4832 + Interview Questions in Computer viruses and spyware in Software Page 87 InterviewSolution

4301.	Solve : Cryptography Programming Question?
Answer» Sorry in advance: I wasn't sure where to post this. So my situation is: I have a password for a user and I want to store an encrypted version of the password in a database. I was doing some reading and was overwhelmed by all the different ways to encrypt things. All I want want to do is encrypt a password in such a way that it does not have a key to decrypt it. (I have no need to decrypt it, I plan on just encrypting the password again and CHECKING to see if they match) One of the articals I read, and found easy to read was here: https://crackstation.net/hashing-security.htm Now I don't fully trust this artical because it left out details not MENTIONED in others and the author promoted his own library. I don't want to use his library I just want to understand what needs to be done to encrypt a password in the way I have described. I'm using .net btw. Am I on the right track? Code: [Select]//TODO Come back and CATCH exceptions public static byte[] generateSalt(){ System.Security.Cryptography.RNGCryptoServiceProvider rng = new System.Security.Cryptography.RNGCryptoServiceProvider(); byte[] ben = new byte[32]; rng.GetNonZeroBytes(ben); return ben; } //TODO Come back and catch exceptions public static string hashPassword(string password, byte[] salt){ System.Security.Cryptography.Rfc2898DeriveBytes rfc = new System.Security.Cryptography.Rfc2898DeriveBytes(password,salt); System.Security.Cryptography.Ri+ byte[] key = rfc.CryptDeriveKey("TripleDES","SHA1",0,iv); string res = System.Text.Encoding.ASCII.GetString(key); return res; }Quote All I want want to do is encrypt a password in such a way that it does not have a key to decrypt it. (I have no need to decrypt it, I plan on just encrypting the password again and checking to see if they match) Before yo go any deeper, please clarify the above statement. A password i just 8to 16 characters long. There is little need for heavy duty encryption. Yet there should be some way to verify the hash with the original. And you do not need to write the code. Others have ALREADY don it. In Java there already are things for doing that kind of stuff. Same in C++ and Visual Basic. Generate a Random Salt. Use a new salt each time a hash is computed. Code: [Select]public static byte[] GenerateSalt() { byte[] salt = new byte[16]; new RNGCryptoServiceProvider().GetBytes(salt); return salt; } hash a password with a salt into a Base64 string for storing into a database (or wherever) Code: [Select]public static String HashPassword(string password, byte[] salt) { var hasher = new Rfc2898DeriveBytes(password, salt, 10000); byte[] hash = hasher.GetBytes(20); byte[] hashBytes = new byte[36]; Array.Copy(salt, 0, hashBytes, 0, 16); Array.Copy(hash, 0, hashBytes, 16, 20); return Convert.ToBase64String(hashBytes); } Verify that a password matches a hash. You could alternatively also use HashPassword() with the same salt stored elsewhere or from other data and compare the output. This uses the Salt present in the original Hash and checks if the provided password matches instead: Code: [Select]public static bool VerifyPassword(String password,String StoredHash) { byte[] hashBytes = Convert.FromBase64String(StoredHash); byte[] salt = new byte[16]; Array.Copy(hashBytes, 0, salt, 0, 16); var hasher = new Rfc2898DeriveBytes(password, salt, 10000); byte[] hash = pbkdf2.GetBytes(20); for (INT i = 0; i < 20; i++) if (hashBytes[i + 16] != hash[i]) return false; return true; }

4301.

Solve : Cryptography Programming Question?

Answer»

Sorry in advance: I wasn't sure where to post this.

So my situation is: I have a password for a user and I want to store an encrypted version of the password in a database.

I was doing some reading and was overwhelmed by all the different ways to encrypt things.
All I want want to do is encrypt a password in such a way that it does not have a key to decrypt it. (I have no need to decrypt it, I plan on just encrypting the password again and CHECKING to see if they match)

One of the articals I read, and found easy to read was here: https://crackstation.net/hashing-security.htm
Now I don't fully trust this artical because it left out details not MENTIONED in others and the author promoted his own library. I don't want to use his library I just want to understand what needs to be done to encrypt a password in the way I have described.

I'm using .net btw.

Am I on the right track?

Code: [Select]//TODO Come back and CATCH exceptions
public static byte[] generateSalt(){
System.Security.Cryptography.RNGCryptoServiceProvider rng = new System.Security.Cryptography.RNGCryptoServiceProvider();
byte[] ben = new byte[32];
rng.GetNonZeroBytes(ben);
return ben;
}
//TODO Come back and catch exceptions
public static string hashPassword(string password, byte[] salt){
System.Security.Cryptography.Rfc2898DeriveBytes rfc = new System.Security.Cryptography.Rfc2898DeriveBytes(password,salt);
System.Security.Cryptography.Ri+
byte[] key = rfc.CryptDeriveKey("TripleDES","SHA1",0,iv);
string res = System.Text.Encoding.ASCII.GetString(key);
return res;
}Quote

All I want want to do is encrypt a password in such a way that it does not have a key to decrypt it. (I have no need to decrypt it, I plan on just encrypting the password again and checking to see if they match)

Before yo go any deeper, please clarify the above statement. A password i just 8to 16 characters long. There is little need for heavy duty encryption. Yet there should be some way to verify the hash with the original.

And you do not need to write the code. Others have ALREADY don it. In Java there already are things for doing that kind of stuff. Same in C++ and Visual Basic.
Generate a Random Salt. Use a new salt each time a hash is computed.

Code: [Select]public static byte[] GenerateSalt()
{
byte[] salt = new byte[16];
new RNGCryptoServiceProvider().GetBytes(salt);
return salt;
}
hash a password with a salt into a Base64 string for storing into a database (or wherever)

Code: [Select]public static String HashPassword(string password, byte[] salt)
{
var hasher = new Rfc2898DeriveBytes(password, salt, 10000);
byte[] hash = hasher.GetBytes(20);
byte[] hashBytes = new byte[36];
Array.Copy(salt, 0, hashBytes, 0, 16);
Array.Copy(hash, 0, hashBytes, 16, 20);
return Convert.ToBase64String(hashBytes);
}

Verify that a password matches a hash. You could alternatively also use HashPassword() with the same salt stored elsewhere or from other data and compare the output. This uses the Salt present in the original Hash and checks if the provided password matches instead:

Code: [Select]public static bool VerifyPassword(String password,String StoredHash)
{

byte[] hashBytes = Convert.FromBase64String(StoredHash);
byte[] salt = new byte[16];
Array.Copy(hashBytes, 0, salt, 0, 16);
var hasher = new Rfc2898DeriveBytes(password, salt, 10000);
byte[] hash = pbkdf2.GetBytes(20);
for (INT i = 0; i < 20; i++)
if (hashBytes[i + 16] != hash[i])
return false;
return true;
}

4304.	Solve : Computer Slow and Beat Up?
Answer» It's a good laptop but it works nowhere close to how it should. I even tried formatting it and reinstalled windows but it still is crap. I'll post all the logs and hopefully someone can help me# AdwCleaner v6.040 - Logfile created 06/12/2016 at 14:54:59 # Updated on 02/12/2016 by Malwarebytes # Database : 2016-12-06.1 [SERVER] # Operating System : Windows 10 Home (X64) # Username : William - DESKTOP-5MOG9AD # Running from : C:\Users\William\Downloads\adwcleaner_6.040.exe # Mode: Scan # Support : https://www.malwarebytes.com/support *** [ Services ] * No malicious services found. * [ Folders ] * Folder Found: C:\Users\William\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej * [ Files ] * FILE Found: C:\Users\William\AppData\Roaming\Mozilla\Firefox\Profiles\c74juvxm.default\searchplugins\yahoo! powered.xml File Found: C:\Users\William\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage * [ DLL ] * No malicious DLLs found. * [ WMI ] * No malicious KEYS found. * [ Shortcuts ] * No infected shortcut found. * [ Scheduled Tasks ] * Task Found: Yahoo! Powered lodef * [ Registry ] * Key Found: HKU\S-1-5-21-1927688727-635054299-1412645329-1001\Software\PRODUCTSETUP Key Found: HKU\S-1-5-21-1927688727-635054299-1412645329-1001\Software\csastats Key Found: HKCU\Software\PRODUCTSETUP Key Found: HKCU\Software\csastats Key Found: [x64] HKCU\Software\PRODUCTSETUP Key Found: [x64] HKCU\Software\csastats Data Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxps://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_49&param1=1&param2=f%3D1%26b%3DIE%26cc%3Du Data Found: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxps://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_16_49&param1=1&param2=f%3D1%26b%3DIE%26cc%3 Key Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Data Found: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Key Found: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Data Found: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Key Found: HKCU\Software\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej Key Found: HKLM\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej Key Found: [x64] HKCU\Software\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej Key Found: [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej * [ Web browsers ] * Firefox PREF Found: [C:\Users\William\AppData\Roaming\Mozilla\Firefox\Profiles\c74juvxm.default\prefs.js] - "browser.search.defaultenginename" - "Yahoo! Powered" Firefox pref Found: [C:\Users\William\AppData\Roaming\Mozilla\Firefox\Profiles\c74juvxm.default\prefs.js] - "browser.search.selectedEngine" - "Yahoo! Powered" Chrome pref Found: [C:\Users\William\AppData\Local\Google\Chrome\User Data\Default\Web data] - aol.com Chrome pref Found: [C:\Users\William\AppData\Local\Google\Chrome\User Data\Default\Web data] - ask.com Chrome pref Found: [C:\Users\William\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences ] - pilplloabdedfmialnfchjomjmpjcoej *********************** C:\AdwCleaner\AdwCleaner[S0].txt - [3386 Bytes] - [06/12/2016 14:54:59] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3459 Bytes] ########## If you formatted and reinstalled the OS, it's not a malware problem.

4306.	Solve : My laptop always disconnects from the internet?
Answer» Ok,,,,I am an idiot. My laptop always disconnects from the internet and when it does connect,,,runs very slow,,,,my laptop is under 2 years old and is a Dell. Do I need to buy virus software,,,and will it work if I already have a virus? I work on a computer everyday and I didn't think I was that DUMB,,,,but I don't know anything when it comes to this stuff. I have a work laptop that works fine when I connect at home,,,but some sites are blocked my employer. The only THING I really do is surf facebook, amazon, ETC, And I play poker online. Please help,,,what do I need to do?? What MODEL computer is it so we can determine its specs?

4308.	Solve : I have a virus that malwarebytes and JWRT can't seem to find.?
Answer» Most of the clean up things seemed to run as I expected. However don't be surprised if I missed something. As far as I can tell the computer is RUNNING normally. My wife plays the games and I run WORD; it all seems up to par. My wife thanks you and I thank you! You do have a way with these computers! Keep up the good work, and Thanks! Again! CopasYou're WELCOME. Happy wife, happy LIFE. I will lock this thread. If you need it re-opened, please send me a pm.

4309.	Solve : I have a picture I can't move or delete. One I didn't create.?
Answer» I need advice as to how I may remove this picture that appears when I boot and lies across the desk top icons. It is about TWO inches tall and crosses the screen LEAVING a two in. margin, either end. Part of the middle is some translucent and the icons are visible there. This picture resists all my efforts to move it with the mouse, quite like the wall paper. Won't delete or give any sign it is there. But I see it. I have looked in the LIST of programs in control panel and don't see anything strange to me. However this thing appeared today. I ran Malwarebytes, didn't show anything amisss, I ran JRT gave me a page of things to delete, didn't seem to help. Any help, appreciated! Always Happy to know you GUYS are there. Ivan Copas Hello, My good wife found a FIX for this problem. The fault was in my walpaper. Reinstalling the walpaper cured the problem. The girl brain is truly great! Cheers, Copas

4310.	Solve : AVG free trial?
Answer» My free trial is over, & I get messages that I have 'junk files' not cleared away, & various other issues. I'm encouraged to buy AVG Antivirus, as none of these issues will be taken care of otherwise. Can't afford this. What to do instead ?Junk files are harmless. If you aren't GOING to buy the PAID version of AVG, uninstall it and replace it with a GOOD, free anti virus.Hello and welcome to COMPUTER Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. 1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine. 2. The fixes are specific to your problem and should only be used for this issue on this machine. 3. If you don't know or understand something, please don't hesitate to ask. 4. Please DO NOT run any other tools or scans while I am helping you. 5. It is important that you reply to this thread. Do not start a new topic. 6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe. 7. Absence of symptoms does not mean that everything is clear. If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line. *********************************************************************** You should download and install MicroSoft Security Essentials. Uninstall AVG and run a scan with your MS. Please let me know how that goes. MicroSoft Security Essentials** All versions and all languages.

4311.	Solve : which is best antivirus to delete trojon virus??
Answer» which is BEST antivirus to delete trojon virus?You can ask 100 people what is the best AV and you will receive 100 answers. Everyone has a different opinion. If you SUSPECT that your computer is infected I can HELP you. Please RESPOND yes or no.

4313.	Solve : Short videos take gigabytes of my space?
Answer» A 8 MIN videos and videos that short takes a lot of space , It must be a viruse that my avast cannot detect Note: they don't have that high QUALITY it was the old NOKIA so there must be an error Any suggestions? RIGHT click on the video and see what size it is.

4314.	Solve : Very old files slow down my laptop?
Answer» Greetings I have a very old VIDEOS and photos from years ago , EVERY time O try to open these files my LAPTOP becomes very slow plus I can't even copy or move them to other places ( actually copying or MOVING then is available but in a very slow way almost 20 kb/sec and itsn't ever a real ratio in real there is no movement in the mbs ) Even when I'm trying to cancel the move process I can't it remains a canceling window . They are virus free ( I have avast ) . Is there any way to open those files and copy them normally? Without damaging them ? ThanksYou COULD copy them to an external or USB drive or you could burn them to a DVD.

4317.	Solve : Device Manager - Device Migrated?
Answer» Hello, Do I have a trojan on my computer? The following messages are in my PC Device manager Under 'Device Manager – Computer – ACCPI x64-based PC' in the 'Events Folder' timestamp description 14-jul 17 11:11:36 PMDevice migrated 14-jul 17 11:11:36 PMDevice configured (hal.inf) 14-jul 17 11:11:36 PMDevice started (ACPI_HAL) The INFORMATION window below each description states the following Information (window) - Device migrated Device ROOT\ACPI_HAL\0000 was migrated. Last Device Instance Id: ROOT\ACPI_HAL\0000 Class Guid: {4D36E966-E325-11CE-BFC1-08002BE10318} LOCATION PATH: Migration Rank: 0x0 Present: true Information (window) - Device configured (hal.inf) Device ROOT\ACPI_HAL\0000 requires a system reboot to complete configuration. Driver Name: hal.inf Class Guid: {4D36E966-E325-11CE-BFC1-08002BE10318} Driver Date: 06/21/2006 Driver Version: 10.0.15063.0 Driver PROVIDER: Microsoft Driver Section: ACPI_AMD64_HAL Driver Rank: 0xFF0000 Matching Device Id: acpiapic Outranked Drivers: Device Updated: false Status: 0x0 Parent Device: HTREE\ROOT\0 Information (window) - Device started (ACPI_HAL) Device ROOT\ACPI_HAL\0000 was started. Driver Name: hal.inf Class Guid: {4D36E966-E325-11CE-BFC1-08002BE10318} Service: \Driver\ACPI_HAL Lower Filters: Upper Filters: Thanks Please check your Device Manager for any yellow warning icons.

4319.	Solve : Something in my. Computers and life?
Answer» I set up to be connected for 1 hour. After struggling to type this on my CL phone it was lost when, booted out. Would love to see those posts saved to drafts so it's not a total loss. I need to type this at the library a,d paste it here. I worry that whatever I got is spreAding through .y network. If you want me to tell the story with SPECIFIC details please tell MEI can't HELP you if you won't tell me the problem.

4321.	Solve : Re: Deleting unwanted toolbars and favorites folde?
Answer» DJ.....what operating system are you using.....and do you have any idea which tool bar it is that you cant remove. let us know dl65 Thanks for your input... I have Windows XP as my OS and the toolbar was something my son downloaded... it was some sort of web search toolbar that materialized everytime I opened a browser, even though I unchecked it and deleted it from add/remove programs... plus the two favorites folders must have been a part of that. There was a gambling folder and a site for male ahem ENLARGEMENT. lol Fortunately, as ascribed to my DILIGENCE, I have since resolved the issue. I ran Ad-aware and found that these sites had embedded themselves in my registry and files. DJ.....glad to hear that you got it with Ad_Aware ....its a good tool......and BTW there is a new update for it make sure you get it ..... Even if your son isn't................LOL It might just work ......ROTFL dl65 TRY either this&GT;http://www.spywareinfo.com/~merijn/cwschronicles.html#cwshredder or spysweeper from www.webroot.com

4322.	Solve : PLEASE HELP, I CANT FIND ANY HELP?
Answer» I need HELP really fast. Please answer my question as soon as possible. I am having internet problems and virus problems. It's all been going one after the other. I have XP I believe. OKAY PROBLEM: Whenever I press "Internet" on the desktop, it tells me "This page cannot be displayed. I've tryed so many websites, but will not WORK. It keeps going to http://if.searchcentrix.com/searchcat.jsp?p=98567&appid=21&type=dns&id=162826192168266&url=if.searchcentrix.com but I never got the program "centrix". Okay so I got here by going to My Computer. I put in google.com in the URL of My computer and I got there. I dont want to be going to My Computer everytime I want to go on the internet. And also, whenever I use the internet, I will get "This page cannot be displayed" for all the pop-ups that I DO want. Also, I recently uninstalled Ad-aware because I thought it was doing something wrong to the computer(it slowed down the internet a lot and kept freezing the internet), but then I realized it wasn't. The Freezing became more frequent, and I kept restarting the computer. I realized we got a lot of adware viruses(I first thought it was Ad-Aware and was a virus that got detected by Norton Antivirus). I deleted them all, and I got Ad-Aware back. Now this whole internet thing has happened. SO, please answer quick, because this is NOT MY COMPUTER. It's my friends so please please help. I will be so happy if you can help me Download 'spybot s&d'. It is free and gets rave reviews for those who go get it. Easy to install. Good Luck.Go to House Call free online virus scanner. Run Scan Go to CW Shredder. Follow instructions. Go to Internet Optins/Programs and hit RESET web settings. Confirm what home page you want or just put in blank,again at Internet options General tab. Reload Ad aware and Spybot. elizabeth27......It almost sounds like your p/c has a hijacker bug......Open Ad-Aware and get the latest update .....it will remove the hijacker . Now your problem with the internet.....may be the result of the sasser worm.....are you getting any odd error messages or is your p/c shutting down? Have you checked with your internet service provider in case they had a problem..... let us know dl65

4323.	Solve : Re: censored Ad Popups?
Answer» YellowRose......go to .... http://download.com.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button D/L the free Ad-Aware 6.0 build 181 it has a hijacker tool in it and should REMOVE and fix your problem..... BE sure to click on the UPDATE button after you have D/L and installed Ad-Aware Ad-Aware is a good tool ........you should probably RUN it every day or so ..... let us know how you make out dl65 Just ran ad-aware.248 OBJECTS found.Sounds like a lot.Hopefully this will work. Anyone have any ideas how this happened?Is it a virus or spyware?I don't want it to happen again. Thanks guys.I REALLY appreciate the help.Again,3 young kids that love to play on the computer&don't want them to see this stuff.YellowRose.......Glad to hear it worked for you...you didnt say if you were able to reset your home page to the one you wanted and it stayed there ......As for how did it happen ......don't know for sure but someone using the p/c must have clicked on something and presto .........there they were.....Are you on dialup or Hi-speed and do you have any sort of firewall installed .... let us know dl65

4324.	Solve : Re: NO CLUE?
Answer» Joanna....SOUNDS like you may have a virus or trojan.... what operating system are you USING ? let us know dl65 I have miscrosoft XP.... its a toshiba SATELLITE computer... umm.... the only REASON I didn't think it was a virus was that I just renewed my Norton Anti-Virus, so I thought it would definitely pick up a trojan or something. I have had the trojan virus before.... and usually Norton would pick it up and get rid of it before anything would happen.. Ugh... I am so frustrated. I do appreciate any help you have to offer. thankssasser worm try a removal tool....and are there any stop/error messages...and have you winupdating it? pity..

4325.	Solve : a quick question..?
Answer» eloz all, I've had some prob with my modem driver coz there was no DIAL sound.. after re-installing the driver its working fine now. But the problem is the internet pages are connecting.. every site i try to visit, it says "page cannot be displayed" and there are loadsaa spywares as well.. coz my "home page" is set to "about:blank" but still it connects to some advertising website. So does these spywares cause problems in visiting other webites?? or is it something wrong with my modem again? will it be solved if i try installing other browsers like opera? thank you.aQtheR.....Sounds like you may have a hijacker....... try downloading Ad-Aware....... http://download.com.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button It has a hijacker detector and remover in it .....and be sure to get the LATEST updates after you D/L it and then scan your p/c......is it safe to assume that you have a working and current anti-virus..... let us know how you make out ... dl65 Hi DL, Thanks for that.. i am d/l that ad-aware and well, i got norton UPDATED antivirus run active. Leme check it with this ad-aware.. thank ya again or try shredder>http://www.spywareinfo.com/~merijn/cwschronicles.html#cwshredder

4326.	Solve : Re: error.com?
Answer» Jennifer......Hummmmmmmm it sound like you may have a virus or a hijacker .......I would suspect sasser .......If you go to Symantec site ...and D/l the sasser removal tool ....SAVE it to DISK .......then with the infected p/c offline ........run the removal tool and it should get rid of it ...... http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.b.worm.html Do you have Ad-Aware on your infected P/C .......if so again do not connect to internet and run Ad-aware ..... let us know how you make out any error messages or anything running ....LOOK in your task manager and SEE if you see anything that looks odd. dl65 try this if you wish>http://www.wilderssecurity.net/bhblaster.html

4327.	Solve : spyware & adware destroying my computer?
Answer» Recently my computer started acting up. For no reason it SHUTS down unexpectedly. I thought there was a virus but the antivirus didn't detect any viruses on my computer MAYBE is hidden. I really need your help what programs can I use or buy in order to protect from all viruses, spyware, adware, hacker you name it. Any suggestion of how to STOP these? I'm concern about security and privacy when SURFING the Internet. Need guidance. thanksteck2k.....perhaps you could give us a little more info....like what O/S are you running , what kind of Anti virus are you using..Are all your patches and updates current and how often is your puter shutting down ? On regular time intervals or just random? Has it been doing anything else that is unusual? Let us know, dl65 I am running Windows ME and using 2002 norton antivirus and downloaded the most recent patches and updates. The computer shutsdown Ramdonly right in the middle of my Work. I thought that there could be a virus but the problem is the antivirus didn't detect anything. The computer's performance is so sluggish. I getting so fed ud with system. Might as well wipe out the hard drive and start all over again.Hi tech2K....Is your NAV 2002 current check your subscription date on the status page .....the latest virus definitions were dated 05/05/2004 Read th following... Reminiscent of last summer's Lovsan/MS Blaster worm, W32/Sasser.worm.a and W32/Sasser.worm.b are Medium Risk Internet worms that exploit a vulnerability in the Microsoft Windows operating system, especially 2000 and XP. The sasser worm will do exactly as you describe. When your looking at the sasser info run the test from that page and see if your Norton AV activates a warning for you when you download the "TEST page" Hope this helps you, dl65 Hi teck2K.....ooops I fouled up the last post .......go to http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=125007&cid=10152 this should work. dl65 http://www.javacoolsoftware.com/spywareblaster.html Check that out. Meant to stop spyware getting on your comp in the first place. Have to clean it up first of course. If it is not a virus or spyware you might want to take a look at your power supply. It may be on the brink of dying. download adaware and spybot, they will wipe out most of the spyware, you can find the links at www.spywareinfo.comok to run winme and any other pc here is what i recomend people should DONT UPDATE ANYTHING FROM M$OFT disable updates it was ok before when i first got it? i hear you say next stop paying for software loads of free stuff out there just what watch what you are downloading?next a firewall from sygate and antivir from majorgeeks and skin you pc ...maybe later on this...this pc has been RUNING fault free for four years and not an update insight...after all any download from m$oft can fail and so does your pc with it...and the biggest place virus lurk is system restore...disable it...

4328.	Solve : Viruses and Spyware?
Answer» I think I have a virus problem. A week ago, when I booted up, I started getting a "Kernel" message, the desktop appears to be in the Safe Mode and my mouse does not function. A friend suggested adaware. My son seems to have downloaded adaware USING only the keyboard but we cannot navigate within the adaware (without our mouse). What can we do? Does this sound like a virus? We have Norton Anti-Virus running. Thanks! the kernel is part of win 32 system and the TERM kernel come from nut or shell have you re-starting this pc in msdos prompt?just guessing that this is win98? is this message ...xyz has caused an error in kernel32 xyz...and you are right in saying a trojan/worm/virus has caused this nav sometimes may miss them?try a trojan hunter killer..Thank you, Merlin- We have not tried starting in msdos, but we will. WindowsME is our OPERATING system. Can trojan hunter KILLERS be downloaded or is this software one needs to buy? It's wonderful to have some guidance. We'll get on it.options re-install winme dont panic...here is how search for the c:\windows\options\cab folder next to the scanreg icon is the setup icon if you click this with the winme install disk in the cdrom drive it will re-install winme.. without losing any files or try this in the start menu programs\ accessories\ MSDOS prompt.......type scanreg\restore after so the command looks like this C:\WINDOWS SCANREG\RESTORE and chose the last good cab file and answer yes to all and windows will do the rest..then download this progam>http://www.webroot.com/wb/products/spysweeper/index.php?rc=940 and have you got ie6 on your pc? this should restore you mouse problem etc..

4329.	Solve : Gator W/Gain popups?
Answer» I just notified Gator about it carrying Spy Ware and Add-Ons in its PROGRAM, and their reply was that in the agreement section of the program, it is explicit about not having or useing any such related spammers. Well I've went into numerous free download Spy ware sites , to see what they come up with, and Gator comes up #1 everytime. I use this primarily for all my internet payments and passwords. Just want to see what others think about this program, or have any suggestions on which one is better. Thanks, Plumbcrazywhy not just use a bank THATS deals with internet banking gator bonzai buddy weather search gain and so on have been nothing but a pain to pc users..and the eec have banned spamming?PlumbCrazy......If you believe what they told you .....I've got a pallet of gold BRICKS I'll let you have CHEAP.....LOL I have Gator BLOCKED and most of the Bug utilities all remove Gator......so what does that tell you ...... Stay clear of it ..... dl65 Good enough, but your not my wife.Gator is part of the Axis of Evil as noted by George Dubya.

4330.	Solve : some virus or hijacker keeps shutting down my IE!?
Answer» I have RUN the latest Ad-Aware and Spy-bot. I have run BPS (BulletProof Software). Everytime I try to scan with TrendMicro, or get to some other online scan --- whatever virus or hijackers I have, shuts down my Internet Explorer. How can I get rid of this vermin!!! Please, I'm not that cyber-friendly; but I need my system to work when I need it to work!!! Can anybody help me??? If I had MILLIONS of dollars, I would hire a hacker --- to trace back whatever hacker is hijacking me, and I would find out where that hijacker lives; and I would visit him ... or her ... and I would chop-off his ... or her ... hands and give them a lobotomy with no anesthetic, so he ... or she ... could never hijack or HACK anyone ever again I'm a liberated avenger! Anybody else WANT to help with THAT DREAM!!! Dwayne .....What kind of Anti Virus do you have installed on your P/C dl65

4331.	Solve : Adware Problem?
Answer» I have a problem w/ adware on my computer. I have Windows XP for my O/s and Norton Anti-virus 2004. I have run several system scans, and more than 20 adware files are found. However, Norton is unable to delete them and my attempts at deleting them manually have also failed. How do I get RID OF THEM??!! Thank you very much for your TIME!Get a program such as Ad-Aware (http://www.lavasoft.de - Free Trial) or Spybot (http://www.safer-networking.org/ - Freeware (I BELIEVE) These programs are more sophisticated and can check the memory (At STARTUP) before the Adware can load it's self into your memory and give Norton (Or anything else that's not specifically designed to REMOVE Ad/malware) a hard time removing it. Good luck in your endeavours.. RAPTOR

4332.	Solve : evil evil virus?
Answer» Whenever I try to start up my computer, instead of going through the normal startup routine, the blue Windows XP screen comes on, and no matter what I try (pressing F8; Cntrl, Alt, Dlt; or puttin in my XP Installation CD, the computer is stuck on that screen. What to do? What HAPPENED before this event occured?the only thing that i can think of was a couple of MESSAGES came up saying that a file wasn't working and needed to be reinstalled. but they were all pretty periferal files like messaging systems and stuff. this happened the last TIME i turned the COMPTUER on. You should get an installation/restore screen when you enter the XP CD whilst booting. Did you set your CD-ROM to 'First Boot DEVICE'?I don't get an installation/restore screen. I guess I didn't reset cd. I didn't know to. Just get blue logo screen after it loads.Do you know how to change the boot device? Do you know how to enter the BIOS?

4333.	Solve : explore function doesn't work?
Answer» PLEASE bear with me as this is my first post here. I must have picked up something from the internet that is causing havoc with my computer. It resets my homepage automatically to some page I have never seen. Also I can no longer ACCESS explore from my computer nor control panel. My computer locks up everytime I try to explore to see what's been added to my system. Please help if you can. Thanks Download, install, update, and run AdAware and SpyBot.easy........Do as Joleen suggests.....it should correct the problem Ad-Aware ...... HTTP://www.download.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button SpyBot..... http://www.download.com/3000-8022-10122137.html Don't forget to GET the updates...... Good luck dl65 Thank you both for your help, I did just as you suggested and updated and ran both programs. Part of my problem is fixed. I can run my computer now without it locking up on it's own but it still locks up anytime the explore funtion is needed. Could have I accidentallly deleted a needed file? I can't run certain programs nor can I use the explore my computer or control panel without it locking up. ADDITIONALLY, when I reboot I get this message "C:\Windows\sp.dll: Error opening the file. There may be a disk or file system error." Thank you again for your help and I would appreciate any additional help with this problem. easy.......there is a good chance that " sp.dll " is part of one of the bugs you had ........but before you do anything radical......try D/L Pest Patrol is it supposed to detect and remove this threat.... http://www.antivirus-online.de/english/counttro.php3?a=1229 Hope this solves your problem dl65 http://www.dll-files.com/dllindex/dll-files.shtml?sp - sp.dll http://www.liutilities.com/products/wintaskspro/dlllibrary/sp/ - sp.dll information. Donot download this .dll file, it isn't missing do as DL65 says.

4334.	Solve : Computer seems like it has a glitch?
Answer» StartupLite Download StartupLite by MalwareBytes to your Desktop. Doubleclick StartupLite.exe to launch the program. Ensure the Disable box is checked. Click Continue. A pop up message will tell you the unecessary startup items in your list have been disabled and ask you to restart your computer. Re-start your computer. I told you something always goes wrong with me and a computer. I did what you said, the Disabled box was checked, I clicked on Next and this box comes up saying: Error on value: SunJavaUpdateSched. There was an error creating a MSConfig key. Then when I went to X out, it said complete and restart the computer. That's how it goes with me, something is always thrown up on the screen that I never know what to do with! I'm leaving it alone, it said it did it, so that's fine with me. About the cat - it is about a year old. I rescued it from outside when it was sick and its mother abonded it. It is a female, not spayed yet (planned to do so but if she was pregnant, I wanted to wait, and wasnt sure), possibly pregnant. There are a lot of wild cats in my area, and I saw her, tried to get her, but she just ran. All my other pets loved her as a friend, and I lived her very much. I hope one of the wild cats didnt convince her to leave me.(P.S The cat has been missing for a few days now).Oh no, Coco. I am so sorry. Since she was a female rescue, if it's possible she was pregnant, she very well could be looking for a safe place to have her kittens. That happened to us on the first one we rescued. We were feeding her, petting her, letting her in, we figure she's our cat at this point. Then she disappeared for a four days and we looked everywhere and called for her. (Unlike my cats, she actually came to "kitty, kitty, kitty"!) When she showed up, she was skinnier. She would come every day, hang out a bit, but always left and was gone most of the time. One day I decided to follow her and we went way up the ROAD until we got to someone's house where she cut back behind and into the woods. I didn't want to trespass on someone's land, so I went back home. A few days later she showed up at a shed way down at the end of our property with the kittens. The next day she moved them up to the house and behind the hedges in front of the house. So maybe that's what yours is doing. Don't give up yet. How long had you had her? Because this cat we had only a month when she left to have her BABIES. Keep your fingers crossed and I hope she shows up. I have had her about a year, since she was a few weeks old. (P.S. Can we go back on topic somewhat? Thanks for the message.)I know, I figure we'll get in trouble if we keep talking cats. I hope you get her back. If you do, do let me know. I'll keep my fingers crossed for you! My cat returned! And she is back to her normal self!OMG! WONDERFUL! She was out "catting around". Now she just might be pregnant, so look out! I'm so glad she's back and I know you are too. You never knew whether they are somewhere hurt or lost when that happens, but am so terribly delighted she is back home. Give her tons of love! Quote from: Coco423 on FEBRUARY 17, 2018, 02:36:48 PM (P.S. Can we go back on topic somewhat? Thanks for the message.) Can we please at least get somewhat back on topic? Thank you for the encouragement.Click Start> Computer> right click the C Drive and choose Properties> enter Click Disk Cleanup from there. Click OK on the Disk Cleanup Screen. Click Yes on the Confirmation screen. This runs the Disk Cleanup utility along with other selections if you have chosen any. (if you had a lot System Restore points, you will see a significant change in the free space in C drive) *************************************** I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free. Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future. Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly. Safe Surfing! Thanks, Dave. I did run the Disk Cleanup. My computer seems fine now. I did not know about WOT...how interesting. I will download that for sure! Now, because I have that on my computer, will it work with both IE and Google Chrome? For some reason, when I get on Facebook with IE, it starts MESSING up and things go haywire, like FREEZING, not showing big spaces of text or pictures, and sometimes just totally stops working. So I use Google Chrome for Facebook and do not have that problem. Somewhere along the way I was told IE has glitches that it will do that sometimes as Facebook is not the only website I've been on with IE and it has acted up. I went to WOT and got my question answered...they do not have WOT for IE evidently. I saw Google Chrome, Foxfire, Opera, and one other, but not IE. So I guess you don't need to answer that question for me! I will lock this thread. If you need it re-opened, please send me a pm.

Explore topic-wise InterviewSolutions in .

Solve : Cryptography Programming Question?

Solve : Secondary hard drive?

Solve : Friends Windows 10 Laptop Edge got hit with a call this number hijacker?

Solve : Computer Slow and Beat Up?

Solve : Osiris virus question?

Solve : My laptop always disconnects from the internet?

Solve : Suggestions on what products to go with or should he stick with what he has??

Solve : I have a virus that malwarebytes and JWRT can't seem to find.?

Solve : I have a picture I can't move or delete. One I didn't create.?

Solve : AVG free trial?

Solve : which is best antivirus to delete trojon virus??

Solve : Help recoverin wifi on laptop running windows 7 after virus?

Solve : Short videos take gigabytes of my space?

Solve : Very old files slow down my laptop?

Solve : "The requested resource is in use" error when attempting to run AV software?

Solve : redirect.cheapred.info hijack my browsers?

Solve : Device Manager - Device Migrated?

Solve : Malwarebytes?

Solve : Something in my. Computers and life?

Solve : Hacker turned my Win10 PC into a VM and remote controls it for months now! HELP!?

Solve : Re: Deleting unwanted toolbars and favorites folde?

Solve : PLEASE HELP, I CANT FIND ANY HELP?

Solve : Re: *censored* Ad Popups?

Solve : Re: NO CLUE?

Solve : a quick question..?

Solve : Re: error.com?

Solve : spyware & adware destroying my computer?

Solve : Viruses and Spyware?

Solve : Gator W/Gain popups?

Solve : some virus or hijacker keeps shutting down my IE!?

Solve : Adware Problem?

Solve : evil evil virus?

Solve : explore function doesn't work?

Solve : Computer seems like it has a glitch?

Solve : p2esocks_1012.dll?

Solve : Is it too late??

Solve : Virus? Please help me.?

Solve : Error that keeps popping up!?

Solve : wallpaper change?

Solve : trouble with norton av?

Solve : Screwed up Comp?

Solve : cannot delete:access denied?

Solve : Unable to enable Norton?

Solve : Internet Problems.?

Solve : I can't access my programs. A virus stops them.?

Solve : 180search assistant?

Solve : malware & data miner?

Solve : w32.pinfi?

Solve : Can't get rid of Hantaner virus?

Solve : Small program?

Solve : Re: censored Ad Popups?

4335.	Solve : p2esocks_1012.dll?
Answer» Hi, upon start-up on my computer i recieve this message which says it cant find this MODULE or something p2esocks_1012.dll I have used HijackThis but dont know how to interpet the information after i have scanned. What do i delete? Logfile of HijackThis v1.97.7 Scan saved at 17:41:22, on 02/09/2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVG6\avgserv.exe C:\WINDOWS\system32\slserv.exe C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\khooker.exe C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\windows\redirect7.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe C:\Program Files\Microsoft Office\Office\OSA.EXE C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/*http://www.yahoo.com/ext/search/search.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank O2 - BHO: (no name) - {021BB032-80A8-4FB6-B3D5-CF27B1553B95} - C:\WINDOWS\mslagent\4b_1,0,1,0_mslagent.dll (file missing) O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {2E9CAFF6-30C7-4208-8807-E79D4EC6F806} - C:\Program Files\Submit\submithook.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [redirect] C:\windows\redirect7.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [easywww] C:\windows\easywww2.exe O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1012.dll,InstantAccess O4 - HKCU\..\Run: [mslagent] C:\WINDOWS\mslagent\mslagent_.exe O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O9 - Extra button: Packard Bell (HKLM) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/potd_x.cab O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_EN_XP.cab O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_EN_XP.cab O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab O16 - DPF: {CEFB7B49-9652-464F-8AFD-A577C0500F39} (EGP2ECOM Class) - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1012_EN_XP.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Could anyone help? It would be GREATLY appreciated. full of spyware and MAYBE trojans try spysweeper from www.webroot.com and this >http://vil.nai.com/vil/stinger/ and this >http://www.thespykiller.co.uk/ shredder and get another firewall...Please Read This First - Viruses & spyware Download the programs recommended.

4336.	Solve : Is it too late??
Answer» chelc.....are you not able SET BIOS to boot from floppy....shut down .....insert floppy and restart then using the bootdisk ....REMOVE the partition and then format .......set the bios to start with cd assistance ....PUT in the win cd and let it load ?

4337.	Solve : Virus? Please help me.?
Answer» Everytime I get on my computer, it says EXPLORER has performed and illegal operation. I cannot open any of the programs. When I click "ok" the screen goes to just my wallpaper and sometimes it then repeats the same process. Once, after I kept clicking ok the WORD "kernal" came up at the top of one of the illegal operation bars. I tried restarting my computer from a new Norton Anti-virus cd and it searched for over 5 hours until it said no virus found on the C drive. I can't load the cd while in safe mode. When I try to get on the internet it won't get online and only says the communications port it busy. Is there a virus on there or is there something else? Please help me. Thanks.........It certainly sounds like a virus is present.....and the problem using the NAV cd is that it doesnt have all the current virus updates......and there a lot of them....... can you be a bit more specific as to the ERROR messages you have been getting and what operating system are you using dl65I am using Windows 98. The only thing I can exlplain is that it just shows one of those illegel operations windows in the MIDDLE of the screen and it says that the program performing the illegel operation is explorer. The kernal thing only happened once and now it just goes to the wallpaper screen after I click ok on the illegel operation box.

4338.	Solve : Error that keeps popping up!?
Answer» So i ran SpyDoctor which got rid of some things and after that i kept getting an error message every minute or so, it would pop up with a message like "Error LOADING 'file name here'..." so my friend had me type 'msconfig' into RUN and it got rid of that certain file's problem but then i get a new error that says "Error loading C:\PROGA~1\INTERN~2\inetkw.dl the specified module could not be found" and it pops up every minute like the other error only when i tried msconfig in run, it didn't stop the problem. i don't know how to get rid of it. can anyone help?Please Read This First - Viruses & Spyware Install the programs RECOMMEND to see if they are the SOLUTION to your problem.thanks for the link, but i've tried all the solutions i found but nothing has worked and i'm still having the problem.. :-/DISPITE DOWNLOADING a bunch of programs and virus scanners my problem has not gone away. i am at lost of what to do! i think i might've deleted a file that windows xp needed. and i tried system restore but nothing has worked.I never quite heard of Spydoctor. Does it create backups of what it removes? If yes, I suggest you load those, remove Spydoctor and use an adware remover such as Adaware SE or Spybot Search & Destroy to remove any spyware that may have come with loading the backup files.hey thank you for the help. i don't know what my brother did but he fixed it for me. and i currently run adware on my computer now. Thanks for all the help!

4339.	Solve : wallpaper change?
Answer» I need HELP! My wallpaper turns black and changes into an image of a "spiderweb tattooed a**hole"! I've got adaware, spybot, avast and zone alarm running and updated but they don't detect the problem! The pest puts a bmp file in winnt folder that sets as wallpaper. Even if i delete it and the temporary files, the wallpaper changes after a short time! I tried to run spybot and adware in safemode and also to delete a value in regedit in which I found the bmp file "WALLCHANG.BMP" but it doesn't fix! I NOTICED that the pest add 2 files in winnt: WALLCHANG.BMP WP.JPG they are the same image but the one DISPLAYED in the desktop properties is only the first one. I DON'T KNOW WHAT TO DO! HELP! thanks! Lolinza HijackThis! may help you. I wonder what kind of websites you VISIT to end up with something like that.. i just have it...i can paste my start up here so that you have a look? in the meantime i tried to lock my wallpaper settings in the registry ADDING NoChangingWallpaper DWORD in [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ ActiveDesktop] it seems to work but, veven if so, i haven't solve the problem... ps...i don't visit that kind of websites! HERE'S THE LOGFILE: Logfile of HijackThis v1.97.7 Scan saved at 13.46.04, on 31/08/2004 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe C:\Programmi\Alwil Software\Avast4\ashserv.exe C:\WINNT\System32\svchost.exe C:\Programmi\Norton Utilities\NPROTECT.EXE C:\WINNT\system32\MSTask.exe C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe C:\Programmi\Speed Disk\nopdb.exe C:\WINNT\system32\ZoneLabs\vsmon.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\Programmi\tbridge\Flatbed.exe C:\Programmi\QuickTime\qttask.exe C:\Programmi\File comuni\Real\Update_OB\realsched.exe C:\Programmi\Alwil Software\Avast4\ashDisp.exe C:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe C:\Programmi\WLAN\802.11 Wireless LAN\WWlanMonitor.exe C:\Programmi\Zone Labs\ZoneAlarm\zapro.exe C:\Programmi\Internet Explorer\IEXPLORE.EXE D:\Documenti\mp3\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.it/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.fastweb.it R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da FastWeb R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.fastweb.it R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti F1 - win.ini: load=C:\Progra~1\TBridge\Flatbed.exe O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [ATIPTA] C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe O4 - HKLM\..\Run: [MOD] C:\Programmi\Microangelo\muamgr.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [NAVAPIW32] C:\WINDOWS\SYSTEM32\NAVAPIW32.exe O4 - HKLM\..\Run: [avast!] C:\Programmi\Alwil Software\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe O4 - HKCU\..\Run: [UninstallAbility] "C:\Programmi\UninstallAbility\uability.exe" /AUTO O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: WLAN Monitor Utility.lnk = C:\Programmi\WLAN\802.11 Wireless LAN\WWlanMonitor.exe O4 - Global Startup: ZoneAlarm Pro.lnk = C:\Programmi\Zone Labs\ZoneAlarm\zapro.exe O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Ricerche (HKLM) O14 - IERESET.INF: START_PAGE_URL=http://www.fastweb.it O16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/222563200ebb1e3fa717/netzip/RdxIE601_it.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab I donot see anything out of the ordinary. Did you? Perhaps you should allow either Adaware or Spybot S&D (Not at the same time) to boot at startup (Check settings) They may be able to remove the culprit by accessing the memory before other programs can.

4340.	Solve : trouble with norton av?
Answer» I installed my av program a few days ago. It won't let me register my produce, receive live updates or get on the tech web site. Everytime I try to update or register, it says that I am not connected to the internet and to check that I am able to connect, and this is as the internet is running. Every TIME I try to get on the website, it comes up that the page is not AVAILABLE. Does anyone have any ideas for me? The software will do a full scan, but it says that my virus definition is not up to date. I am worried that I could get a virus while I am trying to figure this out. Any help would be appreciated. Thank you very much.angie....there's a very good possibility that you have a virus on your machine........so try this go to the symantec site ...... http://www.symantec.com/index.htm and scroll down to the download section and click on the free security check......when it opens up click on virus scan ......and it will scan your system with the most current updates..... (before you do the scan be sure to shut down your Nortn Anti virus) ......and after it finishes I would go off line and uninstall the NORTON antivirus and reinstall it then try to activate and update .......the odd thing is even if you havent activated Norton antivirus it should let you update ....... Is it Norton 2004 you have and do you have a firewall which may be preventing connection......Also do you have auto update turned on ? let us know how you make out ... dl65 I had just gotten my computer back from the computer store, (had a virus) where I purchased the av software. I got home and installed the program. It ran the preinstall and then installed. I ran a full scan and everything was fine. I then connected to the internet and tried to register the program, and it wouldn't let me, and then I tried to do the live update and once again, it wouldn't do it because it said that it didn't have a connection to the internet, even though it was running the whole time. It was NAV 2004, and I do have a firewall on and the auto update on the av is on. Any ideas??? Thank youangie.....did the store happen to mention which virus your pc had......because there's a new one in the last few day......CALLED W32.Korgo.l .....and what it does is prevents you from getting any Norton or Microsoft updates.......however there is a removal tool on symantecs site.... http://www.symantec.com/index.htm look at latest threats and click on the above one and you will go to the page on which the removal tool is......you may have to use another pc to get there and D/L it to a DISK or cd and then run it on your machine ... The other thing is perhaps disable the firewall when your trying to get to Norton on the off chance that the firewall is stopping you . let us know how you make out dl65 Thank you for your reply. I tried disabling the firewall earlier, but it didn't help. I will have to try the D/L tomorrow, and go from there. I ran the scan again and found three trojan viruses, which NAV quarantined and removed. Will I have to do anything else, or did the av really take care of it? Once again, thanks for the advice. I really do appreciate it.If Norton Anti Viruses quarantined them, you should be safe and sound. You should do an extra online scan just in case.

4341.	Solve : Screwed up Comp?
Answer» I dont kno whats happened but i only REALISED i had comp problems when i couldnt access my emails through hotmail.com. I have scanned my comp with a number of adware and spyware SCANNERS but i still cannot access my emails. I tried entering the registry editor but when i try to OPEN it (start/run/regedit/open) it doesnt open could anyone PLEASE help me. OS is XPI cant access safe mode either Try doing a system restore. If that doesn't help, you can attempt to repair Windows XP by using the Windows XP CD as a boot DISK.

4342.	Solve : cannot delete:access denied?
Answer» I have run Ad Aware and SPYBOT and there are a few files that neither one can get rid of. I have tried to remove them myself and it tells me "cannot delete:ACCESS denied". What can I do?FIRST you can GIVE us some idea as to what the files are. Does Adaware or spybot recommend any actions?You can tell Ad-aware to start it's self before the rest of the programs load into the memory. This will prevent ad/malware to be loaded into the memory. Usually when Ad-aware cannot remove certain Ad/malware infections it will ask if it has to run at startup. Press the settings button -&GT; General -> Run at Windows Start Up

4344.	Solve : Internet Problems.?
Answer» Hi I don't know what happen but I cannot log into my hotmail account. I can't SEND my from my school's mailing account. I can't hit submit when i try to change my profile on some forums. I can't hit submit when i post on some forums. I think it the problem worsen everyday. I don't know what to do. I have try reinstalling WINDOWS XP but that just wiped out my entire computer w/o resolving the issue. I try rebooting my computer using the 4 system restore but that also only wiped out my computer w/o resolving the issue. As I write this I can only hope the submit button works. I don't know what to do. I have tried posting it on some random forums on the INTERNET but no one seems to be able to help me. I can't even access windows update. It gives me an error and says "we're sorry." I try running the troubleshooter for windows update but it was hard to understand. More or less, my problem is still at hand. I can't check my mails, i can't send it, i can't post things. What good is this internet now? I have even ran the latest version of NORTON Anti Virus and clean out everythign with SpyDoctor. The problem still exist. Please help me, I beg of you. Did you format before reinstalling Windows XP or only uninstalled Windows XP? I suggest you format before reinstalling Windows XP. Please Read This First - Viruses & Spyware But before you do so, try a few of these applications to see if they can help you out of this situation.tools /internet/options /advanced /security verify the site you want is not BLOCKED. If you have cookies enabled,but specific ones blocked the sites just error out, but do not inform you of a cookie failure the sites just check for cookies not for blocked ones or try this >http://support.msn.com/contactus_emailsupport.aspx?productkey=messenger&ct=eformfree

4345.	Solve : I can't access my programs. A virus stops them.?
Answer» I recently RECEIVED a letter in my Hotmail junk mail informing me that something that I am supposed to have ordered had been shiped and my credit card had been billed. There was a place I was to click if I wanted to SEE what it was all about. Well I clicked it as I had not ordered anything. Now if I click on a shortcut on my desktop nothing happens and also on my program list. I am useing windows 2000. Is there ANYWAY to fix this without formating my hard drive?I'd boot into safe mode and SCAN for VIRUSES. Are you able to get out to the internet?You can also try if Ad-aware or Spybot Search & Destroy will help you. http://www.lavasoftusa.com/ - Ad-aware 6.0 - Free Trial http://www.safer-networking.org/ - Spybot S&D - Freeware