Computer Support Forum

windows update not working Error number: 0x80072EFF.mozilla and ie opens random tabs.

Question: windows update not working Error number: 0x80072EFF.mozilla and ie opens random tabs.

hii got this unusual problem from last couple of days whenever i open browsereither firefox or ie soon after it open a random tabs by itself.my windows update are not working always shows Error number: 0x80072EFF.i scan with avg,malwarebite,superantspyware but nothing comes up ,but my malwarebite keeps showing a ballon in system tray saying successfully blocked access toa potentially malicious website 91.212.226.67 and it keeps changing the number of the site.i download windows malicious tool and it says alerion c virus but when i scan with avg nothing comes up.iam bit confuse coz of this. iam posting trend micro hijack this log file for you guys to look into and thanks for your kind help in advanceLogfile of Trend Micro HijackThis v2.0.4Scan saved at 10:00:10, on 22/06/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\rundll32.exeC:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exeC:\PROGRA~1\AVG\AVG9\avgtray.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\AVG\AVG9\avgfws9.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\AVG\AVG9\avgam.exeC:\Program Files\AVG\AVG9\avgnsx.exeC:\Program Files\iolo\common\lib\ioloServiceManager.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\AVG\AVG9\avgui.exeC:\Program Files\AVG\AVG9\avgscanx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\msiexec.exeC:\Program Files\Trend Micro\HijackThis\HiJackThis.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dllR3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dllO2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dllO2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dllO2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllO2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\YTSingleInstance.dllO3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dllO4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exeO4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgentO4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exeO4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttrayO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeO8 - Extra context menu item: &Download All using 4shared Desktop - C:\Program Files\4shared Desktop\down_all.htmO8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\system32\shdocvw.dllO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\system32\shdocvw.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dllO16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cabO16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1230604043980O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dllO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dllO20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLLO20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dllO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dllO23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeO23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exeO23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exeO23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exeO23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exeO23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exeO23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exeO23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exeO23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeO23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeO23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe--End of file - 8791 bytes

Relevance 100%
Preferred Solution: windows update not working Error number: 0x80072EFF.mozilla and ie opens random tabs.

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: windows update not working Error number: 0x80072EFF.mozilla and ie opens random tabs.

hi just adding the information to the exisitng topic last nite i ran tdsskiller and it found and infection in driver which is disinfected after reboot .my windows updates are working fine now and iam not getting the pop up ballon saying access denied to malicious wesite but when i scan with superantspyware it shows that hkcmd is infected it cures it but it come back again even malwarebite showsthe thing like shell open command bad note pad.fix it but it appears again.iam trying to post the latest log for you guys to have a look cheers.22:53:13:812 4044 TDSS rootkit removing tool 2.3.2.0 May 31 2010 10:39:4822:53:13:812 4044 ================================================================================22:53:13:812 4044 SystemInfo:22:53:13:812 4044 OS Version: 5.1.2600 ServicePack: 3.022:53:13:812 4044 Product type: Workstation22:53:13:812 4044 ComputerName: ASDF-E26E85805B22:53:13:812 4044 UserName: Administrator22:53:13:812 4044 Windows directory: C:\WINDOWS22:53:13:812 4044 Processor architecture: Intel x8622:53:13:812 4044 Number of processors: 122:53:13:812 4044 Page size: 0x100022:53:13:822 4044 Boot type: Normal boot22:53:13:822 4044 ================================================================================22:53:14:263 4044 Initialize success22:53:14:263 4044 22:53:14:263 4044 Scanning Services ...22:53:14:773 4044 Raw services enum returned 387 services22:53:14:803 4044 22:53:14:803 4044 Scanning Drivers ...22:53:15:865 4044 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys22:53:15:985 4044 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys22:53:16:165 4044 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys22:53:16:255 4044 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys22:53:16:376 4044 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys22:53:16:546 4044 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys22:53:16:616 4044 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys22:53:16:706 4044 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys22:53:16:796 4044 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys22:53:16:866 4044 Avgfwdx (fa6336f05695e39995884d0c959c9608) C:\WINDOWS\system32\DRIVERS\avgfwdx.sys22:53:16:866 4044 Avgfwfd (fa6336f05695e39995884d0c959c9608) C:\WINDOWS\system32\DRIVERS\avgfwdx.sys22:53:17:007 4044 AVGIDSDriverxpx (97670687f6c8f35e7b611f2ce1f94472) C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys22:53:17:077 4044 AVGIDSErHrxpx (277fc6b0f0be23bae7e63f184034b2fe) C:\WINDOWS\system32\Drivers\AVGIDSxx.sys22:53:17:097 4044 AVGIDSFilterxpx (dba65f23b686bdf043bbb54e55c72887) C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys22:53:17:117 4044 AVGIDSShimxpx (a552461aab7a36c2465ff19e59af08bf) C:\Program Files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys22:53:17:197 4044 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\WINDOWS\system32\Drivers\avgldx86.sys22:53:17:267 4044 AvgMfx86 (53b3f979930a786a614d29cafe99f645) C:\WINDOWS\system32\Drivers\avgmfx86.sys22:53:17:297 4044 AvgRkx86 (5bbcd8646074a3af4ee9b321d12c2b64) C:\WINDOWS\system32\Drivers\avgrkx86.sys22:53:17:377 4044 AvgTdiX (22e3b793c3e61720f03d3a22351af410) C:\WINDOWS\system32\Drivers\avgtdix.sys22:53:17:477 4044 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys22:53:17:577 4044 BrScnUsb (92a964547b96d697e5e9ed43b4297f5a) C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys22:53:17:698 4044 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\WINDOWS\system32\DRIVERS\BthEnum.sys22:53:17:828 4044 BTHMODEM (fca6f069597b62d42495191ace3fc6c1) C:\WINDOWS\system32\DRIVERS\bthmodem.sys22:53:17:908 4044 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\WINDOWS\system32\DRIVERS\bthpan.sys22:53:17:978 4044 BTHPORT (662bfd909447dd9cc15b1a1c366583b4) C:\WINDOWS\system32\Drivers\BTHport.sys22:53:18:138 4044 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\WINDOWS\system32\Drivers\BTHUSB.sys22:53:18:238 4044 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys22:53:18:348 4044 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys22:53:18:459 4044 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys22:53:18:589 4044 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys22:53:18:699 4044 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys22:53:18:789 4044 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys22:53:18:859 4044 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys22:53:19:370 4044 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys22:53:19:500 4044 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys22:53:19:690 4044 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys22:53:19:760 4044 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys22:53:19:861 4044 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys22:53:19:931 4044 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys22:53:20:031 4044 E100B (18320a557cf377f08769f91cbed346ec) C:\WINDOWS\system32\DRIVERS\e100b325.sys22:53:20:101 4044 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys22:53:20:201 4044 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys22:53:20:341 4044 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys22:53:20:421 4044 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys22:53:20:492 4044 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys22:53:20:662 4044 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys22:53:20:772 4044 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys22:53:20:882 4044 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys22:53:20:982 4044 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys22:53:21:062 4044 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys22:53:21:203 4044 HSFHWICH (c2a7d9109b7f10a455d13b2432837b16) C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys22:53:21:343 4044 HSF_DP (9a0d0c461ef2b3d80cb7875b4b995e47) C:\WINDOWS\system32\DRIVERS\HSF_DP.sys22:53:21:593 4044 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys22:53:21:773 4044 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys22:53:21:864 4044 ialm (7502a1cc0677b6577d6ab9e1776e2836) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys22:53:21:954 4044 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys22:53:22:084 4044 IntelIde (384769f9255cfcb2b79326a8150f563b) C:\WINDOWS\system32\DRIVERS\intelide.sys22:53:22:084 4044 Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\intelide.sys. Real md5: 384769f9255cfcb2b79326a8150f563b, Fake md5: b5466a9250342a7aa0cd1fba1342067822:53:22:084 4044 File "C:\WINDOWS\system32\DRIVERS\intelide.sys" infected by TDSS rootkit ... 22:53:22:785 4044 Backup copy found, using it..22:53:22:815 4044 will be cured on next reboot22:53:22:905 4044 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys22:53:22:945 4044 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys22:53:23:025 4044 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys22:53:23:095 4044 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys22:53:23:165 4044 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys22:53:23:235 4044 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys22:53:23:296 4044 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys22:53:23:396 4044 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys22:53:23:466 4044 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys22:53:23:526 4044 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys22:53:23:626 4044 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys22:53:23:776 4044 klmd23 (67e1faa88fb397b3d56909d7e04f4dd3) C:\WINDOWS\system32\drivers\klmd.sys22:53:23:886 4044 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys22:53:23:947 4044 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys22:53:24:147 4044 LVPr2Mon (a6919138f29ae45e90e99fa94737e04c) C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys22:53:24:217 4044 LVUSBSta (23f8ef78bb9553e465a476f3cee5ca18) C:\WINDOWS\system32\drivers\LVUSBSta.sys22:53:24:287 4044 MBAMProtector (67b48a903430c6d4fb58cbaca1866601) C:\WINDOWS\system32\drivers\mbam.sys22:53:24:347 4044 mdmxsdk (eeaea6514ba7c9d273b5e87c4e1aab30) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys22:53:24:447 4044 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys22:53:24:517 4044 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys22:53:24:547 4044 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys22:53:24:617 4044 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys22:53:24:708 4044 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys22:53:24:808 4044 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys22:53:24:928 4044 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys22:53:24:998 4044 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys22:53:25:078 4044 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys22:53:25:188 4044 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys22:53:25:268 4044 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys22:53:25:318 4044 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys22:53:25:419 4044 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys22:53:25:519 4044 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys22:53:25:589 4044 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys22:53:25:689 4044 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys22:53:25:839 4044 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys22:53:25:929 4044 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys22:53:26:009 4044 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys22:53:26:090 4044 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys22:53:26:170 4044 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys22:53:26:240 4044 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys22:53:26:380 4044 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys22:53:26:440 4044 nmwcd (4a8a2aa0706b659175169decf198e9d7) C:\WINDOWS\system32\drivers\ccdcmb.sys22:53:26:530 4044 nmwcdc (fd3e61831095ac62e6840d986b5a2016) C:\WINDOWS\system32\drivers\ccdcmbo.sys22:53:26:640 4044 nmwcdnsu (02e96113511171ba7559386d10d3daea) C:\WINDOWS\system32\drivers\nmwcdnsu.sys22:53:26:731 4044 nmwcdnsuc (fb09150cfc7a499a53c308d04841a3bd) C:\WINDOWS\system32\drivers\nmwcdnsuc.sys22:53:26:831 4044 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys22:53:26:961 4044 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys22:53:27:131 4044 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys22:53:27:201 4044 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys22:53:27:281 4044 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys22:53:27:341 4044 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys22:53:27:391 4044 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys22:53:27:492 4044 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys22:53:27:612 4044 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys22:53:27:662 4044 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys22:53:28:022 4044 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\drivers\PCIIde.sys22:53:28:263 4044 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\DRIVERS\pcmcia.sys22:53:28:874 4044 PID_PEPI (4bb5ac2dd485b8eefccb977ee66a68ad) C:\WINDOWS\system32\DRIVERS\LV302V32.SYS22:53:29:084 4044 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys22:53:29:164 4044 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys22:53:29:274 4044 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys22:53:29:364 4044 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys22:53:29:434 4044 QCDonner (fddd1aeb9f81ef1e6e48ae1edc2a97d6) C:\WINDOWS\system32\DRIVERS\OVCD.sys22:53:29:685 4044 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys22:53:29:795 4044 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys22:53:29:915 4044 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys22:53:30:035 4044 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys22:53:30:115 4044 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys22:53:30:206 4044 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys22:53:30:336 4044 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys22:53:30:396 4044 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys22:53:30:546 4044 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys22:53:30:666 4044 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys22:53:30:766 4044 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\WINDOWS\system32\DRIVERS\rfcomm.sys22:53:30:836 4044 RimUsb (f17713d108aca124a139fde877eef68a) C:\WINDOWS\system32\Drivers\RimUsb.sys22:53:30:937 4044 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\WINDOWS\system32\DRIVERS\RimSerial.sys22:53:31:037 4044 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys22:53:31:167 4044 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS22:53:31:297 4044 SASKUTIL (61db0d0756a99506207fd724e3692b25) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS22:53:31:457 4044 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys22:53:31:527 4044 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys22:53:31:598 4044 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys22:53:31:678 4044 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys22:53:31:808 4044 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys22:53:31:918 4044 SMCIRDA (707647a1aa0edb6cbef61b0c75c28ed3) C:\WINDOWS\system32\DRIVERS\smcirda.sys22:53:31:998 4044 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys22:53:32:038 4044 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys22:53:32:128 4044 Srv (89220b427890aa1dffd1a02648ae51c3) C:\WINDOWS\system32\DRIVERS\srv.sys22:53:32:258 4044 STAC97 (eef5877a1bfc9684d7e2435fdd3c5853) C:\WINDOWS\system32\drivers\STAC97.sys22:53:32:399 4044 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys22:53:32:449 4044 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys22:53:32:509 4044 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys22:53:32:619 4044 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys22:53:32:699 4044 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys22:53:32:879 4044 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys22:53:33:090 4044 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys22:53:33:170 4044 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys22:53:33:310 4044 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys22:53:33:470 4044 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys22:53:33:570 4044 upperdev (587e643a4e2ffd9a00f114b057ceb773) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys22:53:33:680 4044 USBAAPL (60a68a5ea173a97971ee9f1ff49eb2b3) C:\WINDOWS\system32\Drivers\usbaapl.sys22:53:33:851 4044 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys22:53:33:971 4044 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys22:53:34:041 4044 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys22:53:34:131 4044 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys22:53:34:211 4044 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys22:53:34:321 4044 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys22:53:34:412 4044 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys22:53:34:502 4044 UsbserFilt (fca6a196d47cb972a0e4adc0db9cd17c) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys22:53:34:592 4044 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS22:53:34:652 4044 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys22:53:34:732 4044 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys22:53:34:862 4044 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys22:53:35:133 4044 w70n51 (f75846d85816173f45f7f33da5bbd057) C:\WINDOWS\system32\DRIVERS\w70n51.sys22:53:35:483 4044 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys22:53:35:613 4044 Wdf01000 (bbcfeab7e871cddac2d397ee7fa91fdc) C:\WINDOWS\system32\Drivers\wdf01000.sys22:53:35:733 4044 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys22:53:35:884 4044 winachsf (ce545a84bf3411e7516fa8da51ad9d93) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys22:53:36:154 4044 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS22:53:36:254 4044 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys22:53:36:354 4044 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys22:53:36:515 4044 {6080A529-897E-4629-A488-ABA0C29B635E} (6e08e6c264c619d73d869f17f272c9c8) C:\WINDOWS\system32\drivers\ialmsbw.sys22:53:36:615 4044 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} (42482aec379448454f800c64861b2121) C:\WINDOWS\system32\drivers\ialmkchw.sys22:53:36:705 4044 {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55} (3d2e3441e55c81199dc828f99910e84c) C:\WINDOWS\system32\drivers\wA301a.sys22:53:36:795 4044 {E2B953A7-195A-44F9-9BA3-3D5F4E32BB55} (3d2e3441e55c81199dc828f99910e84c) C:\WINDOWS\system32\drivers\wA301b.sys22:53:36:845 4044 Reboot required for cure complete..22:53:37:356 4044 Cure on reboot scheduled successfully22:53:37:356 4044 22:53:37:356 4044 Completed22:53:37:356 4044 22:53:37:356 4044 Results:22:53:37:356 4044 Registry objects infected / cured / cured on reboot: 0 / 0 / 022:53:37:356 4044 File objects infected / cured / cured on reboot: 1 / 0 / 122:53:37:356 4044 22:53:37:356 4044 KLMD(ARK) unloaded successfullyMalwarebytes' Anti-Malware 1.46www.malwarebytes.orgDatabase version: 4226Windows 5.1.2600 Service Pack 3Internet Explorer 8.0.6001.1870223/06/2010 01:16:31mbam-log-2010-06-23 (01-16-31).txtScan type: Full scan (C:\|)Objects scanned: 175272Time elapsed: 1 hour(s), 58 minute(s), 9 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 2Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: ("%1" /S) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: (regedit.exe "%1") -> Quarantined and deleted successfully.Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected)latest hijack this log fileLogfile of Trend Micro HijackThis v2.0.4Scan saved at 14:44:07, on 23/06/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\WINDOWS\Explorer.EXEC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exeC:\WINDOWS\system32\hkcmd.exeC:\WINDOWS\system32\rundll32.exeC:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exeC:\PROGRA~1\AVG\AVG9\avgtray.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\Program Files\iTunes\iTunesHelper.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\AVG\AVG9\avgwdsvc.exeC:\Program Files\AVG\AVG9\avgfws9.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\iolo\common\lib\ioloServiceManager.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeC:\Program Files\AVG\AVG9\avgam.exeC:\Program Files\AVG\AVG9\avgnsx.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\iPod\bin\iPodService.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\AVG\AVG9\avgscanx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\Program Files\Trend Micro\HijackThis\HiJackThis.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.localR3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dllR3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dllO2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dllO2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dllO2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dllO2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dllO2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\YTSingleInstance.dllO3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\yt.dllO4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exeO4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgentO4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exeO4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttrayO4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exeO8 - Extra context menu item: &Download All using 4shared Desktop - C:\Program Files\4shared Desktop\down_all.htmO8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\system32\shdocvw.dllO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\system32\shdocvw.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dllO16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cabO16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1230604043980O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dllO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dllO20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLLO20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dllO22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dllO23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeO23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exeO23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exeO23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exeO23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exeO23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exeO23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exeO23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exeO23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exeO23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exeO23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exeO23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeO23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeO23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe--End of file - 8721 bytesstill waiting to hear from you guys cheers

3 more replies
Relevance 91.43%

Hi,Each time i go to downlaod windows update i get the above error. Error number: 0x80072EFFUnable to connect Microsoft update centerhttp://www.update.microsoft.com/microsoftu...t.aspx?ln=en-us.My antivirus Mcafee Total protection cannot find any malware.I also did windows Live update scan, nothing found.Unable to do update with windows defender and Microsoft security essential. I have attached the file, problem with attachineg DDS file. Any help is appreciated.thanks

Answer:Error number: 0x80072EFF

Hi,Sorry for delayed response. Forums have been really busy. If you still need help with this do following, please.Download DDS and save it to your desktop from here or here or here.Disable any script blocker, and then double click dds.scr to run the tool. When done, DDS will open two (2) logs: DDS.txt Attach.txtSave both reports to your desktop. Post them back to your topic.Download GMER here by clicking download exe -button and then saving it your desktop:Double-click .exe that you downloadedClick rootkit-tab, uncheck files option and then click scan.Don't check Show All box while scanning in progress!When scanning is ready, click Copy.This copies log to clipboardPost log (if the log is long, archive it into a zip file and attach instead of posting) in your reply.

2 more replies
Relevance 91.43%

for some reason my windows won't/can't update and that resulting to my desktop automatically to classic mode, sound driver disabled and i can't access my firewall settings

please help

Answer:[Error number: 0x80072EFF]

The 0x80072EFF error is "Network problems are preventing connection
to the Windows Update servers."
This issue occurs if the server is busy, OR if you have a problem
with Windows Script.
If this issue occurs consistently, you may be able to resolve the
issue by installing the latest version of Microsoft Windows Script.
For information about how to download the appropriate version of
Windows Script 5.6 for your operating system, visit the following
Microsoft Web site:

<http://msdn.microsoft.com/library/de...st/webdev.asp>

Try turning off your web accelerator, such as Speedband and see if you can go
to the update site then!



1. Go to 'Internet Options' looked under Windows VM and
2. checked all three.
3. Restart the computer.
4. go back to 'Internet Options'
5. unchecked JIT compiler and restart the computer again.
6. Then tried to run updates and it worked.

2 more replies
Relevance 91.43%

Hi,Each time i go to downlaod windows update i get the above error. Error number: 0x80072EFFUnable to connect Microsoft update centerhttp://www.update.microsoft.com/microsoftu...t.aspx?ln=en-us.My antivirus Mcafee Total protection cannot find any malware.I also did windows Live update scan, nothing found.Unable to do update with windows defender and Microsoft security essential.I have attached the file, problem with attachineg DDS file. Any help is appreciated.thanksGMER InfoGMER 1.0.15.15281 - http://www.gmer.netRootkit quick scan 2010-09-06 17:08:46Windows 5.1.2600 Service Pack 3Running: ym2vlzw9.exe; Driver: C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\pgldapod.sys---- Devices - GMER 1.0.15 ----AttachedDevice \FileSystem\Ntfs \Ntfs bb-run.sys (Promise Disk Accelerator/Promise Technology, Inc.)AttachedDevice \FileSystem\Fastfat \Fat bb-run.sys (Promise Disk Accelerator/Promise Technology, Inc.)AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 arkbcfltr.sys (Microsoft AR PS/2 Keyboard Filter Driver (Beta 2 Release 2)/Microsoft Corporation)AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 arkbcfltr.sys (Microsoft AR PS/2 Keyboard Filter Driver (Beta 2 Release 2)/Microsoft Corporation)Device -> \Driver\atapi \Device\Harddisk0\DR0 8710FEC5---- Files - GMER 1.0.15 ----File C:\WINDOWS\sys... Read more

Answer:Error number: 0x80072EFF

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEmsconfigsafebootminimalactivexdrivers32netsvcs%SYSTEMDRIVE%\*.exe/md5st... Read more

2 more replies
Relevance 89.38%

Hello,
I receive an error message with Error number 0x80072EFF in the upper right corner of the web page when trying to use the update.microsoft.com website.

I've tried resetting Windows Updates using MSKB article 971058, but that didn't seem to help. I also added the update websites
suggested in other MSKB articles to the trusted websites in Internet Explorer, but that didn't help either.

Also, when I attempt to shut down my PC, it seems to freeze while shutting down at the screen that says "Windows is shutting down".

Here are some other details:
Microprocessor: ASUS P4S8X
Operating System: Windows XP Service Pack 3

Thanks,
Bob Wolfgang

Answer:Windows Update Error 0x80072EFF

Lots of possible causes.

If you read far enough, one possible cause is malware.

http://forums.techarena.in/windows-update/407737.htm

17 more replies
Relevance 88.56%

Hello - This is my first post in this forum. If I am posting in a wrong place, please move it to the correct forum. I have read your "Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help" before posting and have adhered to the guidelines as given. With my research and following similar symptoms in the forum, I guess this is a malware issue. Details of what happened and what I have done is detailed here. Please advise what to do next to get rid of these problems.Background:1. Google chrome was continuously crashing or producing "unavailable" pages and forcing me to kill the pages, inspite of uninstalling-rebooting-installing the application again. (Tried this three times and ultimately got rid of Chrome assuming it to be some chrome specific issue. My current configuration does not have chrome anymore)2. Next I wanted to run windows update from http://windowsupdate.microsoft.com/, but the page shows error:QUOTEInternet Explorer cannot display the webpage Most likely causes:You are not connected to the Internet. The website is encountering problems. There might be a typing error in the address.I managed to access http://update.microsoft.com/microsoftupdat...t.aspx?ln=en-us where it gives Error number: 0x80072EFF with msg:QUOTEThe website has encountered a problem and cannot display the page you are trying to view.3. I checked my Symantec Client Firewall logs that show intrusion attempts being blocked from 213.163.89.xxx (105,106,1... Read more

Answer:Windows update error: 0x80072eff and attacks from 213.163.89.xxx

Update - I downloaded and ran the TDSSKiller and reran MBAM after I had submitted my query yesterday. This seems that this has resolved all the problems for now. There are no more intrusion attempts from 213.163.89.xxx and I am able to access windows update site also. TDSSKiller cleaned one infected file:C:\windows\system32\drivers\sym_u3.sysIs there anything additional I need to do?

3 more replies
Relevance 88.56%

Hi,A couple days ago I got a virus or something that would pop up a fake Windows AntiSpyware (don't remember exact name) program. I was finally able to get rid of it using AVG and MalwareByte's Anti-Malware.Now Firefox will open up random tabs on it's on (don't have to click on anything) and when I click on links sometimes it will redirect me for like 5 clicks of the link and then after that allow me to go to the site and then it will repeat this action maybe 10 minutes later.It also will not let me go to the microsoft update site (in IE and Firefox), and when I search w i n d o w s u p d a t e . m i c r o s o f t (without the spaces) in google or any text field that I submit (tried it in a forum) (in IE or Firefox) it will just bring up a page that says connection was reset or page failed to load. I have also tried it in safe mode and I get the same symptoms.I have tried running MalwareByte's Anti-Malware, Spybot S&D, AVG, and HJT. At one time MalwareBtyes said something about a tcipip.sys thing but I don't remember too much about what was wrong.I followed the prep guide but I cannot get a full gmer scan to run. It either just restarts my computer, freezes, shuts down the program, or locks down my computer (have to do a hard reset).Thanks for any and all helpEDIT: One of the pop-up tabs lingered on a site for a second before going to an ad site, the url of this site was..hxxp://apachejct.com/key/?qs=9434cd09aed34cc216c628c7eac958b4aa78b00b6706ac1a... Read more

Answer:Firefox opens random tabs and redirects, blocks microsoft update - rootkit?

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Fo... Read more

8 more replies
Relevance 82%

Hi there

I got a virus/trojan of some sort today when an IT technician just had to poke his USB inside my netbook. The immediate effect I noticed was that Google Chrome started opening whatever link I clicked in a new tab, even though I did not press CTRL when clicking. Also, when I clicked the newly opened tab, it instantly closed. I noticed that pressing CTRL + Tab allowed me to swtich between tabs without them closing, so yay for me What was even weirder was that the virus/trojan not only affected Chrome, but also my desktop. I could no longer drag and drop to move files into a folder, and I can't move a single thing on my desktop (they'd return to their original place and not snap onto another grid/column/row).

Then I tried finding a solution, and came across two posts on Google support forums, describing the exact same problem as what I was facing (both were dated 2011):

http://www.google.com/support/forum/p/Chrome/thread?tid=67613fa3ec0a4204&hl=en

http://www.google.com/support/forum/p/Chrome/thread?tid=74626c629a771199&hl=en

After reading, I realised that when I click Other bookmarks on my bookmarks bar, Chrome will ask if I want to open all of my bookmarks in new tabs. Anyway, the solution posted by the supposed "top contributor" was really a big help

So here I am After running HijackThis, DDS, & GMER, the symptoms are finally gone (after running GMER, actually). It says the thing is a rootkit. But I'm not sure if it'... Read more

Answer:Google Chrome Opens Links in New Tabs; Tabs Close on Click; Wrench Button not Working

12 more replies
Relevance 80.36%

Hello everyone I have been trying to Win XP and get an error 0x80072EFF. Search the web found some articles, but no luck. I can go to the MS website (microsoft.com) select update and recieve the error. I do not even get the DirectX option to click (select) on the top of the webpage.There r also some links in MS that I can not connect too. Surfing web is no problem.I am running Win Xp SP3. Any ideas would be great.

Answer:unable to update Win XP error 0x80072EFF

Looked high and low on how to solve this problem.  Saw many suggestions but nothing worked.  I installed and ran Hitman Pro and it did find some issues MalwareBytes did not, but it could not clean the RootKit issue.I finally stumbled upon ComboFix and it did the trick...http://www.bleepingcomputer.com/combofix/how-to-use-combofix

1 more replies
Relevance 78.72%

Although none of the issues seem severe, I have been having plenty of symptoms to suggest I may have malware infection:My problem consists of mainly the Windows Update website. When I try to access http://update.microsoft.com, IE or FireFox says it cannot display the page. However, I've managed to access http://www.update.microsoft.com/microsoftu...v6/default.aspx and upon checking my computer, it gives me the error number: 0x80072EFF. I had thought the problem lied within the activeX component of my browser (since Windows Update requires an activeX installation), but I have managed to get www.pcpitstop.com/testax.asp working whereas previously I was unable to even see the site because IE 8 would close the tab, recover it multiple times and then state that I was unable to access the site.My system runs on Windows XP PRO 32bit version with service pack 3. I'm not sure as to when this has started happening, but it must have been within the last couple months? I noticed that some of my auto updates were not being installed so I tried to go to the Windows Update website to do so. I run plenty of programs on my system and have Norton Internet Security 2010 (all features turn on including firewall, antivirus, various browser protections, etc), MBAM, Spybot (w/ SDHelper). I recently ran the TFC.exe application I found here to get rid of temp files and have begun scanning some more in safe mode as I write this.Please let me know how I should proceed to fixing this dilemma. I ... Read more

Answer:Microsoft Update Error 0x80072EFF, IP attacks, popups, you name it

Logs have been posted below. I would like to note that my Internet Explorer 8 occasionally crashes, but most prominent is the inability to click on pictured links, for example, search engine image results. Also, my msnconfig gives me an error message after I click 'okay' having visited the 'services' tab. I have yet to really test the system, but other than that, I think it is working alright. Windows Update has begun updating automatically again.A recap of what I posted previously:1. I did not install recovery console, because my system was unable to get an internet connection. Although I am unfamiliar with it, should I install the console?2. While running DDS and GMER, I had killed many startup processes like MSN, Skype, ATI Tool Tray, MBAM, deactivated Norton, etc. so DDS may not have seen all running processes in my typical bootup.3. I do not recall having System Restore enabled, but I believe ComboFix enabled it.4. I was previously infected with ANTIMALWARE DOCTOR, but I think I got rid of it.5. Is there a big security difference between Firefox and IE8?6. When I access msconfig, I get the following message: "An Access Denied error was returned while attempting to change a service. You may need to log on using an Administrator account to make the specified changes."7. Microsoft Update works now.8. No more IP attacks so far.Interestingly enough, I just scanned with Malwarebytes' and there appears to be a trojan.Okay, so a couple new things I&... Read more

3 more replies
Relevance 77.08%

Hi everybody, I hope you are doing well.

Background to what happened:
I caught my son on a P2P the other day downloading music via torrents on the family PC (running XP). Since that time I have deleted the torrent program he was using but I have encountered some issues with the PC. At first I could not access anything, I just kept getting failures to run any program. I would just get a popup saying that the program was infected. Along with that I was getting bogus Fraudpack popups non stop. I was eventually (due to my quick fingers) able to run Malwarebytes and there were several infections I found and deleted. I have since run AVG, Spybot and AdAware and deleted everything from there. Unfortunately that was about a week ago since everything started. The one major thing that kept popping up before I fixed (or at least attempted to fix it) was called Exploit Neosploit Toolkit. Not sure if I got rid of it though.

Issues I am still encountering:
Ok, So after doing all of that, I am still encountering some issues. They include random tabs opening when I am on my browser (Mozilla), but not for porn or gambling or anything like that which is what confuses me. It almost seems like I have clicked a banner and a Visit Vegas tab opens???? I am also having an issue with dll errors, for instance before I repaired it through the IE Repair option I got a Winsock.dll error where for some reason my Win Sock was broken and I could not access the interent (btw, I have no clue what a Win Sock... Read more

Answer:Random Tabs opening in Mozilla

Wow, nobody?

6 more replies
Relevance 77.08%

About a week ago, just after I downloaded a Miles Davis torrent file (which I doubt was the cause), a fake anti-virus program popped up on my PC, doing fake scans and warning me about all sorts of horrible things on my computer. I think it was called "XP Defender". It was easily removed but afterwards I was left with a more resilient problem: once every couple of hours or so a random website opened in Firefox in a new tab. Some links open blank pages, others open seemingly random commercial pages from various countries. The links are sometimes redirected several times and often but not always they have an icon that resembles the band logo from A Perfect Circle, except it is green and the right half of the circle is further up. I will make a screen shot when it happens again. I ran Avira, AVG and Avast, Spybot and MWB Anti-Spyware but nothing was found. I also uninstalled Firefox and replaced it with Opera but the problem remains.I hope someone can make something out of my Hijackthis log because I'm clueless right now.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:48:13, on 23-3-2010Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Sy... Read more

Answer:Browser opens random new tabs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

12 more replies
Relevance 77.08%

Well like it says in the description i have been browsing the web on Firefox and random tabs constantly keep opening with malicious websites.I have ran my avast anti virus a couple of times and it hasn't found anything, i have yet to run Malwarebytes i don't know if that would find anything that avast hasn't. Although i am not much of a computer whiz.Thank you

Answer:firefox opens random tabs

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs unless I ask you to.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.I would like to get a better look at your system, please do the following so I can get some more detailed logs.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appe... Read more

18 more replies
Relevance 76.26%

Well I just installed windows 8 a while back (legit copy). While browsing the web with IE a new tab opened saying there are harmful processes on my computer. Well I managed to take a couple of screen shots of those webpages. I've tried to keep windows 8 updated but the internet speeds have been really slow here where I am and haven't updated it in a while. I updated windows defender and installed spybot search and destroy and mbam and updated those and ran them in safe mode but no viruses showed up.
 

Answer:Virus opens new tabs at random times

    Please download TDSSKiller from here and save it to your DesktopDoubleclick on TDSSKiller.exe to run the application, then click on Change parameters


Check Loaded Modules  and Detect TDLFS file system.  Do not check Verify file digital signatures (even though it is checked in the example)If you are asked to reboot because an "Extended Monitoring Driver is required" please click Reboot now


Click Start Scan and allow the scan process to run

If threats are detected select Skip for all of them unless I instruct you otherwiseClick Continue


Click Reboot computerPlease post the contents of  TDSSKiller.[Version]_[Date]_[Time]_log.txt found in your root directory (typically c:\)in your reply===================================================aswMBR--------------------Download aswMBR and save it to your desktop.
Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.If you need help to disable your protection programs see here and here.Double click the aswMBR.exe file to run it. Please allow when you are asked to download AVAST antivirus engine defs.Wait until the AV update is done, then click on the Scan button to start. The program will launch a scan.

When done, you will see Scan finished successfully. Please click on Save log and save the file to your desktop.

Please post the contents of the log in your next reply.NOTE:... Read more

1 more replies
Relevance 76.26%

Internet Security 2012 appeared while I was streaming a football game on Sunday.
Ran Malawarebtyes and removed some files.

Now getting random tabs opening.

Can't not access windows updates or update windows security essentials..

Computer froze when running DDS

Here is the log from GMER.

Answer:Browser Opens Random Tabs & Redirects

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-12-20 19:48:18
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST3250310AS rev.3.ADA
Running: fwwj8zmk.exe; Driver: C:\DOCUME~1\Nate\LOCALS~1\Temp\kwldapob.sys
---- System - GMER 1.0.15 ----

SSDT \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SASKUTIL.SYS/SUPERAdBlocker.com and SUPERAntiSpyware.com) ZwTerminateProcess [0xB0C59640]

---- Kernel code sections - GMER 1.0.15 ----

.text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xB9542000, 0x18FE04, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text C:\WINDOWS\System32\svchost.exe[1260] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 00F5000A
.text C:\WINDOWS\System32\svchost.exe[1260] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 00F6000A
.text C:\WINDOWS\System32\svchost.exe[1260] ntdll.dll!KiUserExceptionDispatcher 7C90E47C 5 Bytes JMP 00F4000C

---- Devices - GMER 1.0.15 ----

Device Ntfs.sys (NT File System Driver/Microsoft C... Read more

3 more replies
Relevance 76.26%

Hello everyone,

I am grateful to have found this forum, I saw somewhere else that someone had a similar issue. When I go to a website, and merely click on it somewhere, the browser would open up random tabs of random other websites, usually websites for me to by norton antivirus software, if I went to my banking site it would open tabs that look similar to my banks, but the url is different and so on.

I was wondering if I can please have some help in regards to this? My computer is less than 2 years old, and I really can't afford to buy a new one.

Thank you for your time and consideration in regards to this.
From Lagron

I have attached what I was able to obtain from performing the steps outlined at http://forums.techguy.org/virus-other-malware-removal/943214-everyone-must-read-before-posting.html

There was an issue though, when I was performing step that requires the GMER scan, it worked and scanned it without finding anything related to rootkit, but it didn't give me a log file. So I took the steps that were needed as if there was a rootkit found, but in the process of this, I was away from the computer letting it scan, and my computer turned to a dark screen/standby or something like that...minutes later I return sit down and still wait for the scan to complete received a blue screen stating "Driver_Power_State_failure" I took a screenshot of this but think this occurred only because my computer went on standby as it was still scanning, but can upl... Read more

Answer:Browser Opens Up Random Websites In New Tabs

16 more replies
Relevance 76.26%

Two computers on my network have gotten an adware that effects both Internet explorer and Chrome (have not checked Firefox). I have run numerous scans including: Malwarebytes, Avg, Avast, AdwCleaner, Hitman, SuperAntiSpyware and tdsskiler, all of which have no effect on the virus (Nor do they find it). I also did a system restore to a couple weeks before any noticeable effect of the virus took place, still no luck. 
 
The virus itself randomly opens new tabs with links to download fake copies of media player like flash and says "Updates Recommend." The new tabs appear mostly when clicking on links but occasionally pop up at completely random times.
 
Links to some of the websites it brings me too:
 
http://9v3zz.playnow.codecpacXXXkplastic.eu/?sov=412093510&hid=cieskgmoqgoickc&id=XNSX.1143278450.242716.d9c3c44154.5716.af45d90edd99031f8ce39c9f4200df7c%3A%3Apc
 
http://www.appXXXisys.com/lp/videoperformer/v18/?v=18&cid=4535&clickid=00007584p6389922618
 
*XXX are to stop possible accidental clicks on links that may lead to the virus I have
 
It also originally took me to some website called mediamother.eu
 
Does anyone know anything about this virus and how to remove it; even a name would be very helpful. Help would be much appreciated.

Answer:Adware opens new tabs at random times

Try turning off all add ons and extensions in those browsers and see if it stops.How to Disable Extensions in Google Chrome - How to Uninstall Extensions in Google ChromeHow to Disable Extensions in Internet Explorer

12 more replies
Relevance 76.26%

Chrome opens random advert tabs.  Tried malwarebytes and a few other programs but they can't seem to find anything that's causing this annoying issue.  Please, any help would be greatly appreciated.

Answer:Chrome opens random advert tabs

Hello there, 
 
You can start solving this issue by removing suspicious software from your system. This may include toolbars or browser extensions. To remove unwanted programs from Windows please follow the steps in this link:http://windows.microsoft.com/en-gb/windows/uninstall-change-program
 
Furthermore resetting all browsers and disabling their add-ons could help. 
 
I would also recommend installing "Adblock plus" in order to eliminate all the popup's and ads from your browsers. https://adblockplus.org/
 
Hope this helps! 

2 more replies
Relevance 75.44%

Hi everybody, I hope you are doing well.

Background to what happened:
I caught my son on a P2P the other day downloading music via torrents on the family PC. Since that time I have deleted the torrent program he was using but I have encountered some issues with the PC. At first I could not access anything, I just kept getting failures to run any program. I would just get a popup saying that the program was infected. Along with that I was getting bogus Fraudpack popups non stop. I was eventually (due to my quick fingers) able to run Malwarebytes and there were several infections I found and deleted. I have since run AVG, Spybot and AdAware and deleted everything from there. Unfortunately that was about a week ago since everything started.

Issues I am still encountering:
Ok, So after doing all of that, I am still encountering some issues. They include random tabs opening when I am on my browser (Mozilla), but not for porn or gambling or anything like that which is what confuses me. It almost seems like I have clicked a banner and a Visit Vegas tab opens???? I am also having an issue with dll errors, for instance before I repaired it through the IE Repair option I got a Winsock.dll error where for some reason my Win Sock was broken and I could not access the interent (btw, I have no clue what a Win Sock is, but I am guessing being broken is a bad thing and you need it for internet connections).

I see you guys are amazing here on this forum and am hoping my PC doesn't ha... Read more

Answer:Random tabs in mozilla and lots of errors from dll files

Ryan,

The winsock issue is an easy fix, although I believe you may be infected due to the random tabs, etc... I would suggest you post in the "Am I Infected" forum, they will take care of you! Good luck!

Jake

3 more replies
Relevance 75.44%

Hi,

I recently had a virus/rootkit or some type of malware installed on my computer. Basically because I accidentally clicked yes to one of those "you're computer is infected" links. I ran Malwarebytes and AD-Aware before hand and I thought I got rid of everything, unfortunately I did not as Firefox still opens random tabs.

I read the first steps, my logs are attached below. Unfortunately I do not have a Windows Install CD, I think it's forever lost somewhere.

I read the previous posts similar to mine but was not able to figure out what exactly to do. Any help would be greatly appreciated!




DDS (Ver_10-03-17.01) - NTFSx86
Run by Gov at 18:12:00.67 on Thu 05/13/2010
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_18
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1727 [GMT -4:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe ... Read more

Answer:Firefox opens random tabs / redirects sites

Hi ettes and welcome to TSF.

If you still require assistance and are not seeking help elsewhere, then please carry out my instructions.

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

** Note: Please stick with me until I declare that your system is free from malware. Even though your system may not have any symptoms of malware, it may still be infected. **

--------------------------------------------------------------
Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. You can find instructions HERE.

Reply back with the following: C:\ComboFix.txt

19 more replies
Relevance 75.44%

I'm getting random pop-up advertisements for a program called "Registry Defender" which I know for sure is a virus, and several other programs.

I have already scanned my computer with Avast and Malwarebytes and they don't detect any malware. How can I get rid of this virus?

Answer:Spyware problem: Firefox opens up random tabs

Depending of what your configuration is, the choices may vary, but I would recommend booting up with a LiveCD (i.e. not with your native OS), then scan your hard drive with a few of the online scanners - nowadays most major antivirus vendors offer free online scans. If your LiveCD contains some antivirus software, use that as well.

After that, you could go manually through your Program Files, with the LiveCD nothing will be hidden (or at least you can easily show hidden stuff) and find any file that may have a reference to the "Registry Defender" or any other program that bothers you. Just make sure to erase all instances of them, including from prefetch folders.

If everything fails and you have no earlier restore point to fall back to, there is always an option to re-install the OS, although personally I've never done that in a situation like that - it seems to drastic a move to me.

6 more replies
Relevance 75.44%

I have been fighting this thing for weeks now and cannot find it. I have Malwarebytes and iexplore installed from removing System Tool a few moths ago and I am currently running Avira (after ditching AVG when this all happened). To try and solve this I downloaded and ran Hijackthis but it still has not come up with any substantial fix. If you need the log I can attach it easily enough but it has been a dead end to me.

Thank you all for running this site

Andrew
DDS (Ver_10-12-12.02) - NTFSx86
Run by Owner at 12:08:18.34 on Tue 02/22/2011
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_16
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1527.919 [GMT -6:00]

AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WDBtnMgr.exe
C:\Program Files\Western Digital Technologies\Spindown\ExSpinDn.exe
C:\Program Fi... Read more

Answer:Google Redirect & firefox opens new tabs at random

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instru... Read more

2 more replies
Relevance 74.62%

Tonight I had a series of nasty glitches. Sorry if I am giving too much info, but here is what I documented:

First Mozilla opened multiple times on its own, each with a random site, like a cow survey.

Then I got this same error message over and over:

"Server Busy: This action cannot be completed because the other program is busy. Choose "Switch To" to activate the busy program and correct the problem."

I also get messages like BAD IMAGE - "The application or DLL C:\WINDOWS\system32\digeste.dll is not a valid Windows image. Please check this against your installation diskette."

The system ran extremely slow. I would close Mozilla and it would reopen on its own. I shut off my internet connection and it still attempted to open web pages.
I installed Spybot & ran it twice, only to get a blue screen error in the middle of each run that forced me to reboot the computer and start over. The message began "A problem has been detected and windows has been shut down to prevent _?_ to your computer" (sorry, lost a word there). At the bottom it also says "Beginning dump of physical memory. Physical memory dump complete."

Finally got it to run in safe mode, but even then it said that I needed to reboot and scan again. It said it fixed almost all of the viruses. Some of the ones it found were:

InternetSpeedMonitor
Smithfraud-C
WildTangent
Virtumonde
Virtumonde.generic
Virtumonde.prx
Virtumonde.sci
Win32....Agent.aiae
The one ... Read more

Answer:Spybot didn't get it all;still getting random tabs opening in Mozilla plus errors

Solved it.
 

1 more replies
Relevance 74.62%

Internet explorer won't stop opening tabs unless I end the process.
Also the internet settings for IE keep changing to accept all cookies and I don't use IE ever.
While surfing the internet Firefox opens a new window to random websites or ads and sometimes blank pages with a changing url similar to these two:
(Urls are really long so I'll only post part of it)

Code:
http://77.93.75.150/dot.gif/?ver=120&cmp=profiling4&uid=
Code:
http://82.98.235.113/dot.gif/?ver=120&cmp=profiling4&uid=
I found this within the urls if it helps any.

Code:
www.google.com%2Fsearch%3Fq=rundll32.exe
Also when I shut down my PC an end task window appears labeled SuperMwindow
and when my PC boots up, a window appears saying:
Windows Drive not ready
Exception Processing Message
c00000a3 Parameters 75b6bf9c 4 75b6bf9c 75b6bf9c
asking me to continue cancel or try again
I'm new here and I don't know what's going on Please Help

I read the the first sticky and and downloaded Hijackthis
Here's the log:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:26:06 PM, on 1/27/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common F... Read more

Answer:IE tabs won't stop opening, FireFox opens up random sites

16 more replies
Relevance 72.57%

Hello, I've a new problem. Hope you guys can help me like you did before

Logfile of HijackThis v1.99.1
Scan saved at 22:04:48, on 03-24-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINDOWS\system32\hphmon04.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Verizon\Servicepoint\VerizonServicepoint.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\program files\zango\zango.exe
C:\Documents and Settings\Ronnie\Local Settings\Application Data\Google\SearchWithGoogle\SearchWithGoogle.exe
C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Prog... Read more

Answer:IE opens new windows and Firefox opens new tabs

9 more replies
Relevance 72.16%

Ok so i've noticed that firefox randomly will open ad pages in new tabs and redirect my google searches.

I have run complete scans with superantisypware, avira, spybot, malwarebytes, iobit security 360 and inbuilt windows malware scanner. Some of which came up with detections which i got rid yet the problem remains. I tried to restore my comp but it failed, obviously one of the malwares clever tricks.

Here is my DDS log. The attach.txt file is attached but i could not get the GMER rootkit scanner to work. It would complete the scan but as soon as i tried to save it it would give a blue screen and restart...not good i would say. So hence i dont have an ark.txt.

Really starting to worry. I read that these things are usually to direct internet traffic to specific sites to increase ad revenue for the malware people. I havn't done any internet banking cos i am not that foolish but is there much of a chance they will get control of my gmail or facebook accounts? How paranoid should i be in terms of infections spreading to other networked computers and external hard drives?


DDS (Ver_09-12-01.01) - NTFSx86
Run by Darren at 16:35:42.58 on Wed 13/01/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Professional 6.1.7600.0.1252.61.1033.18.3323.2523 [GMT 10.5:30]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system... Read more

Answer:Due to adware/spyware/malware firefox opens random tabs and google redirects pages

BUMP, please

12 more replies
Relevance 70.93%

I have done all the things Microsoft suggests, several times. What is going on here?I have Windows XP SP3. Thank you.[Error number: 0x8DDD0018] The site cannot continue because one or more of these Windows services is not running: Automatic Updates (allows the site to find, download and install high-priority updates for your computer)Background Intelligent Transfer Service (BITS) (helps updates download more quickly and without problems if the download process is interrupted)Event Log (keeps a record of updating activities to help with troubleshooting, if needed)To make sure these services are running:1. Click Start, and then click Run.2. Type services.msc and then click OK.3. In the list of services, double-click on Automatic Updates and then click Properties.4. In the Startup type list, select Automatic and click Apply.5. Verify that the Service status is started, if the Service Status is Stopped click on the Start Button.6. In the list of services, double-click on Background Intelligent Transfer Service (BITS) and then click Properties.7. In the Startup type list, select Manual and click Apply.8. Verify that the Service status is started, If the Service Status is Stopped click on the Start Button.9. In the list of services, double-click on Event Log and then click Properties.10. In the Startup type list, select Automatic and click Apply.11. Verify that the Service status is started, If the Service Status is Stopped click on the Start Button.

Answer:[Error number: 0x8DDD0018] Microsoft Update not working

Nevermind. I just resolved it myself. Thank you.

1 more replies
Relevance 69.29%

I was using my laptop for six months now and I didn't have any problem on the keyboard tabs. It was perfectly working. Two days ago, an automatic update from windows 10 has occurred and I experience a problem on my keyboard tabs when the update was completed. There are six tabs currently not working. These are the tab "zero", "backslash", "semicolon", "caps lock", "left arrow", "down arrow". Kindly give me an answer how to fix my keyboard tabs so that I can use my laptop keyboard completely.

Answer:Some of my laptop keyboard tabs are not working after a windows 10 update

Originally Posted by zarixrillera I was using my laptop for six months now and I didn't have any problem on the keyboard tabs. It was perfectly working. Two days ago, an automatic update from windows 10 has occurred and I experience a problem on my keyboard tabs when the update was completed. There are six tabs currently not working. These are the tab "zero", "backslash", "semicolon", "caps lock", "left arrow", "down arrow". Kindly give me an answer how to fix my keyboard tabs so that I can use my laptop keyboard completely. can you check in settings > language > keyboard whether the correct keyboard is installed? Is it American or Uk English keyboard?

1 more replies
Relevance 66.01%

Wife used computer and I saw a new window was opened rather than a new tab.

Now any time I click to open a new website (e.g. from a search) it opens a new window instead of a new tab. All Tabs settings were unchanged. I did a system restore, no joy. Reset IE, no joy.

Only way I can get around it is by selecting "always open popups in new tab", but then I get the tabs with the color bars. So it seems it thinks any new click is a pop up. Please help!

Answer:IE8 opens new windows insteadof tabs

  
Quote: Originally Posted by bru


Wife used computer and I saw a new window was opened rather than a new tab.

Now any time I click to open a new website (e.g. from a search) it opens a new window instead of a new tab. All Tabs settings were unchanged. I did a system restore, no joy. Reset IE, no joy.

Only way I can get around it is by selecting "always open popups in new tab", but then I get the tabs with the color bars. So it seems it thinks any new click is a pop up. Please help!


On a normal site: right click a hyperlink:
->open in new tab
->open in new windows
->open

all work as expected?

9 more replies
Relevance 65.6%

Having a problem I think is related more to Vista than IE7, from what I can find so far...

After browsing for a while, often opening new tabs or windows, the system refuses to open any more, EVEN THOUGH I HAVE CLOSED ALL PREVIOUS WINDOWS.

The number seems to be about 50. I have looked into this and it seems that is the max number Vista allows open at ONE TIME, but that is my limit even though I close windows/tabs after reading. Some counter is not reset, or port freed up??

Only a restart gets things going again, and then it will eventually happen again. I must go down to only one open window to even get the Start/Restart windwo to be able to pop up.

Have an Acer Aspire 5100, 2gig RAM, Vista home, IE7.

Much thanks,
Tom

Answer:Max Number Of Tabs Or Windows Used

Contrary to your presumption, I do believe that this problem is related to IE7, rather than the OS. I have encountered this problem on both my XP and Vista machine. My XP machine has 1Gig of RAM and my Vista machine has 2Gigs. I believe that the more RAM you have, the more windows and tabs you can get through before the freeze, because it seems I can do more on my 2Gig machine versus my 1Gig.

Although, it may be Vista related because of the unresponsiveness you mentioned. I wasn't perfectly clear on the part where you said you had to get to the Start/Restart window. Do you mean that your whole computer freezes up? Other programs and all? Because I have only experienced IE7 refusing to work, and it had little to no effect on the other programs I had running at the time.

So, you're saying that once IE7 starts screwing up, you need to restart the whole computer? Or do you just mean that you have to restart IE7?

The problem may be the way IE7 handles the RAM and Page File. Version 7 is relatively new, so it may have memory leaking issues and/or port issues.

You could always just download Firefox 2 and use that! It works beautifully on XP and Vista, even after I've gone through 300+ tabs!

5 more replies
Relevance 65.6%

Hello all,
I have run the procedures twice in the required scanning and cleaning steps. still, when i try to run Windows Update, i get the error number 0x8007043C and says the website has encountered a problem and cannot display the page you are trying to view. I am running Windows xp pro with sp2. any help is appreciated. thanks
 

Answer:re: error number in Windows Update

Sounds like you may be trying to run Windows Update from safe mode boot, which is not allowed.

Is this a correct assumption?
 

3 more replies
Relevance 65.19%

I had this happen before I re-installed my Windows. I was so sick of it that I backed up everything and re-installed only to find out the second after I re-installed this was still happening. I'm so frustrated with this. How could this come through a re-install? It doesn't make any sense. Is this a virus? What could this be?


.
DDS (Ver_2011-06-23.01) - NTFSAMD64
Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_26
Run by Jordan at 14:53:23 on 2011-06-25
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.4094.1480 [GMT -5:00]
.
AV: BitDefender Antivirus *Enabled/Updated* {50909708-FF80-02AF-F814-B28405891E92}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: BitDefender AntiSpyware *Enabled/Updated* {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\SLsvc.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Window... Read more

Answer:Whenever I click in browser it opens up ads in new tabs/windows

Hello, Welcome to TSF.
I'm nasdaq and will be helping you.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.

Please do not install or uninstall any programs, or run any other scanners or software, unless I specifically ask you to do so. Also please copy and paste logs into the thread, rather than add them as attachments.
===

Please download Malwarebytes Anti-Malware and save it to your desktop.[list]
alternate download link 2Make sure you are connected to the Internet.
Double-click on Download_mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware

Then click Finish.
MBAM will automatically start and you will be asked ... Read more

6 more replies
Relevance 65.19%

When I get to the part in the Windows 8 installer that it tells me what needs to come to my attention, instead of opening a little browser inside of the program as I guess it's trying to do, it opens up 2 tabs in whatever browser is my default. This would be fine if the buttons in the web pages still modified the actual installer, but they don't and therefore the installer is effectively stopped.
Here's what it looks like:
I read on another thread that making IE the default would fix it, but I tried that and it did not work.

I realize that a Windows 7 support forum might not be the best place for this, but I figured I would ask here first because I'm trying to updated from Windows 7.

Answer:The Windows 8 installer opens up 2 tabs in my browser

Have you tried removing MSE like it suggested?

9 more replies
Relevance 65.19%

When I get to the part in the Windows 8 installer that it tells me what needs to come to my attention, instead of opening a little browser inside of the program as I guess it's trying to do, it opens up 2 tabs in whatever browser is my default. This would be fine if the buttons in the web pages still modified the actual installer, but they don't and therefore the installer is effectively stopped.

I'm trying to upgrade from Windows 7 to Windows 8. Key word: Upgrade. I would like to avoid re-installing the OS altogether, but I can do that by myself if it comes to that.

Here's what it looks like:
I read on another thread that making IE the default would fix it, but I tried that and it did not work.

I also had a thread on the Windows 7 forum. They didn't resolve it, but you may go and see what was tried: The Windows 8 installer opens up 2 tabs in my browser - Windows 7 Help Forums

Answer:The Windows 8 installer opens up 2 tabs in my browser

I don't know if bumping works on this forum, but I assume so.
so, *bump*

3 more replies
Relevance 65.19%

Please help. no one has an answer. Windows Edge will, totally at random, open up hundreds of tabs going to Microsoft Edge Help.
Multiple virus scans and malware found nothing. Resetting Edge did not work. Resetting Window 10 did not work.

REINTALLING windows 10 from a DVD did not work. I am not sure if we reformatted the HD.

Any ideas?

I stopped using Edge and only use IE now but Edge will open by itself.

More replies
Relevance 65.19%

Please help. no one has an answer. Windows Edge will, totally at random, open up hundreds of tabs going to Microsoft Edge Help.
Multiple virus scans and malware found nothing. Resetting Edge did not work. Resetting Window 10 did not work.

REINTALLING windows 10 from a DVD did not work. I am not sure if we reformatted the HD.

Any ideas?

I stopped using Edge and only use IE now but Edge will open by itself.

More replies
Relevance 64.78%

I woke up this morning and started up my computer. When I opened up mozilla and began to surf a bit, a random command prompt window pops up, runs some dialog and then closes just as quickly as it began. The window keeps closing faster than I can read what it is doing but I was able to see that it said something along the lines of "mozilla/roaming profile" i think.....What is going on? I have good virus protection...at least I thought I did. This issue hasn't caused any problems, YET. Please HELP ME, before it DOES!
 
**Also, after reading the forum prep...I tried running the DDS software like it says...but kept getting a notification popup that says, "DDS is not meant to run in 'Compatibility Mode' this program will now exit." As far as I know, I never set my preferences to run EVERY program in 'Compatibility Mode'. Just a few specific ones. I checked the 'Advanced Settings' in 'Compatibility Mode Troubleshooting', but the 'DDS' program doesn't come up in the list of affected programs...I am a bit stumped at this point.**

Answer:Command prompt (Mozilla roaming profile?) opens randomly when using Mozilla

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/534057 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

2 more replies
Relevance 64.78%

I am trying to manually update windows on a small hp netbook, has always worked perfect, now seems to error out everytime. Have tried multiple fixes to .dll and reboot found over internetno luck any help appreciatedThanksError number: 0x80070420 The website has encountered a problem and cannot display the page you are trying to view. The options provided below might help you solve the problem. For self-help options: Frequently Asked QuestionsFind SolutionsWindows Update NewsgroupFor assisted support options:

Answer:windows update Error number: 0x80070420

This error indicates one of two related things: that the Windows Update service is not running or the Windows Installer platform is broken/not installed/out of date.Try this:Click on the Start button, then click on Run...In the Run... box, type cmd and press Enter.This will launch the Windows Command Line Shell (looks like DOS)In the Command Shell window, type the following and press Enter:net stop wuauservThen type this and press Enter:net start wuauservTry updating again.If that fails, then try this:Go to the Add/Remove Programs control in the Control PanelIn the list of programs, see if there is an entry for Windows Installer 3.1 (you will need to check the box that says "Show Updates")If there is an entry, then uninstall Windows Installer 3.1Visit the Windows Installer download page and download the installer.Run the installer to reinstall Windows Installer 3.1Reboot, see whether that fixed the problem.

5 more replies
Relevance 64.78%

i have xp with sp2when ever i try to update i get the error[Error number: 0x80072EE7] The website has encountered a problem and cannot display the page you are trying to view. The options provided below might help you solve the problem. For self-help options: Frequently Asked QuestionsFind SolutionsWindows Update Newsgroup For assisted support options: Microsoft Online Assisted Support (no-cost for Windows Update issues) Read more about steps you can take to resolve this problem (error number 0x80072EE7) yourself. i had removed static IP and also update folder all files, still i get this error.please help me to resolve the issue

Answer:(error Number 0x80072ee7) Windows Update

Hi .Have you seen this article?http://support.microsoft.com/kb/836941Louis

1 more replies
Relevance 64.78%

I get this error when I run Windows Update. I've repaired the Win XP on this system. I'm running a 2.8GHz Celeron processor, on XP SP1 and I'm trying to upgrade to SP2, but getting the error. I would like to be able to solve this without installing a fresh copy of Windows XP on this system, since it's our email server and is used constantly.
Many thanks!
-Semms
 

Answer:[Error number: 0x8024001E] on Windows Update

6 more replies
Relevance 64.78%

cant run automatic windows updates anymore.

Error screen I get is:

[Error number: 0x8007041D]
The website has encountered a problem and cannot display the page you are trying to view. The options provided below might help you solve the problem.

Manual installation works without a problem, also office automatic update works without a problem

PS recently cleaned my pc with spybot/spyguard/reg cleaner which I now have uninstalled.
 

More replies
Relevance 64.78%

When I open Windows Update I get a message that says it "encountered an error and can't display the requested page" the error number is 0x80072F78. All I want to do is run the Update to fix a DLL problem. Any ideas on how to fix this would be most appreciated!!

I am running Windows 2000 Professional, with Service Pack 3.
 

More replies
Relevance 64.78%

I'm having some problems updating my computer because I keep getting this error code 0x80072EFE from Windows Update. This never happened before because I just reformated my Windows XP and there seem to be some problems doing so because my pc can sometimes stop functioning altogether after going online and then using safe mode. I'm assume there's some malware or virus somewhere in my pc. Anyway of fixing this?

Answer:Windows Update Error number: 0x80072EFE

If you've only just reformatted XP and you suspect a virus already you might be better off reformatting again before you get too many of your programs back on there.Having said that, I don't know why you are assuming a virus. There are a lot of hits in Google if you use the string "0x80072EFE from Windows Update". Most seem to refer to connection issues and a Proxy Server. If you don't use one then it would be worth looking in IE > Tools > Internet Options > Connections > LAN settings button and make sure "use a proxy server....etc" is unticked.How to know you are getting old 6:You can't remember what it is that you have forgotten.

3 more replies
Relevance 64.78%

Hello evry time i try to run windows update on windows pro i keep getting this error.

[Error number: 0x80245003]

no matter what i cant seem to update any help would be greatly appreciated. thank you
 

Answer:windows update Error number: 0x80245003]

http://www.google.com/search?hl=en&lr=&safe=off&q=0x80245003&btnG=Search
 

2 more replies
Relevance 64.78%

No matter what I try am told something else; I need ie framwork 2 it then I am told; I need framwork 3.5; how can I download 3.5 if I can not download 2. micosoft said 99.00 $ to help; I do not have it. this is the only way I have to keep in touch with people out of state! Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Home Edition, Service Pack 2, 32 bit
Processor: Intel(R) Pentium(R) 4 CPU 2.66GHz, x86 Family 15 Model 2 Stepping 9
Processor Count: 1
RAM: 1015 Mb
Graphics Card: Intel(R) 82845G/GL/GE/PE/GV Graphics Controller, 64 Mb
Hard Drives: C: Total - 76285 MB, Free - 58468 MB; D: Total - 76285 MB, Free - 67614 MB;
Motherboard: Dell Computer Corp., 0G1548
Antivirus: None
 

Answer:windows xp update;Error number: 0x80244019]

flyingtolo said:


No matter what I try am told something else; I need ie framwork 2 it then I am told; I need framwork 3.5; how can I download 3.5 if I can not download 2. micosoft said 99.00 $ to help; I do not have it. this is the only way I have to keep in touch with people out of state! Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows XP Home Edition, Service Pack 2, 32 bit
Processor: Intel(R) Pentium(R) 4 CPU 2.66GHz, x86 Family 15 Model 2 Stepping 9
Processor Count: 1
RAM: 1015 Mb
Graphics Card: Intel(R) 82845G/GL/GE/PE/GV Graphics Controller, 64 Mb
Hard Drives: C: Total - 76285 MB, Free - 58468 MB; D: Total - 76285 MB, Free - 67614 MB;
Motherboard: Dell Computer Corp., 0G1548
Antivirus: NoneClick to expand...
 

3 more replies
Relevance 64.78%

i'm running windows xp with sp2 and i'm getting this error when connecting to windows update. the only things i can find about this Error number: 0x80072EFE is something do to with a ISA server but i'm pretty certain i don't have that.

can someone help :(

Answer:Windows Update: Error number: 0x80072EFE

Hi jasyn,
I found this and thought it might help.
http://support.microsoft.com/kb/885819/en-us
One of the workarounds should do the trick.
T.

2 more replies
Relevance 64.78%

Every time i try to update my vista i get this Error number: 0x80244019 in Windows Update, how do i fix this. Also been having problems updating pretty much anything that has to do with virus protection or spyware protection.
 

Answer:Error number: 0x80244019 in Windows Update

Google-search the error code. You will find TONS of solutions to try. You will also need the exact error(s) to help with your other problem.
 

1 more replies
Relevance 64.78%

I'd really like to see what the store has to offer but, I can't access it at all. It just gives me the "server stumbled" and the error code.
I also can't use my micorsoft account at all. Any pre-installed app that you can link an account to fails. I'm really at a loss.
I looked up some of the error codes and found plenty of companies willing to let you pay to "fix" the error.
HELP PLEASE!!

Answer:Store gives me error 0x80072eff

I'm having the exact same problem...

30 more replies
Relevance 63.96%

Hi Majorgeeks,
Post malware infection and successful cleaning, I'm in the process of protecting my computer using you 'How to Protect you computer from Malware' recommendations and I find that I am falling at the first hurdle. I can't install any Windows updates and I keep on getting the above error message. I trouble shot for the solution and it looks as if I need to go into the system 32 to check it out. I don't really feel experienced enough, so I'm wondering if you can help me out in any way possible.
Thanks,
Superdan
 

Answer:Windows Update Fail [Error number: 0x80070424]

This is really something you should work in the Software Forum if your PC has already had all malware removed.

However try the below:

Please click Start, Run, and enter cmd and click OK. This will open a command prompt window. Enter the below command at the command prompt and then hit the enter key.

%SYSTEMROOT%\SYSTEM32\REGSVR32.EXE %SYSTEMROOT%\SYSTEM32\WUAUENG.DLL

Now look for the C:\MGlogs.zip file and attach it no matter what happened while doing the above.

If that does not help, try disabling protection software while updating. And if that still does not work, I suggest that you continue in the Software Forum.
 

1 more replies
Relevance 63.96%

I have done four hours of research on how to fix this problem, but have yet to find a resolution... Also ,thanks in advance to whoever can help guide me into solving this.

I go to Windows Update (http://www.update.microsoft.com/wind....aspx?ln=en-us)
So, I click the button to install
image: http://www.zshare.net/image/60179527dd2818/
And everything seems to go okay... 2 screens flash by, stating:
Downloading: 100%
Installing: 100%
And then, after those, I get a page stating: The website has encountered a problem and cannot display the page you are trying to view. The options provided below might help you solve the problem.
image: http://www.zshare.net/image/6018019d903e34
And this is where I am stuck.
I do not have any Antivirus or firewalls. I don't have Spybot. I have the Automatic Updates and BITS services enabled. If there is anything more that you want to know, then feel free to ask.

Note: attached is my WindowsUpdate.log file. Hopefully this will help...

Again, thanks in advance.

Answer:[SOLVED] Windows Update error number 0x800A138F

Hi faia..do you have an OKI printer?

8 more replies
Relevance 63.96%

I am having problems connecting to Windows Update. Whenever I try to update the OS I get [Error number 0x8024D007] (See attached screenshot).

I have SP1 on my computer and I want to update to SP2 (I have heard there are still problems with SP3).

This computer was very infected and I received help on the Hijackthis Log Help forum. It is now "clean".

Here is the link to my thread on the HijackThis Log Help Forum:
http://www.techsupportforum.com/security-center/hijackthis-log-help/258992-uninstalling-malware-ie-hijacking.html#post1534002

OS: XP Home Edition Version 2002 SP1
IE: 6.0.2800.1106.xpsp1.020828-1920

If someone could take a look at this I would appreciate it.

Answer:[SOLVED] Windows Update Error Number 0x8024D007

Hello nasirabd,

I suggest you try this workaround for Windows Update issues...

How to Repair the Windows Update Files.

1. Go Start > Run.
2. In the box type REGSVR32 WUAPI.DLL > Enter.
3. A message saying, "DllRegisterServer in WUAPI.DLL succeeded" will appear > OK.
4. Now it is necessary to repeat these steps for each of the following files commands:
Hit Enter after each line

REGSVR32 WUAUENG.DLL
REGSVR32 WUAUENG1.DLL
REGSVR32 ATL.DLL
REGSVR32 WUCLTUI.DLL
REGSVR32 WUPS.DLL
REGSVR32 WUPS2.DLL
REGSVR32 WUWEB.DLL

Once finished; since the temporary folder of Windows Update may be corrupted, please carry out the following steps to rename the folder:

1. Go Start > Run > in the box type cmd > Enter.

Type the following command in the open panel.

net stop WuAuServ

(Please Note: the computer may need to be rebooted before the net stop command will work.)

2. Go Start > Run > type in the box %windir% > Enter.
3. In the opened folder, rename the folder ( by Right clicking) SoftwareDistribution to Sdold.
4. Go Start > Run > type in cmd > Enter. In the open command pane, please type:

net start WuAuServ

Once that?s done, Go Start > All Programs > Windows Updates and see if it will allow the downloading/installation of Windows Updates.

Post back with the results.

Kind Regards,

19 more replies
Relevance 63.96%

Hello All

I am having trouble receiving windows updates, as I am getting this error message: Error number: 0x800704DD

I read this thread prior to posting:
http://forums.majorgeeks.com/showthread.php?t=187811

I also followed the microsoft suggestion on this page:
http://support.microsoft.com/kb/968001

I initially found out that I did not have permission to edit the registry. I got that fixed, which revealed that I had the keys and keys values that were requested from the link above. I have checked several links and forums from other sites as well.

The only thing I didnt tried fully was to rename my Notify folder to "Notify_Disabled" and rename my Notify_Disabled to "Notify". I say "fully" because when I did make the changes, my newly "Notify" folder (previously the Notify_Disabled folder, which did not have anything in it) received a subfolder name "SensLogn" which is the same folder that must be edited as suggested in the microsoft link above. At this stage, I did not rename the Original Notify folder to "Notify_Disabled" in fear of having to make all the additional folders over, including key values that are inside of those folders. Hope this make sense.

I even called the free Microsoft help hotline, which resulted in about 2 hours of trouble shooting, but no fix.
 

Answer:Can't access windows update: Error number: 0x800704DD

Do you have automatic updates enabled as suggested in the 'workaround'?

It may not relate to this error, but, are all the relevant microsoft websites listed under trusted zones in 'internet options'?
 

5 more replies
Relevance 63.96%

When trying to run windows update, I come up with an error number 0x80070424. I have tried to find help with this issue on the website but no luck. Anyone have any suggestions??? Thanks in advance.
 

Answer:WIndows update failed Error number 0x80070424

Have you been here:http://support.microsoft.com/default.aspx?scid=kb;en-us;830086
 

1 more replies
Relevance 63.96%

Will it be ok to say that you are facing Mozilla Technical Issues? Dial our Mozilla Customer Support Number anytime when you are facing following challenges in your web browser:-?   Installation & Up-gradation Issues.?   Flash Player not working on Mozilla.?   Deletion of Temporary files error in Mozilla.These are few examples of issues that may occur in your Mozilla Firefox web browser. Don?t stress more just dial our Mozilla Customer Support toll-free number anytime when you need.http://www.email-helpnumber.com/mozila-firefox-support.html

More replies
Relevance 63.96%

Hello all,
This is my first post and I hope I am following all protocols correctly. Being the typical guy I have been trying to solve this issue on my own for months and I am unsuccessful. My issue is I have a Dell Inspiron 640m and currently running Windows XP. Internet Explorer will pop up a new window every minute and eventually freezing. I usually use Mozilla Firefox but I have the same issue there where it actually pops up new windows and tabs that have links to antivirus websites. The popups are a lot more frequent on firefox than IE, so I've been using that more often. Any assistance would be greatly appreciated. I have Hijack this if I need to attach a log of what comes up. I can hardly get any work done on this laptop due to the annoying pop ups, please help!
With gratitude,
saxgrove

Answer:Mozilla Firefox and Internet explorer keeps opening new windows and tabs.

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

5 more replies
Relevance 63.96%

Hello,
 
I recently removed 2 instances of recurring malware ( I removed it and the following day it was back again, removed it again and it came back again) and an instance of recurring spyware off of my Windows 7 pro 64 bit PC with Spybot before removing an additional  piece of malware with Norton Internet Security. I ran a full scan with McCafee before this but it didn't detect anything (Mcafee did find something with its real time protection everytime I tried to remove and resinstall Firefox) that Spybot hadnt found already, so I decided to run some free scans from other antivirus platforms from the internet. Norton found some things so I switched over to Norton. I also ran Microsoft Safety Scanner and Norton Power Eraser neither of which found anything.
 
I am continuing to get popups and when i click on links in Firefox I continue to get multiple windows and tabs opening. I am running the most current version of Firefox from the Mozilla website. This makes me think that I might still be infected.
 
I'm sorry I did not record the names of the malware that were giving me problems. If they come up again I will post them.

Answer:Firefox opens multiple windows/tabs after malware removal

 Get the free version of Malwarebytes, get it up to date, then boot to Safe Mode and do a full system scan with it and your antivirus.  This could run for a couple of hours.
 
 As for the multiple tabs, just get the ones you want, then press ALT-t and click Options -> Use current pages.
 
Good luck.

2 more replies
Relevance 63.96%

I have been getting re-directions in Mozilla which I thought I had repaired with Avast, SuperAntiSpyware, and Malware, which removed Trojan.Agent/GenC:\WINDOWS\MBR.EXE , and repaired Java files. The re-directs either take me from my email tab to a new site or open a new browser window. The latest redirect is:

hxxp://www.theclickcheck.com/?sub=48785&rm=aHR0cDovLzEwMDI1XzQ4Nzg1LmFkbWFya2V0cGxhY2UuY29t&pub=10025&cid=1240788163&ds=aHR0cDovL3JlYWxlc3RhdGUuYW9sLmNvbS9ibG9nLzIwMTAvMDkvMjgvY2FuLWZpeGVyLXVwcGVy%0Acy13b3JrLWZvci1maXJzdC10aW1lcnMvP05DSUQ9QU9MQ09NTXJlMDBiYW5ucGFpZDAwMDU%3D

I only detected the Hupigon virus during a startup scan with Avast, which states cannot remove it because the "file is too large." Scans with Malware or SuperAntiSpyware did not show the virus. During a start up scan with Avast, I received the following:

C:\hiberfil.sys Threat: Win32: Hupigon-ONX(trj) Error the file was not moved to chest.

I cannot log into one of my credit card sites with Mozilla, but am able to with IE. Only other problem seems to be "auto run" has been disabled as when I put in a CD or a flash drive, it not longer gives pops up choices of what programs I wish to open it with.

Reading about Avast at their forums I have found a lot about false positives with Hupigon, but no real advise on how to remove it. Another problem is that my computer never shipped with set-up disks, so a full formatting will be an issue, although al... Read more

Answer:Mozilla redirects and opens new windows

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

41 more replies
Relevance 63.55%

My windows update indicates that some files are missing.  I select reinstall and I get this error.  How do I correct this? -sp

Answer:X60s Windows update will not load Error number: 0x8024D007

Welcome to Lenovo's forums!   First, please check in c:\windows\system32\ and look for a file named WindowsUpdate.log right after you run Windows Update.  Scroll down to the bottom and see what the specific error is.   I have cleared odd Windows Update problems by doing the following:1:  rename c:\windows\system32\softwaredistribution to something else2.  delete c:\windows\system32\WindowsUpdate.log or move it somewhere else. Let us know what happens after you try this and what the specific error is.   

1 more replies
Relevance 63.55%

Hi, I'm working on a friends computer and cannot get updates from Microsoft Windows Update site. The computer was infected with a virus, but was able to clean it up as far as I can tell. The machine is an eMachine T6450 running Windows XP Media Center. I was going to perform a system recovery using the Recovery Partition on the hard drive. Apparently when the manufacturer created the "Recovery Partition" some of the required files were not included and and require a Recovery Disc set to be used during the Recovery operation. The owner of the computer no longer has the Recovery CD set so I could not perform a successful System Recovery. I did however perform a repair on the Operating system by using my Windows XP Professional installation CD. Everything works great except for the errord code from Microsoft when attempting to download Windows Updates. The error message I receive is

"Problem with windows update -- error number 0x8007043B"

From what I've been able to find out the problem seems to related to not having a current version of Windows Update Manager installed or the service is not started. On the troubleshooting steps Microsoft instructs me to open up and verify that the Automatic Update Service is started. I checked the service and Automatic Updates is not currently started. I tried to start the service and I received te following error message:

"Error 1083
The executable program that the service is configured to run in does not im... Read more

Answer:[SOLVED] Problem with windows update -- error number 0x8007043B

Go to wondow update site and download and install the latest version of windows installer. Good luck

4 more replies
Relevance 62.73%

Hello,

I went to windows update home and tried to download the express updates, but I got Error number: 0x8007041D.
Anyone have any ideas how to fix this?

Thanks
Dermont

Answer:Error number: 0x8007041D.-- Can't install windows update softwear to get new updated

Did you check this

http://support.microsoft.com/kb/902322

25 more replies
Relevance 61.5%

Hello community! I have a question, and considering how amazingly unable to find information on the internet I have been, I am not holding out a lot of hope in finding an answer here either.  But I figure I should try all the same. I have an E430 (3254-CTO) which has a Core i5-3210M.  As you can tell from the model number (or the title of my post) this is a processor of the Ivy Bridge generation.  Recently I wanted to make use of a specific feature of my processor that is said to have been a new inclusion in these processors. Intel code named the technology "Bull Mountain" and basically it is a hardware based random number generator.  It is said to be able to produce >500MB/s of random data.  This is used primarily in cryptography, and in Linux at least, should be accessible via /dev/hwrandom.  I know for certain that my processor has this capability, and I really feel like I was able to leverage this functionality in the past. For those familiar with Linux, when I try to modprobe intel-rng, I get:    modprobe: ERROR: could not insert 'intel_rng': No such device So I'm curious if any other E430 who also have a Core i5 3rd gen or better (any 3rd gen i7 will have this as well) knows about this and if it works for you.  Honestly, I think that I lost this functionality after a bios update, but I am not certain.  It did not dawn on me to actually try to keep track of this. I have the lastest av... Read more

More replies
Relevance 60.68%

OS: Windows Vista, SP2
Symptoms:
1. Clicking on a link, redirects me to a random site, often appearing malicious in nature. This happens in both Firefox 3.6.3 and IE 8. It does not happen all the time. Clearing the Cache and Cookies makes the problem go away temporarily.
2. Unable to run Windows Update. I get the following error:
Code 80072EFE Windows Update encountered an unknown error.

Failed attempts at fixing this:
Malwarebytes 1.46 - quick scan
AVG Antivirus 9.0.829, virus DB version 271.1.1/2938 - Scan whole computer
Below is the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:06:38 PM, on 6/14/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\Bluebeam Software\Brewery\V45\Printer Support\BBPrint.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Palm\Hotsync.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper... Read more

Answer:Random link redirects and Windows Update not working

14 more replies
Relevance 60.68%

Hi all Thanks for reading, hope you can help.... at the tearing my hair out stage now... Been looking at my dad's PC (WinXP), it had Avast on it but that was unable to update - couldn't find server.That got removed and switched for AVG. Also Trend's online scanner, bitdefender online, avg anti-spyware, spybot, superantispyware, hijackthis.. probably some others have been run... they found a few bits and have removed them. I also manually removed several dodgy looking startup processes living in temp folders with dodgy names. I think something had got in via and old java runtime so unsintalled java cleaned it up and installed the latest version. NSlookup gives me my router ip (192.168.1.254) as the dns address, and i've checked control panel and registry for dns settings so satisfied it's not a dns hijack. Hosts files look clean also. So current situation as far as i've seen is that:1) Windows Update not connecting, through IE it gives a Internet Explorer Cannot Display this WebpageNSLookup windowsupdate.microsoft.com resolves as 207.46.18.94http://207.46.18.94/ redirects to http://update.microsoft.com/windowsupdate/v6/default.aspx which also says the above error (but its a page further)NSLookup update.microsoft.com resolves as 65.55.25.60http://65.55.25.60/windowsupdate/v6/default.aspx gives the same error. It seems though that anything in IE *OR Firefox* mentioning windows update (in the title bar?) gets this error, eg:http://www.google.co.uk/search?... Read more

Answer:Windows Update not working, Random Pages Hijacking...

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs unless I ask you to.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.:run combofix:Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/combofix/how-to-use-combofixPlease ensure you read this guide carefully and install the Recovery Console first. The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more eas... Read more

9 more replies
Relevance 60.27%

i have the latest version of Mozilla Firefox... when i click on that Red Circle W/ The Arrow icon in the upper right to install a new "Critical" updates (Firefox 1.0.3 Software Update), the downloading screen just remains idle and nothing happens....

i could not find where to download this critical update on the update.mozilla.org website...

thanks for any help in advance...
 

Answer:Mozilla Update Not Working...

on a side note.. how can i disable JavaScript... i was reading an article on Yahoo News today about Critical Security Flaws identified w/ Mozilla Firefox... they recommanded disabled Javascript until patches were released...
 

10 more replies
Relevance 59.86%

After an automatic update attempt recently, my Mozilla browser will open but no functions will work. When trying to manually update, the following is displayed:

AUS: Update XML File Malformed (200)

I have attempted to uninstall, reinstall, run with new profile, cleared cookies, system restore, saved Mozilla installation download to USB drive and install from that location and none of these solutions worked. To make matters worse, my Internet Explorer (IE7) has been inoperable for months. I do have internet access as Buzzsaw and other internet based programs run properly and the modem will power other cpu, etc. The IE 7 issue is similar, I go to open up the browser and it simply states "page cannot be displayed" even when there is internet available and does not matter which site I attempt to go to. I have run out of options here and need some assistance to get one of these browsers to operate as now I have no internet access on this computer and cannot even download another browser to begin. Please advise if anyone out there has a solution short of reinstalling windows. Thanks.
 

More replies
Relevance 59.45%

Over the weekend, my computer suddenly started exhibiting several symptoms:
Random redirects when I click a Google link
Random tabs opening when I don't click anything
Avast! will display a "Malicious URL blocked" message even if my browser isn't open, saying it's coming from svchost.exe
Avast! will detect a Rootkit. I did the full reboot/scan, but it still detects this. I don't think that it's popped up again since I limited the size of the TEMP folder to 20 MB, though.
I'll get a "Generic Win32 Service" error when I start up, and I will shortly be disconnected from the Internet.
Thank you in advance for any help that you can provide.

==================================================

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:39:42 PM, on 1/25/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WTouch\WTouchService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\WTouch\WTouchUser.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\arservice.exe
C:\Program Files\Bon... Read more

Answer:Random google redirects, popup tabs, generic win32 error, rootkit, malicious url

I was unable to post the GMER in the OP because of character limit, and now the forum times out when I try to post the GMER.
Is there anything I can do to remedy this?
 

2 more replies
Relevance 59.04%

My PC trys to update to the newer version of windws 10 number 1607 from number 1511 which was the free version of the upgrade to Winodws 10. The PC crashes and then reinstalls the old version of Windows 10 number 1511 apparently becuase the HP driver doesn't support Windows 10.  I looked on this website and there is no driver for this PC for Windows 10. Does HP intend to issue a driver so this PC can be updated to Windows 10 number 1607? If not Microsoft says they are preparing drivers for the unsupported PCs. Has anyone had any experience with using the Microsoft drivers to replace the HP driver? Was the subsitution sucessful?

More replies
Relevance 58.63%

I've been for about 3 whole days trying to figure out how I can fix this problem. I currently have a virus, all I know is it is a Backdoor.0Access virus, runs in processes and refuses to be ended, I got it from a website, it constantly slows my internet browser and redirects me, slows my entire system to the point where it is unusable without restarting, and it will also recreate itself after I remove it with Malwarebyte's Anti-Malware. I have no idea where to go at this point, and I'm usually really great with computers, but this has stumped me. The virus is in the processes and goes by random number:random number.exe but specifically 1480112258:2101856167.exe and it will not ever leave. I have tried almost ever conceivable idea to get rid of this. So now that I am at wits end, I come here.

I haven't really posted in a computer help forum for a great deal of years, and I know that the dxdiag is a lot of info so if I need to post that I will.

Really if there is anything I can do, I'm all for it but I REALLY do NOT want to have to restore my computer. I've been modding a game for a while now and restoring the computer would trash everything up and make everything a lot more difficult.

Thanks in advance.
 

Answer:random number:random number.exe keeps resurrecting itself after removal

Welcome to the Malware Removal Forum.

I want you to run TDSSKiller so refer to the below for how to do so.

TDSSkiller - How to run


Please also download MBRCheck to your desktop

Double click MBRCheck.exe to run (vista and Win 7 right click and select Run as Administrator)
It will show a Black screen with some information that will contain either the below line if no problem is found:
Done! Press ENTER to exit...

Or you will see more information like below if a problem is found:
Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:

Either way, just choose to exit the program at this point since we want to see only the scan results to begin with.
MBRCheck will create a log named similar to MBRCheck_07.16.10_00.32.33.txt which is random based on date and time.
Attach this log to your next message. (See: HOW TO: Attach Items To Your Post )

Then continue on with the below:

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide


and attach the requested logs when you finish these instructions.

**** If something does not run, write down the info to explain to us later but keep on going. ****
Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.


After completing the READ & RUN ME ... Read more

6 more replies
Relevance 58.63%

Dell Inspiron N4110, Windows 7 Home, purchased 2010.

PXE-E61 error msg. Checked boot order. Constantly reverts to the Boot Order screen when not active for a few hours. Have to reboot numerous times (sometimes many, sometimes just a few) before it randomly boots up successfully. Very suspicious it's a hardware problem. Any guidance would be greatly appreciated. Hate to throw this laptopaway; it works well when it's up and running.

Thanks.
 

Answer:PXE-E61 error: Dell laptop reboots, but after random number of attempts

11 more replies
Relevance 58.22%
Question: Mozilla tabs

When I open a number of tabs, I thought you could save the tabs by clicking on bookmark this page after all the tabs are open that you want to revisit. I put the "saved page" on my personal toolbar folder across the top. When I close Firefox, and reopen, the bookmark (presumable the 3 tabs) only has one tab there. What am I doing wrong?
 

Answer:Mozilla tabs

Are you checking the box that says "Bookmark all tabs in a folder"?
 

5 more replies
Relevance 58.22%
Question: mozilla tabs

i used to have tabs open in firefox when i opened the browser. now it doesnt have the tabs toolbar unless i go to file >> new tab. i know its possible because i used to have it like that, but now i dont.
 

Answer:mozilla tabs

i hate ram said:

i used to have tabs open in firefox when i opened the browser. now it doesnt have the tabs toolbar unless i go to file >> new tab. i know its possible because i used to have it like that, but now i dont.Click to expand...

Have you upgraded to a new version? What version are you using? Click Help>About and copy/paste the version if you have any questions after the following please.

Go to Tools>Options>Advanced and see if 'Hide the tab bar if only one site is open' is checked. If so, remove the check. That will keep the tab bar visible. You may need to close and restart Firefox. If it is checked, middle clicking a link will bring the tab bar back into view.

Have you installed any new extensions or themes? Did you have multiple Home Pages set up to open in tabs when you launch Firefox, and now they don't work?

Any additional information you can provide would help solve your issue.
 

3 more replies
Relevance 57.81%

Dear All,
 
Is anybody have an issue where windows and tabs, are loading in a random order on Firefox 20?
 
Instead the order you want, being sure of course that the first window is selected at shutdown, using the exit command?
 
And of course, selecting the remember tabs and windows option.
 
Please write back
 
Sincerely,
Cnon

More replies
Relevance 57.4%

Recently i've been having tabs appear while browsing the internet using mozilla. I've ran AVG anti-virus, Ad-Aware and Spybot but nothing seems to be doing the trick. I've posted my hijack this log. Thank you
 

Answer:Mozilla Popup Tabs?

anybody?
 

2 more replies
Relevance 57.4%

i use mozilla firefox.

i want links and bookmarks to be opened in a new tab not anew window, i tried to set it in 'options' but in vain .

can antbody help me out

More replies
Relevance 57.4%

There are ads all over the page I'm looking at.  Coming from specific words.  Opening new tabs, and new windows.
 
I have noticed words like companion, interyeild, mrktads.
 
Please help
 
Using windows 7 home premium and Firefox
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Mum (administrator) on MUM-PC on 04-04-2015 10:26:13
Running from C:\Users\Mum\Downloads
Loaded Profiles: Mum & InfoSmartDB (Available profiles: Mum & InfoSmartDB)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(COMODO Security Solutions) C:\Program Files\COMODO\COMMON\COSService.exe
(Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Post... Read more

Answer:Ads everywhere,opens new tabs and new pages

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.start

CloseProcesses:

HKLM\...\Run: [] => [X]
HKU\S-1-5-21-4291750648-2326010913-3213065728-1001\...\Run: [AdobeBridge] => [X]
SearchScopes: HKU\S-1-5-21-4291750648-2326010913-3213065728-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR Extension: (news.net) - C:\Users\Mum\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmbbgcooaabknohabmoaikiakkoignai [2013-07-13]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-12-02]
S3 Lavasoft Kernexplorer; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [X]
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
C:\Users\Mum\AppData\Local\Temp\CB_setup.exe
C:\Users\Mum\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Mum\App... Read more

52 more replies
Relevance 57.4%

I have Windows 8 and, of course, IE10. I have Google set as my home page and when I open IE it always opens up with Google as it should. However, for the past few days, along with Google, it always opens with a tab called, "Ten Must-know-windows 8 features." When I click on Tools/Internet Options in the box at the top where it has the home page that I want, it has Google at the top and just below that it has the ," Ten Must-----" web site. I can delete the one that I don't want, but the next time I open IE, that tab is still there. I even went to the Tabs settings and made sure it was set to default. I restarted my computer and it didn't help. I then went to Advanced settings and reset to default setting. That made it worse. It now opens Google, and an extra Google tab along with the " Ten Most--most" tab. I have been using IE for quite some time and this is the first time it has happened. It's not a big problem, but it shouldn't be doing that.

Answer:IE 10 always opens with extra tabs

Hello Frank,

Odd, you might see if using the tutorial below to specify and prevent changing the home page may work as a workaround for this until a better solution is found.

Internet Explorer Home Page - Specify and Prevent Changing - Windows 7 Forums

The home pages for IE10 are saved in the registry locations below. You might also check there to remove the "ten must" entry.

Current User:

(Main Home Page)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Start Page string value (right pane)
(Secondary Home Pages)
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
Secondary Start Pages string value (right pane)
OR

Applied to All Users (overrides above):

(Main Home Page)
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main
Start Page string value (right pane)
(Secondary Home Pages)
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main
Secondary Start Pages string value (right pane)

3 more replies
Relevance 57.4%
Question: IE10 opens 2 tabs

IE10 has been opening 2 tabs in the last few days. I don't want 2 tabs to be open unless I specifically do that. I have already checked Tools/Internet Options, and only the home page I want is listed there. I have already restored defaults and restarted the computers-twice, but it's still opening 2 tabs when I open the browser. Please-how do I make it stop?!

Thanks.

Answer:IE10 opens 2 tabs

Gretch, Welcome to the windows 7 forum.

What are the url's that are on the two tabs?

Also, sometimes making the changes in the control panel for internet options will solve that problems. Might be a bunch of carriage returns in the options..

Rich

9 more replies
Relevance 57.4%

OS Vista Ultimate
IE7 has started to open new websites in new tabs without any input from me. These are generally websites that I have not visited before but sometimes are similar to websites I am curretly viewing (when looking at a sports website a gambling website has opened in a new tab). I live in France but everything on my PC is English but most of the websites that open up are French language (my home page is www.orange.fr). Can anyone help?

More replies
Relevance 57.4%

On my Vista laptop since the past 3 months Chrome open with FOUR tabs - Yahoo, AVG, Google & about - now this happens only on this laptop even though I have my settings to open with Google and have that as default search tool. What am I missing? It may have been some previous software which I do not remember but which I uninstalled. What to do?
Thanks.
 

Answer:Chrome opens with FOUR tabs

in your settings page
goto

ON STARTUP
what are you settings there
if you goto
"Open a specific page or set of pages. Set pages"
click on set pages - what pages are set
 

1 more replies
Relevance 57.4%

After lauching IE, it opens up 2 tabs. How do you disable this?

I cant seem to find this.
 

Answer:Solved: IE opens 2 tabs

Select only one homepage.
Go to Tools> Internet Options & in Home Page Delete any one of the link that you dont want to open.

OR
Go to any of your favorite site e.g. www.Google.com, click the drop down button next to the Home icon & select Add/Change Home Page & then select 1st Option i.e. Use this as your only homepage.

Hope this helps
 

2 more replies
Relevance 56.99%

Had a bad storm last night, so I shut down the comp. Restarted this a.m. tried to stream the Arsenal match and mozilla would crash every time I tried to leave the home page. Went to IE, watched the match, and then began to TS moz.
After a bit I decided to unistall. Upon trying to reinstall i get a corrupt file error msg during extraction. I then tried to d.l. Chrome and had problems w. that too. Yet amazingly enough, IE works fine. Is this Microsoft just f'in w. me 'cause I'm not amused?
I also notice that in my start menu I have no quick select icons for network connections, control panel, etc. any help would be great. thx.

Mobo: Biostar A880GU3
CPU: AMD Phenom II 965
GPU: ATI HD 5770
PSU: Corsair 750w
RAM: 4GB (2x2) DDR 3
HDD: WD 320gb
OS: Win 7 Pro 64bit

Answer:Win7 update = Mozilla constant crash & Win explorer has stopped working

Hello and to bleeping computer!

I'm guessing by the topic title that you ran a windows update before shut down? Did it install before you shut the machine down? Also do you have any virus/ malware protection installed?

2 more replies
Relevance 56.99%

Hey Everyone!

I need some help!
I have about 200 computers with in my company that i manage. Everyone is complaining the the commuter is running slow! After researching it and looking at each computer 99% of them wold have 3 to 5 ie browsers open at a time with abut 9 to 15 tabs each (some less). I would like to manual set the max number of tabs to say no more then 10.

I found something on line a while back that told me how to do this in ie 10 but i can not find it now.
If i remember right they had to change a value or add something to the registry using regedit.

Can anyone help me out.

Thank you in advance!

NOTE: 99% of these computers are windows 7

Answer:IE 11 Set Max number of tabs

Might see if a couple of choices here might help:

2 more replies
Relevance 56.99%

Origin: I believe this all started when I tried to download a first row sports app, almost a week ago. There was tons of extra addons and one I missed was something along the lines of BackupMyPc, or something like that.
 
Steps Taken: So far I've uninstalled both programs, firstrow and BackupMyPC, using Revo Uninstaller (those were the only programs I noticed). I have also ran scans in HitmanPro, and Emisoft Anti-Malware. Both turned up with a few risks and I believe they removed them. I also ran CCleaner but I don't know if that's even relevant.
 
Current Issue: I still, at seemingly random times, have a new tab open if I click somewhere on a page, it doesn't have to be a link, just anywhere. The tab that opens sometimes most often has a really long URL starting with 123srv.com. An example: http://123srv.com/ads-clicktrack/click/newjump1.do?affiliate=63801&subid=1049999&terms=internet%20reddit.com%20reddit%20reddit.com%20vote%20comment%20submit&ai=lSUKl2NfJuY_q5FusjZQHQmx0aHSezZC_1pt7p2pa4jtg1_mScv_Vy3jpiqDKdF8-g6kkNoKhxu2uZWb8Hn8PDpX48S7-PLwhh2g1nUYie25Nfm3oZmInl4UFm-B_lkssho1Wp7-4apAda1JpUpkreAog4bvg1UpuLd_V3ZTqnvF3LOZnL37iKMlwCV8dBaOjfKVEnLDzT7StCli17D7wQqwdmOeKRYRlaZpAraeSFGEJbcaLGaIFDQVOigCniIcHyJq-LPEa3uMbbZl8n1cibSI-lwVfpax6ThRbCAabW9bcubz_Y_006T9l5lvqEuOO1FApaottSXVoxwbDZcE94z78NBDh4YZn9cBK6yZCTio4l2PBj1l9DxH8e8Da4bdJWzICyy6aCMNYoVy6Z7TBOZqb02c5GzTy3AJns_n5f-2GmavGFANiranuJ6sJp7iKIstNMOqik7FWzozVcEIv3AvKKPuIVH_599sC1cs1sSUETmp_K_tzP_E5OVzbcEQ1R0... Read more

Answer:New Tabs Opening With Seemingly Random Clicks. Firefox, Windows 8.

I have been having the same issue. I found a plugin that I did not add to firefox called v-bates and could only disable it, once disabled the problem seems to have quit. I also went to add and remove programs in windows and found v-bates installed on my computer, so I uninstalled it. If you could check and see if that v-bates thing is on your computer we may have found the issue.

2 more replies
Relevance 56.99%

Greetings!Although I only recently noticed the magnitude of the problem, all updates of my 32-bit version of Windows Vista have failed for the last two months. The only attempted installations were Definition Updates for Windows Defender, and each resulted in a Code 8024402C error. Following instructions in the Microsoft Knowledge Base, I reset my proxy server through the command prompt (netsh winhttp reset proxy, net stop wuauserv, net start wuauserv). However, my current WinHTTP proxy is set to "Direct access (no proxy server)" and it therefore seems to have had no effect. I have also enabled "Automatically detect (LAN) settings" in Internet Explorer, but this did not resolve the issue either.I suspect this may have something to do with a scareware program I was sucked into installing a while ago (I do not remember what exactly it was but it did warn me, among other things, about a particularly high internal temperature). Once I realized what it actually was, I uninstalled it and cleared all the suspicious files I could find from my hard drive. Despite my efforts, unfortunately, Internet Explorer began to act strangely, with the IE window and snatches of what seemed like online streaming radio loading randomly and spontaneously. I uninstalled and reinstalled IE, which seemed to make the streaming go away, except IE still sometimes tries to flood my screen with pop-ups all pointing to the URL hxxp://bl8yl8rahh6lii1eudy5zif8/.I wanted to run a scan wit... Read more

Answer:Windows Update Error (8024402C), Random Internet Explorer Pop-up Flooding

Hello,And welcome to BleepingComputer.com, before we can assist you with your question of: Am I infected? You will need to perform the following tasks and post the logs of each if you can.Malwarebytes Anti-MalwareNOTEMalwarebytes is now offering a free trial of their program, if you want to accept it you will need to enter some billing information, so that at the end of the trial you would be charged the cost of the product. Please decline this offer, if you are unable to provide billing information. If you want to try it out, then provide the billing information.Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program bef... Read more

5 more replies
Relevance 56.99%

Hey Guys, first time posting here so hopefully this can be cleared up easily. ( I have Windows 7 64xBits Home Premium and More info is under my profile.)

I have been getting random BSOD's for quite a while now and I am at my wits end. Sometimes it occurs right away, say when I open up Photoshop when I am deep into work, at other times it will be quite a while before it happens, in either case, I mostly get either "Error Memory Management" or "page_fault_in_nonpaged_area", and sometimes I get other cases similar to that or non listed. I have run Memory Checks when I restart my computer but it turns up nothing, however, I have run SFC Checks that have yielded some files that I cannot fix, and I posted those below. I don't know what causes it because it comes out of nowhere most of the time.

When I try doing a Restart and Error-Check the Drive, it will give me a Blue screen of death around 4% mark, which a while back did not happen. This happens every time I schedule a disk check and it will go on a loop like that for hours. I have looked a various threads but I feel a bit overwhelmed, any helped can be appreciated, thanks.

Answer:Random BSOD when working, Error-Checking Drive Failure, Windows 7

Take memtest. Run for 8 passes and test each stick in a know good slot for an additional 6 passes.
RAM - Test with Memtest86+





Quote:
The goal is to test all the RAM sticks and all the motherboard slots.

Check your motherboard manual to ensure the RAM sticks are in the recommended motherboard slots. Some motherboards have very specific slots required for the number of RAM sticks installed.

If you get errors, stop the test and continue with the next step.

1. Remove all but one stick of RAM from your computer (this will be RAM stick #1), and run Memtest86 again, for 7 passes.*Be sure to note the RAM stick, use a piece of tape with a number, and note the motherboard slot.
If this stick passes the test then go to step #3.

2. If RAM stick #1 has errors, repeat the test with RAM stick #2 in the same motherboard slot.*If RAM stick #2 passes, this indicates that RAM stick #1 may be bad. If you want to be absolutely sure, re-test RAM stick #1 in another known good slot.
*If RAM stick #2 has errors, this indicates another possible bad RAM stick, a possible motherboard slot failure or inadequate settings.
3. Test the next stick of RAM (stick #2) in the next motherboard slot.*If this RAM stick has errors repeat step #2 using a known good stick if possible, or another stick.
*If this RAM stick has no errors and both sticks failed in slot#1, test RAM stick #1 in this slot.
4. If you find a stick that passes the test, test it in all the other motherboard ... Read more

2 more replies
Relevance 56.99%

mozilla has only recently started to hang when I have too many tabs open, even occasionally with only one tab open.

I have run spyware, registry repair.

problem still exists.

running win xp professional 2002
mozilla 2.0.0.14
adsl

Answer:Mozilla crash with too many tabs open

Hello, welcome to TSF.

How many tabs is too many many tabs? (a rough number)

Also, try opening it in Safe Mode and opening the same number of tabs to see if it hangs. If it doesn't, then it could be one of your plugin's causing the problem.

7 more replies
Relevance 56.99%

I just got a Satellite P500 and am running Windows 7. I downloaded all of the latest drivers and updated the system bios to version 1.70 (from Toshiba's support website). Now, my number pad on the keyboard is not working.

The numlock light is on and when I hit the "6" key on the number pad, it turns the light on/off but the behavior of the other keys does not change whether it is on or off. The "-" key enters a "6" but none of the other keys (except "enter" does anything.

I removed the keyboard driver and restarted to re-install the keyboard driver but that had not effect. The keyboard did work for a few days after I flashed the bios but seems to have stopped since I started using a USB mouse. I tried uninstalling the USB mouse driver but that did not do anything either (it was a Logitech driver).

Anyone have any ideas? Thanks in advance

Answer:Satellite P500 - After BIOS update the number pad isn't working anymore

What is the model number of the P500?

Have you tried setting the BIOS to its default settings?

If you boot from an MSDOS boot disk, does the numpad still do the same thing?

5 more replies
Relevance 56.99%

Hello,
My computer has some software that only ad-ware is picking up (slipping past malwarebytes and spybot S&D). It's causing my computer and internet to run slow, and everyonce in a while pops up a window to some random men's/women's health website (not affiliated with the magazine of the same name). As I said, ad-ware picks it up, but when I try to remove it, then restart in safemode and scan again, its still there and won't go away... Help is greatly appreciated!!!

Hijack This:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:54:10 PM, on 3/23/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Users\Andrew\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\SpywareGuard\sgmain.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86) (x86)\Lexmark 5600-6600 Series\ezprint.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\DivX\DivX Update\DivXU... Read more

More replies
Relevance 56.99%

Has anyone else noticed within the last few days (since SkyDrive started converting to OneDrive and since Office.com icons began appearing across the top of Outlook.com screens), that Outlook.com now opens a new tab when you switch from, say, Mail, to Calendar or any other function? So rather than just changing your current tab/page to whatever function you've chosen from the drop-down menu, it actually opens a new tab altogether. I've tried it in IE and in Firefox and get the same results with both browsers.
So far, I can't find a setting option to tell it to change functions within the same browser tab, but that would be my preference. Has anyone else found a way to change this setting?

Answer:Outlook.com Now Opens New Tabs For Each Function??

That's interesting. I didn't know, but I never use outlook.com in a browser, since I have Office 365.

10 more replies
Relevance 56.99%

Attached is my HiJackThis Log:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:35:18 AM, on 11/14/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17103)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDO... Read more

Answer:Firefox and IE opens up by themselves. Multiple tabs with different ads

Hello and Welcome to the forums!My name is Gringo and I'll be glad to help you with your computer problems.Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger:Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appea... Read more

17 more replies
Relevance 56.99%

Ive tried everything, run every scanner i could find, there are no processes that shouldnt be there in task manager. Nothing in startup or in services of MSCONFIG. Im stumped. Every couple minutes a new tab will open in firefox(Or if Ff is not open then it will open) With and address that will have a website and then end "normal/yyy102.html"

For example

http://www.bigdiscountbuy.com/normal/yyy102.html

Where "http://www.bigdiscountbuy.com/" will change for other websites

Weird thing is the tab will just be Blank, nothing in there.
I had installed a something which gave m,e some spyware, but this was removed with Ad-aware, spybot, and webroot spysweeper. But this still clings on..

Heres my logfile.

Logfile of HijackThis v1.99.1
Scan saved at 23:26:54, on 18/01/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LVComsX.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Sanjay\Desktop\Tempy\HijackThis.exe

R0 - HKCU\Softw... Read more

Answer:Ad-ware opens tabs in Firefox

I see you have disabled some startuo items with Msconfig. Please open it and select normal startup. I need to see everything that is running on your PC to help you clean it out, you may return it to the way it was when we are finished.

You have the latest version of VX2. Download L2mfix from one of these two locations:

http://www.atribune.org/downloads/l2mfix.exe
http://www.downloads.subratam.org/l2mfix.exe

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

Close any programs you have open since this step requires a reboot.

From the l2mfix folder on your desktop, double click l2mfix.bat and select option #2 for Run Fix by typing 2 and then pressing enter. It will process then start. Your desktop and icons will disappear (this is normal). L2mfix will continue to scan your computer and when it's finished, it will be ready for a reboot. Press any key to reboot. After the reboot notepad will open with a log. Copy the contents of that log and paste it back into this thread, along with a new hijackthis log.

IMPORTANT: Do NOT run any other files in ... Read more

19 more replies