much always on, and it appears in the 'safely remove hardware' in the systray.

I also have a portable HDD, for bringing files to and from work, which appears there also.

I want to be able to remove the portable safely, without accidentally removing the external hdd as i keep forgetting which drive is which!

I've dinkered around with making either/or drive 'Optimized for quick removal or Optimized for performance' in the hopes that they wouldn't appear - ideally I only want the portable listed (I can always disconnect the external when the machine is off).

Anyone any ideas?
 

More replies
Relevance 40.59%

Each time I try to remove "Web Search" with add/Remove programs I get an error dialog - "The Microsoft Java Virtual Machine cannot find main class; will exit".

FYI...
I was just reading another forum after googling for removal tools...
...and someone suggested that the only way to remove it was to format the drive and start over... ......I'm still laughing!! (but I guess it's sad, because someone is going to believe that advice.)

Anyways.. looking for good suggestions and directions.

(I'm still laughing)
edited:
I'm unable to run the new version of HJT it keeps giving me an error and knock me out.
added a HJT for good measure using the older versions

Logfile of HijackThis v1.98.2
Scan saved at 1:15:12 AM, on 2/8/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\msiexec.exe
C:\Utilities\hijack this\HijackThis old.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Sear... Read more

Answer:Unable to remove "Web Search" with Add/Remove Programs

Hello ucurl!

Your HijackThis log is clean.

Your error message suggests that you have something missing or in error with the installation of the Microsoft version of the java virtual machine.

I am not sure how to help you with this problem, but I can tell you that it is not a security threat.

I suggest that you post your problem in the Windows XP forum on this website.

Good Luck!
 

1 more replies
Relevance 39.77%

Hello all. I'd like to start by saying I'm a big fan of this site, it has been helpful many times in the past.
A little bit of background on me. I have been running a small on call/on site computer repair service for a few years and have some CompTia certs. I am a Moderator for a forum at a well respected and large fps game site, so i do truly understand what you guys deal with and appreciate all the time and effort.

This is the first thing I've run across that I have failed to fix/remove

Ok on to my issue. I did get a version of the '11 security tools virus (kids get on this pc sometimes lol)
I was able to remove it and all the BHO's that went with it using rkill/combofix, HijackThis and Malwarebytes. But one thing that remains in my cp. It calls itself aaa and uses the java icon (publisher bbb comments ccc). I have hit a wall trying to figure out what this exactly is. I have nothing "going wrong" on this pc, but it still bothers me and can't be good.
When i try to uninstall it simply says it can't.
I have tried searching these forums and doing what another thread suggested, which is pretty much the same things i did to rid myself of the virus in the first place, but the person infected never responded and the thing remains.
So I am asking for some help on this.

My stats;
win xp pro.
AMD Athlon 64 X2 Dual Core Processor 6000+ | Socket AM2 | 3013/201mhz
FireFox 3.6.16
Avira AV

Many thanks for your time.

Answer:unable to remove aaa from add/remove

If Add/Remove Programs is showing an entry but the program/folder has been removed, then its likely an orphaned entry in the Windows registy. Orphaned entries can be removed by going the registry but a much safer and easier way to do this is to download and use a third party program like MyUninstaller or RevoUninstaller. After launching the program, right-click on the entry and choose the option to "Delete the selected entry".To fix manually in the registry, refer to:How to Manually Remove Programs from the Add/Remove Programs ListRemoving invalid entries from Add or Remove ProgramsKellys Korner: Removing Invalid Entries in the Add/Remove Programs ToolCAUTION: This step involves making changes in the registry. Always back up your registry before making any changes. If you are not familiar with working in the registry, then you should NOT attempt to make any changes on your own. Improper changes to the registry could adversely affect your computer and render it inoperable. ERUNT is an excellent free tool that allows you to to take a snapshot (backup) of your registry before making changes and restore it when needed.

7 more replies
Relevance 39.77%
Question: Unable to remove

I keep getting pop-ups from SysProtect and WinAntiVirus. I have no idea how to remove these spywares and it is very frustrating. Can anyone help. Here is a copy of my HJ log:

Logfile of HijackThis v1.99.1
Scan saved at 2:37:00 PM, on 6/17/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton Internet Security\ISSVC.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\EPSON\ESM2\eEBSVC.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.... Read more

Answer:Unable to remove

10 more replies
Relevance 39.77%

Hi, I hav been having some pop-ups that I haven't been able to get rid of with Spybot or Ad-Aware. These include AVSystemcare and other ads which relate to pages I'm currently viewing.

I have a Dell Inspiron 9300 (with an upgrade to 2GB of RAM) and am running Vista Business.

Also, when I have an external hardrive plugged in, the mouse becomes hard to control, stalling for a bit. Similarly, the keyboard misses letters when typing into webpages (not necersarily with the HD plugged in) but is always ok in Word or Notepad - which is where I'm typing this message now to copy across.

Many thanks,
Cpt Black
 

Answer:Unable to remove pop-ups

Here is a Hijack this log if that helps:

Logfile of HijackThis v1.99.1
Scan saved at 5:28:53 PM, on 01/09/2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Thomson\ST330\diagnostics\diagnostics.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\I8kfanGUI\I8kfanGUI.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Chris\Documents\HijackTh... Read more

2 more replies
Relevance 39.77%

Hi I need help to remove 888, celldorado,adult friend finder and many others pop upI had tried to used spybot ,lava and clear all the cookies ,temporary files for the explorer but the problems still exist please help thank you.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:46:45 PM, on 11/4/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16544)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Ahead\InCD\InCDsrv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Synaptics\SynTP\SynTPLpr.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\system32\svchost.exeC... Read more

Answer:Unable To Remove Pop Up

Welcome to the BleepingComputer HijackThis Logs and Analysis forum seraya My name is Richie and i'll be helping you to fix your problems.The current formatting of your log makes it difficult to read/evaluate.Open 'Notepad',click on 'Format' at the top,then uncheck 'Word Wrap' if it's checked.If you have previously downloaded ComboFix,please delete that version now.Now download Combofix and save to your desktop:Note: It is important that it is saved directly to your desktop Close any open browsers.Disconnect from the Internet. Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note: Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Do NOT post the ComboFix-quarantined-files.txt unless I ask.*NOTE*In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix,please disable your scanner and redownload Combofix again.Some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.Download Deljob.exe and save it on your desktop.Double click on Deljob.exe.A log,(logit.txt) should open afterwards. This log will be present on your desktop.Post the contents of the logfile into your next reply,along with a new Hijack This log.

1 more replies
Relevance 39.77%

Been having problems with windows security centre not monitoring sygate firewall and avast antivirus, i am not able to access windows firewall atall,ithought if i remove sp2 and reload it, it may solve the problem,i go to add/remove and click delete,it gets so far then a small window appears saying it has failed to uninstall,then i get nine windows updates to install,as i said in my previous thread two weeks ago i am waiting for my legal copy of windows xp pro,i found that my copy was illegal so i paid for a legal copy from microsoft,92,i received a new key via email and i am waiting for cd so i can try a repair,thanks in advance,

Answer:unable to remove sp2

Windows Security Centre does not monitor all brands of security software. If you have Sygate firewall installed and functioning then you should not need Windows Firewall as well. If you're waiting for your XP CD to arrive, then I'd just wait untill you reinstall - all should be OK then. Not being able to access Windows Firewall may be a side effect of your illegal copy of Windows.

10 more replies
Relevance 39.77%

I?ve uninstalled IE8 before on 2 other Windows 7 installs with no problems. I go to Control Panel\All Control Panel Items\Programs and Features\turn windows features on or off And uncheck IE 8 , and press ok and I get this error message: ?An error has occurred. Not all of the features were successfully changed.? And it doesn't get rid of IE8. Any idea how to fix this? I'm using Win 7 64bit thanks.

More replies
Relevance 39.77%

My McAffe virus scan detected two PUPs that could not be deleted, cleaned or quarentined. I rebooted in safe mode and found seven PUPs that I deleted. However I still get a pop up whenever I start my computer and approximately every half hour or so after that. The pop says "powered by zedo' and this is the url:

http://c5.zedo.com/jsc/c5/ff2.html?n=350;c=585/6;s=363;d=16;w=720;h=300

I have run "Hijack This" and below I have attatched the log file. Can anyone help

Thanks
Pete
 

Answer:Unable to remove pop up

7 more replies
Relevance 39.77%

I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.

Answer:unable to remove....

  
Quote: Originally Posted by terz


I tried to install an old Pinnacle program but found a runtime error. I decided to install and lose this program. However, despite uninstalling and removing all traces of the program, each time i boot up I get a box tell me that Pinnacle drivers can't be found But even after clicking on the "dont show me again" tick box it reappears eveverytime. I've used "search" but cannot find any traces. Ive also cleaned the registry.


Have you checked "Device Manager" for any entries with an "!" mark. You may be able to delete any entry that relates to the Pinnacle program there, also.

HTH

5 more replies
Relevance 39.77%
Question: unable to remove

hi helpers, everytime i start PC i get this annoying window which says "diconnected blackberry desk manager " my son installed it ages ago and i remember trying to uninstall and it refused to uninstall kept re installing !anyway when i try to remove now a box comes up saying " this action is only valid for products that are currently installed thanks

Answer:unable to remove

Download this click here, then run it and see if it can do the job.

6 more replies
Relevance 39.77%

A friend of mine keeps getting a pop up from some sort of movie site stating his free trial is over and He needs to give his credit card info to continue the subscription. How can we keep this from coming up? Hopefully the below HiJack this log will help. thanks!!Logfile of HijackThis v1.99.1Scan saved at 9:19:14 PM, on 12/16/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\wltrysvc.exeC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exeC:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exeC:\Program Files\Apoint\Apoint.exeC:\Program Files\Java\j2re1.4.2_03\bin\jusched.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Dell�... Read more

Answer:Unable To Remove Pop Ups

Please click here http://www.majorgeeks.com/Sun_Java_Runtime...ment_d4648.html to download the latest version of JAVA Install the application, then go to the Add/Remove Programs options in the Control Panel and Remove ALL previous versions of JAVA.Add remove programs ? remove MyWay SearchYou may want to print this or save it to notepad as we will go to safe mode.Fix these with HiJackThis ? mark them, close IE, click fix checkedR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://mysearch.myway.com/jsp/dellsidebar.jsp?p=DE R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dllO4 - HKLM\..\Run: [MediaPipe P2P Loader] "C:\Program Files\p2pnetworks\mpp2pl.exe" /H O4 - HKCU\..\Run: [License Manager] "C:\Program Files\License_Manager\license_manager.exe " /silentDownLoad http://www.downloads.subratam.org/KillBox.zip orhttp://www.thespykiller.co.uk/files/killbox.exeRestart your computer into safe mode now. (Tapping F8 at the first black screen) Perform the following steps in safe mode:Double-click on Killbox.exe to run it. Now put a tick by Standard File Kill. In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a tim... Read more

4 more replies
Relevance 39.77%

Running XP Professional

A friend gave me a copy of XP Plus ... loaded alright ...everything seemed to work ... although now when I try to uninstall ... comes up not installed properly.

Whenever I insert the disc [copy that I had installed with] and hit setup it shuts down my computer. Even if I try 'Explore'...then setup...same problem!

Really would like to remove..as I don't like or use it...memory hog

Hope someone can help

Thanking all in advance

Gary
 

Answer:Unable to remove XP Plus

Maybe it can't uninstall because Windows is using it's files...

Start/Control Panel/Display
Select Themes @ top
Hit drop down list & select Windows XP or another that is not in "Plus"...

...then try to uninstall Plus
 

1 more replies
Relevance 39.77%
Question: unable to remove

hello this is my first time on the site,i recently had winblue soft install itself on my system, the computer kept restarting by itself my dsl internet seemed to slow down, and to no avail could i get it to go away, each time i switched the computer on and went into "my computer" and went to open "c:\" threatfire would start a quarrantine process and log to unknow proceccs by removable drives, upon restarting i had no explorer bar or icons on the screen, the only way i could get the explorer bar back on the bottom of the screen was to click cntrol alt delete and run new task and open threatfire up from there and remove to 2 logs from quarrantine and restart, but the same thing happens everytime i go into "my compute" then c:\" the same thing would occur.i uninstalled winbluesoft with the uninstaller and then deleted the folder in "program folders"then searched the registry in regedit, and found 2 registry files with winbluesoft in the title, removed them, and after that winbluesoft never appeared again,while this was happening, i found that my internet explorer was not opertating properly, i would click on tools then windows update, and get taken to a dodgey google site with "www.windowsupdate.microsoft.com" still in the address bar. everytime i tried anything to do with an update connection or downloading an update on the windows site, it would come up with the page could not be connected, everytime i try to do... Read more

Answer:unable to remove

Topic closed at member's request as he/she has reformatted.

Orange Blossom

1 more replies
Relevance 39.77%
Question: unable to remove

Im trying to remove kazaa media desktop from my computer,but it not possible via add/remove because of...The system file cannot be specified ..Error loading C:\windows\system\cd-chnt.dll,and so any help would be appreciated,o/s is windows me .....
 

Answer:unable to remove

telecom69
The only way I know of to remove Kazaa now is to reinstall it over the top of itself and use the new add-remove programs entry in control panel.
After you have successfully uninstalled Kazaa run Ad-Aware 5.83 from http://housecall.antivirus.com/housecall/start_corp.asp and allow it to clean up any scraps left behind. Also review this website to make sure Brilliant is also removed properly.
http://news.com.com/2100-1023-875274.html

Dave
 

2 more replies
Relevance 39.77%
Question: Unable to remove

am asking this on behalf of a friend....had the problem myself, but I can't remember how I fixed it. When using Internet Explorer, if one goes to tools/options, you should be able to delete history,files and cookies. Try as hard as you like, some files will just not disappear. If I go to Control Panel , Internet and attempt to delete from there, same problem.
how to delete them
anitaa
 

Answer:Unable to remove

What version of Internet Explorer, 6.1, 7, or 8?
 

4 more replies
Relevance 39.77%

below is a link to a full screen capture of my spybot scan results. i have tried everything to remove these entries but to no avail. i am also posting my hijack this log file. please post detailed removal instructions as i am a self-proclaimed ad/mal/spyware removal "noob"! thank you and regards.

-AudioWave80

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:15:09 AM, on 12/31/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18241)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\PROGRA~1\CACHEM~1\CachemanXP.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\System32\SnoopFreeSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shar... Read more

Answer:[ Unable To Remove These ] - [ HELP ]!!

16 more replies
Relevance 39.77%

Ran Hijack this per another members request, this is what was pulled, any suggestions? Thanks in advance!!!!BrianLogfile of HijackThis v1.99.1Scan saved at 2:12:06 PM, on 5/24/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\system32\HPZipm12.exeC:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYSC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\MI3AA1~1\wcescomm.exeC:\Documents and Settings\hodgson.POLTDESIGN\My Documents\T?sks\csrss.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\PROGRA~1\MI3AA1~1\rapimgr.exeC:\Program Files\HP\digital imaging\bin\hpq... Read more

Answer:Unable To Remove Pop-ups

Hello O-turn and welcome to BC My name is SNOWHITE and I will be helping you with your Malware problem.As I am still in training I will be helping you under supervision of our expert teachers, so there may be a delay between posts. I will be analyzing your log now, and be back with you as soon as possible!Regards,

25 more replies
Relevance 39.77%

I have been searching for a solution to solve the "Safe Remove" problem in Windows XP.It always happens whenever I try to safely remove any of my USB HDD regardless of brand-name using the safely remove hardware icon in the Taskbar.I get an error message: 'The device 'Generic volume' cannot be stopped because a program is still accessing it.' There are no programs accessing the drive as I only use it for storage. I have always to restart my PC before I can safely remove the USB HDD.I am sure most of you should ecounter this problem at least once in the past!So, anyone know how to eliminate this problem?

Answer:unable to remove the USB HDD

It may be your virus scanner or something else that is continually monitoring your hard drive.More details about what is loaded, etc. would be helpful.

3 more replies
Relevance 39.36%

Somehow I Windows 8 has found its way onto my computer but I cannot get rid of it either by my computer> remove programs or by running Glary Utilities. Both ways keep showing errors which prevent it being able to be uninstalled.I tried to run Spunist.exe but the same thing happened there.So now I don't know what to do. The last time this happened I got rid of it via Glary Utilities but sadly not this time round. My computer runs on Windows XP. Hope you can help.Many thanks

Answer:Unable to remove Windows 8 from my PC

I did not think it was in Beta yet...http://windows8news.com/but if you some how got your hands on one, please send us a copy.If you truly have Windows 8 then it is not a program but an OS. In order to remove an OS you have to reformat and reinstall your computer which would remove every thing. Are you sure you have Windows 8 or did you mean something else.

10 more replies
Relevance 39.36%

Hi

I have had some problems with my laptop running really slow lately, so I added bitdefender security suite to my laptop 2 nights ago, and after 3 scans, I have removed all viruses that I had, apart from 3 issues that it says are hidden in my AppData\local files. The file name is ngvafcakae.exe, can you please tell me how to remove it. I have tried to do the PC scan on your 5 steps procedure, but I am on windows Vista, and it said it wouldn't work with that.

Thanks for any help you can give me, it is much appreciated. My Hijack This log is pasted below.

Regards

Lisa

Logfile of HijackThis v1.99.1
Scan saved at 21:24:32, on 07/02/2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\Common Files\aol\1193267908\ee\aolsoftware.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\AOL\Loader\aolload.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\ehome\ehtray.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe
C:\Program Files\Pando Networks\Pando\pando.exe
C:... Read more

Answer:unable to remove ngvafcakae.exe please help

Bumps

8 more replies
Relevance 39.36%

Tonight, I thought I might as well get rid of the Windows.old and the Windows10upgrade. First, I used Revo Uninstaller to take out Windows10Upgrade. When it came up to uninstall, I thought no, I'll do this later. So hitting the X up in the right hand corner did nothing. So I went to Task Manager and hit the End Task. Great But then Revo came up to do a search in the Registry to I let it go. Clicked deleted on what it found and no problem.
Then I went to Diskcleanup and cleaned up all the files, including Clean up System files. In there I made sure to check off everything actually. Doing this twice, Windows.old and Windows10upgrade are still showing in File Explorer. I might add, that "previous windows installation" is not showing in the Disk Cleanup. Yet it is still there in File Explorer.
I guess my question is, is there another way to remove this stuff so I can free up Disk space?

More replies
Relevance 39.36%

i tried to clean the reg/doshye virus by the steps in the forum, i downloaded combofix and then ran it....after running combofix i thought that the virus would have been removed but when i again scanned it there is a virus in C:/qoobox/quarantine/c/dup2....i again ran combofix ...but still the virus is there itself ...HELP...wanna remove this virus... i had this problem earlier and couldnot remove the virus at that time and my com got infected this time too the same thing has happened... please help...

ComboFix 08-02.01.5 - xyz 2008-02-01 13:54:16.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.177 [GMT 5.5:30]
Running from: C:\Documents and Settings\xyz\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-01-01 to 2008-02-01 )))))))))))))))))))))))))))))))
.

2008-02-01 13:25 . 2008-02-01 13:25 <DIR> d-------- C:\Documents and Settings\NetworkService.NT AUTHORITY\Application Data\Intel
2008-01-31 22:03 . 2008-01-31 22:03 <DIR> d---s---- C:\Documents and Settings\xyz\UserData
2008-01-29 13:20 . 2008-01-29 13:20 <DIR> d-------- C:\Documents and Settings\xyz\Application Data\Corel
2008-01-29 13:20 . 2008-01-29 13:28 394 --a------ C:\WIN\capture.ini
2008-01-29 13:15 . 2008-01-29 22:35 69 --a------ C:\WIN\NeroDigital.ini
2008-01-29 13:12 . 2008-01-29 13:12 <DIR> d-------- C:\Program Files\Common Files\Corel
2008-01-29 13:11... Read more

Answer:reg/doshye unable to remove please help

ComboFix should not be run unless directed to by an experienced helper. Do not run ComboFix again unless directed.

Qoobox is ComboFix quarantine.

Go to Start > Run and copy/paste the following, then press Enter:

C:\Qoobox\ComboFix2.txt

A text file will open. Post that in your next reply.

Also do this:

Please do this:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also insta... Read more

1 more replies
Relevance 39.36%

I got this URL in my IE Address bar. It will not go away. I deleted/cleared all my History Folder & Cookies & Temporary Internet Files.

All the URL and other address have got cleared except this one. I do not see any new programs installed in my Program files and no new icon on my task bar. Some one Please kindly help me in getting rid this URL/address from my system.

Thank you in advance.
 

Answer:Unable to remove Imposter URL

Maybe a silly question, but what url???
 

2 more replies
Relevance 39.36%

HI,i am not able to remove vbzip10.dll file, I remove this file by logging on with another user on my VISTA machine and when I log back in with my user id, it gets created again. I can see setup and x.zip file with it. I happened after I downloaded some software from limewire. Is it something to be worried about.. I don't feel comfortable with it and want to get rid of it.. pls advise. here is the logfile of hijackthis.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 00:06:54, on 04/01/2008Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v7.00 (7.00.6000.16575)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskeng.exeC:\Program Files\DellTPad\Apoint.exeC:\Windows\OEM02Mon.exeC:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exeC:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exeC:\Program Files\Java\jre1.6.0\bin\jusched.exeC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exeC:\Program Files\Dell\MediaDirect\PCMService.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Program Files\McAfee... Read more

Answer:Unable To Remove Vbzip10.dll

Welcome to the BleepingComputer HijackThis Logs and Analysis forum. My name is Richie and i'll be helping you to fix your problems.Apologies for the late response,as i'm sure you can appreciate we are absolutely snowed under with logs.If you still require help,please post a new Hijackthis log into your next reply.

1 more replies
Relevance 39.36%

Okay so I got a virus through MSN...seems have been multiple baddies in the payload and it has entirely stuffed my system.

Symantec AV isn't seeing anything.
Ad-Aware isn't seeing anything.
Spybot won't update and isn't finding anything.

I've gotten HJT and AWG and run both of those, the latter found a few things
but nothing beyond a 'medium' rating (tracking cookies).

I'm getting problems such as:

Windows Firewall cannot be turned on - the service is stopped and cannot be started.
Notification of said firewall being disbled is off.
Cannot load Windows Updates.
Popups and ads.
AV programs will not update.

So here's HJT log. Any other suggestions very welcome.

Edited to put in the log from the newer HJT (oops).

Logfile of HijackThis v1.99.1
Scan saved at 4:22:31 AM, on 20/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\WINDOWS\Logi_MwX.Exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\VIA\RA... Read more

Answer:Unable to remove virus

16 more replies
Relevance 39.36%

Hi there,
I have noticed that during backups that one of my files can't be removed.
It's actually an old short cut and when I right click on it I only get two options, "Print" and "Send to".
When I hit delete, I get the error "source path too long"...."the source file name(s) are larger than is supported by the file system".
The file name is 206 characters.
Any ideas please?
Thanks
Paul

Answer:Unable to remove a file

Hi, you need to reduce the path length. There are many references and solutions posted on the internet. Essentially try renaming elements of the path so the total path + file name is < 255.

Here's just one:
How to fix Path Too Long and File Name is Too Long errors in Windows 2016 - YouTube

You can also use 3rd party tools to help e.g.
7-zip:
"Source Path Too Long": How to Delete, Rename or Move these files/ folders in Windows | Easy Tipz
Robocopy:
Clint Boessen's Blog: How to Delete Files which exceed 255 Characters Without 3rd Party Tools

15 more replies
Relevance 39.36%

have recently installed new router, and have tried to remove the software for the old binatone modem via add and remove in control panel and thro the binatone uninstall facility in the progremme. both times i get following "cant get registry value: key = Software\Binatone\Adsl value = srcPath".can i just delete the binatone file in programmes via my computer or try to use ccleaner to remove software.

Answer:unable to remove software

Have you tried reinstalling the binatone software?,somtimes doing this and then un-i installing helps.

1 more replies
Relevance 39.36%

I've tried uninstalling WiseFixer and I get the following msg:
file "C:\Program Files\WiseFixer\unins000.dat" does not exist. Cannot uninstall.
 

Answer:WiseFixer - unable to remove

The (free) Revo Uninstaller may help.
 

3 more replies
Relevance 39.36%

My first post everyone please be gentle

I am trying to change the ram on my nb100. I am unable to remove the old ram.
I have changed the ram on previous laptops without problem! tilt ram, remove, replace!
I am unable to tilt the ram to remove.

Grateful for any help thanks

Answer:NB100 - I am unable to remove the old ram

Its the same as any other laptop, pull away the side latches and the module will lift up.

If that doesn't work, the mechanism may be broken requiring repair at an ASP.

2 more replies
Relevance 39.36%

I ran Norton as part of my regular maint, discovered two viruses, but Norton was unable to quarrantine or remove. Ran Spybot, AdAware. I have included my HJT log. Any help would be greatly appreciated. Thanks
Ken Campbell

Logfile of HijackThis v1.98.2
Scan saved at 11:48:03 AM, on 12/6/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\TPPALDR.EXE
C:\WINDOWS\syst... Read more

Answer:Unable to remove virus. Pls help

7 more replies
Relevance 39.36%

Hi, I have a few problems with my computer that I have spent days trying to resolve, but couldn't

The problems are as described:
1) Windows Live Messenger would hang, with a popout appearing later with a message that says something to the effect of "Windows Live Messenger has stopped working". I have tried resolving this problem by using the tools provided by Control Panel, to no avail. The problem still persists.

2) 2) Windows Live Messenger also sends links like http://5.gp/N without my knowledge to random contacts.

I have tried the following for the past few days:
1) I did a full scan using Norton Internet Security (trial version). A virus and a tracking cookie were detected. But it did not solve my problems
2) I did a full scan Malwarebyes Anti-malware. Trojan.Agent was detected. It was impossible to remove; it kept getting detected on subsequent scans by mbam

Here is the contents of my logfile:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:54:16 PM, on 12/9/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Program Files\Norton Internet Security\Engine\16.7.2.11

\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe
C:\Program Files\Mouse Driver\StartAutorun.exe
C:\Program Files\iTunes\iTunesHe... Read more

Answer:Help - Unable to remove malware

post teh MBAM report & rthen

Delete any existing version of ComboFix you have sitting on your desktop
Please read and follow all these instructions very carefully​
Download ComboFix from Here to your Desktop.

**Note: It is important that it is saved directly to your desktop and run from the desktop and not any other folder on your computer**
--------------------------------------------------------------------
1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Very Important! Temporarily disable your anti-virus and anti-malware real-time protection and any script blocking components of them or your firewall before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results" or stop combofix running at all
Click on THIS LINK to see instructions on how to temporarily disable many security programs while running combofix. The list does not cover every program. If yours is not listed and you don't know how to disable it, please ask.
Remember to re enable the protection again after combofix has finished
--------------------------------------------------------------------
2. Close any open browsers and any other programs you might have running
Double click on combofix.exe & follow the prompts.​If you are using windows XP It might display a pop up saying that "Recovery console is not installed, do you want to i... Read more

1 more replies
Relevance 39.36%

I have been unable to remove adtrgt from my daughters computer, running win xp pro.
IE generates tons of popup adds, virus removal tools etc. Perhaps there is more than one virus/malware on here.
I tried to install Hijack This, but when I double click the icon, it spawns a process in task manager, but nothing happens.
I tried to download windows defender, but as soon as I get to the place where it actually downloads the file, the page is unavailable (almost like that domain is blocked). I am also unable to connect to norton live update to downoad latest virus definitions.
I have tried all the above both in safe mode, and a limited config (using msconfig)
I notice after unchecking a bunch of boxes in msconfig with random filenames like okiditem rundll32.exe "C:\WINDOWS\okidetem.dll,e" or some such names, there are always 2 more new ones checked the next time I boot and run msconfig.

Being unable to install Hijack This makes it very difficult. Does any body have any suggestions please?

Thanks!

Tom
 

Answer:unable to remove adtrgt

Just in case anybody finds this post, I thought I would post my own solution. Finally after searching for hours, I found a post on Experts exchange suggesting renaming the hijack this executable so it wasnt recognized and blocked, so I tried that and it worked! I was able to do the same thing for malwarebytes and combofix.
Anyway, after running those, a ton of vundo and antivirus and a bunch of other malware was found and removed. Everything seems to be working fine. I will post my final hijackthis log in case it looks like there is some stuff left over.

Thanks!

Tom

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:33:41 PM, on 12/6/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
 

7 more replies
Relevance 39.36%

Hello I've been told to move here.
 
Here my topic  http://www.bleepingcomputer.com/forums/t/505874/my-pc-maybe-infected/
 
 
DDS Logs:
 

DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 7/15/2010 1:24:18 PM
System Uptime: 8/28/2013 3:07:10 PM (2 hours ago)
.
Motherboard: Dell Inc. |  | 0TP406
Processor: Intel® Core™2 Quad CPU    Q6600  @ 2.40GHz | CPU | 2394/1066mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 466 GiB total, 331.692 GiB free.
D: is FIXED (NTFS) - 283 GiB total, 206.329 GiB free.
E: is CDROM ()
F: is FIXED (NTFS) - 15 GiB total, 5.052 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
 Update for Microsoft Office 2007 (KB2508958)
Adobe AIR
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.4)
AIM 7
AMD APP SDK Runtime
AMD Catalyst Install Manager
ANIWZCS2 Service
Apple Application Support
Apple Mobile Device Support
Apple Software Update
AVG 2013
AVG PC TuneUp
AVG PC TuneUp Language Pack (en-US)
Bandisoft MPEG-1 Decoder
Bigasoft Total Video Converter 3.7.6.4626
Bonjour
Catalyst Control Center
Catalyst Control Center - Branding
Catalyst Control Center Graphics Previews Common
Catalyst Control Center InstallProxy
ccc-utility
CCC Help English
CCleaner
D-Lin... Read more

Answer:Unable to remove Virus

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/505965 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

18 more replies
Relevance 39.36%

i cannot remove the files listed below. these cpy files cannot be removed. they are stuck in my restore directory and if i disable or enable system restore, i cannot remove these files. any help is appreciated. see below:
Logfile of HijackThis v1.98.2
Scan saved at 12:04:02 PM, on 11/27/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Logfile of HijackThis v1.98.2
Scan saved at 12:04:02 PM, on 11/27/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGSERV9.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG6\AVGCC32.EXE
C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\WINPATROL.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\CYBERLINK\POWERDVD\POWERDVD.EXE
C:\PROGRAM FILES\YAHOO!\BROWSER\YBRWICON.EXE
C:\PROGRAM FILES\SBC YAHOO!\CONNECTION MANAGER\IP INSIGHT\IPMON32.EXE
C:\PROGRAM FILES\2WIRE\2PORTALMON.EXE
C:\TECHBOX\TECHBOX.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\YAHOO!\BROWSER\YCOMMON.EXE
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
C:\PROGRAM FILES\OPENOFFICE.ORG1.1.3\PROGRAM\SOFFICE.EXE
C:\PROGRA... Read more

Answer:unable to remove cpy files

Hi, Though these instructions are more for winXp, I am pretty sure you can make use of them in ME: All you need to do in Folder Options is "show all files" and take the dot out of "Hide file extensions for known filetypes" and put dot into... "show hidden/protected files" with ME.

flrman1 said:

Because XP will not always show you hidden files and folders by default, Go to Start > Search and under "More advanced search options".
Make sure there is a check by "Search System Folders" and "Search hidden files and folders" and "Search system subfolders"

Next click on My Computer. Go to Tools > Folder Options. Click on the View tab and make sure that "Show hidden files and folders" is checked. Also uncheck "Hide protected operating system files" and "Hide extensions for known file types" . Now click "Apply to all folders"
Click "Apply" then "OK"

Also in safe mode navigate to the C:\Windows\Temp folder. Open the Temp folder and go to Edit > Select All then Edit > Delete to delete the entire contents of the Temp folder.

Go to Start > Run and type %temp% in the Run box. The Temp folder will open. Click Edit > Select All then Edit > Delete to delete the entire contents of the Temp folder.
Finally go to Control Panel > Internet Options. On the General tab under "Temporary Internet Files" Click "Delete Files"... Read more

1 more replies
Relevance 39.36%

Hi,

Ive been trying to remove malware form my laptop for several days now. I have gone through the steps outlined and attached the logs as requested.

The process looks like it has cleared up most of the problems, but I am still having problem with one file c:\Windows\System32\Drivers\cbmqfw.sys which both Avast and Malware are detecting as malware. Avast is flagging it as a hidden service and Malware as RootKit.

Many thanks for any help you might be able to provide.
 

Answer:Unable to remove Malware

Additional log.

Thanks
 

4 more replies
Relevance 39.36%

I have been working on removing this problem for about 3 days. Antivirus doesn't see it, mbam will
install, but as soon as I run it the program crashes and and the icon turns white. If I try
to run it again it give me the message

"Windows cannot access the specified device, path, or file, You may not have the appropriate permissions to access the item"

There is a hidden service running (vbma8357) that I can't stop. I have tried gmer, unhackme, etc and all programs are stopped and
marked so they won't run.

The service runs in safe mode also, Is there any way to remove the service?

Anyone seen this one?

Thanks

Answer:Unable to remove infection

I think this infection may be related to the antivirus 2010 topic. It has the same symptoms

This infection doesn't show as av2010 but I think it may be. I can't run Hijackthis, mbam, etc

The hidden service seems to be controlling policies in real time. How does this service get started?

Is there a section in the reg that controls what services can run?

8 more replies
Relevance 39.36%

Hi, trying to sort out my mates laptop. Receiveing a pop up trying to get me to install PC-Antispyware, also receiveing an exclamation mark in the system tray stating that the pc contains spyware blah blah blah.

Have done the usuals (all in safe mode) Spybot, superantispyware, smitfraudfix & combofix but to no avail.

All haelp is very much appreciated!

Panda activescan log:


Incident Status Location

Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\jay\Cookies\[email protected][1].txt
Virus:Trj/Bancos.RQ Not disinfected C:\Documents and Settings\jay\Desktop\ComboFix.exe[327882R2FWJFW\pv.cfexe] ... Read more

Answer:PC-Antispyware - unable to remove!

Hello and welcome to TSF.


Quote:




Have done the usuals (all in safe mode) Spybot, superantispyware, smitfraudfix & combofix but to no avail.




Combofix is a very powerful tool and should not be used without the supervision of a trained analyst. The system is still infected. Please delete the existing Combofix from your desktop and install the latest version. . Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/comb...o-use-combofix
When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system.

Also, please post the Combofix.txt from your previous run.

1 more replies
Relevance 39.36%

My kid installed MySpaceIM on my windows XP computer. When I attempt to remove it in control panel, I get a blue screen with an "OPEN" box which shows a list of file names, notably "INSTALL.LOG". What is this telling me? When I click OK, I get "FILE NOT FOUND". Thanks.
 

Answer:Unable to remove MySpaceIM

6 more replies
Relevance 39.36%

I have just uploaded the free version of SuperAntiSpyware, but unfortunately pressed the wrong tab and got the pro trial version, which I didn't want. But when I've tried to delete the download and start again, it won't let me. A big box appears telling me this isn't possible. Can anyone help.
 

Answer:Unable to remove SuperAntiSpyware

8 more replies
Relevance 39.36%

Windows XP SP3 on a PC
Yesterday I removed AVG Free using Revo Uninstaller but I had to do a System Restore today and when I used my add/delete programs, even though it shows the AVG as there when I click remove nothing happens.
When I click the uninstall button in my Start list nothing happens.
I've had Revo working for about 30 minutes and it is also unable to get the uninstaller to work.

So - did I remove it or not? I want to know for certain because I am now using Avast and I don't want both of them working.

Is there a way to de-activate AVG if I'm unable to remove it?

Thanks!
 

Answer:Unable to remove AVG Free

16 more replies
Relevance 39.36%

Hi all,
Recently i accidentally some warz file without knowing and now my computer is infected with some sort of virus. Spybot keeps trying to change registry values everytime i start up and Norton is not willing to scan. Ad-aware says my comp is clean although i know its not true. Im at a loss at what else I could do other than system restore which is what I did. It only made the problem worse as Norton keeps quarantining the system restore files. I am posting a HJT log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:01:45 PM, on 11/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
D:\Program Files\Nokia\Nokia PC Suite 6\Launch Application 2.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
D:\Program Files\eSnips\ClientG... Read more

More replies
Relevance 39.36%

I have had this infection for about a month. CWS Shredder and Spybot keep removing it, but in an hour or so, or if I restart my computer it comes back. I have turned off system restore. I have no idea how to get rid of it.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:23:16 AM, on 9/23/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\ehome\ehtray.exeC:\Program Files\Java\jre1.6.0_02\bin\jusched.exeC:\Program Files\LogMeIn\x86\LogMeInSystray.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\Windows Defender\MSASCui.exeC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\system32\ctfmon.exeC:\PROGRA~1\Yah... Read more

Answer:Cws.smartsearch Unable To Remove

Hello,* Download Combofix to your desktop.In case you have used Combofix before, please delete the version you are having and redownload it again, because Combofix is being updated everyday.In case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix, please disable your scanner and redownload Combofix again. Because some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.* Doubleclick combofix.exeFollow the prompts.Don't click on the window while the fix is running, because that will cause your system to hang.When finished and after reboot (in case it asks to reboot), combofix will open again to gather the necessary information for the log. This may take a bit. When done, Combofix will close and a log should open, combofix.txt. Post the contents of this log in your next reply together with a new hijackthislog.Do NOT post the ComboFix-quarantined-files.txt - unless I ask you to.

2 more replies
Relevance 39.36%

I have been unable to get rid of this browser hijacker.  Things I've tried:
 
Full Norton 360 scan
Full Malwarebytes scan
Full Emsisoft scan
Autoruns - I searched but could not find a matching startup entry.
 
dds.txt attached.  You nice folks helped me with a problem four years ago and I"m confident you can help again.
 
Thanks
KMS

Answer:Unable to remove safesear,ch

Hello and welcome to Bleeping Computer! My nickname is Pystryker , and I will be helping you with your issue today.Before we get started, I have a few things I need to go over with youIf you are receiving help for this issue at another forum, please let me know so I can close this thread.Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process.Please do not attach your logs or put them inside code/quote tags. Do a Copy/Paste of the entire contents of the log file and submit it inside your post unless directed otherwise.At the top of your post, please click on the "Follow this topic" button and make sure that the "Received notification" box is checked and set to "Instantly" This will send an email to you as soon as I reply to your topic, allowing us to solve your problem faster.If any of your security programs give you a warning about any tool I ask you to use, please do not worry. All the links and tools I provide to you will be safe.Please read through my instructions carefully and completely before executing them. I will lay the instructions out in a step by step order to make them easy to follow.Please make sure that all the programs I ask you to download are downloaded to and run from your Desktop.Please make sure you (if you are able) to print out these instructions so that you will be able to refer to them while working on your machine. Part of the solution(s) to your problem may in... Read more

4 more replies
Relevance 39.36%

Ok so I have a virus. I am not certain what it is are how to get rid of it. The nice folks over in the "Am I infected" forum have tried to help me without much success. They suggested I try here.What is happening? Well I get random sounds from the speakers, Random IE launches to random pages, and I get a virtual memory too low message.I have XP pro and use AVG free and spybot. In an effort to rid my problem I have tried Adaware, Malwarebytes. ATF and superantispyware in safe mode, and stinger. All find and remove things, but the problem never goes away. The following is my hijack this log. Please help!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:22, on 2008-11-11Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:... Read more

Answer:I am infected, unable to remove

Hello! My name is Sam and I will be helping you. I will do my best to communicate clearly to you so that we can resolve your issues as quickly as possible. In order to see what's going on with your computer I will ask for you to post various logs from the tools that we will use to fix your computer. Please communicate freely with me about how your computer is reacting and behaving as we work through this process.Please download random's system information tool (RSIT) and save it to your desktop.Double click on RSIT.exe to run it.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

12 more replies
Relevance 39.36%

NOTE: The "attach.txt" file is attached to this reply
Note:  these files posted here per request of Broni
 
Mod Edit:  Previous AII topic, http://www.bleepingcomputer.com/forums/t/543923/malwarebytes-reports-it-blocked-fixraycom/#entry3446901 - Hamluis.
 
 
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16561  BrowserJavaVersion: 10.67.2
Run by louis at 10:59:32 on 2014-08-14
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.3069.1277 [GMT -5:00]
.
AV: Norton Internet Security *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Intel\IntelDH\CCU\AlertService.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program ... Read more

Answer:unable to remove FIXRAY.COM - DDS log is below

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.
 
If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===
 
Please download AdwCleaner by Xplode onto your Desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click the  Scan  button and wait for the process to complete.
Click the Report button and the report will open in Notepad.

 
IMPORTANT
 

If you click the Clean button all items listed in the report will be removed.

 
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
 

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click the  Scan  button and wait for the process to complete.
Check off the element(s) you wish to keep.
Click on the Clean button follow the prompts.
A log file will automatically open after the scan has finished.
Please post the content of that log file with your next answer.
You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).

===
 
Download the  version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press ... Read more

29 more replies
Relevance 39.36%

Hi,

Pls. help me to resolve this problem. Not sure how severe is this one. I have also put in the log file of the HijackPlus.

There are two add-ons to IE which even though I have tried disabled it I can't delete them and the dll still running in memory and creating entries in regedit.

Also this has disabled automatic update entries in services.msc and even if I try to enable it manually it is not allowing me and throughing up Error 1058.

Pls. advice how to get through this. Thanks in advance for your help.

Suk


Log file of HijackThis

---------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:58:04 PM, on 7/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files... Read more

Answer:Unable to remove few dlls

Hello, gsukesh -

You have a Vundo infection. The dlls are hooked to winlogon, and typically do not like to just delete.

We require a bit more information, please.

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

------------------------------------------------------------------... Read more

17 more replies
Relevance 39.36%

I have a file pmnk.dll that I cannot remove. Says it is in use by another program.An internet search shows this file as a malware, how do I remove it.Here is my Hijackthis log.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:23:14 AM, on 12/1/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\Program Files\a-squared Free\a2service.exeC:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\Comodo\CBOClean\BOCORE.exeC:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeC:\Program Files\Sandboxie\SbieSvc.exeC:\WINDOWS\system32\svchost.exeC:\Prog... Read more

Answer:Pmnk.dll Unable To Remove

Let me know if I need to post anymore logs.
Thanks.

3 more replies
Relevance 39.36%

My computer seems to have a generic rootkit.d! rootkit trojan. This is what McAfee calls it when it comes up in scan results. McAfee says that 1 item is detected and 1 item is fixed, but the computer is still symptomatic. When searching in google, I click on a result and am redirected to another website. Website like move.com, advancequotes.com, gklife.com. When redirecting, it goes through several websites before stopping on one. I scanned my computer with both McAfee and Malware Bytes. Ad-Aware brought up the blue screen of death. It's the first time it has brought up that screen.

I'm running on Windows XP Home Edition on a Dell Dimension E520.
2 GB RAM
228 GB Hard drive
Intel Core™2
Service Pack 3
Windows Firewall
Firefox is my default browser

I'm including a Malware Bytes log.

------------------------------------------------------------------------------------------
Malwarebytes' Anti-Malware 1.31
Database version: 1475
Windows 5.1.2600 Service Pack 3

7/30/2009 6:34:43 PM
mbam-log-2009-07-30 (18-34-43).txt

Scan type: Full Scan (C:\|)
Objects scanned: 155682
Time elapsed: 30 minute(s), 1 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\S... Read more

Answer:Unable to remove rootkit

Hello and welcome!First your MBAM is very old...Rerun MBAM (MalwareBytes) like this:Open MBAM in normal mode and click Update tab, select Check for Updates,when doneclick Scanner tab,select Quick scan and scan.After scan click Remove Selected, Post new scan log and Reboot into normal mode.Next run RootRepealNext Please install RootRepealNote: Vista users ,, right click on desktop icon and select "Run as Administrator."Fatdcuk at Malwarebytes posted a comprehensive tutorial - Self Help guide can be found here if needed.: Malwarebytes Removal and Self Help Guides. Go HERE, and download RootRepeal.zip to your Desktop. Tutorial with images ,if needed >> [email protected]@K.Unzip that,(7-zip tool if needed) and then click RootRepeal.exe to open the scanner. Next click on the Report tab, now click on Scan. A Window will open asking what to include in the scan. Check all of the below and then click OK.DriversFilesProcesses Not this >>> SSDTStealth ObjectsHidden ServicesNow you'll be asked which drive to scan. Check C: and click OK again and the scan will start. Please be patient as the scan runs. When the scan has finished, click on Save Report. Name the log RootRepeal.txt and save it to your Documents folder (it should automatically save it there). Please copy and paste that into your next reply. Please note: If Rootrepeal fails to run, try this step: Click Settings - Options. Set the Disk Access slider to High

9 more replies
Relevance 39.36%

After I run a scan with Spybot Search and Destroy, everything except "Log" is cleared. How do I remove "Log"?

Answer:Unable to remove "Log" with Spybot S and D

click tools / click view report / click clean out old reports.

1 more replies
Relevance 39.36%

Please help me with this!

For some thing that I don't know, I was unable to add/remove programs on my windows xp pro sp2

At the same time I start to see many instaled applications started with "m" as you can see on the attachment.

How can I resolve this??

Could you guys give me some help??

there is my hijack:

Logfile of HijackThis v1.99.1
Scan saved at 20:11:58, on 29-08-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programas\Intel\Wireless\Bin\EvtEng.exe
C:\Programas\Intel\Wireless\Bin\S24EvMon.exe
C:\Programas\Intel\Wireless\Bin\WLKeeper.exe
C:\Programas\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programas\Ficheiros comuns\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programas\Intel\Wireless\Bin\OProtSvc.exe
C:\Programas\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Programas\Intel\Wireless\Bin\ZcfgSvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\Explorer.EXE
C:\Programas\Java\j2re1.4.2_08\bin\jusched.exe
C:\Programas\Winamp\winampa.exe
C:\Programas\Ficheiros comuns\PCSuite\DataLayer\DataLayer.exe
C:\Programas\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fp... Read more

Answer:unable to add/remove programs

You might try these solutions:

Add/Remove Programs tool displays installed programs incorrectly
or this one:
Add/Remove Programs dialog box does not appear or is corrupted.

Or you could try an alternative tool like MyUninstaller.
 

1 more replies
Relevance 39.36%

Malware Alarm 2.1 keeps popping up and messing up my work space. The contact address on their ad does not work. I don't know how the program got on my system.

When I go to my control panel to remove the program is says it can not be removed until it is shut down. And that's my problem. I can not shut the program down. Right click, left click, nothing works.

I have Windows XP home edition and am using a Dell Dimension 9150l

Jack
 

Answer:Unable to remove program

Hi....dont try to remove it because it will not go on its own.

Download and scan with SUPERAntiSypware Free for Home Users
Double-click SUPERAntiSypware.exe and use the default settings for installation.
An icon will be created on your desktop. Double-click that icon to launch the program.
If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)
Under "Configuration and Preferences", click the Preferences button.
Click the Scanning Control tab.
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.

Click the "Close" button to leave the control center screen.
Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
On the left, make sure you check C:\Fixed Drive.
On the right, under "Complete Scan", choose Perform Complete Scan.
Click "Next" to start the scan. Please be patient while it scans your computer.
After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
Make sure everything has a checkmark next to it and click "Next".
A notification will appear that &q... Read more

2 more replies
Relevance 39.36%

I can't remove it and it keeps getting infected every 20 seconds by TrojanhorseCryptic.AXV

Any suggestions?

Also do you have any suggestions on how to get round error 1935 from failed install microsoft office 2007?

Thanks.
 

More replies
Relevance 39.36%

I've been trying unsuccessfully to remove Vundo for more than two weeks. Here's a list of the programs I've used:

ComboFix
Vundofix
Malwarebytes
Dr Web CureIt
Hijackthis
ESET Antivirus
AVG
GooredFix
SpySweeper
Spybot Search & Destroy
F-Secure Easyclean
McAfee Rootkit Detective

In addition, I've uninstalled all previous versions/updates of Java and installed the latest version, I've used Killbox to try and get rid of the files directly (it says they don't exist) and I've lurked and read countless posts from people with similar problems, on this site and others, and nothing has helped me get rid of this thing.

(Note: I'm not running the programs above concurrently. If an anti-virus or anti-malware doesn't work, I've deleted/disabled it and moved on to the next one. I've also been careful to make sure anti-virus software, for instance, isn't running at the same time as a ComboFix scan.)

Here's my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:48:26 PM, on 5/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\nvsvc3... Read more

Answer:Unable to remove Vundo

16 more replies
Relevance 39.36%

Hi,I've experienced several malware problems over the past few weeks and have been completely worn down trying to resolve it. I am running Win XP with SP2. Since I've been experiencing several problems, I want to list all the problems I experienced and the steps I have taken so far:1. About two weeks ago, my computer was infected by the "Security Suite" malware, which kept saying my computer is infected and that I need to purchase the security suite. In order to resolve this, I downloaded MalwareBytes program and I was able to remove "Security Suite" malware.2. About 5 days ago, I started getting the message :" This application could not initialize property (Ox0000 etc). Click OK to terminate this application". I kept getting this message several times and it seemed to be attempting to terminate all my applications. I used Malware bytes in safe mode to try to resolve this, but it could not get the job done. So, I searched on the internet for solutions to this and there seemed to several posts with similar messages, but I think their problems were related to Google Chrome, IE or some visual studio error. But, I think mine is different, because my errors seemed to be related to several programs. In order to try to solve this, I switched to Safe Mode and ran SpyBot Search & Destroy. S&D seemed to remove several threats. Next I installed AVG Antivirus 9 in safe mode also and ran the scan atleast 3 times. Now when I went back to the no... Read more

Answer:Unable to remove malware

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

34 more replies
Relevance 39.36%

I discovered that my laptop used much more cpu/ram than it used to so I had a virus check up on MSE and found
this :VirTool:Win32/Obfuscator.XZ.

I tried to remove it without success can someone please help me?
 

Answer:Unable to remove a virus please help

16 more replies
Relevance 39.36%

Hi there! I recently scanned my computer using AVG7 and it was apparently unable to remove some unwanted malware..I'm hoping someone here will be able to help me clean up all the malware in my computer ^__^My logs:Deckard's System Scanner v20071014.68Run by Julie on 2008-08-10 15:25:30Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --16: 2008-08-10 19:25:38 UTC - RP186 - Deckard's System Scanner Restore Point15: 2008-08-10 18:39:06 UTC - RP185 - System Checkpoint14: 2008-08-09 18:36:44 UTC - RP184 - System Checkpoint13: 2008-08-08 15:50:07 UTC - RP183 - Installed Java™ 6 Update 712: 2008-08-07 20:14:12 UTC - RP182 - System Checkpoint-- First Restore Point -- 1: 2008-07-06 02:45:27 UTC - RP171 - System CheckpointBacked up registry hives.Performed disk cleanup.System Drive D: has 11.04 GiB (less than 15%) free.-- HijackThis (run as Julie.exe) -----------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:27:01 PM, on 8/10/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:D:\WINDOWS\System32\smss.exeD:\WINDOWS\system32\winlogon.exeD:\WINDOWS\system32\services.exeD:\WINDOWS\sys... Read more

Answer:Unable To Remove Malware

Hello, Buggie. to BleepingComputer.comMy name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)Please give me some time to look over your computer's log(s).Please take note of the following:In the meantime, please refrain from making any changes to your computer.Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.Finally, please reply using the button in the lower left hand corner of your screen.We need to run OTScanItBefore running a new scan let's clean out the temporary folders. Download ATF Cleaner to your Desktop.Double-click ATF-Cleaner.exe to run the program.Click Select All found at the bottom of the list.Click the Empty Selected button.If you use Firefox browser, do this also:Click Firefox at the top and choose Select All from the list.Click the Empty Selected button.NOTE : If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser, do this also:Click Opera at the top and choose Select All from the list.Close ALL Internet browsers (very important).Click the Empty Select... Read more

2 more replies
Relevance 39.36%

I am unable to delete this small (52 byte) file.
At first glance the name of the file is:
"Microsoft.Flight.Simulator.X.Deluxe.Serial-RAZOR1911", but when I look under properties the file is named:
"MICROS~1.EXE"

I am aware that I have brought this problem upon myself, but I would be gratefull for any help.

Regards

Answer:MICROS~1.EXE (unable to remove)

Hello aidan111

Try deleting it from Safe Mode

If that does not work try these free programs
MoveOnBoot
http://www.snapfiles.com/get/moveonboot.html

UNLOCKER
http://ccollomb.free.fr/unlocker/

FileASSASSIN
http://www.snapfiles.com/get/fileassassin.html

One of them should help you delete it

3 more replies
Relevance 39.36%

I run Win7.During an AVG scan it turned up a threat called MalSign.Generic.834.However,AVG was unable to remove it as the threat repeatedly replicated itself.
Has anyone come across this threat and if so how is it removed permanently?

Answer:Unable to remove a threat

I had a similar problem. They are called a PUP.I could not remove it. I got on to Norton and they took over my computer and removed it. It meant going into the registry.I was impressed.

2 more replies
Relevance 39.36%

hello
I am new to these forums (obviously) so please forigive me if I do something wrong. I have read the sticky and followed as many of the steps as i am able, however most scan prgrams (adaware se, bitdefender and spybot search and destroy to name a few) lock up halfway through scanning,even in safe mode.
Using panda antivirus i was able to learn that I have contracted something called downloader.zlob.DEZ (though the program was unable to remove it). Since infection, I am unable to browse any folder containing movie files through windows explorer, in normal or safe mode - the window just crashes. The same thing happens if i use IE to browse my C drive. I would just format, but that would mean losing about 20gb of files i really want to keep - and cant backup due to the explorer crashes.
Enclosed are the log files i was able to generate. Please can someone advise me what to do next? I would be eternally grateful. If i have missed anything, let me know and I will add it in a future post.

thomas
 

Answer:unable to remove malware - please help :(

hello again

just a quick note in case anyone has the same problem and finds this post. Using a tiny bit of initiative I managed to find a work around. Using an alternative to windows explorer called Universal explorer (trial version available at http://www.spadixbd.com/) I was able to navigate to the relevant folders and move them out of the "my documents" folder, and now I can access them through either program. I'm going to cut my losses, back everything up and format. Not exactly a fix but at least I wont lose any data now.
 

5 more replies
Relevance 39.36%

I'm having a little problem with safely removing any of my external hard drives that I connect. The USB icon will show in the taskbar and when I place my mouse over it, it says Safely Remove Hardware and Eject Media. But when I click it, it won't show the external drives to eject. I have even tried to the eject option by right clicking my external drive in my computer. But the eject option is not there anymore. Can anyone help me with this? I don't know if it helps but under Policies in the Device Manager, the external hard drive is set to Quick Removal. Thanks.

Answer:Unable to Safely remove

  
Quote: Originally Posted by WTFk


I'm having a little problem with safely removing any of my external hard drives that I connect. The USB icon will show in the taskbar and when I place my mouse over it, it says Safely Remove Hardware and Eject Media. But when I click it, it won't show the external drives to eject. I have even tried to the eject option by right clicking my external drive in my computer. But the eject option is not there anymore. Can anyone help me with this? I don't know if it helps but under Policies in the Device Manager, the external hard drive is set to Quick Removal. Thanks.


If it is set to quick removal you don't need to "Safely Remove". If you set it to anything else ( to maximise speed etc) then you do need "Safely Remove" and the option will reappear.

Regards....Mike Connor

9 more replies
Relevance 39.36%

I have a movie that I have downloaded and copied it over to a disk. I have used Nero Show Time to view it on my computer. Since copying it over to disk, I am unable to remove it as it gives me the error that

'it cannot delete it: It is being used by another person or program. Close any programs that might be using the file and try again.'

I have closed out Nero Show Time and I still cannot get rid of the file.

Any ideas as to what is causing this and how can I get rid of this file?
 

Answer:Unable to remove files

Since this is not a malware issue, I am moving your thread to software.
 

3 more replies
Relevance 39.36%

HI, I unable to remove a virus from my computer. Norton detected the virus but access was denied. How can I remove a virus when acces is denied?
Here are the virus s detected : ieaclu.exe and mgmdeps.exe. Can someone please help me on this matter? thank you.

grenudo

Answer:unable to remove a virus

Please download HijackThis - this program will help us determine if there are any spyware/malware on your computer. Create a folder at C:\HJT and move HijackThis.exe there. Double click on the program to run it.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Get HijackThis Analyzer and save it to the same folder as the hijackthis.log file. Run HijackThis Analyzer and type in y if you agree. The result.txt file will open up in Notepad. Copy the whole result.txt log and post it in the forum. We do not need the original hijackthis.log (unless we ask for it). Do not fix anything in HijackThis since they may be harmless.

8 more replies
Relevance 39.36%

I have not been able to use any of my USB ports in months. I don't know what's wrong. The only thing I can see that's wrong is a software program I installed that now I can't get off my computer. All USB properties show that the ports are working correctly. Any help is appreciated.

Answer:Unable To Remove Software

OK, this program you can't get rid of--is it bigger than a breadbox?

10 more replies
Relevance 39.36%