Computer Support Forum

Probable Virus - Emails sent to all gmail sentbox

Question: Probable Virus - Emails sent to all gmail sentbox


problem with my girlfriends laptop which doesnt seem to be to obvious. the only sign so far is that emails were sent from her gmail account to every email address she had ever sent to. PLease see the following logs. ANy help would be so appreciated. Cheers!

DDS (Ver_09-07-30.01) - NTFSx86
Run by admin at 23:57:30.75 on 10/09/2009
Internet Explorer: 8.0.6001.18813
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.3068.1707 [GMT 1:00]

SP: Spybot - Search and Destroy *enabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Acer\Acer Bio Protection\CompPtcVUI.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Acer\Acer Bio Protection\BASVC.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Acer\Mobility Center\MobilityService.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Cyberlink\PowerDVD9\PDVD9Serv.exe
C:\Program Files\Cyberlink\Shared files\brs.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://
mStart Page = hxxp://
mDefault_Page_URL = hxxp://
BHO: IDMIEHlprObj Class: {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\IDMIECC.dll
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\program files\spybot - search & destroy\SDHelper.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: ShowBarObj Class: {83a2f9b1-01a2-4aa5-87d1-45b6b8505e96} - c:\program files\acer\empowering technology\edatasecurity\x86\ActiveToolBand.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
TB: Acer eDataSecurity Management: {5cbe3b7c-1e47-477e-a7dd-396db0476e29} - c:\program files\acer\empowering technology\edatasecurity\x86\eDStoolbar.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll
uRun: [RocketDock] "c:\program files\rocketdock\RocketDock.exe"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Google Update] "c:\users\admin\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [ePower_DMC] c:\program files\acer\empowering technology\epower\ePower_DMC.exe
mRun: [eDataSecurity Loader] c:\program files\acer\empowering technology\edatasecurity\x86\eDSloader.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [ZPdtWzdVitaKey MC3000] "c:\program files\acer\acer bio protection\PdtWzd.exe" show
mRun: [PLFSetI] c:\windows\PLFSetI.exe
mRun: [WarReg_PopUp] c:\program files\acer\wr_popup\WarReg_PopUp.exe
mRun: [GSISETUP] F:\setup.exe
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [RemoteControl9] "c:\program files\cyberlink\powerdvd9\PDVD9Serv.exe"
mRun: [PDVD9LanguageShortcut] "c:\program files\cyberlink\powerdvd9\language\Language.exe"
mRun: [BDRegion] c:\program files\cyberlink\shared files\brs.exe
mRun: [Adobe Acrobat Speed Launcher] "c:\program files\adobe\acrobat 9.0\acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 9.0\acrobat\Acrotray.exe"
mRun: [Skytel] Skytel.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: Download all links with IDM - c:\program files\internet download manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\internet download manager\IEGetVL.htm
IE: Download with IDM - c:\program files\internet download manager\IEExt.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {10954C80-4F0F-11d3-B17C-00C0DFE39736} - c:\program files\acer\acer bio protection\PwdBank.exe
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://
DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} - hxxp://
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: AWinNotifyVitaKey MC3000 - c:\program files\acer\acer bio protection\WinNotify.dll
AppInit_DLLs: acaptuser32.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
LSA: Notification Packages = scecli c:\program files\acer\acer bio protection\PwdFilter

============= SERVICES / DRIVERS ===============

R0 AlfaFF;AlfaFF File System mini-filter;c:\windows\system32\drivers\AlfaFF.sys [2008-8-28 43184]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-4-1 114768]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2009/04/03 00:53:06];c:\program files\cyberlink\powerdvd9\000.fcl [2009-5-7 87536]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-4-1 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2009-4-1 53328]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\newtech infosystems\nti backup now 5\client\Agentsvc.exe [2008-3-3 16384]
R2 ETService;Empowering Technology Service;c:\program files\acer\empowering technology\service\ETService.exe [2008-7-10 24576]
R2 IGBASVC;iGroupTec Service;c:\program files\acer\acer bio protection\BASVC.exe [2008-8-28 3520512]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\newtech infosystems\nti backup now 5\BackupSvc.exe [2008-4-26 45056]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\newtech infosystems\nti backup now 5\SchedulerSvc.exe [2008-4-26 131072]
R2 vfsFPService;Validity Fingerprint Service;c:\windows\system32\vfsFPService.exe [2008-5-26 599344]
R3 itecir;ITECIR Infrared Receiver;c:\windows\system32\drivers\itecir.sys [2008-8-28 54784]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2009-4-17 114528]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\L1E60x86.sys [2009-6-29 48640]
R3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:\windows\system32\drivers\NETw5v32.sys [2008-7-10 3658752]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2009-6-26 66080]
R3 vfs101x;vfs101x;c:\windows\system32\drivers\vfs101x.sys [2008-5-26 40752]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2009-9-10 1153368]

=============== Created Last 30 ================

2009-09-10 22:41 <DIR> --d----- c:\programdata\Spybot - Search & Destroy
2009-09-10 22:41 <DIR> --d----- c:\program files\Spybot - Search & Destroy
2009-09-10 22:41 <DIR> --d----- c:\progra~2\Spybot - Search & Destroy
2009-09-09 23:56 <DIR> --d----- c:\programdata\Office Genuine Advantage
2009-09-09 23:56 <DIR> --d----- c:\users\admin\Office Genuine Advantage
2009-09-08 19:04 904,776 a------- c:\windows\system32\drivers\tcpip.sys
2009-09-08 19:04 105,984 a------- c:\windows\system32\netiohlp.dll
2009-09-08 19:04 30,720 a------- c:\windows\system32\drivers\tcpipreg.sys
2009-09-08 19:04 27,136 a------- c:\windows\system32\NETSTAT.EXE
2009-09-08 19:04 19,968 a------- c:\windows\system32\ARP.EXE
2009-09-08 19:04 17,920 a------- c:\windows\system32\ROUTE.EXE
2009-09-08 19:04 17,920 a------- c:\windows\system32\netevent.dll
2009-09-08 19:04 11,264 a------- c:\windows\system32\MRINFO.EXE
2009-09-08 19:04 10,240 a------- c:\windows\system32\finger.exe
2009-09-08 19:04 9,728 a------- c:\windows\system32\TCPSVCS.EXE
2009-09-08 19:04 8,704 a------- c:\windows\system32\HOSTNAME.EXE
2009-09-08 19:03 2,501,921 a------- c:\windows\system32\wlan.tmf
2009-09-08 19:03 302,592 a------- c:\windows\system32\wlansec.dll
2009-09-08 19:03 293,376 a------- c:\windows\system32\wlanmsm.dll
2009-09-08 19:03 127,488 a------- c:\windows\system32\L2SecHC.dll
2009-09-08 19:03 513,536 a------- c:\windows\system32\wlansvc.dll
2009-09-08 19:03 65,024 a------- c:\windows\system32\wlanapi.dll
2009-09-08 19:03 2,868,224 a------- c:\windows\system32\mf.dll
2009-09-02 22:45 4,240,384 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-02 22:45 28,672 a------- c:\windows\system32\Apphlpdm.dll
2009-08-25 20:22 2,048 a------- c:\windows\system32\tzres.dll
2009-08-15 01:17 499,712 a------- c:\windows\system32\kerberos.dll
2009-08-15 01:17 270,848 a------- c:\windows\system32\schannel.dll
2009-08-15 01:17 218,624 a------- c:\windows\system32\msv1_0.dll
2009-08-15 01:17 175,104 a------- c:\windows\system32\wdigest.dll
2009-08-15 01:17 1,259,008 a------- c:\windows\system32\lsasrv.dll
2009-08-15 01:17 439,864 a------- c:\windows\system32\drivers\ksecdd.sys
2009-08-15 01:17 72,704 a------- c:\windows\system32\secur32.dll
2009-08-15 01:17 9,728 a------- c:\windows\system32\lsass.exe

==================== Find3M ====================

2009-09-10 21:59 132,539 a------- c:\programdata\nvModes.dat
2009-09-10 21:59 132,539 a------- c:\progra~2\nvModes.dat
2009-08-29 03:30 173,056 a------- c:\windows\apppatch\AcXtrnal.dll
2009-08-29 03:30 458,752 a------- c:\windows\apppatch\AcSpecfc.dll
2009-08-29 03:30 2,159,616 a------- c:\windows\apppatch\AcGenral.dll
2009-08-29 03:30 542,720 a------- c:\windows\apppatch\AcLayers.dll
2009-08-17 17:05 53,328 a------- c:\windows\system32\drivers\aswMonFlt.sys
2009-08-03 15:07 403,816 a------- c:\windows\system32\OGACheckControl.dll
2009-08-03 15:07 322,928 a------- c:\windows\system32\OGAAddin.dll
2009-08-03 15:07 230,768 a------- c:\windows\system32\OGAEXEC.exe
2009-07-30 22:37 143,360 a------- c:\windows\inf\infstrng.dat
2009-07-30 22:37 51,200 a------- c:\windows\inf\infpub.dat
2009-07-30 22:37 86,016 a------- c:\windows\inf\infstor.dat
2009-07-21 22:52 915,456 a------- c:\windows\system32\wininet.dll
2009-07-21 22:47 109,056 a------- c:\windows\system32\iesysprep.dll
2009-07-21 22:47 71,680 a------- c:\windows\system32\iesetup.dll
2009-07-21 21:13 133,632 a------- c:\windows\system32\ieUnatt.exe
2009-07-17 14:54 71,680 a------- c:\windows\system32\atl.dll
2009-07-15 13:40 8,147,456 a------- c:\windows\system32\wmploc.DLL
2009-07-15 13:39 313,344 a------- c:\windows\system32\wmpdxm.dll
2009-07-15 13:39 4,096 a------- c:\windows\system32\dxmasf.dll
2009-07-15 13:39 7,680 a------- c:\windows\system32\spwmp.dll
2009-07-04 17:08 29,480 a------- c:\windows\system32\msxml3a.dll
2009-06-30 17:28 102,832 a------- c:\windows\system32\GDIPFONTCACHEV1.DAT
2009-06-26 22:54 57,344 a------- c:\windows\system32\nvapo32v.dll
2009-06-26 22:54 19,456 a------- c:\windows\system32\nvhdap32.dll
2009-06-24 22:07 151,552 a------- c:\windows\system32\nvcohda.dll
2009-06-24 22:07 485,920 a------- c:\windows\system32\NVUNINST.EXE
2009-06-24 22:07 485,920 a------- c:\windows\system32\nvuhda.exe
2009-06-15 15:53 156,672 a------- c:\windows\system32\t2embed.dll
2009-06-15 15:52 23,552 a------- c:\windows\system32\lpk.dll
2009-06-15 15:52 72,704 a------- c:\windows\system32\fontsub.dll
2009-06-15 15:51 10,240 a------- c:\windows\system32\dciman32.dll
2009-06-15 13:42 289,792 a------- c:\windows\system32\atmfd.dll
2009-06-05 00:18 665,600 a------- c:\windows\inf\drvindex.dat
2009-04-02 20:45 0 a------- c:\users\admin\appdata\roaming\wklnhst.dat
2008-01-21 03:43 174 a--sh--- c:\program files\desktop.ini
2006-11-02 13:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 13:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 13:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 13:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 23:57:48.48 ===============

Relevance 100%
Preferred Solution: Probable Virus - Emails sent to all gmail sentbox

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Probable Virus - Emails sent to all gmail sentbox

BUMP. can anyone help?

2 more replies
Relevance 65.19%

My gmail account has been compromised. Something is sending emails from my gmail account to my contacts. In the sent mail folder there are four emails I didn't write that were sent to my contacts. They included links and little else. My inbox was also full of returned mail items that said "Malier Delivery System - Permanent delivery failure". My logs are below. Thanks in advance!!!

DDS (Ver_2012-11-05.02) - NTFS_x86
Internet Explorer: 9.0.8112.16450 BrowserJavaVersion: 10.9.2
Run by pep at 15:10:18 on 2012-11-05
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.2968.833 [GMT -8:00]
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
============== Running Processes ================
C:\Program Files\SafeNet\HighAssurance RemoteLT\IPSecMon.exe
C:\Program Files\SafeNet\HighAssurance RemoteLT\IreIKE.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files ... Read more

Answer:Virus sending emails to my contacts on gmail

Greetings pep7702 and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary. If you would allow me to call you by your first name I would prefer to do that. ===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met. Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance. Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not ... Read more

16 more replies
Relevance 60.68%


Am trying to help my brother with his laptop. his gmail account has been hacked and emails sent to every address he's ever sent to. Have tried doing searches but found nothing, but hijack this won't run fully and am suspicious. the hosts file was locked, so went in and deleted the file it said to. Not sure if this has done the trick. here are the logs requested
DDS (Ver_09-07-30.01) - NTFSx86
Run by admin at 0:27:24.10 on 14/09/2009
Internet Explorer: 8.0.6001.18813
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.44.1033.18.3068.1534 [GMT 1:00]

SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\W... Read more

Answer:Probable Malware. Emails sent from email address

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 60.68%

The question really says all about what I want to do, or need help on. I recently signed up for a new outlook account to try out the new outlook preview and I've set up gmail to automatically forward new messages to my outlook account so that I can use outlook to manage my gmail account.

Do any of you know how I would be able to forward the old messages, and not the new ones, to my outlook? I already know that they can be fetched into outlook by outlook's very own service, forwarding would be faster, so..?! Also, since I now use outlook to send email on behalf of my gmail account, how do I make it sync each email I send using outlook with my gmail - so that gmail has it all?

TY in advance. Please do help.

More replies
Relevance 59.86%

can't figure out how to add info into new smart phone, never used one before.

Answer:Receive Gmail account emails from inoperative cell phone to my emails instead, why?

Settings > email + accounts > add an account > fill in the details for the gmail and it will get a new "App" on the All Apps list that you can pin to the Start Screen

more replies
Relevance 54.12%

I have an Athlon 2400 running under WinXP SP3 with 900MB RAM.The free versions of AVG Antivir and ZoneAlarm protect my PC.I recently got a warning stating a new version of ZoneAlarm was available (standard message with possibility to immediately download the update or be reminded in X days). After downloading the zaSetup_en file, I went through the whole install process and chose the free version update (the other choice was a 15-day trial Internet suite version). After update and re-boot, I immediately noticed that everything was ultra-slow. The CPU was indeed at 100% all the time. I could not even open a folder as it took for hours to open (it actually never opened). I re-booted twice to be sure that everything was installed correctly.Also, a Windows message warned that the firewall program was deactivate. I tried to open the ZoneAlarm setup page but it ignored all my attempts to start/open ZoneAlarm. After waiting over 10-15 minutes for any folder/program to open/start, I had to realise that my PC was most probably infected by a virus. These last few days, I noticed that my PC was a bit slower than usual, but attributed it to an intense use with too many Internet pages open simultaneously. This slowness was however nothing to compare with the current situation where I can actually do nothing.I am not 100% sure that current ultra-slowness is due to the ZoneAlarm update. I noticed though that the update file was not as usual, as the file name did not contain any re... Read more

Answer:Probable virus infection, origin of virus unknown

Hi My name is Extremeboy (or EB for short), and I will be helping you with your log.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.If you do not make a reply in 5 days, we will need to close your topic.You may want to keep the link to this topic in your favourites. Alternatively, you can click the button at the top bar of this topic and Track this Topic. The topics you are tracking can be found here.Please take note of some guidelines for this fix:Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.Even if things appear to be better, it might not mean we... Read more

20 more replies
Relevance 53.3%
Question: Probable Virus

The link below gives some information about the problem from the original thread


i think the BSODs are being caused by malware (CI.dll)
I cant get into safe mode. both vista repairs and sfc scan finds no problems.

Any help would be appreciated

Answer:Probable Virus

bump. anyone?

19 more replies
Relevance 53.3%
Question: Probable virus

Hi all,

Here's the story:

Never used BitTorrent before, but decided that I should use it to get a free copy of Rosetta Stone and associated language lessons. Also got PowerIso to mount some discs for the different language discs.

Noticed that my system has been running slowly and some programs were acting strange. The thing gets frozen on the shutdown screen. McAffey has been on the blink and nothing I've done has helped solve the problem. Now McAffey seems to be inoperable. Also, Microsoft updates wants me to restart to install updates, so I'm not sure if I should go through with that or not. Everything seems fine in safe mode.

If you need more info, just ask.

I will have access to my install disc soon, though at the moment I am another country. If I need to re-install windows I'll have to wait until Sunday.

Thanks in advance,

DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_26
Run by Andy at 17:45:35 on 2011-10-13
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.4058.2274 [GMT -4:00]
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
============== Running Processes ===============
C:\Windows\system32\winini... Read more

Answer:Probable virus

Also I've tried to uninstall Rosetta Stone, but can't.

19 more replies
Relevance 53.3%
Question: Probable Virus

I have a laptop running xp sp3, and AVG software. I plugged in my USB drive to get some school material off of it that I had done the previous day. AVG went nuts as soon as I plugged in the USB drive. It supposedly removed a bunch of malicious files and cleaned/quarantined them. Figuring that AVG had taken care of the problem, as it had before, I continued on my merry way. I double clicked the Firefox shortcut and nothing happened. Weird. So I tried again; same result, nothing happened. Still weird. So i figured that I would try IE, even though it was an old version and I never use it. Same result as firefox, absolutely nothing. Well, I must have picked something up that AVG did not spot. Next step is HiJack This, right? So I open HiJack and there is no option to run a scan and save a logfile, strange. So I run the scan anyway, and it immediately closes. When I tried to open it again, Windows replied that I did not have permission to run access the file. Tried to run it as an admin, as I'm the owner of the computer and an admin, but my password was not recognized. Safe mode time for another virus scan. I ran a command line scan from AVG, and there were several files that were locked and could not be scanned. I don't have the report that was saved, as I don't want to reconnect that computer to my network again. I'm writing this from my netbook, which runs UBUNTU 9.04. I'm at my wits end here. Normally if something gets by AVG I can tak... Read more

Answer:Probable Virus

You picked up the new rootkit out thereWe Need to check for Rootkits with RootRepealDownload RootRepeal from the following location and save it to your desktop.Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorExtract RootRepeal.exe from the archive (If you did not use the "Direct Download" mirror).Open on your desktop.Click the tab.Click the button.Check all seven boxes: Push OkCheck the box for your main system drive (Usually C:), and press Ok.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.----------------------------------Please note: If Rootrepeal fails to run, try this step: Click Settings - Options. Set the Disk Access slider to HighAlso try: right-click on rootrepeal.exe and rename it to tatertot.scr

7 more replies
Relevance 53.3%
Question: Probable Virus ?

I tried to run DDS on my computer, but it said "DDS is not meant to run in Compatibility Mode". I run Windows 8.
However i think there adwares on my computer, and i will be glad if anyone can help me, thanks.

Answer:Probable Virus ?

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 53.3%
Question: Probable Virus

I am currently running in Safe Mode, on v.1289 of x64 Windows XP. The reason? When I boot up, it is fine. When I get to the Welcome Screen, it is fine. When I Log On, it is fine.. for about 3 seconds. Then it all locks up, and the cursor (still visible, and moving - albeit at a refresh a second) cannot do anything. Ctrl-Alt-Del or Ctrl-Esc do nothing either. Not fun... I can get all of the usual programs to work, but they show no problems.. None fixable anyway. All programs are set to advanced, with thourough scanning to throw up anything. Nothing on spybot, Adaware, HJT... When I use Avast! v4.6, it shows up a couple of JS-7 ClassLoggers (?), which cannot be repaired, or deleted. HELP!

In the meantime, is there a way to run Safe Mode in higher res? I can cope without the features, but this resolution (640x480) is appalling.

Edit: I discovered how the (maybe) virus got in. A nameless sibling has been fiddling with my msconfig: Avast! had been removed. Gar. a memo to all: NEVER browse teh interweb without an antivirus program. Seems obvious...

Answer:Probable Virus

15 more replies
Relevance 53.3%
Question: Probable Virus ?

DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17239  BrowserJavaVersion: 10.60.2
Run by Michele at 19:42:01 on 2014-08-31
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.39.1040.18.4074.2034 [GMT 2:00]
AV: Avira Desktop *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
============== Running Processes ===============
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\svchost.exe -k apphost
C:\Windows\system32\svchost.exe -k ftpsvc
C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
C:\Windows\system32\i... Read more

Answer:Probable Virus ?

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Download Malwarebytes' Anti-Malware from HereDouble-click mbam-setup-2.X.X.XXXX.exe to install the application (X's are the current version number).Make sure a checkmark is placed next to Launch Malwarebytes' Anti-Malware, then click Finish.Once MBAM opens, when it says Your databases are out of date, click the Fix Now button.Click the Settings tab at the top, and then in the left column, select Detections and Protections, and if not already checked place a checkmark in the selection box for Scan for rootkits.Click the Scan tab at the top of the program window, select Threat Scan and click the Scan Now button.If you receive a message that updates are available, click the Update Now button (the update will be downloaded, installed, and the scan will start).The scan may take some time to finish,so please be patient.If potential threats are detected, ensure that Quarantine is selected as the Action for all the listed items, and click the Apply Actions button.While still on the Scan tab, click the link for View detailed log, and in the window that opens click the Export button, select Text file (*.txt), and save the log to your Desktop.The log is automatically saved by MBAM and can also be viewed by clicking the History tab and then selecting Application Log... Read more

10 more replies
Relevance 53.3%
Question: Probable virus :-(

My son opened a file sent to him by a friend - it promptly sent him to various unsavoury websites.

Now his Win XP system cannot load microsoft security essentials as it's blocked from updating itself & says the service has been stopped - I can't restart it manually.

Also Google chrome crashes, as does microsoft messenger, the only browser that works is IE & that flashes & flickers constantly.

I will attach the various logfiles in a moment.

Thanks in advance for your efforts to help, my reputation as Mr Know it all Stepdad is toast unless I can get this sorted for him!

Umm - I can't seem to attach the Attach.txt file, there's no way of selecting files from my computer, is this virus activity too??

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:42:32 PM, on 5/19/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17109)
Boot mode: Normal
Running processes:
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C... Read more

Answer:Probable virus :-(

16 more replies
Relevance 53.3%
Question: Probable virus?

Hello everyone,
i' m bit scared. While i was surfing on the internet it appeared a windows displaying a file was moving towards the folder sistem32.
Here logs:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2015
Ran by Michele at 2015-03-14 09:49:41
Running from C:\Users\Michele\Downloads
Boot Mode: Normal
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.0.0 - )
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Ares 2.2.4 (HKLM-x32\...\Ares) (Version: 2.2.4-Build#3048 - Ares Development Group)
Atheros Bluetooth Filter Driver Package (HKLM\...\{65486209-5C54-439C-8383... Read more

Answer:Probable virus?


7 more replies
Relevance 53.3%

I've just recieved an e-mail of "Administrator" (Yeah right!) and it has the attachment 'gmshmw.exe'I'm curious, has anyone else had this? I've never heard of it before, and my AV didn't stop it. I'm NOT going to download it (all those ICT lessons finally paying off :P) but I don't know whether to tell Avast! or not. They may already have it!So, anyone else know what this thing is?Thanks :)

Answer:Virus probable...has anyone else had it?

Try a Google search for that file and see what comes up.

3 more replies
Relevance 53.3%
Question: Probable Virus ?

I suspect there are virus on my computer.
For example while i surf on internet with Google or Internet Explorer, it appears web page i didn' t open!
Moreover Windows usually shutdowns without reasons. I will also attach the information relative at this  problem.
However, I would be glad if you could help me in finding some probable virus or problems.
Here the attach with log files.
If there are any problem please send me a message.
Thanks.   9.88KB

Answer:Probable Virus ?

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Search and delete the AdWare, PUP (Potentially Unwanted Program) installed on your computer.Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click on Delete tab follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).=== Please downloadJunkware Removal Tool to your Desktop.Please close your security software to avoid potential conflicts.Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.The tool will open and start scanning your system.Please be patient as this can take a while to complete, depending on your system's specifications.On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.Please post the contents of JRT.txt into your reply.===Please download and run this DDS Scanning Tool. Nothing will be deleted. It will just give me some additional information about your system.Download DDS by sUBs from one of the following links, if you no longer have it available. Save it to your desktop.1: DDS.scr (Not recommended if yo... Read more

10 more replies
Relevance 53.3%
Question: probable virus

hi guys plz help i am facing an automatic shutdown problem when i try to start my comp.........also iam being told tht i have invalid password when i try to access my mail account htis some kind of virus problem.....i am also posting my hijack log....plz go thru and i need immediate help thnx

Logfile of HijackThis v1.99.1
Scan saved at 10:29:52 PM, on 1/24/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\McAfee\Managed VirusScan\Agent\myagttry.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Sify Broadband\BBImpSec.exe
C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Sify Broadband\BBClient.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\McAfee\Managed VirusScan\Agent\HtmlDlg.Exe
D:\hijackthis\HijackT... Read more

Answer:probable virus


Continue posting in your thread here:

1 more replies
Relevance 52.89%

I believe I have something related to the google redirect virus? I was able to access my gmail account earlier today, but when I went to gmail to send an e-mail about an hour ago, I was told the security certificate for the site was invalid (it was for something like localhost.localdomain). This is in Firefox and IE 8. Any search links on google redirect to The computer I use at home runs AOL (dial-up), and its spyware blocker reported that migrega.exe was trying to access the internet and whether or not to block it when I first logged online. I said to block it.

It's probably related, but when I came home on Wednesday and going on to today a pop-up appears saying a program is trying to connect to the internet and gives the Work Offline or Connect/Try Again buttons (the one that usually pops up when you're booted off of IE or Firefox unexpectedly).

Here is the HJK account:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:39:42 PM, on 12/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\1165794053\ee\services\safetyCore\ver210_5_4_1\aolavupd.exe
C:\WINDOWS... Read more

Answer:Probable Virus/Trojan

I talked with my mother and she said the problem with the anti-spyware program blocking Haxdoor E started on Monday.

3 more replies
Relevance 52.89%

My father's computer has an issue with internet explorer; when he opens a new tab several iexplore.exe's appear in the task manager and take up 100% of the CPU and make everything unbearably slow. He has the most recent version of internet explorer and his operating system is up to date.

I have tried running several anti-virus/malware/spyware/trojan softwares but only one of them found anything suspicious (a cookie which was promptly ridded of), after that initial scan though there have been no problems found.

I'm fairly sure he has a copy of Windows XP knocking around somewhere, if not I have a copy of Windows Vista which he could use if the situation turns very dire.

Thank you for your help.

Here is the DDS.txt:

DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by user at 20:05:12 on 2012-05-27
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1307 [GMT 1:00]
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
============== Running Processes ===============
C:\WINXP\system32\svchost -k DcomLaunch
C:\WINXP\System32\svchost.exe -k netsvcs
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
C:\Program Files\Prevx\prevx.exe
C:\Program Files\Java\jre... Read more

Answer:iexplore.exe, probable virus

Hello and welcome to TSF.

Please note that more than one round may be needed to properly eradicate malware. In co-operation with the cleaning process, please: do not uninstall/install any programs unless asked to do so, to make it easier on us as it is more difficult when files/programs are appearing in/disappearing from the logs;
do not run any tools or scans other than those requested;
follow all instructions in the order they are presented;
if you have problems with or do not understand the instructions, ask before continuing;
stay with this thread until given the All Clear, as absence of symptoms does not always mean the machine is clean;
do not attach any logs/reports, etc.. unless specifically requested to do so.
All logs/reports, etc.. must be posted in Notepad making sure the word wrap is unchecked. (In notepad click format, uncheck word wrap if it is checked.)
Also note that the forum is very busy and if I don't hear from you within three days this thread will be closed.


Please download ComboFix from one of these locations:

Link 1
Link 2
* IMPORTANT !!! Save ComboFix.exe to your Desktop
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you don't know how, please look in here:

How to disable your security applications

Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see ... Read more

7 more replies
Relevance 52.89%

I'll try and be a descriptive as I can, so forgive me if I ramble.

About 5-6 days ago my Acer laptop begain acting a bit weird before I realized I had one of those dreaded fake antispyware programs. It was called Antimalware Doctor, and it really drove me nuts. I couldn't open/run ANYTHING without being in safe mode, and even then I got the blue screen of death countless times. I finally managed to get my com to work long enough to run my programs, AVG, Malwarebytes and Spyware Doctor. It seemed to do the trick, at first, but I continued to have crashes, webpage redirects(Especially through google), Blue Screens, and now Google Chrome doesn't load any pages whatsoever, it just opens and sits there.
I finally through my hands up and popped in my factory restoration cd. Unfortunately it didn't work. I tried reading up on the fake program, even followed the instructions to manually uninstall, but I couldn't find a single file mentioned in the instructions. Yesterday someone through Yahoo! Answers told me to try ComboFix, linking me to this site, and said it was something called a rootkit(I'm a tad bit computer-retarded). I also read that this ComboFix would usually delete the rootkits on the first run even without me doing anything, so I happily uninstalled AVG 2011, and disabled any other programs that would interfere, and ran it. I'm still getting some odd things however, Chrome still won't work, windows error messages pop up saying things ... Read more

Answer:Probable Virus Problem

Update: It's gotten worse. Now my computer goes to the blue screen and crashes constantly. I've been trying to fix it for an hour but as soon as the system restarts and the desktop loads BOOM blue screen. Honestly it comes up after 30-45 seconds even in safe mode. It's done it, I counted, 17 times in like 15 minutes.

22 more replies
Relevance 52.89%

i think my system has been hit by a virus. it is not letting my antivirus (AVG free) upgrade, nor it is letting anyother antivirus installation. Windows is not updating as well. Msssage shows " cannot stablish connection with the remote computer" although my net is connected.

DDS results are

DS (Ver_09-01-07.01) - NTFSx86
Run by hp at 23:14:18.08 on 05-02-2009
Internet Explorer: 7.0.6001.18000
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.91.1033.18.1013.163 [GMT 5.5:30]

AV: AVG Anti-Virus Free *On-access scanning disabled* (Outdated)
AV: Norton Internet Security *On-access scanning disabled* (Outdated)
FW: Norton Internet Security *disabled*

============== Running Processes ===============

C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwor... Read more

Answer:probable virus infection

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a description of your problem, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the ... Read more

2 more replies
Relevance 52.89%

Mod Edit: Moved to Am I Infected from Win10 ,though it is a Win 7 ~~ boopmeHi guys I have random IE windows opening telling me Adobe needs updating.  The URL's look very suspicious, I don't know what to do about it.  I can't upload the screen shots. This is and example of a URL www.  The most recent window that opened was for Windows 7 repair but it wasn't a MS url. Any help is appreciated.  Many thanks. Tinks 

Answer:Probable virus - Windows 7

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click ... Read more

22 more replies
Relevance 52.89%

Both PCs windows XP, broadband connection.Symptoms:PC1 & 2 - broadband router, all lights OK but no connectionPC2, strange checkerpatern over screen right from startup. PC almost gets to log-on screen and then powers down. Got into boot up screen and all seemed OK in there. Re-started and got into safe mode (checkered pattern still there)and tried system restor, it restored but nothing changed. When go out of safe mode PC powers downPC1, tried system restore and got Broadband connection back - so now can ask for help. All seems fine on PC.

Answer:Probable virus stopped both PCs

Forget the machine that's not working for now, get this one sorted and apply the same ideas to the second. How old is the PC, what OS are you using, do you run anti-virus, antispyware software, firewall, have you changed or fitted any hardware, or installed new software recently? Any blue screens or random crashes before these problems?

10 more replies
Relevance 52.89%

I'm running Windows XP. About a week ago I got what looked like the Security Tool malware. It blocked all internet and other programs and gave me all the annoying popups you'd expect.

I have Malwarebytes already installed, so I ran rkill and then Malwarebytes in safe mode and thought I cleaned it. But I then ran Spybot and it found Vurtomonde, even though Malwarebytes didn't find anything.

I cleaned again a few times using a combination of Malwarebytes, Spybot, and Superantisypware and all were coming up clean. But I went ahead and bought The Malwarebytes upgrade and it started showing repeated and multiple blocking of outgoing connections. I get this message:

Malwarebytes Anti-Malware
Successfully blocked access to a potentially malicious website: [Various IP addresses listed here]
Type: outgoing

I've scanned with all of three of those programs since purchasing Malwarebytes Pro and they all still come back with nothing, but Malwarebytes is still blocking repeated outgoing connections. Also, I'm also still having occasional crashes and slowdowns. Finally, just today Symantic Endpoint Protection found a "Trojan.Gen."

So I'm guessing I have a rootkit (the multiple rootkit warnings in the logs were kind of a clue) but I'm not sure where to go from here.

I posted this in the "Am I infected? What do I do?" forum a few days ago, but I know I'm infected so rather than clogging up that forum I moved it here.

Here is my DDS... Read more

Answer:probable tdl3 virus

Hi, Welcome to Bleeping Computer.My name is Shannon and I will be working with you to remove the malware that is on your machine.I apologize for the delay in replying to your post, but this forum is extremely busy.Please Track this topic - On the top right on this tread, click on the Option button, and, in the drop-down list, click on 'Track this topic'. Under Subscription Information, click on 'Immediate Email Notification' and then click on the Proceed button at the bottom.Do Not make any changes on your own to the infected computer.Please set your system to show all files.Click Start, open My Computer, select the Tools menu and click Folder Options.Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.Uncheck: Hide file extensions for known file typesUncheck the Hide protected operating system files (recommended) option.Click Yes to confirm.Now, let's look more thoroughly at the infected computer -We need to see some information about what is happening in your machine. Please perform the following scan:We need to create an OTL Report
Please download OTL from here:Main MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Change the "Extra Registry" option to "Use SafeList"Push the button.Two reports will open, copy and paste them into your reply:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedPlease note: ... Read more

19 more replies
Relevance 52.89%

Hi there,I have followed the instructions for initial posting and my biggest issue is 'website cannot be displayed' messages when going to various websites (i.e., Outlook mail webpages always work, Google search result pages rarely do, youtube links never works).

I have attached the DDS.txt and Attach.txt files but this 'website cannot be displayed' issue has prevented me from downloading GMER. It not only prevents the pages I need from loading but also displays a pop-up that says &quot;download_php couldn?t be downloaded on the rare occasion I got the website to work (I clicked the stop button halfway through loading and the page displayed the GMER link).

If I hit 'retry' for the download, nothing happens. Obviously GMER is essential so I need advice on how to get it. I even tried a Google search for the GMER scanner to download it elsewhere but the pages always come back with &quot;cannot be displayed&quot;. Sometimes, I've noticed, if I put https into links (vs. http), they will work, but this was not successful to get GMER.

***ALSO*** And this is important and possibly critical, my website is not displaying properly here (due to virus?) and the Manage Attachments tab is not displayed. I even did a CRTL+F word search to be sure I didn't miss it, so now am unable to properly attached my zipped Attach file.

I am so sorry if this causes confusion but I have not posted it into this reply. So, not way to get GMER I can see and no way to post an... Read more

Answer:Probable rootkit virus

Hi and welcome to TSF.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed. Note that if you do not respond within 5 days I shall no longer check this thread for replies.

Please do not install or uninstall any programmes, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.

IMPORTANT - for Windows Vista and Windows 7 start all tools by using right click > Run as Administrator.

To assist you I have attached a zip file containing Gmer. Note that the file is a randomly named executable file. Extract the file to your desktop and then follow these instruc... Read more

19 more replies
Relevance 52.89%

Keep getting weird things happening on my computer. Random things popping up. I had a trojan on here a few weeks ago, thought I zapped it maybe not. Macafee keeps telling me to scan because it found a harmful file, but I don't find anything when I do scan. Thanks for your help.

Here is the HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 15:04, on 07-03-22
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\AOL\1106286350\ee\services\safetyCore\ver2_5_4_1\aolavupd.exe
C:\Program Files\\personal firewall\MPFService.exe
C:\Program Files\Common Files\AOL\1106286350\ee\AOLSoftware.exe
C:\Program Files\\personal firewall\MPfTray.exe
C:\Program Files\\antivirus\oasclnt.exe
C:\Program Files\\antivirus\mcvsescn.exe
C:\Program Files\TrojanHunter 4.6\THGuard.exe
C:\Program Files\Common Files\AOL\1106286350\ee\services\safetyCore\ver2_5_4_1\AOLSP Scheduler.exe
C:\WINDOWS\sys... Read more

Answer:Probable trojan/virus

Hi, Did you finish up with the last steps the person helping you had in this thread?
Does AVG Antispyware find anything when you do a full scan?

If not, try this online scan> it doesn't remove anything but it will give us a good reference to see if there is any malware hanging around.
Please go HERE and click Kaspersky Online Scanner
Read and Accept the Agreement
You will be promted to install an ActiveX component from Kaspersky, Click Yes.
If you see a Windows dialog asking if you want to install this software, click the Install button.
The program will launch and then begin downloading the latest definition files,
When the "Update progress" line changes to "Ready" and the "NEXT ->" button becomes available, please click on it.
Click on the Scan Settings button, and in the next window select the Extended database, and click Ok.
Under "Please select a target to scan:", click My Computer to start the scan.
When the scan is finished, click the "Save as Text" button, and save the file as kavscan.txt to your Desktop, close the Kaspersky On-line Scanner window.
Copy and Paste the contents of the on line scanner results into a Reply here in your thread, along with a new HJT log and log from any other scans you run.


1 more replies
Relevance 52.48%
Question: Gmail emails?

I have an email address with my ISP which is not Google. However, I also have a Gmail account with a totally different email address.

Now her is the question: My Gmail web mail software is much easier and faster to load and navigate than that of my ISP web mail software.

Is it possible to open my Gmail and have the emails from my ISP be retrieved on my Gmail?

Answer:Gmail emails?

Does your ISP offer auto forwarding?

2 more replies
Relevance 52.48%
Question: Gmail emails

I just started typing out an email in gmail's web application. I needed to cut or copy the text to Outlook but it wouldn't give me that option. Is there a way to do that or are you stuck once you start with the only option of deleting? I even went to my draft sub folder and it wouldn't let me move the text.

More replies
Relevance 52.07%

I stupidly downloaded an exe the other day and executed it before I scanned it and have since been absolutely torn apart by this nasty virus. Not exactly sure what it is, but it blocks task manager, windows security center, changes the background, stops me from accessing folder options, continuous pop-ups, etc.. I have since stopped and removed most of the ailing issues but the prevailing pop-ups and the background are still unchangeable. So here is my hijackthis log, tell me if I can help any other way. Please help me get rid of this!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:39:37 PM, on 3/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Webroot\Washer\WasherSvc.exe
C:\WIN... Read more

More replies
Relevance 52.07%


I need your help, desperately. This laptop has gone ridiculously slow and McAfree is telling me I have the Vundo Trojan. I keep getting popups and like I said before, it is soooo slow for 1gb of ram.

So yeah, where do I start. Looking forward to your reply!
Many Thanks,


Answer:Please Help!! Vundo Virus & probable more Spyware!

16 more replies
Relevance 52.07%

I think I got a virus called SergeLeLama.vbs on my USB flash drive - and infected my Desktop PC with it. I've been inserting other flash drives, lately, and I believe I've infected them all without realizing it.
I do not really know how to proceed.
The virus is probably triggered by an Autorun file: as I enter the flash disk unit (for istance, E:) the window does not display all the files that are supposed to be stored into it but an odd link.
Sometimes the link looks like a folder - some other times it looks like a disk-unit icon.
I've heard that, by clicking on this link, you basically activate the virus, since its path leads to a .vbs file.
And I obviously clicked on it several times, since I didn't know about this kind of viruses.
So, I've basically got two problems:
1) trying to get rid of this infection on my PC;
2) finding a way to clean my pen-drives, even if I've to format them.
Please, lend me a hand. What can I do to solve these issues?

Answer:Probable virus on USB Flash Drive

Hello and welcome to BC,
Please download MCShield from the following link:MCShield -Official download link 
Double click on MCShield-Setup to install the application.Next => I Agree => Next => Install ... per installation click on Run! button.
Wait a few seconds to MCShield finish initial HDD scan...
Connect all your USB storage devices to the computer one at a time. Scanning will be done automatically.
When all scanning is done, you need to post a logreport that MCShield has created.
Under Logs tab (in Control Center) for AllScans.txt log section click on Save button. AllScanst.txt report shall be located on your Desktop.=> Post here AllScanst.txtExplanation: USB storage devices are all the USB devices that get their own partition letter at connecting to the PC,
e.g. flash drives (thumb/pen drives, USB sticks), external HDDs, MP3/MP4 players, digital cameras,
memory cards (SD cards, Sony Memory Stick, MultiMedia Cards etc.), some mobile phones, some GPS navigation devices etc.
MCShield Anti-Malware USB Tool is a lightweight scanner designed to prevent infections transmitted via removable drives (usb, external, camera cards). It's real-time protection is only real-time when you plug-in an external.
 MSChield Documentation & Program Features

20 more replies
Relevance 52.07%


I believe I have a root kit and need help removing it.
System is Dell Precision M90 with WinXP SPIII on it. I run F-Secure Workstation 7.11 as my AV program with all the latest hot fixes.

I was browsing a well known and usually reputable web site that recently had gotten compromised advertisements from from a web server. Somehow I got an exploit and ended up with AntiVirus 2009 virus.
I rebooted to safe mode, disabled the virus from the start with autoruns, rebooted to safe mode again and ran MBAM and everything seemed to be fine (after also restoring my internet connection from the proxy the virus set it from).

About a week later I was on the same website (they claimed the problem had been fixed) and a new add caused Adobe to launch. I quickly shut down Adobe but it was to late. I had a virus that looked the same but said something different for the title, I think it was AntiVirus System Pro or something else bla bla bla Pro. I should say I was running Seamonkey 1.1.18 with Adobe Pro 6.x. My guess is that the Adobe was to old and had some exploit in it. Reading other comments others got the virus this way as well.

This time I could not boot to safe mode. I got a BSOD when I tried. To fix this I made a Knoppix boot disk and manually deleted the virus's .exe files from my computer. I then could boot to regular mode and used MBAM to remove the left over fragments. This got rid of the virus but now I have system event log errors EventID 45 and 49 FT... Read more

Answer:Probable Rootkit left over from other virus

I'm hesitant to use USB keys without more guidance to try to put things backI have no idea what you mean by the above: Would you care to explain?Let's try and replace the corrupt atapi.sys file with a good one.You have XP SP3 on your system. To do the following properly, you need an XP installation CD the same (with Service Pack 3). You may or may not need the CD at all. You may get away with using an SP2 version?Start Windows normally and put your XP SP3 installation CD in the tray.Start > Run > and type "cmd" and press At the command prompt, type sfc /scannow (note the space!) and press Allow it to run and complete. There will be no message to indicate that it has finished.Then try this to check for rootkits ...Please follow steps 1, 2 & 3 in post #5 by garmanma in the following link ...

10 more replies
Relevance 52.07%

Hi all. I've recently have ran into a problem with my computer. My internet is running significantly slower than other members of my house hold. I'm an online game and have been getting constant ping strikes from 100-400 while my brother whole I also play with, has a constant 50-60 ping. He is also further from the router than me which also worries me, I  use to always have slightly better ping than him, but as of lately my internet has been running very slowly on my computer, while his remains constant. I suspect some malware of some sort, and I've tried some things myself such as kaspersky with no luck. Any help would be appreciated, here is my logs.
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.16428  BrowserJavaVersion: 10.45.2
Run by Ryan at 23:40:28 on 2014-01-10
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.8153.6491 [GMT -7:00]
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
============== Running Processes ===============
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windo... Read more

Answer:Probable Virus/malaware/trojans Need help!!!

Hi and Welcome!!   
My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
The fixes are specific to your problem and should only be used for the issues on this machine.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.
If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
Please be sure to subscribe to the topic if you have not already done so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.
Having said that....     Let's get going!!  
  Please download TDSSKiller
Double click TDSSKiller.exe
Press Start Scan but do nothing else as we are just looking for what is there.
If Malicious objects are fou... Read more

20 more replies
Relevance 52.07%

Hi all. I recently have ran into a problem with my computer. Its been running VERY slow, ive have multiple random pop up ads, I got a trial from kaspersky and it says i have a "potential keylogger" and then i delete it.......but if i restart my computer...its apparently back? Anyways heres my logs......i know theres something wrong i just cant put my finger on it.....O ya one last thing...when i go to alt+ctrl+delete...and go to my processes, theres definitely more things in there then what would be considered "normal". Also the things in the processes are randomly blinking constant, which i never remember it doing before? Anyways if i notice anymore oddities i will let you know. Any advice would help, I unfortunately am not in the best financial situation so theres no way I can afford a new right now......Anywho.......Heres my logsDDS (Ver_09-12-01.01) - NTFSx86 Run by Ryan at 22:51:30.50 on Thu 02/04/2010Internet Explorer: 7.0.5730.11Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.87 [GMT -7:00]AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\Ati... Read more

Answer:Probable Virus/malaware/trojans Need help!!!!!

Hi, welcome to BleepingComputer.My name is Rosty and I'm going to help you with your log!!I see Viewpoint is installed!!Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This changed from what we know in 2006 read this article: suggest you remove the program now. Click on start > run > and then paste the following into the "open" field: appwiz.cpl and press OK. From within Add or Remove Programs uninstall the following if they exist: Viewpoint, Viewpoint Manager, Viewpoint Media Player.Please download Malwarebytes Anti-Malware (v1.44) and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an up... Read more

7 more replies
Relevance 52.07%

Here is my hijack this log. I believe it is the virus.bat.8fish, and possibly more. I got the "a whale will drop monday" message. I am currently running Microsoft Windows Malicious Software Removal Tool because it has done well in the past for me. I am also running a program called GMER but i don't have any experience with it and i'm not sure what it is really doing at the moment.... Any help will be much appreciated!Edit: some other useful information, I keep getting the Vista Internet Security popupsLogfile of Trend Micro HijackThis v2.0.2Scan saved at 1:53:37 PM, on 3/7/2010Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18385)Boot mode: Safe mode with network supportRunning processes:C:\Users\Tony\AppData\Local\av.exeC:\Users\Tony\Desktop\gmer.exeC:\Users\Tony\AppData\Local\Google\Chrome\Application\chrome.exeC:\Users\Tony\AppData\Local\Google\Chrome\Application\chrome.exeC:\Users\Tony\AppData\Local\Google\Chrome\Application\chrome.exeC:\Users\Tony\AppData\Local\Google\Chrome\Application\chrome.exeC:\Program Files (x86)\TrendMicro\HiJackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Read more

Answer:probable virus.bat.8fish infection

I'm pretty sure I fixed it! It was a rogue and I used the tutorial to get rid of it. I'm still running scans to make sure it's all gone but so far all obvious symptoms have disappeared.

2 more replies
Relevance 52.07%

Logfile of HijackThis v1.99.1Scan saved at 10:40:27 AM, on 3/4/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16414)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Intel\Intel Application Accelerator\iaanotif.exeC:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXEC:\Program Files\CyberLink\PowerDVD\DVDLauncher.exeC:\WINDOWS\system32\dla\tfswctrl.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Logitech\MouseWare\system\em_exec.exeC:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\Program Files\CMS Peripherals\BounceBack Express\BBLauncher.exeC:\Program Files\Hewlett-Packard\LaserJet All-in-one\hppdirector.exeC:\WINDOWS\system32\hppapml0.exeC:\WINDOWS\system32\CTsvcCDA.EXEC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\eh... Read more

Answer:Nvcpl In Startup, Probable Virus

Hi KKRoadie,Since you are being helped here, this topic will now be closed.

1 more replies
Relevance 52.07%

My brother runs XP-Pro. Like a first class prat he had no virus protection on his system and he appears to have picked up a virus. The problem is in connecting to the internet. A connection is allowed but then, after appx. 10 seconds the following message appears: "The computer needs to restart due to the connection being cancelled by NT Authority/SYSTEM.I put Norton AV on his machine and did a check but it showed clear for virii. I got the obvious "live update" message from Norton but the update cannot be done because of the internet problem.I suspect that he has been infected with a "new" virus, i.e. one that as appeared since my version of Norton, which is System Works 2001 Pro. I suspect this because of the virus scan showing clear.Does anyone have any idea what NT Authority/SYSTEM is, where it can be found and how to solve this problem? I have searched for any file labelled as above but cannot find it for him.Never having run XP I am limited in what I can do for him short of the above, but without the internet connection we seem stumped to get an update or a website that will identify and clear the virus.Many ThanksThe Teacher

Answer:Probable virus infection that I cannot solve.

He has got Blaster click hereYou/he need to remove it. Stinger is good click here and download the patch from Microsoft.

6 more replies
Relevance 52.07%

Hi all,I haven't been able to access my computer now for a couple of days due to the following problem.Whenever I boot the computer reboots itself with error: ''STOP: C0000135 The program can't start because %hs is missing. Try reinstalling the program.''I have try disabling restart on crash and I was able to see that blue screen. I have followed several tutorials with Windows DVD repair disc, rebuilding BCD/boot config and even making a backup of two backups in RegBack in C:\Windows\System32\config.Nothing has worked so far, then I ran Farbar Recovery Scan Tool and generated the following log file, I'd really appreciate your helping determing what needs to be done so I can boot normally.Just to clarify I'm using Windows 7 64bit Enterprise Edition

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-06-2014
Ran by SYSTEM on MININT-6UUMRK0 on 10-06-2014 21:00:39
Running from I:\Apps
Platform: Windows 7 Enterprise (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Recovery
The current controlset is ControlSet001ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST T... Read more

Answer:BSOD, dll errors and probable virus

I am attaching FRST.exe results from within Windows

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-06-2014 02
Ran by Anubis (administrator) on UNKNOWN on 14-06-2014 09:57:56
Running from I:\Apps
Platform: Windows 7 Enterprise Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version:
Download link for 64-Bit Version:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST:

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\winlogon.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
() C:\Windows\Installer\MSIE361.tmp
(AMD) C:\Windows\System32\atieclxx.exe
(Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(Locktime Software) C:\Pro... Read more

4 more replies
Relevance 52.07%

I noticed today on one of my children's PCs that AVG Antivirus and Zone Alarm were not showing in the system tray, i.e. not running. I tried to open both from my main menu, but within 1 second of the application opening, it closed again.Similarly, when I try to run REGEDIT, it closes immediately after opening.I have tried to Google for Anti Virus software but cannot connect to any site. It's as if this 'virus' knows I want rid of it and is protecting itself. I managed to download PC Tools Antivirus, but as soon as I scan, windows crashes.Any suggestions as to what this is, and how I solve it?

Answer:Strange behaviour - probable virus

Try a System Restore.Failing that, what anti-malware are you running and is it (and your AV) up to date?If System Restore doesn't work, update your AV and anti-malware programs and then disable System Restore (you'll lose all restore points) and run full AV and anti-malware scans.

5 more replies
Relevance 51.66%

Today in Gmail, inbox & sento emails will not open, also all functions on top & side menus are dead, except delete.

can you help.

even got a new address but that has same problem.
I use IE8, XP

AOL & Yahoo toolbars
as Gmail won't work please email me at <email removed by moderator>

Answer:emails will not open in Gmail

we do not operate an email service and having email on public address can be a problem - so i have edited your post - i guess your email for the forum is gmail, which is causing an issue on subscribed posts

i would clear all the temp files and cookies etc from the browser

1 more replies
Relevance 51.66%

Cannot see a way to forward emails in Gmail.Other accont is Hotmail, where it is simple to forward.But am stumped with Gmail.Thanks

Answer:how to forward emails in Gmail

You're kidding? Try looking at the bottom of the e-mail message, click on FORWARD.

3 more replies
Relevance 51.66%

I have just recently converted from using Windows Live Mail for my email to Gmail. Mainly because there was not an easy way to sync my contacts between WLM and my Android smartphone. Syncing is much better now, but the system differences is taking some getting used to. I notice when I am using Gmail and search for a past email, many times Gmail doesn't find it. I try it searching by contact name, by contact email address, and by subject. Of course, I can scroll back through my old emails and find it manually, but it is frustrating that Gmail cannot spot it quickly. It seems to have the most trouble when I am trying to find a SENT email. Sometimes, one I just sent yesterday. I click on the "Sent Mail" folder and the search box shows "in:sent". I type the info and nothing is found. I have tried it backspacing over the "in:sent", and with leaving the "in:sent" in place before my info. Neither way seems to help. Is there a setting I am missing?

Answer:Searching emails in Gmail

Have you tried clicking the little black arrow next to the blue box with white magnifying glass to show search options??


1 more replies
Relevance 51.66%


I have noticed on many occassions that when people send me an email to our business email account it says something like -

"[email protected] on behalf of Joe Blogs <[email protected]"

How do people do this?

I can see one advantage of doing this because I could use any computer or mobile device to log into my Gmail account and check my business emails. Our current set up would require me to lug around my laptop.

Does this have something to do with the domain mapping options?

Are there any disadvantages to doing it this way? Will the original email still 'live' on our business server so it can be retrieved via Outlook 2010?

Any help or direction would be appreciated!

All the best,


More replies
Relevance 51.66%

Hello tech guys,

used to move some emails coming into the promotion tab to be received into the primary [inbox] directly,
after this I noticed that some of the newsletter senders keep flooding with lot of emails everyday,
I wanted to return them into the promotions tab,
I tried to practice the same steps - by:
filter message like this >> next >> create filter >>
but this did not work,
I tried this several times but still coming into my inbox directly, and I dont want to block or spam them.
just to redirect into the promotions tab,
Any solution or idea about this ti share here please?

More replies
Relevance 51.66%

Hi all, have changed my email to so I do not keep changing my address when I change servers. Some emails that I am expecting are not arriving. Ebay always send an email after you order and they always come through straight away, placed 2 orders but no emails. Some sites are sending an email when I order. Does anyone know how I fix this assuming it is the account.
Thank you
Michelle Mead

Tech Support Guy System Info Utility version
OS Version: Microsoft Windows 8.1, 64 bit
Processor: Intel(R) Core(TM) i3-3240 CPU @ 3.40GHz, Intel64 Family 6 Model 58 Stepping 9
Processor Count: 4
RAM: 3794 Mb
Graphics Card: Intel(R) HD Graphics, -1942 Mb
Hard Drives: C: 465 GB (279 GB Free);
Motherboard: ASRock, H71M-DGS
Antivirus: Kaspersky Internet Security, Enabled and Updated

More replies
Relevance 51.66%

Got a weird email 5 days ago, now I get one everyday. Is this a hijack, or just spam, or what is going on?? Easiest if I just post ss of the 'thread'. (The blacked out email is my address)



Answer:is this a gmail hijack? Getting odd emails

Lol, you either intentionally or unintentionally sent a unsubscribe and, gmail is telling you it could not connect to the listed address and that it will try for two more days before giving up. What part of the message couldn't you figure out?

2 more replies
Relevance 51.66%

I'm trying to move all the old emails in my university OWA to gmail just to keep a record. I already know how to 'forward future incoming emails' using the rule option, but what I'm hoping to do is to move all the old emails that are already in the OWA. Is there anyway that I can do this without forwarding each email one by one ? (I have 300 ish emails!). I just want to keep a copy of all the communications, so either to forward them or to keep them as a file (in whatever format) will do just fine for me.

Answer:Moving emails from OWA to gmail

You can't do it from OWA.

1 more replies
Relevance 51.66%

Is there a better alternative to Boomerang to schedule emails in Gmail? In free version there?s only 10 message credits per month.

More replies
Relevance 51.66%

A long time back, all my emails started going into my allmail box instead of my inbox.
Most of the time, that doesn;t bother me. But there are times, when i lose focus on the allmail.
Then I have to try and remember the shortcut to get back to allmail, or to go the sibebar, where Inbox is on top and below that "important" and so on. But to get to allmail, you have to go down to more, and find AllMail as a submenu in that. It might even be necessary to make the browser page smaller, so you can see the More menu.
So is it possible to either (a) get messages to go into inbox, or to bring Allmail up to the top of the sidebar, where Inbox is located.
The second one would be my first choice, as that's where my most of all my emails are ie in allmail.
But if i can only do the first thing ie get messages to appear in my inbox, is there a way to move all mails in my allmail box to my inbox?

update. Okay, after all these years, i have found out that all mail refers to archived mail.
So if all my mail is going into archived mail, does that mean that at one stage, i chose to have all my mail be archived. Perhaps I hit something invaderntly.
I came upon this, because I had another question about Archived mail. I was wondering if I was looking at mail, in all mail, and ticked a post, and chose to archive it, and then deleted it, was it still in the archive. But as I am in the archive (all mail) I am deleting it from the archive, or am I.

Answer:how do i get all my new emails in gmail to go to my inbox?

all mail refers to archived mailClick to expand...

No, All Mail is exactly what it says. Mail in every location: Inbox, any folders you created, archived emails, trash and spam.
There is a label in front of the subject line telling you where that particular email is located.
When you delete from the archive it moves to trash. You will see it in All Mail with Trash in front of the subject.
You can also see it if you open Trash.

Go to settings: (gear icon) then click on labels. If you cahnge All Mail from Hide to Show it will appear at the top rather than having to click the arrow aside of More.

2 more replies
Relevance 51.66%

Every once in a while I'll have an email discussion with someone blow up.  All of the emails are open, and they are in backwards order each in indenting a little off from the other one on their left margins, and they form a kind of systematic tree where they branch off of each other systematically.
I can't figure out how to put them back into order, and close them.  
After that the gmail thread is totally shot, so I have to begin in another one.  
It's done this for years. 

Answer:Why does gmail blow up the emails?

You need to post screen shots.   I have never seen Gmail "permanently unthread" a threaded discussion though you can change views.  The relationship is in the e-mail headers themselves and all the e-mail client (or web interface) does is use that information to create a threaded view/conversation view.

16 more replies
Relevance 51.66%

I have registered in some blog or forum sites. I was oblivious of the item of "receive news from the site". Now I've got like hundreds of emails from those sites, which really annoyed me. Is there a quick settings in Gmail, which enables me block those emails with just a few clicks? Or do I have to go to those sites, sign in and find the button to cancel subscription? Thank you for your help.

Answer:How to block some emails in Gmail

Isn't there a link for removing you from the subscription on the signature area (footer/bottom) of the body of message?
It will be usually listed as a link with name 'unsubscribe' or 'stop receiving the updates' etc.

0 more replies
Relevance 51.66%

Hi everyone,

I was sorting out all my emails, all 4000+ emails that has conjured up in each sub folder in my account. I must of miss-read or miss-clicked or accidentally gone into all mail & deleted all my emails. Most of them I diddnt want, but there was 3 categories of emails I wanted to keep, my work union, iTunes & O2 emails. Is there any way of getting these back by contacting google or going through a process? (there not in my trash mail by the way)

I really would be greatful to any help in aiding getting these back

Thanks in advance for any help



Answer:Deleted gmail emails

10 more replies
Relevance 51.66%

Hi Hope someone maybe can help. For the last few days I have been to access my GMAIL account and see the emails I've received but am UNABLE to OPEN or VIEW any emails.I also cannot open the SETTINGS screen or chnage screen to see SPAM or SENT mails.Anyone else having these problems ??Thanks

Answer:GMAIL - Cannot open emails

Is this through the Gmail website, or are you using a program e.g. Outlook/Mozilla Thinderbird ?

4 more replies
Relevance 51.66%

Help please, how do I transfer gmail account to a new PC (both PCs are Win10)
If I open my gmail account on the new PC will the old emails be there from the cloud?
Thank you

Answer:Take gmail account and emails to a new PC

Yes. Just sign in to your account.

2 more replies
Relevance 51.66%

Hi,Just recently the emails that were going into my WLM account are being redirected
into my gmail account.
I sent a test email from WLM which goes into my sent folder but not my inbox.
Is there a way to set it up so that gmail goes to gmail account and my emails
go into my WLM account.
Thanks for any help.
OS is Wndows 7 64bit

Answer:WLM emails going into my gmail account.

Hello Tommy,

What do you mean by "WLM account" ?
Is this an, or, or ISP (btinternet), or ... account?
WLM (Windows Live Mail) is a Client (installed on PC) email program and can have many email accounts.
Do you have multiple accounts setup in WLM?
Every email provider I know of also has a WEB site where the user can read/send/manage email.
Are you using WLM for some email, and WEB email for other email?
Each email provider may offer different protocols such as IMAP, POP, MAPI and that can make a difference in what folders are used for a client program such as WLM.

Then there's a "Windows Live account" if that's what you're talking about, and Skype can affect things from what I've read...

Below is a screen print from WLM 2012 showing my "WLM accounts".
I have 2 hotmail accounts here - 1 is MAPI, and 1 is a gmail and outlook account...
I mainly use Office Outlook for all my email, but I do use WLM on "test" systems for email that I know I don't need to keep ...

As you said it's a "recent change", can you restore to a point before the problem started?
Do you know what changed to start the problem - Patch Tuesday updates perhaps?

2 more replies
Relevance 51.66%

This is my first time posting here or on any tech forum, for that matter. Anyway, for the past few days I have been unable to open virtually any executable file on my computer, which runs on XP Media Center Edition. I have no success with anything in normal mode and can only open Internet Explorer in safe mode. Whenever I attempt to open a file, the task manager shows the file djq.exe appearing instead, which consumes a considerable amount of memory. After a second or two, djq.exe disappears and nothing has opened.

I am assuming that this is the work of a virus or spyware, but I am unable to take any course of action, as this is preventing me from running any anti-virus or anti-spyware software, accessing options on the control panel, running a system restore, or even opening the command window. I'd rather not have to reinstall XP again.

Any assistance on this matter would be greatly appreciated! I also apologize if my post failed to meet any conventions or norms of the forum, and I'd be glad to supplement it with any necessary information.

Answer:Probable virus preventing .exe files from opening

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a

Having problems with spyware and pop-ups? First Steps

link at the top of each page.

Please follow our pre-posting process outlined below. Use a USB flash drive to download and transfer the tools to the affected machine, if necessary. You might like to run the Flash_Disinfector.exe on the clean machine and the flash drive first to protect against any possible transfer of infection via USB.

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Relevance 51.66%

Gentlemen, I have a severe problem that I am unable to re-solve, and that is Updating my Win 7 64-bit to SP1. I have tried all possible methods outlined on Microsoft's Website, even downloading and burning the ISO DVD. It's quite clear to me either a virus or spyware is stopping the updating process. I started a thread on Seven Forums to resolve this, but after some time they recommended I try here. For all the details I refer you to that post.
So I've attached my two FarBar text files to this post, in the hopes someone can lead me to a resolution. I should add if this is indeed a virus, it's a quite sophisticated one, because no Virus Detection software has been able to find it so far.

More replies
Relevance 51.66%

So, I've been having some issues for a while.
They don't seem to impact run speeds, but I fear for my data.

I will list the issues I am having as best as I know here:
I cannot operate a microphone on the computer. (I have tried using multiple microphones and programs)
The internet connection icon in the bottom right shows that I am not connected to a wireless network (though I am).
I have 5 Rundll.exe processes running at any given time.
I have 12 SVCHOST.exe processes running at any given time.
My computer makes random noises at random times.
Dell SyncUP fails every time I start my computer.
Things saved directly in C do not always survive restarts.
I have McAffee protection, but it turns up nothing on scans.
I don't know too much about viruses and diagnostic tools, but it seems that something is not right, so if you can help me get the data you need (if it isn't here already) to help me, I'll respond as fast as I can.


Answer:Issues with a probable virus WIN7 Dell

Hello and welcome to BC!Download Malwarebytes' Anti-Malware, chek for updates and do a quick scan. Pleas post the logfile (can be found in Logs) in your next reply.Download Security Chek and run it, post also this log in your next reply.In the next reply I want 2 logs:Malwarebytes' Anti-MalwareSecurity ChekIf you have any problems, let me know!

2 more replies
Relevance 51.66%

Hello my name is Tom. Earlier this morning while surfing the web via firefox a false virus scanner popped up with a security alert in the taskbar. It had somehow installed itself, possibly from firefox or from my email. It said i do not currently have a firewall running and suggested installing one. I started microsoft security essentials to find it. I disconnected my internet access to keep it for calling for help. Then the false scanner popped up showing a scan in progress. (one of those that shows umpteen thousand viruses found)

I found it and shut it down using taskmanager (wasn't smart enough to remember/make note of the program name) The program restarted, firefox crashed and I was unable to start firefox, internet explorer or google chrome. No other programs crashed that I could see. Before security essentials completed ITS scan the computer bugged out and I eventually had to reset it.

Upon reset I found that no programs at all would run. I would only get something like the following error message :

-The procedure entry point mswsock.migratewinsockconguration could not be found

I searched for solutions on my ipod, but most required internet access to download Rkiller or Hijackthis. After a bit of mucking about I realized I could open pictures. So I right clicked a picture>open with> internet explorer and managed to download Rkill.exe When I ran it it killed one process and I could launch .exe files once more. I found techguy, registered and now woul... Read more

Answer:false virus scanner- probable rootkit

16 more replies
Relevance 51.66%

Need help. I searched for a thread on this...please redirect me if there is one. I belive the pc is infected. McAfee virus scan will not run "scanning has encountered a problem". I tried using other tools but this virus seems to block them from use. I am not much of a tech guy but you guys were able to help me in the past...which was awesome. Sure would appreciate some help before I cave and do a reinstall.


Answer:Probable Virus - Scanning has encountered a problem

10 more replies
Relevance 51.66%

Ok- I read everything and am going to do my best to follow the rules.

Problem- I downloaded some file off of Bittorrent and now I have a virus. I know, foolish and I have learned my lesson. The problem is, I downloaded that file to my external hard drive (G:) This drive contains all my movies, music, pics., etc..... Now when I try to open anything, the virus manifests itself. Instead of music, I hear a clip from the movie"Dodgeball" or the file won't play at all. When I try to play movies, it says the files don't appear to have a video track(I know they do) and pics for the most part won't open. Because of this, I told Gmer to scan my G drive as well. For the most part, I don't really notice any problems running the C drive or any programs. If there is anything else, I left out, please let me know. I have tried every virus removal program and they find nothing.

now the log txt.

2008-11-06 21:29:47 ----D---- C:\rsit
2008-11-06 21:13:49 ----A---- C:\Windows\gmer.txt
2008-11-06 2109 ----A---- C:\Windows\gmer.ini
2008-11-06 2106 ----RA---- C:\Windows\gmer.exe
2008-11-06 2106 ----A---- C:\Windows\gmer_uninstall.cmd
2008-11-06 2106 ----A---- C:\Windows\gmer.dll
2008-11-06 20:46:24 ----D---- C:\ProgramData\Avg8
2008-11-06 19:25:10 ----D---- C:\Users\Windows Vista\AppData\Roaming\Malwarebytes
2008-11-06 19:25:06 ----D---- C:\ProgramData\Malwarebytes
2008-10-30 18:23:40 ----D---- C:\Program Files\Trend Micro
2008-10-30 17:21:02 ----D----... Read more

Answer:Probable virus-mp3 plays some wierd thing

BUMP. Please help?

2 more replies
Relevance 51.66%

Hi, I am using XP sp2 although I think I may have accidently downloaded sp3 I will know more later. Ive been having BSODs for about a month, and I have tried every other option. Would you Please check this log for me? Thank You!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:20:04 PM, on 5/28/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16640)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exec:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeC:\WINDOWS\Explorer.EXEC:\Program Files\McAfee\VirusScan\McShield.exec:\PROGRA~1\\agent\mcagent.exeC:\Program Files\McAfee\MPF\MPFSrv.exeC:\WINDOWS\system32\nvsvc32.exeC:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYSC:\Program Files\SiteAdvisor\6261\SAService.exeC:\WINDOWS\ehome\ehtray.exeC:\... Read more

Answer:Probable Virus, Bsod When Using Internet Explorer.

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computer advice given is taken at your own risk.I apologize for the wait, if your issues are not resolved, read the instructions posted above and then follow the directions below. If you no longer need help, I would appreciate a quick post letting me know so I can close your topic.This is still SP2: Platform: Windows XP SP2 (WinNT 5.01.2600)I don't see anything in the HJT log but if you read the directions you know now you have not provided much information. If you still have these issues, post any error messages you receive word for word and describe the issues in as much detail as possible. Post a fresh HJT log using Add Reply and we will see what we can discover from there. Understand this may have nothing to do with malware, here is a good troubleshooting site to start with:

6 more replies
Relevance 51.66%

Need help. I searched for a thread on this...please redirect me if there is one. I belive the pc is infected. McAfee virus scan will not run "scanning has encountered a problem". I tried using other tools but this virus seems to block them from use. I am not much of a tech guy but you guys were able to help me in the past...which was awesome. Sure would appreciate some help before I cave and do a reinstall.

Cannot run Hijack this..when I tried to it shut down, when I try to er-run I get an error message "Windows cannot access the specified device, path, or file. You may not have the appropriate permission to access the item."

I even installed in Safe Mode and tried to run it, same result. Would surely appreciate anu help.


Answer:Probable Virus - Scanning has encountered a problem

Was able to run Symantec online scan. Results were:

Virus Status: Infected!
Your computer is infected with at least one known threat.
Virus Status: Unknown
The Scan was unable to determine your vulnerability status.
184950 files scanned, 15 file(s) infected on your disk drives.
No viruses were detected in memory.

Your computer is free of known threats. Virus Detection does not check compressed files.

Your computer appears safe for now. For real-time protection from viruses, hackers and privacy threats, upgrade to Norton Internet Security&#8482;.

No viruses were detected in memory.

The scan was cancelled before finishing. To restart the scan, click here.

Your computer is free of known threats. Virus Detection does not check compressed files.

Your computer appears safe for now. For real-time protection from viruses, hackers and privacy threats, upgrade to Norton Internet Security&#8482;.

Search for the name of the threat(s) listed below on the Symantec Security Response site for removal information.

Warning! The scan detected a virus that is active in your computer's memory.
The scan ended to prevent further infection.

You should shut down your computer immediately and restart it with an antivirus rescue disk or similar tool.
No viruses were detected in memory.

Your computer is infected with at least one known virus or Trojan horse.

Search for the name of the threat(s) listed below on the Symantec Security Response site for removal information... Read more

2 more replies
Relevance 51.66%

my computer has been acting very strangely, im pretty sure there are viruses causing all sorts of critical system errors, explorer.exe does not start upon logging in, my log in name has been changed, my background does not show up when i use taskmanager to start it, and now i am getting an error called "gen23" or "gen32", a generic windows thing, im not sure what to do now as i am tying this is safe mode because when logged into windows normally my CPU memory usage is at 100%, i cant use firefox or play WoW or anything else really. im sure ill have to show you a hijackthis log, so if someone would please help a guy out id be super appreciative :Dalso, when on the internet i get pop ups that i didnt used to get, i think something is re-routing my internetEdit: Moved topic from XP to the more appropriate forum. ~ Animal

Answer:windows issues probable virus infestation

Hi and welcome to BleepingComputer The process of cleaning your computer may require temporarily disabliling some security programs. If you are using SpyBot Search and Destroy, please refer to Note 2 at the bottom of this page.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Result... Read more

8 more replies
Relevance 51.66%

Hello guys, I'm new on this forum, and I registered because I'm having some troubles lately that I thought I could get fixed in this forum with your help and knowledge, as I believe most of you are specialists in terms of computer.
(The problems I'll be showing you were mostly seen by my father, so I don't know much details about them...)
Here's my problem: since last week, my antivirus (Microsoft Security Essentials) was constantly asking me to scan the computer. Normally, it takes about 10 to 20 minutes to do a fast scan, but now it's taking a couple of hours. Besides that, after each time my dad performed a scan this week, the antivirus asks to perform another scan again (as if I hadn't performed before). He told me that when he comes back to the computer (after some hours, doing something else while it is scanning), it has rebooted. The last time we performed a scan was yesterday, and we suddenly got a blue screen of death for the first time. My dad also reported that lately, it's been common to see a window popup, and right after just vanish (a small white squared window appears in the center). Once, he's even seen a box popping up, asking if he wanted to execute some kind of application (by his description, could be the windows safety warning, and of course, he didn't execute).
If it helps, I've attached the dump file of the BSOD. (apparently, it's a memory corruption...)

My computer specs are:
- Window... Read more

Answer:Unidentified but probable virus causing BSOD

Welcome to the Malware Removal Forum.

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!
Helpful Notes:

If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
If you cannot seem to login to an infected user acco... Read more

9 more replies
Relevance 51.66%


I am running XP Professional at home, with Zone Alarm fire wall and anti-virus. I cannot run SpyBot or the anti-virus program without my PC suddenly shutting down with no error message. Spybot shuts down very quickly -- I think around the Carima Enterprise search. It seems that whenever a program accesses a particular file on the C: drive, that file causes the shutdown.

I have tried the free Panda anti-virus scan as recommended in these forums for a similar problem. It found and disinfected 1 virus and found a piece of spyware. The first time, around the 9,000 scanned files mark my PC then rebooted but showed a "virus found" type of screen that I often see from Zone Alarm for a split second. All I can tell you is that it had the letter A or AB in it, and ended with EXE so it was some kind of executable. I tried Panda again: virus is gone, spyware is still there, and the scan continues until into the 30,000 scanned files, when the system shuts down again.

Any assistance is appreciated.

ADDENDUM: I have finally narrowed down the problem file to c:\windows\qqkre.exe. I cannot use Windows Explorer to browse to c:\windows, it begins to list the files and I guess when it tries to list qqkre.exe it promptly reboots. I cannot reboot in Safe Mode, it hangs after MUP.SYS, probably when it gets to qqkre.exe.

ADDENDUM 2: I used the Command DOS prompt to rename qqkre.exe to qqkre.txt, and then did nothing while waiting for a response here. In the meantime, my Zone Alarm... Read more

Answer:Solved: XP reboots - probable virus but cannot detect

Hi, Welcome to TSG!!
Click here to download HJTsetup.exe
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

3 more replies
Relevance 51.25%

I've set up my Gmail account for reading emails via IMAP and sending emails all with Mozilla's Thunderbird. I followed Google's directions on how to setup the client to work with Thunderbird. It reads the emails correctly but when I send emails I get:
"An error occured while sending mail. The mail server responded: INCORRECT DOMAIN IN MAIL/RCPT COMMAND. Please verify that your email address is correct in your Mail preferences and try again."

As it suggests I check the outgoing mail setting and try again with the same results.

Has anyone else run into this issue and how did you resolve it?

Answer:Thunderbird and Gmail, sending emails

Not sure. I remember setting my GMail up for pop, but not IMAP. I would post something over on the Mozilla support forums - more people read that and could help.

3 more replies
Relevance 51.25%

Hey guys so I'm at 93%? Of my gmail total free storage and most of the emails are just records of like orders and there a way I can save them and then delete em all?

More replies
Relevance 51.25%

So im wanting to transfer my Emails from Hotmail without simply forwarding them (id like to keep the original address in them) i found a guide here that used Eudora and Hotmail Popper but the guide is very vague and i couldnt get it to work. Is there another way or a better guide out there? After a hour and a half searching through google and the Eudora forums i have come up with nothing on how to get this to work or any other options. Please HELP!

Answer:Transfer Hotmail emails to Gmail?

I don't know - I just hand forwarded everything and designated a label for the migration. Sorry!

3 more replies
Relevance 51.25%

Hi I run a company that takes a lot of bookings through g mail. Is it possible to move these booking direct from gmail to calender as they come in??

Answer:Can I sync my gmail emails and my calender?

Never done this, but maybe this helps:How to Create a Calendar Event From a Message in GmailCopy or Move Events From One Google Calendar to Another

2 more replies
Relevance 51.25%

I have been trying to follow this guide to get my local emails uploaded onto Gmail:

Unfortunately it seems that this guide is for Outlook users, and I use thunderbird. Does anybody know of a way to import local emails from Thunderbird to Gmail?

I've heard of the "Gmail Loader" program, but AFAIK this program will strip the emails of their original send dates. What I'd really like is for a solution where all my local messages can be sent and stored on Gmail, with the original sender information retained, and the original send dates retained. Any ideas? Thanks in advance.

Answer:Import thunderbird emails to Gmail

Here are the instructions from gmail to enable IMAP in thunderbird ->

Just attach to GMAIL via IMAP and the drag and drop you saved local email to GMAIL through thunderbird.

Make sure you enable IMAP in your GMAIL settings under Settings -> Forwarding and POP/IMAP.

2 more replies
Relevance 51.25%

As a result of posting an offer to donate some furniture I no longer needed, I received a response and started to reply. During the time I was working on that reply I received another response. I wanted my reply to only go to the first response, as this was his instructions for collection, but, to my horror, the reply went to the second responder (only) and, judging from the email I then got back from that responder, included both initial responses.
Not only do I have to honour an unintentional offer, but the email address of the first responder has been compromised.
This new streaming concept has very important flaws. Clearly, now clicking reply to you still need to check who the email is going to before you send it, and it looks like you also can't be certain quite what you are sending - perhaps its better to start a new email and cat and paste as required to show what you are responding to.
Is this a case of Gmail trying to be cleaver and just being too clever for OUR own good!
I have posted this also on Gmail, so it will be interesting to see if they respond

Answer:Gmail warning about strems of emails

xania: I'm intrigued. What do you mean by "this new streaming concept"? I'm a heavy user of gmail - have been since it first appeared - but what you're talking about doesn't really make sense to me in terms of the way I use gmail. I've never had a problem such as the one you describe.

5 more replies
Relevance 51.25%

Hi everyone

I was wondering how can I view my emails from gmail and yahoo in outlook(not the emails from my ISP mail box)? how do I configure outlook to do that?
The outlook version is outlook 2003.


Answer:How can I get emails from gmail and yahoo to outlook?

10 more replies
Relevance 51.25%

Hi, when I searched the forums for posts on Microsoft outlook I found posts in the windows and the computer software areas, a majority of the posts appeared here so I thought I'd try posting here.Okay, here's my situation: I currently have an email account with Adelphia and I use Microsoft Outlook 2003 to access that it account.  I setup Outlook so that when I receive the emails from the Adelphia account Outlook removes them and transfers them to Outlook (meaning a copy of the emails don't remain in my Adelphia inbox).  I've decided that I want to stop using Outlook, mainly due to the fact that it makes it difficult to access my emails from computers not on my network account.  I've decided to switch to a gmail account (for other reasons involving irritation with Adelphia).My problem is that I can't figure out how to get my emails from Outlook 2003 to my new gmail account.  I've looked in the questions and answers section, the forum, and both faq on gmail and outlook official pages and still can't figure it out.  I think I've figured out a way to redirect new incoming mail, but that's not my concern what I need is to redirect my old emails.  I know that I could just forward all of my old emails to my new gmail account, but that will be a huge hassle and the emails would then show up as being sent from me and not the original sender.  If I can't figure out another solution I'll do th... Read more

Answer:help transfering emails from outlook to gmail

I'm not absolutely sure but I doubt very much this can be done.  Think about it.  With Outlook, your mail is on your hard drive, not out on the Internet.  With Gmail, it is out on the Internet; it's web-based mail.  I looked at the info on Gmail on Google's site and, like you, found nothing about transferring mail from Outlook.  So, I no other option but to forward the mail to yourself if you really must get it all moved over to Gmail.

3 more replies
Relevance 51.25%

Hello All,

Please suggest me is this is a good idea. I have approx. 10 GB of emails stored in my Gmail account. Since Gmail offer only 15 GB of the free space, I had to create a new account and start using it. I see Yahoo Mail! give 1 TB of emails storage? I already have one yahoo account. I have below questions:
How can I transfer emails from Gmail to Yahoo (easy and quick, I already know the MS outlook way - accessing IMAP of both and then transferring from one account to another simply by moving, its time consuming and hangs all time)
Is is okay to transfer to Yahoo! Would I be facing any trouble with it? Like accessing mails. Often seen, yahoo has pathetic user interface and not comfortable to use.
Any other way for email storage, I just wanna free space from my loved Gmail account and continue using it.

Thanks for all help!


More replies
Relevance 51.25%

I have set up the above import and it is working, but my actual TalkTalk inbox is now empty.
I must have missed a tick box somewhere for still leaving the mails on TT, but now I can't find the option.
Any help appreciated.

Answer:Importing Talktalk emails to gmail

In Gmail open settings, then accounts and import. Where it says 'Check email from other accounts (using POP3):' and your Talk Talk email address select 'edit info', in the popup re-enter your Talk Talk password and tick the box for 'Leave a copy of retrieved messages on the server...' Select 'save changes'.

3 more replies
Relevance 51.25%

Can anyone out there advise me whether there is a way to sync more old emails from gmail to outlook.

Answer:sync more emails from gmail to outlook

Tutorial here:

2 more replies
Relevance 51.25%

I have always used Hotmail with Outlook Express - I can send and receive Hotmail emails from my PC. But now that Microsoft have threatened to withdraw free POP access, I have decided to try GMail.
I have got my GMail working with Outlook Express. I can download all my received emails into a folder on my PC, but I do not appear to be able to download my sent emails.

Is there a way to do this?

Thanks in advance for any information you can give.

Answer:Can I Get My Sent GMail Emails into Outlook Express?

Just a thought, send from Outlook Express, just have you Gmail account in the header.

I use Gmail for everything, but no longer have to log into their site - everything comes and goes from the Gmail account.


2 more replies
Relevance 51.25%

Hi there,

I've recently set my parents up with a Gmail account but am having problems with transferring their emails from an Outlook PST file to their new account. I've tried following the tutorial at the link below without success - mainly due to the fact that Outlook seems to be very unstable on their machine (hence the change to Gmail).

Export and Backup Emails from Outlook to Gmail Online

Are there any other ways of migrating these emails across to their new account? Note that the migration tool offered by Google does not work as the Gmail account isn't connected to Google Apps for Business.

One possible solution is that I could migrate their emails via my Google Apps for Business account though I imagine it would take forever to then forward these emails onto them (most likely manually using the Forward) option?



Answer:Tranferring emails from Outlook to Gmail

Why was following the guide unsuccessful?

Is this the tool you were speaking of:

How many emails need to be transferred?

6 more replies
Relevance 51.25%

I primarily use Windows Mail for my work at home job. I also have a Gmail account so I can check for e-mails on my iphone when I'm out. I want to have it set up so that the emails show up in both places, Windows Mail and Gmail.

Currently if my desktop computer is turned off and my Windows Mail program is not open, the incoming emails only go to Gmail and not Windows mail. OR, if my computer is up and running but the Windows mail doesn't happen to be open, the emails only go to Gmail and not Windows Mail. Seems like if my browser (IE8) is open but windows mail is not open, emails will only go to Gmail.

Do I have some settings wrong which would make the emails not show up in Windows Mail?

I am running Windows Vista, 64 bit.

Thank you for any suggestions.

Answer:Emails sometimes go to gmail and not windows mail

Hi lindalo5032,

While researching for this issue, found a link which might help in fixing the issue: Leaving Mail on the Server with Windows Mail | Tiger Technologies Support

Ensure to check the box ?Leave a copy of messages on the server? and uncheck ?Remove from server after? and ?Remove from server when deleted from deleted items?. Click Apply and then OK.

Check if the new messages appear in Windows Mails and Gmail.

Please post the results.

3 more replies
Relevance 51.25%

do i have to click each email (little box on left) , one at a time ? is there a faster way ? then, i have to do the same thing in the trash bin, 'delete forever'; i'm trying to delete from my gmail/all mail folder in outlook express, as well; thanks

Answer:GMAIL : delete emails one at a time ?

You should be able to highlight the first one in the group you want to delete highlight the last one hold down shift and click delete.Sorry if I insult your intelligence.

3 more replies
Relevance 51.25%

cant i delete all the emails in the spam folder instead of only 100 at a time?

Answer:thousands of emails in gmail spam


So if you click in the spam folder the link "Delete all spam messages now" it doesnt delete all spam messages?

To be honest if your getting 1000s of spam emails a day/week/month I would be creating a new Gmail account as that one will only keep getting those volumes of spam as its now on many spam email lists, which is why its wise to keep your main email account only for friends and create a sperate one/s for signing upto forums, newletters etc

3 more replies
Relevance 51.25%

Is there any way to send my emails from another account to my gmail account? Like forwarding them or having gmail grab them from another inbox?

Answer:Merging emails with gmail, yahoo, msn

Gmail lets you import (grab) e-mails from other accounts:

1 more replies
Relevance 51.25%

I use Outlook 2010 which syncs to my IMAP Gmail account.
This works very well.

Today something happening in Outlook (I might have dragged something, I don't know) and my mails (12,500 of them) ended up in Outlook's deleted items folder. Some Gmail folders just vanished, like Sent Items, Bin and Spam.

I immediately quit Oulook before it synced so all my mails are still safe on Gmail's servers. I checked via logging in to the Gmail website and also disabled IMAP to be safe.

I need some advice on how to fix the emails in Outlook.
I'm afraid that if I start syncing the mails will be lost from Gmail.
I also don't want to start a new Outlook .pst file as there are many gigs of emails to sync.

Does anyone have some advice?

More replies
Relevance 51.25%

Hi All,

I use outlook for about 4 email addresses (work and personal). I also do volunteer work for a charity and have an email address for that which is a gmail account.

I have tried repeatedly to set this gmail account up in Outlook but it didn't work. The only way I have found is to have two separate outlook account where I choose if I want to open my normal account of the charity account but cannot do both at the same time.

This is very frustrating as I need to be able to see my calendar and contacts when using the charity account.

Please help

More replies
Relevance 51.25%

Hey tech guys,
I want to send emails to long list of recipients by Gmail, each of them will be shown and receive the email as [To his email address], would like to ask if there is any idea or suggestion about this?

More replies
Relevance 51.25%

DDS (Ver_11-05-19.01) - NTFSx86
Internet Explorer: 8.0.7600.16385
Run by Alyx at 18:06:45 on 2011-07-20
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3767.1520 [GMT -7:00]
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
============== Running Processes ===============
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\... Read more

Answer:computer sending out emails (gmail)

Hi alyxthegreat, and welcome to Bleeping Computer.Firstly,Please launch Malwarebytes' Anti-Malware, click the Update tab, and then Check for Updates. Then choose the Scanner tab and select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Secondly,Download OTL.exe by OldTimer to your Desktop.Close all windows and double click OTL.exe.In the "Custom Scans/Fixes" window (under the light green bar) paste the following in bold:

%systemroot%\*. /mp /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Click Run Scan and let the program run uninterrupted.When the scan completes, it will open two Notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. Post both logs in this thread.You may need to use two posts to get it all.

2 more replies
Relevance 51.25%

Evidently, 60 some accounts have been compromised at Gmail - all emails w/in these accounts were 'lost'. One thought is that there was/is a flaw w/in Firefox that allowed XXS to manipulate and then cause harm. While only a very small fraction of Gmail users, this does bring to light at least two points:

1. If it is important to you, backup your email via whatever method you so desire.
2. Technology, time, and evilness in the wrong hands can mess up the 'best' systems; ie: Firefox browser and/or Google's Gmail.

Check out the following...
semi-fresh news items:

older yet potentially relevant [XXS type issue] news:
,,,which was supposedly fixed immediately thereafter:

Gmail forum w/ people affected:

Potential to 'hack' into a Gmail type account via an invite:
,,, and via other underhanded means:

And now, means to backup/store Gmail goods:

More replies
Relevance 51.25%

I can't access emails of more than a month old in gmail. I created folders for emails that I wanted to keep, but gmail's inbox states to get messages that are more than one month go to settings. I have gone into settings but I can't get access my emails of over a month. I take screenshots of all emails I want to keep and put them in a file and if I don't I can't access them. How I can file\keep the emails that I want, as there is no facility for me to save. The contents of gmail's inbox folders are then removed after one month.

Answer:gmail cannot access emails of more than a month old

Have you noticed the arrows near the settings image?

5 more replies
Relevance 51.25%

For years I have used my own domain email addresses hosted with Gmail for all my email requirements, and have had no problems. My settings with Gmail are such that the message on the server is deleted once it has been accessed via Thunderbird.
One thing confuses me though. If I am away on holiday, I sometimes access my messages directly from Gmail using a tablet, and as most of them are unimportant, I then delete them manually from Gmail and then also delete them from the 'bin' folder. However, when I return home at the end of the holiday and switch on my PC, all the messages are then downloaded to Thunderbird, though I have deleted them previously.
Obviously the reason for accessing them on holiday is to avoid having hundreds of messages when I return home, but clearly I am failing to achieve this. Can somebody please explain why this happens, and how I stop it.

More replies
Relevance 51.25%

Hi, anyone out there recommend a way to pick-up emails from a hotmail account using Googlemail?I believe it is possible using a ?3rd Party email client?, but not sure which are:1 ? Secure and2 ? don?t limit the number of emails you can download each month.Many thanks in anticipation.......Cornflakes

Answer:Pick-up Hotmail emails with Gmail

can you not forward them to your gmail account?

5 more replies