Windows Support Forum

cant listen to music on wmp and windows spyware warnings

Q: cant listen to music on wmp and windows spyware warnings

wmp wont play music and i got warnings for spyware plz help

http://www.techsupportforum.com/forums/f284/cant-listen-to-music-on-wmp-and-windows-spyware-warnings-281066.html
Relevancy 100%
Preferred Solution: cant listen to music on wmp and windows spyware warnings

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/directdownload.php. (This link will automatically start a download of Reimage that you can save to your computer.)

Relevancy 72.67%

First, I wanted to listen to a clip on Amazon and I clicked "listen" for Windows Media Player and then another time for Real Player, since I have BOTH. All it would do was save it to my computer (entitled "hurl") and then I couldn't open it. It didn't even give the option of opening it--that was "grayed out."

Also, is there ANYwhere that I can just download a song without taking out a bank loan or giving them my firstborn? I went to Yahoo radio, too, and went through the sign-in procedure and then it wouldn't complete. The button just did nothing. I don't plan to do a lot of downloading music. I just want to get a song occasionally.

Any help will be appreciated.
Thanks!
 

A:Solved: Listen to music clips or download music

Here is a link to free radio stations in the UK (I don't know where you are based)
http://www.radiofeeds.co.uk/
Scroll down to the player that you use.

 

https://forums.techguy.org/threads/solved-listen-to-music-clips-or-download-music.376079/
Relevancy 71.38%

I had a window phone but now I have a android phone and I want to transfer my music I have saved on my windows phone.

http://forums.windowscentral.com/ask-question/438899-how-can-i-listen-my-music-xbox-music-another-phone.html
Relevancy 67.51%

Good afternoon I was refer here from other forum and hopefully you can help me I try to listen to an few music files I have on me :( let music listen to Won't my computer and for some reason my music program won t load It says program is not responding I have not had any problems b Here is some info I use Music Match Jukebox MMJ and Won't let me listen to music :( Windows Media player WMP When I click on an MMJ file in my music folder the hour glasses comes up but it doesn t do anything I try going to MMJ from my programs menu and the hour glasses comes up and doesn t do anything On the WMP I click on one of my music files but it will play about seconds and it will then pop up and say program not responding I also trying open an MMJ file in WMP and it Won't let me listen to music :( does the same thing I Won't let me listen to music :( put an CD in and it open up WMP and when I clicked any where in the WMP area and blank white box comes up and says program not responding but it keeps playing the same note over and over I have done several scans and stuff and nothing has been found I have Windows XP If you need more info please let me know Thanks for your help in this matter Thanks for all your help on this matter nbsp

A:Won't let me listen to music :(

First reinstall the programs that don't respond.Also tell us what type of soundfile you want to play e.g. mp3, wav or other types..
 

https://forums.techguy.org/threads/wont-let-me-listen-to-music.994845/
Relevancy 66.65%

What would be something to check, if you can listen to cds but not music online. Whether we open windows media player, or browse to a favorite radio station's site to listen live, we can't listen. There are no errors, it connects, buffers and looks to be playing, but there's no sound. The speakers are on and work, because we can stop and listen to a cd. I don't see any mute that is on.

Anyone have any ideas??

Thanks,

p51
 

Relevancy 65.79%

My android cellphone can successfully connect to Nokia Hands-free A19. (means handsfree is OK)
Later I Unpair it from cellphone and try to pair it to PC to try to listen to PC music via handsfree.
Windows 7 can not find handsfree!
PC Bluetooth can pair with other bluetooth device successfully! (PC is OK)

I guess may be different in protocols?
any Idea? can anybody help?
B.R

A:How to listen to PC music via cellphone handsfree?

Does the desktop have Bluetooth capability? Most desktops do not have that, the capability (hardware) must be added.

http://www.sevenforums.com/hardware-devices/322782-how-listen-pc-music-via-cellphone-handsfree.html
Relevancy 65.79%

OS Windows XP Pro. I copied music from an old computer and pasted it on the new computer for my son. As long as the flash drive is inserted, he can listen to the music. (Even though the flash drive is empty.) When the flash drive is removed and he tries to listen to the music it is prompting him to connect to the internet, and he has no internet. We took the flash drive to my house with 3 albums on it, they showed up with the same prompt to connect to the internet, even with the flash drive inserted. What might we be doing wrong? The files are "wma" files.

Thanks, Peggy

A:Can't listen to music from flash drive

Internet Explorer /Tools /Internet Options / Connections

Make sure you select 'Never dial a connection' and Apply

In Windows Media Player
select Now Playing at the top, close and open again.

Sometimes if you have clicked on Media Guide, I've found it seems
to stick there, (until you select as above) and tries to open the Internet.

But the new computer should not be accessing the flash drive if the music
has been copied over. Clicking on any WMA file (standard windows media file)
should open Windows Media Player.

In the Player open Tools / Options / File Types and put a tick in each box.

Just trying the obvious for the moment.

http://www.bleepingcomputer.com/forums/t/267087/cant-listen-to-music-from-flash-drive/
Relevancy 65.79%

Whenever I watch an internet video I don't hear sound, voice or music. What is not tuned on? Using IE9 browser.

A:I can't hear music when I try to listen to an internetCD

sounds like a flash player issue ,
possibly.

try install the latest version and let us know how you get on.

Adobe Flash Player - Downloads

http://www.sevenforums.com/sound-audio/242232-i-cant-hear-music-when-i-try-listen-internetcd.html
Relevancy 65.79%

hey, how do I get my sony z1 to play music on my bluetooth headset?
its all synced and works great when im making calls but when I put on music it just comes out of the speakers
 

https://forums.techguy.org/threads/how-to-listen-to-music-via-bluetooth-on-a-sony-z1.1109132/
Relevancy 65.79%

just want to listen to my music library without any commercials or issues

A:i want to listen to my library of music unempeded

Hi, you haven't mentioned what phone you are using or the OS.
On my Lumia 930 running Win10 mobile, I use the 'Groove Music' app, then go to 'Songs' and 'Shuffle all'.
This then plays my music library (without commercials or issues).
If you need additional help or have more questions or details to share, please join the site so you can reply in this thread. See this link for instructions on how to join Windows Central.

http://forums.windowscentral.com/groove-music/445589-i-want-listen-my-library-music-unempeded.html
Relevancy 65.79%

Hi Guys need some advice, what free be media would you recomend ie: realplayer or quick time or?? Thanks again for any help

A:Want to listen to some audio stuff music ect

You know Windows Vista comes with Windows Media Player 11, right? It should have everything you need. http://windows.microsoft.com/en-us/...What file formats are you trying to play?User Info Page Biography for full specs.

http://www.computing.net/answers/windows-vista/want-to-listen-to-some-audio-stuff-music-ect/13804.html
Relevancy 65.79%

Hey guys, I am going on holiday in early June and am looking for a way to listen to music while I'm in the pool as I plan to spend a lot of time doing so.
The way I can see it is that I have two options:

Buy a waterproof case and waterproof headphones
buy a waterproof MP3 player all-in-one.
Obviously each option has it's flaws - otherwise I wouldn't be there.
Even if I buy a waterproof case how can I be sure that even though there is a waterproof case, where it contacts with waterproof earphones will be waterproof as 'waterproof' to some sellers just means rain-proof.
The problem with the all in ones like the Sony Waterproof Walkman is that they are very expensive for very little space, the 4GB alone being £50 and 8GB is £80.

Does anyone have experience in the matter, anything they can recommend, preferably I'd like to use my phone in a case for my 32GB MicroSD card, but whatever works I guess.

Cheers guys.
 

A:How can I listen to music whilst swimming?

:big grin: My wife JUST purchase a waterproofed iPad Shuffle from waterfi.com

website is very descriptive and the device is AS Advertised - - she's very happy with it
 

http://www.techspot.com/community/topics/how-can-i-listen-to-music-whilst-swimming.201909/
Relevancy 65.79%

Good Evening everyone
I have a recently re formatted laptop. I can listen to downloaded music ( from backed up files ) BUT I cannot hear anything when on You Tube or when atteptmting to play a DVD, yet I am 100% sure it all worked the night we re formatted this beast. I really need sound, can anyone point me in the right direction. Thanks in anticipation.
Vista Home
 

Relevancy 65.79%

Hello Ill go straigt freezes music use to and PC Firefox but I listen can to my problem Pc Spec AMD athlon gb of ram Nvidia mb Sound card Dont really know Cant check it right now because my pc is frozed Windows xp sp avast installed guess wall So my pc freezes randomly Not completely I ussualy can do things what i PC freezes but I can use Firefox and listen to music opened before the freeze For PC freezes but I can use Firefox and listen to music example use firefox and search internet listen to music But i can t open new things and when i try to open for example My Computer the icon in the middle of the window PC freezes but I can use Firefox and listen to music pops like it s searching something Programs ussualy wont open during the freeze Furthermore can t use ctrl alt del well i can but it wont do anything Right now my desktop froze too Scaned for viruses and such Used avast spybot malewarebytes Every program found something but i guess removed everything Althou avast is blocking new files everyday and i don t understand where are they coming from Btw i booted into safe mode and i had no freeze Well maybe i was on safe mode too short I just anted to tell this What could cause these freezes How can i fix it Sorry for long title nbsp

A:PC freezes but I can use Firefox and listen to music

Several things of note. First it is absolutely essential that you update to Service Pack 3 because come July 10th XP with Service Pack 2 will no longer be supported. You need some serious updating and it may be a central reason you are experiencing issues..

Second, before you do the above there is a very strong possibility you are still infected. Go to our Virus and Malware Removal forum and read the 8 Step sticky. Follow it step by step -- don't skip any of the steps. When you finish post on that forum with the required logs attached.

Third, since you can boot into Safe Mode there is a good chance your issue is driver related, but unless the above isn't attempted you won't be able to diagnose properly.

Fourth, as a side note, you might want to consider another gig of RAM if your motherboard is designed to do so. XP and two gigs is a good combination.

Fifth, you mention both Avira and Avast. Are both of these installed? Please tell us all the security software you have installed and running in real time protection.

Good luck.
 

http://www.techspot.com/community/topics/pc-freezes-but-i-can-use-firefox-and-listen-to-music.148942/
Relevancy 65.36%

I like to listen to music but I don't want to miss text, mail or call alerts, my WP immediately mutes all alerts. I've looked for settings to change this but can't seem to find any. Not sure which model it is (is a work phone and we call it the guvnor) but It's the net version of the old 1520, like a phablet.

http://forums.windowscentral.com/ask-question/436221-why-does-my-wp-silence-alerts-when-i-listen-music-via-headphones.html
Relevancy 65.36%

Why is it everytime i put on music and i am talking to a friend my friend can here music but not much talking. isen't thre anything i can do so i can talk and listen to music at th same time without th other person hearing it
 

A:I want to be able to talk via skype and listen to music at the same time.

What are you using to talk to your friend?
 

http://www.techspot.com/community/topics/i-want-to-be-able-to-talk-via-skype-and-listen-to-music-at-the-same-time.66952/
Relevancy 64.5%

I used to be able to listen to music through a pair of Sony bluetooth headphones on my Wins 7 laptop. However, I am no unable to do so. I have tried uninstalling and reinstalling the bluetooth drivers with no success, removed and added the device. I followed a number of the steps in this thread : Bluetooth headset pairs but won't connect, not avail as playback devic , specifically the post from 11th Dec 2014 . Computer has been restarted multiple times.

I've attached an image of what I see. I can connect the headphones to the laptop, but can't listen to music. I also cannot set the headphones to default playback.

Atm, I'm listening through an aux cable, but any additional trouble shooting steps would be appreciated.

Thanks in advance

http://www.sevenforums.com/hardware-devices/401049-cant-listen-music-sony-mdr-zx770-bluetooth-headphone.html
Relevancy 63.21%

hello eceryone
OS : windows 7 ultimate 32bit
help,

A:audio driver lagging when listen music , video and play game

I'm not sure your post will get much attention without some details. Try describing the problem in excruciating detail with many examples.

http://www.sevenforums.com/drivers/305778-audio-driver-lagging-when-listen-music-video-play-game.html
Relevancy 62.35%

I will post my hijackthis analyzer log below Please have a look and tell me what spyware getting XP from virus Windows and Keeping warnings to do I suspect that some of my problems are Keeping getting virus and spyware warnings from Windows XP related to AIM because I frequently get unsolicited notices that AIM is trying to download something Thanks Log was analyzed using HijackThis Analyzer - Updated on Get updates at http www greyknight com download htm programs Security Programs Detected Logfile of HijackThis v Scan saved at PM on Platform Windows XP WinNT MSIE Internet Explorer v Running processes C Program Files PAL SPYREM spyrem exe C MOZILL FIREFOX EXE C WINDOWS DESKTOP HijackThis- exe R - HKCU Software Microsoft Internet Explorer Main Search Bar res C DOCUME HEWLET LOCALS Temp se dll sp html R - HKCU Software Microsoft Internet Explorer Main Search Page about blank R - HKLM Software Microsoft Internet Explorer Main Search Bar res C DOCUME HEWLET LOCALS Temp se dll sp html R - HKLM Software Microsoft Internet Explorer Main Search Page about blank R - HKCU Software Microsoft Internet Explorer Search SearchAssistant about blank R - HKLM Software Microsoft Internet Explorer Search SearchAssistant about blank R - HKCU Software Microsoft Internet Explorer Main HomeOldSP about blank R - HKLM Software Microsoft Internet Explorer Main Local Page c windows SYSTEM blank htm R - HKLM Software Microsoft Internet Explorer Main HomeOldSP about blank R - HKCU Software Microsoft Internet Explorer Main Window Title Microsoft Internet Explorer provided by America Online O - BHO no name - DF - - F -B - A FFD F - C WINDOWS SYSTEM BKBO DLL O - HKLM Run DVDUpgrade DVDUpgrd exe async x O - HKLM Run sp rundll c windows TEMP se dll DllInstall O - HKLM Run SunJavaUpdateSched C Program Files Java jre bin jusched exe O - Extra button no name - B E C - FCB- CF-AAA - C - C Program Files Java jre bin npjpi dll O - Extra 'Tools' menuitem Sun Java Console - B E C - FCB- CF-AAA - C - C Program Files Java jre bin npjpi dll O - Extra button Related - c fe - f d- d -a b- aa c a - C WINDOWS web related htm O - Extra 'Tools' menuitem Show amp Related Links - c fe - f d- d -a b- aa c a - C WINDOWS web related htm O - Extra button no name - CD F -D E - d - FE- C F AFE - no file O - Trusted Zone skoobidoo com O - Trusted Zone slotchbar com O - Trusted Zone windupdates com O - DPF Win Classes - O - DPF - - - - - file C Recycled Q exe O - Filter text html - D B - C - B E-BF C-EA - C WINDOWS SYSTEM BKBO DLL O - Filter text plain - D B - C - B E-BF C-EA - C WINDOWS SYSTEM BKBO DLL End of HijackThis Analyzer Log

A:Keeping getting virus and spyware warnings from Windows XP

Hi and Welcome to TSF

Before attacking an adware/spyware problem with hijackthis make sure you have already run ad-aware SE with VX2 add-on cleaner, Spybot Search & Destroy (with updated database) and CWShredder as these programs will clean a lot of the crap out first. All links to programs are in my signature. Ok..on to the log?..

Download DelDomains.inf
Right-click and select..... Save Target As

To use: Right-click and select....... Install (no need to restart)
**Note** This will remove all entries in the "Trusted Zone"

Download AboutBuster and unzip it to a folder on your the Desktop. Do not run it yet!

Download and install CleanUp http://cleanup.stevengould.org/

Go to My Computer->Tools->Folder Options->View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System Files and Folders are showing/visible also. Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore.

Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Check and fix the following in HijackThis if they still exist (make sure you do not miss an entry)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\HEWLET~1\LOCALS~1\Temp\se.dll/sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\HEWLET~1\LOCALS~1\Temp\se.dll/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\SYSTEM\blank.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {49081DF3-3815-4F13-B401-0A717FFD929F} - C:\WINDOWS\SYSTEM32\BKBO.DLL
O4 - HKLM\..\Run: [sp] rundll32 c:\windows\TEMP\se.dll,DllInstall
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O15 - Trusted Zone: *.skoobidoo.com
O15 - Trusted Zone: *.slotchbar.com
O15 - Trusted Zone: *.windupdates.com
O16 - DPF: Win32 Classes -
O16 - DPF: {11311111-1111-1111-1111-111111111157} - file://C:\Recycled\Q330995.exe
O18 - Filter: text/html - {5D84B059-7C47-4B9E-BF6C-EA0481015923} - C:\WINDOWS\SYSTEM32\BKBO.DLL
O18 - Filter: text/plain - {5D84B059-7C47-4B9E-BF6C-EA0481015923} - C:\WINDOWS\SYSTEM32\BKBO.DLL

Delete the following Files/Folders in RED (delete folders if no filename is specified or if they are highlighted in RED) according to their directory (If you can't find them...do a search for them?make sure you have search hidden files, folders, sub directorys..ect enabled if it applys to your OS)

C:\DOCUME~1\HEWLET~1\LOCALS~1\Temp\se.dll
C:\WINDOWS\SYSTEM32\BKBO.DLL

Now Run AboutBuster and follow the prompts to scan (choose Yes/OK for all). It will ask you if you want a second scan, choose Yes. Save the log file and post it here.

Now empty your recycle bin!

Run the cleanup utility and reboot/logoff when prompted.

Once done reboot into Normal Mode and post a new HijackThis log file to confirm what was removed and if it's clean or not. Once your clean you can enable system restore again.

http://www.techsupportforum.com/forums/f284/keeping-getting-virus-and-spyware-warnings-from-windows-xp-39433.html
Relevancy 61.06%

Hello and thanks for your assistance I left my computer on during the day yesterday and when I returned in the evening I found a warning on my desktop It read something to the effect of quot spyware ISpyNOW has infected your desktop enable protection through windows security center This program warnings from and Spyware.iSpyNow Browser Crashes Windows Alert records keystrokes and takes screen shots to steal financial information threat level high quot When you click enable protection it sends you to one Spyware.iSpyNow warnings from Windows Alert and Browser Crashes of Spyware.iSpyNow warnings from Windows Alert and Browser Crashes those quot buy this unheard of defender software to protect your computer quot scam sites Every time I open Firefox it crashes Same thing with IE as well I ran superantispyware spybot S amp D and AVG anti-virus and came up with no luck in getting rid of the problem This malware got past both spyblaster spywareguard and S amp D immunize I also want to note before posting my hijack this log that I have disabled active x controls in IE instead making it prompt me if I want to run controls Since I have no internet browser access on that computer I am transferring logs via flash drive and scanning the drive for viruses and malware automatically on my laptop when Spyware.iSpyNow warnings from Windows Alert and Browser Crashes I plug it in here is the log Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS System Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C WINDOWS system Ati evxx exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C PROGRA AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C Program Files Java jre bin jqs exe C Program Files Common Files LightScribe LSSrvc exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS System svchost exe C PROGRA AVG AVG avgrsx exe C PROGRA AVG AVG avgemc exe C WINDOWS Explorer EXE C Program Files ATI Technologies ATI ACE Core-Static MOM exe C PROGRA AVG AVG avgtray exe C Program Files Java jre bin jusched exe C Program Files Adobe Acrobat Acrobat Acrotray exe C Program Files Gigabyte ET Pro GUI exe C WINDOWS RTHDCPL EXE C WINDOWS SOUNDMAN EXE C Program Files iTunes iTunesHelper exe C Program Files Common Files Ahead Lib NMBgMonitor exe C Program Files ATI Technologies ATI ACE Core-Static ccc exe C Program Files SUPERAntiSpyware SUPERAntiSpyware exe C Program Files YourWare Solutions FreeRAM XP Pro FreeRAM XP Pro exe C WINDOWS system ctfmon exe C Program Files Common Files Ahead Lib NMIndexingService exe C Program Files Common Files Ahead Lib NMIndexStoreSvr exe C Program Files iPod bin iPodService exe C Program Files Common Files Macrovision Shared FLEXnet Publisher FNPLicensingService exe C Program Files SpywareGuard sgmain exe C Program Files SpywareGuard sgbhp exe C Program Files Trend Micro HijackThis HijackThis exe R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO SpywareGuard Download Protection - A E - F- - B - B DDD DB - C... Read more

Relevancy 61.06%

Hey,

I have (again) a virus pretending to me IE or Microsoft updates. It places shortcuts on my desktop for "Online Security Guide" and "Live Safety Center." Also, my computer is barraged by pop-ups and fake virus/ trojan/ malware/ spyware warnings. Can someone please help me?
 

A:Solved: Spyware/ Malware pretending to be IE/ Windows Security Warnings

https://forums.techguy.org/threads/solved-spyware-malware-pretending-to-be-ie-windows-security-warnings.648792/
Relevancy 54.61%

Hey I am having a problem with my ocmputer since saturday Several spyware warnings appear randomly all day long suggesting fake antispywares I believe it is a spyware so I have tried Spyware Doctor SuperAntispyware and Norton Antivirus just in case with little or no result Please any help with that here is the Hijackthis blog Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system Spyware Warnings Several services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Windows Defender MsMpEng exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Common Files Symantec Shared ccSvcHst exe C WINDOWS Explorer EXE C Program Files Common Files Symantec Shared AppCore AppSvc exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support Several Spyware Warnings bin AppleMobileDeviceService exe C Program Files Symantec LiveUpdate ALUSchedulerSvc exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS system PnkBstrA exe C Program Files Spyware Doctor pctsAuxs exe C Program Files Spyware Doctor pctsSvc exe C WINDOWS system svchost exe C Program Files Spyware Doctor pctsTray exe C WINDOWS System alg exe C Documents and Settings All Users Application Data qhixejuf qzetqzep exe C Program Files Common Files Symantec Shared ccApp exe C Program Files Common Files Real Update OB realsched exe C Program Files Java jre bin jusched exe C HP KBD KBD EXE C windows system hpsysdrv exe C Program Files HP HP Software Update HPWuSchd exe C WINDOWS system hkcmd exe C WINDOWS Several Spyware Warnings AGRSMMSG exe C Program Files Microsoft Office Office GrooveMonitor exe C WINDOWS System svchost exe C WINDOWS SOUNDMAN EXE C WINDOWS ALCWZRD EXE C WINDOWS ALCMTR EXE C WINDOWS PixArt PAC Monitor exe C Program Files QuickTime QTTask exe C Program Files iTunes iTunesHelper exe C Program Files Windows Defender MSASCui exe C WINDOWS system ctfmon exe C Program Files Messenger msmsgs exe C WINDOWS system szalyjmb exe C Program Files SUPERAntiSpyware SUPERAntiSpyware exe C Program Files iPod bin iPodService exe C Program Files Compaq Connections Program Compaq Connections exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files HP Digital Imaging Product Assistant bin hprblog exe C Program Files Common Files Symantec Shared CCPD-LC symlcsvc exe C Program Files Windows Media Player wmplayer exe C Program Files MSN Messenger usnsvc exe C Program Files Internet Explorer iexplore exe C Program Files Common Files Microsoft Shared Windows Live WLLoginProxy exe C Program Files TeamViewer TeamViewer exe C Program Files MSN Messenger msnmsgr exe C Program Files Trend Micro HijackThis HijackThis exe C WINDOWS system wbem wmiprvse exe O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat Reader ActiveX AcroIEHelper dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C PROGRA MI Office GRA E DLL O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO no name - E D - A- EC-A -BA D E E - no file O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - HKLM Run ccApp quot C Program Files Common Files Symantec Shared ccApp exe quot O - HKLM Run TkBellExe quot C Program Files Common Files Real Update OB realsched exe quot -osboot O - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched exe quot O - HKLM Run Recguard C WINDOWS SMINST RECGUARD EXE O - HKLM Run PS C WINDOWS system ps exe O - HKLM Run osCheck quot C Program Files Norton A... Read more

A:Several Spyware Warnings

Hi pelusa

Thank you for your patience. I will be helping you deal with the issues raised in your log from this point onwards

Before we start jumping into things, here is a quick basic note which I mention to everyone. The fix which I have provided for you is for this computer only, it should not be used on any other computer. Each fix is tailor made for the specific task in hand. If for some reason you have system restore disabled, then please re-enable it before proceeding, an infected restore is better than none. Please read through the fix first and set enough time aside to complete the task in one session. If there is anything you feel needs clarification then please ask - do not guess! Thanks.

If this is a computer from a work place then please advise your IT department of the concerning issues before commencing past this point.

Please follow these directions in the order they are set out for you.

We'll begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Please ensure that combofix is saved to (and run from) your desktop

When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system.

http://www.techsupportforum.com/forums/f100/several-spyware-warnings-236131.html
Relevancy 54.61%

I keep getting warnings that i have spyware but my anti-virus/spyware software (2 of them) cant find it. it says that i have "PSW.x-Vir Trojan" I also keep getting requests to download antivirus software for free from strange websites. Can someone help?here is what it looks like(it happens almost every minute)http://i154.photobucket.com/albums/s269/Pa...warebleepes.jpgthat one i get most frequently. i also get more in the form of pop-ups from IE but not as often.P.S. Sorry the link and the BB code for my picture wont work EDIT 1: WTF! apparantly i have "[email protected]" now HELP

A:I Keep Getting Warnings That I Have Spyware

If your using Win XP or 2000, please print out and follow the generic instructions for using SmitfraudFix in BC's self-help tutorial "How to remove the Smitfraud/Generic Zlob".(scroll down to where it says Removal Instructions; ignore the part that shows symptoms in a HijackThis log as they will not apply your case.)If you have downloaded SmitfraudFix previously, please delete that version and download it again as the tool is frequently updated!Next, download RogueRemover and save to you Desktop. (compatible with Windows 2000, NT, XP, Vista)Double-click on rr-free-setup.exe to install in C:\Program Files\RogueRemover and follow the prompts.During installation an icon will automatically be created on your Desktop.If the program does not open after installation, double-click on the RogueRemover icon to launch.Select "Check for Updates" and click Download if any are found.Wait for the updates to finish downloading, then Close the update window.Select "Scan" and follow the onscreen directions to remove anything found.If nothing is found, exit RogueRemover.If RogueRemover finds something, it will present a list of detected items.Click "Remove selected", then Yes at the prompt.Wait for the removal to complete and then close RogueRemover.If using Windows Vista be sure to Run As Administrator.Then download and scan with SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here and unzip into the program's folder.)Under "General and Startup", make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.Under "Configuration and Preferences", click the Preferences button.Click the Scanning Control tab.Under Scanner Options make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program.Do not run a scan just yet.Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".Scan with SUPERAntiSpyware as follows:Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.On the left, make sure you check C:\Fixed Drive.On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".Make sure everything has a checkmark next to it and click "Next".A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.If asked if you want to reboot, click "Yes" and reboot normally.To retrieve the removal information after reboot, launch SUPERAntispyware again.Click Preferences, then click the Statistics/Logs tab.Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.Click Close to exit the program.

http://www.bleepingcomputer.com/forums/t/116716/i-keep-getting-warnings-that-i-have-spyware/
Relevancy 54.18%

I have read a number of threads about this same problem that I am having- mysterious icons on desktop for spyware removal pop ups that warn me direct me to a website flashing X in the tray etc etc I decided to download and run SDFix which so far seems to have cleared up my problem The log is below I did not run the HiJackThis program but wonder if I should get involved with that if SDFix has done the trick Comments Suggestions truly welcomed SDFix Version Run by Jon on Tue at AM Microsoft Windows XP Version Running From C SDFix Safe Mode Checking Services Restoring Windows Registry Values Restoring Windows Default Hosts File Restoring Default HomePage Value Restoring Default Desktop Components Value Rebooting Normal Mode Checking Files Trojan Files Found C Documents and Settings Jon Desktop Error Cleaner url - Deleted C Documents and Removal Spyware Warnings Settings Jon Favorites Error Cleaner Spyware Removal Warnings url - Deleted C Documents and Settings Jon Desktop Privacy Protector url - Spyware Removal Warnings Deleted C Documents and Settings Jon Favorites Privacy Protector url - Deleted C Documents and Settings Jon Desktop Spyware amp Malware Protection url - Deleted C Documents and Settings Jon Favorites Spyware amp Malware Protection url - Deleted C Spyware Removal Warnings Program Files RichVideoCodec install ico - Deleted C Program Files RichVideoCodec RichVideoCodec ocx - Deleted C Program Files RichVideoCodec Uninstall exe - Deleted C WINDOWS blopenvkgq dll - Deleted C WINDOWS dat txt - Deleted C WINDOWS jokvip exe - Deleted C WINDOWS leorop dll - Deleted C WINDOWS nopzet dll - Deleted C WINDOWS retnsrp dll - Deleted C WINDOWS search res txt - Deleted Folder C Program Files RichVideoCodec - Removed Removing Temp Files ADS Check C WINDOWS No streams found C WINDOWS system No streams found C WINDOWS system svchost exe No streams found C WINDOWS system ntoskrnl exe No streams found Final Check catchme W K XP Vista - rootkit stealth malware detector by Gmer http www gmer net Rootkit scan - - Windows Service Pack NTFS scanning hidden processes scanning hidden services amp system hive scanning hidden registry entries scanning hidden files scan completed successfully hidden processes hidden services hidden files Remaining Services ------------------ Authorized Application Key Export HKEY LOCAL MACHINE system currentcontrolset services sharedaccess parameters firewallpolicy standardprofile authorizedapplications list quot windir system sessmgr exe quot quot windir system sessmgr exe enabled xpsp res dll - quot quot C Program Files Gateway HPA gwmenu exe quot quot C Program Files Gateway HPA gwmenu exe Enabled HPA SCCD SRCD New Code quot quot windir Network Diagnostic xpnetdiag exe quot quot windir Network Diagnostic xpnetdiag exe Enabled xpsp res dll - quot quot C WINDOWS system lxcjcoms exe quot quot C WINDOWS system lxcjcoms exe Enabled Series Server quot quot C WINDOWS system spool drivers w x lxcjpswx exe quot quot C WINDOWS system spool drivers w x lxcjpswx exe Enabled Series Printer Status quot quot C Program Files Gateway Gateway Download Assistant Downloader exe quot quot C Program Files Gateway Gateway Download Assistant Downloader exe Enabled quot quot C Program Files Mozilla Firefox firefox exe quot quot C Program Files Mozilla Firefox firefox exe Enabled Firefox quot quot C Program Files AIM aim exe quot quot C Program Files AIM aim exe Enabled AOL Instant Messenger quot quot C Program Files Real RealPlayer realplay exe quot quot C Program Files Real RealPlayer realplay exe Enabled RealPlayer quot quot C Program Files Messenger msmsgs exe quot quot C Program Files Messenger msmsgs exe Enabled Windows Messenger quot HKEY LOCAL MACHINE system currentcontrolset services sharedaccess parameters firewallpolicy domainprofile authorizedapplications list quot windir system sessmgr exe quot quot windir system sessmgr exe enabled xpsp res dll - quot quot windir Network Diagnostic xpnetdiag exe quot quot windir Network ... Read more

A:Spyware Removal Warnings

Just as a check.....



This will help to identify any malware on your system.
Please download Combofix from any of these locations:

Here
or
Here


Save ComboFix to the desktop.

1. Double click on combo.exe & follow the prompts.
2. When finished, it will produce a logfile located at C:\ComboFix.txt.
3. Copy and Paste the contents of that log in your next reply with a new hijackthis log. Do not use Code or html unless asked for.
Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang.

Caution...Never run and remove files using ComboFix without being supervised by a security analyst.

http://www.techsupportforum.com/forums/f100/spyware-removal-warnings-201626.html
Relevancy 54.18%

When I m online I keep getting warnings from AVG that my computer is infected I click quot heal quot but it keeps coming back Here is my AVG Anti-spyware log and a hijackthis log Can anyone help me please Thanks in advance for any help on cleaning this up AVG report --------------------------------------------------------- AVG Anti-Spyware - Scan Report --------------------------------------------------------- Created at AM Scan result HKLM SOFTWARE warnings help AVG spyware needed / PLEASE! Microsoft Windows CurrentVersion Uninstall Outerinfo - gt Adware Generic Cleaned with backup quarantined C Documents and Settings Owner Local Settings Temp hpzasda b - gt Hijacker VB vx Cleaned with backup quarantined C Program Files Common Files Yazzle OinUninstaller exe - gt Not-A-Virus Adware PurityScan Cleaned with backup quarantined C Program Files Common Files Yazzle OinUninstaller exe - gt Not-A-Virus Adware PurityScan Cleaned with backup quarantined C System Volume Information restore DCA BE -D - D -A E-C C FD BC RP A exe - gt Not-A-Virus Adware PurityScan Cleaned with backup quarantined C System Volume Information restore DCA BE -D - D -A E-C C FD BC RP A exe - gt Not-A-Virus Adware PurityScan Cleaned with backup quarantined C System Volume Information restore DCA BE -D - D -A E-C C FD BC RP A exe - gt Not-A-Virus Adware PurityScan Cleaned with backup quarantined C Documents and Settings Owner Local Settings Temp hpzasda a - gt Not-A-Virus Adware TTC Cleaned with backup quarantined Report end Hijackthis log Logfile of Trend Micro HijackThis v BETA Scan saved at AM on Platform Windows XP SP WinNT Boot mode Normal Running processes C WINNT System smss exe C WINNT system winlogon exe C WINNT system services exe C AVG warnings / spyware help needed PLEASE! WINNT system AVG warnings / spyware help needed PLEASE! lsass exe C WINNT System Ati evxx exe C WINNT system svchost exe C Program Files Windows Defender MsMpEng exe C WINNT System svchost exe C WINNT system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Grisoft AVG Anti-Spyware guard exe C PROGRA Grisoft AVGFRE avgamsvr exe C PROGRA Grisoft AVGFRE avgupsvc AVG warnings / spyware help needed PLEASE! exe C Program Files Bonjour mDNSResponder exe C Program Files Google Common Google Updater GoogleUpdaterService exe C WINNT system svchost exe C Program Files XiMeta NetDisk LDServ exe C WINNT System svchost exe C WINNT System svchost exe C Program Files Photodex ProShowGold ScsiAccess exe C WINNT System svchost exe C PROGRA Allume StuffIt MXTask exe C WINNT System WLTRYSVC EXE C WINNT System bcmwltry exe C PROGRA Allume StuffIt mxtask exe C Program Files SigmaTel C-Major Audio ControlPanel StacSysTray exe C PROGRA Grisoft AVGFRE avgcc exe C Program Files Windows Defender MSASCui exe C PROGRA SigmaTel C-MAJO CONTRO stacsrv exe C WINNT tppaldr exe C PROGRA MYWEBS bar bin m SrchMn exe C Program Files Microsoft IntelliPoint ipoint exe C Program Files iTunes iTunesHelper exe C Program Files Common Files Real Update OB realsched exe C Program Files HP HP Software Update HPWuSchd exe C WINNT system ctfmon exe C Program Files Google Google Updater GoogleUpdater exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files iPod bin iPodService exe C Program Files HP Digital Imaging bin hpqSTE exe C WINNT system drwtsn exe C WINNT system drwtsn exe C WINNT explorer exe C Program Files Winamp winamp exe C WINNT system drwtsn exe C Program Files Lavasoft Ad-Aware aawservice exe C PROGRA MOZILL FIREFOX EXE C Documents and Settings Owner Desktop HiJackThis v exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www sonic net r rfnatc R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http... Read more

A:AVG warnings / spyware help needed PLEASE!

Can someone PLEASE help me with this. I use this computer for work and I really need to fix this ASAP. Any help would be greatly appreciated!
 

https://forums.techguy.org/threads/avg-warnings-spyware-help-needed-please.668792/
Relevancy 54.18%

I am continually getting pop-ups and alerts stating that I am not protected against spyware and that I am possibly infected with Cyberlog-x Each warning leads to various removal websites Currently showing on the bottom of spyware constant warnings my computer is a quot System Alert quot that reads quot System performance monitor Warning quot quot Click this baloon to download spyware scan tool to remove spyware adware applications quot I also have a red shield with constant spyware warnings a flashing quot X quot and question mark that lead to quot Virus Protect quot website Below is Hijack this log Please constant spyware warnings let me know if you can help thanks Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Common Files Symantec Shared ccSvcHst exe C WINDOWS system Ati evxx exe C WINDOWS Explorer EXE C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Symantec LiveUpdate AluSchedulerSvc exe C Program Files Cisco Systems VPN Client cvpnd exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C Program Files Common Files LightScribe LSSrvc exe C WINDOWS system lxctcoms exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS system svchost exe C WINDOWS system dllhost exe C WINDOWS ehome ehtray exe C WINDOWS eHome ehmsas exe C hp drivers hplsbwatcher lsburnwatcher exe C Program Files HP HP Software Update HPwuSchd exe C Program Files Common Files Real Update OB realsched exe C Program Files Java jre bin jusched exe C Program Files Support com bin tgcmd exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files Lexmark Series lxctmon exe C Program Files Lexmark Series ezprint exe C Program Files iTunes iTunesHelper exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files Messenger msmsgs exe C Program Files Common Files Symantec Shared ccSvcHst exe C WINDOWS system ctfmon exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Wonder Pets ScreenSaver nclaunch exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files Nikon PictureProject NkbMonitor exe C Program Files Updates from HP Program Updates from HP exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files iPod bin iPodService exe C HP KBD KBD EXE C WINDOWS ALCXMNTR EXE C Program Files ATI Technologies ATI Control Panel atiptaxx exe c windows system hpsysdrv exe C PROGRA COMMON SYMANT CCPD-LC symlcsvc exe C Program Files Online Add-on icthis exe C Program Files Online Add-on icmntr exe C Program Files Online Add-on isfmntr exe C Program Files Online Add-on isfmm exe C WINDOWS system rundll exe C Program Files Online Add-on isfmm exe C Program Files Lavasoft Ad-Aware aawservice exe C Program Files Online Add-on isfmm exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr T Q amp bd pavilion amp pf desktop amp parm seconduser R - HKCU Software Microsoft Internet Explorer Main Default Search URL http ie redirect hp com svs rdr T Q amp bd pavilion amp pf desktop amp parm seconduser R - HKCU Software Microsoft Internet Explorer Main Start Page about blank R - HKLM Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr T Q amp bd pavilion amp pf desktop amp parm seconduser R - HKLM Software Microsoft Internet Explorer Main Search Bar http ie redirect hp com svs rdr T Q amp bd pavilion amp pf desktop amp parm seconduser R - HKLM Software Microsoft Inte... Read more

https://forums.techguy.org/threads/constant-spyware-warnings.675297/
Relevancy 54.18%

Hi all,

I have Trend Micro on my PC and a recent scan shows everything is okay.

Despite that, I'm constantly getting a Trend Micro warning of a dangerous spyware whose address is shown as googleads.g.doubleclick. This seems to come up every time I go to a page that carries a Google ad. It's driving me crazy.

I did try to make a modification in C:/Windows/System32/drivers/etc and under Host typed in 127.0.0.1 pagead.googlesyndication.com but this has made no difference.

Has anyone else experienced this and can help me stop it from happening?

Many thanks

Trish
 

https://forums.techguy.org/threads/dangerous-spyware-warnings.789327/
Relevancy 54.18%

Please help I'm a new member and have lots of problems I think Pop ups about blank appears a lot when I try and open e-mails and I get spyware warnings all the time that I can't get rid of Here is my hijack this log Logfile about and ups, spyware Pop warnings blank of HijackThis v Scan saved at on Platform Windows XP WinNT MSIE Internet Explorer v Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Ahead InCD InCDsrv exe C WINDOWS Explorer EXE C Program Files Common Files Symantec Shared ccProxy exe C Program Files Common Files Symantec Shared ccSetMgr exe C Program Files Norton Internet Security ISSVC exe C Program Files Common Files Symantec Shared SNDSrvc exe C Program Files Common Files Symantec Shared SPBBC SPBBCSvc exe C Program Files Common Files Pop ups, about blank and spyware warnings Symantec Shared ccEvtMgr exe C WINDOWS soundman exe C Program Files Microsoft Works WksSb exe C WINDOWS System atiptaxx exe C Program Files Common Files Symantec Shared ccApp exe C Program Files Microsoft AntiSpyware gcasServ exe C Program Files Ahead InCD InCD exe C Program Files Messenger msmsgs exe C WINDOWS System ctfmon exe C spywarevanisher-full SpywareVanisher exe C Program Files Common Files Microsoft Shared Works Shared wkcalrem exe C WINDOWS system spoolsv exe C Program Files Microsoft AntiSpyware gcasDtServ Pop ups, about blank and spyware warnings exe C Program Files Norton Internet Security Norton AntiVirus navapsvc exe C WINDOWS System svchost exe C Program Files Common Files Symantec Pop ups, about blank and spyware warnings Shared CCPD-LC symlcsvc exe C Program Files Mozilla Firefox firefox exe C Documents and Settings steve Desktop HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Bar res C DOCUME steve LOCALS Temp sp dll sp html R - HKCU Software Microsoft Internet Explorer Main Search Page about blank R - HKLM Software Microsoft Internet Explorer Main Search Bar res C DOCUME steve LOCALS Temp sp dll sp html R - HKLM Software Microsoft Internet Explorer Main Search Page about blank R - HKCU Software Microsoft Internet Explorer Search SearchAssistant about blank R - HKLM Software Microsoft Internet Explorer Search SearchAssistant about blank R - HKCU Software Microsoft Internet Explorer Main HomeOldSP about blank R - HKLM Software Microsoft Internet Explorer Main HomeOldSP about blank O - BHO no name - A DFB- - EAA- F -F D F - C WINDOWS System poopha dll O - BHO Norton Internet Security - ECB - F - bbc- D- DDF E - C Program Files Common Files Symantec Shared AdBlocking NISShExt dll O - BHO NAV Helper - BDF E -B - AD-A -FADC B - C Program Files Norton Internet Security Norton AntiVirus NavShExt dll O - Toolbar amp Radio - E - F- D - E- A C - C WINDOWS System msdxm ocx O - Toolbar Norton Internet Security - B EAC - D - b e- B -A C A A - C Program Files Common Files Symantec Shared AdBlocking NISShExt dll O - Toolbar Norton AntiVirus - CDD BF- FFB- - AD - DF B D - C Program Files Norton Internet Security Norton AntiVirus NavShExt dll O - HKLM Run SoundMan soundman exe O - HKLM Run WorksFUD C Program Files Microsoft Works wkfud exe O - HKLM Run Microsoft Works Portfolio C Program Files Microsoft Works WksSb exe AllUsers O - HKLM Run Microsoft Works Update Detection C Program Files Microsoft Works WkDetect exe O - HKLM Run AtiPTA atiptaxx exe O - HKLM Run ccApp quot C Program Files Common Files Symantec Shared ccApp exe quot O - HKLM Run SSC UserPrompt C Program Files Common Files Symantec Shared Security Center UsrPrmpt exe O - HKLM Run Symantec NetDriver Monitor C PROGRA SYMNET SNDMon exe O - HKLM Run gcasServ quot C Program Files Microsoft AntiSpyware gcasServ exe quot O - HKLM Run NeroFilterCheck C WINDOWS system NeroCheck exe O - HKLM Run NeroCheck C WINDOWS system NeroCheck exe O - HKLM Run InCD C Program Files Ahead InCD InCD exe O - HKCU Run MS... Read more

A:Pop ups, about blank and spyware warnings

Welcome to TSF.

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should not have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that Display the contents of System Folders' is checked. Windows XP's search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that Search system folders, Search hidden files and folders, and Search subfolders are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer. After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point.

Download FixAgent and unzip it. Run FixAgent.exe. It should fix something. If nothing is fixed, skip to the next step for the HijackThis fixes. If something is found, also download home_missing_114 and unzip it. Run the Home winkey missing batch file. Remember: ONLY run home_missing_114 if FixAgent found something.

The Temp folders should be cleaned out periodically as installation programs and hijack programs leave a lot of junk there. Download CleanUp! (Alternate Link if main link don't work) and install it. Don't run it yet.

Reboot into Safe Mode (hit F8 key until menu shows up). Make sure to close any open browsers. Go into HijackThis->Config->Misc. Tools->Open process manager. Select the following and click Kill process for each one if they are still listed (they shouldn't be - but double check it):

C:\spywarevanisher-full\SpywareVanisher.exe

Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if they exist:

SpywareVanisher

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\steve\LOCALS~1\Temp\sp.dll/sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\steve\LOCALS~1\Temp\sp.dll/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
O2 - BHO: (no name) - {1A657DFB-1020-4EAA-8F79-F2D89498F199} - C:\WINDOWS\System32\poopha.dll
O4 - HKCU\..\Run: [Spyware Vanisher] C:\spywarevanisher-full\SpywareVanisher.exe -FastScan
O18 - Filter: text/html - {AD67FE4D-44BE-4DEC-8C0F-740D3B10496E} - C:\WINDOWS\System32\poopha.dll

Delete the following Files/Folders (delete folders if no filename is specified) according to their directory (if none, just do a search for them) and delete them if they exist:

C:\spywarevanisher-full\
C:\WINDOWS\System32\poopha.dll

Run CleanUp! and click on CleanUp! button. When it asks you if you want to logoff, click on Yes.... Read more

http://www.techsupportforum.com/forums/f284/pop-ups-about-blank-and-spyware-warnings-39645.html
Relevancy 54.18%

OK this can t be good My desktop has changed Warnings And Alert Other Spyware When I start up the computer instead of my usual desktop I get the following screenMost of my usual icons are gone and I m sure there are some new ones there The time is now in hour time and it says virus alert next to the clock When I click start I have not got the option to run any program other than my most recently used ones and I can t access my computer to find the programs manually So I can t run Spybot or Adaware I could click on my antivirus in the toolbar and so as I type this I have it doing a full system scan so far it has quarantined files - Win Spyware Alert And Other Warnings Vmalum EFYA and Win Clspring HS When I open Mozilla I am taken to other pages and not my home page although that remains in options I keep getting various virus and spyware pop ups and I am really confused as to which of these are real and what are just part of the problem this is onePlus IE keeps opening itself up at various sites about spyware telling me to click here to fix the problem but if I open it up myself I get the following the Spyware Alert And Other Warnings pop up is another one that keeps comingAnother pop upI hope someone here might be able to point me in the right direction as to how to solve this problem Norma

A:Spyware Alert And Other Warnings

The system scan is now complete and in addition to the two that were quarantined Win32/FakeAlert.Cb was also found and deleted.

http://www.bleepingcomputer.com/forums/t/172389/spyware-alert-and-other-warnings/
Relevancy 54.18%

I've been researching this and seen that similar problems have been fixed here but I can't get mine to work Basically my computer background was changed and it would say quot you have spyware on your computer quot etc etc and my IE browser kept trying to redirect warnings infected! IE and Spyware me to a bogus software site I've followed instructions on here in other threads and managed to get my background back to normal along with stopping the popups but my computer is still running slow and I'll have to refresh on webpages to get my IE browser to display the page Here is my Hijackthis log Running processes C WINDOWS System Spyware warnings and IE infected! smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS Explorer EXE C WINDOWS system spoolsv exe C PROGRA COMMON AOL ACS AOLacsd exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS system nvsvc exe C PROGRA TRENDM INTERN Spyware warnings and IE infected! PcCtlCom exe C PROGRA TRENDM INTERN Tmntsrv exe C PROGRA TRENDM INTERN TmPfw exe C WINDOWS ehome ehtray exe C PROGRA TRENDM INTERN tmproxy exe C WINDOWS system RUNDLL EXE C Program Files Dell Media Experience DMXLauncher exe C WINDOWS stsystra exe C Program Files Trend Micro Internet Security pccguide exe C WINDOWS System DLA DLACTRLW EXE C Program Files Common Files InstallShield UpdateService issch exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files iTunes iTunesHelper exe C Program Files Trend Micro Internet Security TMAS OE TMAS OEMon exe C Program Files Dell Support DSAgnt exe C WINDOWS system ctfmon exe Spyware warnings and IE infected! C Program Files Digital Line Detect DLG exe C Program Files WinZip WZQKPICK EXE C Program Files Google Google Desktop Search GoogleDesktopIndex exe C Program Files iPod bin iPodService exe C WINDOWS eHome ehmsas exe C Program Files internet explorer iexplore exe C Program Files Trend Micro HijackThis HijackThis exe R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search Default Page URL http www google com ig dell hl en amp us amp ibd O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - F - D - - AD - C D ADC - no file O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS System DLA DLASHX W DLL O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO no name - c af - c - dfb- - ab a - no file O - BHO Browser Address Error Redirector - CA C - B - E-A -A C DB F - C Program Files BAE BAE dll O - BHO no name - d ac - dd - b - a -f d c a - C WINDOWS fuhwbifi dll O - BHO egmulhxk msdn hlp - E B A- F - B - C -EC C E - C WINDOWS system egmulhxk dll O - HKLM Run ehTray C WINDOWS ehome ehtray exe O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS system NvCpl dll NvStartup O - HKLM Run nwiz nwiz exe install O - HKLM Run NvMediaCenter RUNDLL EXE C WINDOWS system NvMcTray dll NvTaskbarInit O - HKLM Run DMXLauncher C Program Files Dell Media Experience DMXLauncher exe O - HKLM Run SigmatelSysTrayApp stsystra exe O - HKLM Run pccguide exe quot C Program Files Trend Micro Internet Security pccguide exe quot O - HKLM Run DLA C WINDOWS System DLA DLACTRLW EXE O - HKLM Run ISUSPM Startup C PROGRA COMMON INSTAL UPDATE ISUSPM exe -startup O - HKLM Run ISUSScheduler quot C Program Files Common Files InstallShield UpdateService issch exe quot -start O - HKLM Run Google Desktop Search quot C Program Files Google Google Desktop Search GoogleDesktop exe quot startup O - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottime O - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run ChkDsk C info exe O - HKLM Run z... Read more

A:Spyware warnings and IE infected!

Hello Zen82 and welcome to TSF.

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.
What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

==========================
Logs Required
C:\Deckard\System Scanner\main.txt
C:\Deckard\System Scanner\extra.txt<----Attached

http://www.techsupportforum.com/forums/f284/spyware-warnings-and-ie-infected-201132.html
Relevancy 54.18%

I get a little yellow triangle with an exclamation point at the bottom right of my screen The virus has also hijacked my screnpic Spyware False Warnings and has a fake warning taking up the entire screen I have scanned with many False Spyware Warnings different programs and nothing please help extra txt Deckard's System Scanner v Extra logfile - please post this as an attachment with your post ---------------------------------------------------------------------------------- System Information ----------------------------------------------------------Microsoft Windows XP Home Edition build SP Architecture X Language EnglishCPU Intel Celeron CPU GHzPercentage of Memory in Use Physical Memory total avail MiB MiBPagefile Memory total avail MiB MiBVirtual Memory total avail MiB MiBC is Fixed NTFS - GiB total GiB free F is Removable No Media G is Removable No Media H is Removable No Media False Spyware Warnings I is Removable No Media PHYSICALDRIVE False Spyware Warnings - WDC WD BB- FJA - GiB - partition PARTITION bootable - Installable File System - GiB - C PHYSICALDRIVE - Generic USB CF Reader USB Device PHYSICALDRIVE - Generic USB MS Reader USB Device PHYSICALDRIVE - Generic USB SD Reader USB Device PHYSICALDRIVE - Generic USB SM Reader USB Device-- Security Center -------------------------------------------------------------AUOptions is scheduled to auto-install Windows Internal Firewall is enabled AntiVirusDisableNotify is set FirewallDisableNotify is set AV McAfee VirusScan v McAfee HKLM System CurrentControlSet Services SharedAccess Parameters FirewallPolicy DomainProfile AuthorizedApplications List quot windir system sessmgr exe quot quot windir system sessmgr exe enabled xpsp res dll - quot quot C Program Files aim aim exe quot quot C Program Files aim aim exe Enabled AOL Instant Messenger quot quot C Program Files Common Files AOL ee AOLServiceHost exe quot quot C Program Files Common Files AOL ee AOLServiceHost exe Enabled AOL Services quot quot C Program Files Common Files AOL Loader aolload exe quot quot C Program Files Common Files AOL Loader aolload exe Enabled AOL Loader quot quot windir Network Diagnostic xpnetdiag exe quot quot windir Network Diagnostic xpnetdiag exe Enabled xpsp res dll - quot quot C Program Files America Online waol exe quot quot C Program Files America Online waol exe Enabled America Online quot quot C Program Files Microsoft ActiveSync rapimgr exe quot quot C Program Files Microsoft ActiveSync rapimgr exe Enabled ActiveSync RAPI Manager quot quot C Program Files Microsoft ActiveSync wcescomm exe quot quot C Program Files Microsoft ActiveSync wcescomm exe Enabled ActiveSync Connection Manager quot quot C Program Files Microsoft ActiveSync WCESMgr exe quot quot C Program Files Microsoft ActiveSync WCESMgr exe Enabled ActiveSync Application quot HKLM System CurrentControlSet Services SharedAccess Parameters FirewallPolicy StandardProfile AuthorizedApplications List quot windir system sessmgr exe quot quot windir system sessmgr exe enabled xpsp res dll - quot quot C Program Files Yahoo Messenger YPager exe quot quot C Program Files Yahoo Messenger YPager exe Enabled Yahoo Messenger quot quot C Program Files Yahoo Messenger YServer exe quot quot C Program Files Yahoo Messenger YServer exe Enabled Yahoo FT Server quot quot C WINDOWS system p pnetwork exe quot quot C WINDOWS system p pnetwork exe Disabled p pnetwork quot quot C Program Files Windows Media Player wmplayer exe quot quot C Program Files Windows Media Player wmplayer exe Enabled Windows Media Player quot quot C Program Files aim aim exe quot quot C Program Files aim aim exe Enabled AOL Instant Messenger quot quot C Program Files Common Files AOL ee AOLServiceHost exe quot quot C Program Files Common Files AOL ee AOLServiceHost exe Enabled AOL Services quot quot C Program Files Common Files AOL Loader aolload exe quot quot C Program Files Common Files AOL Loader aolload exe Enabled AOL Loader quot quot C Program Files Mozilla Firefox fir... Read more

A:False Spyware Warnings

Hello Maxima1 and welcome to BleepingComputer,This one does look quite messy 1. * Clean your Cache and Cookies in IE:Close all instances of Outlook Express and Internet Explorer Go to Control Panel > Internet Options > General tabUnder Browsing History, click Delete. Click Delete Files, Delete cookies and Delete historyClick Close below.* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):Go to Tools > Options.Click Privacy in the menu..Click the Clear now button below.. A new window will popup what to clear.Select all and click the Clear button again.Click OK to close the Options window* Clean other Temporary files + Recycle bin Go to start > run and type: cleanmgr and click ok. Let it scan your system for files to remove. Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.Press OK to remove them.2. Please download Malwarebytes' Anti-Malware from Here or HereDoubleclick mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply along with a fresh HijackThis log.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.3. Please visit this webpage for instructions for downloading and running ComboFix:http://www.bleepingcomputer.com/combofix/how-to-use-combofixPlease ensure you read this guide carefully and install the Recovery Console first.The Windows Recovery Console will allow you to boot up into a special recovery mode, in case your computer has a problem after an attempted removal of malware. This allows us to help you .In the event you already have Combofix, delete your current version and download the latest version as described in the tutorial.It must be saved directly to your desktop.Note: Make sure not to click ComboFix's window while it's running. That may cause it to stall or freeze.Please post the log from ComboFix (can also be found as C:\ComboFix.txt) in your next reply. If you have any questions along the way, STOP and ask them before proceeding !!Greetings,Thunder

http://www.bleepingcomputer.com/forums/t/141114/false-spyware-warnings/
Relevancy 54.18%

Man this seems to be a big problem for a spyware and popups warnings ad LOT of people So I get popups ads warnings for spyware and viruses and porn sites and gambling sites It started yesterday and it s driving me nuts I ran McAfee it found nothing as I expected I ran ewido last night and it found items that were quarantined I spyware warnings and ad popups saved the log I also ran hijackthis and saved the log from that as well since everyone on here is told to do so Also the little yellow system s tray warning that tells me I may be infected forces me to double click on it to get it to go away which opens an spyware warnings and ad popups IE window All of this is happening in IE All of the popup windows and warnings and crap I don t use IE EVER Unless I absolutely have to which is once or twice a year So that s doubly annoying I use Netscape if that helps I have Windows XP Any help would be appreciated thanks nbsp

Relevancy 53.32%

So last night I hooked my computer up for the first time in months and was ambushed Background, Warnings Spyware. Of Blue with warnings of viruses spyware etc My background has turned blue and is warning to download a spyware software yeah sure let Blue Background, Warnings Of Spyware. me just click on that and bubbles keep appearing by my clock telling me that my computer is running slow etc Also my Mcafee a lot of good he did keeps warning me of PUPS I am currently going through a divorce and trying to prepare for a job that will support my child and I and help keep an abusive deadbeat away I need my computer HELP I may not respond until late night when the little one goes to bed though Ran the ComboFix as instructed by this site and this is what their report gave me ComboFix - - - Eleanor Broughal - - - NTFSx Microsoft Windows XP Home Edition GMT - Running from C Documents and Settings Eleanor Broughal Local Settings Temporary Internet Files Content IE PHNHTR ComboFix exe Created a new restore point Resident AV is activeWARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED Other Deletions C Documents and Settings All Users Application Data Microsoft Network Downloader qmgr datC Documents and Settings All Users Application Data Microsoft Network Downloader qmgr datC Documents and Settings Eleanor Broughal Start Menu Programs Internet Speed MonitorC Documents and Settings Eleanor Broughal Start Menu Programs Internet Speed Monitor Check Now lnkC Documents and Settings Eleanor Broughal Start Menu Programs Internet Speed Monitor Uninstall lnkC Program Files seekmoC Program Files seekmo seekmohook dllC WINDOWS ax exeC WINDOWS search dllC WINDOWS search dllC WINDOWS bjam dllC WINDOWS bokja exeC WINDOWS cdsm dllC WINDOWS default htmC WINDOWS mspphe dllC WINDOWS mssvr exeC WINDOWS saiemod dllC WINDOWS salm exeC WINDOWS stcloader exeC WINDOWS swin dllC WINDOWS system exeC WINDOWS system exeC WINDOWS system msixu dllC WINDOWS system wer dllC WINDOWS TEMP salm exeC WINDOWS updatetc exeC WINDOWS voiceip dllD Autorun inf----- BITS Possible infected sites -----hxxp Files Created from - - to - - - - - - lt DIR gt d-------- C Program Files zango - - - - lt DIR gt d-------- C Program Files Sysmnt - - - - lt DIR gt d-------- C Program Files stc - - - - lt DIR gt d-------- C Program Files solutions - - - - lt DIR gt d-------- C Program Files searchassistant - - - - lt DIR gt d-------- C Program Files search assistant - - - - lt DIR gt d-------- C Documents and Settings Administrator Application Data Symantec - - - - lt DIR gt d-------- C Documents and Settings Eleanor Broughal Application Data IM-Names - - - - lt DIR gt d-------- C Documents and Settings All Users Application Data Rabio - - - - --a------ C WINDOWS system winfrun bin - - - - --a------ C WINDOWS system sbwltbxa exe - - - - lt DIR gt d-------- C WINDOWS Sun - - - - lt DIR gt d-------- C Documents and Settings All Users Application Data Dell Find M Report - - --sha-w C WINDOWS system KGyGaAvL sys - - --sh--r C WINDOWS system E CCE sys Reg Loading Points Note empty entries amp legit default entries are not shown REGEDIT HKEY LOCAL MACHINE Browser Helper Objects F B-C - -A AA- EC EC C Program Files Bat Bat dll HKEY LOCAL MACHINE Browser Helper Objects E - CFC- -BC D-D DB F C Program Files QdrDrive QdrDrive dll HKEY CURRENT USER SOFTWARE Microsoft Windows CurrentVersion Run quot Yahoo Pager quot quot C Program Files Yahoo Messenger YahooMessenger exe quot - - quot DellSupport quot quot C Program Files DellSupport DSAgnt exe quot - - quot DellTransferAgent quot quot C Documents and Settings All Users Application Data Dell TransferAgent TransferAgent exe quot - - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Run quot igfxtray quot quot C WINDOWS system igfxtray exe quot - - quot igfxhkcmd quot quot C WINDOWS system hkcmd exe quot - - quot igfxpers quot quot C WINDOWS system igfxpers exe quot - - quot SunJavaUpdateSched quot quot C Program Files Java j re bi... Read more

A:Blue Background, Warnings Of Spyware.

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Click here to download HJTsetup.exeSave HJTsetup.exe to your desktop.Doubleclick on the HJTsetup.exe icon on your desktop.By default it will install to C:\Program Files\Hijack This.Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.Put a check by Create a desktop icon then click Next again.Continue to follow the rest of the prompts from there.At the final dialogue box click Finish and it will launch Hijack This.Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.Come back here to this thread and Paste the log in your next reply.DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

http://www.bleepingcomputer.com/forums/t/137693/blue-background-warnings-of-spyware/
Relevancy 53.32%

I have adware and spyware warnings popping up all over the place and have no idea what to do to get rid.
I have got HijackThis and other bits and bobs but dont know what to do with them.
I am in desperate need of help, this is my last port of call. I am fairly computer illiterate so you'll have to bear with me.
Someone help!!!

A:Repeated Adware/Spyware warnings

I keep getting adware and spyware warnings, although Norton tells me all is well!!

Deckard's System Scanner v20071014.68
Run by The Boss on 2008-04-14 13:11:18
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as The Boss.exe) --------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:12:24, on 14/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Spyware Doctor\pctsAuxs.exe
C:\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Dell Photo AIO Printer 922\dlbtbmon.exe
C:\DAEMON Tools\daemon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\The Boss\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\THEBOS~1.EXE
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.tiscali.co.uk/broadband
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided By Sky Broadband
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {385066e0-23f3-11db-a98b-0800200c9a66} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\... Read more

http://www.techsupportforum.com/forums/f284/repeated-adware-spyware-warnings-240124.html
Relevancy 53.32%

Please help Windows XP with SP background has changed to show computer is infected user of the computer did not have AV updated spyware warnings popup multiple when logged into safe mode as administrator was unable to access anything even said task manager has been disabled multiple spyware popup warnings by administrator after running ERD commander and editing the registry I was able to open up the computer enough to install Spybot S amp D it removed about issues I am now having issues installing Norton AV norton installed off of the CD when I go to start norton protection I get quot Norton Internet Security has encountered an internal program error please uninstall and reinstall NIS there is a link for symantec tech support however not connecting computer to internet based on condition of computer error code Please see Hijack log and offer any assistance you can Thanks Logfile of HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system drivers spools exe C WINDOWS Explorer EXE C WINDOWS system rundll exe C Program Files Synaptics SynTP SynTPLpr exe C WINDOWS ehome ehtray exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files CyberLink PowerDVD PDVDServ exe C WINDOWS system hkcmd exe C WINDOWS system igfxtray exe C Program Files iTunes iTunesHelper exe C WINDOWS system msdefender exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files HP Digital Imaging bin hpqgalry exe C WINDOWS system spoolsv exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C WINDOWS system drivers spools exe C Program Files Common Files New Boundary PrismXL PRISMXL SYS C WINDOWS system svchost exe C Program Files iPod bin iPodService exe C WINDOWS eHome ehmsas exe C WINDOWS System alg exe C WINDOWS system dllhost exe C WINDOWS system wuauclt exe C WINDOWS system msiexec exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Symantec LiveUpdate ALUSchedulerSvc exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Common Files Symantec Shared AppCore AppSvc exe C Program Files Common Files Symantec Shared ccApp exe C WINDOWS system wscntfy exe C WINDOWS Explorer EXE C Documents and Settings Administrator Desktop HijackThis exe R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www gatewaybiz com F - REG system ini UserInit C WINDOWS system userinit exe C WINDOWS system mgmrwmrv exe C WINDOWS system sbwltbxa exe O - Hosts www bravesentry com O - Hosts bravesentry com O - Hosts secure isoftpay com O - BHO no name - c c-e - a -a ac-b a e d - no file O - BHO no name - E A - - D F-BEAE-D A C - C Program Files Common Files Symantec Shared coShared Browser NppBho dll O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C Program Files Spybot - Search amp Destroy SDHelper dll O - BHO no name - cc -b - fe - b- a e e a - no file O - BHO no name - c b f - f - -a b - d e - no file O - BHO no name - ffff - - a-a c - b f fb - no file O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - Toolbar Show Norton Toolbar - -F - -B -FBEE C B DF - C Program Files Common Files Symantec Shared coShared Browser UIBHO dll O - HKLM Run ehTray C WINDOWS ehome ehtray exe O - HKLM Run NeroFilterCheck C WINDOWS system NeroCheck exe O - HKLM Run SynTPLpr C Program Files Synaptics SynTP SynTPLpr exe O - HKLM Run SynTPEnh C Program Files Synaptics SynTP SynTPEnh exe O - HKLM Run RemoteControl quot C Program Files CyberLink PowerDVD PDVDServ exe quot O - HKLM Run IgfxTray C WINDOWS system igfxtray exe O - HKLM Run HotKeysCmds C WINDOWS system hkcmd exe O - HKLM Run iTunesHelper quot C Program Files iT... Read more

A:multiple spyware popup warnings

UGH.... NEVERMIND.... ADMIN you may close this thread.

I was able to get norton installed, it updated then froze at the end of the update. restarted the computer and its like I never touched. now i am back to having no access to anything just error messages whenever i try to run any applications. This thing is getting the old FFR

http://www.techsupportforum.com/forums/f284/multiple-spyware-popup-warnings-235653.html
Relevancy 53.32%

I work in a small engineering company and one of the users from the office has opened an e-mail with a link to mpeg gallery copy of the mail can be attached if Virus warnings Multiple Spyware & required Since then the desktop has displayed a blue and yellow box with Warning Spyware detected on your computer Install an anti-virus or spyware remover to clean your system I've tried running Avast our anti-virus system and after the scan gets to the Windows folder the PC seems to BSOD but then windows comes straight back up I've got files in the Avast virus chest A exe Win Tipa Cryp A exe Win Trojan-gen Other A dll Win Dialer- Trj and A exe Win Trojan-gen Other They all seem to be in the system restore snapshots After running HijackThis I got the following Log File Logfile of Trend Multiple Spyware & Virus warnings Micro HijackThis v Scan saved at on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C Multiple Spyware & Virus warnings WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Lavasoft Ad-Aware aawservice exe C Program Files Alwil Software Avast aswUpdSv exe C Program Files Alwil Software Avast ashServ exe C WINDOWS system spoolsv exe C PROGRA COMMON AOL ACS AOLacsd exe C Program Files Microsoft Firewall Client FwcAgent exe C Program Files No-IP DUC exe Multiple Spyware & Virus warnings C Program Files Alwil Software Avast ashMaiSv exe C Program Files Alwil Software Avast ashWebSv exe C Program Files Analog Devices Core smax pnp exe C Program Files Java jre bin jusched exe C Program Files Real RealPlayer RealPlay exe C PROGRA COMMON AOL AOLSPY AOLSP Scheduler exe C Program Files Common Files InstallShield UpdateService issch exe C WINDOWS System spool DRIVERS W X fppdis a exe C Program Files Hewlett-Packard OrderReminder OrderReminder exe C WINDOWS system dla tfswctrl exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C WINDOWS System spool DRIVERS W X E FATI LE EXE C PROGRA ALWILS Avast ashDisp exe C WINDOWS system lphc b j ead exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C WINDOWS system ctfmon exe C Program Files Microsoft Firewall Client FwcMgmt exe C WINDOWS explorer exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www dell co uk myway R - HKCU Software Microsoft Internet Explorer Main Search Bar http bfc myway com search de srchlft html p DK R - HKCU Software Microsoft Internet Explorer Main Start Page http www ukbusiness hsbc co uk hsbc R - HKCU Software Microsoft Windows CurrentVersion Internet Settings AutoConfigURL http FTSERVER array dll Get Routing Script R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyServer FTSERVER R - URLSearchHook no name - D F -B FE- -BF - AB D D - C Program Files MyWaySA SrchAsDe bin deSrcAs dll file missing O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll file missing O - BHO no name - D F -B FE- -BF - AB D D - C Program Files MyWaySA SrchAsDe bin deSrcAs dll file missing O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS system dla tfswshx dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Program Files Google GoogleToolbarNotifier swg dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - HKLM Run SoundMAXPnP C Program Files Analog Devices Core smax pnp exe O - HKLM Run SunJavaUpdateSched quot C Program Files Java... Read more

http://www.techsupportforum.com/forums/f284/multiple-spyware-and-virus-warnings-279536.html
Relevancy 53.32%

can somebody plase help me fix the pop up security warnings and virus warnings here is my hjt log sC WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services Solved: pop warnings fake and ups spyware exe C WINDOWS system lsass exe C WINDOWS system svchost exe C Program Files Windows Defender MsMpEng exe C WINDOWS System svchost exe c Program Files Common Files Symantec Shared ccSetMgr exe c Program Files Common Files Symantec Shared ccEvtMgr exe c Program Files Common Files Symantec Shared ccProxy exe C Program Files Common Files Symantec Shared PIF B E DD - - c -B F- F FCA A PIFSvc exe c Program Files Common Files Symantec Shared SNDSrvc exe c Program Files Common Files Symantec Shared SPBBC SPBBCSvc exe C Program Files Common Files Symantec Shared CCPD-LC symlcsvc exe C WINDOWS system spoolsv exe C Program Files Symantec LiveUpdate ALUSchedulerSvc exe C Program Files Solved: pop ups and fake spyware warnings Grisoft AVG Anti-Spyware guard exe C Program Files Common Files LightScribe LSSrvc exe c Program Files Norton Internet Solved: pop ups and fake spyware warnings Security Norton AntiVirus navapsvc exe C Program Files Common Files Symantec Shared Security Console NSCSRVCE EXE C WINDOWS Explorer EXE C Program Files UPHClean uphclean exe C Program Files Vongo VongoService exe C Program Files Hewlett-Packard Shared hpqwmiex exe C Program Files Online Video Add-on isfmntr exe C Program Files Online Video Add-on icthis exe C Program Files Java jre bin jusched exe C Program Files Online Video Add-on isfmm exe C Program Files Online Video Add-on icmntr exe C Program Files hpq HP Wireless Assistant HP Wireless Assistant exe C WINDOWS system igfxtray exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files HP QuickPlay QPService exe C Program Files Hp HP Software Update HPWuSchd exe C Program Files Common Files Symantec Shared ccApp exe C Program Files Common Files InstallShield UpdateService issch exe C Program Files Hewlett-Packard HP Quick Launch Buttons QlbCtrl exe C Program Files Windows Defender MSASCui exe C PROGRA HPQ Shared HPQTOA EXE C WINDOWS System svchost exe C Program Files Grisoft AVG Anti-Spyware avgas exe C WINDOWS system ctfmon exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Vongo Tray exe C Program Files HP Digital Imaging bin hpqimzone exe C Program Files PokerStars PokerStars exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer iexplore exe C Program Files PokerStars PokerStarsCommunicate exe C Documents and Settings hp Temporary Internet Files Content IE HE DELQ hijackthis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Bar http ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf laptop R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Connection Wizard ShellNext http go microsoft com fwlink LinkId O - BHO Ask Search Assistant BHO - B B - - d -B D- EBB BA F A - C Program Files AskSBar SrchAstt bin A SRCHAS DLL O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat Reader ActiveX AcroIEHelper dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java ... Read more

Relevancy 53.32%

I m having problems with false spyware warnings that pop up They warn that much - Help warnings spyware appreciated. be False would my computer is infected with spyware and that I should download an antispyware False spyware warnings - Help would be much appreciated. program to help clean my PC They do not seem to be doing False spyware warnings - Help would be much appreciated. any harm at the moment False spyware warnings - Help would be much appreciated. but I m not sure what will happen next I have run AVG vundofix spybot S amp D Adaware housecall and another online scan recommended on forums but to no avail I have also updated java Still the pesky buggers keep coming Any help greatly appreciated I am running a laptop on XP professional with IE Below is HJT log Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system Ati evxx exe C WINDOWS system spoolsv exe C PROGRA Grisoft AVG avgamsvr exe C PROGRA Grisoft AVG avgupsvc exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C Program Files Dell QuickSet NICCONFIGSVC exe C WINDOWS system svchost exe C WINDOWS Explorer EXE C WINDOWS stsystra exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files Dell QuickSet quickset exe C WINDOWS system WLTRAY exe C Program Files CyberLink PowerDVD DVDLauncher exe C Program Files ATI Technologies ATI ACE CLI EXE C Program Files Real RealPlayer RealPlay exe C Program Files QuickTime qttask exe C WINDOWS System DLA DLACTRLW EXE C Program Files Common Files InstallShield UpdateService issch exe C Program Files HP HP Software Update HPWuSchd exe C PROGRA Grisoft AVG avgcc exe C Program Files btbb wcm McciTrayApp exe C Program Files Java jre bin jusched exe C Program Files Corel Corel Snapfire Plus Corel Photo Downloader exe C Documents and Settings All Users Application Data mpivurgv gtgzqlan exe C WINDOWS system ctfmon exe C Program Files Creative Shared Files CamTray exe C WINDOWS system afslszab exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files Digital Line Detect DLG exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files HP Digital Imaging bin hpqimzone exe C Program Files ATI Technologies ATI ACE cli exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files Internet Explorer iexplore exe C Program Files Common Files Microsoft Shared Windows Live WLLoginProxy exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL www google co uk ig dell hl en amp client dell-usuk amp channel uk amp ibd R - HKCU Software Microsoft Internet Explorer Main Search Bar http www tiscali co uk search pane html R - HKCU Software Microsoft Internet Explorer Main Search Page http www google co uk hws sb dell-usuk en side html channel uk R - HKCU Software Microsoft Internet Explorer Main Start Page http www strata-medical co uk R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www tiscali co uk R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Bar http uk red clientapps yahoo com b http uk docs yahoo com info bt side html R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant http www google co uk hws sb dell-usuk en side html channel uk R - HKLM Software Microsoft Internet Explorer Search Default Page URL www google co uk ig dell hl en amp client dell-usuk amp channel uk a... Read more

https://forums.techguy.org/threads/false-spyware-warnings-help-would-be-much-appreciated.698518/
Relevancy 52.89%

DDS Ver - - - NTFSx Run by Hilary P at on Mon Internet Explorer Microsoft Windows XP Home Edition GMT - AV Norton AntiVirus On-access scanning enabled Outdated AV Trend Micro PC-cillin Internet Security On-access scanning enabled Outdated FW Norton AntiVirus enabled FW Trend Micro PC-cillin Internet ups pop antivirus infection spyware of and warnings 2009 Security Firewall disabled Running Processes C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs C WINDOWS system svchost exe -k WudfServiceGroup svchost exe svchost exe C WINDOWS Explorer EXE C Program Files Common Files Symantec Shared ccSvcHst exe C WINDOWS system spoolsv exe C Program Files Common Files LogiShrd LVMVFM LVPrcSrv exe C Program Files Symantec LiveUpdate AluSchedulerSvc exe C Program Files Google Common Google Updater GoogleUpdaterService exe C Program Files Common Files LogiShrd LVCOMSER LVComSer exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C PROGRA TRENDM INTERN PcCtlCom exe C WINDOWS system svchost exe -k imgsvc C PROGRA TRENDM INTERN Tmntsrv exe C PROGRA TRENDM INTERN tmproxy exe C Program Files Viewpoint Common ViewpointService exe c WINDOWS system ZuneBusEnum exe C PROGRA TRENDM antivirus 2009 pop ups and warnings of spyware infection INTERN TmPfw exe C Program antivirus 2009 pop ups and warnings of spyware infection Files Common Files LogiShrd LVCOMSER LVComSer exe C PROGRA TRENDM INTERN PccGuide exe C Program Files Viewpoint Viewpoint Manager ViewMgr exe C Program Files Analog Devices Core smax antivirus 2009 pop ups and warnings of spyware infection pnp exe C Program Files Java jre bin jusched exe C Program Files Intel Modem Event Monitor IntelMEM exe C Program Files CyberLink PowerDVD DVDLauncher exe C Program Files Dell Media Experience DMXLauncher exe C WINDOWS System svchost exe -k HTTPFilter C Program Files Dell Photo AIO Printer dlccmon exe C WINDOWS system igfxpers exe C Program Files Musicmatch Musicmatch Jukebox mm tray exe C Program Files Musicmatch Musicmatch Jukebox mmtask exe C Program Files Roxio Easy Media Creator Drag to Disc DrgToDsc exe C Program Files USB Disk Win Driver Res EXE C Program Files QuickTime qttask exe C Program Files iTunes iTunesHelper exe C Program Files Common Files LogiShrd LComMgr Communications Helper exe C Program Files Logitech QuickCam Quickcam exe C Program Files Zune ZuneLauncher exe C WINDOWS system dlcccoms exe C Program Files SweetIM Messenger SweetIM exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files iPod bin iPodService exe C WINDOWS system ctfmon exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files MySpace IM MySpaceIM exe C DOCUME HILARY LOCALS Temp a exe C Program Files Antivirus av exe C Program Files Kodak Kodak EasyShare software bin EasyShare exe C Program Files Kodak KODAK Software Updater Program Kodak Software Updater exe C Program Files Logitech Desktop Messenger Program LogitechDesktopMessenger exe C Program Files Yahoo Yahoo Music Jukebox ymetray exe C Program Files Snocap Download Manager NodeStarter exe C WINDOWS system wuauclt exe C Program Files Snocap Download Manager active downloadmgr exe C Program Files Common Files Logishrd LQCVFX COCIManager exe C DOCUME HILARY LOCALS Temp tmpa exe C Program Files MSN Messenger msnmsgr exe C WINDOWS system igfxsrvc exe C Program Files MySpace IM MySpaceIM exe C WINDOWS system wuauclt exe C WINDOWS SoftwareDistribution Download dd ab cf e fa d f e update update exe C Program Files Internet Explorer iexplore exe C Program Files Common Files Microsoft Shared Windows Live WLLoginProxy exe C Documents and Settings Hilary P Desktop dds com c windows hf mig KB update update exe Pseudo HJT Report uSearch Page hxxp www google com uSearch Bar hxxp www google com ie mStart Page hxxp www dell me com myway uSearchAssistant hxxp www google com ie uSearchURL Default hxxp www google com search q s uURLSearchHooks SweetIM ToolbarURLSearchH... Read more

A:antivirus 2009 pop ups and warnings of spyware infection

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

It appears that you have two antivirus programs installed and running, Norton(Symantec) and TrendMicro, and both are outdated. While this may seem like better protection, they can actually conflict with one another and cause system instability or even system hangs. Please choose one to keep and uninstall the other via Add or Remove Programs in your Control Panel.

If you cannot update the one you left installed, let me know.

------------------------------------------------------

Please visit this webpage for download links, and instructions for running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all antivirus and antimalware programs so they do not interfere with the running of ComboFix.

Please post the C:\ComboFix.txt in your next reply for further review.

------------------------------------------------------

http://www.techsupportforum.com/forums/f284/antivirus-2009-pop-ups-and-warnings-of-spyware-infection-336423.html
Relevancy 52.89%

I did it - the dreaded mistake of opening an email attachment that I thought was safe. It brought a virus I am guessing. Have done avg scan/adaware scan/ca frontier scan (from my isp) to no avail. Getting constant things coming up saying my computer is at risk and I have a virus blah blah blah - cannot make them stop. Any ideas or tips would be appreciated. Need the computer for work TONIGHT LOL - Thanks :)

A:virus/malware/spyware removal warnings

http://www.techsupportforum.com/secu...oval-help.html

http://www.techsupportforum.com/forums/f10/virus-malware-spyware-removal-warnings-314360.html
Relevancy 52.89%

Every time I start my IE I get an about blank screen and at least one popup that says I have spyware on my computer Can anyone look at my Hijack This file and tell me what [resolved]getting spyware and warnings about:blank screen IE on stupid spyware thing I picked up this time I was just trying to find good rates for hotels on the Internet and [resolved]getting about:blank screen and spyware warnings on IE this stupid thing started happening I can t even get on the Internet without these idiotic companies screwing up my computer ----------------------------------------------- Logfile of HijackThis v Scan saved at PM on Platform Windows SE Win x A MSIE Internet Explorer v SP Running processes C WINDOWS SYSTEM KERNEL DLL C WINDOWS SYSTEM MSGSRV EXE C WINDOWS SYSTEM MPREXE EXE C WINDOWS SYSTEM mmtask tsk C WINDOWS SYSTEM MSTASK EXE C WINDOWS SYSTEM NVSVC EXE C PROGRAM FILES MCAFEE COM VSO MCVSRTE EXE C WINDOWS SYSTEM ZONELABS VSMON EXE C WINDOWS EXPLORER EXE C WINDOWS TASKMON EXE C WINDOWS SYSTEM SYSTRAY EXE C PROGRAM FILES MCAFEE COM VSO MCVSSHLD EXE C PROGRAM FILES MCAFEE COM VSO MCVSESCN EXE C PROGRAM FILES MCAFEE COM AGENT MCAGENT EXE C PROGRAM FILES ZONE LABS ZONEALARM ZLCLIENT EXE C WINDOWS RUNDLL EXE C PROGRAM FILES STEAM STEAM EXE C WINDOWS SYSTEM SPOOL EXE C WINDOWS SYSTEM WMIEXE EXE C PROGRAM FILES INTERNET EXPLORER IEXPLORE EXE C WINDOWS SYSTEM DDHELP EXE C MY DOCUMENTS HIJACKTHIS HIJACKTHIS EXE R - HKCU Software Microsoft Internet Explorer Main Search Bar res C WINDOWS SYSTEM KPEKKN DLL sp html obfuscated R - HKCU Software Microsoft Internet Explorer Main Search Page res C WINDOWS SYSTEM KPEKKN DLL sp html obfuscated R - HKCU Software Microsoft Internet Explorer Search SearchAssistant res C WINDOWS SYSTEM KPEKKN DLL sp html obfuscated R - HKLM Software Microsoft Internet Explorer Main Search Bar res C WINDOWS SYSTEM KPEKKN DLL sp html obfuscated R - HKLM Software Microsoft Internet Explorer Main Search Page res C WINDOWS SYSTEM KPEKKN DLL sp html obfuscated R - HKLM Software Microsoft Internet Explorer Search SearchAssistant res C WINDOWS SYSTEM KPEKKN DLL sp html obfuscated R - HKCU Software Microsoft Internet Explorer Main HomeOldSP about blank O - BHO no name - E F-C D - D -B D- B D BE B - C PROGRAM FILES ADOBE ACROBAT READER ACTIVEX ACROIEHELPER DLL O - BHO no name - E -BA - D -B - B E A E - C WINDOWS SYSTEM KPEKKN DLL O - Toolbar msdxmLC dll email protected amp Radio - E - F- D - E- A C - C WINDOWS SYSTEM MSDXM OCX O - Toolbar McAfee VirusScan - BA B -B - c -B - F F - C PROGRAM FILES MCAFEE COM VSO MCVSSHL DLL O - HKLM Run ScanRegistry C WINDOWS scanregw exe autorun O - HKLM Run TaskMonitor C WINDOWS taskmon exe O - HKLM Run SystemTray SysTray Exe O - HKLM Run LoadPowerProfile Rundll exe powrprof dll LoadCurrentPwrScheme O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS SYSTEM NvCpl dll NvStartup O - HKLM Run nwiz nwiz exe install O - HKLM Run VSOCheckTask quot C PROGRA MCAFEE COM VSO MCMNHDLR EXE quot checktask O - HKLM Run VirusScan Online quot C PROGRA MCAFEE COM VSO mcvsshld exe quot O - HKLM Run MCAgentExe C PROGRA MCAFEE COM AGENT mcagent exe O - HKLM Run MCUpdateExe C PROGRA MCAFEE COM AGENT MCUPDATE EXE O - HKLM Run Zone Labs Client quot C Program Files Zone Labs ZoneAlarm zlclient exe quot O - HKLM RunServices LoadPowerProfile Rundll exe powrprof dll LoadCurrentPwrScheme O - HKLM RunServices SchedulingAgent mstask exe O - HKLM RunServices NVSvc C WINDOWS SYSTEM nvsvc exe -runservice O - HKLM RunServices McVsRte C PROGRA MCAFEE COM VSO mcvsrte exe embedding O - HKLM RunServices TrueVector C WINDOWS SYSTEM ZONELABS VSMON EXE -service O - HKCU Run NvMediaCenter RUNDLL EXE C WINDOWS SYSTEM NVMCTRAY DLL NvTaskbarInit O - HKCU Run Steam quot c program files steam steam exe quot -silent O - Startup Microsoft Office lnk C Program Files Microsoft Office Office OSA EXE O - Startup EPSON Status Monitor Environment Check lnk C WINDOWS SYSTEM E SRCV EXE O - Extra context menu item E amp xport to Microsoft Excel - res C ... Read more

A:[resolved]getting about:blank screen and spyware warnings on IE

nevermind...I fixed the problem with this program:

http://209.133.47.12/~merijn/files/CWShredder.exe

It seems to be working fine now.
 

https://forums.techguy.org/threads/resolved-getting-about-blank-screen-and-spyware-warnings-on-ie.237532/
Relevancy 52.89%

Logfile help --spyware popups requested and security warnings and of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running help requested --spyware and security warnings and popups processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS help requested --spyware and security warnings and popups system Ati evxx exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Common Files Symantec Shared CCPD-LC symlcsvc exe C WINDOWS System WLTRYSVC EXE C WINDOWS System bcmwltry exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Symantec LiveUpdate ALUSchedulerSvc exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C Program Files Microsoft SQL Server MSSQL MICROSOFTSMLBIZ Binn sqlservr exe C Program Files Dell QuickSet NICCONFIGSVC exe C WINDOWS system svchost exe C WINDOWS Explorer EXE C Program Files Synaptics SynTP SynTPEnh exe C Program Files ATI Technologies ATI ACE CLI EXE C Program Files Dell QuickSet quickset exe C WINDOWS system WLTRAY exe C WINDOWS stsystra exe C Program Files CyberLink PowerDVD DVDLauncher exe C Program Files Common Files Symantec Shared ccApp exe C Program Files Dell Support DSAgnt exe C WINDOWS system ctfmon exe C Program Files Messenger msmsgs exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Digital Line Detect DLG exe C Program Files Microsoft SQL Server Tools Binn sqlmangr exe C Program Files ATI Technologies ATI ACE cli exe C Program Files Norton ScanStub exe C PROGRA Symantec LIVEUP LUCOMS EXE C Program Files Symantec LiveUpdate luall exe C Program Files Internet Explorer iexplore exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C Program Files Symantec LiveUpdate LuCallbackProxy exe C DOCUME ALLUSE APPLIC Symantec LIVEUP DOWNLO Updt spa exe C Program Files Trend Micro HijackThis HijackThis exe R - HKLM Software Microsoft Internet Explorer Search Default Page URL www google com ig dell hl en amp client dell-usuk amp channel us amp ibd R - URLSearchHook AOLTBSearch Class - EA - - DB- F -D CA FB C D - C Program Files AOL AOL Toolbar aoltb dll O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - E A - - D F-BEAE-D A C - C Program Files Common Files Symantec Shared coShared Browser NppBho dll O - BHO no name - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO AOL Toolbar Launcher - C - CB - A -B F - EA C F - C Program Files AOL AOL Toolbar aoltb dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - Toolbar AOL Toolbar - DE C F- - A - B-AA ED D - C Program Files AOL AOL Toolbar aoltb dll O - Toolbar Show Norton Toolbar - -F - -B -FBEE C B DF - C Program Files Common Files Symantec Shared coShared Browser UIBHO dll O - Toolbar The ensfolr - A-B F- EC-B -B B B F - C WINDOWS ensfolr dll file missing O - HKLM Run ATICCC quot C Program Files ATI Technologies ATI ACE CLIStart exe quot O - HKLM Run SynTPEnh C Program Files Synaptics SynTP SynTPEnh exe O - HKLM Run Dell QuickSet C Program Files Dell QuickSet quickset exe O - HKLM Run Broadc... Read more

A:help requested --spyware and security warnings and popups

can someone review log?
 

https://forums.techguy.org/threads/help-requested-spyware-and-security-warnings-and-popups.672692/
Relevancy 52.89%

After opening an attachment in an email pop-ups starting to appear on the computer After running Microsoft Antispyware Xoftspy McAfee and Lavasoft Ad-Aware SE I still have Adware Malware Solved: Spyware, & Warnings! problems Although all these programs said they blocked or got Solved: Spyware, Adware & Malware Warnings! rid of this problem it still manages to load itself on the computer after restarting The problem After restarting a pop-up shows up on the bottom right of the taskbar a small icon flashing the windows symbol and a red circle with a white quot X quot A box pops up from it saying quot Your computer is infected Dangerous malware infection was detected on your PC The system will now download and install most efficient antimalware program to prevent data loss and your private information theft Click here to protect your computer from the biggest malware threats quot When I right clicked on it to see if I could get rid of it my internet explorer came up with the website www spyaxe com This is the program that loads itself onto the computer after restarting Another icon popped up a yellow triangle with the exclamation point saying quot System Alert Popups Your computer is infected with spyware managing to pop-up advertisements OHPE ver A pop-up box also appeared saying quot Please read this message carefully Your PC is infected by spyware It goes on to ask to click quot OK quot to get software for protection Any assistance would be greatly appreciated Thanks nbsp

Relevancy 52.46%

I keep getting constant warnings of trojans or viruses in my computer Then it Fake Warnings Trojans, Of Spyware, Viruses Constant And opens many web pages offering all sorts of software to fix my quot problem quot Scanned with Avast and AVG Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Constant Fake Warnings Of Trojans, Spyware, And Viruses Windows XP SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C WINDOWS System smss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC Program Files Windows Defender MsMpEng exeC WINDOWS System svchost exeC Program Files Alwil Software Avast aswUpdSv exeC Program Files Alwil Software Avast ashServ exeC WINDOWS Explorer EXEC WINDOWS system spoolsv exeC Program Files Windows Defender MSASCui exeC PROGRA ALWILS Avast ashDisp exeC PROGRA Grisoft AVG avgcc exeC WINDOWS system ctfmon exeC Program Files Microsoft Money Plus MNYCoreFiles mnybbsvc exeC Program Files Microsoft Office OFFICE OUTLOOK EXEC Program Files Mozilla Firefox firefox exeC PROGRA Grisoft AVG avgamsvr exeC PROGRA Grisoft AVG avgupsvc exeC WINDOWS system cisvc exeC WINDOWS System nvsvc exeC WINDOWS System svchost exeC WINDOWS system fxssvc exeC Program Files Alwil Software Constant Fake Warnings Of Trojans, Spyware, And Viruses Avast ashMaiSv exeC Program Files Alwil Software Avast ashWebSv exeC Program Files Microsoft Office OFFICE WINWORD EXEC WINDOWS system cidaemon exeC Program Files Spybot - Search amp Destroy SpybotSD exeC Documents and Settings Irmarie Desktop HiJackThis exeO - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dllO - BHO no name - d c d -a e - a -a b-b a a cc - C WINDOWS system glwvove dllO - BHO b f - c -a c -a - fc ca - ac cf - - a- c a- c f b - C WINDOWS system xasaliav dll file missing O - BHO no name - CB F B - F - D E-BC B- A - C WINDOWS system awtrrst dll file missing O - BHO no name - - F - D - - D F - C PROGRA SPYBOT SDHelper dllO - BHO CoolBHO - C A -B - -B -BDCAD DC - C Program Files Cool Cool dll file missing O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS system dla tfswshx dllO - BHO no name - DCF-AC - D - A - D F D - C Program Files Messenger mexobafimC WINDOWS system h jumper exe dll file missing O - BHO no name - A B - D E- -A - C DE A - C WINDOWS system kbvdjgqs dll file missing O - BHO no name - EE F - D - D A- - FF - C Program Files Messenger mexobafimC DOCUME Irmarie LOCALS Temp CEMG exe dll file missing O - BHO no name - F A AD - - C- E -BC A B - C WINDOWS system vtstq dll file missing O - Toolbar Security Toolbar - A AE -FBED- -A BF- AF - C WINDOWS system kbvdjgqs dll file missing O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS System NvCpl dll NvStartupO - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottimeO - HKLM Run Windows Defender quot C Program Files Windows Defender MSASCui exe quot -hideO - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adobe Reader Reader Reader sl exe quot O - HKLM Run avast C PROGRA ALWILS Avast ashDisp exeO - HKLM Run AVG CC C PROGRA Grisoft AVG avgcc exe STARTUPO - HKCU Run ctfmon exe C WINDOWS system ctfmon exeO - HKCU Run MoneyBackgoundBanking quot C Program Files Microsoft Money Plus MNYCoreFiles mnybbsvc exe quot O - HKUS S- - - Run AVG Run C PROGRA Grisoft AVG avgw exe RUNONCE User 'LOCAL SERVICE' O - HKUS S- - - Run AVG Run C PROGRA Grisoft AVG avgw exe RUNONCE User 'NETWORK SERVICE' O - HKUS S- - - Run DWQueuedReporting quot C PROGRA COMMON MICROS DW dwtrig exe quot -t User 'SYSTEM' O - HKUS S- - - RunOnce RunNarrator Narrator exe User 'SYSTEM' O - HKUS DEFAULT Run DWQueuedReporting quot C PROGRA COMMON MICROS DW dwtrig exe quot -t User 'Default user' O - HKUS DEFAULT RunOnce RunNarrator Narrator exe User 'Default user' O - Startup Launch Microsoft Office Outlook lnk C Program Files Microsoft Office OFFICE OUTLOOK EXEO -... Read more

A:Constant Fake Warnings Of Trojans, Spyware, And Viruses

Hello iramos,Welcome to Bleeping Computer First you should know that you're actually doing more harm than good by running 2 Anti Virus programs. (AVG and Avast!) When you do this both programs compete for resources, and the end result is neither does it's best and can cause system instability. I recommend that you choose the one you want to keep, update it, disable the other one, and use it as an on demand only scan occasionally.Please run HijackThis! and click "Scan." Place checks next to the following entries, if present:O2 - BHO: (no name) - {0d93c2d8-a7e6-46a3-a01b-b06a985a3cc3} - C:\WINDOWS\system32\glwvove.dllO2 - BHO: {75b8f811-0c21-a4c8-a054-98884fc1ca33} - {33ac1cf4-8889-450a-8c4a-12c0118f8b57} - C:\WINDOWS\system32\xasaliav.dll (file missing)O2 - BHO: (no name) - {4CB8F4B4-5F66-4D9E-BC3B-184596A58824} - C:\WINDOWS\system32\awtrrst.dll (file missing)O2 - BHO: CoolBHO - {5C2A9795-B130-4622-B036-BDCAD28602DC} - C:\Program Files\Cool\Cool.dll (file missing)O2 - BHO: (no name) - {80929DCF-AC48-45D9-91A1-430D7F3D3076} - C:\Program Files\Messenger\mexobafimC:\WINDOWS\system32\h2\jumper83122.exe.dll (file missing)O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - C:\WINDOWS\system32\kbvdjgqs.dll (file missing)O2 - BHO: (no name) - {EE7F5020-0D30-4D0A-8354-975426797FF2} - C:\Program Files\Messenger\mexobafimC:\DOCUME~1\Irmarie\LOCALS~1\Temp\CEMG555077.exe.dll (file missing)O2 - BHO: (no name) - {F84A5AD5-5524-446C-92E6-BC3A70108B10} - C:\WINDOWS\system32\vtstq.dll (file missing)O3 - Toolbar: Security Toolbar - {11A69AE4-FBED-4832-A2BF-45AF82825583} - C:\WINDOWS\system32\kbvdjgqs.dll (file missing)O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O20 - AppInit_DLLs: c:\windows\system32\ldcore.dllO20 - Winlogon Notify: awtrrst - awtrrst.dll (file missing)O20 - Winlogon Notify: kbvdjgqs - kbvdjgqs.dll (file missing)Close all browsers and other windows except for HijackThis!, and click "Fix checked".1. Download this file - combofix.exe2. Double click combofix.exe & follow the prompts.3. When finished, it will produce a log for you. Post that log in your next reply please, along with a new HijackThis log.Note:Do not mouseclick combofix's window while it's running. That may cause it to stall.Thanks,tea

http://www.bleepingcomputer.com/forums/t/116673/constant-fake-warnings-of-trojans-spyware-and-viruses/
Relevancy 52.46%

For the Please? Browser Help & Notice Warnings Someone Can Issues - Ie7 Redirect Spyware last week or so one of our computers has been getting a warning in the taskbar that says quot Warning Spware Notice - Scan your computer now Ie7 Browser Redirect Issues & Spyware Notice Warnings - Can Someone Help Please? quot and then a site Ie7 Browser Redirect Issues & Spyware Notice Warnings - Can Someone Help Please? opens where I'm directed to download software PCPrivacy In addition whenever I click on a link after having done a Google search rather than the site opening that I've selected - the browser is redirected to www search-daily com to either one of the following click php c a b b c f amp r or click php c a b b c f amp r Anyway here's a copy of the HijackThis log - I'm hoping it may provide some insight into what's going on - I feel like I'm gong around in circles at the moment trying to rid us of this problem Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C WINDOWS System smss exeC WINDOWS system csrss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC WINDOWS system svchost exeC WINDOWS System svchost exeC Program Files Sygate SPF smc exeC WINDOWS system svchost exeC WINDOWS system svchost exeC Program Files Lavasoft Ad-Aware aawservice exeC WINDOWS Explorer EXEC Program Files SpywareDetector SDSystemTray exeC Program Files Java jre bin jusched exeC WINDOWS system hkcmd exeC Program Files Max Registry Cleaner MaxRCSystemTray exeC PROGRA ALWILS Avast ashDisp exeC Program Files Softwin BitDefender bdagent exeC WINDOWS system ctfmon exeC Program Files NoAdware NoAdware exeC WINDOWS system spoolsv exeC Program Files Alwil Software Avast aswUpdSv exeC Program Files Alwil Software Avast ashServ exeC Program Files SpywareDetector SDService exeC WINDOWS system svchost exeC Program Files Common Files Softwin BitDefender Communicator xcommsvr exeC Program Files Common Files Softwin BitDefender Update Service livesrv exeC Program Files Alwil Software Avast ashMaiSv exeC Program Files Alwil Software Avast ashWebSv exeC WINDOWS system wbem wmiprvse exeC WINDOWS System alg exeC Program Files Softwin BitDefender bdmcon exeC Program Files MailWasher MailWasher exeC WINDOWS system NOTEPAD EXEC Program Files Internet Explorer IEXPLORE EXEC Program Files Common Files Softwin BitDefender Scan Server bdss exeC Program Files Trend Micro HijackThis HijackThis exeC WINDOWS system wbem wmiprvse exeR - HKCU Software Microsoft Internet Explorer Main Local Page blank htmR - HKLM Software Microsoft Internet Explorer Main Local Page O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat Reader ActiveX AcroIEHelper dllO - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dllO - BHO no name - C A A C-CF - FC-BF - BEB - C WINDOWS system CNDUK dllO - HKLM Run SystemTraySD C Program Files SpywareDetector SDSystemTray exe -AUTOO - HKLM Run SDAutoLiveupdate C Program Files SpywareDetector LiveUpdateSD exe -AUTOO - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched exe quot O - HKLM Run IgfxTray C WINDOWS system igfxtray exeO - HKLM Run HotKeysCmds C WINDOWS system hkcmd exeO - HKLM Run RCAutoLiveUpdate C Program Files Max Registry Cleaner MaxLiveUpdateRC exe -AUTOO - HKLM Run RCSystemTray C Program Files Max Registry Cleaner MaxRCSystemTray exeO - HKLM Run avast C PROGRA ALWILS Avast ashDisp exeO - HKLM Run BDMCon quot C Program Files Softwin BitDefender bdmcon exe quot regO - HKLM Run BDAgent quot C Program Files Softwin BitDefender bdagent exe quot O - HKLM Run SmcService C PROGRA Sygate SPF smc exe -startguiO - HKCU Run CTFMON EXE C WINDOWS system ctfmon exeO - HKCU Run NoAdware quot C Program Files NoAdware NoAdware exe quot Min O - HKUS S- - - Run CTFMON EXE C WINDOWS system CTFMON EXE User 'LOCAL S... Read more

A:Ie7 Browser Redirect Issues & Spyware Notice Warnings - Can Someone Help Please?

Hello beejay0308,

Welcome to Bleeping Computer

Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Thanks,
tea

http://www.bleepingcomputer.com/forums/t/119426/ie7-browser-redirect-issues-spyware-notice-warnings-can-someone-help-please/
Relevancy 52.46%

once i got rid of a virus on my pc using help from tsg i started to get lots of popups warning me about problems with my registry and adware on my pc and that my pc's information is open to anybody. but when i run my NAV an windows defender they come up clean can anybody give me some advice please ?
 

A:lots of warnings about adware, spyware and viruses dont know what to do please help

https://forums.techguy.org/threads/lots-of-warnings-about-adware-spyware-and-viruses-dont-know-what-to-do-please-help.478301/
Relevancy 52.46%

Logfile of Trend Micro HijackThis v Scan saved at AM infected Got with spyware fake giving that's warnings nasty some on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C Windows system taskeng exeC Windows system Dwm exeC Windows Explorer EXEC Program Files Synaptics SynTP SynTPEnh exeC Program Files Hewlett-Packard HP Quick Launch Buttons QLBCTRL exeC Windows System rundll exeC Windows system wbem unsecapp exeC Program Files Synaptics SynTP SynTPHelper exeC Got infected with some nasty spyware that's giving fake warnings Program Files Mozilla Firefox firefox exeC Windows system Got infected with some nasty spyware that's giving fake warnings SearchFilterHost exeC Program Files Trend Micro HijackThis HijackThis exeR - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go Got infected with some nasty spyware that's giving fake warnings microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhostO - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dllO - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dllO - HKLM Run Windows Defender ProgramFiles Windows Defender MSASCui exe -hideO - HKLM Run SynTPEnh C Program Files Synaptics SynTP SynTPEnh exeO - HKLM Run QlbCtrl exe C Program Files Hewlett-Packard HP Quick Launch Buttons QlbCtrl exe StartO - HKLM Run NvCplDaemon RUNDLL EXE C Windows system NvCpl dll NvStartupO - HKLM Run NvMediaCenter RUNDLL EXE C Windows system NvMcTray dll NvTaskbarInitO - HKUS S- - - Run Sidebar ProgramFiles Windows Sidebar Sidebar exe detectMem User 'LOCAL SERVICE' O - HKUS S- - - Run WindowsWelcomeCenter rundll exe oobefldr dll ShowWelcomeCenter User 'LOCAL SERVICE' O - HKUS S- - - Run Sidebar ProgramFiles Windows Sidebar Sidebar exe detectMem User 'NETWORK SERVICE' O - Gopher Prefix O - DPF F C-E A- C-B - B ABEEAC HP Download Manager - https h www hp com ediags dex secure HPDEXAXO cabO - DPF ECB AA- - C-A AB-D DAD EE GMNRev Class - http h www hp com ediags gmn inst ctDetection cabO - DPF AD C - E- D -B E - F D Java Runtime Environment - http dl -cdn- sun com s ESD JSCDL jdk ows-i -jc cabO - Service Com QLBEx - Hewlett-Packard Development Company L P - C Program Files Hewlett-Packard HP Quick Launch Buttons Com QLBEx exeO - Service hpqwmiex - Hewlett-Packard Development Company L P - C Program Files Hewlett-Packard Shared hpqwmiex exeO - Service NVIDIA Display Driver Service nvsvc - NVIDIA Corporation - C Windows system nvvsvc exeO - Service XAudioService - Conexant Systems Inc - C Windows system DRIVERS xaudio exe--End of file - bytesAlso when I tried to do a HJT scan onn vista it said quot Could not access the hosts file quot

A:Got infected with some nasty spyware that's giving fake warnings

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

http://www.bleepingcomputer.com/forums/t/241696/got-infected-with-some-nasty-spyware-thats-giving-fake-warnings/
Relevancy 51.6%

I suddenly started getting windows that warn me of spyware infections and offer to remove them They have taken over the desktop disabled the task manager and are generally wreaking havoc Earlier the desktop icons and task bar disappeared leaving only the wallpaper and I had to reboot A Rundll error message appears now at startup Earlier Superantispyware detected a Vundo warnings false recent spyware attack infection Solved: of variant a Downloader and a few other pests but it doesn t seem as though it was able to remove all of them Then Solved: recent attack of false spyware infection warnings I ran Vundofix and it found no problems I have not yet run Combofix I m hoping your trained eye can help me resolve this SAS Vundofix logs follow then the Hijackthis log Thank you SUPERAntiSpyware Scan Log http www superantispyware com Generated at PM Solved: recent attack of false spyware infection warnings Application Version Core Rules Solved: recent attack of false spyware infection warnings Database Version Trace Rules Database Version Scan type Quick Scan Total Scan Time Memory items scanned Memory threats detected Registry items scanned Registry threats detected File items scanned File threats detected Adware Vundo Variant Resident C WINDOWS SYSTEM QOMCCCSP DLL C WINDOWS SYSTEM QOMCCCSP DLL Transponder Variant BHO HKLM Software Microsoft Windows CurrentVersion Explorer Browser Helper Objects - - dd -be f- d Unclassified Unknown Origin HKLM Software Microsoft Windows CurrentVersion Explorer Browser Helper Objects c c-e - a -a ac-b a e d Adware Search HKLM Software Microsoft Windows CurrentVersion Explorer Browser Helper Objects e f -eec - a -add -cd f c HKLM Software Microsoft Windows CurrentVersion Explorer Browser Helper Objects e bd f- b d- e- c -ce eb a d Adware Vundo-Variant HKLM Software Microsoft Windows CurrentVersion Explorer Browser Helper Objects B E -F - C -AA - EACFC E HKCR CLSID B E -F - C -AA - EACFC E HKCR CLSID B E -F - C -AA - EACFC E InprocServer HKCR CLSID B E -F - C -AA - EACFC E InprocServer ThreadingModel Adware solutions SurfAssistant HKLM Software Microsoft Windows CurrentVersion Explorer Browser Helper Objects dafd - b - c e-bd - ca b Adware Second Thought HKLM Software Microsoft Windows CurrentVersion Explorer Browser Helper Objects a f- efa- - - f Adware Tracking Cookie C Documents and Settings mom and guests Cookies mom and guests tribalfusion txt C Documents and Settings mom and guests Cookies mom and guests ads techguy txt C Documents and Settings mom and guests Cookies mom and guests msnportal o txt C Documents and Settings mom and guests Cookies mom and guests ads as x tmcs txt C Documents and Settings mom and guests Cookies mom and guests atdmt txt C Documents and Settings mom and guests Cookies mom and guests trafficmp txt VundoFix V Scan started at PM Listing files found while scanning No infected files were found Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Common Files Symantec Shared ccSvcHst exe C WINDOWS System wmsdkns exe C WINDOWS Explorer EXE C Program Files Common Files Symantec Shared AppCore AppSvc exe C Program Files Common Files Symantec Shared PIF B E DD - - c -B F- F FCA A PIFSvc exe C WINDOWS System igfxtray exe C WINDOWS system spoolsv exe C Program Files Java jre bin jusched exe C Program Files Common Files Symantec Shared ccApp exe C WINDOWS System rundll exe C WINDOWS System Rundll exe C Program Files MSN Messenger msnmsgr exe C WINDOWS System ctfmon exe C Program Files QdrModule QdrModule exe C DOCUME MOM AN LOCALS Temp ie exe C Program Files SUPERAntiSpyware SUPERAntiSpyware exe C Program Files Wireless LAN g Wireless Cardbus amp PCI Adapter HW V WlanCU exe C Program Files Symantec LiveUpda... Read more

Relevancy 51.6%

keeps telling me I have to buy some pc spyware and turns screen warnings Screen and hijacked saver HELP! multiple Solved: spyware to blue with update your spyware and click here when I click on the warning on the running processes bar it goes to this website http total-pc-protection com aff Please help me get rid of this I have attached my HJT Solved: HELP! Screen saver hijacked and multiple spyware warnings log Logfile of HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C Program Files Kaspersky Lab Kaspersky Anti-Virus avp exe C Program Files Common Files Microsoft Shared VS Debug mdm exe C Program Files Analog Devices SoundMAX SMAgent exe C WINDOWS system svchost exe C WINDOWS system Ati evxx exe C WINDOWS Explorer EXE C WINDOWS system sumsw exe C Program Files ATI Technologies ATI Control Panel atiptaxx exe C Program Files Hewlett-Packard Toolbox StatusClient StatusClient exe C Program Files Hewlett-Packard OrderReminder OrderReminder OrderReminder exe C Program Files Java jre bin jusched exe C Program Files Hewlett-Packard HP Software Update HPWuSchd exe C Program Files QuickTime qttask exe C Program Files iTunes iTunesHelper exe C Program Files Winamp winampa exe C Program Files Common Files Real Update OB realsched exe C Program Files Kaspersky Lab Kaspersky Anti-Virus avp exe C WINDOWS system ctfmon exe C Program Files Messenger msmsgs exe C Program Files Kaspersky Lab Kaspersky Anti-Hacker KAVPF exe C Program Files iPod bin iPodService exe C WINDOWS System svchost exe C Program Files Hewlett-Packard Toolbox jre bin javaw exe C WINDOWS system hpzipm exe C Program Files Microsoft Office Office EXCEL EXE C Program Files Internet Explorer IEXPLORE EXE C Program Files Internet Explorer IEXPLORE EXE C Program Files WinRAR WinRAR exe C DOCUME Phat LOCALS Temp Rar EX HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www google ca O - BHO no name - - D - - - - no file O - BHO no name - -C EC- - EC - D - no file O - BHO no name - -F C- B - EC -AD - no file O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - ceff cd- f - e d-bccd-ff c b - no file O - BHO no name - - F - D - - D F - C Program Files Spybot - Search amp Destroy SDHelper dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO no name - e - bfe- b -a b - bd a - no file O - BHO no name - b bb - b d- fd- a -b f deb - no file O - BHO no name - c - - -a -f d fca - no file O - BHO no name - c a - dda- c f-be c-c f cf - no file O - BHO no name - e dedbb-d - bdb-b -c e - no file O - BHO no name - ffd e- - c - a - f a f - no file O - HKLM Run ATIPTA C Program Files ATI Technologies ATI Control Panel atiptaxx exe O - HKLM Run NeroFilterCheck C WINDOWS system NeroCheck exe O - HKLM Run HPDJ Taskbar Utility C WINDOWS system spool drivers w x hpztsb exe O - HKLM Run StatusClient C Program Files Hewlett-Packard Toolbox StatusClient StatusClient exe auto O - HKLM Run TomcatStartup C Program Files Hewlett-Packard Toolbox hpbpsttp exe O - HKLM Run OrderReminder C Program Files Hewlett-Packard OrderReminder OrderReminder OrderReminder exe O - HKLM Run SunJavaUpdateSched C Program Files Java jre bin jusched exe O - HKLM Run HP Software Update C Program Files Hewlett-Packard HP Software Update HPWuSchd exe O - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottime O - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run WinampAgent C Program Files Winamp winampa exe O - HKLM Run TkBellExe quot C Program Files Common Files Real Update OB realsched exe quot -osboot O - HKLM Run ka... Read more

Relevancy 50.74%

Hi-I'm back I was here last fall and it helped Thank you I seem to have a bunch of greyware spyware and at least one trojan if not more I have done a number of online scans with Trend Micro and even though it's supposed to clean the computer this trojan keeps reappearing My computer is running very slowly acting like it has memory problems when it doesn't as I upgraded my RAM from to MB last fall Browser pages which were loading very quickly are slow Applications hesitate like mad when I try to open them I've seen windows that ask if I want to allow a program to open a page on the internet which were never present before and don't seem legitimate I am posting my hijackthis log and let me know if you want to see my Panda Activescan or Bitdefender logs Thank you Logfile of HijackThis v Scan saved at AM on Platform Security Warnings, Smitfraud, Is Everything False Infections, Spyware, Popups, Running Slowly Windows XP SP WinNT MSIE Internet Explorer v SP Running processes C WINDOWS System smss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC WINDOWS System svchost exeC Program Files Sygate SPF smc exeC WINDOWS Explorer EXEC WINDOWS system ZoneLabs vsmon exeC WINDOWS system spoolsv exeC PROGRA COMMON AOL ACS acsd exeC WINDOWS System Ati evxx exeC Program Files Anti Spyware AVG Anti-Spyware guard exeC WINDOWS system cisvc exeC PROGRA Iomega System ActivityDisk exeC PROGRA TRENDM INTERN PcCtlCom exeC WINDOWS System svchost exeC PROGRA TRENDM INTERN Tmntsrv exeC PROGRA TRENDM INTERN tmproxy exeC Program Files Sony VAIO Media Music Server SSSvr exeC Program Files Sony Photo Server appsrv PicAppSrv exeC WINDOWS wanmpsvc exeC Program Files Common Files Sony Shared VAIO Media Platform sv httpd exeC Program Files Common Files Sony Shared VAIO Media Platform SV Httpd exeC WINDOWS system wscntfy Infections, Spyware, Popups, False Security Warnings, Smitfraud, Everything Is Running Slowly exeC Program Files Sony HotKey Utility HKserv exeC Program Files Trend Micro Internet Security pccguide exeC WINDOWS Infections, Spyware, Popups, False Security Warnings, Smitfraud, Everything Is Running Slowly System ezSP Px exeC Program Files Zone Labs ZoneAlarm zlclient exeC Program Files Iomega AutoDisk AD KClient exeC Program Files MSN Messenger msnmsgr exeC Program Files Sony HotKey Utility HKWnd exeC Infections, Spyware, Popups, False Security Warnings, Smitfraud, Everything Is Running Slowly WINDOWS system cidaemon exeC Program Files Messenger msmsgs exeC Program Files Internet Explorer iexplore exeC WINDOWS System LVComsX exeC Program Files Adobe Acrobat Reader AcroRd exeC Program Files Anti Spyware HijackThis exeN - Netscape user pref quot browser startup homepage quot quot http antwrp gsfc nasa gov apod quot C Documents and Settings Laurie Gassman Application Data Mozilla Profiles default sjpqhko slt prefs js N - Netscape user pref quot browser search defaultengine quot quot engine C A CProgram Files CNetscape CNetscape Csearchplugins CSBWeb src quot C Documents and Settings Laurie Gassman Application Data Mozilla Profiles default sjpqhko slt prefs js O - BHO Trend Micro Antifraud Toolbar - - E- D -A DE-E DA BE - C PROGRA TRENDM INTERN PccIeBar dllO - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat Reader ActiveX AcroIEHelper dllO - BHO SpywareGuard Download Protection - A E - F- - B - B DDD DB - C Program Files SpywareGuard dlprotect dllO - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dllO - Toolbar Trend Micro Antifraud Toolbar - F FD- A - -A - AB CFF AF - C PROGRA TRENDM INTERN PccIeBar dllO - Toolbar ZeroBar - F F ECBE-D - B -B - A E F A - C Program Files NetZero Toolbar dllO - HKLM Run HKSERV EXE C Program Files Sony HotKey Utility HKserv exeO - HKLM Run pccguide exe quot C Program Files Trend Micro Internet Security pccguide exe quot O - HKLM Run ezShieldProtector for Px C WINDOWS System ezSP Px exeO... Read more

A:Infections, Spyware, Popups, False Security Warnings, Smitfraud, Everything Is Running Slowly

Hello pacificoast, Welcome back. I am not seeing much in you log, so lets dig deeper. You will need to use Internet Explorer for this scan. Disable your antivirus program and go here to run BitDefender Online Scan. Click on I Agree. Avoid clicking on other links as you don't need to try out the full install at this point, just the online scanner.When the ActiveX Control has loaded, click on "Click here to scan". Please be patient, as this scan may take a few hours. It all depends on the number of files on your computer. NOTE: If you are running XP SP2, you may need to click on the Information Bar to allow the ActiveX to install and may need to repeat the BitDefender Online Scan.When BitDefender completes the scan, select the "Detected Problems" tab. Click on "Click here to export scan". Save the file as an HTML to your Desktop. Then click on the saved file and allow it to open with your browser. Go to Edit - Select All then copy/paste that log back here. Post the BitDefender log.******************Download ATF (Atribune Temp File) Cleaner? by Atribune DO NOT run it yet. Download and install AVG Anti-Spyware 7.5 (formerly Ewido) This is a 30 day trial of the programAVG Anti-Spyware is designed to be used to both scan for and remove malicious files and also to run in real-time alongside, but not replace, your existing anti-virus program to give an added layer of protection.Both the Resident Shield and Automatic Updates will only be available for the thirty day trial period, after that AVG Anti-Spyware will revert to a stand-alone scanner which you can keep and manually update for free and use in a similar way to Ad-Aware SE Personal, Spybot S&D etc.1. After download, double click on the file to launch the install process. 2. Choose a language, click "OK" and then click "Next". 3. Read the "License Agreement" and click "I Agree". 4. Accept the default installation path: C:\Program Files\AVG Anti-Spyware 7.5 and click "Next", then click "Install". 5. After setup completes, click "Finish" to start the program automatically or launch ewido by double-clicking its icon on your desktop or in the system tray. 6. The main "Status" menu will appear. You can select "Change state" to inactivate 'Resident Sheild' and 'Automatic Updates'. If you choose to do this, then right click on AVG antispyware in the system tray and uncheck "Start with Windows". 7. Select the "Update" button and click "Start update". If you are having problems with the updater, manually update with the AVG Antispyware Full database installer from here. 8. Exit AVG Anti-Spyware 7.5 when done - DO NOT perform a scan yet. Reboot your computer in "SAFE MODE" using the F8 method so Windows will start with minimal drivers and running processes. To do this restart your computer and after hearing your computer beep once during startup [but before the Windows icon appears] press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode". 1.) Double-click the small BLUE Garbage Can ATF-Cleaner.exe file to run the program.2.) At the top, under Main choose: Select All3.) Click the Empty Selected button.If you use the Firefox browser:1.) At the top, click Firefox and choose: Select All2.) Click the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click NO at the prompt.If you use the Opera browser:1.) At the top, click Opera and choose: Select All2.) Click the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click NO at the prompt.Scan with AVG Anti-Spyware 7.5 as follows: 1. Launch AVG Anti-Spyware 7.5, click on the "Scanner" button and choose the "Settings" tab. Under "How to act?", click on "Recommend... Read more

http://www.bleepingcomputer.com/forums/t/91741/infections-spyware-popups-false-security-warnings-smitfraud-everything-is-running-slowly/
Relevancy 48.59%

For the last several months I've been receiving pop-ups warning of possible virus infections and prompting me to purchase virus protection Also I randomly get messages warning of critical errors and the need to shutdown - giving seconds warning and shutting down the system The message references lsass exe My HijackThis log Deckard's System Scanner v Run by Barb on - - Computer is in Normal Mode -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point -- Last Restore Point s -- - - UTC - RP - Deckard's System Scanner Restore Point - - UTC - RP Memory Warnings, Shutdowns System Warnings, Random - Software Distribution Service - - UTC - RP - Software Distribution Service - - UTC - RP - System Checkpoint - - System Warnings, Memory Warnings, Random Shutdowns UTC - RP - System Checkpoint -- First Restore Point -- - - UTC - RP - Removed H amp R Block Tax Offer Backed up registry hives Performed disk cleanup -- HijackThis run as Barb exe ------------------------------------------------ Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C WINDOWS system drivers KodakCCS exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS System svchost exe C WINDOWS System svchost exe C PROGRA Dantz RETROS retrorun exe C PROGRA Dantz RETROS wdsvc exe C WINDOWS system ScsiAccess EXE C Program Files Dell Support Center bin sprtsvc exe C WINDOWS system svchost exe C Program Files Webroot Spy Sweeper SpySweeper exe C WINDOWS Explorer EXE C Program Files Analog Devices Core smax pnp exe C Program Files Java jre bin jusched exe C Program Files CyberLink PowerDVD DVDLauncher exe C Program Files Dell Media Experience DMXLauncher exe C WINDOWS system WDBtnMgr exe C Program Files HP HP Software Update HPWuSchd exe C WINDOWS system dla tfswctrl exe C Program Files Common Files Real Update OB realsched exe C Program Files Musicmatch Musicmatch Jukebox mmtask exe C Program Files Dell Support Center bin sprtcmd exe C Program Files Webroot Spy Sweeper SpySweeperUI exe C Program Files DellSupport DSAgnt exe C WINDOWS system ctfmon exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Digital Line Detect DLG exe C Program Files Kodak KODAK Software Updater Program backWeb- exe C Program Files HP Digital Imaging bin hpqgalry exe C Program Files Internet Explorer iexplore exe C Program Files Webroot Spy Sweeper SSU EXE c dss exe C PROGRA TRENDM HIJACK Barb exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www dell me com myway R - HKCU Software Microsoft Internet Explorer Main Search Bar http bfc myway com search de srchlft html R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride localhost O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS system dla tfswshx dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar d... Read more

http://www.techsupportforum.com/forums/f284/system-warnings-memory-warnings-random-shutdowns-271610.html
Relevancy 47.73%

Whenever I click on "Live radio" then you see Loading video but nothing comes. Sometimes its requires Plug in but  i don't know what it is

A:Inability to listen to live radio on my sumsung laptop with windows 7 platform

Where are you seeing this 'Live Radio' to click? On a web page on a desktop icon? What is it associated with?

http://www.bleepingcomputer.com/forums/t/573831/inability-to-listen-to-live-radio-on-my-sumsung-laptop-with-windows-7-platform/
Relevancy 46.87%

My desktop has been hijacked and taken over by warnings of spyware and there is a red "X" on the bottom of my screen that constantly pops open a bubble the says "Your computer is infected!" after which it says that there is spyware on my computer. Random websites of anti-spyware materials pop up on their own. Please tell me what to do to get rid of this mess. Also, the worst part is that HijackThis won't seem to work on my computer anymore so I can't post a log. I downloaded another copy and once it installed on my desktop, I double-click on the icon and nothing happens!
 

A:Desktop Hijacked with Anti-spyware Warnings; Red "X" on Bottom Right

Click here to download HJTInstall.exe

Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis .
Click on Install.
It will create a HijackThis icon on the desktop.
Once installed, it will launch Hijackthis.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

 

https://forums.techguy.org/threads/desktop-hijacked-with-anti-spyware-warnings-red-x-on-bottom-right.758853/
Relevancy 46.87%

Not being that experienced, I'm a little confused w/ the way the Library sorts CDs into genres vs the way I could sort the Music Folders. They don't seem to relate. For example, the Library lists an album under "Rock" that I would like to move to another genre but I cannot figure a way to do this. On the other hand, I know I could play around w/ the folders so that this particular CD is in the right place. However, I'm not sure that if I take the time to organize my Music folders whether this will have any impact on how the Library sorts them.
If you can shed some light on this I'd sure appreciate it.
Thanks, Nick.
 

A:Solved: Windows media music library vs music folders

Mp3 music files have tags that are kept inside the files themselves. The most common ones are Artist, Album, Track Title, Track Number, Release Year and Genre. When you put a file into the WMP library, the tags are read and stored, along with the file location.

So the tag data is what shows up in the WMP library and you can sort on various fields depending on which version you have. But the files can be put anywhere and named anyway you like. Most people use a certain naming convention like Artist-TrackNumber-Title.

If you want to sort the folders by genre you could do that, but you'll have to do it manually. You can do some manipulating of folders and filenames with tag editors. If you want to give that a try get Mp3Tag.
 

https://forums.techguy.org/threads/solved-windows-media-music-library-vs-music-folders.839137/
Relevancy 46.87%

The problem started about a week a go. I heard music playing and figured it was a friend on ventrillo, but it kept playing after I shut all my programs down. It would play for a little, always the same 3 songs with 2 ads in between them, then stop. After it was done playing I would check the history on my IE and it would be filled with sites I didn't go to.

To try to fix this problem I used SpyBot S&D and Ad-aware but it kept playing. I then looked up a few programs you guys posted and ran them. They all found problems but didn't really fix it. I believe there may be more then just spyware at work here.

I already have AVG, Spybot s&d and Ad-Aware on my comp. Please help, I know you guys have a solution and I would appreciate anything to make it stop.

Thank you.

A:Spyware Playing Music

Hi virago220022 Welcome to BC! Please print out or copy this instructions/tutorial to Notepad as the internet will not be available to you at certain points of the removal process (while in Safe Mode). Make sure to work through all the Steps in the exact order in which they are listed below. =====Please download ATF Cleaner<--Link. by Atribune. Don’t run it yet. ===== First update AVG, Spybot s&d and Ad-Aware. ===== Please reboot your computer in SafeMode by doing the following:Restart your computer.After hearing your computer beep once during startup, but before the Windows icon appears, press F8.Instead of Windows loading as normal, a menu should appear.Select the first option, to run Windows in Safe Mode.If you have trouble getting into Safe mode go here <--link to tutorial===== Still in safe mode run: ATF Double-click to run the program.Under Main choose: Select AllClick the Empty Selected button.If you use Firefox browserClick Firefox at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browserClick Opera at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program. For Technical Support, double-click the e-mail address located at the bottom of each menu.]===== Now run: Ad-Aware se. Spybot s&d AVG Please reboot. Let us know how is your computer working now?Stelios

http://www.bleepingcomputer.com/forums/t/89636/spyware-playing-music/
Relevancy 46.87%

Hello I am not sure what has caused the following problem but I Internet Norton to live Player Windows Media on Security listen radio 2005--cannot cannot listen to live radio online with Windows Media Player I did not have this problem before but I Norton Internet Security 2005--cannot listen to live radio on Windows Media Player found it has occurred since my sister did a full system scan on our Norton Internet Security program and she claims that she did not change any of the settings Whenever I try to listen now I get a message that an attempt to attack my computer has been blocked I assumed that the Norton program must think the radio website is a threat so I tried fiddling with the options on Norton such as autoblock to see if I could restrict certain quot safe quot sites Unfortunately I soon got a message that my Norton files were now corrupt so I ended up uninstalling and then reinstalling the whole Norton program Afterwards my Norton program was back to normal but I still got the same intrusion message when accessing the radio on Windows Media Player My hunches are it s probably something to do with say my personal firewall setting on the Norton program but I checked and the Windows Media Player program is apparently enabled maybe this still doesn t help and or I am incorrect As the following section shows it is funny that the intrusion message lists me as the intruder quot DORA quot So I don t know what s up and I would really appreciate any assistance with this matter as I enjoy listening to online radio I use Windows ME and I got the following intrusion message from Norton An attempt to attack your computer has been blocked Medium Risk Security Alert Intrusion RealPlayer Helix LongMeth URI BO Intruder DORA Protocol TCP Attacked IP media abc net au Attacked Port rtsp nbsp

A:Norton Internet Security 2005--cannot listen to live radio on Windows Media Player

There is an article in the Symantec KB dealing with problems accessing a specific online radio station, Live 365.

The 'solution' involved changing settings in the Ad Blocking controls of NIS or NPF, but the instructions only refer to the 2003/4 versions of those programs, not 2005. I doubt this article would help you if your problem is with all online radio stations, not just one.

Have you tried using the Symantec site, to see if you can find anything by using the Automated Support Assistant or by typing your error message into the Knowledgebase?; http://www.symantec.com/techsupp/support_options.html
 

https://forums.techguy.org/threads/norton-internet-security-2005-cannot-listen-to-live-radio-on-windows-media-player.383515/
Relevancy 46.44%

Im mad that my My Music folder is empty, how do i put my windows media player music in it? whenever i download music i just go to "Add to windows media player", how do i bring that to "My music", thx
 

A:How do i put windows media player music to >> My Music Folder

i do it manually. if you right click the name of the song in your windows media player, and find the file location, go to that location, and manually dragndrop that file into your my music folder
 

https://forums.techguy.org/threads/how-do-i-put-windows-media-player-music-to-my-music-folder.566306/
Relevancy 46.44%

i tried to drag it but it wouldt let me
 

A:How do i put windows media player music to >> My Music Folder

What version of Windows do you have and which version of WMP?

What exactly are you trying to do? Are you trying to put music files that are in My Music into the WMP library?
 

https://forums.techguy.org/threads/how-do-i-put-windows-media-player-music-to-my-music-folder.862137/
Relevancy 46.01%

Hi I visited a music lyrics website which one I cannot remember and a pop up appeared music from website Spyware lyrics telling me that I was in danger from spyware I clicked the close button and another pop-up appeared showing a download in progress As soon as that happened I held Spyware from music lyrics website down the power button on my laptop and turned the system off I'm not sure if anything was downloaded but I haven't had any pop ups since then and nothing is obviously wrong But I Spyware from music lyrics website would like to check with you to make sure that something is not hidden away I have run Sophos antivirus which came up with a false-positive spybot S amp D and AdAware which only found tracking cookies Following the instructions on your site I have run a Panda ActiveScan which found cookies and a dialler but wouldn't remove them for free - results attached and DSS results attached and below Please let me know if you see anything nasty Thank you very much ----- Deckard's System Scanner v Run by ancalagon on - - Computer is in Normal Mode -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point -- Last Restore Point s -- - - UTC - RP - Deckard's System Scanner Restore Point - - UTC - RP - Removed Ad-Aware - - UTC - RP - Installed Ad-Aware - - UTC - RP - Removed Ad-Aware - - UTC - RP - Installed Ad-Aware -- First Restore Point -- - - UTC - RP - System Checkpoint Backed up registry hives Performed disk cleanup -- HijackThis run as ancalagon exe -------------------------------------------- Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin S EvMon exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C Program Files TOSHIBA ConfigFree CFSvcs exe C WINDOWS system DVDRAMSV exe C WINDOWS system Hummingbird Connectivity Inetd inetd exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS system nvsvc exe C WINDOWS system Prot srv exe C WINDOWS system pstartSr exe C Program Files Intel Wireless Bin RegSrvc exe C Program Files Sophos Remote Management System ManagementAgentNT exe C Program Files Sophos AutoUpdate ALsvc exe C WINDOWS Explorer EXE C Program Files Sophos Remote Management System RouterNT exe C WINDOWS system svchost exe C WINDOWS system ThpSrv exe C Program Files TOSHIBA TME Tmesbs exe C Program Files TOSHIBA TME Tmesrv exe C Program Files TOSHIBA TME TMEEJME EXE C WINDOWS system THotkey exe C WINDOWS system rundll exe C Program Files Apoint K Apoint exe C Program Files TOSHIBA DualPointUtility TEDTray exe C WINDOWS AGRSMMSG exe C WINDOWS system thpsrv exe C WINDOWS system TFNF exe C Program Files TOSHIBA TOSHIBA Zooming Utility SmoothView exe C WINDOWS system TPSODDCtl exe C Program Files TOSHIBA TME TMERzCtl EXE C Program Files TOSHIBA TME TMESBS EXE C Program Files TOSHIBA Wireless Hotkey TosHKCW exe C Program Files TOSHIBA ConfigFree NDSTray exe C WINDOWS system TPSBattM exe C Program Files TOSHIBA TAudEffect TAudEff exe C Program Files TOSHIBA TOSHIBA Controls TFncKy exe C WINDOWS System DLA DLACTRLW EXE C Program Files Intel Wireless bin ZCfgSvc exe C Program Files Intel Wireless Bin ifrmewrk exe C Program Files Apoint K Apntex exe C Program Files Protector Suite QL psqltray exe C Program Files Sony Ericsson Mobile Application Launcher Application Launcher exe C WINDOWS system rundll exe C Program Files ScanSoft OmniPageSE OpwareSE exe C Program Files Pointsec Pointsec f... Read more

http://www.techsupportforum.com/forums/f284/spyware-from-music-lyrics-website-254819.html
Relevancy 43.86%

Does anyone know how to sync music with the Windows 8 music app, import playlists or such? It seems very user unfriendly...

A:How to sync music with the Windows 8 Music App?

Hello Chumly248,

I can't tell you at the moment, but I will look into it as soon as I get home...

What are you trying to synch with?

http://www.techsupportforum.com/forums/f320/how-to-sync-music-with-the-windows-8-music-app-675434.html
Relevancy 43.43%

Hi all,

I'm encountering an issue that has me stumped. Every week or two i'll get an error from all my browsers (IE8, Firefox 3.6, Chrome 4) in Windows 7 x64 saying that Gmail's security certificate cannot be trusted:

Even if I click through the warnings I can't seem to login (very slow). And it's not just Gmail, the issue affects all sites that use https.

The wierd thing is, I'll try accessing Gmail (https) from Ubuntu 9.10 (I'm dual booting) and I won't get the error in Firefox 3.6 and access is just as speedy as usual. Also, if I access Gmail from my other laptop running XP SP3 there are also no warnings.

Does anyone have any idea what's going on?!

Thanks!!
Gareth

A:SSL Warnings for Gmail in Windows 7 only

Check the date and time on your computer. Make sure they are correct, then try accessing those sites again.

http://www.sevenforums.com/system-security/79945-ssl-warnings-gmail-windows-7-only.html
Relevancy 43.43%

Hellow all you experts.

I just discovered while rummaging around Administrative Event area and found tons of errors, warnings plus others. The computer appears to work just find but this area still shows a lot of errors net.tcp, email and web sites work fine, I don't use an internal modem, my Internet access is cable with Cox.

Does anyone know of a Microsoft utility that can be used to fix these areas. I never had any problem with XP Pro in this same area was able to correct the errors, Windows 7 Pro does not appear as helpffull.

A:Windows 7 pro even errors-warnings

Would have to see the errors to give some direction here.
If you follow these steps here the file you are left with will contain a copy of your error log for us.
http://www.sevenforums.com/crashes-d...tructions.html

http://www.sevenforums.com/general-discussion/179695-windows-7-pro-even-errors-warnings.html
Relevancy 43%

We cleaned several Trojans and other viruses of the Server using the Kaspersky rescue disk The server is still very slow and subsequent scan reveal no viruses but we stiil get the JS SecurityFraud warning from the Symantec AV installed I used rkill and then ran MBAM and found a couple of items which were cleaned as well I ve run Blacklight and GMer with no strange results that I can see Here is my HJT log Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows SP WinNT MSIE Internet Explorer v Boot Warnings getting Server Windows JS.SecurityFraud keeps mode NormalRunning processes Windows Server keeps getting JS.SecurityFraud Warnings C Documents and Settings fwiadmin WINDOWS System smss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC Program Files Symantec AntiVirus Smc exeC WINDOWS System svchost exeC Program Files Common Files Symantec Shared ccSvcHst exeC WINDOWS system spoolsv exeC WINDOWS system dllhost exeC Program Files Common Files Acronis Schedule schedul exeC Program Files IBM ServeRAID Manager aqagent exeC WINDOWS System svchost exeC Program Files Java jre bin jqs exeC Program Files IBM ServeRAID Manager miniwinagent exeC WINDOWS System svchost exeC WINDOWS System svchost exeC Program Files Common Files Intuit QuickBooks QBCFMonitorService exeC Program Files IBM ServeRAID Manager RaidServ exeC Program Files Symantec AntiVirus Rtvscan exeC WINDOWS system lserver exeC WINDOWS System svchost exeC WINDOWS system dllhost exeC WINDOWS System svchost exeC WINDOWS LTSvc LTSvcMon exeC WINDOWS LTSvc LTSVC exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system winlogon exeC WINDOWS system rdpclip exeC WINDOWS Explorer EXEC Program Files Symantec AntiVirus SmcGui exeC Program Files Adobe Reader Reader Reader sl exeC Program Files Common Files Acronis Schedule schedhlp exeC Program Files Common Files Symantec Shared ccApp exeC WINDOWS system ctfmon exeC WINDOWS LTSVC LTTray exeC Program Files Trend Micro HijackThis HijackThis exeR - HKCU Software Microsoft Internet Explorer Main Default Page URL res shdoclc dll softAdmin htmR - HKCU Software Microsoft Internet Explorer Main Start Page res shdoclc dll softAdmin htmR - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Local Page C WINDOWS system blank htmR - HKCU Software Microsoft Internet Connection Wizard ShellNext http adobe com F - REG system ini UserInit C WINDOWS system userinit exe O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dllO - BHO Java Plug-In SSV Helper - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dllO - BHO Java Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files Java jre bin jp ssv dllO - BHO JQSIEStartDetectorImpl - E E F - CE- C -BC -EABFE F C - C Program Files Java jre lib deploy jqs ie jqs plugin dllO - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adobe Reader Reader Reader sl exe quot O - HKLM Run Acronis Scheduler Service quot C Program Files Common Files Acronis Schedule schedhlp exe quot O - HKLM Run Intuit SyncManager C Program Files Common Files Intuit Sync IntuitSyncManager exe startupO - HKLM Run ccApp quot C Program Files Common Files Symantec Shared ccApp exe quot O - HKCU ... Read more

A:Windows Server keeps getting JS.SecurityFraud Warnings

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HEREWe also need a new log from the GMER anti-rootkit scanner. Please first disable any CD emulation programs using the steps found in this topic:Why we request you disable CD Emulation when receiving Malware Removal AdviceThen create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:How to create a GMER logElle

http://www.bleepingcomputer.com/forums/t/313168/windows-server-keeps-getting-jssecurityfraud-warnings/
Relevancy 43%

For the last week every time I start IE fake windows warning messages and ads keep poping up When is not something wanting me to Fake Security Warnings Windows buy a product or saying I wan something is quot Windows quot saying Your computer is at high risk of malware adware and spyware Scan found infections Sometimes is a gray rectangle saying Your computer should be scan imediately for malware adware and spyware Then it gives you the options Start and Cancel when I click cancel a window opens saying page can't be found this may be cause by malware to learn how to solve this problem click here I already tried smitfraud fix but after doing everything and returning to regular start up the problem is still there Every day spyware doctor finds Fake Windows Security Warnings more threats and infections Here are my logs Deckard's System Fake Windows Security Warnings Scanner v Run by Yessi on - - Computer is Fake Windows Security Warnings in Normal Mode ---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point -- Last Restore Point s -- - - UTC - RP - Deckard's System Scanner Restore Point - - UTC - RP - System Checkpoint - - UTC - RP - System Checkpoint - - UTC - RP - Software Distribution Service - - UTC - RP - Software Distribution Service -- First Restore Point -- - - UTC - RP - System CheckpointBacked up registry hives Performed disk cleanup Total Physical Memory MiB MiB recommended -- HijackThis run as Yessi exe -----------------------------------------------logfile has no content running clone -- HijackThis Clone ------------------------------------------------------------Emulating logfile of Trend Micro HijackThis v Scan saved at - - Platform Windows XP Service Pack MSIE Internet Explorer Boot mode NormalRunning processes C WINDOWS system smss exeC WINDOWS system csrss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system ati evxx exeC WINDOWS system svchost exeC WINDOWS system svchost exeC WINDOWS system svchost exeC WINDOWS system svchost exeC WINDOWS system svchost exeC WINDOWS system WLTRYSVC EXEC WINDOWS system BCMWLTRY EXEC WINDOWS system spoolsv exeC WINDOWS system ati evxx exeC WINDOWS explorer exeC Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exeC Program Files Common Files New Boundary PrismXL PRISMXL SYSC Program Files Spyware Doctor svcntaux exeC Program Files Spyware Doctor swdsvc exeC Program Files Synaptics SynTP SynTPLpr exeC Program Files Synaptics SynTP SynTPEnh exeC Program Files ATI Technologies ATI Control Panel atiptaxx exeC WINDOWS system WLTRAY EXEC Program Files Spyware Doctor SDTrayApp exeC Program Files iTunes iTunesHelper exeC Program Files HP HP Software Update hpwuSchd exeC Program Files MyWebSearch bar bin M SRCHMN EXEC Program Files MyWebSearch bar bin MWSOEMON EXEC Program Files Java jre bin jusched exeC Program Files QuickTime QTTask exeC Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exeC WINDOWS system ctfmon exeC Program Files The Weather Channel FW Desktop Weather DesktopWeather exeC Program Files Microsoft ActiveSync wcescomm exeC Documents and Settings Yessi Local Settings Application Data gmjtaz exeC Program Files HP Digital Imaging bin hpqtra exeC WINDOWS system svchost exeC Program Files Microsoft ActiveSync rapimgr exeC Program Files HP Digital Imaging bin hpqste exeC Program Files iPod bin iPodService exeC WINDOWS system alg exeC Program Files HP Digital Imaging Product Assistant bin hprblog exeC Program Files Adobe Acrobat Reader AcroRd exeC Program Files Internet Explorer iexplore exeC Documents and Settings Yessi Desktop dss exeC WINDOWS system wbem wmiprvse exeR - HKCU Software Microsoft Internet Explorer Main Start Page http www yahoo com R - HKCU Software Microsoft Internet Explorer SearchURL Default http ho... Read more

A:Fake Windows Security Warnings

_________________________________Welcome to the Forums. The fixes we will use are specific to your problems and should only be used for this issue on this machine. Please only use this topic to reply to. Do not start another thread. If any other issues arise let me know. The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear. So lets do this to the end!Save and quit any work your doing before beginning the fix.All hijackthis logs I ask for should be done in normal mode ( not safe mode)These logs should be done last after you have followed my instructions in the previous post.Please if you decide to seek help at another forum let us know. There is a shortage of helpers and tying 2 of us up is a waste of time. If you have any questions about any advice given here please STOP and ask!_________________________________________I do not see an active anti virus program running. I see part of Nortons Internet security present but not actually running.Can you explain why ?? Did you uninstall Nortons ?___________________________________DISABLE Spyware DoctorIt is a good program, but ... it may hinder the removal of some HijackThis entries. You can re-enable it after you're clean.From within Spyware Doctor, click the "OnGuard" button on the left side. Uncheck "Activate OnGuard". ___________________________________Reconfigure Windows XP to show hidden files::Click Start. My Computer. Select the Tools menu Folder Options. Select the View Tab. Under the Hidden files and folders heading select "Show hidden files and folders". Uncheck the "Hide protected operating system files (recommended)" option. Uncheck the "Hide file extensions for known file types" option.Click Yes to confirm. Click OK.________________________________Go to Start/control panel/add remove programs ; And Uninstall My WEB search _____________________________Task Manager I would like you to open the task manager by pressing simeltaniously Ctrl+Shift+Esc or cntrl /alt/delete then go to the processes tab and end the following if present:by: right clicking on and choosing end process. gmjtaz.exe ___________________________________Search for and remove Now I want you to search for and delete the following folder and all it's contents if present. If you need help finding them.Click start /search/ all files and folders/ look for More advanced options. once in there select the first 3 boxes.Please just remove the files/folders I listed in BOLDC:\Documents and Settings\Yessi\Local Settings\Application Data\gmjtaz.exe______________________________RUN HJTHJTRun hijackthis and choose scan only and place a check by the following lines if present.Close all other windows and browsers except HJT before clicking on Fix CheckedO2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLLO2 - BHO: TBSB09614 - {32004286-1E03-4532-9C8F-DC0ED187F793} - C:\Program Files\freeviewmovies\freeviewmovies.dll (file missing)O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLLO4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /wO4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exeO4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exeO4 - HKCU\..\Run: [gmjtaz] c:\documents and settings\yessi\local settings\application data\gmjtaz.exe gmjtazO8 - Extra context menu... Read more

http://www.bleepingcomputer.com/forums/t/144199/fake-windows-security-warnings/
Relevancy 43%

Greets I m getting Windows security warnings and I can t tell if they are legit or a piece of spyway hoping I ll click on it Either way something nefarius is going on Any help would be apreciated Logfile of HijackThis v Scan saved at AM on Platform Windows XP WinNT MSIE Internet Explorer v Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS System Ati evxx exe C Security Solved: Windows warnings WINDOWS system svchost exe Solved: Windows Security warnings C WINDOWS System svchost exe C WINDOWS System svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C Program Files ewido security suite ewidoctrl exe c PROGRA mcafee com vso mcvsrte exe C PROGRA McAfee com PERSON MPFSERVICE exe C WINDOWS System svchost exe C WINDOWS system Ati evxx exe C WINDOWS Explorer EXE c PROGRA mcafee com vso mcshield exe C PROGRA mcafee com vso mcvsshld exe C PROGRA mcafee com agent mcagent exe C Program Files Java j re bin jusched exe C PROGRA McAfee com PERSON MpfTray exe C Program Files ATI Technologies ATI Control Panel atiptaxx exe C Program Files QuickTime qttask exe C Program Files Messenger msmsgs exe C Program Files AIM aim exe C program files valve steam steam exe c progra mcafee com vso mcvsescn exe C WINDOWS System wuauclt exe C PROGRA McAfee com PERSON MpfAgent exe c progra mcafee com vso mcvsftsn exe C Program Files Mozilla Firefox firefox exe C Program Files Hijackthis HijackThis exe O - Hosts localhost O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar en -big dll O - Toolbar amp Radio - E - F- D - E- A C - C WINDOWS System msdxm ocx O - Toolbar McAfee VirusScan - BA B -B - c -B - F F - c progra mcafee com vso mcvsshl dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar en -big dll O - HKLM Run VSOCheckTask quot c PROGRA mcafee com vso mcmnhdlr exe quot checktask O - HKLM Run VirusScan Online quot c PROGRA mcafee com vso mcvsshld exe quot O - HKLM Run MCAgentExe C PROGRA mcafee com agent mcagent exe O - HKLM Run MCUpdateExe C PROGRA mcafee com agent McUpdate exe O - HKLM Run SunJavaUpdateSched C Program Files Java j re bin jusched exe O - HKLM Run MPFExe C PROGRA McAfee com PERSON MpfTray exe O - HKLM Run ATIPTA C Program Files ATI Technologies ATI Control Panel atiptaxx exe O - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottime O - HKCU Run MSMSGS quot C Program Files Messenger msmsgs exe quot background O - HKCU Run AIM C Program Files AIM aim exe -cnetwait odl O - HKCU Run Steam quot c program files valve steam steam exe quot -silent O - Startup PowerReg Scheduler V exe O - Startup PowerReg Scheduler exe O - Global Startup Adobe Reader Speed Launch lnk C Program Files Adobe Acrobat Reader reader sl exe O - Global Startup Microsoft Office lnk C Program Files Microsoft Office Office OSA EXE O - Extra context menu item E amp xport to Microsoft Excel - res C PROGRA MICROS Office EXCEL EXE O - Extra button no name - B E C - FCB- CF-AAA - C - C Program Files Java j re bin npjpi dll O - Extra Tools menuitem Sun Java Console - B E C - FCB- CF-AAA - C - C Program Files Java j re bin npjpi dll O - Extra button AIM - AC E - - d -BC D- B D A DE - C Program Files AIM aim exe O - DPF F - - -A - DE D C Ofoto Upload Manager Class - http www kodakgallery com downloads BUM BUM WIN IE axofupld cab O - Service Ati HotKey Poller - ATI Technologies Inc - C WINDOWS System Ati evxx exe O - Service ATI Smart - Unknown owner - C WINDOWS system ati sgag exe O - Service ewido security suite control - ewido networks - C Program Files ewido security suite ewidoctrl exe O - Service McAfee com McShield McShield - Unknown owner - c PROGRA mcafee com ... Read more

Relevancy 43%

Last night I was warnings ID Event Windows Solved: having some trouble with something Solved: Windows Event ID warnings I noticed going on in Event Viewer This afternoon I booted up and figured I d take a look to see if my problem was solved looks like it is However I also noticed that I ve been getting warnings for Solved: Windows Event ID warnings some other problems that I m not having any luck learning about via the Internet Over the last days I ve had warnings of ID and warnings of ID It looks like they both happen at the same time and so far it looks like they happen during boot and shut down Probably not a big deal but I figured I d check to see what you think ID info tid D The Application Virtualization Client Core initialized correctly Installed Product Version Install Path C Program Files x Microsoft Application Virtualization Client Global Data Directory C ProgramData Microsoft Application Virtualization Client Machine Name computer name Operating System Windows -bit Service Pack Build OSD Command ID info tid D -------------------------------------------------------- Initialized client log C ProgramData Microsoft Application Virtualization Client sftlog txt That s it Any ideas as to what this is Thanks EDIT Actually they re not at the same time nbsp

Relevancy 43%

edit after posting I just read the site rules my apologies for the thread title I downloaded something that installed a program which has hijacked my computer The desktop image is a biohazard symbol in red with text underneath quot YOUR PRIVACY IS IN DANGER DOWNLOAD PRIVACY PROTECTION SOFTWARE NOW quot I m also receiving system alerts which I suspect are false because they attempt to direct me to a website disguised as Microsoft so I can download spyware software I also can t access task manager to shut anything down Here is a HJT log I just made Logfile of Trend Micro HijackThis v Scan saved at VIRUS ALERT on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS System svchost Warnings... False Windows Security exe C WINDOWS system svchost exe C WINDOWS system Ati evxx exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe C PROGRA McAfee MSC mcmscsvc exe c PROGRA COMMON mcafee mna mcnasvc exe c PROGRA False Windows Security Warnings... COMMON mcafee mcproxy mcproxy exe C PROGRA McAfee VIRUSS mcshield exe C Program Files McAfee MPF MPFSrv exe C Program Files Viewpoint Common ViewpointService exe c PROGRA mcafee com agent mcagent exe C WINDOWS Explorer EXE C WINDOWS system ctfmon exe C Program Files Microsoft Office Office GrooveMonitor exe C PROGRA LEXMAR ACMonitor X exe C PROGRA LEXMAR AcBtnMgr X exe C Program Files Java jre bin jusched exe C Program Files Hawking Common RaUI exe C Program Files Common Files Sonic Shared CineTray exe C Program Files McAfee MSC mcshell exe C PROGRA McAfee VIRUSS mcsysmon exe C PROGRA McAfee VIRUSS mcods exe c PROGRA mcafee VIRUSS mcvsshld exe C Program Files Trend Micro HijackThis HijackThis exe C Program Files Internet Explorer iexplore exe R - HKCU Software Microsoft Internet Explorer Main Start Page http softwarereferral com jump php wmid amp mid MjI Ojg amp lid R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - URLSearchHook AOLSearchHook Class - EB EA-E BE- CFD- F F-C A C EAFA - C Program Files AIM Search AOLSearch dll O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO AOL Search Enhancement - EB EA-E BE- CFD- F F-C A C EAFA - C Program Files AIM Search AOLSearch dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C PROGRA MICROS Office GRA E DLL O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO scriptproxy - DB D A - - E -B D- F C - C Program Files McAfee VirusScan scriptsn dll O - BHO QXK Olive - AA -C - F- F-C A - C WINDOWS wnlmdakqkpm dll O - BHO FlashFXP Helper for Internet Explorer - E A B-D - -AD - B EE - C PROGRA FlashFXP IEFlash dll O - Toolbar bgrqfetx - B A C- DD- B -B -D A A D - C WINDOWS bgrqfetx dll O - HKLM Run GrooveMonitor quot C Program Files Microsoft Office Office GrooveMonitor exe quot O - HKLM Run googletalk C Program Files Google Google Talk googletalk exe autostart O - HKLM Run mcagent exe C Program Files McAfee com Agent mcagent exe runkey O - HKLM Run Lexmark X Button Monitor C PROGRA LEXMAR ACMonitor X exe O - HKLM Run Lexmark X Button Manager C PROGRA LEXMAR AcBtnMgr X exe O - HKLM Run PrinTray C WINDOWS System spool DRIVERS W X printray exe O - HKLM Run SunJavaUpdateSched quot C Program Files Java jre bin jusched exe quot O - HKLM Run AppleSyncNotifier C Program Files Common Files Apple Mobile Device Support bin AppleSyncNotifier exe O - HKLM Run WinA exe C Windows system WinA exe O - HKLM Run WinA exe C Windows system WinA exe O - HKLM Run WinAA exe C Windows system WinAA exe O - HKLM Run Wi... Read more

Relevancy 43%

When I turn off automatic updates in win xp, I get a popup warning about fixing it. I don't want to fix it, I want the warning to go away.
Anybody know how to turn off the warning?
 

A:windows xp update notifier warnings

Yes

In the control panel, click on security centre
then.....
change the way security alerts me, on the far left
hand side

uncheck updates..

done

joan
 

https://forums.techguy.org/threads/windows-xp-update-notifier-warnings.756329/
Relevancy 43%

I have cut and pasted this from another post because it is the same problem I was not however able to reply to the thread in order to continue the IE/ Malware Disgused as Warnings Windows help Here is the text I have the yellow triangle with the in it with bubles that pop up from it stating System performance monitor Warning Security Alert Spyware Malware Disgused as IE/ Windows Warnings found System Alert email protected System Alert Malware threats Security Alert email protected And these all rotate in that order It ll pop up and stay up for a short but then goes aways a bit later the next one pops up I already downloadig hi-jack this and have posted my log what s next Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system spoolsv exe C WINDOWS system PRISMSVR EXE C Program Files Java j re bin jusched exe C Program Files Intel Intel Matrix Storage Manager iaanotif exe C Program Files Intel Modem Event Monitor IntelMEM exe C WINDOWS system Rundll exe C Program Files CyberLink PowerDVD DVDLauncher exe C WINDOWS system dla tfswctrl exe C Program Files Common Files InstallShield UpdateService issch exe C Program Files Dell Media Experience DMXLauncher exe C Program Files iTunes iTunesHelper exe C PROGRA McAfee SPAMKI MskAgent exe C Program Files Dell Photo AIO Printer dlbtbmgr exe C Program Files DAEMON Tools daemon exe C WINDOWS System spool DRIVERS W X fpdisp a exe C Program Files HP hpcoretech hpcmpmgr exe C Program Files Common Files Real Update OB realsched exe C Program Files Common Files Ahead Lib NMBgMonitor exe C Program Files Microsoft ActiveSync wcescomm exe C Program Files Dell Photo AIO Printer dlbtbmon exe C Program Files Dell Wireless PRISMCFG exe C WINDOWS system CTsvcCDA EXE C PROGRA MI AA rapimgr exe C Program Files Intel Intel Matrix Storage Manager iaantmon exe C WINDOWS system libusbd-nt exe C PROGRA McAfee MSC mcmscsvc exe c program files common files mcafee mna mcnasvc exe C PROGRA McAfee MSC mcpromgr exe C WINDOWS system nvsvc exe C Program Files Comcast Desktop Doctor bin sprtsvc exe C WINDOWS system svchost exe C WINDOWS system MsPMSPSv exe C Program Files iPod bin iPodService exe C PROGRA mcafee com agent mcagent exe C WINDOWS system wscntfy exe c program files mcafee msc mcuimgr exe C Program Files Mozilla Firefox firefox exe C WINDOWS system wkrmggxe exe C WINDOWS explorer exe C Program Files Internet Explorer iexplore exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www dell me com myway R - HKCU Software Microsoft Internet Explorer Main Start Page http www adelphia net R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www dell me com myway R - HKLM Software Microsoft Internet Explorer Main Start Page http www dell me com myway R - HKCU Software Microsoft Internet Explorer Main Local Page O - Toolbar Protection Bar - d ac e- f- ed - -b c a - no file O - Toolbar Security Toolbar - A AE -FBED- -A BF- AF - C WINDOWS system ndcpzxye dll O - HKLM Run SunJavaUpdateSched C Program Files Java j re bin jusched exe O - HKLM Run IAAnotif C Program Files Intel Intel Matrix Storage Manager iaanotif exe O - HKLM Run IntelMeM C Program Files Intel Modem Event Monitor IntelMEM exe O - HKLM Run CTSysVol C Program Files Creative Sound Blaster Live -bit Surround Mixer CTSysVol exe r O - HKLM Run P Helper Rundll P dll P Helper O - HKLM Run UpdReg C WINDOWS UpdReg EXE O - HKLM Run DVDLauncher quot C Program Files CyberLink PowerDVD DVDLauncher exe quot O - HKLM Run dla C WINDOWS system dla tfswctrl exe O - HKLM Run ISUSPM Startup C PROGRA COMMON INSTAL UPDATE ISUSPM exe -startup O - HKLM Run ISUSScheduler quot C ... Read more

Relevancy 42.57%

I am having problem I view a pop up frequently quot Error Microsoft Windows Security Warnings quot which states that I have got spyware and my ports have been Warnings Windows Microsoft #317 Security Error hijacked My homepage changes to quot http www hotoffers info quot ------------------------------------------ Logfile of HijackThis v Scan saved at AM on Platform Windows SP WinNT MSIE Internet Explorer v Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system spoolsv exe C WINDOWS system drivers CDAC BA EXE C PROGRA SYMANT SYMANT DefWatch exe C WINDOWS System svchost exe C PROGRA SYMANT SYMANT Rtvscan exe C WINDOWS system pctspk exe C WINDOWS system regsvc exe C WINDOWS system MSTask exe C WINDOWS System WBEM WinMgmt Error #317 Microsoft Windows Security Warnings exe C WINDOWS system Error #317 Microsoft Windows Security Warnings svchost exe C WINDOWS Explorer EXE C PROGRA SYMANT SYMANT vptray exe C Program Files VIAudioi SBADeck ADeck exe C WINDOWS system slserver exe C Program Files Free Download Manager fdm exe C Program Files RConnect RConnectDialer exe C Program Files Microsoft Office Office OUTLOOK EXE C Program Files Microsoft Office Office WINWORD EXE C Program Files YAHOO MESSENGER YPager exe C Downloads Software HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL about blank R - HKCU Software Microsoft Internet Explorer Main Start Page http www hotoffers info R - HKLM Software Microsoft Internet Explorer Main Local Page C WINDOWS SYSTEM blank htm F - REG system ini UserInit userinit exe userinit exe N - Netscape user pref quot browser search defaultengine quot quot engine C A CPROGRAM FILES CNETSCAPE CNETSCAPE Csearchplugins CSBWeb src quot C Documents and Settings SK Application Data Mozilla Profiles default e queh slt prefs js O - Hosts ibank barclays co uk O - Hosts online-business lloydstsb co uk O - Hosts online lloydstsb co uk O - Hosts www halifax-online co uk O - Hosts www ukpersonal hsbc co uk O - Hosts www nwolb com O - Hosts banesnet banesto es O - Hosts extranet banesto es O - Hosts earthlink net O - Hosts www earthlink net O - Hosts go com O - Hosts www go com O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C PROGRAM FILES ADOBE ACROBAT READER ACTIVEX ACROIEHELPER DLL O - BHO PCTools Site Guard - C B A - DB - A -A CB-D BBFEB - C PROGRA SPYWAR tools iesdsg dll O - BHO WgBHO Class - E D-B - E -B F - AA E BA - C Program Files Free Download Manager iefdm dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - BHO PCTools Browser Monitor - B A D D- - C -A - DF C AC - C PROGRA SPYWAR tools iesdpb dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - Toolbar amp Radio - E - F- D - E- A C - C WINDOWS system msdxm ocx O - HKLM Run SystemTray SysTray Exe O - HKLM Run Synchronization Manager mobsync exe logon O - HKLM Run VTPreset VTPreset exe O - HKLM Run Microsoft IIS C WINDOWS system syshost exe O - HKLM Run CountrySelection pctptt exe O - HKLM Run NAV Auto Updates slserver exe O - HKLM Run mIANi C windows temp mIANi exe O - HKLM Run vptray C PROGRA SYMANT SYMANT vptray exe O - HKLM Run AudioDeck C Program Files VIAudioi SBADeck ADeck exe O - HKLM RunServices NAV Auto Updates slserver exe O - HKCU Run NAV Auto Updates slserver exe O - HKCU Run Free Download Manager C Program Files Free Download Manager fdm exe -autorun O - Startup Microsoft Office lnk C Program Files Microsoft Office Office OSA EXE O - Global Startup Microsoft Office lnk C Program Files Microsoft Office Office OSA EXE O - Extra context menu item amp Google Search - res C PROGRAM FILES GOOGLE GOOGLETOOLBAR DLL cmsearch html O - Extra context menu item Backward Links - res C PROGRAM FILES GOOGLE GOOGLETOOLBAR DLL cmbacklinks html O - Extra context menu item Cached Snapshot of Page - res C PROG... Read more

Relevancy 42.57%

HijackThis running as admin in win Home 7 hijackthis wont they O15 disappear windows - and warnings tells me O - windows 7 and hijackthis O15 warnings - they wont disappear ProtocolDefaults 'http' protocol is in My Computer Zone should be Internet Zone HKLM O - ProtocolDefaults 'https' windows 7 and hijackthis O15 warnings - they wont disappear protocol is in My Computer Zone should be Internet Zone HKLM I have no other issues They will not fix or delete even in safe mode After a google I find nothing except for one windows 7 and hijackthis O15 warnings - they wont disappear forum from a few years back suggesting to a user with the same problem to delete all registry entries within HKEYCURRENTUSER Software Microsoft Windows CurrentVersion Internet Settings ZoneMap ProtocolDefaults Browsing my windows registry I have found that ProtocolDefaults does not exist within ZoneMap in this location Instead I have found 'ProtocolDefault' entry in other locations in win - HKEY LOCAL MACHINE SOFTWARE Microsoft Windows CurrentVersion Internet Settings ZoneMap ProtocolDefaults HKEY USERS DEFAULT Software Microsoft Windows CurrentVersion Internet Settings ZoneMap ProtocolDefaults HKEY USERS S- - - Software Microsoft Windows CurrentVersion Internet Settings ZoneMap ProtocolDefaults For the above http and https are set to which the microsoft website states as being in the correct 'internet zone' So is hijackthis out of date and telling me incorrect info that http is in the my computer zone simply because it cant find the ProtocolDefault values for HKEYCURRENTUSER as it expects me to be using another version of windows which registry may differ or am I actually missing these ProtocolDefault settings within HKEYCURRENTUSER Thanks for any help ps nothing else within the hijackthis results is suspect all are references to installed programs eg unlocker avast O microcard etc

http://www.bleepingcomputer.com/forums/t/492779/windows-7-and-hijackthis-o15-warnings-they-wont-disappear/
Relevancy 42.57%

Hello I have followed Center Security Warnings Windows Fake your advice and run ad-adware stinger spybot etc My problem is this I keep getting pop-ups and ie windows opening giving me Windows Security Center system warningsthat I know are bogus There is also something on my desktop that does not go away that says spyware is detected At one point my task manager had been disabled not sure yet if it still is I'm sure I have a virus or malware of some kind and I need your help I have run Hijack this and attached the log below ANy help you can give Fake Windows Security Center Warnings is appreciated Thanks Coach BobLogfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C WINDOWS System smss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system Ati evxx exeC WINDOWS system svchost exeC WINDOWS System svchost exeC Program Files Lavasoft Ad-Aware aawservice exeC WINDOWS system Fake Windows Security Center Warnings spoolsv exeC WINDOWS system sbwltbxa exeC WINDOWS Explorer EXEC PROGRA COMMON AOL ACS AOLacsd exeC WINDOWS system CTsvcCDA EXEC WINDOWS eHome ehRecvr exeC WINDOWS eHome ehSched exeC Program Files Common Files AOL Loader aolload exeC WINDOWS ehome ehtray exeC Program Files Microsoft SQL Server MSSQL MICROSOFTBCM Binn Fake Windows Security Center Warnings sqlservr exeC Program Files Java jre bin jusched exeC Program Files Creative Sound Blaster Live -bit Surround Mixer CTSysVol exeC WINDOWS system Rundll exeC Program Files CyberLink PowerDVD DVDLauncher exeC Program Files Musicmatch Musicmatch Jukebox mm tray exeC Program Files Musicmatch Musicmatch Jukebox mmtask exeC Program Files Real RealPlayer RealPlay exeC WINDOWS system PSIService exeC Program Files Common Files InstallShield UpdateService issch exeC Program Files Common Files AOL ee AOLSoftware exeC WINDOWS system dla tfswctrl exeC Program Files Trend Micro Internet Security UfSeAgnt exeC Program Files DellSupport DSAgnt exeC WINDOWS system ctfmon exeC Program Files Dell Support Center bin sprtcmd exeC PROGRA SMANTE wuauboot exeC Program Files Spybot - Search amp Destroy TeaTimer exeC Program Files America Online aoltray exeC Program Files Dell Support Center bin sprtsvc exeC Program Files Bat X Bat exeC WINDOWS wanmpsvc exeC WINDOWS system MsPMSPSv exeC Program Files Trend Micro BM TMBMSRV exeC WINDOWS system dllhost exeC WINDOWS eHome ehmsas exeC WINDOWS System svchost exeC PROGRA TRENDM INTERN TmPfw exeC Program Files Trend Micro Internet Security TmProxy exeC Program Files Trend Micro Internet Security SfCtlCom exeC Program Files Java jre bin jucheck exeC Program Files Internet Explorer iexplore exeC Program Files Trend Micro HijackThis HijackThis exeF - REG system ini UserInit C WINDOWS system userinit exe C WINDOWS system sbwltbxa exe O - BHO no name - - - dd -be f- d - no file O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dllO - BHO no name - ace- - c -a ff-c d - no file O - BHO no name - c c-e - a -a ac-b a e d - no file O - BHO no name - e f -eec - a -add -cd f c - no file O - BHO no name - e bd f- b d- e- c -ce eb a d - no file O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C Program Files Spybot - Search amp Destroy SDHelper dllO - BHO no name - cd e- - a -b c - c e fbab - no file O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS system dla tfswshx dllO - BHO no name - dafd - b - c e-bd - ca b - no file O - BHO no name - fa a-c a - - c - ae ab - no file O - BHO no name - cc -b - fe - b- a e e a - no file O - BHO BatBHO - F B-C - -A AA- EC EC - C Program Files Bat Bat dllO - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dllO - BHO no name - aea - d d- d - dc- f a f - no file O - BHO no name - a f- efa- - - f - no file O - BHO no name - c b f - f - -a b - d e - no file O - BHO no nam... Read more

A:Fake Windows Security Center Warnings

Hi,welcome to BleepingCompuetr. My name is Rosty and I'm going to help you with your log.Please disable Teatimer as it may interfere with the fix.First:Right click Spybot in the System Tray (looks like a calendar with a padlock symbol)Choose Exit Spybot S&D ResidentSecond:Open Spybot S&DClick Mode, check Advanced ModeGo To Left Panel, Click Tools, then also in left panel, click ResidentIf your firewall raises a question, say OKUncheck the box labeled Resident Tea-Timer and OK any prompts.Use File, Exit to terminate SpybotReboot your machine for the changes to take effect. Download and Install SDFixDownload SDFix and save it to your Desktop.Double click SDFix.exe and it will extract the files to %systemdrive%(Drive that contains the Windows Directory, typically C:\SDFix)Please open HijackThis, click do a scan only and place a check next to the following entries:F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sbwltbxa.exe,O2 - BHO: (no name) - {00000250-0320-4dd4-be4f-7566d2314352} - (no file)O2 - BHO: (no name) - {13197ace-6851-45c3-a7ff-c281324d5489} - (no file)O2 - BHO: (no name) - {15651c7c-e812-44a2-a9ac-b467a2233e7d} - (no file)O2 - BHO: (no name) - {4e1075f4-eec4-4a86-add7-cd5f52858c31} - (no file)O2 - BHO: (no name) - {4e7bd74f-2b8d-469e-92c6-ce7eb590a94d} - (no file)O2 - BHO: (no name) - {5929cd6e-2062-44a4-b2c5-2c7e78fbab38} - (no file)O2 - BHO: (no name) - {5dafd089-24b1-4c5e-bd42-8ca72550717b} - (no file)O2 - BHO: (no name) - {5fa6752a-c4a0-4222-88c2-928ae5ab4966} - (no file)O2 - BHO: (no name) - {622cc208-b014-4fe0-801b-874a5e5e403a} - (no file)O2 - BHO: BatBHO - {63F7460B-C831-4142-A4AA-5EC303EC4343} - C:\Program Files\Bat\Bat.dllO2 - BHO: (no name) - {8674aea0-9d3d-11d9-99dc-00600f9a01f1} - (no file)O2 - BHO: (no name) - {965a592f-8efa-4250-8630-7960230792f1} - (no file)O2 - BHO: (no name) - {9c5b2f29-1f46-4639-a6b4-828942301d3e} - (no file)O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-717765728274} - (no file)O2 - BHO: (no name) - {D0A8A3D5-B353-4E17-98B9-744F06DA4F7D} - (no file)O2 - BHO: (no name) - {fc3a74e5-f281-4f10-ae1e-733078684f3c} - (no file)O2 - BHO: (no name) - {ffff0001-0002-101a-a3c9-08002b2f49fb} - (no file)O4 - HKLM\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exeO4 - HKLM\..\Run: [autoload] C:\Documents and Settings\LocalService\Local Settings\Application Data\cftmon.exeO4 - HKCU\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exeO20 - Winlogon Notify: vturo - vturo.dll (file missing)Close all other windows and browsers, except HijackThis, and click Fix Chjecked. Close HijackThis. Boot into Safe ModeReboot your computer in Safe Mode.If the computer is running, shut down Windows, and then turn off the power.Wait 30 seconds, and then turn the computer on.Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.Ensure that the Safe Mode option is selected.Press Enter. The computer then begins to start in Safe mode.Login on your usual account. Run SDFix Open the extracted SDFix folder and double click RunThis.bat to start the script. Type Y to begin the cleanup process. It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot. Press any Key and it will restart the PC. When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons. Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to Clipboard ready for posting back on the forum). Finally paste the contents of the Report.txt back on the forum ... Read more

http://www.bleepingcomputer.com/forums/t/137735/fake-windows-security-center-warnings/
Relevancy 42.57%

Dear Tech Guy of Have Warnings, Can't Rid Need Get Security Windows System Hijack etc. Log, Help, I m not sure if you can help but I could sure use it if you can I went on a stupid website and by mistake clicked a download button that I shouldn t of clicked and now my pc keeps getting recurring pop-up messages The first one states quot Critical System Warning The second one shows a picture of my supposed Windows Secruity Center It shows that my Need Help, Have Hijack Log, Can't Get Rid of Windows Security System Warnings, etc. virus protection is off and suggests downloading spybot anti-vrius and the spyshredder which are probably infected with viruses When I go to Need Help, Have Hijack Log, Can't Get Rid of Windows Security System Warnings, etc. my control panel I see that I do have my firewall automatic updates and virus protection on In fact it states that I have avast as my virus protection software The third one states I have avast and I had downloaded some trojan cleaners But I still keep getting these messages and my system seems to be running much slower than usual Also everytime I run a scan Avast keeps finding new trojans Could you please help me I Need Help, Have Hijack Log, Can't Get Rid of Windows Security System Warnings, etc. m a single mom and I can t afford a new computer until sometime next year Hijack log will be attached at the bottom of this email Thank you Tech Guy Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Alwil Software Avast aswUpdSv exe C Program Files Alwil Software Avast ashServ exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C Program Files Analog Devices Core smax pnp exe C Program Files Java j re bin jusched exe C Program Files Dell Media Experience PCMService exe C Program Files Musicmatch Musicmatch Jukebox mm tray exe C PROGRA mcafee com agent mcagent exe C Program Files iTunes iTunesHelper exe C Program Files QuickTime qttask exe C PROGRA McAfee com PERSON MpfTray exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C Program Files Adobe Photoshop Album Starter Edition Apps apdproxy exe C Program Files Fisher-Price DACS MiniApp DACSMiniApp exe C Program Files Fisher-Price Easy-Link internet launch pad Easy-Link internet launch pad exe C PROGRA ALWILS Avast ashDisp exe C Windows Sys D exe C Windows Sys E exe C Program Files DellSupport DSAgnt exe C WINDOWS system ctfmon exe c program files mcafee com agent mcdetect exe C Program Files Digital Line Detect DLG exe c PROGRA mcafee com agent mctskshd exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C PROGRA McAfee com PERSON MpfService exe C Program Files Microsoft SQL Server MSSQL MICROSOFTBCM Binn sqlservr exe C Program Files iPod bin iPodService exe C WINDOWS system svchost exe C PROGRA McAfee com PERSON MpfAgent exe C Program Files Yahoo Messenger ymsgr tray exe C Program Files Alwil Software Avast ashWebSv exe C Program Files Alwil Software Avast ashMaiSv exe C Program Files Internet Explorer iexplore exe C Program Files Alwil Software Avast ashSimpl exe C WINDOWS system wuauclt exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Page http red clientapps yahoo com customize ie defaults sp ymsgr http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Bar http red clientapps yahoo com cus http www yahoo com ext search search html R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM S... Read more

A:Need Help, Have Hijack Log, Can't Get Rid of Windows Security System Warnings, etc.

BUMP...

Please my computer is acting slow...now I can't log into my work email and another site from home.

And Avast is detecting stuff but I keep getting error messages that these things are now password protected and cannot be deleted.

Thanks
 

https://forums.techguy.org/threads/need-help-have-hijack-log-cant-get-rid-of-windows-security-system-warnings-etc.724782/
Relevancy 42.57%

I have cut and pasted this from another post because it is the same problem I was not however able to reply to the thread in order to continue the help Here is the text I have the yellow triangle with the in it with bubles that pop up from it stating System performance monitor Warning Security Alert Spyware found System Alert email protected System Alert Malware threats Security Alert email protected And Solved: Malware IE/ Disgused Windows as Warnings these all rotate in Solved: Malware Disgused as IE/ Windows Warnings that order It ll pop up and stay up for a short but then goes aways a bit later the next one pops up IE windows that pop up are quot Security center quot with a url of quot http www savetheinformation com v gai hamm h pop amp gli pop amp gff hamm ece bd D DF BD B A C FE E FC amp eai hamm h pop amp eli pop Solved: Malware Disgused as IE/ Windows Warnings amp eaf hamm ece bd D DF BD B A C FE E FC amp air hamm h pop amp lir pop amp afr hamm ece bd D D F BD B A C FE E FC quot quot http www savetheinformation com v gai hamm h pop amp gli pop amp gff hamm ece bd D DF BD B A C FE E FC amp eai hamm h pop amp eli pop amp eaf hamm ece bd D DF BD B A C FE E FC amp air hamm h pop amp lir pop amp afr hamm ece bd D D F BD B A C FE E FC quot Also I get little windows that look like the windows that come up on a normal system but it reads quot Security warning New variant of email protected quot - as the title and the body is quot You are unprotected from new version of email protected trojan email protected is a trojan horse that steals information and gathers email adresses from the compromised computer Click OK to download antivirus software and pass full system scan yo dalete quarantine infected files quot then it has yes and no buttons The red X in the top corner is disabled quot Fatal Error quot - as the title Body - quot Unhandled Exception Invalid operation The instruction at quot x f d quot referenced memory at quot x d quot If you were in the middle of something the information were working on might be lost This fatal error probably occured because of a virus on your PC Would you like to download latest version of anutvirus software then again yes and no buttons and the red X is disabled quot Microsoft Internet Explorer quot as the title body - quot Warning email protected is a virus that infects files with exe extensions It attempts to steal passwords and private information from the infected computer Type Virus Infection Length bytes Systems Affected Windows ME NT all versions Windows XP all service packs Systems Not Affected DOS EPOC Lenux Macintosh Novell Netware OS UNIX Technical details Create files in Windir direcory By default this is C Windows Adds values to registry keys HKEY LOCAL MNACHINE Software Microsoft Windows CurrentVersion Run Scans the hard drive for exe files and infects any executable files Searches for passwords information which it may send to a remote attacker Recomendations click quot OK quot to download officially approved security software Always keep your patch levels up-to-date quot then has OK and Cancel buttons The red X is active but when clicked that window closes and an IE opens with the URL of quot http securityonpage com gai hamm h pop amp gli pop amp gff hamm ece bd D DF BD B A C FE E FC amp eai hamm h pop amp eli pop amp eaf hamm ece bd D DF BD B A C FE E FC amp air hamm h pop amp lir pop amp afr hamm ece bd D D F BD B A C FE E FC quot I truly have no idea as to where to even start If someone could help me get rid of this problem that would be fantastic I know MFDnNC helped on the thread I read before Barry nbsp

Relevancy 42.57%

I downloaded a custom keylogger made in Visual Basic To tinker with the code and see how Defender and constantly! Windows me warnings gives errors it works nothing malicious but suddenly Windows Defender gives me an alert I'm thinking it's just a harmless little mistake so i deleted the files and cleaned my PC with MalwayreBytes Spybot amp Windows Defender MalwareBytes found virus' Spybot found virus' Windows Defender found virus' I removed them all Windows Defender gives me errors and warnings constantly! and it seemed fine now but i was wrong Windows Defender keeps popping messages up saying that there is a new virus found The icon that shows when something is removed but the virus ISN'T removed It gives me an error in the quot Status quot bar and it doesn't have the quot Removed quot text in the quot Anbefalet Handling quot as it normally would have but rather quot Quarantine quot Windows Defender gives me errors and warnings constantly! Immediately when it has quot cleaned quot my PC this message pops up telling me there's a virus found and i need to scan it again to remove it It's the same virus HackTool Win Passview The weird thing is i recovered my PC to an earlier stage where i haven't downloaded it and it's still detecting It's like nothing happened at all I think Windows kept my files just not the programs i had installed When i click on quot View all elements found quot another virus' are found They're all in quot Quarantine quot and not quot Removed quot as they should be I really need help because this is so f ing fustrating EDIT This is the log that Windows Defender produces containerfile C ProgramData Microsoft Windows Defender LocalCopy BD - C E- DA-AC A-A E FB B -Drops Logger By Jay z containerfile C ProgramData Microsoft Windows Defender LocalCopy E F -A - EB -AAC - A FB -Drops Logger By Jay z file C ProgramData Microsoft Windows Defender LocalCopy BD - C E- DA-AC A-A E FB B -Drops Logger By Jay z- gt Drops Logger By Jay Stub Stub Resources iepv exe- gt UPX file C ProgramData Microsoft Windows Defender LocalCopy E F -A - EB -AAC - A FB -Drops Logger By Jay z- gt Drops Logger By Jay Stub Stub Resources iepv exe- gt UPX webfile C ProgramData Microsoft Windows Defender LocalCopy BD - C E- DA-AC A-A E FB B -Drops Logger By Jay z Simple File Sharing and Storage webfile C ProgramData Microsoft Windows Defender LocalCopy E F -A - EB -AAC - A FB -Drops Logger By Jay z Simple File Sharing and Storage I would like to avoid a clean install of Windows if possible Thanks in advance NOTE These files are from a guy i trust i'm sure it's not on purpose thatt he virus is there he is a very good friend so don't give me all of those quot You should have used virtual box quot quot You should have scanned it first quot comments and such

A:Windows Defender gives me errors and warnings constantly!

Reboot in the Safe Mode and run a full virus scan. Those Trojans and HackTool are quite common in keylogging programs, just so you know.

http://www.eightforums.com/system-security/35702-windows-defender-gives-me-errors-warnings-constantly.html
Relevancy 42.57%

MSI GP - OD connected to Pioneer VSX- LG LM via warnings Windows 8.1 "Low memory" and Firefox crashes HDMI GB RAM TB hybrid HD with partions C GB free D GB free Windows with all current updates GWX patch removed Intel HD FF with Adblock Plus IE tab LastPass YouTube HD Better Privacy and about addons-memory addons installed and active Windows Defender Malwarebytes Premium active Since I stupidily upgraded to which should actually be called since it includes MAJOR revisions but I digress I've had more than a few issues I also had the yourtv link infestation which Malwarebytes support was able to resolve So almost Windows 8.1 "Low memory" warnings and Firefox crashes every day after the computer has been idle for more than an hour I have not tried to determine a specific amount Windows 8.1 "Low memory" warnings and Firefox crashes of time and I turn my monitor back on there will be a message saying that Windows is low on memory and that I should close programs Usually Firefox is listed as the victim Bringing up Task manager and keying onto memory shows a somewhat normal structure nbsp att jpg nbsp nbsp KB nbsp nbsp downloads and System Explorer shows a very normal memory structure nbsp att jpg nbsp nbsp KB nbsp nbsp downloads Firefox has crashed about times in the past days While watching NASCAR streaming on NBCSports running streaming in-car video live race updates as well as the usual mail calendar start page it crashed times Chrome was also running at the time with live in-car audio did not crash I have done this dozens of times this year without crashes or issues until recently I have tested the RAM removed and cleaned the DIMMs I'm just lost as to the culprit I will be moving to Windows but I need this issue solved first I will not upgrade an operating system while I have ongoing issues been there done that disastrously Oh yeah I also went to the Intel page and downloaded the latest HD drivers it recommended for my system nbsp att jpg nbsp nbsp KB nbsp nbsp downloads Didn't help

A:Windows 8.1 "Low memory" warnings and Firefox crashes

Just an update, I discovered one more symptom: after returing to the computer after a period of time and turning the monitor back on, not only is the low memory warning there but whatever window was on top will now be full screen, not maximized, just expanded to fullscreen (where you have to drag a corner down to resize).  I don't know if it will help diag the issue but that's just one more thing to add to the frustration of my lovely Win 8.1 "upgrade".
 
Secondly (OT rant), I think I'll pass on Windows 10 after all.  I've worked with companies in the past that mandated software updates and upgrades and I have never, not ever, seen it benefit the user/administsrator experience.  If it ain't broke, don't fix it is my best practice.  As a matter of fact, I have an older dual core running Win7 and I may wipe this one and go back until obsolecent.
 
Cheers.

http://www.bleepingcomputer.com/forums/t/584357/windows-81-low-memory-warnings-and-firefox-crashes/
Relevancy 42.57%

Code Diagnostic Report ----------------------------------------- Windows Validation Data-- gt Validation Code x FE Cached Online Validation keep I and activate getting when errors Warnings I Genuine get Windows Code N A hr xc I keep getting Windows Genuine Warnings and get errors when I activate Windows Product Key - - FBDJ-KY FB- V YW Windows Product Key Hash E leKxti cF lcKbwld FcuH Windows Product ID - - - Windows Product ID Type Windows License Type Retail Windows OS version ID BB A - C - D I keep getting Windows Genuine Warnings and get errors when I activate - A -A C A Is Admin Yes TestCab x LegitcheckControl ActiveX N A hr x Signed By N A hr x Product Name I keep getting Windows Genuine Warnings and get errors when I activate Windows Home Premium Architecture x Build lab win sp gdr - TTS Error Validation Diagnostic Resolution Status N A Vista WgaER Data-- gt ThreatID s N A hr x Version N A hr x Windows XP Notifications Data-- gt Cached Result N A hr x File Exists No Version N A hr x WgaTray exe Signed By N A hr x WgaLogon dll Signed By N A hr x OGA Notifications Data-- gt Cached Result N A hr x Version N A hr x OGAExec exe Signed By N A hr x OGAAddin dll Signed By N A hr x OGA Data-- gt Office Status N A OGA Version N A x Signed By N A hr x Office Diagnostics D FF - - D FF - - D FF - - D FF - - D FF - - D FF - - D FF - - D FF - - Browser Data-- gt Proxy settings N A User Agent Mozilla compatible MSIE Win Default Browser C Program Files x Google Chrome Application chrome exe Download signed ActiveX controls Prompt Download unsigned ActiveX controls Disabled Run ActiveX controls and plug-ins Allowed Initialize and script ActiveX controls not marked as safe Disabled Allow scripting of Internet Explorer Webbrowser control Disabled Active scripting Allowed Script ActiveX controls marked as safe for scripting Allowed File Scan Data-- gt Other data-- gt Office Details lt GenuineResults gt lt MachineData gt lt UGUID gt BB A - C - D - A -A C A lt UGUID gt lt Version gt lt Version gt lt OS gt lt OS gt lt Architecture gt x lt Architecture gt lt PKey gt - - - - V YW lt PKey gt lt PID gt - - - lt PID gt lt PIDType gt lt PIDType gt lt SID gt S- - - - - - lt SID gt lt SYSTEM gt lt Manufacturer gt Acer lt Manufacturer gt lt Model gt Aspire lt Model gt lt SYSTEM gt lt BIOS gt lt Manufacturer gt Phoenix Technologies Ltd lt Manufacturer gt lt Version gt V lt Version gt lt SMBIOSVersion major quot quot minor quot quot gt lt Date gt lt Date gt lt BIOS gt lt HWID gt CE D D FC lt HWID gt lt UserLCID gt lt UserLCID gt lt SystemLCID gt lt SystemLCID gt lt TimeZone gt Central Standard Time GMT- lt TimeZone gt lt iJoin gt lt iJoin gt lt SBID gt lt stat gt lt stat gt lt msppid gt lt msppid gt lt name gt lt name gt lt model gt lt model gt lt SBID gt lt OEM gt lt OEMID gt ACRSYS lt OEMID gt lt OEMTableID gt ACRPRDCT lt OEMTableID gt lt OEM gt lt GANotification gt lt MachineData gt lt Software gt lt Office gt lt Result gt lt Result gt lt Products gt lt Applications gt lt Office gt lt Software gt lt GenuineResults gt Spsys log Content x Licensing Data-- gt On a computer running Microsoft Windows non-core edition run 'slui exe x a x ' to display the error text Error x Windows Activation Technologies-- gt HrOffline x FE HrOnline N A HealthStatus x Event Time Stamp ActiveX Registered Version Admin Service Registered Version HealthStatus Bitmask Output Tampered Service sppsvc HWID Data-- gt HWID Hash Current MAAAAAEAAQABAAEAAQACAAAAAgABAAEAonbGaRxB vuEiAJ crxiPZD BfQ wBq OEM Activation Data-- gt N A OEM Activation Data-- gt BIOS valid for OA yes Windows marker version x OEMID and OEMTableID Consistent yes BIOS Information ACPI Table Name OEMID Value OEMTableID Value APIC ACRSYS ACRPRDCT FACP ACRSYS ACRPRDCT HPET ACRSYS ACRPRDCT MCFG ACRSYS ACRPRDCT SLIC ACRSYS ACRPRDCT UEFI ACRSYS ACRPRDCT UEFI ACRSYS ACRPRDCT SSDT AMD POWERNOW SSDT AMD POWERNOW UEFI ACRSYS ACRPRDCT

A:I keep getting Windows Genuine Warnings and get errors when I activate

(Have you EVER used Norton software on this machine?)

Please run thefollowing commands, and post the results.

REG QUERY HKLM\SYSTEM\CurrentControlSet\services\spldr/S
REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPLDR /S
REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SLSVC
REG QUERY HKLM\SYSTEM\CurrentControlSet\Enum\Root\Legacy_SPPSVC



They may show something

Here are some instructions to make life easier

1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs,Accessories ? then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt.

2) To run the commands easier, highlight the block of commands, and right-click on the highlight ? select Copy. In the CP Window, click on the black/white icon at topleft ? select Paste. The commands will run but may not complete the last command, so hit the Enter Key once.

3) To copy the results... click on the Black/White icon in the top left, and select Edit...'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.

http://www.sevenforums.com/windows-updates-activation/374482-i-keep-getting-windows-genuine-warnings-get-errors-when-i-activate.html
Relevancy 42.57%

I had a problem with one of the hard drives on my system where the spin up time fell below the threshold. Windows issued a pop up window advising the drive could fail soon. The error was based on the drive reporting a bad SMART value. I began moving my data over to a safe location and the windows pop up error kept returning. Frustrated with the ongoing warnings, I clicked a box in the pop up window to keep windows from flagging the error again. That worked and I?ve since removed the failing drive from the computer. Now of course I?d like to have the windows pop up warnings restored to the default settings so I can be warned if a new SMART error occurs in the future. I can?t figure out how to do that. Can someone help with this?

http://www.tenforums.com/performance-maintenance/50667-windows-10-disk-smart-error-pop-up-warnings.html
Relevancy 42.57%

I keep getting a keyboard low battery warning for my HP keyboard after installing windows 10 was running widows 7 before

A:Windows 10 Keeps triggering keyboard Low Battery Warnings

If your keyboard is wireless Windows 10 is telling you it's time to rplace the batteries.i_Xp/Vista/W7/W10 User

http://www.computing.net/answers/windows-10/windows-10-keeps-triggering-keyboard-low-battery-warnings/154.html
Relevancy 42.57%

Hi everyone I'm a new member with a 'maybe' problem Here is info on my system Operating and Warnings DPC_Watchdog 8.1 Windows Violation SDDIR System System Model Windows Professional with Media Center x build Installed PM Boot Mode UEFI with successful Secure Boot Hewlett-Packard HP ENVY TS Notebook PC Enclosure Type Notebook Processor a Main Circuit Board b gigahertz Intel Core i - MQ kilobyte primary memory cache kilobyte secondary memory cache kilobyte tertiary memory cache -bit ready Multi-core total Hyper-threaded total Board Hewlett-Packard KBC Version Bus Clock megahertz UEFI Insyde F Drives Memory Modules c d Gigabytes Usable Hard Drive Capacity Gigabytes Hard Drive Free Space hp CDDVDW SU- FB Optical drive ST LM - EJ Hard drive GB -- drive rev HPM SMART Status Healthy WD My Passport USB Device Hard drive GB -- drive Megabytes Usable Installed Memory HERE IS INFO on WHAT IS GOING ON Got the BSOD on boot and was unable to sign into Windows until the resolution automatically ran it's course which took only a few minutes After the normal startup screen was presented and I signed into Windows without event I went to command prompt and ran sfc scannow as administrator Corrupt files were found Eventually corrupt files were repaired and a health scan showed a healthy file system without corrupt files Upon looking at the log file it showed DIRSD DPC_Watchdog Violation Windows 8.1 and SDDIR Warnings OWNER WARNINGS abundantly such as the following CSI a DIRSD OWNER WARNING Directory ml l C Windows apppatch Custom is not owned but specifies SDDL in component Microsoft-Windows-Application-Experience-Infrastructure pA PROCESSOR ARCHITECTURE AMD Culture neutral VersionScope nonSxS PublicKeyToken l b bf ad e Type neutral TypeName neutral PublicKey neutral I have attached a zip file of the cbs log that shows the results of the scan log I re-ran scannow restore health and again checked health again opting for a new log file The new log file showed no file corruption but it showed the same numerous DIRSD OWNER WARNINGS I have NO IDEA what this means Any help with what is going on here and why and how to resolve if this needs resolutuion would be GREATLY appreciated Thank you Kindest regards nigebirch

http://www.bleepingcomputer.com/forums/t/609232/dpc-watchdog-violation-windows-81-and-sddir-warnings/
Relevancy 42.57%

I had a problem with one of the hard drives on my system where the spin up time fell below the threshold. Windows issued a pop up window advising the drive could fail soon. The error was based on the drive reporting a bad SMART value. I began moving my data over to a safe location and the windows pop up error kept returning. Frustrated with the ongoing warnings, I clicked a box in the pop up window to keep windows from flagging the error again. That worked and I?ve since removed the failing drive from the computer. Now of course I?d like to have the windows pop up warnings restored to the default settings so I can be warned if a new SMART error occurs in the future. I can?t figure out how to do that. Can someone help with this?

http://www.tenforums.com/drivers-hardware/50667-windows-10-disk-smart-error-pop-up-warnings.html
Relevancy 42.57%

I m running Windows with Avast as my virus control For days now Avast throws a pop-up every so often saying that a trojan was found quarantined at c Windows assembly tmp U This happens most frequently when I open a browser I have run Malwarebytes Spybot S amp D AdAware and Avast to try to clean this up updated definitions all run in safe mode Still get the pop-ups from Avast I have generated logs from the following programs and will post here - Security Check MiniToolBox Malwarebytes GMER Security Check Results of screen s Security Check version Windows UAC is enabled Internet Explorer Antivirus Firewall Check avast Free Antivirus WMI entry may not exist for antivirus attempting automatic update Anti-malware Other Utilities Check Ad-Aware Malwarebytes Anti-Malware Java Update Java SE Runtime Environment Out Trojan c:\Windows\assembly\tmp\U\80000032.@ warnings Getting of date Java Getting c:\Windows\assembly\tmp\U\80000032.@ Trojan warnings installed Adobe Flash Player Adobe Reader Getting c:\Windows\assembly\tmp\U\80000032.@ Trojan warnings Out of date Getting c:\Windows\assembly\tmp\U\80000032.@ Trojan warnings Adobe Reader installed Process Check objlist exe by Laurent Ad-Aware AAWService exe is disabled Ad-Aware AAWTray exe is disabled Malwarebytes Anti-Malware mbamservice exe Alwil Software Avast AvastSvc exe Alwil Software Avast AvastUI exe End of Log MiniToolBox MiniToolBox by Farbar Ran by Cindy administrator on - - at Windows Ultimate Service Pack X IE Proxy Settings Proxy is not enabled No Proxy Server is set FF Proxy Settings quot network proxy type quot Hosts file not detected in the default directory IP Configuration The following helper DLL cannot be loaded WSHELPER DLL ---------------------------------- IPv Configuration ---------------------------------- pushd interface ipv reset set global icmpredirects enabled popd End of IPv configuration Windows IP Configuration Host Name Cindy-PC Primary Dns Suffix Node Type Hybrid IP Routing Enabled No WINS Proxy Enabled No Ethernet adapter Bluetooth Network Connection Media State Media disconnected Connection-specific DNS Suffix Description Bluetooth Device Personal Area Network Physical Address - - F-B - - DHCP Enabled Yes Autoconfiguration Enabled Yes Ethernet adapter Local Area Connection Media State Media disconnected Connection-specific DNS Suffix Description Marvell Yukon E PCI-E Gigabit Ethernet Controller Physical Address - D-BA-A -F - C DHCP Enabled Yes Autoconfiguration Enabled Yes Wireless LAN adapter Wireless Network Connection Connection-specific DNS Suffix Description Intel R WiFi Link AGN Physical Address - - D-F -FA- DHCP Enabled Yes Autoconfiguration Enabled Yes IPv Address Preferred Subnet Mask Lease Obtained Friday October PM Lease Expires Saturday October PM Default Gateway DHCP Server DNS Servers NetBIOS over Tcpip Enabled Tunnel adapter isatap CE A A - FFA- A D-A C- E DAA Media State Media disconnected Connection-specific DNS Suffix Description Microsoft ISATAP Adapter Physical Address - - - - - - -E DHCP Enabled No Autoconfiguration Enabled Yes Tunnel adapter Teredo Tunneling Pseudo-Interface Connection-specific DNS Suffix Description Teredo Tunneling Pseudo-Interface Physical Address - - - - - - -E DHCP Enabled No Autoconfiguration Enabled Yes IPv Address e fb af f fe f Preferred Link-local IPv Address fe fb af f fe f Preferred Default Gateway NetBIOS over Tcpip Disabled Pinging google com with bytes of data Reply from bytes time ms TTL Reply from bytes time ms TTL Ping statistics for Packets Sent Received Lost loss Approximate round trip times in milli-seconds Minimum ms Maximum ms Average ms Pinging yahoo com with bytes of data Reply from bytes time ms TTL Reply from bytes time ms TTL Ping statistics for Packets Sent Received Lost loss Approximate round trip times in milli-seconds Minimum ms Maximum ms Average ms Pinging with bytes of data Reply fr... Read more

A:Getting c:\Windows\assembly\tmp\U\80000032.@ Trojan warnings

can you perform a complete scan with Malwarebytes?

http://www.bleepingcomputer.com/forums/t/422329/getting-cwindowsassemblytmpu80000032-trojan-warnings/
Relevancy 42.14%

A lady I work with asked me to look at her laptop when it starting having issues with Windows Defence malware I seem to have gotten it to stop popping up windows on one user profile the phishing false bar warnings Defence and Windows IE8 on yellow computer has two not counting the administrator profile which was not password Windows Defence yellow bar on IE8 and false phishing warnings protected I went into safe mode using administrator login managed to get McAfee running it would not run under normal user profile downloaded Malwarebytes and ran that both found and quarantined some files Knowing that some malware likes to hide in system recovery areas of HDD I disabled system recovery areas and rescanned Found and quarantined more files I also disable IE addons that did not have a publisher there is one called WXcllB Class that looks very suspicious The computer seems to run ok under one user profile but the other profile still exhibits symptoms of Windows Defence I would guess this is the user that was logged in when the initial attack took place The other profile also cannot obtain IP address via DHCP using wireless network but wired LAN succeeds in obtaining IP address via DHCP Any help would be appreciated Thanks mtnbiker DDS Ver - - - NTFSx Run by Cassie Lisle at on Wed Internet Explorer BrowserJavaVersion Microsoft Windows XP Professional GMT - AV McAfee Anti-Virus and Anti-Spyware On-access scanning enabled Updated B EE - - CDE-A A-DD BA FAD FW McAfee Firewall enabled B - C F- -BDA - CA DA E Running Processes C WINDOWS system ibmpmsvc exeC WINDOWS system svchost -k DcomLaunchsvchost exeC WINDOWS System svchost exe -k netsvcsC Program Files ThinkPad Bluetooth Software bin btwdins exesvchost exesvchost exeC WINDOWS system spoolsv exesvchost exeC Program Files ThinkPad ConnectUtilities AcPrfMgrSvc exeC WINDOWS system acs exeC WINDOWS system svchost exe -k hpdevmgmtC Program Files Common Files InterVideo RegMgr iviRegMgr exeC Program Files Java jre bin jqs exeC Program Files McAfee SiteAdvisor McSACore exeC Program Files Common Files McAfee McSvcHost McSvHost exeC WINDOWS system mfevtps exeC Program Files Sony PMB PMBDeviceInfoProvider exeC WINDOWS system svchost exe -k imgsvcc Program Files Common Files Lenovo tvt reg monitor svc exeC WINDOWS System TPHDEXLG exeC Program Files Lenovo Rescue and Recovery rrpservice exeC Program Files Lenovo Rescue and Recovery rrservice exec Program Files Common Files Lenovo Scheduler tvtsched exeC Program Files Lenovo Rescue and Recovery UpdateMonitor exeC Program Files Common Files McAfee SystemCore mcshield exeC Program Files Common Files McAfee SystemCore mfefire exeC Program Files ThinkPad Utilities PWMDBSVC EXEc program files lenovo system update suservice exeC Program Files ThinkPad ConnectUtilities AcSvc exeC Program Files ThinkPad ConnectUtilities SvcGuiHlpr exeC WINDOWS Explorer EXEC WINDOWS system rundll exeC Program Files Lenovo NPDIRECT TPFNF SP exeC Program Files Lenovo NPDIRECT TPFNF SP exeC WINDOWS system TpShocks exeC Program Files Lenovo HOTKEY TPOSDSVC exeC PROGRA ThinkPad UTILIT EzEjMnAp ExeC Program Files Apoint K Apoint exeC WINDOWS system igfxtray exeC WINDOWS system igfxpers exeC Program Files Common Files Lenovo Scheduler scheduler proxy exeC PROGRA THINKV PrdCtr LPMGR exeC PROGRA THINKV PrdCtr LPMLCHK exeC WINDOWS system igfxsrvc exeC Program Files ThinkVantage AMSG Amsg exeC WINDOWS system rundll exeC Program Files ThinkPad ConnectUtilities ACTray exeC Program Files ThinkPad ConnectUtilities ACWLIcon exeC Program Files Lenovo Client Security Solution cssauth exeC Program Files HP HP Software Update HPWuSchd exeC Program Files QuickTime qttask exeC Program Files Lenovo HOTKEY TPONSCR exeC Program Files Sony PMB PMBVolumeWatcher exeC Program Files Lenovo Zoom TpScrex exeC Program Files Apoint K ApMsgFwd exeC Program Files Common Files Java Java Update jusched exeC Program Files McAfee com Agent mcagent exeC WINDOWS system ctfmon exeC Program Files ThinkPad Bluetooth... Read more

A:Windows Defence yellow bar on IE8 and false phishing warnings

Hi,QUOTEbut the other profile still exhibits symptoms of Windows DefenceIf the posted log was not taken while logged on that other profile please use that user account to run DDS. Then post back generated dds.txt log.

http://www.bleepingcomputer.com/forums/t/352180/windows-defence-yellow-bar-on-ie8-and-false-phishing-warnings/
Relevancy 42.14%

System HP Pavilion a nProcessor AMD Athlon XP OS Windows XP Home Edition Version Service Pack Constantly getting these upon opening apps PDFs etc jusched exe - Bad Image The application or DLL C WINDOWS system wvutqpm dll is not a valid Windows image Please check this against your installation diskette CiceroUIWndFrame OUTLOOK EXE - Bad Image The application or DLL C WINDOWS system wvutqpm dll is not a valid Windows image Please check this against your installation diskette Font Capture AcroRd exe - Bad Image The application or DLL C WINDOWS system wvutqpm dll is not a valid Windows image Please check this against your installation diskette Other issue preventing me from Windows dialogs not images Pop-up valid DLLs being warnings about moving to XP Service Pack Windows Update is not working - seems the Background Intelligent Transfer Service will not start quot The Background Intelligent Transfer Service service terminated with service-specific error x quot I ran GMER twice and it caused a reboot each time after about Pop-up warnings dialogs about DLLs not being valid Windows images hours in quot The computer has rebooted from a bugcheck The bugcheck was xd xc x b x x A dump was saved in C WINDOWS Minidump Mini - dmp quot DDS txt contents DDS Ver - - - NTFSx Run by HP Owner at on Thu Internet Explorer BrowserJavaVersion Microsoft Windows XP Home Edition GMT - AV McAfee VirusScan On-access scanning enabled Updated B EE - - CDE-A A-DD BA FAD FW McAfee Personal Firewall enabled B - C F- -BDA - CA DA E Running Processes C WINDOWS system svchost -k DcomLaunchsvchost exeC WINDOWS System svchost exe -k netsvcssvchost exesvchost exeC WINDOWS system spoolsv exeC Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exeC Program Files Symantec LiveUpdate ALUSchedulerSvc exeC Program Files Bonjour mDNSResponder exeC Program Files Java jre bin jqs exeC PROGRA McAfee MSC mcmscsvc exec program files common files mcafee mna mcnasvc exec PROGRA COMMON mcafee mcproxy mcproxy exeC PROGRA McAfee VIRUSS mcshield exeC Program Files Common Files Microsoft Shared VS DEBUG MDM EXEC Program Files MozyHome mozybackup exeC Program Files McAfee MPF MPFSrv exeC WINDOWS system svchost exe -k imgsvcC WINDOWS system UAService exeC WINDOWS Explorer EXEc PROGRA mcafee com agent mcagent exeC windows system hpsysdrv exeC WINDOWS System svchost exe -k HTTPFilterC WINDOWS system hphmon exeC HP KBD KBD EXEC WINDOWS system VTTimer exeC WINDOWS AGRSMMSG exeC WINDOWS ALCXMNTR EXEC Program Files Java jre bin jusched exeC Program Files iTunes iTunesHelper exeC WINDOWS system ctfmon exeC Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exeC Program Files DNA btdna exeC Program Files HP Digital Imaging bin hpqtra exeC Program Files MozyHome mozystat exeC Program Files WiFiConnector NintendoWFCReg exeC Program Files iPod bin iPodService exeC PROGRA McAfee VIRUSS mcsysmon exeC WINDOWS system HPZipm exeC WINDOWS system dllhost exeC Program Files Common Files Real Update OB realsched exeC Program Files Mozilla Firefox firefox exeC Program Files Microsoft Office OFFICE OUTLOOK EXEC Program Files Microsoft Office OFFICE WINWORD EXEC Documents and Settings HP Owner My Documents dds scr Pseudo HJT Report uStart Page hxxp my yahoo com uSearch Page hxxp www google comuDefault Page URL hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd pavilion amp pf desktopuDefault Search URL hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf desktopuSearch Bar hxxp www google com ieuSearchMigratedDefaultURL hxxp www google com search q searchTerms amp sourceid ie amp rls com microsoft en-US amp ie utf amp oe utf mSearch Bar hxxp ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf desktopuInternet Connection Wizard ShellNext hxxp ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd pavilion amp pf deskto... Read more

A:Pop-up warnings dialogs about DLLs not being valid Windows images

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HEREPlease download GMER from one of the following locations and save it to your desktop:Main MirrorThis version will download a randomly named file (Recommended)Zipped MirrorThis version will download a zip file you will need to extract first. If you use this mirror, please extract the zip file to your desktop.Disconnect from the Internet and close all running programs.Temporarily disable any real-time active protection so your security programs will not conflict with gmer's driver.Double-click on the randomly named GMER file (i.e. n7gmo46c.exe) and allow the gmer.sys driver to load if asked.Note: If you downloaded the zipped version, extract the file to its own folder such as C:\gmer and then double-click on gmer.exe.GMER will open to the Rootkit/Malware tab and perform an automatic quick scan when first run. (do not use the computer while the scan is in progress)If you receive a WARNING!!! about rootkit activity and are asked to fully scan your system...click NO.Now click the Scan button. If you see a rootkit warning window, click OK.When the scan is finished, click the Save... button to save the scan results to your Desktop. Save the file as gmer.log.Click the Copy button and paste the results into your next reply.Exit GMER and re-enable all active protection when done.-- If you encounter any problems, try running GMER in Safe Mode.

http://www.bleepingcomputer.com/forums/t/295210/pop-up-warnings-dialogs-about-dlls-not-being-valid-windows-images/
Relevancy 42.14%

I keep getting spoof warnings that pop up from my taskbar alerting me about trojans. One will say that my computer is infected with [email protected] The other will say that my computer is infected with a backdoor trojan. If I click on these warnings it sends me to web pages for anti virus applications. I also am recieveing a lot of pop-ups.
 

Relevancy 42.14%

Hi Since a few months I have the infamous build counterfeit warnings I have tried build Cannot 7601 warnings. 7 fix counterfeit Windows to OEM activate many many of the solutions described here and elsewhere to no avail Some more details - For some reason Cannot activate OEM Windows 7 to fix build 7601 counterfeit warnings. I do not have a COA sticker also not under the battery - I have done no hardware modifications - I don't have the option to activate Cannot activate OEM Windows 7 to fix build 7601 counterfeit warnings. by phone only contact Dell - I presume I have an OEM version I have reinstalled it using a Dell DVD earlier long before I started having these issues I hope someone can make sense in the quot mgadump quot output below Thanks Joris Code Diagnostic Report ----------------------------------------- Windows Validation Data-- gt Validation Cannot activate OEM Windows 7 to fix build 7601 counterfeit warnings. Code Cached Online Validation Code N A hr xc f Windows Product Key - -M DJT- J WC- WD Windows Product Key Hash xo ajVSpae VoZjS m JL f A Windows Product ID -OEM- - Windows Product ID Type Windows License Type OEM SLP Windows OS version ID E E - E - C - C E-D DF CAF A Is Admin Yes TestCab x LegitcheckControl ActiveX N A hr x Signed By N A hr x Product Name Windows Professional Architecture x Build lab win sp gdr - TTS Error Validation Diagnostic Resolution Status N A Vista WgaER Data-- gt ThreatID s N A hr x Version N A hr x Windows XP Notifications Data-- gt Cached Result N A hr x File Exists No Version N A hr x WgaTray exe Signed By N A hr x WgaLogon dll Signed By N A hr x OGA Notifications Data-- gt Cached Result N A hr x Version N A hr x OGAExec exe Signed By N A hr x OGAAddin dll Signed By N A hr x OGA Data-- gt Office Status N A OGA Version N A x Signed By N A hr x Office Diagnostics D FF - - D FF - - D FF - - D FF - - D FF - - D FF - - D FF - - D FF - - Browser Data-- gt Proxy settings N A User Agent Mozilla compatible MSIE Win Default Browser C Program Files x Google Chrome Application chrome exe Download signed ActiveX controls Prompt Download unsigned ActiveX controls Disabled Run ActiveX controls and plug-ins Allowed Initialize and script ActiveX controls not marked as safe Disabled Allow scripting of Internet Explorer Webbrowser control Disabled Active scripting Allowed Script ActiveX controls marked as safe for scripting Allowed File Scan Data-- gt Other data-- gt Office Details lt GenuineResults gt lt MachineData gt lt UGUID gt E E - E - C - C E-D DF CAF A lt UGUID gt lt Version gt lt Version gt lt OS gt lt OS gt lt Architecture gt x lt Architecture gt lt PKey gt - - - - WD lt PKey gt lt PID gt -OEM- - lt PID gt lt PIDType gt lt PIDType gt lt SID gt S- - - - - - lt SID gt lt SYSTEM gt lt Manufacturer gt Dell Inc lt Manufacturer gt lt Model gt Precision M lt Model gt lt SYSTEM gt lt BIOS gt lt Manufacturer gt Dell Inc lt Manufacturer gt lt Version gt A lt Version gt lt SMBIOSVersion major quot quot minor quot quot gt lt Date gt lt Date gt lt BIOS gt lt HWID gt C A FE lt HWID gt lt UserLCID gt lt UserLCID gt lt SystemLCID gt lt SystemLCID gt lt TimeZone gt Romance Standard Time GMT lt TimeZone gt lt iJoin gt lt iJoin gt lt SBID gt lt stat gt lt stat gt lt msppid gt lt msppid gt lt name gt lt name gt lt model gt lt model gt lt SBID gt lt OEM gt lt GANotification gt lt MachineData gt lt Software gt lt Office gt lt Result gt lt Result gt lt Products gt lt Applications gt lt Office gt lt Software gt lt GenuineResults gt Spsys log Content x Licensing Data-- gt Software licensing service version Name Windows R Professional edition Description Windows Operating System - Windows R OEM SLP channel Activation ID e f -a fa- b - fd-f e da Application ID c -d - d - e-d ec f f Extended PID - - - - - - - Installation ID Processor Certificate URL http go microsoft com fwlink LinkID Machine Certificate URL http go microsoft com fwlink LinkID Use License URL http go microsoft com fwlink LinkID Product Key Certificate... Read more

A:Cannot activate OEM Windows 7 to fix build 7601 counterfeit warnings.

There is no SLIC table in the BIOS to support the OEM_SLP Key in use.
This machine was shipped with Windows 8 installed - which is why there's no COA sticker.
There should be a Win8 sticker - does it say Win8 or Win8Pro?

If it says Win8, then there are NO downgrade rights - and the install is counterfeit.

If it says Win8 Pro, then you will have to contact Dell to get them to fix it, as it will require a new BIOS.

http://www.sevenforums.com/windows-updates-activation/339818-cannot-activate-oem-windows-7-fix-build-7601-counterfeit-warnings.html
Relevancy 42.14%

I need some help Warnings My Have Over Windows Center" Fake "security Desktop... Taken ridding my pc of this nightmare Tried running Spybot in safe mode but it crashes before Fake Windows "security Center" Warnings Have Taken Over My Desktop... it can finish fixing the problems it finds And for some reason it won't let me install AdAware I tried the SmithFraudFix but that didn't help either Here's the HiJackThis log Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Safe mode Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system lpcywinp exe C WINDOWS system devldr exe C WINDOWS explorer exe C WINDOWS System wbem wmiprvse exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName R - Default URLSearchHook is missing F - REG system ini UserInit C WINDOWS system lpcywinp exe C WINDOWS system userinit exe C WINDOWS system ntos exe O - Toolbar Norton AntiVirus - CDD BF- FFB- - AD - DF B D - C Program Files Norton AntiVirus NavShExt dll O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS System NvCpl dll NvStartup O - HKLM Run GWMDMMSG GWMDMMSG exe O - HKLM Run Hot Key Kbd Daemon SK DM EXE O - HKLM Run AdaptecDirectCD quot C Program Files Adaptec Easy CD Creator DirectCD DirectCD exe quot O - HKLM Run NAV Agent C PROGRA NORTON navapw exe O - HKLM Run Speed racer C Program Files Creative PlayCenter CTSRReg exe O - HKLM Run AudioHQ C Program Files Creative SBLive AudioHQ AHQTB EXE O - HKLM Run nwiz nwiz exe install O - HKLM Run SunJavaUpdateSched C Program Files Java j re bin jusched exe O - HKLM Run NvMediaCenter RUNDLL EXE C WINDOWS System NvMcTray dll NvTaskbarInit O - HKLM Run TkBellExe quot C Program Files Common Files Real Update OB realsched exe quot -osboot O - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run PCSuiteTrayApplication C Program Files Nokia Nokia PC Suite LaunchApplication exe -startup O - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottime O - HKLM Run runner C WINDOWS mrofinu exe A B BBF B FB F B E B F AA EBD D C B F O - HKLM Run troy C WINDOWS troy exe O - HKLM Run D - - E-E -ZN C DOCUME JOEBRO LOCALS Temp T CHD exe CHD O - HKLM Run d rundll exe quot C WINDOWS system dfnbkhan dll quot b O - HKLM RunOnce SpybotSnD quot C Program Files Spybot - Search amp Destroy SpybotSD exe quot autocheck O - HKLM RunOnce Spybot - Search amp Destroy quot C Program Files Spybot - Search amp Destroy SpybotSD exe quot autocheck O - HKLM RunOnce SpybotDeletingA command c del quot C WINDOWS search dll tobedeleted quot O - HKLM RunOnce SpybotDeletingC cmd c del quot C WINDOWS search dll tobedeleted quot O - HKLM RunOnce SpybotDeletingA command c del quot C WINDOWS settn dll tobedeleted quot O - HKLM RunOnce SpybotDeletingC cmd c del quot C WINDOWS settn dll tobedeleted quot O - HKLM RunOnce SpybotDeletingA command c del quot C WINDOWS pbsysie dll tobedeleted quot O - HKLM RunOnce SpybotDeletingC cmd c del quot C WINDOWS pbsysie dll tobedeleted quot O - HKLM RunOnce SpybotDeletingA command c del quot C WINDOWS kvnab dll tobedeleted quot O - HKLM RunOnce SpybotDeletingC cmd c del quot C WINDOWS kvnab dll tobedeleted quot O - HKLM RunOnce SpybotDeletingA command c del quot C WINDOWS iexplorr dll tobedeleted quot O - HKLM RunOnce SpybotDeletingC cmd c del quot C WINDOWS iexplorr dll tobedeleted quot O - HKLM RunOnce SpybotDeletingA command c del quot C WINDOWS system wml exe tobedeleted quot O - HKLM RunOnce SpybotDeletingC cmd c del quot C WINDOWS system wml exe tobedeleted quot O - HKLM RunOnce SpybotDeletingA command c del quot C WINDOWS system vxddsk exe tobedeleted quot O - HKLM RunOnc... Read more

A:Fake Windows "security Center" Warnings Have Taken Over My Desktop...

Welcome to the BleepingComputer HijackThis Logs and Analysis forum earthtojoeMy name is Richie and i'll be helping you to fix your problems.Please download/install Avira AntiVir Personal Edition Classic[Free]: http://www.free-av.com/Perform a full scan with Avira and allow it to delete everything it detects.Restart your pc when you've done.After restart,open Avira Antivirus and select "Reports".Then double click the report from the full scan you have just completed. Click the "Report File" button,then copy and paste the report into your next reply.Viewpoint Manager is considered as foistware instead of malware since it is installed without users approval but doesn't spy or do anything "bad". This will change from what we know in 2006 read this article: http://www.clickz.com/news/article.php/3561546You are well advised to remove the program now. Go to Start > Settings > Control Panel > Add/Remove Programs and remove the following programs if present,then restart your pc:ViewpointViewpoint ManagerViewpoint Media PlayerIf you have previously downloaded ComboFix,please delete that version now.WarningYou should NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert. It is intended by its creator to be used under the guidance and supervision of an expert,not for private use. Using this tool incorrectly could render your system/pc inoperable.Now download Combofix by sUBs and save to your desktop:Note It is important that it is saved directly to your desktop Close any open browsers.Double click on combofix.exe and follow the prompts. When it's finished it will produce a log. Post the entire contents of C:\ComboFix.txt into your next reply. Note Do not mouseclick combofix's window while it's running. That may cause the program to freeze/hang. Do NOT post the ComboFix-quarantined-files.txt unless I ask.NoteIn case your Antivirus or any other realtime scanner is displaying an alert after you downloaded Combofix or while you use Combofix,please disable your scanner and redownload Combofix again.Some scanners may see some combofix related components as suspicious and block or delete them while there's nothing wrong with them.Now go to: C:\Program Files\Trend Micro\HijackThis\HijackThis.exeRight click on Hijackthis.exe and select 'Rename', rename it to abc.batDouble click on abc.bat(which is still Hijackthis.exe),post that log into your next reply please.

http://www.bleepingcomputer.com/forums/t/125075/fake-windows-security-center-warnings-have-taken-over-my-desktop/
Relevancy 41.28%

Many users are concerned about the sudden appearance of Flash Player alerts or warnings when using Internet Explorer 11 on Windows 8 8.1 and Windows 10. These warnings or alert boxes pop up on some but not all sites that use flash and warn about about action script and other flash features. This is absolutely nothing to worry about. You have not been infected. The sites in question are not trying to install malware or anything to your computer.

What has happened is that in the August 2015 Windows updates, Microsoft has accidentally updated the embedded flash player in Internet Explorer 11 to use the debugger version instead of the “normal” version
http://myonlinesecurity.co.uk/flash...t-explorer-11-on-windows-88-1-and-windows-10/
 

https://forums.techguy.org/threads/flash-player-alerts-or-warnings-when-using-internet-explorer-11-on-windows-8-8-1-and.1153546/
Relevancy 41.28%

Many users are concerned about the sudden appearance of Flash Player alerts or warnings when using Internet Explorer 11 on Windows 8 8.1 and Windows 10. These warnings or alert boxes pop up on some but not all sites that use flash and warn about about action script and other flash features. This is absolutely nothing to worry about. You have not been infected. The sites in question are not trying to install malware or anything to your computer.

What has happened is that in the August 2015 Windows updates, Microsoft has accidentally updated the embedded flash player in Internet Explorer 11 to use the debugger version instead of the “normal” version
http://myonlinesecurity.co.uk/flash...t-explorer-11-on-windows-88-1-and-windows-10/
 

https://forums.techguy.org/threads/flash-player-alerts-or-warnings-when-using-internet-explorer-11-on-windows-8-8-1-and.1153548/