Computer Support Forum

Found over 50GB of data in the found.000 after a windows crashed, best approach?

Question: Found over 50GB of data in the found.000 after a windows crashed, best approach?

Hello all,
 
Here's something i've not run into before, this in on a newer computer, purhcased in the
last 6 months, and I came back to my computer, seemed to be asleep even though I have
sleep and hibernation disabled, and I had to force my computer off, after no response from
several efforts.
 
Then Windows 8.1 won't start, and the automated repairs don't succeed.
 
When windows was trying to start, it states something about the drive being locked, and
so I looked into those errors, but they didn't seem to apply to me.
 
Then I booted to the command prompt, get to the C: Drive, and I look at the directory and
it seems to be missing a number of folder such as Windows, and Program Files, as well as
the users directory is missing my primary user name.
 
Then I look into the found.000 folder, where CHKDSK keeps it's recovered and orphaned
data and I Found over 50GB of data!
 
I've never seen this before, i've had crashed drives, garbled data, corrupt data, etc..etc..
but I've never found a significant amount of data, in this folder, and clearly this is where
my windows, user profile, program files, and personal data has gone.
 
The folder has yesterday's date and time stamp around the time I encountered this problem.
 
What's the best approach to work with this, besides wipe and restore?
 
I'm more curious than anything and clearly if I can somehow recover this, return it to
working order, vs. wipe and restore, it'd be really appreciated.
 
The drive is working, passes diagnostics, and is a 3.5" Seagate 2TB Sata2 Drive, Desktop Model
 
thanks for any and all clues, tips, advice, and help

Relevance 100%
Preferred Solution: Found over 50GB of data in the found.000 after a windows crashed, best approach?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: Found over 50GB of data in the found.000 after a windows crashed, best approach?

Those chk files are portions of files Windows was able to recover after a chkdsk. You can see if any are recoverable using the following methods.
 
https://www.raymond.cc/blog/how-to-recover-chk-files-created-by-chkdsk-and-scandisk/

3 more replies
Relevance 79.95%

Hello, 
 
I left my laptop on last night and when I woke up it was on the lock screen, when I logged in the computer crashed and went to a blue screen of death. When I restarted the laptop it was/ is sluggish. I ran Malwarebytes, ESET Online, and Avast and no threats were found. Later on Malwarebytes brings up a pop up that says it found a Backdoor.bot.ed in C:\Program Files (x86)\Nexon\Nexon Launcher\nexon_runtime.exe
I deleted the file in Malwarebytes and uninstalled the program. 
I'm worries something might be left. Any help would be appreciated.
Thanks in Advance,
nrgstone
 
Operating system : Windows 7 Home Edition
Using: Avast, Malwarebytes, also ran ESET Online
 
This is the log from Malwarebytes when then the notice came up:
 
Malwarebytes Anti-Malware
www.malwarebytes.org
 
 
Protection, 2/19/2015 8:50:52 AM, SYSTEM, ADRIAN-PC, Protection, Malware Protection, Starting, 
Protection, 2/19/2015 8:50:52 AM, SYSTEM, ADRIAN-PC, Protection, Malware Protection, Started, 
Protection, 2/19/2015 8:50:52 AM, SYSTEM, ADRIAN-PC, Protection, Malicious Website Protection, Starting, 
Update, 2/19/2015 8:50:53 AM, SYSTEM, ADRIAN-PC, Manual, Remediation Database, 2013.10.16.1, 2014.12.6.1, 
Update, 2/19/2015 8:50:53 AM, SYSTEM, ADRIAN-PC, Manual, Rootkit Database, 2014.11.18.1, 2015.2.3.1, 
Protection, 2/19/2015 8:50:54 AM, SYSTEM, ADRIAN-PC, Protection, Malicious Website Protection, Started, 
Update, 2/19/2015 ... Read more

Answer:Windows Crashed Malwarebytes found Backdoor.bot.ed

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click ... Read more

2 more replies
Relevance 77.49%

Windows Defender found this Trojan
 
Tried to use Malwarebytes but got BSOD and "MBAMSwissarmy.sys" error, page fault in non paged area
Tried to use MBAR but got BSOD and "MBAMSwissarmy.sys" error, page fault in non paged area
SPYBOT found rootkit activity but no option to clean up
ESET online scanner crashed but found 4 infections before crashing
 
Windows 10 insider preview 14959
i7-2600
Asus Essentio 6830

More replies
Relevance 77.49%

Windows Defender found this Trojan Tried to use Malwarebytes but got BSOD and "MBAMSwissarmy.sys" error, page fault in non paged areaTried to use MBAR but got BSOD and "MBAMSwissarmy.sys" error, page fault in non paged areaSPYBOT found rootkit activity but no option to clean upESET online scanner crashed but found 4 infections before crashing Windows 10 insider preview 14959i7-2600Asus Essentio 6830Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-11-2016Ran by avner (administrator) on DESKTOP-03BVFFK (07-11-2016 19:18:54)Running from C:\Users\avner\DownloadsLoaded Profiles: avner (Available Profiles: avner)Platform: Windows 10 Pro Insider Preview Version 1607 (X64) Language: English (United Kingdom)Internet Explorer Version 11 (Default browser: Edge)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(LaCie) C:\Program Files (x86)\LaCie\LaCie Desktop Manager\LaCieDesktopManagerDaemon.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer... Read more

Answer:Windows Defender found Rogue JS/TechBroloba.B and ESET online crashed

Greetings Seanosborne66 and to BleepingComputer's Virus/Trojan/Spyware/Malware Removal forum.My name is Oh My! and I am here to help you! Now that we are "friends" please call me Gary.If you would allow me to call you by your first name I would prefer to do that.===================================================Ground Rules:First, I would like to inform you that most of us here at Bleeping Computer offer our expert assistance out of the goodness of our hearts. Please try to match our commitment to you with your patience toward us. If this was easy we would never have met.Please do not run any tools or take any steps other than those I will provide for you while we work on your computer together. I need to be certain about the state of your computer in order to provide appropriate and effective steps for you to take. Most often "well intentioned" (and usually panic driven!) independent efforts can make things much worse for both of us. If at any point you would prefer to take your own steps please let me know, I will not be offended. I would be happy to focus on the many others who are waiting in line for assistance.Please perform all steps in the order they are listed in each set of instructions. Some steps may be a bit complicated. If things are not clear, be sure to stop and let me know. We need to work on this together with confidence.Please copy and paste all logs into your post unless directed otherwise. Please do not re-run any programs I suggest. If you encounter pro... Read more

42 more replies
Relevance 71.34%

I have an Emachines E725. The other
day it  fatally crashed. I don't have the recovery discs because everything came preloaded. I found a site that helped me get the same edition of windows 7 that I had but my key does not work when I try to
register it. How can I get the correct (legal) copy of the OS when the Emachines company has went out of business?

More replies
Relevance 70.93%

So, I had computer problems over the weekend, and, well, I got a new hardrive from the PC repair shop because I'd constantly get the blue-screen-of-death repeatedly for weeks, until my just wouldn't startup again on friday.

Anyways, the computer store owner who repaired my pc was nice enough to create a "windows old" folder which was copied over from my old hardrive, onto the new one. Now he did this so I could keep movies/music/pics/ect. But he advised me to sort through it in order to keep what I want (music/movies), and then delete everything else so I don't get a BSOD again. So, I just copied all the old vid/music and reinstalled all the old software (via Ninite). Now, here's where it gets interesting for me. I had reinstalled firefox, but all my old bookmarks were gone and lost forever (because I hadn't bothered to back them up in years) right? Well, that's what I thought at first. But then, after browsing through that "windows old" folder, I found my original .json files from just last week, before the crash, that apparently, firefox has to create in order to re-load your bookmarks everytime you open up firefox (I think). So, I imported one of the old .json files into my new firefox browser and *bam* it worked like a charm! Everything is back in firefox. Totally awesome! Especially for someone like me; who isnt really all that computer savy

So I'm just wondering. Since I have that entire "windows old" f... Read more

Answer:So, my PC crashed; but I just found the old .json files for Firefox..anything else?

Re: So, my PC crashed; but I just found the old .json files for Firefox..anything els

Like, is there anyway to recover my old windows sticky notes?
 

1 more replies
Relevance 70.52%

So it's a long story.
I hadn't had Microsoft Net Framework on, so I turned it on.
Then my PC randomly crashed.
Tried to reboot but it got stuck in the crash then reboot circle.
I tried my hardest to fix it but I couldn't find anything to fix it so I decided to just,
reinstall windows.
I made a bootable usb windows install which worked last time I had to reinstall windows.
This time I load the usb up and it goes to the language settings, then it has 2 modes.
Custom or upgrade.
Upgrade has the whole "you've loaded windows with the installation disk blahblah"
Which doesn't work cause I've tried to fix that to.
So I'm forced to do custom, which only show Disk 0 (Which is my Usb)
I choose browse so i can see what disks I have and I have 3.
C: (Usb)
X: (Don't know what this one is)
and The cd drive.
The "X" drive only has 30 free mbs of space, even though my HDD has 500 Gigs.
TLR Hard Drive doesn't show up.
Please, someone help as this is very annoying.

Answer:HDD not found in Windows Installation but found in BIOS

Follow the steps to Troubleshoot Windows 7 Installation Failures - Windows 7 Help Forums

9 more replies
Relevance 68.88%

I had a massive crash on my desk to HP m9000.  I downloaded a recovery disk only to find that a secondary hard drive had been renamed to c:.  There appears to still be a boot drive listed but does not do anything.  How can I rename the seondary drive back to e: where it belongs?  Has C: drive been damaged beyond recoveryI am running AVG free virus protection but the e-mail scanning quit a couple days before the crask.  HELP!!!!

Answer:HP m9000 crashed,used recovery disk, found secondary drive relabeled as c: Help!

Where did this recovery CD get DLoaded from ? ?

8 more replies
Relevance 65.19%

Please can you help.When I start up ( windows XP ) I get a box which say " Registry data not found " and OK. It doesnt seem to make any difference but I dont know what it is.I am a novice to this, so I need all the help I can get, in plain English please.Thank youLiz

Answer:"Registry data not found"

Has it always done this? If not try running System Restore back to a time before the problem Started.Start, All programs/Accessories/System tools/System Restore

8 more replies
Relevance 65.19%

I have installed the Win 7 on my "C" drive. If I connect another HDD the "D" drive to my computer, I go into my computer, disk management, and the disk iBut the disk doesnt show up in My Computer or in the top of Disk Management. Any help would be appreciated.
 

Answer:Data Drive Not Found

Reboot and enter BIOS for clues?

Is it SATA is it enabled in BIOS OK?

If there is a BIOS option for "Enable diagnostic screen on boot" or similar, switch it on. Gives a bit more info at boot up.

If IDE are the jumper settings correct? Did you connect master/slave cable correctly? Is it the correct cable? Google HDD Cable Select CS.
There is a tutorial somewhere on Cable Select with lots of useful info.
No use for SATA though.

Did you only plug the data cable and forget the power connector in the drive? I have been known to do that.
Once is a bad luck, twice is stupid, half a dozen times is "Oh for God's sake"
That is the limit of my knowledge.

Reply if still problems with LOTS more info about what you have and are trying to do. I am sure someone else will have better tips.
 

2 more replies
Relevance 65.19%

I am using Netscape 8.1 and Internet Explorer 6.0. When I use both to access google they both either say "the document contains no data" or "the page cannot be displayed." In MSDOS when i typed in ping www.google.com it gives me the IP 64.233.189.104 and the address www.1.google.com .

I ran Adaware, Avant anti-virus and McAfee -- all returned results and I deleted the viruses/adware/spyware. However, the problem is still there.

I use a router for 2 computers. This problem started happening for both the computers after I installed Avant anti-virus and installed a new printer for both the computers. I don't know if these could be the reasons for the problem. What should I do?


Operating System
Windows XP Professional Service Pack 2 (build 2600)

Processor
2.80 gigahertz Intel Pentium 4
8 kilobyte primary memory cache
512 kilobyte secondary memory cache


Drives
80.02 Gigabytes Usable Hard Drive Capacity
68.91 Gigabytes Hard Drive Free Space

Memory Modules c,d
512 Megabytes Installed Memory

Slot 'A0' is Empty
Slot 'A1' has 512 MB
Slot 'A2' is Empty
 

Answer:Can't Go To Google -- No Data Found

Welcome to Majorgeeks!

That is a valid IP address for Google. See below:



IP Address : 64.233.189.104 [ 64.233.189.104 ]
ISP : Google
Organization : Google
Location : US, United States
City : Mountain View, CA 94043
Latitude : 3741'92" North
Longitude : 12205'74" West


OrgName: Google Inc.
OrgID: GOGL
Address: 1600 Amphitheatre Parkway
City: Mountain View
StateProv: CA
PostalCode: 94043
Country: USClick to expand...

However the URL being reference does not appear to be valid.

Try the below:

Click Start, Run, and enter ipconfig /flusdns and click OK!

Then download HOSTER and then follow the below steps.

Unzip Hoster to a convenient folder such as C:\Hoster
Run Hoster.exe, click Restore Original Hosts and then click OK.
Click the X to exit the program
Any change? If not, please continue on to the below instructions!

Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments.

Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
Make sure you check version numbers and get all updates.
Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above yo... Read more

1 more replies
Relevance 65.19%

i switched on today and when the desktop launches i get reg data not found. is it okay to leave it and do nothing or is imminent death of my PC nearing

Answer:registry data not found

up

10 more replies
Relevance 64.78%

I have IE 8.0 and Netscape 8.1.3 on Windows XP (media ed). Both browsers have the same problem. Google searches' links are redirected. The first link clicked works, but subsequent ones are redirected. There is no other unusual activity. The redirection does not occur with a proxy server using google.

I have tried Norton, Trend Micro PC-cillin, Malware Bytes, and Spybot S&D. None of these detect any malware and none solve the problem. The DNS is automatically obtained.

I have looked through the forum, and there appears to be a number of people with similar problems, but the solutions offerred (if not too specific) have not worked.

Thank you.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:08:18, on 7/2/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmo... Read more

Answer:IE/Ntscp search links redirected, no malware found, no solution found in threads

11 more replies
Relevance 64.78%

TL;DR Ubuntu finds and uses a PCIe Wifi card just fine, but Windows can't find it. (Apparently needs USB header connection on MB?)

Long Version:
I use a PCIe card with the Intel Dual Band 8260AC chipset. The interesting part is that it has a USB 2.0 header on it that you're supposed to plug into a header on the MB. I had it installed this way previously and it was working fine til last night. I upgrade my CPU/MB/RAM, but the new MB is one USB 2.0 header short. The old MB had 3, all filled, but the new MB has only 2 USB 2.0 headers and 1 USB 3.0 header, so one device is left out. I decided to leave the wifi card plugged into the PCIe slot, but not plugged into a MB header and fire it up and make sure everything else was working.

No surprise, but I had no wifi. Figured maybe a new driver might solve the issue as it seems weird to need both a PCIe slot and a USB connection. So I dug out a USB wifi dongle I had and proceeded to update/install every possible driver, BIOS, etc. for the new MB and the wifi card. Still nothing.

Just out of curiosity I rebooted into Ubuntu (latest 17.10), and voila! Wifi worked! I removed the USB dongle just to make sure, but it definitely works just fine in Ubuntu, but Windows 10 cannot find the device. This is without the USB connection BTW. I've installed and reinstalled the driver, but no dice.

Any thoughts on getting Windows to recognize the card without the USB header connected? And any thoughts on why Ubuntu can find and use the device jus... Read more

Answer:Intel Dual-Band 8260AC PCIe not found in Win10, found in Ubuntu

Huh. So it seems Windows doesn't recognize it even with the USB header plugged in. This is annoying.

1 more replies
Relevance 64.78%

Hi and thanks for a very helpful forum. I read through all the malware removal instructions and have completed the step-by-step cleaning process (which seems to have worked) and now would like to confirm that my system is actually clean. Please see attached logs. Note: ComboFix did run but then froze during the "preparing log report" phase, so the attached ComboFix log is just the txt I found in the folder, not the full zip log. Also, RootRepeal failed to run at all (in normal or safe mode).

More infor about infection:

AVG found Crypt.AQLW but couldn't fully clean it
CPU & HD constantly at 100%, firewall had been disabled, internet traffic going mad & link redirection - immediately disconnected from internet
SUPERAntiSpyware found and cleaned Trojan.Agent/Gen-Loader
MalwareBytes Anti-Malware found and cleaned Exploit.Drop.CFG
ComboFix found and cleaned Rootkit.ZeroAccess ... but failed to generate full report. CPU dropped to normal after this!
RootRepeal failed to run
MGTools ran normally

Note: Before finding this forum, I also found advice to run Kaspersky TDSSKiller which I did, and it did find something, but didn't fix the issue. Log for that attached as well.
 

Answer:AVG found Crypt.AQLW and subsequent scans found Rootkit.ZeroAccess

More logs ...

Note: It says in the ComboFix.txt that AVG was still enabled (and it also gave me that warning message) but I had already used the recommended AVG removal tool and AVG was no longer installed or running at the time.

I've now updated my OS and all my software, have switched to MS Security Essentials and re-enabled firewall etc.
 

17 more replies
Relevance 64.78%

My friend is about to graduate from college. She has been using her dad's laptop (which he got on a loan from his work) but will have to return it soon after graduation. She has about 50 gb of data, mostly images and some Word documents. I offered to transfer her data onto my 1 tb external hard drive, but she does not know when she will be getting a new laptop and we'll probably be far apart geographically. She does not want to store her data online for privacy reasons.

Basically, it seems like her only options are an external hard drive or a giant (or 2 giant?) USB flash drives. Could anyone recommend a specific model? She does not have a lot of data and won't have a lot of data any time soon, so I am wary of her buying a giant external HDD. But then again, it does seem more cost-effective to just buy a model with larger capacity. I am wondering if buying say two 32 gb USB flash drives would be a better option. Again, it may be a few years until she gets a new laptop and so she just needs something to store her photos and documents. She doesn't really need much more space than 50 gb. What are her best options?
 

Answer:friend is about to lose her laptop, needs to back up 50gb of data

8 more replies
Relevance 64.78%

I ran into this problem a few hours ago and have been pulling my hear out. Autorepairs diagnose the problem as a problem with the partition table, but is unable to automatically fix it Ive gone into diskpart and confirmed that the partition was active. I reset the MBR thought bootrec,
bootsect.exe /nt60 all /force

Success on all three windows partitions manually creating the BCD initially works. I can create the store, but when i run bcdedit /import i get an error saying the store does not exist. I am desperately trying to avoid an os reinstall. I havent made any changes in the past few weeks so I dont know what could have caused this. Any suggestions would be appreciated.

Answer:bootmgr not found. bootrec /rebuildbcd and /fixboot give 'Element not found" error

I just solved my problem in another way.. non of the above solutions helped me.. kept saying in rebuildbcd, that the total ammount of windows installations found was: 0 I moved the sata cable to another port,.. that fixed the problem for me.. might help others Anders

more replies
Relevance 64.78%

I have a whole slew of cells that looks like this:(1) / Word)(2) / Words)(3/3) / More-words)(4/4) / Even more words)(A) / Words)(B) / Many-words)(A1/B1) / Words/Words/Words)All I need is an excel macro that I can put in the column next to it, so only the characters in the brackets are shown. Using the example above, the new column would look like:123/34/4ABA1/B1message edited by punistation

Answer:Excel: Only keep data found in brackets

First, let's get the terminology right. re: "I need is an excel macro that I can put in the column"A macro can not be "put in the column". A macro is group of instructions that is stored in the VBA editor. The macro can place values/text/formulas etc. in the column, but the macro itself is not "put in the column".That said, based on the example data you have provided, you do not need a macro. You can extract the text between the brackets with 2 built-in Excel functions: MID and FIND.=MID(A1,2,FIND(")",A1)-2)If you need an explanation on how that works, just let us know.Click Here Before Posting Data or VBA Code ---> How To Post Data or Code.

4 more replies
Relevance 64.78%

I experienced a system crash after connecting new measurement hardware to the PC. The automatic system recovery tool would not be able to restore my system. I have not created any previous images, that I could use to restore. I've also unsuccessfully tried to restore with a bootable Windows 7 DVD.

While I had most of the data backed up externally, I had some data in the Users/MyAccount/ folder which I would like to recover. I have launched notepad from the command prompt and File>Open to browse the partitions. I attach a picture showing the partitions.

Can anyone explain me that the different partitions are? They do not resemble how I set it up in the first place. Also, the E:/Users folder is empty when I navigate into it. Does that mean that my data which was located there is not recoverable in any way (Linux puppy ect.)?

Help would be really appreciated!

More replies
Relevance 64.37%

I have ESET anti-virus and it has quarantined a few things trying to access my comp. Win32/daurso found by MS Defender. Ran combofix and malware bytes to try and get rid of stuff, but Defender and ESET still block high risk things. After following instructions (ie. defogger to GMER) GMER also said Rootkits may have changed something. Please help! I have posted most recent logs for your review. I did not post Attach.txt as it said not to unless requested. Thank you. GMER 1.0.15.15281 - http://www.gmer.netRootkit scan 2010-05-25 12:59:29Windows 6.0.6002 Service Pack 2Running: gmer.exe; Driver: C:\Users\Ryan\AppData\Local\Temp\pxldrpog.sys---- Kernel code sections - GMER 1.0.15 ----? System32\Drivers\pmeamhy.sys A device attached to the system is not functioning. !.text C:\Windows\system32\DRIVERS\nvlddmkm.sys section is writeable [0x8DA0D340, 0x345217, 0xE8000020].text bridge.sys 8E498462 519 Bytes [8B, FF, 55, 8B, EC, 81, EC, ...]---- User code sections - GMER 1.0.15 ----.text C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[316] kernel32.dll!SetUnhandledExceptionFilter 7796A84F 4 Bytes [C2, 04, 00, 00].text C:\... Read more

Answer:Rootkit changes found by GMER, win32/daurso found by MS Defender

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

13 more replies
Relevance 64.37%

Hi all, I'm trying to do a vanilla installation of my Lenovo R61e 7650 and am experiencing something I've never seen before - I boot up XP, Press F6 and load the correct SATA drivers, Windows continues and successfully sees the hard drive, I tell it to format the hard drive but when it comes to asking for the SATA floppy disk again just before copying files (as normal), the setup suddenley ceases to see the floppy drive - game over.I decided to abandon the vanilla install and boot from the recovery partition but I don't get the To Start the Product Recovery program, press F11 message as instructed here: http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-4UFUYK. Does anyone have any ideas how to solve this?  I wanted to update the bios to see if that helped but have discovered you can't do it from a floppy ( CD only and I don't have a burner apart from on my laptop ) or directly from Windows on the laptop ( and the laptop is blank because I've formatted the drive during setup and I can't run the recovery partition). Any help would be appreciated. Thanks Bob













Solved!

Go to Solution.

Answer:XP Install - Floppy Found Initially but then Can't Be Found for SATA Drivers

Go into the BIOS and set the SATA to compatibility.I type this response twice a day. Does anybody ever search anymore?





______________________________________________________T60 2623-D7U, 3 GB Ram. Dual boot XP and Linux Mint.T400 2765-T7U Windows 7Registered Linux User #160145FYI: I am not employed by Lenovo

5 more replies
Relevance 64.37%

RogueKiller V9.2.11.0 [Sep 9 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 8.1 (6.3.9200 ) 64 bits version
Started in : Normal mode
User : Connor [Admin rights]
Mode : Scan -- Date : 09/18/2014 17:19:11

Bad processes : 0

Registry Entries : 16
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 134.197.205.1 131.216.205.1 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 134.197.205.1 131.216.205.1 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1A227AA3-413D-47EA-85A7-DDF4B7D6E666} | DhcpNameServer : 134.197.6.1 134.197.5.1 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{238B190B-0304-4D6C-8DA3-D8346938D832} | DhcpNameServer : 134.197.205.1 131.216.205.1 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{1A227AA3-413D-47EA-85A7-DDF4B7D6E666} | DhcpNameServer : 134.197.6.1 134.197.5.1 -> FOUND
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{238B190B-0304-4D6C-8DA3-D8346938D832} | DhcpNameServer : 134.197.205.1 131.216.205.1 -> FOUND
[PUM.DesktopI... Read more

Answer:Malwarebytes found Trojan.0access, now Rogue Killer found PUM.dns. Help?

Here is the log from adwCleaner. Also, I'm noticing computer is lacking performance, so that's a symptom.

***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****

Key Found : HKCU\Software\BRS
Key Found : HKCU\Software\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae
Key Found : HKCU\Software\Myfree Codec
Key Found : [x64] HKCU\Software\BRS
Key Found : [x64] HKCU\Software\Myfree Codec
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae
Key Found : HKLM\SOFTWARE\Myfree Codec
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pfkfdlcdbajamklbneflfbcmfgddmpae

****... Read more

3 more replies
Relevance 64.37%

After using several different malware/adware, rootkit, and virus scan tools I attempted to clean up my system of multiple issues. Some of these are recurring and it seems I have an increase in " <====== ATTENTION" entries on the Farbar log from previous scans. Obviously, I don't have the expertise to fix any remaining issues and need help. Here are the 2 Farbar scan logs:
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by xnamex (administrator) on GW01 (09-04-2016 14:06:52)
Running from C:\Users\xnamex\Desktop
Loaded Profiles: xnamex (Available Profiles: xnamex)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel® Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\22.6.0.142\n360.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Gateway MyBackup\ISch... Read more

Answer:Farbar found: LinkSwift while EEK found: Application.Win32.WSearch (A)

Hello chriffan and Welcome to the BleepingComputer.   
 
My name is Yılmaz and I'll help you with the cleanup of malware from your computer.
Before we move on, please read the following points carefully.
Please complete all steps in the specified order.
Even if tools don't find malware, I want you to post the logfiles anyway.
Please copy and paste the logfiles directly into your posts. Please do not attach them unless you are instructed to do so.
Read the instructions carefully. If you have problems, stop what you  were doing and describe the problems you encountered as precisely as  you can.
Don't install or uninstall software during the cleanup unless you are told to do so.
Ensure your external and/or USB drives are inserted during always the scan.
If you can't answer for the next few days, please let me know. If  you haven't answered within 5 days, I am assuming that you don't need  help anymore and your topic will be closed.
If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!
I can not guarantee that we will find and be able to remove all  malware. The cleaning process is not instant. Please continue to review  my answers until I tell you that your computer is clean
Please reply to this thread. Do not start a new topic
As my first language is not English, please do not use slang or idioms. It could be hard for me to understand.
Please open as administrator  t... Read more

28 more replies
Relevance 64.37%

Background: clone the entire contents of the HDD to a SSD with the aim to replace the HDD, including the OS.

After having cloned a HDD with Windows 7 laptop to a SDD successfully, and replaced the HDD with the SDD, resulted in a smooth boot exactly the the same procedure failed with a 2007 laptop Vista 32bit.

Procedure with support of the guidelines of the SSD Vendor (Sandisk):
1. Initialize SSD
2. Clone the entire HDD to the SSD
3. Replace the HDD with the SSD
4. Start the laptop.
5a. Result with a Win 7 laptop: OK
5b. Result with a Vista 32bit laptop: failed

Failure with Vista (I'm not that technical):

The BIOS indicates: no IDE device found.
When starting up, the message 'Operation System not found' appears

A major difference between the Win 7 and Vista laptop is the transfer mode of the (former) HDD and the new SSD: Win 7 had a SATA 300 installed, while the Vista has a SATA 150. The SSD is SATA 600.

What I did?
1) I created a ISO Vista 32bit file to get the laptop into the repair mode. This repair mode does not recognize a drive c: (checking out with the installed DOS).
So, i'm turning in circles. There is no way to get the internal SSD recognized.

2) When connecting the new SSD drive with USB to check the SSD status with the Computer Management/Disk Management tool, this is displayed:
The internal HDD (containing the system) shows: Healty (Boot, Page File, Crash Dump, Primary Partition).The USB connected SSD shows: Healty (Active, Primary Partition). Further, the ... Read more

Answer:Boot failure after cloning HDD to SSD (no IDE device found; Operating sys not found)

Try using the first sata port. See your manufacturer's documentation on which one that is.

1 more replies
Relevance 64.37%

hello

i ran trojan remover on safe mode before i ran into this tech forum.

it found 2 malware infections. a trojan and a hacking system file.
they both were deleted by the trojan remover program. when i ran it again. nothing was found....but my main concern right now is that i was reading the log that i was given and it said something about some files being locked or in use. and im not sure if the computer is really finally out of harms way.

i do have a boot disc if i have to reformat. but i do run a store AND reformatting is such a huge hassle. i will do it if ihave to. but i would like to know if im still in harms way.

i ran the programs you guys asked and i will be attaching them here.
ALSO i will attach the trojan remover log..just so you see what im talking abt.


the computer started acting up, an the main that it was doing, was everytime i would turn the computer back on, the receipt printer was uninstalled. EVERYTIME.

thanks in advance.

Answer:possible hacking problem/malware found/trojan found....URGENT

Hello!

I am currently reviewing your logfiles and will assist you shortly with instructions. Please be patient.

Meanwhile: Please subscribe to this thread if you have not done already and please don't do any other scans on your own and don't install or remove software. Thank you!

4 more replies
Relevance 63.96%

I get an error "Method or data member not found" for rs.EQPT_CLLI where .EQPT_CLLI is highlighted on the InsertSQL. I have multiple tables linked one to the next with one to many relationship (so 1 > 2 > 3 > 4 etc). I need to add numerous records each week that i import from excel into the access table NEWDATA. I only need to add the part of the data that is not already existing. The code below is to add to the lowest level table (DATA) where the other data already exist in all other tables. I am not sure what is wrong with my code but could someone see if they have any suggestions?
Code:

Sub NEWDATAInsert()

Dim rs As DAO.Recordset
Dim DB As DAO.Database
Dim TktRS As String
Dim InsertSQL As String
Dim UpdateSQL As String
Set DB = CurrentDb()

DoCmd.SetWarnings False

TktRS = " Select * From NEWDATA INNER JOIN SWITCH_Query ON NEWDATA.SWITCH = SWITCH_Query.Switch AND NEWDATA.SWCARD = SWITCH_Query.SWCARD AND NEWDATA.PARENT = SWITCH_Query.PARENT AND NEWDATA.PCARD = SWITCH_Query.PCARD AND NEWDATA.CLLI = SWITCH_Query.CLLI AND NEWDATA.EQPT_CLLI = SWITCH_Query.EQPT_CLLI WHERE PROCESSED = False "

Set rs = DB.OpenRecordset(TktRS)

Do While Not rs.EOF

InsertSQL = "INSERT INTO DATA (EQPT_CLLI, VISIT, TICKET, RACK) VALUES ('" & rs.EQPT_CLLI & "', #" & rs.VISIT & "#, " & rs.TICKET)"

rs.MoveNext

Loop

UpdateSQL = "UPDATE NEWDATA INNER JOIN SWITCH_Query ON NEWDATA.SWITCH = SWITCH_Query.... Read more

Answer:Solved: Method or data member not found

16 more replies
Relevance 63.96%

First off i would like to say hello to the bleepingcomputer community and second sorry if i posted this in the wrong section.
I have a toshiba l355 that originally had windows vista on it but a year ago a family member over wrote my cpu with a windows 8 beta and i think my cpu is saying "operating system not found" cause the beta expired and my question is can i retrieve my data from the computer before i buy a new copy of a operating system? Thank in advance!

Answer:operating system not found data recovery

Would have nothing to do with the beta expiring.  Something is wrong with the hard drive.  Either the MBR (Master Boot Record) is screwed up, or the hard drive is dying.  Try installing Xubuntu 12.04 LTS 32 bit from a CD, and see if you still get problems with the drive.  You can also use the Xubuntu CD as a LIve CD, to allow you to check S.M.A.R.T. info on the drive, to see if it is failing.

4 more replies
Relevance 63.96%

One of my teens computer is infected. The laptop is a 4 year old Dell VOSTRO 1500 Windows XP Home Edition SP3. She accidentally clicked on an ad, windows started popping up and she closed them all. It appears it tried to installed programs. We get a box with a red X titled" Data Protection" The text reads as follows - "Uncertified Avira AntiVir Desktop antivirus software detected on your computer. You need to remove Avira AntiVir Desktop software for the correct operation of Data Protection. Attention: If you don't remove Avira AntiVir Desktop software, the performance of your computer will dramatically degrade. Press OK to remove Avira AntiVir Desktop"What I have done: -Ran virus scan and Avira AntiVir Personal is detecting 11 viruses or unwanted programs. -Ran CC Cleaner with all boxes checked and deleted all. - I've turned off the resident tea timer function on Spybot S&D-The computer has no internet access, ip addresses cannot be found for wireless or hardwired.We tried repairing connection with no success. All other computers on the home network access internet okay. I downloaded and ran #6, 7 and 8 from a flash drive on the infected laptop. I'm starting the Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help at number 6. I'm also posting the Avira AntiVir at the end of the DDS.txt post.Thank you for any help you can provide!DDS (Ver_10-03-17.01) - NTFSx86 Run by Bri at 17:55:22.34 on Mon 05/24/2... Read more

Answer:Data protection/11 viruses found by Avira

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

19 more replies
Relevance 63.96%

I noticed a folder on my data drive. It has a long name very similar to dcf70f3fd27777bcc888688446xxx.

There are about 25 sub folders each with a EULA.rtf (in different languages, LocalizedData.xml and SetUpResources.dll

One of the images appears to be a Microsoft .netFramework logo. There is a Setup.exe file and others as well.

I have been having some other (Win7x64 Home Premium) computer issues that I have not had time to get to.

I renamed the folder by adding "xxx" to the folder name. So far the computer (desktop) is still working - lol.

I wonder....

(1) how to verify that is really IS a MS folder?
(2) did changing the folder name disable the contents?
(3) if I just delete the whole thing, will Windows regenerate a new on if needed?
(4) would this file being located on a data drive slow down or negatively affect my computer?

TIA

DrCarl
 

Answer:Help Understanding Folder Found On Data Drive

Leftover from a Windows Update ?
 

16 more replies
Relevance 63.96%

I have a report with this code in it and it runs fine:

Option Compare Database
Dim GrpArrayPage(), GrpArrayPages()
Dim GrpNameCurrent As Variant, GrpNamePrevious As Variant
Dim GrpPage As Integer, GrpPages As Integer

Private Sub PageFooterSection_Format(Cancel As Integer, FormatCount As Integer)
'************ Code Start *************
' This code was originally written by James H Brooks.
' It is not to be altered or distributed,
' except as part of an application.
' You are free to use it in any application,
' provided the copyright notice is left unchanged.
'
' Code Courtesy of
' James H Brooks
'
Dim i As Integer
If Me.Pages = 0 Then
ReDim Preserve GrpArrayPage(Me.Page + 1)
ReDim Preserve GrpArrayPages(Me.Page + 1)
GrpNameCurrent = Me![Employee Name]
If GrpNameCurrent = GrpNamePrevious Then
GrpArrayPage(Me.Page) = GrpArrayPage(Me.Page - 1) + 1
GrpPages = GrpArrayPage(Me.Page)
For i = Me.Page - ((GrpPages) - 1) To Me.Page
GrpArrayPages(i) = GrpPages
Next i
Else
GrpPage = 1
GrpArrayPage(Me.Page) = GrpPage
GrpArrayPages(Me.Page) = GrpPage
End If
Else
If GrpArrayPages(Me.Page) > 1 Then
If GrpArrayPage(Me.Page) < GrpArrayPages(Me.Page) Then
Me.pagetotal.Visible = True
Else
Me.pagetotal.Visible = False
Me.pagetotal2.Visible = True
End If
Else
Me.pagetotal.Visible = False
Me.pagetotal2.Visible = True
End If
Me!ctlGrpPages = "Page " & GrpArrayPage(Me.Page) & " of " & GrpArrayPages(Me.Page)
E... Read more

Answer:Solved: method or data member not found

Are you sure that pagetotal is not an unbound field on the report footer?
 

2 more replies
Relevance 63.96%

Hello,
This is my first visit to your website and I have searched for similar problems and didn't find any, so here it goes (sorry, it's not a short story):
 
Experience:
I try to keep our computers running fine by manual updates of all regularly used programs and security, usually on weekends. I would rate my level as perhaps a novice with many hour of hands on maintenance. We are on computers way more than the average user, perhaps 12 hours a day minimum, 7 days a week with almost no virus, malware, etc. issue.
 
Note: no joke, this was my wife causing the problem, I was at work
 
 
System info:
Windows 7 Professional Service Pack 1
64 bit
AMD-FX™-4100 Quad-Core
3.6 GHz  12.0GB 
Microsoft Security Essentials
CCleaner used to clean temp files, etc.daily
Network of four similar, not identical computers (all Win 7, 64 bit)
 
Issue:
2014-01-08 popup on internet wouldn't close unless a number was called, (two choices - see below)
internet browser was locked up, so the number was called and remote log in by Teamviewer allowed.
Person on line was looking around and said there were untrusted websites my browser was being redirected to, Microsoft Identity Services and Network Access Protection was stopped.
 
He could fix it, never mentioned a fee, said it would take about two hours, then said $99.99 fee
 
Company info of on-line help called:
1-800-832-1740 Expert Technical Support
1-800-273-3093 Star Technical Support
 
He had c... Read more

Answer:Many programs won't start and all personal data not found

January to May... pretty lengthy in response time. I'm usually on here to post a problem though so at least someone is here lol.
 
Anyway, it sounds like you could still have a virus. Virus scanners and antivirus programs are often and continually evolving to catch every virus out there. Here's the problem; viruses and the people who deploy those viruses are evolving as well. You can't evolve an antivirus program to defend against viruses that you don't know exist. Think of it as medicine. If you get sick and the doctors don't know how you got that way or what you are infected with, they can't confidently say "here's a prescription medication. Take as directed on the bottle and if it doesn't get better, come back." Same with viruses. If a virus gets through and there's no "cure" or no way of detecting it, it's going to pass through undetected, even by the best scanners.
 
I've seen viruses like this a few times. I've tried running cleaners and doing system restores. Many of them I was able to clean up but a few required a system wipe and reinstall of the OS. Unfortunately, that sounds like that may be your case, is a system wipe and reinstalling the OS.
 
But from January to May... I'm hoping you've found a better solution by now but if not, here is my suggestion. Hope you found a better solution though, mate!

2 more replies
Relevance 63.96%

I'm not sure when my computer was infected, but on Wednesday morning I logged into my email and saw that my eBay selling account had been hacked, and the hacker(s) made 55 transactions through my PayPal account (draining my existing PayPal funds, then my bank account, then my credit card...the latter two were attached to my PayPal account and those transactions were still pending). I made all the necessary phone calls, then changed my eBay and PayPal emails using a friend's computer (which had just been reformatted the day before and hadn't been online before I used it that day). I neglected to change the password for the email I had associated with my eBay account, and the next day, my eBay account had been hacked again, but eBay had unlinked my PayPal account due to the suspicious activity the day before so no transactions went through. I then changed all passwords again, including my email password. That seemed to do the trick. I got home today and got back on my computer, then ran a scan on avast, which found Win32-Spyware (I clicked "Move to Chest"). I also ran Malwarebytes and it found Codec-C.exe (Affiliate.Downloader), I quarantined this. And I'm not sure what else may be lurking on my computer, so I would be very grateful for any help.
DDS.txt log:
DDS (Ver_2012-11-07.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_37
Run by Dad at 21:47:29 on 2012-11-10
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033... Read more

Answer:eBay, PayPal accts hacked - avast found Win32-Spyware, Malwarebytes found Codec-C.exe (Affiliate.Downloader)

Hi nachtkitten and welcome to BC. Can you please post the resulting log of MBAM and Avast if they are still available.Download TDSSKiller.zip from Kaspersky and save it to your Desktop.Extract the zip file to its own folder.Double click TDSSKiller.exe to run the program (Run as Administrator for Vista/Windows 7).Click Start scan to start scanning.If infection is detected, the default setting for "action" is Cure (Please click on it and change it to skip).Click on Report to generate a log. Please post that log when you reply.

6 more replies
Relevance 63.96%

Hello! Im afraid that lately im getting AVG finding threats such as 'Trojan horse Dropper generic, Virus found exoit' and im not always able to use AVG to erase them/fix them as one earlier today said 'object is inaccessible in c:/documents and settings/network services'.Also i seem to be getting strange pages opening up on a different tab when i already have a page up. When i update and run AVG, SuperAntiSpyware and Malwarebytes i am always finding threats.Please can anyone offer any advice on what else i can do?

Answer:Lots of 'threats' found+viruses found on scans!

Try running them in Safe Mode.

10 more replies
Relevance 63.96%

HiI got a trojan horse dropper generic ezp. Task manager was disabbled, start->run and start->shutdown are invisible, and my computer->manage is disabled.What should I do.Thanks for helpSTARLORDLogfile of HijackThis v1.99.1Scan saved at 0:09:05, on 17.5.2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\S24EvMon.exeC:\Program Files\Sygate\SPF\smc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\ZCfgSvc.exeC:\Program Files\IBM\Bluetooth Software\bin\btwdins.exeC:\WINDOWS\system32\crypserv.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Eset\nod32krn.exeC:\WINDOWS\System32\RegSrvc.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\Program Files\Alcohol Soft\... Read more

Answer:Avg Found: Avg Found: Tojan Horse Dropper Generic

Sorry for the delay. If you are still having problems please post a brand new HijackThis log as a reply to this topic. Before posting the log, please make sure you follow all the steps found in this topic:Preparation Guide For Use Before Posting A Hijackthis Log

1 more replies
Relevance 63.96%

Hi

I am trying to reinstall the original harddisk that my Toshiba Portege M400 146 came with, but the recovery program will not accept that there is a working harddisk in the computer.

I know the harddisk is working as i have used in other computers for experimenting with Windows 7 etc, and in the Toshiba computer windows 7 (still on the harddisk) will also start to boot, but them crash.

The error message is that there is no working harddisk and the following text can be found in 2 command windows both with the title:

X:\i386\systen32\cmd.exe

*Error screen 1:*

Checking MBR partition type
NOT FOUND: ID of partition 4 is 0x00 not 0x88
Checking for TMBR
No TMBR found!
Done.

Microsoft DiskPart version 5.2.3790.1830
Copyright (C) 1999-2001 Microsoft Corporation.
On computer: MININT-JUC

Disk 0 is now the selected disk.

The disk management services could not complete the operation.
Specified drive does not exist.
ERROR: Reco-unpacking of E:\04386R01.TPA failed!
Press any key to continue . . .

Error screen 2:

Handle RAID configuration ...
# Mode GET1 F
# Flags 0x00 0x00 0x00
# Flag1 is 0x00 not 'F'!
Get current RAID state ...
RAID Level = RAID Ready
Status :Optimal
Get number of drives ...
X:\i386\system32&gt;_

I have also tried with other harddisks and the same problem persists.

Have anybody seen the same problem and found a solution?

Berst regards

Answer:Portege M400 - No HDD found during Recovery "no TMBR found"

Hi

Possibly the partitions which appears on the HDD are corrupt.
I could not install the OS on my notebook because the partitions were muddled up? I don?t know why but I couldn?t format the HDD using the recovery disk.

Finally I took the Windows XP disk and formatted the whole HDD and removed all partitions from the HDD. Then I have installed the Windows XP using Microsoft disk.
After that I took the recovery disk and installed the OS again using the Toshiba disk.
Then it was possible to reinstall the OS.

Note; The M400 seems to supports the RAID and therefore you will need to install the RAID driver firstly!

1 more replies
Relevance 63.96%

Hi.

On a quick scan of Malwarebytes, it found item called trojan.downloader.

It was on C:\windows\system32\java.exe

I clicked to remove, rebooted as directed, reran scan and all clear.

Then I ran Superantisypware:

It found a malware trace in registry items:

hklm\software\microsoft\windowsnt\currentversion\winlogon#taskman

This was also quarantined and then I restarted as directed and rescanned and all was clear.

I then ran an anti virus and that was clear.

I have windowsvista.

I am concerned that there still might be a problem on the system after seeing these two that were found.

Looking forward to your help.

Thanks!

More replies
Relevance 63.96%

as usual I turned off my laptop and after a while a turned on again to use my laptop but it couldn't reach operating system and showed error :
" OPERATING SYSTEM NOT FOUND" !

I tried all instructions to solve the problem and finally run by windows start up CD to
re-install new windows. this time I faced error:
" No drivers were found. click load driver to provide a mass storage driver for installation"

I confused. I really don't what should I do anymore

Answer:operating system not found and no drivers were found eror

Work through these steps for Troubleshooting Windows 7 Failure to Boot

Report back what happens as you go as there may be more steps.

Where did you get Win7 installer? Did you burn it yourself?

Do you have an EFI BIOS? Enter BIOS setup to see if HD is detected, and if there is an EFI Boot disk in BIOS Boot order listings.

1 more replies
Relevance 63.14%

I have a combobox that executes perfectly using the value selected from combobox. It searches the data for the value and runs through the routine. The problem I have is when it does not find the data it freezes on me and gives me an out of memory error. How can i incorporate code to give me a msg box that data is not found and exit sub?Sub DropDown311_Change()
ActiveSheet.Unprotect
Dim mysht As Worksheet
Dim myDropDown As Shape
Dim myValSA As String

Set mysht = ThisWorkbook.Worksheets("Pipeline")
Set myDropDown = mysht.Shapes("Drop Down 311")
myValSA = myDropDown.ControlFormat.List(myDropDown.ControlFormat.Value)

If myValSA = "Remove Filters" Then Call Pipeline_Remove_All_Filters
If myValSA = "Net Regs" Then Call Pipeline_ShowNetRegs
If myValSA = "CIAPPR" Then Call PipelineShowCIAPPRLoans
If myValSA = "APPR" Then Call PipelineShowAPPROVEDLoans
'End If
Worksheets("Pipeline").Shapes("Drop Down 311").ControlFormat.Value = 1
End Sub message edited by mecerrato

Answer:VBA code to exit sub if combobox selection not found in data

re: Single Stepping - "Just tried that and discovered where it freezes"It's amazing what some simple debugging techniques will do for you, isn't it? ;-)Have you reviewed the following tutorial? Single Stepping, Watches, Break Points and Run To Cursor are all extremely powerful debugging techniques. As you have seen, just running the code full speed and then trying to find the bugs based on the results, or worse yet on a crash, can be a very frustrating practice.http://www.computing.net/howtos/sho...Before I address your specific issue, please keep in mind that it is next to impossible for any of us to duplicate your workbook structure and actually run your code. The best we can do is try to troubleshoot your issues by reviewing the "text" of your code and hopefully understand what it is supposed to do. At that point, it's up to you to test our suggestions or tell us what we missed so we can try again.That said...It appears to me that this instruction sets a Range variable (rng) to the range of cells displayed once the Filter as been applied.
' Only send the visible cells in the selection.
Set rng = ActiveSheet.Range("a6", ActiveSheet.Range("H6").End(xlDown))Have you looked at the address of rng? e.g. rng.address?If I understand your problem correctly, you are ending up with an "empty" range if Criteria1 is not found. Therefore rng.address probably reads something like$A$6:$H$1048576. If that is the case, then you could check the address and not call the function if the Fil... Read more

9 more replies
Relevance 63.14%

On one of my computers, all of a sudden one day after shutting it off, the pc says that it cannot find an OS. Nothing I did would make it boot up again. So I put it in another computer to see if it would boot up but it didn't. I connected it to an external enclosure to see if I could see the files and windows installed the drivers but I could not actually see the drive. I also put the harddrive internally and again drivers installed but could not see it in my computer nor in disk management.

Is there something I can do that I have not tired yet to recover those files? What could have caused it to just do this all of a sudden?

Answer:computer says no opertating system found, how to recover data if possible

try a linux livecd. Windows might have lost its marbles, but Linux sometimes can figure it out.

8 more replies
Relevance 63.14%

Hello,

I am using windows 7 with excel 2007. I am a Truck Driver Recruiter and I have to figure out each drivers experience level. I have created a spread sheet to help me calculate the number of months that a driver has at each job. =DATEDIF(B17,C17,"m")*COUNTIF(D17,"y")*COUNTIF(E17,"y") is the formula that I came up with to count the months at the job, is the job a DOT driving job and is the job verified. It is working great. What I am trying to do now is only count the months of employment that fall within the last 3 years of the current month. For example:

Joe driver has worked for XYZ Trucking from 9/06 to 1/10 (we only use month and year not exact dates) this gives him 40 months of experience. However I also need to know how much of that time falls within the last 3 years of the current month. So I don't want to count 9/06, 10/06, 11/06, 12/06 of his employment time. I am sure there is a way to do this but I am just not good enought with formulas to figure it out. Any ideas would be greatly appreciated. I attached a sample page to this post.

Thanks
 

Answer:Solved: Using data found only from today and 3 years back

16 more replies
Relevance 63.14%

Hi
A few days back I ran a cell-phone related applications and it installed 2-3 new drivers. I did not have to restart my system but windows created a restore point. The applications worked fine. Late that evening, I restarted my laptop and while it was shutting down, I happened to remove a USB wire that was connected to my laptop (USB wire to download pics from a digital camera). The windows could not start from that point onwards. When I power ON its gives me the screen with 'COMPAQ' printed on it for a minute or two and then a blank screen with error 'Operating system not found'. I cannot hear any noise (fan, spinning, cycle) for the HD is initiated. Also when I went into BOIS setup (PhoneixBIOS setup) I have only 3 tabs - Main, Boot and Exit. Under MAIN, I do not see any hard drive listed (primary, master, slave etc). Under BOOT, I have removable media on the top and HARD Drive on the bottom. I did a 'Load Default', verified that all drives were empty and removed all external connections (external Hard drive and external DVD writer) but still it gives me the same error on start up.
This is a Compaq Presario 2710US Notebook.
Processor: 1.13 GHz Intel Pentium III
Number of Processors: 1
RAM: 512 MB
RAM Type: SDRAM
Hard Drive: 20 GB
CD-RW: 8x (write)
DVD-ROM: 8x
Operating System: Windows XP Home Edition
Bundled Software: Microsoft Internet Explorer 6.0, America Online, Microsoft Encarta Online Deluxe Encyclopedia - 1 year su... Read more

Answer:Operating System not found - dead HD ? retrive data !

premb said:



I need to get some data restored from this HD (or the entire HD working preferably)Click to expand...


1) The first thing you need to find out is whether the HD is gone to heaven. If you have an XP CD put it in the drive and boot from it, you will get an option to repair a damaged install, if windows is found and its repairable your done.

2) If however windows isnt found and the HD has indeed died then dont you wish you had backed up your important data, sorry to sound hard but it should be second nature to any PC user to remember the golden rule.

3) If you dont have an XP disk then download a boot disk from here, use this disk to see if your HD is showing, if it does then use the disk to get your files of (assuming they will fit on a floppy). If however with the floppy the HD doesnt show see point number 2.

4) If the files are to big and the disk is recoverable then get hold of a 2.5 to 3.5 HD adaptor from any PC spares shop, slave the drive to a PC and pull the files off it, you will need to change ownership of the HD on the PC to access it, oh and it must be running XP or 2K.

Regards
 

3 more replies
Relevance 63.14%

Hi
A few days back I ran a cell-phone related applications and it installed 2-3 new drivers. I did not have to restart my system but windows created a restore point. The applications worked fine. Late that evening, I restarted my laptop and while it was shutting down, I happened to remove a USB wire that was connected to my laptop (USB wire to download pics from a digital camera). The windows could not start from that point onwards. When I power ON its gives me the screen with 'COMPAQ' printed on it for a minute or two and then a blank screen with error 'Operating system not found'. I cannot hear any noise (fan, spinning, cycle) for the HD is initiated. Also when I went into BOIS setup (PhoneixBIOS setup) I have only 3 tabs - Main, Boot and Exit. Under MAIN, I do not see any hard drive listed (primary, master, slave etc). Under BOOT, I have removable media on the top and HARD Drive on the bottom. I did a 'Load Default', verified that all drives were empty and removed all external connections (external Hard drive and external DVD writer) but still it gives me the same error on start up.
This is a Compaq Presario 2710US Notebook.
Processor: 1.13 GHz Intel Pentium III
Number of Processors: 1
RAM: 512 MB
RAM Type: SDRAM
Hard Drive: 20 GB
CD-RW: 8x (write)
DVD-ROM: 8x
Operating System: Windows XP Home Edition
Bundled Software: Microsoft Internet Explorer 6.0, America Online, Microsoft Encarta Online Deluxe Encyclopedia - 1 year subscription,... Read more

Answer:Operating System not found - dead HD ? retrive data !

8 more replies
Relevance 63.14%

I am maintaining an Access 2003 which was developed by someone else. I would like to create an .MDE file for it but it will not do it. One solution I was given to this problem was to compile the VB code but when I do I get the "Method or data member not found" error for the code for the code in blue

Private Sub Combo90_AfterUpdate()
' Find the record that matches the control.
Dim rs As Object

Set rs = Me.Recordset.Clone
rs.FindFirst "[ID] = " & Str(Nz(Me![Combo90], 0))
If Not rs.EOF Then Me.Bookmark = rs.Bookmark

End Sub

The control Combo90 is still on the form and the code works but why the compile error?
Any help would be deeply appreciated.
Tom
 

More replies
Relevance 62.73%

What is the best way to export data from Approach database
and import it into MS Access? Or, instead of exporting, can an Approach
file be saved as a particular type of file that can be opened directly in Access?
 

More replies
Relevance 62.73%

Since upgrading my MSI motherboard from the automatic upgrade MSI notice I get messages of new hardware by my installed XP Home. However, Windows fails to find drivers for it.
This also happens to FlashSYS, similar story.
A web search shows others in the same situation.

Help! anyone? Thanks
 

More replies
Relevance 62.73%

Hello all,

I've had this issue for quite some time now, it never really bothered me that much, but it is annoying, so I thought I'd give it a shot to see if anyone could help me out.

I've got 2 external USB drives, one on 2 Gb and one on 4 Gb.
the 2Gb drive is no issues at all. Works flawlessly.
The one on 4GB though is never found when I boot the computer. The drive does however have a powerswitch on it, so when I turn it off and on again, or if I replug the USB cable, the drive is found and works just as flawless as the first one.
I've checked disc management, but it does not show up there before I restart the drive.
A clean install of the entire computer didn't help either (not for the sake of this issue though, but it was a good check anyway).

The drive in question is of the brand Intenso.

Answer:USB disc not found at boot but is found when restarted

Hello and welcome arke could you be a little more specific with the system specs please - an Asus board but what model for example.
It is of interest because it could just be the driver for the USB ports that need updating again for an example.

The Intenso drive mate what model is it as it may need updating of some sort.

But for starters anyway you could run these if you haven't already.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

http://www.sevenforums.com/tutorials/433-disk-check.html < use the /f option in Option 2 ifnecessary

3 more replies
Relevance 62.73%

Scannow reported Windows Resource Protection found found corrupt files unable to fix some of them'

OS= Windows 8.1 Update 1 x64bit. I have the CBS.log and dism.log

When I ran the DISM.exe command to RestoreHealth it reported an error that it could not download source files.

sfcdetails:


Code:
2014-05-12 10:26:50, Info CSI 0000000a [SR] Verifying 100 (0x0000000000000064) components
2014-05-12 10:26:50, Info CSI 0000000b [SR] Beginning Verify and Repair transaction
2014-05-12 10:26:55, Info CSI 0000000c [SR] Verify complete
2014-05-12 10:26:55, Info CSI 0000000d [SR] Verifying 100 (0x0000000000000064) components
2014-05-12 10:26:55, Info CSI 0000000e [SR] Beginning Verify and Repair transaction
2014-05-12 10:27:00, Info CSI 0000000f [SR] Verify complete
2014-05-12 10:27:00, Info CSI 00000010 [SR] Verifying 100 (0x0000000000000064) components
2014-05-12 10:27:00, Info CSI 00000011 [SR] Beginning Verify and Repair transaction
2014-05-12 10:27:04, Info CSI 00000012 [SR] Verify complete
2014-05-12 10:27:04, Info CSI 00000013 [SR] Verifying 100 (0x0000000000000064) components
2014-05-12 10:27:04, Info CSI 00000014 [SR] Beginning Verify and Repair transaction
2014-05-12 10:27:10, Info CSI 00000015 [SR] Verify complete
2014-05-12 10:27:10, I... Read more

Answer:W R P found found corrupt files unable to fix some of them

Is this the command you ran as admin?

Dism /Online /Cleanup-Image /RestoreHealth

10 more replies
Relevance 62.73%

Ok, I never figured out how to get over this issue, could it be a 'jumper' issue causing this>? The computer will start, but you have to wait for it to load, then press F1, then 2 beeps. Its a Older Dell desktop.
 

Answer:Primary HD not found, Secondary HD not found, press F1?

After you press F1, what happens? Do you get sent to the BIOS? If so, select "load defaults" and exit.
 

5 more replies
Relevance 62.73%

I restarted my laptop and when it came back on the messages 'COMCTL32.dll not found' and 'MSVCR90.dll not found' came up when I tried to open different programmes. The messages say to reinstall the programmes to my computer. I tried looking up how to do this and I found that the easiest way to fix the problem is to just do a system restore. When I tried to do this it kept stopping and saying that the restore didn't complete because antivirus software was still installed. Even though I have uninstalled the antivirus software the message still keeps coming up. How do I just reinstall the '.dll's' without downloading them from a dodgy site?

Answer:[SOLVED] 'COMCTL32.dll not found' and 'MSVCR90.dll not found'

Hi and welcome to TSF do you have a install or recovery disc to attempt a repair

9 more replies
Relevance 62.73%

Hello there chaps the question I have is this. Whenever I try to access any website that doesn't have HTTPS: in front of it the webpage I was trying to access turns into a blank white page in which the only thing it has is this writing

NOT FOUND
Url not found: (url I was trying to access)

The things i have done to fix this issue is I have flushed my DNS cache and allowed port 80 in my firewall

Thanks for reading this and please help if you can. As a programmer it really is a blow to the time I have to code when i cant access certain sites just due to them not having HTTPS: in front of it.
 

Answer:Not Found: Url Not Found Error (only on non https websites)

Do not shutdown computer. Instead, go to start - click arrow to right and select restart. Does this solve problem?
Sent from my iPhone using Tapatalk
 

3 more replies
Relevance 62.73%

Out of nowhere in the C drive come these folders. They are named FOUND.000 on up through FOUND.025. Inside the folders are various numbers of files that are named in this way FILE0000.CHK, FILE0001.CHK, FILE0002.CHK. what are they and what should I do?
 

Answer:Solved: 26 New Folders? all named FOUND.000 thru FOUND.026

Hi, have you run chkdsk or scandisk recently or had a bad shutdown, chk files are usualy lost file fragments that are converted to .chk files. Usually .chk files are nothing to worry about and can be safely deleted.
 

2 more replies
Relevance 62.73%

Last night was using Auslogics to defrag an external WD 1.5TB BU drive... 2 hours in we had a power loss...lights and TV went out and came back on. The laptop that was running the Auslogics had a batt, but the external drive lost power in the middle of the defrag process. Turned everything off for the night.

This morning ran chkdsk on the external (always run from cmd but for some reason today ran from inside Win7 Admin) and got the reply that errors were found (duh) and that a FOUND folder was created. I am familiar with this and usually find them in the root. Only I can't find the FOUND folder anywhere! Was hoping to get an idea of what files are toast!

Anyone know where W7 might have stuck it? I have hidden files enabled by default and went a step further to enable hidden system files, but it's not on the external drive nor on C root.

Ideas? Thanks!

EDIT ADDED TWO DAYS LATER:

For anyone who might find this post later while searching for a similar problem, I thought I'd write a followup of what I did, though I have no real answers...

The FOUND folder def didn't get created or Windows slipped it into a parallel dimension. I read afterward that Auslogics defrag won't lose data in a power outage, but don't know if that refers to the machine Auslogics is installed on running an internal operation, or to Auslogics performing defrag on an external drive that loses power. (All the more reason to use the newer external drives that draw power from the USB port, as my laptop... Read more

Answer:Lost Pwr During Defrag - FOUND folder not found

Do you still need assistance with this issue?

1 more replies
Relevance 62.73%

when starting laptop get message no boot device found. after numerous attempts of restarting i can get on lap top. also when trying to use amera get error message that camera cannot be found. this all started after an update i have an envy dv6 note book serial#2CE3280G60. model#D1B28UA . any help would be appreciated . i am having no luck finding any answers to this question. ive reinstalled windows 10 and still no camera drivers located in device manager.

More replies
Relevance 62.32%

Im getting a window that pops up in the center of the screen and says SysGuard: Tracking process found Malicious code found at "0x17DA839A" address. Data interception cannot be stopped. I will hit control-alt-delete and then select end process to close the window instead of clicking "OK" on the window. I am also getting a message bubble popping up at the task bar saying "Tracking process activated. ***ADRESS: 0x17DA839A*** Cannot deactivate spyware program. Click this balloon to fix the problem."
DDS (Ver_09-03-16.01) - NTFSx86
Run by Steven Keller at 20:58:49.43 on Fri 05/01/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.2046.1412 [GMT -5:00]

AV: Norton Internet Security *On-access scanning enabled* (Outdated)
FW: Norton Internet Security *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\WLTRAY.exe
C... Read more

Answer:Sysguard: Tracking process found Data interception cannot be stopped

Hello, my name is fenzodahl512 and welcome to Bleeping Computer.. Please do the following....Please download The Comedian.exe by Rorschach112 to your desktopPlease disable all of your antivirus/firewall before doing this step. Please visit HERE if you don't know how..Double click the program to run it. It will only take around several minutes to run.It will do a series of tasks and tell you when each one is finished.You will be prompted to press any key after each stepWhen it is done it will close and exit itself automatically.You can delete The_Comedian.exe once it is finishedSTOP! if you can't complete this step.. Tell me more about it..NEXTPlease download Malwarebytes' Anti-Malware from HERE or HERENote: If you already have Malwarebytes' Anti-Malware, just run and update it.. Then do a "Perform Full Scan"Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Full Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and ... Read more

18 more replies
Relevance 62.32%

Even though they fixed an exploit last week, guess what we'll be patching, once again, this week?
Second Flash Player zero-day exploit found in Hacking Team's data | PCWorld

Answer:Second Flash Player zero-day exploit found in Hacking Team's data

Adobe has patched two zero-day vulnerabilities in Flash Player, which were released last week as part of the Hacking Team data breach.

In a brief security notice, the company confirmed Tuesday that it had patched the two critical-rated flaws, which could allow an attacker to take control of an affected computer.








Earlier on Tuesday, Firefox browser maker Mozilla said it would block the Flash plugin until the flaw was fixed.

Meanwhile, angered by the release of the flaw, Facebook chief security officer Alex Stamos called for the plugin to be put out to pasture. In a series of tweets over the weekend, he called for a date to be set to sunset the browser plugin, following a series of high-profile hacks involving Flash software.



Adobe fixes two Flash zero-day flaws found in Hacking Team cache | ZDNet

1 more replies
Relevance 62.32%

Hi,

First time posting.

I ran combofix.exe a few weeks ago before I knew of the help available via these forums. When I ran the program the following files were detected and deleted:

c:\documents and settings\<username>\Application Data\inst.exe
c:\windows\system32\Ijl11.dll

I do nightly scans using AVG Free 8.5 and Spybot Search and Destroy (both up-to-date). Nothing was detected in either scan last night.

I ran combofix.exe again tonight and the following was detected and deleted:

c:\documents and settings\<username>\Application Data\inst.exe

Now that I realized there is a lot of help available on these forums, I'm here looking for some guidance.

I do have a combofix log file that was produced after the second combofix scan and I'd be more than happy to post it here, but I will wait for further instruction first.

My main concern is why inst.exe is showing up a second time.

Thank-you for any help you can provide.

Answer:inst.exe found in c:\documents and settings\<username>\Application Data\

I also ran a Malwarebytes Anti-Malware Quick Scan after the combofix completed.

No infections were detected.

4 more replies
Relevance 62.32%

Excel 2003 - I Need To Copy the Data Identified By SUMPRODUCT To Another Sheet?Hi There.Please could someone point me in the right direction to solve a problem I'm having?In my workbook Sheet 1 contains a dynamic range from A1 to J880. (Capacity is 65536).Sheet 2 has different SUMPRODUCT formulae to count the occurrences in the range which fulfil certain criteria, sometimes with as many as 4 conditions. SUMPRODUCT returns an accurate number of occurrences but I need a function/macro/formula to take things a step further. Is there a way (without autofilter or pivot table) to automatically copy all the data in the rows identified in the range by the SUMPRODUCT formula into a separate list on Sheet 2? I know how to sort and autofilter the data manually but I'm designing the workbook to simplify and automate the process as much as possible for people who hate 'having to use' computers (strange people that they are!). Many Thanks. Gordon.

Answer:Excel 2003 - Copy Data Found By SUMPRODUCT To Another Sheet?

I don't know what you mean by "the rows identified in the range by the SUMPRODUCT formula".Please explain further.Click Here Before Posting Data or VBA Code ---> How To Post Data or Code.

6 more replies
Relevance 62.32%

Hi there -

Thanks in advance for helping.

Here's the situation:
I have TWO excel files
'FILE A' ... Has a full list of over 2,000 entries, each with a unique ID in the far-left column ('A')
'FILE B' ... Has a list of 400 entries with their respective IDs (that are found within the 2,000)
I need to compare the data found in File B with that in File A. If they appear in both files, I want a '1' to appear in the cell next to it

Here's what I need:

In Column 'B' of "FILE A", I need a formula that will do the following:
=If A2 is found in the first column in "FILE B", then show '1', if not show nothing

Does anyone have a solution? I am not certain if a VLOOKUP is the possible solution, and if so, I cannot figure out the correct formula.


Thanks again,

fisher1711
 

Answer:EXCEL Question - Compare Data across two files, and if found return with a '1'

I am not certain if a VLOOKUP is the possible solutionClick to expand...

should be and then use a IF statement - to test if the vlookup is true or not

something like
=VLOOKUP(A2,[fileB.xlsx]Sheet1!$A$2:$A$xxxxx,1,false)
where xxxxx is the end of the row range
will do the lookup

use ISERROR to test if true of false

and then an IF to add the 1

=IF(ISERROR(VLOOKUP(A2,[fileB.xlsx]Sheet1!$A$2:$A$xxxxx,1,false)),"",1)

are both files open ?

this is just on two sheets, as an example here

=IF(ISERROR(VLOOKUP(A1,Sheet2!$A$1:$A$4,1,FALSE)),"",1)

so if there is an error - ie cannot find the lookup then as its true it returns nothing "" if it is true it returns 1
 

1 more replies
Relevance 61.91%

Win32:AutoRun-ATQ [Wrm] found, it is and destroying data! It has blocked out all my virus scanners! Everytime that I attempt to remove it, it restarts my computer and blocks my avast scanner and virus chest I NEED URGENT HELP PLEASE! Aparently the virus is called something like msnmsngr.exe? Avast says it is still infected! HELP PLEASE! Before my computer crashes, windows gives me a message about a security flaw, then it crashes. I have a hijackthis log for more info:-----------------------------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:24:33 PM, on 2009/03/28Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\Program Files\Ulead Systems\Ulead Photo Express... Read more

Answer:Win32:AutoRun-ATQ [Wrm] found, it is and destroying data! It has blocked out all my virus scanners!

please can somebody help me or give me some advice?? BTW, my Spybot SD told me that Trend Micro products are infected with malicious data?

9 more replies
Relevance 61.91%

Hi there,

I don't know if these two issues are related. Sometimes my system just switches off and I find it hard to start up again. I get a blue screen of death sometimes and sometimes not. Once I get going again I get a Windows message to alert me to a corrupt file in Application Data and that I should run the CHKdsk utility. I try that when I start up but then get a message to say that the disk checking has failed - something like Checking disk 3 of 3: disk checking has failed.

Any help would be much appreciated

DDS (Version 1.0) - NTFSx86
Run by Ido at 10:24:01.37 on 2008/11/22
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1024.546 [GMT 2:00]

============== Running Processes ===============

C:\WINXP\system32\svchost -k DcomLaunch
svchost.exe
C:\WINXP\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINXP\system32\spoolsv.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINXP\System32\svchost.exe -k imgsvc
C:\WINXP\Explorer.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINXP\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Mozilla Firefox\fire... Read more

Answer:Want to remove Trojan.Downloader (found by MalwareBytes) + corrupt file in App Data

Hi and welcome to TSF.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Combofix
Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up in... Read more

4 more replies
Relevance 61.91%

OK. I've tried 3 times and wasted 3 CD-R's. I'm trying, with Nero, to burn a data CD: just a bunch of jpg's and freeware. I've read that Burn4Free (the 1.0 release, as I've heard the others contain spyware) can cause conflicts, so I uninstalled Burn4Free. I check the box for "verify written data" in Nero; But I still get an error message after trying to Add/Remove programs through Windoze. (Sorry to make this so long) I just inserted the Data Cd I tried to burn. "Windows can perform the same action each time u insert a disk or connect a device with this kind of file." Pictures. I select "take no action". Fast forward to "Windows cannot find the installation program..." I can Browse for the install program, but I don't have the slightest idea where to look. Any ideas? I'm running XP Home. Thanks!
 

Answer:(Resolved) Nero burnt data disc...installation application not found

6 more replies
Relevance 60.27%

I have had my laptop for 2 years and has been broke for nearly a year! The screen comes up with "boot device not found, install operating system". So I bought a system recovery disk, and I went through the steps. But, it comes up with "HDD NOT FOUND". I have checked the hard drive and everything inside the computer!!!! HELPPP

Answer:Boot device not found and hdd not found

Ow I put wrong product name in

1 more replies
Relevance 60.27%

Hi I'm having a problem that is causing me to pull my hair out. I hope someone can help. I'm using a Vernatim media share 1 tb network drive on my LAN to store things like my iTunes library. Well yesterday it started not allowing me to login through windows. I deleted the mapped share and tried to redo the connection and this seems to work. Only thing is when it finds the share and then the folder that I want to map it gives an error that it cannot be found. I'm looking right at the folder and drive and it still will not connect. Gives an error code 0x80070045 and tells me to check the name. The drive was lost to all windows 7 computers about the same time. I can ping it, log into it through the web interface view the media through windows media player when I click on the media share in the network window. I just cannot connect explorer to the drive to read or write to the drive. Am I missing something simple? Thanks.

Answer:Network drive found but not found?

Welcome to Seven Forums,

Is this a USB device or it has an ethernet port? Where is this plugged to, Router or a computer and being shared?

Have you given it a little rest, shut down for a couple of minutes then turn it back on?

9 more replies
Relevance 60.27%

http://epiclogon.ytmnd.com/
and I guess its a nice tip too!
 

Answer:I found this ytmnd and found it funnay

That is pretty hilarious, and yes, probably EPIC; but more fitting for Genmay.
 

7 more replies
Relevance 60.27%

Just some quick info to give.

Im fixing a laptop for a coworker and found an .exe running that didn't seem to belong. I couldn't kill the process manually, but found it to be in system32 folder. It had a very specific date and time of creation about 7 months ago. Google searches returned nothing on it...

etvrfvhl.exe

Processlibrary.com also returned nothing. I made a copy of the .exe and placed it on a flash drive and inserted the drive into a test machine. Panda antirvirus picked it up immediately.

Unfortunately Panda doesn't have a logging feature so I cannot post any more specifics. I'm wondering if anyone knows if this is a trojan with just a mutating name?

Update: Don't have the exact name, it's a trojan downloader type, 74kb large.

More replies
Relevance 60.27%

I recently uninstalled the a-squared Free Anti-Trojan program because I found that, after a complete scan in which it found 3 tracking cookies, it either wouldn't or couldn't delete them so I had to use CCleaner to do the job.Today I installed an updated version of a-squared Free - version 2.1.0.5 - in the hope that it would do better but the same thing happened. This time it found 2 instances of winlogon.exe in WINNT:a-squared Free - Version 2.1Scan settings:Objects: Memory, Traces, Cookies, C:\, D:\Scan archives: OnHeuristics: OnADS Scan: OnScan start: 11/8/2006 6:09:03 PMC:\WINNT\ServicePackFiles\i386\winlogon.exe detected: Trojan.Win32.Patched.eD:\X-WINNT2\ServicePackFiles\i386\winlogon.exe detected: Trojan.Win32.Patched.eSo far as I understand, winlogon.exe is fine if it's where it's supposed to be - in System32 - but is a Trojan if found anywhere else.But once again, after the scan finished, a-squared Free would neither delete nor quarantine these files.Not only that, but in running a Windows search for 'winlogon.exe' I discovered two more instances of it in another part of WINNT which a-squared Free had failed to spot and so I manually moved all four into quarantine and wiped them myself.Am I in the clear now?

Answer:Winlogon.exe Found Where It Shouldn't Be Found

you might want to try an online scan with EWIDO to make sure all traces are gone.

4 more replies
Relevance 60.27%

Stand Alone computer:  EMET 5.5 does not appear when using MMC under "Computer Configuration\Administrative Templates\Windows Components\???" but does appear under Regedit under "HKLM\Software\Policies\Microsoft\EMET".
I want to add software Default protection for recommended software under MMC by configuring the policy value for "Computer Configuration\Administrative Templates\Windows Components\EMET "Default Protections
for Recommended Software" to "enabled".  But, as stated above, "EMET" doesn't appear.
Also, where does one find the EMET "administrative template files"?

More replies
Relevance 60.27%

Hi all

Still having real problems with a Time Notebook. Spec quoted below.

If I boot from cold, hard disk is not found and defaults to a screen asking me to choose boot device. I Choose HD and enter, it just keeps showing me the choice screen again. If I reboot and enter bios, primary master is shown as disabled. If I change boot order to 1=HD, 2=HD, 3=HD and re-boot, it finds the HD and loads XP as it should.

Now, if I choose re-start and not turn off, it loads perfectly everytime. Does anyone have any ideas cause I,m outta them.

Notebook spec is:

Time Notebook 8375
Don't know M/board
Bios is "Insyde Software SCU" never heard of this before?? Very basic with only limited commands. No auto detect primary drive.

When it wont load XP, In "Devices" it is showing IDE Primary = Disabled with no obvious way of enabling it
I have just reset boot order to HD as 1st, re-booted and it recognised the FujitsuMHR2030AT D straightaway and loaded XP.

Please can anyone offer any more advice.
Regards
Ian
 

Answer:Hard Drive Found Then Not Found??

You might need a new BIOS battery. An easy job on a desktop, but usually not on a laptop.
 

1 more replies
Relevance 60.27%

Greetings!

I've recently hit a rather major issue with my computer. I was attempting to install Internet Explorer 8 on my XP SP3 machine (as somehow I was still with IE7...) but it stopped responding when it tried installing .NET 3.5 framework (or similar) and so I was forced to end it's process.
After I finished installing a game on Steam, it started to update and part of the initial update was for .NET framework (version not specified) and again it stopped responding, so I had to end it's process.

I then restarted my computer and got the message:
(With reference to explorer.exe)
"This application has failed to start because iertutil.dll was not found. Re-installing the application may fix this problem."

The usual symptoms appeared (no icons and an annoying message whenever running applications via Task Manager) and after a quick Google search was done I started losing faith in that I could fix this alone.

I, rather foolishly, followed the advice of somebody who recommended downloading iertutil.dll from the internet and manually placing it inside C:\Windows\system32. I then rebooted.

I now receive a different error message in all of the same places with similar symptoms. The new message is:
"The ordinal 173 could not be located in the dynamic link library iertutil.dll."

I suspect that all of the ordinals in the .dll that I downloaded are inoperable.

Now I'm at a loss for what to do next!
I am unable to run System Restore via Ta... Read more

Answer:'iertutil.dll' could not be found, now 'Ordinal 173 cannot be found'

13 more replies
Relevance 60.27%

Weekly run of Superantispyware found Gen-ZBot (60), which I duly Quarantined and ran SAS again. Found 1. Quarantined and ran SAS again expecting it to be free. No way 38 Gen-ZBots.
Googled it - Suggestions that it might be a False Positive.
What should one do?

Answer:Gen-ZBot found by Superantispyware but found again & again

Have a read here.
SAS false positives
Just to be sure I would also run Malawabytes

7 more replies
Relevance 59.45%

Hello, I've run into a problem with my Windows 7 install. For context, I originally had Windows XP dual booting with Windows 7 because I wasn't sure if I wanted to make the upgrade at the time. Windows XP was on my old 300 GB HDD, while I had Windows 7 on my 1.5 TB HDD (with 83GB allocated into my Windows 7 partition while the rest is used for storage).

Yesterday my 300GB HDD died (R.I.P.), and I realize that along with it, I must have still been using that hard drive for my boot loader. With the drive dead, I can no longer boot into my Windows 7 partition, even though bootrec /scanos reads that it's still there.

My issue is that /fixboot and /rebuildbcd both give me an "element not found" error when attempting them. My Windows installation doesn't appear in the list of installations to repair on my recovery DVDs. I've set the partition as active via Diskpart and Partition Wizard, but it still refuses to boot. It used to be a logical partition, but I set it to primary with Partition Wizard, so it should be fine.

I have executed the automatic startup repair option 6 times, and my installation still isn't listed under my repair DVD. The repair informs me that my Partition Table is corrupted, and that Windows should work after a restart, or repair will try again next restart. However, Windows is not repaired and automatic repair still doesn't fix anything. It's rather frustrating, because I know for a fact my files are all there and unharmed, but there's simply no w... Read more

Answer:Bootmgr not found, Bootrec /fixboot displays "Element not found"

Look at option 2 and see if this will help. Windows Boot Manager - Delete a Listed Operating System
Also, to recover your files. Copy & Paste - in Windows Recovery Console
But, it sems that what you have done should work.

9 more replies
Relevance 58.63%

Hi

My windows 8 machine crashed. I was able to pull out hardrive and look at all the data. I can find everything but my thunderbird e-mail contacts and e-mail folders.

Can anyone help to find them? My hard drive has the following folders:

Program files
Program files (x86)
Users
windows
Perf logs
Intel
esupport
Asus vibe data

i've looked in all the folders for application data, but can't find anything.

Thank you

Answer:Looking for Thunderbird app data from windows 8 crashed la

You may have to change your folder options to "view hidden files and folders" (not sure because it is now an external drive; yes?). Anyway, see image for path to information. Good luck. (Hope this helps you):

Attachment 24644

3 more replies
Relevance 58.63%

Only till last night this happened. I was going through my files on my data cd's and making file lists using Winamp, i've been done this before till i lost the file and now doing it again, until windows exploror crashed. Now everytime i try to access a disk it happens, any data disk, it aint the disk. A message appears "an error has occured" bla bla so windows exploror crashes. Sometimes even the whole desktop freezes too. Weird.

Plus i have scanned for registry errors and spyware. So non of them.

The files DO play in Windows media player also.

Thanks in advance.

More replies
Relevance 58.63%

Hello,

Yesterday I got the blue screen of death on my Gateway laptop. I tried every option such as booting to safe mode, last good configuration...etc to get windows to boot but no luck...once I get the windows xp logo it changes to blue death screen.

I purchased a laptop hard drive enclosure and pluged the laptop hard drive into it. Next I attached the hard drive enclosure via USB to my desktop but good not read the data on the hard drive. The laptop has a Recovery Partition and Operating System Partition. I am able to both partitions as drive letter "f" and "g" for example, with drive "f" being the Recovery partition and drive "g" the operating system. When I click on the drive "g" the system locks up and I have to unplug the hard drive enclosure and start over again with no luck.

At this time I only interested in recovering the data on the hard drive. Is there any way that I can get the data off the hard drive? Can I use norton ghost to clone the hard drive and see if I can get data from it or is there any application that will allow me to pull data from the hard drive?

Thanks for your assistance...
b
 

Answer:Windows XP crashed -Recover Data

Can you right click on G and get to the Propeties dialog? If so, try running the Error-checking tool (but do NOT tell it to fix errors).
 

2 more replies
Relevance 58.22%

PLEASE HELP!!

I can no longer burn cd's in iTunes since downloading 8.0.

iTunes told me to delete all other burning software (Nero) from my computer and reinstall iTunes, they said if it doesn't work after that its a problem with windows xp.

I read an earlier thread and deleted the file SPTD which changed the error msg from disc burner or software not found to dics recording not found.

Please help, im not very good with the technical stuff and I don't want to totally ruin anything.
 

Answer:Solved: Disc burner or software not found/disc recording not found

6 more replies
Relevance 58.22%

On Tuesday, I ran MBAM and it identified 4 trojans/malware which I believe were these:
 

 

c:\users\<username>\videos\gbpxp.exe (Trojan.Banker)
c:\users\<username>\videos\mob127.bin (Malware.Trace)
c:\users\<username>\music\dos.exe (Trojan.Agent)
c:\users\<username>\pictures\cool profile pics\cool profile pics.exe (Trojan.Agent)

 
The reason I say believe is because I never removed/quarantined them so the scan never finished and no log was written.  I do know that one of them was definitely "cool profile pics.exe" and another was "dos.exe" , and I am 90% sure the other 2 filenames match.  I found this list in the first search result when googling "cool profile pics.exe"
 
The reason I never completed the scan/removal was because just last week I repointed "My Videos", "My Music" and "My Pictures" junction points to my D: drive (to get them off my SSD), and I thought it was weird that the suspected files were in the old directories in the C: drive.  Then when i tried navigating to the directories listed, Windows gave an "Access Denied" error. Doing some searching lead me to a post mentioning disabling the Windows Media Player Network Sharing Service.  When I tried to stop the service it hung so I disabled it and rebooted my PC (thus closing MBAM).  After rebooting I was able to access the directories but they were all empty.
 
So, I then ran MBAM, Security Essentials and SUPERAntiSpyware scans an... Read more

Answer:MBAM found trojan, rebooted PC without removal, and trojan no longer found

Not sure if this helps at this point but these are the results of running ComboFix yesterday.
 
ComboFix.txt:
 
 
ComboFix 13-03-20.02 - Nick 03/20/2013  15:39:10.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.6046.3648 [GMT -4:00]
Running from: d:\users\Nick\Desktop\test123.exe
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
c:\programdata\Roaming
.
.
(((((((((((((((((((((((((   Files Created from 2013-02-20 to 2013-03-20  )))))))))))))))))))))))))))))))
.
.
2013-03-20 19:41 . 2013-03-20 19:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-20 11:07 . 2013-03-15 06:28 9311288 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{21DAC774-DD7A-4FB6-8FE9-AF71230C0333}\mpengine.dll
2013-03-20 02:36 . 2013-03-15 06:28 9311288 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-03-20 01:56 . 2013-03-20 01:56 -------- d-----w- c:\users\Nick\AppData\Roaming\SUPERAntiSpyware.com
2013-03-20 01:56 . 2013-03-20 01:56 -------- d-----w- c:\program files\SUPERAntiSpyware
2013-03-20 01:56 . 2013-03... Read more

9 more replies
Relevance 58.22%

Custom build for a friend.
OS: Windows 10 Pro, 64-bit
MB: MSI Z170-A Pro
Graphics Card: GeForce GTX 680
CPU: Intel i5 6600K @ 3.50GHz
RAM: 8g

Installed OS through bootable USB, as the build has no CD drive.

On completion of build I had some driver issues which were causing occasional BSoD - however on reading the logs and searching the internet, I finally decided to update to Mobo to the latest driver.
This solved all the issues, and the PC is now running like a dream.

However, on doing a routine scan of sfc /scannow it found corrupt files, but weren't able to fix them.
So I tried "Dism /Online /Cleanup-Image /RestoreHealth", this resulted in:
Error: 0x800f081f
The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying a source location, see Configure a Windows Repair Source.

So I downloaded the Media Creation Tool and made an ISO, mounted it as a virtual drive and did "Dism /Online /Cleanup-Image /RestoreHealth /Source:wim:G:\sources\install.wim:1 /limitaccess"

Same error code, same description - this is because the ISO from the MCT has the file install.esd instead of install.wim
Looking around, I was unable to find the TechBench download which supposedly had the correct files, all the links I found lead to dead ends.
Example: https://www.microsoft.com/en-us/soft...load/techbench
Leads to: https://www... Read more

Answer:DISM Source files could not be found, sfc /scannow found corrupt files

You can use an ESD file, and the corresponding DISM command is

Dism /Online /Cleanup-Image /RestoreHealth /Source:esd:H:\sources\install.esd:1 /limitaccess

The ISO file and the Windows on your system must match. You can determine the ISO version using the following command:

dism /Get-WimInfo /WimFile:H:\sources\install.esd /index:1

where H is the mounted drive for the ISO.

See also: https://www.tenforums.com/tutorials/...html#option1s7

10 more replies
Relevance 58.22%

Yesterday I ran MBAM and it identified 4 trojans/malware which I believe were these:
 
c:\users\<username>\videos\gbpxp.exe (Trojan.Banker)
c:\users\<username>\videos\mob127.bin (Malware.Trace)
c:\users\<username>\music\dos.exe (Trojan.Agent)
c:\users\<username>\pictures\cool profile pics\cool profile pics.exe (Trojan.Agent)

 

 
The reason I say believe is because I never removed/quarantined them so the scan never finished and no log was written.  I do know that one of them was definitely "cool profile pics.exe" and another was "dos.exe" , and I am 90% sure the other 2 filenames match.  I found this list in the first search result when googling "cool profile pics.exe"
 
The reason I never completed the scan/removal was because just last week I repointed "My Videos", "My Music" and "My Pictures" to my D: drive (to get them off my SSD), and I thought it was weird that the suspected files were in the old directories in the C: drive.  Then when i tried navigating to the directories listed, Windows gave an "Access Denied" error. Doing some searching lead me to a post mentioning disabling the Windows Media Player Network Sharing Service.  When I tried to stop the service it hung so I disabled it and rebooted my PC (thus closing MBAM).  After rebooting I was able to access the directories but they were all empty.
 
So, I then ran MBAM, Security Essentials and SUPERAntiSpyware scans and they all came b... Read more

Answer:MBAM found trojan, rebooted PC without removal, and trojan no longer found

Hello,
I will be helping you with your problems. Please be patient while I assist you.
Some points for you to keep in mind while I am helping you to make things go easier and faster for both of us
Please do NOT run, install or uninstall any programs,  unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.

Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.

Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.

Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.

NOTE: At the top of your post, click on the Watch Topic Button, select Immediate... Read more

7 more replies
Relevance 58.22%

Hello - I have a laptop that crashed over the weekend. I need to do a restore on the computer but before I do I need to get the documents and pictures off of the drive. I've taken the drive out of the laptop and plugged it into my Windows 7 desktop using an external USB bay. I hear the computer detect the drive but it will never show up as a drive. If I look in Computer Management it shows up in there. Can anyone tell me the best way to get the data off please? Thank you

Answer:Windows 8 computer crashed - Trying to get user data off o

The quickest and easiest way I can tell you that would work, would be to use Hiren's Boot CD, the link is below. You can boot to "Mini-XP" and it will give you a full Explorer that you can use to move files off the drive to a safe place, just connect a USB drive to the system and you can copy all of your important Data to the external drive.

You probably could also use WinPE or WinRE, I am not sure if those have a working File Explorer.

The only other thing you could do would be to take the drive out and stick it into another system where you can copy the files off.

There may also be a version of Linux that can mount NTFS volumes so you can move files that way, if someone has a link to an easy Linux that can be used like that please post it.

3 more replies
Relevance 57.4%

I have first been getting these problems when I downloaded Comodo IS Pro. Apparently when I approached them for help,the technician did not reply to me after telling me to install.

Thus I did a system restore and the computer could load in normal mode(however the screen,etc loaded slow like hell.)

Yesterday, I downloaded comodo firewall and something familiar appeared

From Problem Reports and solution, these are the service that crashed:

4X svchost.exe
1X lsm.exe
1X sandboxie.exe
1X wininit.exe

But guard32.dll from comodo is the module causing it according to Problem Reports and Solution, but anyone knows why and how to solve it?

Answer:Svchost crashed, windows start up crashed, local session manager crashed

Have you tried uninstalling Commodo to see if it is causing the problem?

3 more replies
Relevance 56.99%

Hi,This is my first post on this forum.  I'm assuming this is a software issue and not hardware.  As per the forums guidelines I'm providing the following information:HP Pavillion p6210y, AMD Athlon ll 620 quad core, 6g memory, 640 g HD, Windows 7 Home premium 64 bit, AVG anti virus, Advanced system care, Malwarebytes, Spybot search and destroyI hope this provides enough information to help with my problem.  This is my issueI attempted to use a software program the other day. The software creates charts that I would use for my business. I would enter my information into the software, based on what type of chart I would like to create. Then I would click on "create chart" when I do this I receive an error message: [Microsoft][ODBC Driver Manager] Data source name not found & no default driver specified. I've searched Google to no avail. I deleted the program using a uninstall program & reinstalled. I contacted the software company and emailed them a file they asked for. Still no luck.  I just searched this forum as wellHopefully there is an easy fix for this. Can anyone help please. Thanks

Answer:[Microsoft][ODBC Driver Manager] Data source name not found & no default driver

What program ? ?

4 more replies
Relevance 56.99%

Hey I had Windows 7 home basic installed on my dell inspiron laptop, and there was only 1 partition (c drive), I think that I deleted something from windows, and now when m switching on the laptop its saying "operating system not found".
Somebody please help me, how can I recover the data on hard drive. Is it possible that data is still present on hdd.
Sorry for my grammer, m not good in english.

Answer:How to recover data if computer ia showing "no operating system found"

Simply plug the hard drive into another PC, then just copy and paste the data to whatever storage device you have available

4 more replies
Relevance 56.99%

Computer: Lenovo Z585OS: Windows 8.1Problem:After having left my computer on for a few hours I came back to find it was shut off. Upon turning it back on I received the blue screen with the error message stating I needed to recover as my Boot Configuration Data file doesn't contain the information ...After a quick google, I got a Windows 8 recovery drive from a friend's laptop and tried to boot from this however I can't stop the boot from Windows. I have tried pressing F12 (many many times) and have poked around in the UEFI settings to change the boot order for the USB to first but upon re-entering the UEFI settings the USB is last in the boot priority (although other options I have changed have been saved correctly).Any suggestions on issues regarding booting from USB with the Lenovo series would be greatly appreciated.

More replies
Relevance 56.58%

This is a client's pc.SONY VAIO All In One VPCL21AFX/B
recvd a "Operating System Not Found" error msg when starting after normal shutdown
rebooted w/o external devices, same error
F8 didn't work
F12 put it into a Sony repair menu Esc'd out to Win menu
Command Line "bootrec.exe /fixmbr" - successful
reboot "Operating System Not Found" error
ran Sony Data Rescue to save data files on external drive and got nothing but empty directories
pulled HD and looked at it as an external on another machine - there are no data files
???
the Sony recovery utility will restore a factory load but delete all data
Where did the data files go? They were all there the night before.

Answer:Sony Vaio Win7 "Operating System Not Found" - missing data files

Is the HD detected in BIOS setup?

Try running a few Startup Repairs from DVD or Repair CD, which automate all repair commands, tests and fixes.

To take a look at the state of the partitions use Partition Wizard bootable CD.
Post back a camera snap if possible so we can look it over. You can scan for missing partitions using Partition Wizard Partition Recovery Wizard - Video Help. I would also run
Partition Wizard Check File System and Partition Wizard Partition surface test to check HD condition.

You can rescue files as shown in Step 3 of Clean Reinstall - Factory OEM Windows 7 then get the superior Clean Reinstall without the factory bloatware which is the worst possible Win7 install.

9 more replies
Relevance 56.58%

While running chkdsk on my back-up 750 GB HD (Seagate ST3750330AS (Seagate Barracuda 7200.11 - Hard drive - 750 GB) the computer was inadvertantly powered down. On startup, post info said SATA2 (backup) drive "not found".

Drive C and operating system worked fine after losing Drive D. I am running XP with the primary C drive being two seagate (250GB) drives in stripe array and the backup drive above as D:\. The drive spins up at power on.

The checkdisk (with repair) was based on several earlier errors related to D:\$MFT which I was hoping to solve with checkdisk. I'm thinking the interuption resulted in the loss of the ability of the bios to see the drive. I have about 400GB of backup data on the drive.

My critical data is backed up in a third location, but there is much data on the drive that would be "Very nice" to get back. As such, I am not prepared to pay much for recovery. I would like some hints as to how I might recover at least part of data. For example, can I somehow reformat (or partial reformat) and then use free file recovery software to salvage whatever i did not overwrite with the format? Is it possible to rebuild the MFT if that is the cause of my problem? If so, how do I get my system to recognize or "find" the drive in question and what software would i use?

Any suggested path forward, including software, would be appreceiated.

Paul-D
 

Answer:Recover Data from "Drive Not Found" Failure

7 more replies
Relevance 56.17%

I have lenovo ideapad U410. Few weeks back it felt down from table. Since then it was running slow. I formatted my laptop twice. But after formatting whenever I tried to install other software it was slowing down again.I have checked with lenovo service center. They run some error checking software and they got this error Error Code : ID08E-VMIError : Found uncorrectable data error  . LBAError: Failure accessing sector LBA  For this error they have suggested me replace SSD of laptop which costs very high.Kindly suggest any other solution. Regards,Mangesh Gurav

More replies
Relevance 55.76%

What are these files and do I need to keep um?

There labled as:

Code:

Found.001
Found.002
Found.003
Found.004
Found.005
Found.006
Found.007
Found.008
Found.009
ETC..ETC...ETC

Any info would be great, Thanx
 

Answer:What are these folders found.001 found.002 etc

Everytime your computer is shut down the wrong way and Scandisk run finding problems with files, it saves them in the format you are asking about. You can delete them.
 

1 more replies
Relevance 55.76%

I have installed Logitech Pro 5000 on vista and it works then it says camera is not connected.
After uninstalling and reinstalling from the disc and site several times and following any repair suggestions that are available it keeps happening. The Cam says it's for Vista.
Any suggestions?
thanks
Rob
 

More replies
Relevance 55.35%

Hi all,
 
I am attempting to install Win7 in an Inspiron 1545 with a new SATA hard drive that was purchased. When i insert the drive, I get "Internal Hard Disk Drive Not Found." I have verified the drive is not showing in the BIOS, I've already attempted to reseat the drive several times. In addition, I've attempted to load the chipset drivers, SATA drivers, etc from Dells website, the drive still does not show in the OS install when booting to DVD or in bios.
I dont believe it to be an issue with the new drive, as I plugged the new drive into another model Dell laptop and it recognizes the drive fine in BIOS, also I can still boot to the previous hard drive in this laptop without issue when i plug it back in.
Is there a specific driver, etc that I need to use for the drive to be recognized or other thoughts people have?

Answer:Inspiron 1545- replacing hard drive, new SATA drive not found "Internal Hard Disk Drive Not Found

This is strange - either the new hard drive has a rare compatibility issue with your onboard controller (I use a 500Gbyte in my 1545 without probs)) or it is a mechanical problem.I would take a close look at the physical dimensions and compare your original hdd with the new one.Watch the video (even though it's about a 1525 (similar to an 1545) and an SSD hdd) -  go to 2:20

10 more replies
Relevance 54.94%

I have a problem finding any information in file database for;

c:\windows\system32\svchost.exe -k

I found this in my PC Services in the S.I.

I have searched using My PC Search;nothing
I looked in Windows System32 file; not there ?

There is nothing found in Process Library.

System Information>Services;
Alerter Alerter Running Auto Share Process c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0
STARTUP LIST

Name Filename Status Description
Alerter alerter.exe
X
Added by the TSPY_MAHA.F information stealing Trojan.
Alerter alrsvc.dll
Y
This service is used to notify selected computers and users of alerts from programs. This service is started by svchost.exe. ... Read More
Compaq Alerter CPQAlert.exe
U
Compaq's Insight Manager Agent - a tool that allows for "fault, performance, and configuration management". Recommended for corporate users only. It's ... Read More
office mail off_mail.exe
U
Related to Office_Mail Client E-mail service from Burrotech Ltd.
office mail alerter om_Alerter.exe
U
Related to Mail_Alerter for Office Mail. Alert of new mail with an icon on the system tray ... Read More

Answer:File Not Found In File Data Base

I have a feeling I am infected, my dial up box is missing, (large blue connection box where I can access properties), it still dials from small message box that says port open, . . then dialing, it's been acting funny, also the show connections from start, is missing.

I am now manually searching my services and checking them in the BC startup list;

Alerter (last post was the first on the list.)

Next is ;

Application Management AppMgmt Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0

This is the info I found at the BC startup list;

This is an undesirable program.
This file has been identified as a program that is undesirable to have running on your computer.
This consists of programs that are misleading, harmful, or undesirable.

If the description states that it is a piece of malware, you should immediately run an antivirus
and antispyware program. If that does not help, feel free to ask us for assistance in the
forums.
Name: Application Management Browser
Filename: smss.exe
Command: C:\Windows\smss.exe
Description: Added by the Troj/Comhush-A Trojan. This infection should not be confused with
the legitimate smss.exe found in the C:\Windows\System32 (%System%)folder.
File Location: %WinDir%
Startup Type: This startup entry is installed as a Windows NT, 2000, 2003, XP, or Vista
service.
Service Name: apman
Service Display Name: Application Management Browser
HijackThis Categor... Read more

12 more replies
Relevance 54.53%

Hi there,

last week i bought a new PC that came with a SSD 120GB and i've installed a Windows 7 Professional 32b/64b. That whas the unique available version of W7 on Microsfot Dreamsparks for students and after install it and update it i saw that i had 60GB free. I've installed Avast Free, Steam (no games for now), Office 365 Home and PHP Storm. Now i only have 25GB of free space.

I can't understand how is possible that only with a OS and 4 programs my SSD is close to be full. Maybe it's something wrong with the SSD or that version of W7 requires a lot of space to be working on 32b and 64b versions?

Answer:Windows 7 Profesional more than 50GB on my SSD

Did you actually install 32 bit and 64 bit windows ? 2 installs ?

Start again and delete the entire ssd during the install then just click next, get back to us with the results and a shot of disk
management.

Install 32 bit or 64 bit.

9 more replies