Computer Support Forum

CF Logs as per request by email by cust support

Question: CF Logs as per request by email by cust support

I was requested via email, by customer support at Bleeping to submit my CF log. There are two, because the first time, the Windwows Recovery Console would not install, but instructions said to let the log finish, so I did. The second log is different, obviously with the installation of the Windows Recovery Console, the results changed. Both completed, as expected; however, the first run actually 'rebooted' the system, and when that happened, Kaspersky automatically turned on, and I noticed several files or processes were blocked. (Files blocked by Kaspersky were pv.cfexe and fi.cfexe - have no idea what they are, but thought I'd let you know.)

The second log installed the Windows Recovery Console and did not 'reboot'; therefore, Kaspersky was turned off the entire time, which probably accounts for some of the discrepancy between the two logs, but since 'YOU GUYS' are the gurus, I thought it best to submit both, with a detailed exlanation as to why there are two logs and what happened.


Relevance 100%
Preferred Solution: CF Logs as per request by email by cust support

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link (This link will automatically start a download of Reimage that you can save to your computer.)

Answer: CF Logs as per request by email by cust support

Thanks. I will review these.

7 more replies
Relevance 69.29%


What I'm trying to do is easy enough in thought, and I'm pretty sure I've seen this in a corporate setting but anyways what I'm looking to do is..

I run a business business, and I have one customer support employee. She answers the customer support e-mails that come to her via Outlook 2007 on her computer that we have setup for a few different e-mail accounts - all of which she answers.

I am part owner of the company, and for the first time in a while; I would like to take a more hands-on approach in my business moving forward.

In doing so, I would like to be able to view - both the e-mails in from the customers, and the e-mails that she sends out. I would also like to answer e-mails myself, and for her to be able to view the e-mails that I had sent out - so she can get a good idea of what to send if she is asked that question in the future.
I was hoping for this to be some type of add-on to Outlook that I could easily download or pay a small fee for - but I'm up for anything that would do what I stated above.

Please let me know if there's anything out there like this, any response is greatly appreciated.

Answer:Question About Outlook Admin Account - Trying to View Employee's Cust. Support E-mail

Hi there, welcome to the board!

Depends on what kind of mail account you have. If you have POP or IMAP, you could setup the account on both machines, but that will only ensure you both receive the same email. For ensuring you send to each other, assuming you have the same account, you could bcc yourself to ensure you both get emails. Depending on how many emails you send, you could potentially overload your servers number of requests (emails) per day (generally what I've seen is set at 250).

Another option would be to look at Office 365 for your business. Not only would this give you an Office install on up to 5 machines, but it would give you an Exchange email address and a company Sharepoint site. It's a subscription-based service, and if you price it out it's actually pretty cheap. They start as low as $4/month and go up from there. For more info take a look here:


2 more replies
Relevance 55.35%

i believe i have done the read and run part ok? but not sure where all the logs are and how to get them to you to check. i know where the mgzip is but the others i'm not so sure. everything seems to be ok except can't get rid of the blue screen.been working on this for 2 days hope someone might help.

Answer:hello all need help getting logs that you request

When you ran combofix, the log would have popped up upon should be here:
C:\ComboFix Txt

Open Malwarebytes and click on the logs tab.

And attach the C:\

9 more replies
Relevance 55.35%
Question: Request for logs

Hi, below and attached are the logs boopme asked me to run/post. Topic referenced is here: ~ OBI couldn't do the Gmer one as it kept on crashing my computer-here are the details (from Windows) of the problem when I logged back on:Problem signature: Problem Event Name: BlueScreen OS Version: 6.0.6002. Locale ID: 2057Additional information about the problem: BCCode: 50 BCP1: 813F7000 BCP2: 00000000 BCP3: BD3E7FFB BCP4: 00000000 OS Version: 6_0_6002 Service Pack: 2_0 Product: 256_1Files that help describe the problem: C:\Windows\Minidump\Mini102510-02.dmp C:\Users\Beckil\AppData\Local\Temp\WER-86393-0.sysdata.xml C:\Users\Beckil\AppData\Local\Temp\WER83CF.tmp.version.txtRead our privacy statement: is the DSS text log:DDS (Ver_10-10-21.02) - NTFSx86 Run by Beckil at 7:30:51.56 on 25/10/2010Internet Explorer: 8.0.6001.18975Microsoft® Windows Vista™ Business 6.0.6002.2.1252.44.1033.18.1975.515 [GMT 1:00]AV: Symantec AntiVirus *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}SP: Symantec AntiVirus *enabled* (Updated) {6C85A515-B91D-4D2B-AF18-40984A4A8493}SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}SP: SUPERAntiSpyware *enabled* (Updated) {222A897C-5018-402e-943F-7E7AC8560DA7}=====... Read more

Answer:Request for logs

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The ... Read more

21 more replies
Relevance 54.53%

Im currently working on my brothers computer, so im not "sure" how it got infected . I followed the steps required before posting, and have all 6 logs.

I should also point out that Symantec removes "Trojan: Vundo" on every login. Oh, and prior to finding your site, i ran hijack this w/o renaming the hijackthis.exe. I have since changed it, and the correct log is attached here. Im not sure if this effects the outcome of the log or not, I just thought it best to tell you.

Thanks for the help,

Answer:Malware help request - (all 6 logs)

Last 3 logs...

Thanks again!

8 more replies
Relevance 54.53%

Request for Analysis of LogsI've done all the procedures required in Topic Journal ...======================================1 - The Problem:Whenever I open the folder: C: \ Documents and Settings \ x4NG3L.X4NG3L-DE17A6A0Appears a message suspicion that I had never seen before in my life.A Message pops up, the simple fact of opening the folder:This is my folder of User.Other folders in the system, eg"All Users" or "Default User.WINDOWS" for example, nothing unusual happens.Below a picture of the suspected message: - What has been done by me:2.1 - Complete Virus Scan using AVG 8.02.2 - Full Scan for Malware, using SpyBot2.3 - Full Scan for Malware, Using Malwarebytes Anti-Malware2.4 - Cleaning and corra?ao of record, using CCleaner2.5 - Cleaning and correction the registry, using Marcos Velozo Reg CleanAll procedures above were carried out with software update.======================================Here my log for examination:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 02:30:39, on 28/4/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.17184)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\ARQUIV~1\GbPlugin\GbpSv.exeC:\WINDOW... Read more

Answer:Request for Analysis of Logs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

2 more replies
Relevance 54.12%

Due to my having clicked on a link that I shouldn't, I now have an extremely annoying dialer installed on my computer that keeps reappearing no matter how many times I try and delete it. It installs itself under the name 0202 and dials a 1-900 number - specifically 1(900) 643-2888t - hat's inaccessible from my area (which is good), but it keeps interrupting my regular Internet connection to do so (which is bad).Short of wiping my hard drive and reinstalling everything, does anyone know of a good piece of antivirus or dialer removing software that I can use to get rid of it? I've already tried SpyBot, AdAware, AVG, XoftSpy, SpywareDoctor, and several other programs to no avail. I've posted my HijackThis logs for analysis and can post a link to where the virus came from if that is at all helpful.Thanks in advance for any help. The Lunar Archivist-----------------------------------------------------------------------------------------------------------------------------Logfile of HijackThis v1.99.1Scan saved at 11:55:04 PM, on 04/10/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng... Read more

Answer:Hijackthis Logs Help Analysis Request

Hi Lunar Archivist and Welcome to the Bleeping Computer!Please download ATF Cleaner by Atribune.This program is for XP and Windows 2000 onlyDouble-click ATF-Cleaner.exe to run the program.Under Main choose: Select AllClick the Empty Selected button.If you use Firefox browserClick Firefox at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browserClick Opera at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.For Technical Support, double-click the e-mail address located at the bottom of each menu.Please download VundoFix.exe to your desktop.Double-click VundoFix.exe to run it.Click the Scan for Vundo button.Once it's done scanning, click the Remove Vundo button.You will receive a prompt asking if you want to remove the files, click YESOnce you click yes, your desktop will go blank as it starts removing Vundo.When completed, it will prompt that it will reboot your computer, click OK.Please post the contents of C:\vundofix.txt and a new HiJackThis log.Note: It is possible that VundoFix encountered a file it could not remove.In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.After posting the new ... Read more

1 more replies
Relevance 54.12%


I was wondering whether I could ask, and whether it is meaningful, to have you examine the DDS and GMER logs for my computer, which I have just run.

I had an actual problem last year and I am very grateful for your help. Right now I have run Malware B (latest) and it picked up nothing. I have forgotten to do Spybot as well, that can be later.

I had to stop the GMER run because it was already at 2 hours and I was worried about the continual driving my disk. And I stuffed up saving the Attach file, which I'll do again if you need.
Rootkit scan 2011-06-20 05:02:30
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e FUJITSU_MHS2030AT rev.8307
Running: gmer.exe; Driver: C:\DOCUME~1\GREGCU~1\LOCALS~1\Temp\uxtdapow.sys
---- Kernel code sections - GMER 1.0.15 ----

? C:\DOCUME~1\GREGCU~1\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !

---- User code sections - GMER 1.0.15 ----

.text C:\WINDOWS\system32\SearchIndexer.exe[388] kernel32.dll!WriteFile 7C810E27 7 Bytes JMP 00585C0C C:\WINDOWS\system32\MSSRCH.DLL (mssrch.dll/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[2244] USER32.dll!DialogBoxParamW 7E4247AB 5 Bytes... Read more

Answer:Request review of DDS and GMER logs

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator&#... Read more

3 more replies
Relevance 54.12%

Problem: I am getting continuous IExplorer popup windows about every three minutes or so. I have performed the actions below but am obviously missing something, likely something obvious to the expert.Action to date: Having worked with OldTimer in August I did all the basic actions he suggested. I then reviewed your prep guide and did all of those (except I couldn?t get Panda to run). Here is a summary of what was done, with reboots, in and out of safe mode ? Deleted temp and other files All tools used were updated first and configured as OldTimer had recommended Ran Norton A/v Ran TrendMicro Housecall Ran Bit Defender (Log attached) Ran MacAfee Stinger Updated and ran CWShredder Ran AdAware (log attached) Ran SpyBot (log attached) Ran HJT (log attached)Run all of the Microsoft Updates.So I have run out of ideas. I am way better off than I was but can?t seem to finish it off. Suggestions?Reports: First HJT, then AdAware, Then SpyBot, and just for interest Bit Defender:==================Logfile of HijackThis v1.99.1Scan saved at 11:12:43 PM, on 1/14/2006Platform: Windows 2000 SP4 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\WINNT\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files ... Read more

Answer:Request Expert Review Of Logs Please -

Ola Sir LonMon and Welcome back Bro!I see the kiddos have been hard at work on the poor PC! Go to Add\Remove Programs and RemoveNetwork MonitorPlease Download the l2mfix from the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so!If you recieve any errors while attempting to run Option 1 of the l2mfix similar to theseC:\windows\system32\cmd.exe or C:\windows\system32\autoexec.nt"The system file is not suitable for running ms-dos and microsoft windows applications" Choose "Close to terminate the application"Then please use option 5 of the l2mfix or the web page link in the l2mfix folder to solve this error condition. DO NOT run the fix portion without repairing this first.

18 more replies
Relevance 54.12%

Computer was working really slow. malware bites found problems and quarantined them.

Answer:Request check up logs attached

Not seeing much in the way of malware.....but still need the log from running MGTools.exe.........C:\

9 more replies
Relevance 54.12%

Big thanks in advance to whomever would be willing to help me.

I have carefully reviewed the guidelines and run Hitman, Rogue Killer, Malwarebytes, TDSSkiller and MG tools as requested, and also attached the logs as requested.

I see a couple highly suspect EXEs running in task manager on and off:
-NOTEPAD.exe (clearly a phony, I am not running the 'real' text editor

CPU power is crippled, Windows Explorer especially is brutally slow. It took me over 3 hours to download, install and run the 5 scanners above and longer to save the logs (takes forever to browse for a save location). I am running Firefox now instead of Chrome as Firefox has a smaller memory footprint and runs a bit faster.

THANK YOU VERY MUCH! for all the help, or at least the offer of assistance. This computer is in sleep mode 16 hours a day and often 24, I have not had a virus/worm/etc in many years and I do not remember anything in particular that would have led to the infection. I got home last night and 'woke up' the PC and noticed right away it was super sluggish. I saw the obvious malware in Task Manager and spun my wheels for a few hours trying to manually remove the garbage then gave up and found this forum.

THANK YOU and I look forward to the next steps.

Answer:request for assistance - all logs attached

Welcome to Major Geeks!

This PC is running an illegal copy of Windows XP as observed in your Malwarebytes logs with the below files:

Modules: 2
PUP.Optional.WpaKill, C:\WINDOWS\system32\antiwpa.dll, Delete-on-Reboot, [1a4edd9d2368fe38dd6192d36c986997],
Trojan.I.Stole.Windows, C:\WINDOWS\system32\antiwpa.dll, Delete-on-Reboot, [4523daa0305bd95dd2d350734bb77b85],

We really do not support people running illegal copies of Windows. Also you are using Windows XP which is out of date and no longer supported by Microsoft and it is prone to having security issues now. However you can try running Hitman Pro again and activate the 30 day free trial. Have it fix all the Malware and Potential Unwanted Programs that it finds.
presentationhost.exe is a valid Windows system file as is notepad.exe depending on where it is running from.

5 more replies
Relevance 54.12%

Thank you in advance. My problem is a rather tenacious hijacker that redirects my searches to a page titled

I have followed the directions in the Read & Run page, but the problem persists.

I was UNABLE to run the bitdefender scan in three attempts.

Here are my first three logs, and thank you!


Answer:Malware Problem Help request- First 3 Logs

Re: Malware Problem Help request- Remaining Logs

Here are the remaining logs for the above thread.

Thank you.

18 more replies
Relevance 54.12%

Hi is me Missy again from my other post at:

I just wanted to tell you that I did all you explained for me to do step by step and I have all the information on the system.. the problem is that right now I had to reply to you (this post) via another system in my house as the infected system is not allowing me to post or go online at all after I did all the steps you recommend for us to do before posting here.
I did however get the msg you stated on your instructions page about the Rootkit but I did nothing about it per your advice.. Here's what it said after I ran the scan with the Gmer...

" Gmer has found system modification caused by Rootkit activity " and then had only 1 button that said "OK" and that's it.

So, now I have everything you need from me but no way of posting the logs and zip file here and I do not want to use this other system to post the zip and logs as I'm afraid of the infection spreading to this system as well.

Please advice as what other ways I can provide you with the logs and zip file for your viewing.

Thanks again,

Hopefully my post shows up this time...(I've been trying to post for a few hours)


I'm posting the logs per your request from last night in regards to my problem with all my search engines being redirected to other unrelated sites.. I was told here to follow all the instructions on the board first and th... Read more

Answer:Search Hijacked Logs Per Your Request

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.


Your attachment didn't work. It's there, but I can't access it.

I need to see the second log from dds.scr. Please run dds.scr again, and instead of attaching, just post the second log, Attach.txt, in your next reply.

I also need to see a gmer log in order to help you. Please try running gmer again, but this time do not run the full scan. After you launch gmer, it will do a very short scan. When it finishes, click 'Save...', and post(not attach) that log in your next reply.


11 more replies
Relevance 53.3%

Hi,I recently posted a topic [post=""]here[/post] regarding warnings from Norton.Since originally posting I now not only get the warnings from Norton but also google SERP links are redirected to suspect sites. I've run DDS and GMER as recommended in original post and the logs are attached.The Norton warnings look something like this:Intrusion: HTTP Tidserv Request.Intruder: Level: High.Protocol: TCP.Attacked IP: OFFICE( Port: 1210Any help regarding the next steps in removing this thing would be greatly appreciated!Thanks!DDS (Ver_10-03-17.01) - NTFSx86 Run by Administrator at 11:55:28.42 on Sun 23/05/2010Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_05Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.759 [GMT 10:00]AV: Norton AntiVirus 2005 *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}FW: Norton Internet Worm Protection *enabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shar... Read more

Answer:HTTP tidserv request - logs attached - PLS HELP!

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.1.Please do not run any other tool untill instructed to do so!2.Please reply to this thread, do not start another!3.Please tell me about any problems that have occurred during the fix.4.Please tell me of any other symptoms you may be having as these can help also.5.Please try as much as possible not to run anything while executing a fix.If you follow these instructions, everything should go smoothly.Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.:run combofix:Please visit this webpage for download links, and instructions for running the tool: ensure you read this guide carefully and install the Recovery Console first. The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.Once installed, you should see a blue screen prompt that says:The Recovery Console was successfully installed.Please continue as follows:Close/disable ... Read more

23 more replies
Relevance 53.3%

Hey Bleepers - thanks in advance for taking a look at my problem. Avast detected a virus a little over a week ago, so I did a full scan, followed by a bootscan with that program, and then immediately ran MalwareBytes as well. It seemed (to my limited knowledge) my virus had been taken care of, until yesterday when it reappeared again. I did another scan & bootscan with avast, followed by another scan with MalwareBytes, and just now did a HiJackThis scan as well, which I will post below. If you would like to see logs from avast or malwarebytes, I will do so as well.

<edit> The various scans using avast & malwarebytes detected several problems, all of which I used the "move to chest" option for </edit>

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:21:56 PM, on 11/28/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Amazon\Amazon Unbox Video\ADVWindowsClientSystemTray.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files (x86)\Microsoft Office\OFFICE11\OUTLOOK.EXE
... Read more

Answer:HiJackThis log (also malwarebytes & avast logs upon request)

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

2 more replies
Relevance 53.3%


Firstly thanks for all the advice on malware removal on the board. It has been a great help.

However I still have a persistent problem and I wonder if someone can help.

I followed the procedures and the logs are attached. As I wasn't able to post to board until now I've also used findykill and those logs are attached also.

Here is an outline of what happened:

- On tuesday I tured on my laptop for the first time in 6 weeks. I used it for some emails and then shutdown. Before this it had always worked perfectly and was very quick. Windows downloaded its patches when I shutdown.
- The next day when I turned the machine on it got stuck in a loop as it reached the desktop. I had to do a hard reset several times to end the loop and eventually it got through to the desktop.
- There was obviously a problem and the CPU was 100 per cent before any apps had been started. Looking at my taskmanager I thought that there might be a conflict between Rapport (banking software) and F-Secure so I removed Rapport and disabled F-Secure. This didn't help.
- It was at this point I realised that my keyboard was partially disabled and it has been ever since. I am typing this in SAfe Mode. Also the CPU is stuck at 100 per cent all the time though again not in SAfe Mode.
- I then ran F-Secure and it found bagle and gemini but didn't clean it.
- I then downloaded Kasperky and ran that. It found about a dozen infections cleaning 8 of them. The other 4 I... Read more

Answer:Malware Problem - Request for help (logs attached)

Here are the remaining logs. Apologies for lack of clarity on the naming of the files but with the keyboard not working it wasn't possible to always names them accurately.

thanks again in advance for your help.


6 more replies
Relevance 52.89%

Thanks for any who help.
Had my virus protection (Avast) pop up a warning while I was at work on Friday. Wife clicked delete and lost the internet connection. She called ISP provider and they told her that they need to reset the IP address...for some reason it was deleted and reset.
Wife was told that she needed to turn off the firewall so they could reset the address....could not get it reset with it on. She turned it off and they reset the address.
Now....when I get home and start to use the computer I star getting random windows opening and it seems that the connection speed is real slow. So I look in IE tools and open up the Manage add ons window and see the normal add ons that I had...and another..rqrpmlk.dll So I disable it and google it to see what it is. Ended up here, reading a lot and trying some fixes and still can't get rid of it. Also found awvtq.dll. Have no idea what this is either...could be a part of ad-aware, but not sure.
Any help is greatly appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:25:44 PM, on 9/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Lavasoft\A... Read more

Answer:Solved: Request for some help...HJT, VundoFix and SmitfraudFix logs posted

6 more replies
Relevance 52.89%

Hi. I've had several problems recently with my computer, many of which previous posts have helped me fix (thank you!), but can someone tell me if I can do anything further and if my logs look good.

I'll give a bit of background and then post logs separately. I run Windosw ME on a dell computer. Internet Explorer 5.5 installed.

First problem. I was unable to access internet with my dial up modem ISP (netzero). I followed all printed instructions of isp without results, including checking the line, playing with settings, changing access numbers, etc. Reinstalled windows and isp software, without improvement. Somewhere along the way I developed second problem.

Second problem. Ined.dll error every time I tried to open IE offline. I think I upgraded from 5.0 to 5.5 at this point. I fixed this problem by uninstalling the illookup toolbar program.

Third problem. Still could not open internet explorer (or get online), as a new error message ("gws.dll has caused error and IE will close") appeared. I initially fixed this by renaming the file to gws.old. Then, taking advice of previous thread, I renamed the file to gws.dll, downloaded Hijackthis and Spybot and ran them. I fixed some of the globalwebsearch files in hijackthis (I realize now I should have waited until I got advice on this decision). I also then went to globalweb search internet site and downloaded/ran an uninstall program. I ran hijackthis again and have the logs I would like advice on.

Also, whil... Read more

Answer:gws.dll error - request to review startuplist and Hijack This logs

6 more replies
Relevance 52.89%

Wanted some eyes on these logs to see if anything is there. This machine had been infected in the past but was supposedly clean. All updates have been done and it acts normal I just want to see if there are any hidden baddies lurking about. Oh yeah I ran MGTools last and after the EULA for HiJackThis the scanning continued and then memory exception error popup occured pertaining to a DLL but quickly went away before I could read it. There is an Event ID: 63 in Event Viewer/Application that was set about the time this occurred. Thanks in advance.

Answer:XP Home SP3 Malware check request - Logs posted

c:\documents and settings\Owner\My Documents\Downloads\jaleeba.exe <--- Rename Combofix back to Combofix.exe now that you have already run it, and also move it to your desktop!

What is in this folder?
C:\Documents and Settings\Owner\Local Settings\Application Data\rrdfmu

1 more replies
Relevance 52.48%
Question: Support request

Hi, how can I get support in Italy?I bought a HP FOLIO 1040 G3 with docking station HP 2013 Ultra Slim, but these two devices don't work together.I opened three tickets in the last two weeks but at the telephone number nobody answer to the call.How could an italian customer get support? 

Answer:Support request

Hi, The  HP UltraSlim Docking Station (D9Y32AA)   supports the following products: HP Elitebook 820 G1 Notebook PC; HP Elitebook 840 G1 Notebook PC; HP Elitebook 850 G1 Notebook PC; HP EliteBook Folio 9470m Notebook PC; HP EliteBook Folio 1040 G1 Notebook PC; HP EliteBook Revolve 810 G1 Tablet; HP EliteBook Revolve 810 G2 Tablet; HP ZBook 14 Mobile Workstation Source: as you can see HP FOLIO 1040 G3 is NOT listed. You bought a wrong docking station. Please contact the shop directly and swap for a different dock. Regards.

1 more replies
Relevance 52.48%

I could not my facebook account that read as cookies are required.....

Answer:request for support

Sorry, don't really understand the question - you need to provide more information about you issue.

1 more replies
Relevance 52.07%

I was recently infected with vitrumonde. Did most of the cleaning manually using hjt logs and combofix.
Please let me know if this system appears clean.
Thank you!
DDS (Ver_09-02-01.01) - NTFSx86
Run by xxxx at 18:07:33.39 on 2009-02-17
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2038.1362 [GMT -5:00]

AV: VirusScan Enterprise + AntiSpyware Enterprise *On-access scanning disabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\program files\cscmarimba\tuner\Tuner.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
C:\Program Files\McAfee\VirusScan Ent... Read more

Answer:vitrumonde free? symptoms clear; request check of logs

Hello Alimo20 and welcome to Bleeping Computer,1. Please download GooredFix and save it to your Desktop.Select "2. Fix Goored" by typing 2 and pressing Enter. Make sure all instances of Firefox are closed at this point. Type y at the prompt and press Enter again. A log will open, please post the contents of that log in your next reply (it can also be found on your desktop, called GooredLog.txt).Note: If you receive a message saying that GooredFix needs your system to be restarted, please close all applications and reboot your system. Please also allow any registry changes that may be prompted by any of your security programs.2. Please read this tutorial carefully to download ComboFix from one of the locations specified, and save it to your Desktop.Double click the ComboFix icon to run it.If ComboFix askes you to install the Recovery Console, please do so..The Windows Recovery Console will allow you to boot up into a special recovery mode, in case your computer has a problem after an attempted removal of malware. This allows us to help you.Once the Recovery Console is installed, continue with the malware scan.Note: Make sure not to click ComboFix's window while it's running. That may cause it to stall or freeze.Please post the log from ComboFix (can also be found as C:\ComboFix.txt) in your next reply. If you have any questions along the way, STOP and ask them before proceeding !!Greetings,Thunder

1 more replies
Relevance 52.07%

I've stumbled upon this section of windows and it seems full of info,
Looking at the pc performance after booting showed an excessive write to my ssd (C drive) with the bootckcl‏ log, digged a lil more more into logs and found in the Computer Management > Performance > Data Collector Sets, a handful of them.

TL/DR - Can i disable these logs? can I utilize them to my benefit? Do i need them?
How to disable if i can?

Regards, Avi

More replies
Relevance 52.07%

Support request please...

Malware suspected because of Pop-ups while on-line.

I have completed the "Read and run me first" procedure.
I was able to run all of the requested tools, even able to run "counterspy".
All of the tools found issues and were taken care of per instructions.
I checked to see if problems were solved and pop-ups continued while on-line, so I ran the "vundo" cleaner in "Special Removal Procedures". This tool also found issues and were taken care of per instructions.
I took the liberty to run HJT as instructed, if you need the log.

Current problems are pop-ups while on line and slow e-mail (seems to be sluggish)

Answer:Support request - Vundo?

Additional files

2 more replies
Relevance 52.07%

I know from other forums that these are exceptionally annoying to deal with, so I apologize beforehand. However, I've followed instructional steps on several forums and been unable to get rid of this virus.

I have download VundoFix, run it, and it has found two problems. From there I've had two results: either I delete them successfully (or I assume so since it restarts) and windows reboots only to display the same thing again when I re-run VundoFix on bootup, or, it doesn't delete them at all when I select 'fix', but instead sits thinking, looping for all I know.

I've also downloaded virtumundoBeGone, loaded into safe mode and run it, only to find that there was apparently nothing found... despite the fact that windows defender was still complaining.

Many thanks for any help given!!!


attached are the results of the my HijackThis scan, as well as the VundoFix.txt. And yeah, from that file you can see I've run it far too many times =P

Also, in case you don't want to mess with opening the notepad files, here they are copy and pasted:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:34:07 AM, on 6/25/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16681)
Boot mode: Normal

Running processes:
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsy... Read more

More replies
Relevance 51.66%

Comcast email customer service is one of the leading service providers within the fields of email service providers. Comcast email support team does not solely resolve your issues however conjointly they enhance your accounts’ settings in order that you'll use your account with optimum ease. they assist you in backing up your important emails, login issues, and security from malicious software problems, clearing junk or spammed emails, lost or forgotten passwords. Slightly you need to take care chunks is therefore always. 24/7 client support is offered by Comcast email help for any of Microsoft email services or the other. problems like Hotmail account not performing on iPhone 6, Hotmail not sending on iPhone, Hotmail not receiving emails from my server, how to reset Comcast password on iPad etc are mounted by us in less amount of your time. Tools of on-line troubleshooting, remote access, email recovery and #password #reset are employed by comcast email support number to deliver solutions. you'll avail Comcast customer services anytime from anywhere. call the e-mail recovery engineers now on Comcast email customer support (Comcast Email Help).

Answer:Comcast Technical Support By Email Support Number

You can also contact roadrunner because now a day’s roadrunner email is one of the finest web email service providers. Roadrunner email is used by the customers worldwide. Users are facing issues like password reset, account setup issue, account hacking issue, receiving and sending emails issue and many problems, to please contact roadrunner.

2 more replies
Relevance 51.25%

Hi all I have a Carbon X1 here, bought two months ago from a reseller.I have two issues:The 'a' key came looseThe battery only lasts around 4 hours (promised is 8 hours, so it should get 6 hours in real life at minimum)So I submitted a service request online, twice, but every time my request gets closed! These are the status updates: Machine description Machine type 3444.Model type2HUSerial number**my serial**  Problem Failing element .Part number Error code Request severity4 Original comments/problem description 1 - KEYBOARD IS BROKEN, THE 'A' BUTTON CAME LOOSE 2 - BATTERY DOES NOT LAST UP TO 8 HOURS AS ADVERTISED, BUT ONLY LASTS AROUND 4 HOURS. Customer reference Customer problem number Contract/special bid number  Status updatesStatus Date/time received Time zone DescriptionCX03/04/2013 01:17ERequest Cleared. Indicates that the request has been cleared. A physical fix has been performed on the machine.  AI03/04/2013 01:17EAdditional information. Indicates that a customer has added additional information on a previously placed request.  I CONFIRMED THERE WAS NO ICPM POPUP PREVENTING CRU OF THIS PART. CRU - 04W2794 KBD USE,CC03/04/2013 01:16ECustomer called. Indicates that the customer was called.  AM03/03/2013 17:49ENext AM. This status indicates that service will be provided the next morning, Monday through Friday.  RC03/03/2013 17:49EReceived Request. Indicates th... Read more

Answer:[Carbon X1] Request support issues

That looks very much to me as they are sending you a keyboard "CRU" stands for Customer Replaceable Unit; you are allowed to swap it out yourself.   After creating the order for the keyboard the agent would have closed the call as no further action is required, it'll probably turn up tomorrow or the next day.
As far as the battery is concerned, I've never known support to get involved in what could be a lengthy exchange of emails as there could be so many reasons to possibly explain what you are experiencing; one might be explained by the following KB article.
I suggest you start a new thread for the battery problem, if the above article didn't help, explaining in a little more detail with information such which OS you have installed, which power scheme you have selected and version of power manager.  You could still of course call support.

2 more replies
Relevance 51.25%

Use firefox 3.6.28 why do I some times get the above message seems everything works after getting it though?John

Answer:Your browser does not support HTTP Request.

What website or is it on multiple sites?Have you disabled JavaScript, third-party Scripts, or cookies?Are you using any anti-tracker or anti-ad extensions?This seems to be an error caused by giving a page insufficient privileges to perform certain operations, or a script blocker or tracker is preventing access for a certain operation.EDIT: just thought it worth mentioning to try clearing your cache also. Weird errors like this are sometimes caused by old cached versions of webpages or scripts and the browser isn't loading the new ones correctly.

3 more replies
Relevance 51.25%

I have been infected with the black on blue screen saying I have computer spyware. Ran Ad-Aware, MS Antispyware, and McFee Stng on safe mode but still infected. Inclose is my hijack in deciding what to do next. Muchas gracias mis amigos!!!!

EDIT: Snipped inline HJT Log

Answer:Request Support HijackThis Logfile

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

Downloading, Installing, and Running HijackThis

Welcome and a malware specialist will be along to review your post when you have followed the steps above

1 more replies
Relevance 50.84%

I'm just cleaning up my computer and ensuring i don't have any unwanted viruses/malware/spyware/etc infecting my computer at the moment.
I've ran spybot search & destroy, and fixed the issues it raised at the end of the report.
I've also ran a few recent Malware Antibytes scans that are now returning no issues.
However my concern is that sometimes these programs miss things or dont catch everything, thats why i've ran the hijackthis program again. It helped me clear a virus previously that spybot and malware bytes were unable to fix.
basically what i've done is: download hijack this, go offline, and ran the program as administrator then saved the log file.
I was just hoping i could get someone to look over the log file and advise me as to whether there is anything listed that is a concern?

Answer:Hijackthis log file review support request

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems. Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please run a FRST scan. This will help us diagnose your problem.Please download Farbar Recovery... Read more

8 more replies
Relevance 50.84%

I including a link at which you can express your need for Google Search to expand its support for other than MS products, including Mozilla/Firefox/Thunderbird. click on "suggestion" Cheers,John

More replies
Relevance 50.84%
Question: Cust. PC Build

Im building a PC for a customer, first Athlon 64 PC EVER, so i need some help...

Heres the specs so far :

Just want to make sure all this is compatible and ill have no trouble puttin it together. Also, this is a MAINSTREAM pc, they thought of buying a DELL, but i am helping them out instead. Is all this good stuff for the price?

Answer:Cust. PC Build

This is the NEW setup im getting him, let me know if all is in order, I just NEED to make sure its all compatible, i checked but, ya know....

24 more replies
Relevance 50.02%

My computer is running incredibly slow. I ran all the anti spyware I have and ran a cleanup and defrag. I went into the task manager and cust.exe is using 98 percent of the cpu. Has someone seen this before? Anyone help? Thanks!

Answer:cust.exe eating CPU resources. PLEASE HELP!

Do you know what program uses that process? I had a similar problem. And when I canceled that process(it wasn't called cust.exe but MOH.exe, and no it wasn't medal of honor) it fixed it... But doing that also shut that needed program down. The program was a call catching Program used by my modem. I tried insalling teh software from numerus sources and it still used up llike 78-98% of my proc. I installed a different modem with the same Netwaiting software. And it fixed it. So try stopping that process and see if it stops a critical program that you use.

3 more replies
Relevance 50.02%

Our Dell laptop loaded with WIN 8.0 (later 8.1) was delivered in end Dec 2013. My wife was used to WIN 7 and could not bring herself to use 8.1, so this computer sat unused for 8 months. I recently asked Dell if they could send me a copy of WIN 7 so we could use the computer. After many phone calls, they have finally said "No". I asked for their definition of "Customer Satisfaction". Nothing was offered. I informed them that (a) in the last ten years, we have bought perhaps ten Dell computers, (b) in the last 20 years, more than twenty Dell computers, (c) I was asking for something which was going to cost them perhaps $ 5 or $10, and lastly, While my purchasing a copy of WIN 7 at $ 150 was not going to bankrupt me, it would certainly express to me what Dell thought of long term customers and customer satisfaction.

This is not a vent, but just an example of how not to do business. Pretty pathetic.

Answer:Dell Cust Ser for a Dellophile

Hi and Welcome to SevenForums,

Thank you for sharing your opinion, was it advertised as coming with Windows 7 or did it say it came with windows 8?

To be honest if it was advertised/bought with Windows 8 then "no" is the answer i would have expected from Dell or any other manufacturer but everyone has different levels of expectations and that's the difficult thing to manage sometimes and unfortunately you have been on the wrong side of "you can't make everyone happy" on this occasion.

What is it about Windows 8 your wife doesn't like?
Maybe we can help straighten some things out that makes it feel a little better to use?

Maybe the siter site for Windows Eight maybe of help? - Windows 8 Forums

I use Windows 7 and 8 daily and find them both brilliant.


4 more replies
Relevance 49.61%

Hello dear Lenovo community, I replaced an APU on Lenovo s206 to AMD E2-2000 (EM2000GBB22GV) and my laptop starts but the processor is being detcted as "AMD Processor Model Unknown". I tried to update AGESA code myself but had no luck. As I researched, there are no mentions of "E2-2" in native s206's AGESA code and it seems Lenovo s206 is using Brazos 1.0 AGESA code on Brazos 2.0 platforms(!/?). It could be very good if lenovo could release at least BETA BIOS for Lenovo s206 with updated AGESA code to support latest Brazos 2.0 APU's.

More replies
Relevance 49.61%

Whe I boot up this machine the cpu is pegged at 100%. cust.exe is using all of the resources. Anyone seen this before? Here is a log if needed. Thanks for the help!
Logfile of HijackThis v1.99.1
Scan saved at 2:57:38 PM, on 8/31/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\NavNT\defwatch.exe
C:\Program Files\HandsFree\Client\srvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\NavNT\rtvscan.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\AccessDirect\dadapp.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Fil... Read more

Answer:Solved: Cust.exe eating all resources

16 more replies
Relevance 49.2%


Any advice on the below greatly appreciated to improve system performance.. Apologies if I have mnot followed protocol - will very happily amend any format of my request.

Thank you very much in advance,


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:15:16, on 10/06/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
C:\Program Files (x86)\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKCU\... Read more

More replies
Relevance 48.79%

I have the HP 2410xi All-in-one Series. I'm using Microsoft Windows Vista Ultimate Edition x64. Where can I get hp drivers for this printer? I need to scan documents and save them to a folder but I don't see any driver support for my hardware...any suggestion?

Answer:Hp 2410xi Series driver support request for Windows Vista Ulitimate x64 Edition.

HP Printers*-* Installing the Printer Driver Located in Windows Vista*

if that dont work go to and put your printer number in thier. took me all of 10 seconds

5 more replies
Relevance 48.38%

I am using this to print the existing pdf documents but it is always taking c drive documents folder to create the file not the path given by me. Either I don't know the process or may be some issue in code can some help me to understand this.

namespace PrintPdfFile
public class RawPrinterHelper
// Structure and API declarions:
[StructLayout(LayoutKind.Sequential, CharSet = CharSet.Ansi)]
private class DOCINFOA
public string pDocName;
public string pOutputFile;
public string pDataType;

#region dll Wrappers
[DllImport("winspool.Drv", EntryPoint = "OpenPrinterA", SetLastError = true, CharSet = CharSet.Ansi, ExactSpelling = true, CallingConvention = CallingConvention.StdCall)]
private static extern bool OpenPrinter([MarshalAs(UnmanagedType.LPStr)] string szPrinter, out IntPtr hPrinter, IntPtr pd);

[DllImport("winspool.Drv", EntryPoint = "ClosePrinter", SetLastError = true, ExactSpelling = true, CallingConvention = CallingConvention.StdCall)]
private static extern bool ClosePrinter(IntPtr hPrinter);

[DllImport("winspool.Drv", EntryPoint = "StartDocPrinterA", SetLastError = true, CharSet = CharSet.Ansi, ExactSpelling = true, CallingConvention = CallingConvention.StdCall)]
private static extern bool StartDocPrinter(IntPtr hPrinter, Int32 level, [In, MarshalAs(UnmanagedType.LPStruct)] DOCINFOA di);

[DllImport... Read more

More replies
Relevance 48.38%

I've installed Win8 from ISO file, the problem is I didn't mount this image or burn on DVD but simply unpacked with 7zip. The result - win8 is installed on my primary Win7 partition (C:\) and my Win7 folders are moved to Windows.old folder. Is there any way to restore the Win7 ?
I found some instruction about Vista on How to restore a computer to a previous Windows installation after you install Windows Vista but in Win7 there are more folders saved and the bootsector has probably different name.
Could anyone please help me with that ?

Best regards,

Answer:How to restore Win7 after installation of Win8 Cust Preview

Hello Lbajon, and welcome to Eight Forums.

First, be sure to backup anything that you do not want to lose to be safe. Next, you might see if you may be able to use the tutorial below to restore Windows 7 from the Windows.old folder. Just be sure to follow it exactly as is, and select the correct options for Windows 7 .

Windows.old folder - Restore into a new installation - Windows 7 Forums

Hope this helps,

1 more replies
Relevance 48.38%

I am not readily available to talk by phone and was wondering if anyone knew the email address for qwarranty requests Thanks,Brian 

Answer:Warranty Request Via Email?

Brian, welcome to the forum, try this site, it has worked for others.

1 more replies
Relevance 47.97%


I'm trying to figur out a way to have MY COMPUTER by default for all type of browsing/save as instead of ending up on the "Library one".

I found a way to do it for Windows Explorer but when i browse/save as in misc application it always end up on the Library folders by default.

There the way to get it done for Windows Explorer:

Open any Windows Explorer windows, right click on it, go to properties then in the target write this down: %SystemRoot%\explorer.exe /root,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}

See my attachement for a screenshot.


Answer:Broswing Default Folder Current Library -- Cust My Comp

Hello B3n, and welcome to Seven Forums.

This tutorial below can help show you how to using this command instead in Windows 7.%windir%\explorer.exe /n,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
Windows Explorer Taskbar Icon - Change Open To Target

Hope this helps,

1 more replies
Relevance 47.97%

I have a system still under warranty and have had the following issues: 1) My hard drive is no longer accessable, must have bad sectors as it just keeps clicking 2) My palm rest right near the touchpad has cracked....  Wondering if these 2 issues would be covered under warranty. Also as I am not able to communicate by phone, how can I get access via email? I mean I just don't have the time to be by a phone. Thanks for all your help in advance,Brian 


Go to Solution.

Answer:Warranty Request Via Email......Also is this covered?

This post may help.

RockwillThinkPad T61p 6459A12

1 more replies
Relevance 47.97%

Hey guysI'm hoping someone can shed a little light on a brain ache of a problem. My mum uses her laptop at home to access the internet and all is fine except for checking her AOL mail. It comes up with http/1.1 bad request. This is through Chrome & IE. I've reset the settings for both browsers, cleared history/cookies etc and also done a system restore. Same problem happens.Now I thought I'd take the laptop to work and home to see what would happen. Work uses BT Broadband and I have Sky Broadband at home. Low and behold she can access her email. The first thing that pops into my head is that her ISP (Plusnet) is blocking AOL mail for whatever reason.Has anyone come up against something like this before because it's driving me potty.Cheers in advance for any help.Dazoo

Answer:http/1.1 bad request when accessing email

It's best to use AOL 9.7 instead of using IE or Chrome. I'll give you the place to burn your own AOL CD. You save it and than send to your DVD writer so as to have a copy for future use. When you open look for Setup. The install AOL CD will offer 2 choices. To make a new account or install your old account. ( I can't remember the exact words)Be sure and select your old account that your allready using. It's best to go their using IE and download it. on to AOL - When asked enter your sign on name. Don't use the part Enter old Password - OK Go to Keyword and type Store Password - Enter Password - check mark box - Save. Don't check mark the email box unless you want your email password protected. Go to and click Read Mail - A popup will come up - Click yes to save mail offline AOL email has been very good for me.-------------------------------------------------------------------------------------------------------If you have problems, try calling them. They usually only help pay accounts.1 800 827 6364 Even if you have to open a pay account it's easy to switch to a free account at any time by going to their top Toolbar - Help - Manage My Account.

2 more replies
Relevance 47.97%

Hi, I know the rules about asking how to get round passwords, however what I would like to know is: My computer has just started asking me for my network password everytime outlook does an automatic check for email. This has only just started. I can enter my password and all works well but what causes this ti happen? I went to mt email settings and checked the box that says remember my password but this makes no difference, every 15 minutes when a automatic check is carried out I have to retype my password. I hope this does not breach nay forum rules. TIA

Answer:Password request when sending email

Authentication issue I guess - have you changed your network password recently or using a different PC that has cached passwords? It may be trying to autheticate you with the old password (or a cached password) and failing therefore asking for your password, which when given correctly allows you to carry on. Log-off... log-on usually solves if it is a changed password related issue.

7 more replies
Relevance 47.97%

I have Windows XP and was using Outlook when I tried to send an email last night and a box popped up asking for my network password. I entered the password & clicked ok but the box kept reappearing and I was unable to send the email.
I did a little checking and it looks like this may be an 'Outlook problem'. A solution on the MS site said something about the 'registry' and if I messed up, I could lose everything! I'm not that computer savvy and would appreciate all the help I can get to resolve this problem. I can handle step by step instructions , so be gentle. Thanks in advance!

Answer:network password request to use email


when you were trying to send the email, were you connected to the internet?
-to check:[outlook express -->bottom right corner sould say working online]
[microsoft outlook-->the gray bar at the bottom should not have a gray box with a red x under it]
-if you were not connected to the internet go to file and make sure the work offline button is not activated.
-if you were connected, copy paste your email in notepad for now and save it.
get a free msn hotmail by going to
you will be able to send your email from there.

2 more replies
Relevance 47.56%

I have a thinkpad yoga that is still until warranty until July It recently developed an issue in which I think the touchpad is a bit lose... but my biggest concern is that when I followed the links for a warranty repair to managed technical support access I created an account with my laptop serial number and created a ticket. A week later nobody called to contact me about the issue. I checked the web site and my ticket had been CANCELLED with no email or phone call/message. I put in another request today and again in the problem description it says "PRODUCT IS NOT A LENOVO PRODUCT, OPEN CALL IN THE SR TOOL." Whatever that meansI guess tomorrow I will call but sheesh what is wrong here?  Not only is the laptop not working bu **bleep** seems neither is the way to report an in warranty problem.

More replies
Relevance 47.56%

Please follow the instructions in the following link and post your logs in the thread you create (NOT in this thread):,46313.0.htmlSUPERAntiSpyware Scan Loghttp://www.superantispyware.comGenerated 10/17/2010 at 04:42 PMApplication Version : 4.44.1000Core Rules Database Version : 5700Trace Rules Database Version: 3512Scan type       : Complete ScanTotal Scan Time : 00:52:52Memory items scanned      : 468Memory threats detected   : 0Registry items scanned    : 5834Registry threats detected : 0File items scanned        : 20122File threats detected     : 0alwarebytes' Anti-Malware 1.46www.malwarebytes.orgDatabase version: 4865Windows 5.1.2600 Service Pack 3Internet Explorer 8.0.6001.1870210/17/2010 6:48:24 PMmbam-log-2010-10-17 (18-48-24).txtScan type: Quick scanObjects scanned: 141823Time elapsed: 9 minute(s), 31 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious item... Read more

Answer:My logs per request. Original post "I can't open multiple windows"

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs. 1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.2. The fixes are specific to your problem and should only be used for this issue on this machine.3. If you don't know or understand something, please don't hesitate to ask.4. Please DO NOT run any other tools or scans while I am helping you.5. It is important that you reply to this thread. Do not start a new topic.6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.7. Absence of symptoms does not mean that everything is clear.Download Disable/Remove Windows Messenger to the desktop to remove Windows Messenger.Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.Unzip the file on the desktop. Open the MessengerDisable.exe and choose the bottom box - Uninstall Windows Messenger and click Apply.Exit out of MessengerDisable then delete the two files that were put on the desktop.***********************************************Open HijackThis and select Do a system scan onlyPlace a check mark next to the following entries: (if there)O2 - BHO: (no name) - {02478D38-... Read more

1 more replies
Relevance 47.56%

Sorry if this has been brought up before. When I open my email account from my browser I am taken straight into my emails without having to put in my account name or password. I always sign out. I never check the "keep me signed in" box. But this invariably happens. Surely there should be some security measure to prevent this as it seems to leave the system open to hackers.

Answer:Being taken straight into email account without password being request

robleau said:

Sorry if this has been brought up before. When I open my email account from my browser I am taken straight into my emails without having to put in my account name or password. I always sign out. I never check the "keep me signed in" box. But this invariably happens. Surely there should be some security measure to prevent this as it seems to leave the system open to hackers.

I have two accounts I access online, one provided by my Domain Hosting Service and the other on my ISP's site. The first keeps me logged in and the second requires starting from the login page but does always have my info in the dialog boxes and just needs another click. My Hotmail, Gmail and accounts keep track of me and go directly to my Inbox. I mostly use Firefox.

1 more replies
Relevance 47.56%

I have just upgraded from Windows Vista to Windows 8, not without a hitch!
The problem I have is that I cannot find all my old email folders from Vista.
I have tried searching for remedies but to no avail.
Could anyone point me in the right direction as to where I might find them on my system and what to do next?
I have now installed Thunderbird to send and receive my emails which is definitely better than using windows live.
Thanks in advance for any help.

Answer:Help request in finding lost email folders?

If you did a 'clean' install you have lost them. You should have saved all the files to a spare hard drive or a memory stick.
But, if You have a webmail account you may find them on the ISP server.

1 more replies
Relevance 47.56%

Sorry if this has been brought up before. When I open my email account from my browser I am taken straight into my emails without having to put in my account name or password. I always sign out. I never check the "keep me signed in" box. But this invariably happens. Surely there should be some security measure to prevent this as it seems to leave the system open to hackers.

Answer:Being taken straight into email account without password being request

Originally Posted by robleau

Sorry if this has been brought up before. When I open my email account from my browser I am taken straight into my emails without having to put in my account name or password. I always sign out. I never check the "keep me signed in" box. But this invariably happens. Surely there should be some security measure to prevent this as it seems to leave the system open to hackers.

I have two accounts I access online, one provided by my Domain Hosting Service and the other on my ISP's site. The first keeps me logged in and the second requires starting from the login page but does always have my info in the dialog boxes and just needs another click. My Hotmail, Gmail and accounts keep track of me and go directly to my Inbox. I mostly use Firefox.

0 more replies
Relevance 47.56%

First of all I should say that my understanding of all of this stuff is very elementary.

I have been getting "HTTPS tidserv request 2" message for the last couple of weeks. In addition, I sometimes get 200 or so "Symantec email proxy" messages and also messages that internet traffic for a certain IP address is being blocked for the next ten minutes. Finally, I have two Run DLL errors that pop up on startup now. One is npwinvi.dll and one is mswyxtnd.dll.

I've run Malwarebytes' Anti Malware and also SUPERAntiSpyware and both scans find tracking cookies and trojan rootkits, but as soon as I delete the items, if I run another scan it finds more of the same stuff.

Our tech guys took my computer away and worked on it for a full day. They ran scans and manually removed stuff from the registry, but apparently they didn't fix the problem. I need my computer, and can't really afford another day or more of them working on it, especially if they're not going to get it fixed.

Can someone help?


More replies
Relevance 47.15%

After too many unexplained problems, I decided to reinstall Windows 8.1 Pro x64, and migrate off of SBS 2011 Standard. In addition to the primary workstation that can't read any event logs, I built five Server 2012 R2 servers (Hyper-V host, Active Directory
VM, Exchange 2013 VM, SQL Server 2014 VM, and WSUS VM).

I was diagnosing why my workstation's Outlook cannot reach the local Exchange Server.   I tried to look at the event logs, and found the
Event Viewer cannot open the event log or custom view.  Verify that Event Log service is running (it is) or the query is too long (whatever that indicates).  The request is not supported (50)
Looking at the directory of the event logs folder.  It appears that most logs are empty, which is understandable since it's a rebuilt installation.  I found a small number of Applications and Services Logs and it appears nothing was logged since
six days ago on 4/4/2016.   On support forums, I found many have this exact problem on Win 7, Win 8, and Win 10.  Of the solutions posted none of them would even execute on my Win 8.1 Pro x64 machine.  I tried clearing the event logs (WEVTUTIL
CL logfilename) and am told Failed to clear log .... The request is not supported. 
It's very difficult to diagnose why Outlook 2013 cannot reach Exchange 2013, even if Outlook is installed on the Exchange server machine (just as a test).  The web-based Outlook owa, ecp, ... all work fine. ... Read more

More replies
Relevance 47.15%

My computer lately has been running strangely slow. At first it just seemed like the internet (I use Firefox), but I then noticed everything else was running slow and often froze/was "not responding". I can't exactly pinpoint when this started, but I have a feeling it possibly might have been from downloading stuff without being careful (torrents and such). My estimate is around a month or less, or pretty recently. My computer is fairly new, around a year old or so-- Vista.

I am not getting raided with pop-ups or ads, my front page has not changed, but everything suddenly started getting noticeably and significantly slower. It's very frustrating.

I completed everything from the Read and Run Malware Cleaning Guide. I'm not sure if it's helped... Please help me take a look at what's wrong in the log files.

Answer:Unusually Slow PC; All steps of Read & Run completed, logs attached. Need Support.

Re: Unusually Slow PC; All steps of Read & Run completed, logs attached. Need Support

Here are three of the logs.

5 more replies
Relevance 46.74%

I got an odd email today has anyone seen this before?

Subject: Privilege Access Request

A new Active Directory Privilege Access Request has been submitted for you.

You must accept the risk associated with this access before it can be processed. Using the link below to access your request, click the “Edit”
option at the top of the form to be prompted to sign in to the system. You will sign in to the system with your Intranet Logon ID and password. Once you are signed on to the site you will be brought back to your form, scroll to the bottom of the form and click the “Accept Risk?” button.

The application manager will be requested to accept or decline your request.----->
http:// something .

NOTE: Please disable any popup-blocking software in order to use this system.

This message has been sent by an automated production database system.
PLEASE DO NOT REPLY DIRECTLY TO THIS ADDRESS. The above address is for outgoing email only.Click to expand...

What is an "Active Directory Privilege Access Request" ?

Answer:Active Directory Privilege Access Request.... odd email.

I dunno, I'd contact Wachovia about this. If this does come from them, then it's likely an internal email that somehow escaped into the wild ( although I didn't get it, so it's not on a large scale or anything ).

More likely phishing.

6 more replies
Relevance 46.33%
Question: Router Email Logs

How does this email sending of my logs work?? It doesn't even ask for password. Does this config work?


Hawking HWR54G Rev M

Answer:Router Email Logs

9 more replies
Relevance 45.51%

If I enter a website like this one using IE after logging in and access a page that contains an image and then click email picture from context menu then my session ends and I am logged out as proven by the appearance of login screen when accessing the same image. this happens for every website that I tried. What is the reason? How to overcome this? Is there a programmatic solution using java script? (I am developing a web site).
Thanks in advance.

Answer:clicking email picture logs me out

Hello and welcome to TSF

Have you tried to reinstall IE? if not please follow the steps below...

Re-install Internet Explore 7
Please go Here (Click on the Blue link) and download a fresh version of Internet Explore 7.
Uninstall the version of IE you have installed now, to do so follow these steps:
Click Start
Click Control Panel
Double click Add or Remove Programs
Scroll down until you find Internet Explore
Then click Change/Remove, and follow the prompts.
** Please Note: If you are unable to see IE7 in Add or Remove Programs follow these steps:Click Start
Click Run
Type or copy and paste, into the text box:
Then Press Enter **
Restart your computer.
Install the fresh version of Internet Explore.

1 more replies
Relevance 45.51%

Does anyone know if Event Viewer actually captures information when an administrator sets up forwarding on a mailbox. If so, where can I find this info.Thanks in advance.

More replies
Relevance 45.1%

OK maybe you guys can help me out. I have been using a DGL-4500 with N for over a year now. I have had really good wifi, no real problems. Recently I have become interested in firewall logs and analysis. And have been going to some sites that use the information to gauge the overall health of the internet. Well I would love to set up my router to send my logs via email automatically on a schedule. This is an option with my router but I have yet to get it to work.

So I was wondering if any of you out there have or are doing something similar, heck you might even have the same router.

I have tried: same email to same email, different email to different email, regular SMTP ports, secure ports, with and with out authentication, and I have tried these using comcast and gmail.

When I click on the send email button I do get a message box that states I have sent the email to the email I have entered, but the email is NEVER delivered.

More replies
Relevance 45.1%

My PC has become a host/server for spammers. My ISP notified me of this and said they would have to discontinue my service if I did not get rid of the spammers. They are giving me additional time to try and correct the problem. Please help.

Per my ISP's instructions, I ran A2Square, which supposedly found and deleted a lot of stuff. Unfortunately, the problem still exists. There is at least one program still listed in the msconf file that I know is a problem. gjvgpoqqpv.exe. I do not know what dnba and kvkwstbu are. There may be other problems as well.

I have followed your instructions for malware removal and am posting the results.

Thank you for helping me. I don't want to get shut down!

Answer:PC is host for email spammers--Logs.part.1

Re: PC is host for email spammers--Logs.part.2

Here are more logs.

I believe this is everything. If you need more, please let me know.

Anxiously waiting to hear from you. Thank you for helping me.

15 more replies
Relevance 45.1%

im searching for app like keylogger which can send logs to email or ftp but support asian languages too
i've found many keyloggers but they dont acceps asian langs
can anyone help me?


More replies
Relevance 44.69%

I've already run SmitfraudFix to no avail and obviously none of my programs have been able to get rid of it either! I have McAfee antivirus, Windows Defender, Spybot Search & Destroy & AVG Anti-Spyware.
ComboFix seemed to work at first, but not long after I opened Internet Explorer the pop-ups started again. Any help on this would be greatly appreciated as I'm beyond frustrated! Below are the logs....

SmitFraudFix v2.253

Scan done at 12:20:51.57, Sun 11/18/2007
Run from C:\Documents and Settings\Administrator\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process
»»»»»»»»»»»»»»»»»»»»»»»» hosts localhost

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{43F9E655-7E04-493A-9F85-98585394306B}: DhcpNameServer=
HKLM\SYSTEM\CCS\Services\Tcpip\..\{56EB695A-594... Read more

Answer:Solved: Still Can't Rid [email protected] - SmitfraudFix, HJT & ComboFix Logs

12 more replies
Relevance 44.69%

I thought I had already posted this, but I did not see it on the Forum. I received a notice to update my HiJackThis and post the new log as a reply to the original, but since I don't see the original, I'm reporting. Sorry if this ends up being a repeat!I am a newbie and only know enough about computers to get myself in trouble. I believe my Dell Vostro 1500 may be infected with a virus. My wife's Yahoo email was apparently hacked and it sent out bogus emails to folks on her address list - including myself - containing a link. Since she sometimes forwards me stuff, I made the supreme mistake of clicking on the link. It was for a pharmaceutical company...I clicked out immediately, but I think the damage has been done. My computer has been running slow ever since and sometimes gets hung up.I ran Spybot Search & Destroy and it found some cookies that probably were not a threat. I ran Malwarebites but it came up clean. I did notice it kept getting hung up on the mbam.exe process, but would recover. I was running multiple scans, so it may have been a competition for resources. I also know from reading up that some viruses can interfere with Malwarebites to "protect itself." SUPERAntiSpyware free edition caught 33 cookies and one case of XP Protector 2009, which I understand is a trojan virus. I removed it, but I am still having problems with the hard drive running almost constantly and stuff lagging (in Firefox, opening file explorer, even typing here ... Read more

Answer:Virus from Email; System Slooooow; HiJack Logs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Relevance 44.69%


I would like to know if I can check if an email was sent from my outlook express account yesterday between 6pm and 8pm. Someone else had access to my computer at this time. If something was sent (a very important doc) it would have been sent from word via the Send to: Mail recipient option.

I called my ISP this morning but they can not help they tell me there is no records kept of my mails passing thought the mail sever and told my to check my outbox. Doh! I already did that first. If this document was sent, it would have obviously been deleted from my outbox.

Is there any other way? Is there a log or registry kept on my computer anywhere that I can check down at code level for eg which I know absolutely nothing about btw.

I don't need to know the content as if there was anything sent I know what it would have been there is only one doc there that would be of interest to this person and it would have been sent to their email address.

Can anyone help. I would be so grateful.
Many thanks.

More replies
Relevance 44.69%

I installed Norton 360 and it removed several trojens from my system. One day after installing, I started getting error pop ups. The heading on them is norton 360, followed with a big red X Email Error, each error is for a different reason and the from and to address are also different. The subject line seems to mostly be about viagra. The email system, Outlook Express, does not have to be open for this to occur. When you click ok on one, it goes away and another appears in a never endless fashion. It seems something is trying to send this spam using my computer.

Computer Info:
Tech Support Guy System Info Utility version
OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Intel(R) Pentium(R) 4 CPU 3.20GHz, x86 Family 15 Model 2 Stepping 9
Processor Count: 1
RAM: 1535 Mb
Graphics Card: NVIDIA GeForce FX 5200 , 128 Mb
Hard Drives: C: Total - 305242 MB, Free - 265402 MB;
Motherboard: Dell Computer Corp., 0GH001, , ..CN481113A900QP.
Antivirus: Norton 360, Updated: Yes, On-Demand Scanner: Enabled
Logfile of HijackThis v1.99.1
Scan saved at 8:03:11 PM, on 1/10/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Running processes:
C:\Program F... Read more

Answer:Norton 360 Popup Email Errors Logs Posted

Used the Utility, hitmanpro.exe to remove the problem

1 more replies
Relevance 44.69%

Hi folks.
I posted another thread last night but for a different machine so please treat this one as a separate (though possibly related) issue.

Some time yesterday I got a delivery failure report from a spam email that was sent out to some (if not all) people in my email address book. I use Thunderbird with the WebMail plugin to access a Hotmail account but I'm not sure if the spam went from here or elsewhere.

I've run through the README and would appreciate if someone could take a look at the logs and let me know if I need to do anything further.
During one of the scans (SAS, I believe) McAfee alerted me to the removal of Generic.dx!vje. It popped up several alerts for the same one, and several more I didn't check for detail.

Relatively new machine.
Windows 7 Professional (64 bit)
Intel Xeon E5503 2GHz, 12GB RAM.
OS installed to C: (0.5TB HDD with 373GB Free).
The second HDD (D is the HDD removed from my previous machine (150GB drive with 13.5GB Free).

I don't know if any of that is relevant since I'm not having any speed issues - but it can't hurt to include it.

Logs attached (no RootRepeal log, obviously).


Answer:Spam sent from my email address - scans run, logs attached.

Reviewing those logs and will get back to you with a set of instructions soon.

2 more replies
Relevance 44.28%
Relevance 44.28%
Question: email support

i sent an email 2 a freind and he said he carnt stop receiveing it he is running xp and e mail claint is outlook so i sent the same email to some one else and they said they received it no worries i use norton to check for viruses because this bloke said it was my computer and i sent him a virus but that carnt be i check all emails i use incredi mail as email client and norton checks everything i send can someone help me and my freind out as he dosent want any more emails from me then i heard today it is doing it to all of his emails that get sent to him from different people

Answer:email support

It more then likely is a virus. Norton, sadly, does not pick everything, infact you'd be lucky if it did pick up anything.

Try AVG or AVAST (they are free anti-virus programs but are a lot more efficient)

You might also find help in the highjack section. The link on the top right of any page (one that reads "Having problems with spyware and pop-ups? First Steps") will help you with that.

7 more replies
Relevance 44.28%
Question: Email support?

I've been having way too much trouble navigating the Lenovo support pages.  Like most companies, it seems they try to hide their contact info within all of the troubleshooting guides written for first time computer users.  Anyway, could anyone direct me to Lenovo email support?  I'm abroad right now and cannot call their phone support line without paying long distance.  The only email support that I could find was IBM Electronic Service Call, which seems geared towards IT professionals and businesses.  Any usefull referals are greatly appreciated.Austin

Answer:Email support?

Austin, welcome to the forum,
this site offers you the possibility to submit a request online.
If you are experiencing problems with your ThinkPad, you might like to explain them here to see if forum members are able to offer you a solution??

6 more replies
Relevance 43.87%

I am requesting help on ridding my computer of the following that Kapersky online scanner picked up:

Packed.Win32.Katusha.g virus threats

I have been working with Webroot all day in getting rid of vundo and a couple of other problems but I still have these to contend with. Please advise on what I need to do to correct this problem so they may never show up again.

Thanks in advance. T8r

DDS (Ver_09-10-26.01) - NTFSx86
Run by Owner at 5:07:22.59 on Thu 11/12/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1237 [GMT -7:00]

AV: Webroot AntiVirus with Spy Sweeper *On-access scanning disabled* (Updated) {77E10C7F-2CCA-4187-9394-BDBC267AD597}

============== Running Processes ===============

C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\MozyHome\mozybackup.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe
C:\WINDOWS\system32\Search... Read more

Answer:Trojan.Win32.Monder.cust & Packed.Win32.Katusha.g virus threats

Hello and welcome to TSF.

What's the location of the threat which Kaspersky is reporting?

You seem to have run or attempted to run Combofix. Please post the log it produced. It should be located at C:\Combofix.txt.

Reminder: Combofix should not be run without the supervision of a trained analyst as cited in our pre-posting page.


Why we don't ask you to run ComboFix from the onset

As stated by the author of ComboFix:

ComboFix is a very powerful tool which when improperly used may render your machine to a doorstop.

We first need to verify if there's any rootkits present and how they could affect our tools. DDS & GMER are preliminary scans. We use their logs to map our strategy for attack.

With these logs we can determine the infections present & decide whether to deploy ComboFix.

9 more replies
Relevance 43.46%

Does any one know the HP support /complaints emal address?  I have been sending emails to these addresses but have never recieved a reply.  Failing that does anyone know the email address of the CEO of HP, I'll write to him to escalate the issue.
{Content Removed}
Thank you.

Answer:Hp support email address


  I have brought your issue to the attention of an appropriate team within HP. They will likely request information from you in order to look up your case details or product serial number. Please look for a private message from an identified HP contact. Additionally, keep in mind not to publicly post personal information (serial numbers and case details). If you are unfamiliar with how the Forum's private message capability works, you can learn about that here.
Thank you for visiting the HP Support Forum.

1 more replies
Relevance 43.46%

Okay bit of a riddler i think....

I am trying to add my mothers old NTL World email account onto her new Outlook (Hotmail), now im abit mythed with how to go about filling the server information for outbound and incoming. To be fair its something i know very little about, there are sections for port number as well. Can anyone assist in what i need to fill out on the Outlook add an account section and the correct settings to get all her old emails to bleed into this new Outlook email?

Would be great! Virgin Media took over NTL World some years ago now....

Answer:Support on NTL World Email

15 more replies
Relevance 43.46%

Just call us on our toll-free AOL EMAIL SUPPORT NUMBER - 1-844-205-0712 and get instant support from our AOL Experts, they will resolve all your problem within 5 to 10 minutes just give us chance, You can visit our website Aol Email Support |1-844-205-0712 | AOL Email Support Phone Number | where you can drop your message on our contact us form.

More replies
Relevance 43.46%

i need email support for my small courier company, can any one recommend me any firm who has been in this business for sometime and can provide support at a reasonable cost. Urgent plz???

Answer:email support needed

Where in the world are you? That might make a difference to what's available if you want on-site support.


2 more replies
Relevance 43.46%

I need help, service, I ruined my Inspiron and now he wants me to what I paid,, please help, Zden?k Jan?ík Prague Czech Republic

Answer:Email Order Support

I need help, service, I ruined my Inspiron and now he wants me to what I paid,, please help, Zden?k Jan?ík Prague Czech Republic

1 more replies
Relevance 43.46%

Is there a google support email to contact them? I went to google help section there is no email to contact them at all.

Answer:Google support email

6 more replies
Relevance 43.46%

Hi, may i know the support email of Switzerland ?Thankyou .

Answer:Switzerland support Email

Click on Switzerland in the following Hp web document to find the contact options, including email.

1 more replies
Relevance 43.46%

When I look at warrenty status it says:This product has a three year limited warranty and is entitled to mail-in or carry-in repair service. But I cannot find any support email!Living in Amsterdam, I cannot use the (USonly) webforms for support requests. Furthermore I payed for on-site-support ??? If I phone technical suppport the cannot put me through to contract administration and they cannot see my warrenty status. Anybody having the same problems? 

More replies
Relevance 43.46%

Does anyon have a contact number or email for support? i have a unit in for repair for overtwo months and when i look up the support ticket it simply says "On Hold'.  When i get in touch with customer suppport they say call 800 474-6836 which no one answers but a chatbot and will not pass you through to any human or give you a email to get answers. 

More replies
Relevance 43.46%

requested logs for Windows email disappeared, AVG Free 2014 stops scanning and more
I believe I posted to the wrong forum earlier today. Sorry


DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 9.0.8112.16592 BrowserJavaVersion: 10.7.2
Run by Admin. Kate at 16:57:52 on 2014-12-06
Microsoft? Windows Vista? Business 6.0.6002.2.1252.1.1033.18.1790.1225 [GMT -7:00]
AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
============== Running Processes ================
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkSer... Read more

Answer:requested logs for Windows email disappeared, AVG Free 2014 stops scanning at 60% and

Hello and Welcome to TSF.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.


I'm not seeing anything malicious in your logs so far.

Why did you run the analysis tools in Safe Mode with Networking? Is something wrong with Normal Mode?

We prefer tools to be run in Normal Mode, from your normal user account.


Please download AdwCleaner from here and save it to your desktop.Do NOT click the green 'Download' button(if visible).
Click the blue 'Download now @bleepingcomputer' button.
Run AdwCleaner and select Scan
Once the Scan is done, select Clean
Once done it will ask to reboot, please allow the reboot.
On reboot, a log will be produced. It can also be found at C:\AdwCleaner\AdwCleaner[S#].txt
Please copy/paste the contents of the log in your next reply.

Please download Farbar Recovery Scan Tool and save it to your desktop.Double-click to run it. When the tool opens click Yes to the disclaimer.
Make sure the Addition.txt button is ticked.
Press Scan butt... Read more

19 more replies
Relevance 43.05%

My ideapad z580's hard drive completely failed after a random Windows update ravaged my computer with its awfulness. I need support and repairs, but I live in Tokyo now and don't want to be charged a million yen trying to call a u.s. support number. I can't even find my computer on the support page drop down menu; it goes from z575 to z585 and completely skipped over z580. I've had a million problems with this machine's performance from day 1 and really I just want to go out and buy an axe and chop it to oblivion but it's the only computer I'm going to get so I NEED to get it repaired! How can I get this hard drive repaired/replaced from Tokyo? I am within warranty, and I got the super duper kind.I only have a smartphone now, and using lenovos website is incredibly rage-inducing so I'd really like it if support could help me through email to create a service request.
Mod's Edit: System model added to front of Subject line to improve visibility / clarity

Answer:z580 - Need email customer support.

hi Kimhartley24,
Welcome to the forums and sorry to hear about your trouble.
Looking at the International Warranty Services (IWS) lookup page, the Z580 has warranty coverage in Japan but it's thru phone support only. I would recommend you contact the helpdesk on how to go about getting the HDD replaced and the OS reloaded.
Country/Region: Japan
Phone Number: 0120-994-244
Supported Language: Japanese / English
Hours of operation: 9AM - 6PM
In addition, if a Windows Update corrupted the OS (causing it to not boot into Windows) then there maybe a chance to recover it.
Things that you can try:
Option 1:
Shutdown the machine, press the OneKey Recovery (Novo) Button then select System Recovery. 
  - Link to picture
If successful, the System Recovery page should appear and just follow the prompts to restore the system to factory settings.
Video Guide:
How to RUN OneKey Recovery on LENOVO Laptop
Option 2:
1. If the Z580 came preloaded with Windows 8/8,1, using a different PC, follow this guide on how to download a Windows 8.1 ISO. When finished, follow this guide to create a bootable UEFI flashdrive.
If successful, you can then use Automatic Repair or one of the System Recovery options to restore/reset Windows.
How Run "Automatic Repair" to Fix Startup Issues in Windows 8 and 8.1
How to Boot to "System Recovery Options" in Windows 8 and 8.1 (see Option Seven)
Alternativel... Read more

1 more replies
Relevance 43.05%

Submitted question but am told: ERRORS
The following errors occurred with your submission
This post has been automatically been marked as spam. Please revise your comment by removing links and any questionable material. If you are still having problems, please e-mail site support and include a copy of the comment.

More replies
Relevance 43.05%

I need to know if anyone knows what is going on with Yahoo email or if they know a better way of getting hold of their support. I've already sent 3 support forms in and NO RESPONSE. I have tried to open my Yahoo email since 11:30 yesterday and I get the message that I have copied following my message here. I haven't changed any settings on my browsers or computer. I have tried it on different browsers (FlashPeak Slimbrowser and IE) and I tried rebooting and nothing has worked. I don't have any trouble accessing other web pages on the same laptop. I can go to MY Yahoo page without any trouble and it shows that I do have 24 messages in my inbox but I can't open the link to get to them. I even tried clicking on Sign Out, but I get the same message. It is sooooo frustrating! My opsys is WinXP. I haven't done anything unusual in the last day or two that I can remember. I really need to get into that email account! My backup email is [email protected].


The page cannot be displayed
The page you are looking for is currently unavailable. The Web site might be experiencing technical difficulties, or you may need to adjust your browser settings.


Please try the following:

Click the Refresh button, or try again later.

If you typed the page address in the Address bar, make sure that it is spelled correctly.

To check your conne... Read more

Answer:Yahoo email --can't get in and no support response

Delete any Yahoo cookies

then get to mail from the Main Yahoo screen and establish a new bookmakr

2 more replies
Relevance 43.05%

There used to be a well-hidden location on the Symantec Web site where SOME assistance with their software could be handled by email--anyone know if that still exists--I could not locate it.

I need their help to determine how to solve the inability of the latest LiveUpdater to successfully update the Norton 2005 AntiSpam Components and Norton 2006 Norton AntiVirus Norton Program Update (English).

Although I have been a loyal Norton user since Peter Norton started the company, I will NEVER use their products again.

It is also amazing that with updated antivirus definitions, one or two of the new Zlob Trojans got into my computer and Norton could not find them or keep them out, although Panda and Ewido's online scans found these Trojans once my computer was infected.


Answer:Symantec tech support via email--where?

could this be what you are looking for? like you said it is hard to find. it is the closest i could come.

2 more replies
Relevance 43.05%

Everytime I open IE7 after installing it recently, I keep getting redirected to

I have tried changing it through the internet options and have tried even in the registry through regedit.

Below is the log from hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 1:14:29 AM, on 6/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Running processes:
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
c:\Program Files\Norton Personal Firewall\NISUM.EXE
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Canon\Memory Card Utility\PIXMA iP6000D\PDUiP6000DMemCrdMgr.exe
C:\WINDOWS\System32\svch... Read more

Answer:IE7 redirecting to com

Does anyone know what I can do to fix my issue??? I'm stumped and been up hours trying to find a fix????

2 more replies
Relevance 42.64%

Nevermind the details, but Skype people insist that my Skype ID doesn't exist, even though I use it once or twice every week. Now they have changed the website to remove links to email.

And it's not like I've been a freeloader. I have probably spent $100 over the years on Skype doing calls from overseas to landlines.

Any suggestion will be received gratefully, I know that this is an OS forum, but Skype is now owned by an OS company and also there are a lot of sharp techs on this forum.

Answer:OT: How do I reach someone in Skype support by email or chat


2 more replies
Relevance 42.64%

I took the free update to windows 10 and it did not carry forward the licence for the pre installed  Windows Office. This means that I have an option to purchase a replacement licence from Microsoft. I have spent over an hour today with windows support and they say that HP can reset the licence - does anyone know how I can contact HP Support as I cannot use any of the MS Office unless I pay Microsoft.

Answer:Does anyone have a contact email or chat link to HP Support

Hi, Which version of Microsoft Office you are running ? Is it Office 2010 Starter ? Rewgards.

1 more replies
Relevance 42.64%

We have recently had Windows 7 installed at our small business, we are having a problem with printing specific emails, when we reply to an email that has an image in the signature and we quote using £ symbols on reply, when we print the email out the £ symbol turns into a square.
We have changed it to plain text formatting which allows us to have the £ symbol but we loose our signature (as this is htm attachement) and email formatting (lots of double line spacing)
We are printing through a network using infotec MP201 which has latest drivers and Windows 7 64 Professional

More replies
Relevance 42.64%

I've been on their site for a half hour now and can't find how to contact them about the problem I am having with AOL. All I can find is useless "knowledge bases" and non-technical support. UGH!!!


Answer:What's Symantec's technical support email addy?

7 more replies
Relevance 42.64%

Norton discovered a virus on my computer yesterday named W32.HLLW.Gaobot.gen

I could not repair, so I tried to download 'fix' file and I couldn't get on the Symantec website. I can't run liveupdate, and no matter what site I go to to get to Symantec it says not found.

I went to my neigbors and downloaded the fix, did the fix, reformated my hard drive and loaded XP home, (needed to do this and thought might as well now) got everything reloaded, installed, no problem, except the Norton, still can't live update or even get on their site

This morning I woke up to find my Norton open, saying I had the same virus again, I again, did the fix, says it is fixed but still cannot get on Nortons site?

I don't know if settings are wrong, I messed with everything under the internet security, added norton/symantec as trusted sites. I would like to just email symantec tech support, but I can't find their email address anywhere, I have even tried to guess at what it is but they came back

HELP...please someone, tell me how to fix my problem or let me know the tech support addy.

Kindest regards,

Answer:Need help or Norton tech support email addy

Closing duplicate, please post only once.

1 more replies
Relevance 42.64%

Hello,will win 7 support my old OutlookEmail-Client.apreciate your advicePatrick

Answer:Does Win7 support old Outlook Email Client?

"Fire up Outlook Express on the new machine" Outlook Express in Windows 7 - is that even possible? I tried Outlook 2000 on Windows 7 and whilst all the other Office 2000 apllications worked, Outlook 2000 didn't. Outlook 2003 works fine.

5 more replies