InterviewSolution
Saved Bookmarks
InterviewSolution
This section includes InterviewSolutions, each offering curated multiple-choice questions to sharpen your knowledge and support exam preparation. Choose a topic below to get started.
| 3501. |
Solve : I do not know if it is a virus or what ... but please help!? |
|
Answer» A few days ago in the MIDDLE of working on PREMIER Pro software something got stuck |
|
| 3502. |
Solve : cannot check viruses on mac? |
|
Answer» Guys, I am a newbie with computers. Last week I noticed that when I wanted to open a window with a forum or web sites, I have problems. It shows that I have viruses, cannot check it, don't know how. Developers text me that I could be a spammer . I also started getting notified of being full stored inside mac, but it works quite well. Guys, do you have a piece of advice for me? I'm sorry but I can't give any help with malware on Mac OS. None of my tools are designed to work on that OS.Still thanks, Dave! I HOPE someone will help me or I will find out how to solve it. Don't you know if this program https://bestantiviruspro.org/review/mcafee-review/ works good for CHECKING any computer problems? I found it here on the forum, but haven't seen it earlier. here is a link to some popular AV's for Mac and many are free.Quote from: Elizabeth S. Silva on May 26, 2020, 04:32:15 PM Guys, I am a newbie with computers. Last week I noticed that when I wanted to open a window with a forum or web sites, I have problems. It shows that I have viruses, cannot check it, don't know how. Developers text me that I could be a spammer . I also started getting notified of being full stored inside mac, but it works quite well. Guys, do you have a piece of advice for me?Better late than never))) I would not say the description you have provided, Elizabeth, suggest you have any viruses on your mac. Or rather there is one, it is technically not a virus, it is a kind of scareware. I write this cause I have got one on my mac, coupled with Safari problems. I will PROVIDE more details in a while, it was on iMac in my office (now I am out with my ToughBook on site). Here I am))) I have already upgraded to Big Sur, and it has been a while since I had that issue. It was so nasty that it made me take a dozen of screenshots. I have tried MalwareBytes and MacBooster, both failed to detect the malware. The malware (I assume it was one) was named Quick Mac Fixer. Quick indeed, and super stubborn as it loaded its voice message with a nice female voice, slight accent like Eastern European (maybe), TELLING something like blah blah blah there are malware and memory hogs on your mac, please let me remove'em all. It 'found' hundreds of threats in a bling of an eye. I could not remove it manually, it simply would not let me sending it to Trash. I assume it kept its processes running on the background that prevented the removal. Fortunately, the scareware does not seem to be compatible with Big Sur, but there are still many users AROUND running lower versions of macOS. The outrageous thing is that the malware is still available for download, its website is not even marked unsecure or something. https://ibb.co/PNnmjR6 Here you can see a couple of screenshots, I have not managed to add it to my first posting...This thread is almost one year old. I'm quite sure that the original poster has moved on. |
|
| 3503. |
Solve : Possible Virus or Spyware? |
|
Answer» Hello. A whole bunch of problems happen today. I was downloading something and suddenly my McAfee picks up a whole bunch of trojans. I did not get it from any WEIRD sites. The place I went to is usually safe. I haven't had any problems until today. |
|
| 3504. |
Solve : Does this look right, Help ?? |
|
Answer» I swear, this guy is Mac. Raptor Quit trying to play it cool ! <pic removed by admin>Your pictures aren't showing up for me, Jp.Raptor, Hardee Har-Har CBMatt, What do you mean ? I was asked by dl65 to post it, it's the right picture isn't it ? JpRaptor, Why don't you in all of your computer prowress, and savy, get yourself a remote accsess and just fix the *censored* thing for us hopeless sons of dogs. You would be in Compuserve Heaven, exactly were you think you going to be some day ! Jp |
|
| 3505. |
Solve : Windows activation Trojan can catch the unwary? |
|
Answer» Watch out – the bad guys have stepped up their Trojan creation nastiness by creating Trojans that look like real Windows alerts which wouldn’t fool experts but could easily catch novices. Given Microsoft’s well publicized anti-piracy drives, some novice to intermediate users might easily be fooled by a new Trojan horse called “Trojan.Kardphisher” which opens up a relatively realistic looking “Microsoft Piracy Control” dialog box. Symantec says that Trojan.Kardphisher is a “Trojan horse that attempts to steal credit card numbers by tricking the user into entering their credit card details to activate Windows”. Frighteningly, if a user falls victim to this Trojan, the rogue software will shut down Windows should the user CHOOSE to “activate” their copy of Windows later, something that would easily spook novice and intermediate users into entering their details when they next turn their computer on, because the Trojan instantly activates itself again and prevents you from running other software. The Trojan, which you can see 'screen 1' of here, and then 'screen 2' of here, is incredibly brazen. Once you choose to “activate” your copy of Windows because the Trojan tells you that “Your copy of Windows was activated by another user”, it asks you to enter in your location, your contact information, your credit card number, your ATM pin number (!), your card’s expiration date and the 3-digit CVV2 number. The software tells you that your card won’t be charged, but that it needs the details to proceed with activation. Naturally, if you DIVULGE your real details, they are sent off to the author of the Trojan, who can then use them to steal your identity, rack up credit card debts and do other nasty things. One suggestion from the web on dealing with the Trojan should you find yourself infected with it is to simply enter in fake details, simply so that you can get past the “activation” process and immediately find out how to remove the Trojan from your system. Thankfully, Symantec have posted removal instructions which tell you how to get rid of the Trojan. If a user does choose to run Windows over the web, the trojan asks the victim to enter location, contact information, credit card number, PIN and card expiration date. It’s important to know that Microsoft and other companies will NOT ask you to enter credit card details and other information for the simple purpose of activating software. Of course, you will be asked for some personal information if you are registering software you have just purchased, and we may well see attempts by the ‘bad guys’ to now create registration Trojans that look ever more realistic. The attempts at ‘social engineering’ to get you to voluntarily hand over sensitive private details are only GOING to increase, making it ever more imperative that users become ultra web-savvy, as well as protected as much as possible by Internet Security Suites from companies such as Symantec, McAfee, Trend Micro, ZoneAlarm, AVG and others, along with protective anti-phishing software such as TrustDefender www.trustdefender.com. If ever in doubt – err on the side of caution and never enter your real details. Get the help of a knowledgeable FRIEND, call the tech support department of the software or hardware you are using, ask questions – don’t just hand over personal details that could expose you to identity theft, fraud and more – and make sure that you are using the very latest security programs and make sure their automatic update features are permanently turned on. http://www.itwire.com.au/content/view/11853/1103/Quote “Trojan horse that attempts to steal credit card numbers by tricking the user into entering their credit card details to activate Windows”Won't fool me. Might fool newbies though...I think you'd have to be pretty dense to get duped by this one, but I've seen worse. In any case, thanks for the info.crap... i better warn my family. they might just fall for it |
|
| 3506. |
Solve : run two at once? |
|
Answer» Hi,can you tell me if it is ok to run more than 1 spy,virus prog at the same time. Liek I said, Chris - upping the post count without substance.Alright, alright, you got me on that one. HEH. |
|
| 3507. |
Solve : BHO just won't quit? |
|
Answer» nnnlmmm.dll IS GONE!!!!! I also was able to delete C:\WINDOWS\system32\ddcyxya.dll So, I guess my comp is good! I'll take a look back here to see if you guys have any more comments for me. But, again... a big "thank-you" for all the help. Especially, CBMatt Also, I had no idea that alcx monitor did that!!! I'm glad it's gone! ALRIGHT! and here's my (hopefully) clean HJT log: --------------------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 9:29:57 AM, on 5/4/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\hphmon05.exe C:\HP\KBD\KBD.EXE C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\VisualZone\VisualZone.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us9.hpwis.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us9.hpwis.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us9.hpwis.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mchsi.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us9.hpwis.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-us9.hpwis.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us9.hpwis.com/ O2 - BHO: (no name) - {058FC709-D5CD-4A95-92DB-59E6488ECDA4} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {08E74C67-99A6-45C7-94DA-A397A8FD8082} - (no file) O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll O2 - BHO: (no name) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file) O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe" O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [CookieJar] C:\Program Files\Cookie Jar\CookieJar.exe /qd_banned O4 - Global Startup: VisualZone.lnk = C:\Program Files\VisualZone\VisualZone.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll O16 - DPF: ppctlcab - O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} - O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} - O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} - O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} - O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} - O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78D} - O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} - O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} - O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe --------------------------------------------------------------------Alright, it's looking pretty good! Definitely a relief. The particular infection you had has actually been known to cripple a few systems. If we hadn't gotten rid of it, your computer lag might've kept getting worse. The VirtumondeBeGone log mentioned that the file was renamed to: C:\WINDOWS\system32\nnnlmmm.dll.vir Does this file still exist on your computer? If so, it should be safe to go ahead and delete it. Make sure you keep up with your regular anti-virus updates and scans. You'll also want to install the latest version of Java as soon as you can; this will help prevent future infections. And for safer browsing, I suggest downloading SiteAdvisor and Spware Blaster. How are things running now? Have you noticed an improvement?Yeah, the speed's back up, and I'm booting-up fine. I almost forgot about updating java. I used to have spywareblaster, but I got rid of it. Maybe it's time for another try. I'll also try site advisor. Thanks, -dudemanGood, glad to hear it. As long as you go through the options and enable EVERYTHING in SpywareBlaster (I'm not sure why it doesn't do it automatically), it's really handy to have. And I really feel naked if I surf WITHOUT SiteAdvisor. Even when I'm not naked... *cough* Be sure to come back if you have any other issues.also dl superantispyware like i SAID earlier and give that a go just to help clean up |
|
| 3508. |
Solve : my pc crashed after installing NOD32 antivirus? |
|
Answer» good morning everyone! I dont know if the techie who assembled my pc and installed the programs used real Windows CD. If you didn't get a CD and COA sticker on the case it is probably not. Everyone needs a real Windows CD sooner or later. In your case it appears to be sooner. hi! to GX1_Man: techie installed real windows Xp cd... Was unable to Unfreeze my pc.So, Reformatted my pc today and running smoothly now. Downside is,I lost my FREE hours to reformatting it instead of going to sleep after work.lol.and lost important files!:( Installed another anti virus software,deep freeze and firewall from my internet provider. After reformat,Scanned for viruses and still found trojan,worm and vbs.small K viruses. From 1400++ viruses before reformatting,down to 40 trojan,worm and viruses total now after reformat. Question1.What anti trojan software will I use to be able to delete them completely?and delete the worm as well? Question2.What exactly is a yulgang program?What does it do?what i just know is,its a bot used in an online game.Is it the one that made my pc crash??? AntiVir anti virus software installed.Is this good? |
|
| 3509. |
Solve : Thank you for this forum!? |
|
Answer» I just joined today and have been reading like a mad woman (you know not to make us mad!) and have really learned a lot. One of the THINGS I did right away was d/l SUPER Anti-SPYWARE that someone mentioned. Danged if it didn't catch 151 critters! Can this spyware run along with other anti-spyware or anti-virus? |
|
| 3510. |
Solve : ATTN.: UnLoved Warrior; FROM: Walker93268; RE.: The "Zango" Adware/Virus.? |
|
Answer» Hey there brother, |
|
| 3511. |
Solve : Microsoft to patch zero-day DNS flaw? |
|
Answer» Microsoft on Tuesday plans to release seven security bulletins, including a fix for a zero-day flaw in Windows that is already being used in cyberattacks. The bulletins, part of Microsoft's monthly patch cycle, are slated to provide FIXES for an UNDISCLOSED number of security vulnerabilities in Windows, Office, EXCHANGE and BizTalk, Microsoft said on its Web site Thursday. The issue affecting BizTalk also relates to "Capicom," a developer component to add cryptography to applications. Each of the four product families is scheduled to get at least one "critical" update, Microsoft's highest severity rating, the company said. Microsoft plans to release two bulletins related to issues in Windows and three related to Office, with one remaining for both Exchange and BizTalk, it said. Security issues tagged as critical typically could allow an attacker to gain full control of an affected system with very little, if any, action by the user. Microsoft's updates will include a patch for a vulnerability in the Windows domain name system, or DNS. The security vulnerability affects Windows 2000 Server and Windows Server 2003. Microsoft warned of the problem last month and has said it was being used in "limited" attacks. Some of the planned Office patches will likely deal with vulnerabilities in the software that have been disclosed and have been waiting for fixes. Microsoft gave no further information on the upcoming alerts, other than to state that some of the fixes may require restarting the computer or server. Last month, Microsoft released six security bulletins. Shortly after it released the fixes, several new Office zero-day bugs and the Windows DNS bug hit. Some security WATCHERS have come to call this phenomenon "zero-day Wednesday." http://news.zdnet.com/2100-1009_22-6181296.html |
|
| 3512. |
Solve : Major Malware/Adware Prob? |
|
Answer» Quote from: TragicKingdom92 on May 01, 2007, 02:44:06 PM some slight things i noticed while fixing the comp were that neither Alexa, KSXW, nor Isasss were present but it's no big deal. You mention Isasss... The filename is actually Lsasss (just with a lowercase L). Make sure you're able to view hidden files and folders and please double-check to make sure this file isn't present on your computer. I'd hate for us to leave something behind. As for those IP's...I'm not really sure what they are. I know no more about them than oddjob. But at least we know your firewall is working. As long as it's blocking them, they shouldn't cause you any trouble. I'm glad things are working well now. To help with future protection, I would suggest getting a few extra programs: SpywareBlaster to help prevent spyware from installing in the first place. SpywareGuard to catch and block spyware before it can execute. SiteAdvisor is a very handy toolbar that gives you reports on various sites and will tell you if one has been reported as malicious/harmful. Searching on Google is a lot more convenient with it. It took me a couple of days to get used to it at first, but now I feel NAKED without it, especially on Google. If you didn't already have them, I would be suggesting Ad-Aware and Spybot S&D. Make sure you keep them UPDATED and scan with them at least once a week. You're also going to want a decent anti-virus that you can scan with regularly. Unfortunately, I'm not too well-versed on WinME and what programs are compatible with it. Until you find something that works, you can try online scans with Panda and/or Kaspersky.thats why we are hereNow you are clean you might want to read these and bookmark the links for future reference. You should clear out all old System Restore points then immediately create a new one so you have something to fall back on should anything go awry again. Also remember to make SR points on a regular basis. More on System Restore ... http://www.microsoft.com/windowsxp/using/helpandsupport/getstarted/ballew_03may19.mspx What may have lead up to your infection and help keep your computer free of malware … http://www.castlecops.com/t7736-So_how_did_I_get_infected_in_the_first_place.html http://www.help2go.com/Tutorials/Protect_Your_PC/Avoid_Web_Browser_Hijackers.html There is a little duplication but these tutorials are both well worth reading. Don’t forget to keep AVG Anti Spyware updated and use it to scan your computer from time to time. If you do suffer an infection again you should run first Ccleaner to clean out your system. Get Ccleaner here but ensure you install it WITHOUT the optional YAHOO Toolbar download (you MUST untick/uncheck the relevant box on download) … http://www.ccleaner.com/ Also run through this before posting another HijackThis log … http://www.help2go.com/Tutorials/Protect_Your_PC/Get_Rid_of_Spyware%2C_Adware%2C_and_Web_Browser_Hijackers.html Best wishes. OJ |
|
| 3513. |
Solve : Any help is needed....? |
|
Answer» ....My other computer, a laptop from 2005 ...well its a laptop so it sucks and ive got like 2000 viruses and it is SUPER slow....and so on,... it gets even slower with the new internet connection of 2mbps =(, ive got , so i could really use some virus programs.........i can find virus programs on google but with them comes new viruses, so yeah if you could tell me a nice antivirus prog i would be happy, this ^_^ happy (sorry but i cant keep it short =/ )Quote from: shimal on May 01, 2007, 04:38:46 PM ....My other computer, a laptop from 2005 ...well its a laptop so it sucks and ive got like 2000 viruses and it is super slow....and so on,... it gets even slower with the new internet connection of 2mbps =(, ive got , so i could really use some virus programs.........i can find virus programs on google but with them comes new viruses, so yeah if you could tell me a nice antivirus prog i would be happy, this ^_^ happy (sorry but i cant keep it short =/ ) Holy moly! Did someone link to us from Myspace? How did you get here? lol, i searched google, and i dont have...use myspace )=Right well, google for AVG Free and run it in safe mode. Safe mode can be entered by pressing F8 before Windows loads. cool thanks ^_^And install Adaware SE Personal and/or Windows Defender while you're at it. What have you used so far, by the way? Since you claim that <EM>virus programs on google but with them comes new viruses I'm kind of curious. right now iam using registry mechanic, i dont like it but iam not allowed 2 download any antivirus progams after i blew my computer =( but ive used ....norton antivirus, WinAntiSpyware 2006....thats the files that aint removed yet.....but the most hated one by me is from a site called,http://download.mmosite.com/download.php?id=216´ ....eTrust _Antivirus , ive used that site for a while and it got some cool ,hacks and tools so ive got 2 put the blame on my brother and DENY that eTrust _Antivirus blew my computer I'm not too sure about Windows Antispyware 2006, but the rest seems legit. Well, install these programs and scan your PC, you can always remove them after you're done although I advise against that, of course.. thanks ^_^i really feel safe already, even though that the antivirus programs aint installed yet =) always spybot search and destroy and avg anti-spyware oh and ccleaneryup, but still it doesnt happen the first day, i had like 387 critical ....viruses,and still geting 4-20 , and nice defence this viruses got, they shut my computer down but i never give up ill bring em down like a warriori would love to see a hijackthis log just to wittness the death shimal ........ Sounds like a good format and a clean install of the operating system, may be in order. And then install some of the AV software that has been suggested. dl65 Quote from: RAPTOR on May 01, 2007, 06:40:27 PM I'm not too sure about Windows Antispyware 2006Raptor ... shimal didn't say this. He said "WinAntiSpyware 2006". A nasty piece of work. It's from the same family of scumware as Winfixer/Virtumonde/Msevents/Trojan.vundo. Remove that one definitely. SPECIAL instructions here .... http://www.bleepingcomputer.com/forums/topic18610.html Yes, a HJT log would be nice. We're all thrashing round in the dark without it. Post a log after you've carried out the fix for WinAntiSpyware. PLEASE ALSO update us on how the computer is working now. OJThanks guys ^_^, Ive used the programs and all the viruses are deleted, the computer is faster its working great. I cant even belive how good those progs are , ....cant belive that i didnt find this forum before |
|
| 3514. |
Solve : I dont know what's going on !!!? |
|
Answer» If your PC is that badly compromised, I'd reformat and take security measures as soon as or before you connect to the Internet. Quote from: Raptor on April 30, 2007, 08:12:03 AM If your PC is that badly compromised, I'd reformat and take security measures as soon as or before you connect to the Internet. secondSo, what do I do now? It's not nearly as bad as it was I just cant reply to emails nor myspace msgs Other than that things are good Well, you're still not free of infection. HijackThis isn't an actual cleaning tool. The files have to be removed manually. C:\WINNT\svchost.exe This file is still on your computer. Could you upload it to VirusTotal and post the log here? Your Quicktime is still infected, so I WOULD suggest fixing the related entry mentioned earlier, uninstalling Quicktime, running CClener (both Cleaner and Issues; install without Yahoo! toolbar), and then reinstalling Quicktime. The thing that concerns me most is the password stealer. You can do a search for IExplorer.dll and post the results here, but I honestly don't know if we'll really be able to get rid of this. I could never be comfortable enough to say that it's gone, so maybe a reformat would be the best option... I'd like to know what oddjob has to say.I couldnt get total virus or virustotal to load on windows 2000, however super antiware is showing NOTHING anymore! It was showing hundreds of problems! Hijack this is showing the following: Logfile of HijackThis v1.99.1 Scan saved at 7:23:56 PM, on 5/1/2007 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\WINNT\svchost.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\Program Files\Common Files\AOL\1148324149\ee\AOLSoftware.exe c:\program files\partners\busboy.exe c:\program files\partners\bbpart11.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINNT\SOUNDMAN.EXE C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\AdsGone\adsgone.exe C:\Program Files\WinZip\WZQKPICK.EXE C:\Documents and Settings\Interstar.INTERSTA-R26OB0\Desktop\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://www.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr7/*http://www.yahoo.com/ext/search/search.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.yahoo.com R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:8182 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O3 - Toolbar: @msdxmLC.dll,[emailprotected],&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1148324149\ee\AOLSoftware.exe O4 - HKLM\..\Run: [agpart] C:\Program Files\Partners\AGPART11.EXE O4 - HKLM\..\Run: [Client Access Service] "C:\Program Files\IBM\Client Access\cwbsvstr.exe" O4 - HKLM\..\Run: [Client Access Help Update] "C:\Program Files\IBM\Client Access\cwbinhlp.exe" O4 - HKLM\..\Run: [Client Access Check Version] "C:\Program Files\IBM\Client Access\cwbckver.exe" LOGIN O4 - HKLM\..\Run: [Client Access Express Welcome] "C:\Program Files\IBM\Client Access\cwbwlwiz.exe" O4 - HKLM\..\Run: [Client Access PC5250 Sound] "C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe" O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\\NeroCheck.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [ntdll.dll] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [IESet] IExplorer.dll .dbt O4 - HKLM\..\RunServices: [IESet] IExplorer.dll .dbt O4 - HKCU\..\Run: [xrunwin] C:\WINNT\svchost.exe O4 - HKCU\..\Run: [Yahoo! PAGER] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [IESet] IExplorer.dll .dbt O4 - Global Startup: AdsGone 2006.lnk = C:\Program Files\AdsGone\adsgone.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll__BHODemonDisabled (file missing) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - O16 - DPF: {CBBD6FA7-2384-11D1-A8C9-0040C7116154} (HostFront ActiveX Display) - http://leads400.landstar.com/HFAccess/HFDSP.CAB O17 - HKLM\System\CCS\Services\Tcpip\..\{9CC8DFB8-6269-4F66-A697-155CC2CAF08C}: NameServer = 166.102.165.11,166.102.165.13 O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exe O23 - Service: iSeries Access for Windows Remote Command (Cwbrxd) - IBM Corporation - C:\WINNT\CWBRXD.EXE O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Unknown owner - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe (file missing) This log has all of the same major problems as before. I get the distinct feeling that you haven't been following any of my instructions... VirusTotal is just a website, it's not OS-specific.I copied and pasted what hijack this said and I sent it to virus total so I'll let you know what they say.This is what Virus Total told me: Antivirus Version Update Result AhnLab-V3 2007.5.3.0 05.02.2007 no virus found AntiVir 7.4.0.15 05.02.2007 no virus found Authentium 4.93.8 05.02.2007 no virus found Avast 4.7.997.0 05.03.2007 no virus found AVG 7.5.0.467 05.02.2007 no virus found BitDefender 7.2 05.03.2007 no virus found CAT-QuickHeal 9.00 04.30.2007 no virus found ClamAV devel-20070416 05.03.2007 no virus found DrWeb 4.33 05.02.2007 no virus found eSafe 7.0.15.0 05.03.2007 no virus found eTrust-Vet 30.7.3611 05.02.2007 no virus found Ewido 4.0 05.02.2007 no virus found FileAdvisor 1 05.03.2007 no virus found Fortinet 2.85.0.0 05.02.2007 no virus found F-Prot 4.3.2.48 05.02.2007 no virus found F-Secure 6.70.13030.0 05.03.2007 no virus found Ikarus T3.1.1.7 05.02.2007 no virus found Kaspersky 4.0.2.24 05.03.2007 no virus found McAfee 5022 05.02.2007 no virus found Microsoft 1.2405 05.02.2007 no virus found NOD32v2 2235 05.02.2007 no virus found Norman 5.80.02 05.02.2007 no virus found Panda 9.0.0.4 05.02.2007 no virus found Prevx1 V2 05.03.2007 no virus found Sophos 4.17.0 05.01.2007 no virus found Sunbelt 2.2.907.0 05.03.2007 no virus found Symantec 10 05.03.2007 no virus found TheHacker 6.1.6.104 04.15.2007 no virus found VBA32 3.11.4 05.02.2007 no virus found VirusBuster 4.3.7:9 05.02.2007 no virus found Webwasher-Gateway 6.0.1 05.02.2007 no virus found Aditional Information File size: 31232 bytes MD5: 7960edcdac55907840837cd4c32bbab9 SHA1: 67de61729e5e011a986fa8ce3d69e54d9af342d d which fileQuote from: unlovedwarrior on May 02, 2007, 07:54:21 PM which fileI think it's this one from reply #18 above ..... C:\WINNT\svchost.exe *************** Is your Norton Internet Security (antivirus + firewall) actully running? It seems to be loaded on your system but looks to be inactive. You cannot expect to stay safe using the internet if you don't have (at least) these two running at all times. Please let us know. *************** This LATEST log is full of Trojans. Download the fully working trial version of Trojanhunter from here .... http://www.misec.net/ Install it on your computer then scan with it. Let it fix anything it wants to. *************** Lastly go to your HJT folder and find this file (below in BOLD) ... C:\Documents and Settings\Interstar.INTERSTA-R26OB0\Desktop\HijackThis.exe Right click on it and choose "rename" ... Type the word "new" in front to rename thus ..... newHijackThis.exe Rescan your computer with the newly named file and post the resulting log. *************** Please also give us an an update on how the computer is working now. *************** Footnote >>> I do believe your Service Pack is out of date. SP4 is available here BUT DO NOT LOAD IT YET.... http://www.microsoft.com/windows2000/downloads/servicepacks/sp4/default.mspx (Just bookmark the site for later use; we'll tell you when) OJThanks for the log. However, I still don't trust that file. It's not in the standard folder, which is the biggest red flag. Also, I've looked around a bit more and although there's very little info on xrunwin, I've noticed that every time it shows up in a log, it's accompanied by the IExplorer.dll password stealer. Seems fishy to me. Unless someone can make me believe otherwise, I'll assume this is malicious. The infection you have is a little tricky and there is no surefire way of removing it yet, so all we can do at this point is try a few different things and hope they work... First, download ComboFix and save it to your desktop. Run the program and read its disclaimer (it's fairly short) and make sure you really pay attention to what it says. Follow the prompts and when finished, it will produce a log at C:\ComboFix.txt. Go ahead and post that here. Also... Download DAFT and save it to your Desktop:
.bat .ini .reg .txt
I have included a batch file (FixPWS.bat). Unzip the file to your desktop, reboot into Safe MODE, and double-click on FixPWS. Wait a few seconds and when the command window closes, restart your computer. You might want to go ahead and uninstall QuickTime. Once you do that, use CCleaner to clean the temp files and registry keys. Afterwards, you may reinstall QuickTime if you wish. Once you have done all of this, try running a virus scan. Any luck? What happens? In addition to the logs I've asked for, post yet another HJT log (rename it first like oddjob suggests) to see if we've made a dent at all. And be sure to let me know how things are running. If you are still having problems, I see a reformat in your immediate future. [cleaning up - attachment deleted by admin]what did avg anti-spyware and superanti-spyware find?? |
|
| 3515. |
Solve : Malware, Trojan, Virus, Spyware?? |
|
Answer» just wondering what all did it find? |
|
| 3516. |
Solve : help, please..? |
|
Answer» My LAPTOP has been acting funny for a couple of weeks now and I was WONDERING if any of you could help me figure it out. These are a couple of my problems: |
|
| 3517. |
Solve : Norton is disliked, OK why?? |
|
Answer» I have been reading many of the post about how most everyone on this FORUM dislikes Norton. I have my own reasons for wanting to dump it but can some of you tell us rookies what you don't like about it. All I normally hear is that you just don't like it. Are there any technical reasons and what exactly does it do to the OS that causes everything to slow down like in my case. I also don't like the arrogance of Symantecs at how they like control and very little support for your buck....remenscient of Microsoft. AVG here I come.it a resource hog.. it slows your computer way down you cant scan in safe mode. it doesnt detect as much as others do it a resource hog.. it slows your computer way down you cant scan in safe mode. it doesnt detect as much as others do I would agree with ...it being a resource hog. I disagree with the rest of the comment......... It does scan in safe mode. I would also like to know ....... what other programs it adds to your computer. dl65 all of the nortons ive had would always complain about scaning in safe mode the programs im talking about are the lil nick pick ones the come with the main scaner and firewallSystemWorks?Well I too have used Norton for a number of years and amittedly have had no virus problems, but I have had some slowing in performance. I don't like the Norton logo placed on my task bar and resent it doing so with no turn off except for a move to the sys tray. I don't like anything that doesn't allow me to say NO to it. I too have scanned in safe mode USING Norton so I am not sure where that comes from. I think the final decision about Norton will oddly enough be wheather or not it allows me to uninstall it entirely. How dumb is that. If it does allow a complete uninstall I will have more respect for the product and consider going back in the future. If it does not it is good bye forever. I thank you dl65 for you VIEW both pro and con. I don't understand the post Systemworks at all. This is a healthy discussion about Norton and it will be good for many readers I am sure. Thanks for that. |
|
| 3518. |
Solve : computer sometimes acts sluggish? |
|
Answer» my computer is fast but somtimes it would run really slow i need someone to check my HJT log please................ |
|
| 3519. |
Solve : infeted with Known Bad Sites? |
|
Answer» oo sry i have about 72GB left of FREE space and i run a daily disk defrag and regcure and disk cleanup like every 3-4days and aat startup i run norton av 2007, spysweeper, aim , site ADVISOR, QUICKTIME, itunes HELPER, and that about it................... |
|
| 3520. |
Solve : lots of problems - virus?? |
|
Answer» PC system: Windows XP home edition version 2002 service pack 2 Fujitsu Siemens computers Intel (R) Pentium (R) 4 cpu 3.06.ghz 3.06.ghz, 960 mb ram I've followed the usual guidlines for dealing with viruses and all my detectors say I'm clean. But still there are way too many problems to satisfy me. PS. sorry about the long list but I don't know what else to do. 1. My computer switches off on its own. Often at random but more often when I'm running virus scans - usually when they're nearly finished. 2. My internet connection switches off (less frequent than above) on its own - as in disables itself via the network connections in control panel. I have to reactivate it manually. 3. I watched a few online (vid link sites) movies and sometimes they'd just switch to a different film half way through. And last night I was watching 'Jericho' online and it paused on its own, NORMALLY this woudln't bother me but everytime I hit play it just clicked to pause as if someon else was clicking it. 4. Random display windows keep POPPING up - like before writing this a printer window popped up for no reason. 5. PC is constantly struggling - not slowing down but noisy as h**l. 6. A tab with a blank .exe file appears in my task bar upon starting up. 7. recently contracted something called 'statcounter' from someone I know (on a blog) and I'd like to know how dangerous it is/what it could be used for (lead to worse viruses). 8. Downloaded Spyware doctor but it just freezes when starting scan. 9. Spybot S&D never really finishes a scan. It sort of GETS near the end then jumps the rest. Is that normal? 10. Network connection shows activity even when I'm not doing anything. EDIT: they blanked '*censored*'? Do you have a real Windows CD if needed. You may have so many problems that this would be easier and quicker. They could be hardware, software or malware issues or a combination.to all those problems. i suggest u to format the PC frm scratch after backing up ur data.Quote 5. PC is constantly struggling - not slowing down but noisy as h**l. Clean your PC case and heatsinks and inspect your mainboard for leaking capacitors. Diagnose RAM and HDD. im curious to see WHATS cuasing all of this. run scans with system restore off and in safe mode.. but REFORMAT would be best for you...I'm not. He needs a clean re-install...And now he has disappeared. Maybe he is doing that. Quote And now he has disappeared. Maybe he is doing that. Nope, neither. I've asked my family to backup what they need but they're leaving it on the long finger. Won't be able to do anything 'til then. Me thinks I'll have to go terror-storm on them. Quote Do you have a real Windows CD if needed. You may have so many problems that this would be easier and quicker. They could be hardware, software or malware issues or a combination. not handy but I can get one off someone ... unless they're specifically coded for individual machines? thanks for the help btwyoull need your own cd key is it on the side of your computer??Once again, my post is ignored. The OP can therefore figure it out himself. Quote from: Titan01 on April 30, 2007, 10:38:22 AM Nope, neither.Why not just back their stuff up yourself? It shouldn't be too hard to determine what's important.your just back up all documents and pics on their accounts |
|
| 3521. |
Solve : NAV 2007 question? |
|
Answer» no a new person put i got i cracker i can send you for NAV and i said that they must have removed it right afterI wouldn't like having a cracker being sent my way! Quote from: Raptor on APRIL 29, 2007, 05:23:00 PM I wouldn't like having a cracker being sent my way! Oh, but they're so good with a BIT of MUENSTER. |
|
| 3522. |
Solve : boot virus? |
|
Answer» my anti picked upa boot sector virus. It WOULD NOT quar/remove and now it doesnt evenshow it whenirun the scan. Icanbarely connect tothe internet.Cant download any new virus programs. So i need some help PLEASE. |
|
| 3523. |
Solve : Viruses inside the flash drive or else? |
|
Answer» click on That's gonna be some bat file... He's got a lot of patience, you've got to admire that. .tq, but i its to many viruses , i dont know which one will infected flash drive? can u help me list down any popular viruses?The Raptor Virus, which verbally abuses you when you click on it, is particularly nasty.insertusername, this is not going to work. If you want to clean viruses, use a virus scanner. Making a batch file to clean them will be very difficult and a very long task, one which will never end as you will ahve to keep updating it. BTW, who gave him -7 karma? |
|
| 3524. |
Solve : Maybe a virus?? |
|
Answer» So my sister was on my mother's laptop yesterday, and was just doing NORMAL stuff, when apparently a popup came up that was some kind of virus scan thing. So my sister clicks on it, thinking it was SOMETHING of my mom's. After she did, the desktop went blank, and only the background was visible (no icons, no start, no anything). So we restarted it, and nothing was there again. Does anyone have any advice for what to do to fix it?Operating system and installed malware protection please...We have Windows XP Home edition and some kind of AT&T anti spyware programJust a recommendation... If you see nothing on the desktop... try opening task manager (Alt+Ctrl+Delete) Running explorer from Task Manager should bring back everything in question, but something is disabling it, and we need to find out exactly what it is.Due to lack of feedback, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3525. |
Solve : email virus quesiton? |
|
Answer» If you open an email that was sent to you and it contains a worm or trojan horse and you are not on your own computer won't it AFFECT your email such as your files or attach itself to your address book ANYHOW. didn't think it mattered what computer you used if you are opening something from your own ACCOUNT that is infected.Viruses do different things. Some attack system files, some grab information, others just crash your computer.I'm not quite SURE what you're asking here... You want to know if a virus can infect your e-mail even if you're not on your computer? It's less likely, but it's still possible, depending on your e-mail client and how you viewed it. Did you download a virus onto someone's computer while checking your e-mail? Viruses do different things. Some attack system files, some grab information, others just crash your computer.And there are even some that do absolutely nothing. |
|
| 3526. |
Solve : Possible Virus.. have no clue what to do? |
|
Answer» I posted in the more general category folders, the larger issue of the problem (as there are a couple problems going on). I hope it was ok that I also posted this more specific of things here. I think my computer GOT a large virus. Acer: aspire, 5000, PC, with windows xp. what do I do from there? Thanks! Hey Kimberly1, Stop transfering files to your new computer, if there is a virus you will just infect that pc aswell!! Do what CBMatt says d-load AVG, but I would d-load it to the new pc, then transfer the other hard drive over as a slave and do your scan from there.(if your not sure how to do it just post BACK theres plenty of knowledge on this site) The advantage of having the hard drive as a slave is that its easyer to transfer files & info. just remember not to open any programs/files if you do have the hard drive as a slave. Hope this helpsThanks!! I might download AVG if I find I still need to be running programs on the other computer. I'm going to paste the message I put in the other area... as I want to say thanks you you guys too!!! Thanks!: First off, I would like to thank everyone who has been helping me. I had ordered an external hard drive a week or few ago -- that I had to return as it did not work -- yet I received the new one that I ordered after from a different place, and as of today got all info off the old computer onto the external hard drive (took about 7 hours, as the computer was not wanting to work properly -- yet all I can say, is I am Glad I got my info off there! ). The new computer, I will be returning soon, and in the meantime, ran the norton virus scan throughout all files on the external hard drive that came off of the crashing computer. There were no viruses, spyware, or any other problems found. When on the crashing computer though, one file after another was still not opening. And as I was transfering things, more programs began not to work. In the end, it was not letting me send some things to trash. And it kept shutting down over and over. I was finally able to download the norton virus scan on there (I had not read the last note yet on here).... yet it keeps shutting down in the middle of the scan. At this point, I can just recover the whole system, and let it whipe everything off. If I find I need to use a program on there while waiting to get a new computer, I might try to download the other virus scan that you were talking about. So, at this point, I think all is safe regarding the programs on that were on the crashing computer. And it looks like I got them off right at the blink of time. I now will need to wait an see what to be doing while waiting to be able to get a new computer, as not sure when I will (or if I will) get a REFUND for this one (though I heard paypal will help give refunds for purchases on ebay that were frauds). Thanks again for all the help!!!! |
|
| 3527. |
Solve : IE7 internet search redirection problem? |
|
Answer» "Frank" - 2007-07-08 2:48:42 - COMBOFIX 07-07-07.3 - Service Pack 2 |
|
| 3528. |
Solve : missing registry files? |
|
Answer» No, it's not worse. A few hidden entries were simply revealed as a result of VundoFix. Vundo appears to be gone from your system. But to be on the safe side, run through the VundoFix steps once again, just in case something was missed. dir C:\WINDOWS\system32\cjcobhkbbn /a h > folder.txtAfter copying the contents, open up Notepad and click on Edit > Paste. Once the text has been pasted, click on File > Save As. Next to Save as type:, select All Files. Next to File name:, type in search.bat. Save the file to your desktop. Open the file by double-clicking on it and it should open up a new Notepad file. Please copy everything from that file and paste it here.Volume in drive C has no label. Volume Serial Number is C8E7-AC6F Directory of C:\WINDOWS\system32\cjcobhkbbn 08/06/2007 08:59 . 08/06/2007 08:59 .. 08/06/2007 08:59 531 csrss.ini 1 File(s) 531 bytes Directory of C:\Documents and Settings\Asher\My Documents the messages have dissapeared!!!!! thanx sooo much!!!! i really appreciate your help although my sound problem is ongoing and i have no idea how to fix it. The sound may or may not be related to an infection. It's hard to say. Download Pocket KillBox. Reboot into Safe Mode and use Pocket KillBox to delete C:\WINDOWS\system32\cjcobhkbbn (you can just copy/paste it). If you have trouble, copy everything in the below quote box... Quote del C:\WINDOWS\system32\cjcobhkbbnAfter copying the contents, open up Notepad and click on Edit > Paste. Once the text has been pasted, click on File > Save As. Next to Save as type:, select All Files. Next to File name:, type in search.bat. Save the file to your desktop. Open the file by double-clicking on it and it should delete the file in question. Go ahead and post a new HijackThis log and we'll see if we can figure out your other problem.Logfile of HijackThis v1.99.1 Scan saved at 00:50:34, on 27/06/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16473) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam10\QuickCam10.exe C:\Program Files\iTunes\iTunesHelper.exe C:\WINDOWS\system32\RunDll32.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\Program Files\BitComet\BitComet.exe C:\Program Files\Cameno\Cameno.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\HJT\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray O4 - HKCU\..\Run: [Cameno] C:\Program Files\Cameno\Cameno.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1182249645109 O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://www.shockwave.com/content/luxor/sis/mjolauncher.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E13F1132-4CA0-4005-84D3-51406E27D269} (BTDownloadCtrl Control) - http://www.shockwave.com/content/thinktanks/sis/BTDownloadCtrl.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 ALERT Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe Alright, it looks clean to me. However, I don't see the presence of a firewall on your computer. You're vulnerable without a firewall, so you should look into getting either ZoneAlarm, Kerio Personal Firewall, or Comodo. They're all good free firewalls. Just be sure you only have one installed at a time! Download the firewall of your choice, disconnect from the internet, disable Windows Firewall, and install your new firewall. Now, with that taken care of, once again try out the System File Checker that patio suggested... Quote from: patio on May 31, 2007, 07:50:25 AM You could try and run System File checker to see if it helps. You might also want to open up the Control Panel and then open Sounds and Audio Devices. Click on the Sounds tab and make sure the APPROPRIATE Windows XP sound scheme is selected.boo, I know it's been awhile, but if you're still having problems, you should download MsnVirRem.exe to your desktop from one of the following mirrors.
no bad filesAlright, then it must have been removed properly. Are you still experiencing problems?ummm yes but less frequently.Did you ever try the System File Checker? It might also be worthwhile to download ComboFix and save it to your desktop. Run the program and read its disclaimer (it's fairly short) and make sure you really pay attention to what it SAYS. Follow the prompts and when finished, it will produce a log at C:\ComboFix.txt. Go ahead and post that here. Note: Don't click on the window while it's running; this may cause stalls.Due to lack of feedback, I am closing this topic. If you are the original poster and you WOULD like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3529. |
Solve : Voices on my computer? |
|
Answer» Good point, Darcstarr. The first link most likely wouldn't work for you. The other two should still apply, though. At the very least, it's worth a try. However, if you are no longer experiencing the problem, then there may be no point.Umm...actually the second link is also for Windows 2000 and for status code 128 which isn't the same one as I get in my ERROR. The third link doesn't seem to work at all saying its currently unavailable. Any other help you could provide?I realize the problem is slightly different, but did you try the fix anyway? I have seen it work before despite the differences. I'm not sure why the other link isn't working; it worked fine last night. Would that be an audio HijackThis log Chris ? ? C'mon i didn't even get a chuckle for this one ? ?Ha, sorry, patio. Didn't mean to neglect you! I guess I'm just not much of a "COL" kind of guy... I did think it was funny, though. But you're no Stephen Wright. Ha!Oh I did try to the fix despite what it said. When I got to the part, being step 5, where it talks about looking at the Data column and telling you what you may see, I was a little confused because in the Data column it said (value not set). So basically all the instructions after step 5 were not helpful to me seeing as I didn't know what to do. I checked out the Blaster and Sasser Worm checks prior to this and it came out with nothing. I'm gonna give the System File Checker SCAN a shot now. If you have no luck, then I would suggest taking your problem over to the Windows forum. It's a lot busier than this one and you're bound to get a lot more suggestions, one of might be actually be what you need. Either way, I'm wishing the best of luck for you.Umm.. well its been a few days and the error hasn't come back up again, I didn't even have to do that scan you suggested. I wonder what could of happened... Like it seemed so random in the first place and then it just stopped happening. Maybe one day in the future it will appear again with no reason and annoy me for a bit and then just suddenly leave again. Well whatever it was thanks everyone who tried to assist me. I have another less life affecting issue I'm going to take over to a more busier area of the forums like suggested. Thanks again You're welcome and I wish you the best of luck. I just realized that I missed an entry... O20 - Winlogon Notify: winjgf32 - winjgf32.dll (file missing) If the file is missing, then the entry can't do a lot of harm, but you should still fix it. And delete the file if found with Windows Search. Your Java is out of date. You'll want to correct this, as it will help provide further protection for you. To do so, go here and click on Free Java Download. You will be GIVEN instructions on what to do next. Also...you're vulnerable without a firewall, so you should look into getting either ZoneAlarm, Kerio Personal Firewall, or Comodo. They're all good free firewalls. Just be sure you only have one installed at a time! Download the firewall of your choice, disconnect from the internet, disable Windows Firewall, and install your new firewall.Thanks. Got rid of that missing file in the Hijack log but I couldn't find it in a search of ym computer a guess that was expected. My Java is now up to date with version 6 update 1. I chose to use Comodo as a my firewall and I disabled Windows Firewall. Heres my latest Hijack log if you have anymore ideas: Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 1:25:15 PM, on 7/8/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\Program Files\Comodo\Firewall\cmdagent.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\Program Files\Comodo\Firewall\CPF.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Hijackthis\HiJackThis_v2.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ca/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net F1 - win.ini: run= C:\C&C\INSTICON.EXE O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - (no file) O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k O4 - HKLM\..\Run: [AVG7_CC] "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" /STARTUP O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user') O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Adam\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.2.100.cab O16 - DPF: {3C403675-B43C-410B-BF56-D4D1FB68356C} (ActiveXPortal Control) - http://72.29.84.224/OCX/gwnet.cab O16 - DPF: {48884C41-EFAC-433D-958A-9FADAC41408E} (EGamesPlugin Class) - https://www.e-games.com.my/com/EGamesPlugin.cab O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://www.installshield.com/install/iftwclix.cab O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1183510145515 O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{CF14735F-75A3-4EB5-9D18-35360F01110F}: NameServer = 64.71.255.198 O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll O23 - Service: ATI HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe O23 - Service: DiamondCS ProcessGuard Service v3.410 (DCSPGSRV) - Unknown owner - C:\Program Files\ProcessGuard\dcsuserprot.exe (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe -- End of file - 8169 bytes Everything's looking nice and clean. Unless you're having any other problems, you should be all set now.As this issue appears to be resolved, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3530. |
Solve : Two Anti Virus programs? |
|
Answer» Logfile of HijackThis v1.99.1 try firefox Got Foxfire and like it much more than IE but noticed it allows certain cookie to download and set where-as Opera does not. Funny thing i never see/read about this cookie thing that i discovered. i run all of the anti spy/adware programs at the end of the day and get the fewest hits when using Opera. BTW Opera is running okay now after restarting. Thanks for the recommendation.Quote from: CBMatt on July 06, 2007, 06:38:42 PM Also, you should download CCleaner (install without Yahoo! toolbar) and configure it according to this guide. Matt, i downloaded the program CCleaner and ran it the other day. It had so many entries that i was worried about deleting them all. If i recall what we learned in my user GROUP many of the files that CC wants to delete are antivirus LOGS and zone alarm logs. Some of the other things are unfamiliar to me. Are you saying to use CC first, delete those files and then follow your INSTRUCTION about printing your instructions and booting in safe mode? Must admit that i never BOOTED XP in safe mode....pretty sure i can figure it out though.You can run CCleaner before or after my instructions; it doesn't matter too much either way. Better yet, you could do both. Run CCleaner, follow my instructions, run CCleaner again. Don't worry about the files that CCleaner deletes...it doesn't delete anything important. You shouldn't need anything it finds. And if you do, you can just backup the files that you don't want to get deleted.Quote from: Kryptonite on July 07, 2007, 05:10:05 AM Quote from: unlovedwarrior on July 05, 2007, 10:12:46 AMtry firefox your welcome i look into the cookie thing when i get off of workDue to lack of feedback, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3531. |
Solve : Very bad problem plz help :(? |
|
Answer» Scanning in Safe Mode makes it a lot easier for anti-virus to detect and clean infections because they are not actively running at the time. Scanning in Safe Mode probably would've given you a cleaner log. Exactly what options are there in your boot menu? If you can't get into Safe Mode, then you may need to use Pocket KillBox for deleting files in my fix... I manage to download VirtumundoBeGone. In regular mode create a new folder called VMonde Fix or whatever you want to call it. Drag the program into that folder. This way when you re-boot into safemode you will be able to find it... Safemode can be confusing for the Desktop as it re-orients all the icons.Sry it took me so long I had to go SOMEWHERE for the weekend. Sorry Anyway here is the VirtumundoBeGone log: [07/09/2007, 15:53:59] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\OWNER\Desktop\VirtumundoBeGone.exe" ) [07/09/2007, 15:54:08] - Detected System Information: [07/09/2007, 15:54:08] - Windows Version: 5.1.2600, Service Pack 2 [07/09/2007, 15:54:08] - Current Username: OWNER (Admin) [07/09/2007, 15:54:08] - Windows is in NORMAL mode. [07/09/2007, 15:54:08] - Searching for Browser Helper Objects: [07/09/2007, 15:54:08] - BHO 1: {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} (AOL Toolbar Launcher) [07/09/2007, 15:54:08] - BHO 2: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper) [07/09/2007, 15:54:08] - BHO 3: {B339E38A-22DD-4425-92C2-3C15F9643F4B} () [07/09/2007, 15:54:08] - WARNING: BHO has no default name. Checking for Winlogon reference. [07/09/2007, 15:54:08] - Checking for HKLM\...\Winlogon\Notify\vtutu [07/09/2007, 15:54:08] - Key not found: HKLM\...\Winlogon\Notify\vtutu, continuing. [07/09/2007, 15:54:08] - Finished Searching Browser Helper Objects [07/09/2007, 15:54:08] - Finishing up... [07/09/2007, 15:54:08] - Nothing found! Exiting... I can't seem to find the VundoFix file sorry That's alright, Ifain, I know how it is. How are things running now? Still having problems?yup every thing is running fine... Thanks for the help Awesome, I'm glad to hear that. Now that you're clean, there are just a couple of things you should take care of... First, you'll want to clean out your System Restore. This is to remove any infected files that have been backed up by Windows. Please follow these steps... 1. Go to Start > Programs > Accessories > System Tools > System Restore 2. Click on System Restore Settings. 3. Check Turn off System Restore and click OK. 4. Restart your computer. 5. Follow steps 1 and 2 to return to the settings, uncheck Turn off System Restore, and click OK. 6. Create a new restore point and close the program. System Restore will now be active again. If you would like to learn more about System Restore, go here. Also, I see that your Java is out of date. You'll want to correct this quickly, as it will help provide further protection for you. To do so, go here and click on Free Java Download. You will be given instructions on what to do next. To learn more about how you may have been infected and for even more prevention tips, read Tony Klein's protection article.As this issue appears to be resolved, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3532. |
Solve : Suspicious "comment" on my Opera blog? |
|
Answer» As i have mentioned her i prefer the Opera browser and joined the Opera community which has a nice homepage of sorts when you join their group lus they are very helpful and supportive if you have problems and or questions. ( a lot like here ) Well, I'm not seeing anything malicious in your log. Did you try the Panda ActiveScan? The program you're thinking of might be SUPERAntiSpyware, which you should also try. Also...this computer has both AntiVir and AVG. If you want two anti-virus programs, that's fine, but you should make sure one of them is disabled so there aren't any conflicts. Panda found the atwola cookie but that's all. i went to that folder and there were 48 other cookie there so i deleted them all. Usually i only run the one antivirus as you had once before advised. Today i ran scans with both of them and left them running when i used hijack. Yes, SuperAntiSpyware is the program. i'm going to do a search for that post when your recommended it the first time so i can see the other programs you mentioned. Thanks MattNot all cookies need to be deleted. Most cookies just tell a site your login information quickly so that you can be automatically logged in. Tracking cookies, that record your browsing (even if not for malicious purposes) are usually picked up by AV or AS. When you say you usually only run the one, do you mean they're both open and you only 'scan' with one at a time? I suspect not but if you do then don't, because its the 'active' part thats conflicting, not so much the scan.Quote from: Kryptonite on July 20, 2007, 02:29:12 PM Panda found the atwola cookie but that's all. i went to that folder and there were 48 other cookie there so i deleted them all.Right, I missed that part in your previous post. DeltaSlaya is right. Cookies generally aren't something you need to be concerned about. HOWEVER, it would be a good idea to get SpywareBlaster, which will prevent many malicious sites from downloading cookies onto your computer. Scanning with two programs at once can cause a lot of complications. The same goes for having two active anti-virus programs. The below entries show that both programs are set to load on startup... O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min Although you claim to not use both programs at the same time, they are still active and on alert. It sounds like you have twice as much defense, but it can actually lower your security. |
|
| 3533. |
Solve : What firewall should I get?? |
|
Answer» Hey, I was just wondering firstly, do I even need a firewall? If so what should I get. AVG actually scores pretty good if you look at the on-demand test from February 2007. It's in the retrospective tests it doesn't do well.In my experience, AVG has been one of the best when it comes to active scanning. I've had it catch several infections before I even downloaded them. When testing it, I attempted to download programs/files I knew to be infected, and AVG caught them as soon as I clicked on the links, even before the downlod prompt. Now, when it comes to on-demand scans, I've found ClamWin to be quite impressive. Unfortunately, its interface is a bit unfriendly and isn't something you want active. But when scanning on-demand, it's likely to catch what even some of your favorite anti-virus programs might overlook.Thanks for all that, I think I'll continue using NOD32 for the time being, with Windows Firewall enabled.Ive used AVG for a while and its pretty good, another very good one to have is Avast! Anti-virus, it comes with a free home edition that all you have to do is register and they will email you a code.. but it costs nothing |
|
| 3534. |
Solve : Suspicious Messages In Security Log? |
|
Answer» I'll be the first to admit that I don't know a lot about computers, but the following entries in my security log seem very suspicious. Please tell me if I WOULD be doing myself a favor by not looking at the security log or if these are something that need further investigation. The ones that really worry me are in the 3rd sequence ... Bella and Luke are out of town, and I did not try to log in to their accounts. |
|
| 3535. |
Solve : Internet Security Question? |
|
Answer» When it COMES to Vista, that should be sufficient PROTECTION. And I wouldn't expect these programs to CAUSE you any speed issues. They're pretty light on resources.ok well THANKS for your suggestions.No problemo. |
|
| 3536. |
Solve : email address stolen? |
|
Answer» About a year ago, i joined a dating site (Dont laugh), it was spyware/ adware free but in June this year, a hacker broke into thier system and stole email addresses and passwords. As my details were still on their database, i was advised to change my passwords on any other sites which i did. |
|
| 3537. |
Solve : Folder option?? losssss? |
|
Answer» my compter is attcked by a virus |
|
| 3538. |
Solve : add/remove program button gone missing/unkown programs? |
|
Answer» the thing about the firewall, is that I am currently using NORTON internet security, which includes a real-time antivirus, antispyware, and firewall. but I see no evidence of an active firewall. Of course, I'm not particularly experienced with this specific program, so I may simply not know which files control the firewall. In any case, you should run the program and verify that it is enabled. When I OPEN NIS, it has a green check NEXT to everything, including the inbound and oubound firewall, which means that it's working properly. Quote Tell your dad you heard that from a weird fat guy on the internet, and he'll just have to believe you! Ha. lol, I'll have to try that.Quote from: keybowvio02 on July 10, 2007, 08:51:22 AM QuoteOkay, good. I'll have to familiarize myself with this version of Norton a bit more.but I see no evidence of an active firewall. Of course, I'm not particularly experienced with this specific program, so I may simply not know which files control the firewall. In any case, you should run the program and verify that it is enabled. Quote from: keybowvio02 on July 10, 2007, 08:51:22 AM QuoteI'm telling you, it works!As this issue appears to be resolved, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or ANOTHER moderator and it can be arranged.Tell your dad you heard that from a weird fat guy on the internet, and he'll just have to believe you! Ha. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3539. |
Solve : I need help... I don't know what's happening to my computer!!? |
|
Answer» WELL, I downloaded a few "virus protectors" and it totally messed up my computer. I tried unistalling them, but my computer keeps having weird pop-up bubbles talking about spyware. Now I don't even have a homepage.. I keep trying to change it back but it continues to SAY strange things about how I can protect my computer. I ran a scan and this is what I got: Scan Summary Quick Scan run on 07/10/07 at 11:07:02 Total Time: 00 hours, 02 mins., 39 secs. Scan complete successful. - 62 memory locations scanned, 9 threats detected - 2442 files scanned, 38 files infected - 78101 registry locations checked, 24 threats detected 57 Spyware threats found 0 threats quarantined, 0 threats removed, 57 threats ignored 2 Cookies found 0 threats quarantined, 0 threats removed, 2 threats ignored Details on Spyware Items swg.dll - Infected by Variant of BHO.swg - Ignored Full path: C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - Infected by Variant of BHO.swg - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} iesplg.dll - Infected by Variant of BHO.iesplg - Ignored Full path: C:\Program Files\Video ActiveX Access\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E26CEADA-67B0-4543-BE8B-307F00265118} - Infected by Variant of BHO.iesplg - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E26CEADA-67B0-4543-BE8B-307F00265118} iesbpl.dll - Infected by Variant of IEToobar.iesbpl - Ignored Full path: C:\Program Files\Video ActiveX Access\ HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{29C5A3B6-9A8D-4FA0-B5AD-3E20F4AA5C00} - Infected by Variant of IEToobar.iesbpl - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{29C5A3B6-9A8D-4FA0-B5AD-3E20F4AA5C00} IadHide5.dll - Infected by BackWeb - Ignored Full path: C:\Documents and Settings\Mommy\Local Settings\Temp\ iesmn.exe - Infected by eCodec - Ignored Full path: C:\Program Files\Video ActiveX Access\ imsmain.exe - Infected by eCodec - Ignored Full path: C:\Program Files\Video ActiveX Access\ iesmin.exe - Infected by eCodec - Ignored Full path: C:\Program Files\Video ActiveX Access\ imsmn.exe - Infected by eCodec - Ignored Full path: C:\Program Files\Video ActiveX Access\ mywebsearch - Infected by CursorMania - Ignored Full path: c:\program files\ bar - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\ History - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\bar\ search2 - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\bar\History\ HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive - Infected by CursorMania - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products - Infected by CursorMania - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch - Infected by MyWebSearch - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch funwebproducts - Infected by CursorMania - Ignored Full path: c:\program files\ ScreenSaver - Infected by CursorMania - Ignored Full path: c:\program files\funwebproducts\ Images - Infected by CursorMania - Ignored Full path: c:\program files\funwebproducts\ScreenSaver\ Shared - Infected by CursorMania - Ignored Full path: c:\program files\funwebproducts\ Settings - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\bar\ setting2.htm - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\bar\Settings\ setting2.htm.bak - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\bar\Settings\ settings.dat - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\bar\Settings\ settings.dat.bak - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\bar\Settings\ s_pid.dat - Infected by CursorMania - Ignored Full path: c:\program files\mywebsearch\bar\Settings\ video activex access - Infected by eCodec - Ignored Full path: c:\program files\ HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\video ax object - Infected by eCodec - Ignored Full path: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\video ax object HKEY_LOCAL_MACHINE\software\classes\videoaccessactivex.chl - Infected by eCodec - Ignored Full path: HKEY_LOCAL_MACHINE\software\classes\videoaccessactivex.chl HKEY_CLASSES_ROOT\videoaccessactivex.chl - Infected by eCodec - Ignored Full path: HKEY_CLASSES_ROOT\videoaccessactivex.chl iesbunst.exe - Infected by eCodec - Ignored Full path: c:\program files\video activex access\ iesunst.exe - Infected by eCodec - Ignored Full path: c:\program files\video activex access\ imsunst.exe - Infected by eCodec - Ignored Full path: c:\program files\video activex access\ ot.ico - Infected by eCodec - Ignored Full path: c:\program files\video activex access\ ts.ico - Infected by eCodec - Ignored Full path: c:\program files\video activex access\ uninst.exe - Infected by eCodec - Ignored Full path: c:\program files\video activex access\ repair registry pro - Infected by Adware.RepairRegistryPro - Ignored Full path: c:\program files\ RepairRegistryPro.exe - Infected by Adware.RepairRegistryPro - Ignored Full path: c:\program files\repair registry pro\ HKEY_LOCAL_MACHINE\SOFTWARE\Repair Registry Pro - Infected by Adware.RepairRegistryPro - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Repair Registry Pro HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Repair Registry Pro - Infected by Adware.RepairRegistryPro - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Repair Registry Pro HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\RepairRegistryPro.exe - Infected by Adware.RepairRegistryPro - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\RepairRegistryPro.exe repair registry pro - Infected by Adware.RepairRegistryPro - Ignored Full path: c:\documents and settings\mommy\start menu\programs\ Repair Registry Pro.lnk - Infected by Adware.RepairRegistryPro - Ignored Full path: c:\documents and settings\mommy\start menu\programs\repair registry pro\ Uninstall.lnk - Infected by Adware.RepairRegistryPro - Ignored Full path: c:\documents and settings\mommy\start menu\programs\repair registry pro\ uninst.exe - Infected by Adware.RepairRegistryPro - Ignored Full path: C:\Program Files\Repair Registry Pro\ HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts - Infected by MyWebSearch - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\MNWMRM.DLL - Infected by iMesh.v7 - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\MNWMRM.DLL HKEY_LOCAL_MACHINE\SOFTWARE\MusicNet - Infected by BearShare - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\MusicNet HKEY_LOCAL_MACHINE\SOFTWARE\Magnet - Infected by Limewire 4.8.1 - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Magnet HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{92D94BB1-E28D-42A6-A299-A732CAF41AB8} - Infected by iMesh.v7 - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{92D94BB1-E28D-42A6-A299-A732CAF41AB8} HKEY_LOCAL_MACHINE\SOFTWARE\C-Dilla - Infected by CDilla - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\C-Dilla HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - Infected by PopCapLoader - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C9C5DEAF-0A1F-4660-8279-9EDFAD6FEFE1} - Infected by PopCapLoader - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C9C5DEAF-0A1F-4660-8279-9EDFAD6FEFE1} HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PopCapLoader.PopCapLoaderCtrl2 - Infected by PopCapLoader - Ignored Full path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PopCapLoader.PopCapLoaderCtrl2 GLB14.tmp - Infected by BestOffersNetwork - Ignored Full path: C:\Documents and Settings\Mommy\local settings\Temp\ Details on Cookies [emailprotected][1].txt - Cookie from site Doubleclick - Ignored Full path: C:\Documents and Settings\Mommy\Cookies\ [emailprotected][1].txt - Cookie from site ClickBank - Ignored Full path: C:\Documents and Settings\Mommy\Cookies\ PLEASE HELP!!!! Thanks, Brittani<3what program was it? what os do have ?what other programs do have for protection? look at my signature for good free programs. get superantispyware.Due to lack of feedback, I am closing this topic. If you are the ORIGINAL poster and you would like this topic to be re-opened for any reason, PM me or ANOTHER moderator and it can be arranged. If you are not the original poster and you require help, please start a NEW Topic with information about your computer and your problem. |
|
| 3540. |
Solve : come's up as unknown trojen? |
|
Answer» Did a scan the other day and it came up. never SEEN it before what is it [BHO] |
|
| 3541. |
Solve : Potential Dangerous Trojan - Please help!!!? |
|
Answer» Quote from: CBMatt on July 10, 2007, 08:07:35 AM I agree, you might WANT to simply remove Norton and stick with a free alternative (AVG Free is my personal favorite). I can't say whether or not this will help with the System Restore issue, but regardless, I think your computer will be happier. and safer seeing how your dection engine is 6 yrs oldhahaha, i knew my lazyness to get a better antivirus would catch with to me sooner or later... And forget about the system restore issue, I never used it all that much anyway I will most definitely by downloading AVG Free but before I go ahead and uninstall Norton, does it matter at all that the the DESCRIPTION for the Norton REMOVAL Tool doesn't list the 2001 version?Well, even if the removal tool doesn't include Norton 2001, you might as well run it anyway. It won't hurt anything.youll be happier with AVG. if you want to turn restore off then right click on my computer go to properties on the restore tab it will have a check box that say turn off restore check it press apply then okDue to lack of feedback, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3542. |
Solve : Unwanted pop ups and more...? |
|
Answer» I've been getting a lot of pop-ups on my computer. I have McAfee installed, and I have to run it daily, but I still get them. I've had this problem before, but last time, it was mostly one type of pop-up. This time it's different ones. Not only that, but after I started getting pop-ups, sometimes my keyboard won't type leters in. And after about five diffent letters, a pop-up comes up. Some of the Pop-ups are from Ask.com, Myspace, and a lot of them are from a dating service. I'm married and have a child, and some of the pop-ups show "HBO Soft-Porn", and I don't want my child seeing that. My Hijackthis Log will be on another post... |
|
| 3543. |
Solve : A strange virus! please help me!? |
|
Answer» My computer has been infected by a virus and I really don't know what to do. I've tried everything I could think of but no use. I couldn't find the name of this virus, so if you know about it, please help me. what's the name of this virus? You said you formatted...but you still have all of your data? Did you actually format, or did you simply reinstall Windows?by formatting I meant I formatted my Windows Drive (C:)...not all the hard disk. As you said, I downloaded/saved Hijack This to c:\program files, but wen I run it (I mean when I double click it nothing happens. what am I spoused to do? log? what log? where is it? 1. go here and download the hijackthis.zip 2.make sure the zip file is on your desktop. Make a folder on your desktop named hijackthis. If you are using the basic windows extractor please open the zip by double clicking it and go to file extract all. The wizard should open up. Click next, click browse and find the folder you made on the desktop. Then click next. 3.now go to the folder on your desktop, open it double click on the icon in the folder. Click the button that says “do a system scan and save a logfile. 4.once the notepad opens up please copy the compete log to a new post in this topic, remember it might take more than one post to fit the complete log. It's strange! "HijackThis" doesn't work! when I double click on it, nothing happens! the first time when I run it, "yreghpl.exe" crashed and I see an error (send to microsoft) but of course this process didn't stop and immediately began again. Now when I run "HijackThis" again, simply nothing happens! If it's ability to run is being blocked by the infection you could try renaming it to HJT2.exe or similar.Yes, renaming it is definitely the first thing you should try. Give it a random inconspicious name...like subzeroking.exe. Also...these filenames with random letters lead me to suspect Vundo, so go ahead and try this... 1. Download VundoFix and save it to your desktop. 2. Run VundoFix and click on Scan For Vundo. 3. Once it's done scanning, click on Remove Vundo. 4. When it prompts you to remove the files, click on Yes. 5. Your desktop will go blank as it's removing files. Don't worry, this is normal. 6. It will prompt you to restart your computer, so click OK. 7. When your computer is turned back on, your problem should be gone. 8. The program normally produces a Vundofix.txt file. Please locate this file and paste the contents in your next post. And then, just to be thorough... 1. Download VirtumundoBeGone and save it to your desktop. 2. Reboot into Safe Mode. 3. Once you are in Safe Mode, run VirtumundoBeGone and follow the instructions. 4. Exit when it has finished and reboot back into normal mode. 5. The program normally produces a VBG.txt file. Please locate this file and paste the contents in your next post.First of all, I should say that I really appreciate your help. thank you! I tried everything that CBMatt said, but VundoFix found nothing. At last I managed to run "HijackThis" (by renaming it) and get a log file. But before I post the log file I should say that first I ended all processes that I was able to (and I knew all of them) then I ran "HijackThis". Logfile of HijackThis v1.99.1 Scan saved at 4:27:05 PM, on 7/12/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\yreghpl.exe C:\Program Files\Common Files\System\vbegdwp.exe C:\Documents and Settings\Subzero\Desktop\hijackthis\HJT2.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe O4 - HKLM\..\Run: [] C:\Program Files\Common Files\Microsoft Shared\ O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe O4 - HKLM\..\Run: [ulmasjm] C:\Program Files\Common Files\System\vbegdwp.exe O4 - HKLM\..\Run: [bptnsvr] C:\Program Files\Common Files\Microsoft Shared\yreghpl.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O11 - Options group: [INTERNATIONAL] International* O11 - Options group: [TABS] Tabbed Browsing O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/programs/OnlineScanner.cab O20 - AppInit_DLLs: qhbpri.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) Hm...although you say VundoFix came up with nothing, I still suspect it... First of all, go to VirusTotal and scan the following files... C:\Program Files\Common Files\System\vbegdwp.exe C:\Program Files\Common Files\Microsoft Shared\yreghpl.exe C:\WINDOWS\system32\qhbpri.dll Once you have scanned them, please post the results here. After doing so, go ahead and delete these files in Safe Mode. Along with your VirusTotal results, post a new HijackThis log and we'll take things from there.Due to lack of feedback, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3544. |
Solve : Flashing flash drive?? |
|
Answer» Sir, I noticed, since today, the light on my 4gb usb flash drive keeps flashing all the time. It used to be steady when idle and blink when data is being read/write. Checked the contents (I unchecked the hide system file/folder). there are two hidden files: See below for some info...Got the worm remover from this site and ran it. I think, it has removed the infection. I can see the usb flash drives light is not blinking un-nessaccirily. Removed these two unwanted files from the drive: 1. autoexec 2. MicrosoftPowerPoint.exe Now these files are not returning back. Please let me know if anything else to be done. Here is the latest HJT log: Logfile of HijackThis v1.99.1 Scan saved at 07:53:52 PM, on 24-Jul-07 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: F:\WINNT\System32\smss.exe F:\WINNT\system32\winlogon.exe F:\WINNT\system32\services.exe F:\WINNT\system32\lsass.exe F:\WINNT\system32\svchost.exe F:\WINNT\system32\ZoneLabs\vsmon.exe F:\WINNT\system32\spoolsv.exe F:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe F:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe F:\PROGRA~1\Grisoft\AVG7\avgemc.exe D:\BlueTooth Dongle\BTNtService.exe F:\WINNT\System32\svchost.exe D:\FreePOPs\freepopsservice.exe d:\FreePOPs\freepopsd.exe F:\WINNT\system32\HDDSvc.exe F:\WINNT\system32\nvsvc32.exe F:\WINNT\system32\MSTask.exe F:\WINNT\System32\WBEM\WinMgmt.exe F:\WINNT\system32\svchost.exe F:\WINNT\Explorer.EXE F:\PROGRA~1\Grisoft\AVG7\avgcc.exe F:\Program Files\Huawei\MT882\dslagent.exe F:\WINNT\SOUNDMAN.EXE F:\WINNT\system32\VTTimer.exe F:\WINNT\tsnpstd3.exe F:\WINNT\vsnpstd3.exe F:\Program Files\Java\jre1.6.0_01\bin\jusched.exe D:\ZoneAlarm\zlclient.exe F:\WINNT\system32\sm56hlpr.exe F:\Program Files\Picasa2\PicasaMediaDetector.exe D:\TICK\TICK.EXE F:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe F:\WINNT\system32\stisvc.exe F:\Program Files\Internet Explorer\IEXPLORE.EXE F:\Program Files\Hijack This\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://in.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://in.search.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://in.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://in.search.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://in.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://in.search.yahoo.com R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://in.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://in.search.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: IE to GetRight Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - D:\GetRight\xx2gr.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINNT\system32\msdxm.ocx O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [IgfxTray] F:\WINNT\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] F:\WINNT\System32\hkcmd.exe O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [AVG7_CC] F:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [DSLAGENTEXE] F:\Program Files\Huawei\MT882\dslagent.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [tsnpstd3] F:\WINNT\tsnpstd3.exe O4 - HKLM\..\Run: [snpstd3] F:\WINNT\vsnpstd3.exe O4 - HKLM\..\Run: [QuickTime Task] "D:\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINNT\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINNT\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [ZoneAlarm Client] "d:\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [SM56ACL] sm56hlpr.exe O4 - HKLM\..\Run: [Picasa Media Detector] F:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [Yahoo! Pager] "F:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet O4 - Startup: TICK.lnk = D:\TICK\TICK.EXE O4 - Global Startup: Microsoft Office.lnk = D:\Microsoft Office\Office\OSA9.EXE O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - F:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1156782613859 O17 - HKLM\System\CCS\Services\Tcpip\..\{3DF66C34-0103-465C-8721-972DFFA572EF}: NameServer = 218.248.240.79 218.248.240.135 O20 - Winlogon Notify: !SASWinLogon - D:\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: igfxcui - F:\WINNT\SYSTEM32\igfxsrvc.dll O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: BlueSoleil Hid Service - Unknown owner - D:\BlueTooth Dongle\BTNtService.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - F:\WINNT\System32\dmadmin.exe O23 - Service: FreePOPs - Unknown owner - D:\FreePOPs\freepopsservice.exe O23 - Service: Google Updater Service (gusvc) - Google - F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HDD Information Service (HDDSvc) - AltrixSoft (http://www.altrixsoft.com/) - F:\WINNT\system32\HDDSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINNT\system32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - F:\WINNT\system32\ZoneLabs\vsmon.exe jawanda56Looks like it was in FACT the worm. I'm glad we managed to catch it. Just to be on the safe side, you should update your AVG and scan with it in Safe Mode. If it comes up clean, you should be set. I'm not seeing anything malicious in your HijackThis file.Quote update your AVG and scan with it in Safe Mode My AVG free is always updated. Scanned the PC in safe mode and have removed about more 14 threats. Thanks and bood bye... until next time. jawanda56No problem, come back anytime. You need to be careful when connecting your flashdrive to another computer. These types of infections SEEM to be running wild over in your neck of the woods. I would suggest contacting the person who infected your drive and suggest that they try same removal tool that fixed your problem.As this issue appears to be resolved, I am closing this topic. If you are the original poster and you would like this topic to be re-opened for any reason, PM me or another moderator and it can be arranged. If you are not the original poster and you require help, please start a New Topic with information about your computer and your problem. |
|
| 3545. |
Solve : search for [program removed] licence key? |
|
Answer» please send me [program removed] software & licence key for this software on my e-mail ADDRESS - [e-mail removed]himay, if you WOULD've read the rules, you would know that we don't HELP with this sort of thing. If you want illegal software, you will have to GO elsewhere. You're not even requesting GOOD software. If you want decent anti-virus protection, good free alternatives include AVG Free, Avast, ClamWin, and several others. |
|
| 3546. |
Solve : Both my user account is limited!!!? |
|
Answer» I am using a window xp proffesional with window vista skin and iam not connected to the net |
|
| 3547. |
Solve : found some virus on my computer, help (part 1)? |
|
Answer» Hi, |
|
| 3548. |
Solve : Which would you prefer?? |
|
Answer» I've been using AVG for a while now, but I am starting to like Avast! more. (Been using mother's lappy as a guinea PIG.) I'm curious, though: Of the people who've tried them both, which do you think works better? I'm REFERRING to the free editions of each, naturally. Hey there Dilbert |
|
| 3549. |
Solve : I think my computer's done for...? |
|
Answer» I didn't mean to make it sound like I was ACCUSING. There's no need to provide proof; I'll take your word for it. Keygens are still trouble, though. Next time, you should give the company a call. Usually, if you can prove that you own a legal copy (they'll tell you how), they will provide you with a new key. It's much safer this WAY. what kind of computer is it and how old? It's an emachines that my grandparents purchased me at Wal-Mart, I believe. It's about 4 years old, give or take a year.ummm... you might be able to contact them and order the cds for a reasonable price if you continue to have problems later on.Quote from: unlovedwarrior on July 30, 2007, 02:48:27 PM ummm... you might be able to contact them and order the cds for a reasonable price if you continue to have problems later on. Yeah, I hate to say it, but this might be your best bet as of right now. Just give eMachines/Gateway a call and there's a good chance they'll help you out. Keep us updated.Quote from: CBMatt on July 30, 2007, 03:15:47 PM Quote from: unlovedwarrior on July 30, 2007, 02:48:27 PMummm... you might be able to contact them and order the cds for a reasonable price if you continue to have problems later on. Alrighty then. There's no way I can, like, wipe everything and just re-install XP? I can save the Windows file to disk or anything?Sorry you can't reinstall Windows without a Windows XP install disc.Quote from: Deerpark on July 30, 2007, 04:06:09 PM Sorry you can't reinstall Windows without a Windows XP install disc. Is there a way to delete EVERYTHING besides the OS?Yes. But how do you plan to re-install ? ?I don't think wiping anything but the OS will do any good since its sounds like it's your OS that's messed up.Any idea how much they'd charge me for back-up disks?I've never had to order any, so I don't know how much they charge, but I wouldn't expect it to be too much. Check here for contact info... http://www.emachines.com/support/upgrades.html If you don't want to call, you can chat with a tech. |
|
| 3550. |
Solve : Norton antivirus interferes with Start? |
|
Answer» When my Norton antivirus does an UPDATE it is followed by interference with the Start BUTTON or starting PROGRAMS with lower toolbar icons. This INCLUDES but is not limited to starting AOL. Also, since nothing happens when Start is pressed, I can't get a listing of programs or other things on the start menu. Eventually it gets back to normal.more info please? LIKE what version of norton? what OS and SP?Norton interferes with alot more than Start...Quote from: patio on August 01, 2007, 06:17:52 PM Norton interferes with alot more than Start... very true patioI think a lot of us would agree that you're better off ditching Norton and using a free alternative such as AVG. |
|