Windows Support Forum

IE crash after "Insecure Internet activity", "Security Center Alert" popup

Q: IE crash after "Insecure Internet activity", "Security Center Alert" popup

This began after dumbly going to some non-commercial website NAV auto-protect did initially detect Internet Alert" popup activity", IE "Security crash after "Insecure Center an infection but indicated it could not quarantine or delete Now when launching IE it attempts to redirect to a fake virus software website When I choose the quot not recommended quot link IE crashes shortly afterward Also I get a fake quot Security Center Alert quot popup every few minutes I stupidly clicked on the link to update the security center With System Restore deactivated I have run all updated full scans in safe mode NAV Ad-aware Spybot SpySweeper Avira and CCleaner Then I found this website and learned I should have waited to do this Spybot found a couple of registry entries but that was the only detection made by any of the programs other than NAV's initial auto-protect IE crash after "Insecure Internet activity", "Security Center Alert" popup message File gmer txt is attached dds txt DDS Version - NTFSx Run by Mike at on Sat Microsoft Windows XP Professional GMT - Running Processes C Program Files Webroot WebrootSecurity WRConsumerService exe C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs C Program Files Intel Wireless Bin S EvMon exe svchost exe svchost exe C Program Files Common Files Symantec Shared ccSetMgr exe C Program Files Common Files Symantec Shared ccEvtMgr exe C Program Files Common Files Symantec Shared SPBBC SPBBCSvc exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system spoolsv exe C Program Files Avira AntiVir PersonalEdition Classic sched exe C Program Files Avira AntiVir PersonalEdition Classic avguard exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Broadcom ASFIPMon AsfIpMon exe C Program Files Bonjour mDNSResponder exe C Program Files Symantec AntiVirus DefWatch exe C Program Files Intel Wireless Bin EvtEng exe C Program Files Dell QuickSet NICCONFIGSVC exe C Program Files Intel Wireless Bin RegSrvc exe C Program Files SigmaTel C-Major Audio WDM StacSV exe C WINDOWS Explorer EXE C Program Files Symantec AntiVirus Rtvscan exe C Program Files Apoint Apoint exe C Program Files Wave Systems Corp Trusted Drive Manager TdmService exe C WINDOWS system igfxpers exe C Program Files Java jre bin jusched exe C WINDOWS system igfxsrvc exe C Program Files Dell QuickSet quickset exe C Program Files Apoint ApMsgFwd exe C WINDOWS stsystra exe C Program Files Intel Wireless bin ZCfgSvc exe C Program Files Intel Wireless Bin ifrmewrk exe C Program Files Apoint HidFind exe C Program Files Wave Systems Corp Services Manager Docmgr bin WavXDocMgr exe C WINDOWS system dllhost exe C Program Files Wave Systems Corp SecureUpgrade exe C Program Files Apoint Apntex exe C WINDOWS system KADxMain exe C Program Files Roxio Drag-to-Disc DrgToDsc exe C Program Files Webroot WebrootSecurity SpySweeper exe C Program Files CyberLink PowerDVD DX PDVDDXSrv exe C Program Files Common Files Symantec Shared ccApp exe C PROGRA SYMANT VPTray exe C Program Files iTunes iTunesHelper exe C Program Files Adobe Photoshop Lightroom apdproxy exe C Program Files Avira AntiVir PersonalEdition Classic avgnt exe C Program Files Intel Wireless Bin WLKeeper exe C Documents and Settings Mike Application Data Google kjzna exe C Program Files Digital Line Detect DLG exe C WINDOWS system dllhost exe C Program Files Microsoft Reference Bookshelf qshelf exe C Program Files Handspring HOTSYNC EXE C WINDOWS system svchost exe -k imgsvc C Program Files iPod bin iPodService exe C Program Files Intel Wireless Bin Dot XCfg exe C WINDOWS Explorer EXE C Documents and Settings Mike Desktop dds com Pseudo HJT Report uSearch Page hxxp www google com hws sb dell-usuk-rel en side html channel us uDefault Page URL http www google com ig dell hl en amp us amp ibd mDefault Page URL hxxp www dell com mDefault Search URL hxxp www google com ie mStart Page hxxp www dell com uInternet Connection Wizard ShellNext hxxp www google com ig dell hl en amp client dell-usuk-rel amp channel us amp ibd uInternet Settings ProxyOverride localhost local uInternet Settings ProxyServer ftp localhost gopher localhost http localhost https localhost socks localhost uSearchAssistant hxxp www google com ie uSearchURL Default hxxp www google com search q s mSearchAssistant hxxp www google com hws sb dell-usuk-rel en side html channel us BHO E F-C D - D -B D- B D BE B - c program files common files adobe acrobat activex AcroIEHelper dll BHO BB-D F - C-B EB-D DAF D D - c program files java jre bin ssv dll uRun Smax quot c documents and settings mike application data google kjzna exe quot mRun Apoint quot c program files apoint Apoint exe quot mRun IgfxTray quot c windows system igfxtray exe quot mRun HotKeysCmds quot c windows system hkcmd exe quot mRun Persistence quot c windows system igfxpers exe quot mRun SunJavaUpdateSched quot c program files java jre bin jusched exe quot mRun Dell QuickSet quot c program files dell quickset quickset exe quot mRun SigmatelSysTrayApp quot c windows stsystra exe quot mRun IntelZeroConfig quot c program files intel wireless bin ZCfgSvc exe quot mRun IntelWireless quot c program files intel wireless bin ifrmewrk exe quot tf Intel PROSet Wireless mRun WavXMgr quot c program files wave systems corp services manager docmgr bin WavXDocMgr exe quot mRun SecureUpgrade quot c program files wave systems corp SecureUpgrade exe quot mRun KADxMain quot c windows system KADxMain exe quot mRun ISUSPM Startup quot c progra common instal update ISUSPM exe quot -startup mRun ISUSScheduler quot c program files common files installshield updateservice issch exe quot -start mRun RoxioDragToDisc quot c program files roxio drag-to-disc DrgToDsc exe quot mRun PDVDDXSrv quot c program files cyberlink powerdvd dx PDVDDXSrv exe quot mRun ccApp quot c program files common files symantec shared ccApp exe quot mRun vptray quot c progra symant VPTray exe quot mRun Adobe Reader Speed Launcher quot c program files adobe reader reader Reader sl exe quot mRun QuickTime Task quot c program files quicktime qttask exe quot -atboottime mRun iTunesHelper quot c program files itunes iTunesHelper exe quot mRun Adobe Photo Downloader quot c program files adobe photoshop lightroom apdproxy exe quot mRun avgnt quot c program files avira antivir personaledition classic avgnt exe quot min mRun SpySweeper quot c program files webroot webrootsecurity SpySweeperUI exe quot startintray StartupFolder c docume mike startm programs startup hotsyn lnk - c program files handspring HOTSYNC EXE StartupFolder c docume alluse startm programs startup digita lnk - c program files digital line detect DLG exe StartupFolder c docume alluse startm programs startup micros lnk - c program files microsoft office office OSA EXE StartupFolder c docume alluse startm programs startup qshelf lnk - c program files microsoft reference bookshelf qshelf exe IE FB F -F - d -BB E- C F - c program files messenger msmsgs exe IE B E C - FCB- CF-AAA - C - CAFEEFAC- - - -ABCDEFFEDCBC - c program files java jre bin ssv dll IE FB F -F - d -BB E- C F - c program files messenger msmsgs exe TCP D B - E - D-BF -A D Notify gemsafe - c program files gemplus gemsafe libraries bin WLEventNotify dll Notify igfxcui - igfxdev dll Notify NavLogon - c windows system NavLogon dll LSA Authentication Packages msv wvauth SERVICES DRIVERS R PBADRV PBADRV c windows system drivers PBADRV sys - - R ssfs bbc ssfs bbc c windows system drivers ssfs bbc sys - - R avgio avgio c program files avira antivir personaledition classic avgio sys - - R DLARTL M DLARTL M c windows system drivers DLARTL M SYS - - R SAVRT SAVRT c program files symantec antivirus savrt sys - - R SAVRTPEL SAVRTPEL c program files symantec antivirus Savrtpel sys - - R aawservice Lavasoft Ad-Aware Service quot c program files lavasoft ad-aware aawservice exe quot - - R AntiVirScheduler Avira AntiVir Personal - Free Antivirus Scheduler quot c program files avira antivir personaledition classic sched exe quot - - R AntiVirService Avira AntiVir Personal - Free Antivirus Guard quot c program files avira antivir personaledition classic avguard exe quot - - R ASFIPmon Broadcom ASF IP and SMBIOS Mailbox Monitor quot c program files broadcom asfipmon AsfIpMon exe quot -service - - R ccEvtMgr Symantec Event Manager quot c program files common files symantec shared ccEvtMgr exe quot - - R ccSetMgr Symantec Settings Manager quot c program files common files symantec shared ccSetMgr exe quot - - R Symantec AntiVirus Symantec AntiVirus quot c program files symantec antivirus Rtvscan exe quot - - R TdmService TdmService c program files wave systems corp trusted drive manager TdmService exe - - R Wave UCSPlus Wave UCSPlus c windows system dllhost exe Processid BDFEFE - F F- F - D- BF A CA D - - R WavxDMgr WavxDMgr c windows system drivers WavxDMgr sys - - R WebrootSpySweeperService Webroot Spy Sweeper Engine quot c program files webroot webrootsecurity SpySweeper exe quot - - R WRConsumerService Webroot Client Service quot c program files webroot webrootsecurity WRConsumerService exe quot - - R avgntflt avgntflt c program files avira antivir personaledition classic avgntflt sys - - R DXEC DXEC c windows system drivers dxec sys - - R EraserUtilRebootDrv EraserUtilRebootDrv c program files common files symantec shared eengine EraserUtilRebootDrv sys - - R NAVENG NAVENG c progra common symant virusd naveng sys - - R NAVEX NAVEX c progra common symant virusd navex sys - - R WaveFDE Wave System Power Monitor Device Driver c windows system drivers WaveFDE sys - - S RTIUSB RTI USB Driver c windows system drivers RTIusb sys - - S SavRoam SAVRoam quot c program files symantec antivirus SavRoam exe quot - - S SecureStorageService SecureStorageService quot c program files wave systems corp secure storage manager SecureStorageService exe quot - - S WaveEnrollmentService WaveEnrollmentService quot c program files wave systems corp authentication manager WaveEnrollmentService exe quot - - Created Last - - a------- c windows gmer ini - - lt DIR gt --d----- c program files CCleaner - - lt DIR gt --d----- c program files Avira - - lt DIR gt --d----- c docume alluse applic Avira - - lt DIR gt --d----- C Binaries - - a------- c windows WRSetup dll - - lt DIR gt --d----- c program files Webroot - - lt DIR gt --d----- c docume mike applic Webroot - - lt DIR gt --d----- c docume alluse applic Webroot - - lt DIR gt --d----- c docume mike applic Malwarebytes - - a------- c windows system drivers mbam sys - - a------- c windows system drivers mbamswissarmy sys - - lt DIR gt --d----- c program files Malwarebytes' Anti-Malware - - lt DIR gt --d----- c docume alluse applic Malwarebytes - - lt DIR gt --d----- c program files Trend Micro - - lt DIR gt --d----- c program files Spybot - Search amp Destroy - - lt DIR gt --d----- c program files common files Wise Installation Wizard - - a------- c windows system wuapi dll mui - - lt DIR gt --d----- c program files Sony - - a------- c windows system drivers ssidrv sys - - a------- c windows system drivers ssfs bbc sys - - a------- c windows system drivers sshrmd sys Find M - - a------- c windows system dllcache wuaueng dll - - a------- c windows system dllcache wucltui dll - - a------- c windows system dllcache wuapi dll - - a------- c windows system dllcache cdm dll - - a------- c windows system dllcache wuauclt exe - - a------- c windows system dllcache wups dll FINISH

Relevancy 100%
Preferred Solution: IE crash after "Insecure Internet activity", "Security Center Alert" popup

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/directdownload.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: IE crash after "Insecure Internet activity", "Security Center Alert" popup

Before any work can be done on this machine, there is something that requires your immediate intervention.

This machine is messed up pretty badly because you have several anti-virus programs on your machine. That's not a good idea!!

Alike firewalls, anti-virus programs have conflicts co-existing with each other & produces undesirable results. Please uninstall ALL leaving only one of them.

ALL the antivirus programs must be removed via add/remove program.
For any program that doesn't have an add/remove entry, you will have to do this:re-install the program -> reboot -> uninstallPost a fresh logs when you have completed the above task.

http://www.techsupportforum.com/forums/f100/ie-crash-after-insecure-internet-activity-security-center-alert-popup-320841.html
Relevancy 139.19%

Hello I'm running Windows XP SP Alert" Center install Defense" popups, "Malware "Security self I have fake quot Security Center Alert quot popups and quot Security Center quot popups A program called quot Malware Defense quot has also seemed to installed itself onto my computer And I've just noticed porn icons appearing on my desktop It's also disabled my Avira software GMER doesn't seem to run I've clicked on it a couple of times but it doesn't seem to do anything The DDS logs are attached follows Thanks in advance DDS Ver - - - NTFSx Run by zili at on Wed Internet Explorer BrowserJavaVersion Microsoft Windows XP Professional GMT AV AntiVir Desktop On-access scanning disabled Updated AD - F - A-A -FDD C Running Processes C WINDOWS system Ati evxx exe C WINDOWS system svchost -k DcomLaunch svchost exe C WINDOWS System svchost exe -k netsvcs C WINDOWS system svchost exe -k WudfServiceGroup svchost exe svchost exe C WINDOWS system Ati evxx exe C WINDOWS system spoolsv exe C WINDOWS "Security Center Alert" popups, "Malware Defense" self install Explorer EXE C WINDOWS stsystra exe C Program Files CyberLink PowerDVD DX PDVDDXSrv exe C Program Files Google Gmail Notifier gnotify exe C WINDOWS system rundll exe C Program Files ATI Technologies ATI ACE Core-Static MOM exe C Program Files Java jre bin jusched exe C Program Files iTunes iTunesHelper exe C "Security Center Alert" popups, "Malware Defense" self install WINDOWS system ctfmon exe C Program Files Skype Phone Skype exe C PROGRA PANICW POP-UP PSFree exe C DOCUME zili LOCALS Temp settdebugx exe C Program Files GetRight GetRight exe C Program Files ATI Technologies ATI ACE Core-Static ccc exe C DOCUME zili LOCALS Temp wscsvc exe C Program Files Skype Plugin Manager skypePM exe svchost exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Bonjour mDNSResponder exe svchost exe C Program Files Java jre bin jqs exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C Program Files NetLimiter Monitor nlsvc exe C WINDOWS system svchost exe -k imgsvc C Program Files NetLimiter Monitor NLClient exe C Program Files iPod bin iPodService exe C WINDOWS system wuauclt exe C Program Files Internet Explorer Iexplore exe C Documents and Settings zili Desktop dds scr Pseudo HJT Report uStart Page hxxp www bom gov au products IDN shtml uInternet Connection Wizard ShellNext iexplore uInternet Settings ProxyOverride local BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files common files adobe acrobat activex AcroIEHelperShim dll BHO Skype add-on mastermind bf b-c d - d - a -a f ba c - c program files skype toolbars internet explorer SkypeIEPlugin dll BHO IE to GetRight Helper ff d- a - a-a ef- ba a e - c program files getright xx gr dll BHO C C A-E - b - D - CECB - No File BHO Windows Live Sign-in Helper d - c - abf- ecc- c - c program files common files microsoft shared windows live WindowsLiveLogin dll BHO Google Toolbar Notifier BHO af de - d - -b fa-ce b ad d - c program files google googletoolbarnotifier swg dll BHO IeMonitorBho Class bf e - a - fd -b - b e c - c program files megaupload mega manager MegaIEMn dll BHO Java tm Plug-In SSV Helper dbc -a - b-bc - c c c a - c program files java jre bin jp ssv dll BHO JQSIEStartDetectorImpl Class e e f - ce- c -bc -eabfe f c - c program files java jre lib deploy jqs ie jqs plugin dll TB AAC-C - - E A- E A E - No File TB F ACBB- F- C -A -FF D D CC - No File uRun CTFMON EXE c windows system ctfmon exe uRun Google Update quot c documents and settings zili local settings application data google update GoogleUpdate exe quot c uRun PlayNC Launcher uRun Skype quot c program files skype phone Skype exe quot nosplash minimized uRun PopUpStopperFreeEdition quot c progra panicw pop-up PSFree exe quot uRun settdebugx exe c docume zili locals temp settdebugx exe mRun IMJPMIG quot c windows ime imjp IMJPMIG EXE quot Spoil... Read more

A:"Security Center Alert" popups, "Malware Defense" self install

Let's try this version of gmer.


Download GMER Rootkit Scanner from here to your desktop. Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

http://www.techsupportforum.com/forums/f284/security-center-alert-popups-malware-defense-self-install-448836.html
Relevancy 126.79%

Hi My computer seems to have contracted a virus with the following symptoms A fake Windows Security Alerts icon red shield in the system tray Random popups with fake warnings that Windows firewall has blocked quot Spyware Ispynow quot A start page in both IE and Firefox that warns of quot Insecure Internet Activity quot and gives the option to redirect to an anti-spyware site or to continue browsing unprotected Several attempts to find and remove the infection with many different tools have all done nothing to slow this bugger down Any help is much appreciated Thanks HijackThis Log warnings Internet Activity" "Insecure File Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Lavasoft Ad-Aware aawservice exe C Program Files Alwil Software Avast aswUpdSv exe C Program Files Alwil Software Avast ashServ exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin "Insecure Internet Activity" warnings AppleMobileDeviceService exe C "Insecure Internet Activity" warnings Program Files Bonjour mDNSResponder exe C Program Files WIDCOMM Bluetooth Software bin btwdins exe C WINDOWS system HPZipm exe C WINDOWS system svchost exe C WINDOWS Explorer EXE C WINDOWS system hkcmd exe C Program Files Java jre bin jusched exe C Program Files Synaptics SynTP SynTPLpr exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files HP hpcoretech hpcmpmgr exe C WINDOWS system hphmon exe C Program Files HPQ Quick Launch Buttons EabServr exe C WINDOWS System spool DRIVERS W X E S I H EXE C Program Files Pinnacle Shared Files Programs USBTip USBTip exe C Program Files iTunes iTunesHelper exe C Program Files HP HP Software Update HPWuSchd exe C PROGRA ALWILS Avast ashDisp exe C WINDOWS system ctfmon exe C WINDOWS system drivers svchost exe C WINDOWS system wscntfy exe C Program Files WIDCOMM Bluetooth Software BTTray exe C Program Files Red Chair Software Riorad Explorer riormgr exe C WINDOWS System svchost exe C Program Files iPod bin iPodService exe C Program Files Spybot - Search amp Destroy SpybotSD exe C Program Files Malwarebytes Anti-Malware mbam exe C Program Files Malwarebytes Anti-Malware mbam exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Search Bar http ie redirect hp com svs rdr TYPE amp tp iesearch amp locale EN US amp c Q amp bd pavilion amp pf laptop R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Connection Wizard ShellNext http ie redirect hp com svs rdr TYPE amp tp iehome amp locale EN US amp c Q amp bd pavilion amp pf laptop R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C Program Files Spybot - Search amp Destroy SDHelper dll O - BHO no name - B CA - A - D -A DF- BB - no file O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO FDMIECookiesBHO Class - CC E F - E - FA- FAA- BF - C Program Files Free Download Manager iefdmcks dll O - BHO no name - FDD B - D - ffb- - B AD ACC - no file O - HKLM Run IgfxTray C WINDOWS system igfxtray exe O - HKLM Run HotKeysCmds C WINDOWS system hkcmd ex... Read more

Relevancy 125.86%

One lapse of judgement and I'm out of action for the weekend Anyway I've run Avast and removed a number of viruses it found but I still have these annoying popups etc Log reLogfile of Trend Micro HijackThis v Scan saved at VIRUS ALERT on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe "Security and Time Alert" also popups ALERT!" 24h reads changed to various "VIRUS C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system Ati evxx exe C WINDOWS system ZoneLabs vsmon exe C WINDOWS Explorer EXE C Program Files Lavasoft Ad-Aware aawservice exe C Program Files Avast Avast aswUpdSv exe C Program Files Avast Avast ashServ exe C WINDOWS system spoolsv exe C WINDOWS SOUNDMAN EXE C PROGRA Avast Time changed to 24h and reads "VIRUS ALERT!" also various "Security Alert" popups Avast ashDisp exe C Program Files D-Tools daemon exe C Program Files Winamp winampa exe C Program Files Common Files Real Update OB realsched exe C Program Files Java jre bin jusched exe C WINDOWS CTHELPER EXE C WINDOWS system RunDll exe C Program Files Zone Labs ZoneAlarm zlclient exe C WINDOWS vVX exe C Program Files Skype Phone Skype exe C Program Files Electronic Arts EADM Core exe C WINDOWS system WTablet TabUserW exe C Program Files VIA RAID raid tool exe C Program Files ATI Technologies ATI ACE Core-Static MOM exe C Program Files Logitech MouseWare system em exec exe C Program Files Microsoft LifeCam MSCamS exe C WINDOWS system PnkBstrA exe C WINDOWS system svchost exe C WINDOWS system Tablet exe C Program Files Skype Plugin Manager SkypePM exe C Program Files ATI Technologies ATI ACE Core-Static ccc exe C Program Files Avast Avast ashMaiSv exe C Program Files Avast Avast ashWebSv exe C Program Files Real RealPlayer RealPlay exe Time changed to 24h and reads "VIRUS ALERT!" also various "Security Alert" popups C Program Files Real RealPlayer RealPlay exe C WINDOWS system WgaTray exe C Program Files Mozilla Firefox firefox exe C Program Files A Time changed to 24h and reads "VIRUS ALERT!" also various "Security Alert" popups A exe C Program Files HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http softwarereferral com jump php MjI Ojg amp lid O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO QXK Olive - C - - CD -A A -EDDAFE CEDF - C WINDOWS vortsgbqrfe dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - Toolbar olnmraew - BC E B-BDE - CF -B - E B - C WINDOWS olnmraew dll O - HKLM Run SoundMan SOUNDMAN EXE O - HKLM Run ATIPTA quot C Program Files ATI Technologies ATI Control Panel atiptaxx exe quot O - HKLM Run avast C PROGRA Avast Avast ashDisp exe O - HKLM Run DAEMON Tools- quot C Program Files D-Tools daemon exe quot -lang O - HKLM Run WinampAgent C Program Files Winamp winampa exe O - HKLM Run TkBellExe quot C Program Files Common Files Real Update OB realsched exe quot -osboot O - HKLM Run Logitech Utility Logi MwX Exe O - HKLM Run SunJavaUpdateSched C Program Files Java jre bin jusched exe O - HKLM Run NeroFilterCheck C WINDOWS system NeroCheck exe O - HKLM Run CTHelper CTHELPER EXE O - HKLM Run UpdReg C WINDOWS UpdReg EXE O - HKLM Run CmUsbSound RunDll cmcnfgu cpl CMICtrlWnd O - HKLM Run ZoneAlarm Client quot C Program Files Zone Labs ZoneAlarm zlclient exe quot O - HKLM Run SeekmoOE C Program Files Seekmo bin OEAddOn exe O - HKLM Run SeekmoSA quot C Program Files Seekmo bin SeekmoSA exe quot O - HKLM Run VX C WINDOWS vVX exe O - HKLM Run LifeCam quot C Program Files Microsoft LifeCam LifeExp exe quot O - HKLM Run StartCCC quot C Program Files ATI Technologies ATI ACE Core-Static CLIStart exe quot MSRun O - H... Read more

A:Time changed to 24h and reads "VIRUS ALERT!" also various "Security Alert" popups

Apologies for the double-post. I could not see an edit function.
I've cleaned out a couple of nasties with Adaware, although i've not seen much change - still getting the same "VIRUS ALERT!" and popups. Still, I thought it best to update the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:37: VIRUS ALERT!, on 12/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Avast\Avast4\aswUpdSv.exe
C:\Program Files\Avast\Avast4\ashServ.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\Avast\Avast4\ashDisp.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\vVX1000.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\Avast\Avast4\ashMaiSv.exe
C:\Program Files\Avast\Avast4\ashWebSv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php...MjI6Ojg5&lid=2
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: QXK Olive - {65352C87-3458-4CD8-A4A0-EDDAFE7CEDF2} - C:\WINDOWS\vortsgbqrfe.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: olnmraew - {BC589E0B-BDE4-4CF5-B052-9E97921302B1} - C:\WINDOWS\olnmraew.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SeekmoOE] C:\Program Files\Seekmo\bin\10.0.406.0\OEAddOn.exe
O4 - HKLM\..\Run: [SeekmoSA] "C:\Program Files\Seekmo\bin\10.0.406.0\SeekmoSA.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [Li... Read more

http://www.techsupportforum.com/forums/f100/time-changed-to-24h-and-reads-virus-alert-also-various-security-alert-popups-301340.html
Relevancy 124.31%

Ok where do I begin I have been dealing with viruses spyware malware for the past week It all started with Norton advising me that I had been infected with Trojan Vundo and Trojan Zonebac After that I started receiving many different pop ups warning me about critical system alerts I also had an and Guide" Center" on desktop "Live friends Security "Online Help? 2 Safety evil annoying yellow triangle at the bottom of my screen warning me about different trojans and worms More evil friends included new icons that had made their home on my desktop one named quot Live Safety Center quot and the other quot Online Security Guide 2 evil friends on desktop "Live Safety Center" and "Online Security Guide" Help? quot also installed was a new toolbar named quot Security Toolbar quot I have scanned my computer with many different programs and have somehow finally managed to get rid of the pop ups and toolbar although I know I'm probably still infected somewhere I'm sorry this is so long but I wanted to explain EVERYTHING I'm running Windows XP SP and have followed all steps to post I downloaded DSS but after many attempts to run it just wouldn't let me I do have a fresh hijackthis log and my Panda report I hope this is good enough Many thanks in advance to whomever helps me I am desperate Monica Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C Program Files Windows Defender MsMpEng exe C WINDOWS System svchost exe C Program Files Sygate SPF smc exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Common Files Symantec Shared AppCore AppSvc exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system spoolsv exe C Program Files Common Files AOL ACS AOLacsd exe C WINDOWS wanmpsvc exe C WINDOWS Explorer EXE C Program Files QuickTime bak qttask exe C Program Files Common Files Symantec Shared ccApp exe C Program Files Common Files AOL ee AOLSoftware exe C Program Files Windows Defender MSASCui exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files Hewlett-Packard Digital Imaging bin hpohmr exe C Program Files Hewlett-Packard Digital Imaging bin hpotdd exe C Program Files Hewlett-Packard Digital Imaging bin hpoevm exe C Program Files Hewlett-Packard Digital Imaging Bin hpoSTS exe C WINDOWS System svchost exe C Program Files Common Files Symantec Shared CCPD-LC symlcsvc exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www dell me com myway R - HKLM Software Microsoft Internet Explorer Main Start Page http www dell me com myway O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat Reader ActiveX AcroIEHelper dll O - BHO no name - E A - - D F-BEAE-D A C - C Program Files Common Files Symantec Shared coShared Browser NppBho dll O - BHO no name - FDA -E E - BDA-BBE - DB CDDB - no file O - BHO Spybot-S amp D IE Protection - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO no name - C B A - DB - A -A CB-D BBFEB - no file O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS system dla tfswshx dll O - BHO no name - C A-F - -A F-A A D F - no file O - BHO no name - D -B - F -B CA- E - no file O - BHO no name - A BC A - CF- B- B D-B C B CD - no file O - BHO no name - A C - F- E- ECB- D - no file O - BHO no name - A B - D E- -A - C DE A - no file O - BHO f- a -f ab- - bfab f a bf - fb a f b-afb - -ba f- a f - C WINDOWS system npsbqepw dll O - BHO no name - FDD B - D - ffb- - B AD ACC - no file O - Toolbar AIM Search - D A B-D B- d - A - EE F C - C Program Files AIM Toolbar AIMBar dll O - Toolbar Show Norton Toolbar - -F... Read more

A:2 evil friends on desktop "Live Safety Center" and "Online Security Guide" Help?

Hi, thanks for trying to perform all the steps.


Quote:




I downloaded DSS, but after many attempts to run, it just wouldn't let me.




At what stage does DSS stop working?

http://www.techsupportforum.com/forums/f284/2-evil-friends-on-desktop-live-safety-center-and-online-security-guide-help-195707.html
Relevancy 123.07%

I'm having the same problem that a lot of people are having These icons have showed up on my desktop and i keep getting pop ups telling me to download them because i have a virus i would really applicate the help thanks John -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point -- Last Restore Point s -- - - UTC - RP - Deckard's System Scanner Restore Point - - UTC - RP - System Checkpoint - - UTC - RP - System Checkpoint - - UTC - RP - Software Distribution Service - - UTC - RP - Removed Banctec Service Agreement -- First Restore Point -- - - UTC - RP - System Checkpoint Backed up registry hives Performed disk cleanup Percentage of Memory in Use more than Total Physical Memory MiB MiB recommended System Drive C has GiB less than free -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend security center" "live log guide" deckard here "online and safety Micro HijackThis v Scan saved at - - Platform Windows XP Service Pack MSIE Internet Explorer Boot mode Normal Running processes C WINDOWS SYSTEM SMSS EXE C WINDOWS SYSTEM WINLOGON EXE C WINDOWS SYSTEM SERVICES EXE C WINDOWS SYSTEM LSASS EXE C WINDOWS SYSTEM SVCHOST EXE C WINDOWS SYSTEM SVCHOST EXE C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Common Files Symantec Shared AppCore AppSvc exe C WINDOWS SYSTEM "online security guide" and "live safety center" deckard log here spoolsv exe C Program Files Symantec LiveUpdate AluSchedulerSvc exe C Program Files Common Files Symantec Shared ccSvcHst exe C WINDOWS SYSTEM CTSVCCDA EXE "online security guide" and "live safety center" deckard log here C WINDOWS SYSTEM SVCHOST EXE C WINDOWS SYSTEM MsPMSPSv exe C WINDOWS explorer exe C Program "online security guide" and "live safety center" deckard log here Files Java j re bin jusched exe C Program Files Intel Modem Event Monitor IntelMEM exe C WINDOWS SYSTEM RUNDLL EXE C Program Files Dell Media Experience PCMService exe C Program Files CyberLink PowerDVD DVDLauncher exe C WINDOWS SYSTEM dla tfswctrl exe C WINDOWS SYSTEM hkcmd exe C WINDOWS SYSTEM igfxpers exe C Program Files iTunes iTunesHelper exe C Program Files Common Files Symantec Shared ccApp exe C Program Files iPod bin iPodService exe C Program Files Mozilla Firefox firefox exe C Program Files Mozilla Firefox firefox exe C Program Files Mozilla Firefox firefox exe C Documents and Settings John Desktop dss exe C Program Files Internet Explorer IEXPLORE EXE R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www dell me com myway R - HKCU Software Microsoft Internet Explorer Main Search Bar http www google com ie R - HKCU Software Microsoft Internet Explorer Main Start Page http securityresponse symantec com fix homepage R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www dell me com myway R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyServer O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat Reader ActiveX AcroIEHelper dll O - BHO no name - E A - - D F-BEAE-D A C - C Program Files Common Files Symantec Shared coShared Browser NppBHO dll O - BHO no name - CB F B - F - D E-BC B- A - C WINDOWS SYSTEM ssqnnnm dll O - BHO RXResultTracker Class - FA - - c-A CC- EC DE CA - C Program Files RXToolBar sfcont dll file missing O - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS SYSTEM dla tfswshx dll O - BHO ab ae b- - a- -ffe f d a - a d f- eff- -a - b ea ba - C WINDOWS SYSTEM jgqnbgas dll O - BHO no name - A B - D E- -A - C DE A - C WINDOWS SYSTEM ujxxmekz dll O - BHO no name - DC BD B-BB - -B -C B C BCD AB - C WINDOWS SYSTEM pmnno dll O - Toolbar no name - BA B -B - c -B - F F - no file O - Toolbar Show Norton Toolbar - -F - -B -FBEE C B DF - C Program Files Common Files Symantec Shar... Read more

A:"online security guide" and "live safety center" deckard log here

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please download VundoFix.exe to your desktop. We'll use this later.

Download SDFix and save it to your Desktop.

Please download & install - ERUNT (This is a utility that'll replicate a copy of your Registry)
Start ERUNT, confirm the Welcome message.

Next, select the backup options:

System registry
Current User Registry
Other open user registry

Click "OK" and wait until the backup process is complete. (Note that depending on your system configuration this may take some time, and that the first bar is NOT a progress bar, just an indicator that the program is still running.)
# Note: To ensure proper operation of ERUNT, you should be logged in as a system administrator.

Disconnect from the internet.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

---------------------------------------------------------------------------------------------

Copy and paste the following into Notepad (don't forget to copy and paste REGEDIT4):


Quote:




REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00




Save the file as "delete.reg". Make sure to save it with the quotes. It should look like this:

Close Notepad.

Double click on the delete.reg file and choose Yes to merge/add it to the registry. You may delete the file afterwards.

---------------------------------------------------------------------------------------------
Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK.
Please post the contents of C:\vundofix.txt in your next reply..
Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.

Once VundoFix has completed it's work....

Please then reboot your computer in Safe Mode by doing the following :Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries if they still exist and click Fix Checked

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: (no name) - {4CB8F4B4-5F66-4D9E-BC3B-184596A58824} - C:\WINDOWS\SYSTEM32\ssqnnnm.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461... Read more

http://www.techsupportforum.com/forums/f100/online-security-guide-and-live-safety-center-deckard-log-here-196041.html
Relevancy 123.07%

I don't have a clue where to begin trying to fix this problem. Spybot doesn't seem to fix the problem. I keep getting random icons on my desktop and start menu called "online security guide" and "live saftey center". There are also many fake balloon warnings appearing and a window titled "Critical System Warning!" that wants me to download stuff. What process can I go through to clean my system. Any help would be great...thank you!

A:i need help - "online security guide" & "live safety center" icons!!

Please follow MicroBell's 5 Step process outlined here:

http://www.techsupportforum.com/secu...tml#post342651

After running through all the steps, please post the requested logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

http://www.techsupportforum.com/forums/f284/i-need-help-online-security-guide-and-live-safety-center-icons-193369.html
Relevancy 121.83%

My son uses his computer on the net a lot and of course there is a virus out there waiting to serve its Safety get Security and rid Need Center" of "Live "Online Guide" to twisted master He got the wellknown quot Live Safety Center quot and quot Online Security Guide quot and it keeps comming back and hijacks his internet browser to Need to get rid of "Live Safety Center" and "Online Security Guide" redirect to the same page that promises peace and wellbeing for money of course Here is the DDS log quot Deckard's System Scanner v Run by Emil on - - Computer is in Normal Mode -------------------------------------------------------------------------------- -- HijackThis run as Emil exe ------------------------------------------------ Logfile of Trend Micro HijackThis v Scan saved at on - - Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C Programmer Alwil Software Avast aswUpdSv exe C Programmer Alwil Software Avast ashServ exe C WINDOWS system spoolsv exe C Programmer F lles filer Apple Mobile Device Support bin AppleMobileDeviceService exe C WINDOWS system agsdyely exe C Programmer F lles filer Microsoft Shared VS DEBUG MDM EXE C WINDOWS System nvsvc exe C WINDOWS System svchost exe C Programmer Alwil Software Avast ashMaiSv exe C Programmer Alwil Software Avast ashWebSv exe C WINDOWS Explorer EXE C WINDOWS system RUNDLL EXE C WINDOWS SOUNDMAN EXE C WINDOWS system LVCOMSX EXE C Programmer Logitech Video LogiTray exe C PROGRA ALWILS Avast ashDisp exe C Programmer Java jre bin jusched exe C Programmer iTunes iTunesHelper exe C WINDOWS Fonts svchost exe C WINDOWS mrofinu exe C WINDOWS Fonts svchost exe C WINDOWS system ctfmon exe C Programmer MSN Messenger MsnMsgr Exe C Programmer Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Programmer Logitech Video FxSvr exe C Programmer iPod bin iPodService exe C Programmer limewire limewire exe C HBA Virus dss exe C PROGRA TRENDM HIJACK Emil exe C WINDOWS system mspaint exe R - HKCU Software Microsoft Internet Explorer Main Start Page about blank R - HKCU Software Microsoft Internet Explorer SearchURL Default http g msn dk SEDADK SAOS FORM TOOLBR R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName Hyperlinks O - BHO Yahoo Toolbar Helper - Taboola Footer - C Programmer Yahoo Companion Installs cpn yt dll O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Programmer F lles filer Adobe Acrobat ActiveX AcroIEHelper dll O - BHO Media Holding Enterprises LLC - D A - F A- C -A - E FDC - C Programmer ContextTool ContextTool- dll O - BHO Yahoo IE Services Button - BAB B B- BC- B - D - FC DE A - C Programmer Yahoo Common yiesrvc dll O - BHO no name - F A - - -A B - A CC D F - C WINDOWS system mljge dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Programmer Java jre bin ssv dll O - BHO no name - E D - A- EC-A -BA D E E - no file O - BHO no name - A A- B F- E A-B D - D F - C Programmer Windows NT hosecuC WINDOWS system e caws exe dll file missing O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Programmer F lles filer Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO no name - A B - D E- -A - C DE A - C WINDOWS system zpsfvoli dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c programmer google googletoolbar dll O - BHO Google Toolbar Notifier BHO - AF DE - D - -B FA-CE B AD D - C Programmer Google GoogleToolbarNotifier swg dll O - BHO Windows Live Toolbar Helper - BDBD DAD-C - A -ADC - B B FF D - C Programmer Windows Live Toolbar msntb dll O - BHO e e - e -bfe -f - fd c feb - bef c - df - f- efb- e e e - C WINDOWS system ntwsbkjy dll O - Toolbar Yahoo Toolbar - EF BD -C FB- D - F- D F - C Programmer Yahoo Companion Installs cpn yt dll O... Read more

A:Need to get rid of "Live Safety Center" and "Online Security Guide"

I did follow MicroBell's 5 Step process and the Panda scan said that no virus could be found. However, my Avast anti-virus warned me 5-6 times about files while I was running the Panda virus scanning. One of them was named "win.exe" and was in C:\temp\ but has now been deleted. Every time Avast issued a virus alert I chose the option to delete the file in question.

http://www.techsupportforum.com/forums/f284/need-to-get-rid-of-live-safety-center-and-online-security-guide-194341.html
Relevancy 121.83%

I don't have a clue where to begin trying to fix this problem. I keep getting random icons on my desktop called "online security guide" and "live safety center". There are also many fake balloon warnings appearing and a window titled "Critical System Warning!" that wants me to download stuff. What process can I go through to clean my system. I didn't have this problem until I upgraded to Norton 2008. I am currently running IP tool antivirus and spyware, I also have ran Smitfraudfix, still getting pop ups like crazy. Also my IP tools is finding Trojan.Virtumonde. I use Quicken and it seems to have attacked it because I am no longer able to use it. Any help would be great...thank you!

A:"online security guide" and "live safety center"

Hi and welcome to TSF.

Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers.

Since it has been a few days since you first posted, please follow these instructions if you still need assistance.

Download Deckard's System Scanner (DSS) to your Desktop . Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - minimised > extra.txt and maximised > main.txt.
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt back in this thread (do not attach it).
Please attach extra.txt to your post.


To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

I will monitor this thread for your reply.

Thank you for your patience.

http://www.techsupportforum.com/forums/f284/online-security-guide-and-live-safety-center-193888.html
Relevancy 118.11%

Got my computer back today Windows XP and my background is now all green with a black box in the middle saying quot Your System Is Infected etc quot Also a red circle with a white X in the task bar I can't open the task manager Can Anyone Help Downloaded HiJackThis My log Logfile of Trend Micro HijackThis v Scan "Internet Security System virus/malware "Your Infected" problem Background 2010" + Is saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe "Your System Is Infected" Background + "Internet Security 2010" virus/malware problem C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin S EvMon exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C PROGRA AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C Program Files TOSHIBA ConfigFree CFSvcs exe C WINDOWS system dlcqcoms exe C PROGRA AVG AVG avgrsx exe C WINDOWS system DVDRAMSV exe C PROGRA AVG AVG avgnsx exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C WINDOWS Explorer EXE C WINDOWS system ctfmon exe C Program Files TOSHIBA TOSHIBA Controls TFncKy exe C WINDOWS system TDispVol exe C Program Files Synaptics SynTP SynTPEnh exe C WINDOWS system igfxtray exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C WINDOWS ehome ehtray exe C Program Files Toshiba Toshiba Applet thotkey exe C Program Files Synaptics SynTP Toshiba exe C Program Files Synaptics SynTP SynTPLpr exe C Program Files ltmoh Ltmoh exe C WINDOWS AGRSMMSG exe C Program Files TOSHIBA ConfigFree NDSTray exe C Program Files Toshiba Tvs TvsTray exe C Program Files Intel Wireless Bin RegSrvc exe C Program Files TOSHIBA TOSHIBA Zooming Utility SmoothView exe C WINDOWS system dla DLACTRLW exe C Program Files Intel Wireless bin ZCfgSvc exe C Program Files Intel Wireless Bin ifrmewrk exe C Program Files Dell Photo AIO Printer dlcqmon exe C Program Files Dell Photo AIO Printer memcard exe C Program Files Common Files InstallShield UpdateService issch exe C WINDOWS system TPSBattM exe C WINDOWS system svchost exe C Program Files TOSHIBA ConfigFree CFSServ exe c TOSHIBA IVP swupdate swupdtmr exe C Program Files TOSHIBA TOSHIBA Applet TAPPSRV exe C Program Files QuickTime QTTask exe C WINDOWS system winupdate exe C PROGRA AVG AVG avgtray exe C Program Files Viewpoint Common ViewpointService exe C Program Files iTunes iTunesHelper exe C Program Files Corel Corel Photo Album MediaDetect exe C Program Files TOSHIBA TOSCDSPD toscdspd exe C Program Files AIM aim exe C Program Files MP Player mp Player exe C Program Files Yahoo SoftwareUpdate YahooAUService exe C Program Files InternetSecurity IS exe C Program Files Adobe Acrobat Reader reader sl exe C Program Files McAfee Security Scan SSScheduler exe C WINDOWS system wuauclt exe C WINDOWS system RAMASST exe C Program Files Cisco Systems Clean Access Agent CCAAgent exe C Program Files Internet Explorer iexplore exe C WINDOWS system dllhost exe C WINDOWS eHome ehmsas exe C Program Files iPod bin iPodService exe C Program Files Internet Explorer iexplore exe C PROGRA Intel Wireless Bin Dot XCfg exe C Program Files AIM aolsoftware exe C PROGRA Yahoo Messenger ymsgr tray exe C Program Files Internet Explorer iexplore exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www yahoo com fr fp-yie R - HKCU Software Microsoft Internet Explorer Main Start Page http www yahoo com fr fp-yie R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Intern... Read more

A:"Your System Is Infected" Background + "Internet Security 2010" virus/malware problem

Hi and welcome to TSF.

I'm afraid HijackThis no longer provides the information we require.

We want all our members to perform the steps outlined in the link given below, as far as they possibly can, before posting for assistance.

http://www.techsupportforum.com/f50/...lp-305963.html

If you have problems with any of the steps, simply move on to the next one and make a note of the problem in your reply.

Please note that the Security Forum is always busy, so I would ask for your patience while waiting for a reply - it may take a few days.

This thread will now be closed.

http://www.techsupportforum.com/forums/f50/your-system-is-infected-background-internet-security-2010-virus-malware-problem-445923.html
Relevancy 118.11%

Got my computer back today "Your Security + Infected" "Internet 2010" problem System Is virus/malware Background Windows XP and my background is now all green with a black box in the middle saying quot Your System Is Infected etc quot Also a red circle with a white X in the task bar I can t open the task manager Can Anyone Help Downloaded HiJackThis My log "Your System Is Infected" Background + "Internet Security 2010" virus/malware problem Logfile of Trend Micro HijackThis v Scan saved at "Your System Is Infected" Background + "Internet Security 2010" virus/malware problem AM on Platform Windows XP "Your System Is Infected" Background + "Internet Security 2010" virus/malware problem SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin S EvMon exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C PROGRA AVG AVG avgwdsvc exe C Program Files Bonjour mDNSResponder exe C Program Files TOSHIBA ConfigFree CFSvcs exe C WINDOWS system dlcqcoms exe C PROGRA AVG AVG avgrsx exe C WINDOWS system DVDRAMSV exe C PROGRA AVG AVG avgnsx exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C WINDOWS Explorer EXE C WINDOWS system ctfmon exe C Program Files TOSHIBA TOSHIBA Controls TFncKy exe C WINDOWS system TDispVol exe C Program Files Synaptics SynTP SynTPEnh exe C WINDOWS system igfxtray exe C WINDOWS system hkcmd exe C WINDOWS system igfxpers exe C WINDOWS ehome ehtray exe C Program Files Toshiba Toshiba Applet thotkey exe C Program Files Synaptics SynTP Toshiba exe C Program Files Synaptics SynTP SynTPLpr exe C Program Files ltmoh Ltmoh exe C WINDOWS AGRSMMSG exe C Program Files TOSHIBA ConfigFree NDSTray exe C Program Files Toshiba Tvs TvsTray exe C Program Files Intel Wireless Bin RegSrvc exe C Program Files TOSHIBA TOSHIBA Zooming Utility SmoothView exe C WINDOWS system dla DLACTRLW exe C Program Files Intel Wireless bin ZCfgSvc exe C Program Files Intel Wireless Bin ifrmewrk exe C Program Files Dell Photo AIO Printer dlcqmon exe C Program Files Dell Photo AIO Printer memcard exe C Program Files Common Files InstallShield UpdateService issch exe C WINDOWS system TPSBattM exe C WINDOWS system svchost exe C Program Files TOSHIBA ConfigFree CFSServ exe c TOSHIBA IVP swupdate swupdtmr exe C Program Files TOSHIBA TOSHIBA Applet TAPPSRV exe C Program Files QuickTime QTTask exe C WINDOWS system winupdate exe C PROGRA AVG AVG avgtray exe C Program Files Viewpoint Common ViewpointService exe C Program Files iTunes iTunesHelper exe C Program Files Corel Corel Photo Album MediaDetect exe C Program Files TOSHIBA TOSCDSPD toscdspd exe C Program Files AIM aim exe C Program Files MP Player mp Player exe C Program Files Yahoo SoftwareUpdate YahooAUService exe C Program Files InternetSecurity IS exe C Program Files Adobe Acrobat Reader reader sl exe C Program Files McAfee Security Scan SSScheduler exe C WINDOWS system wuauclt exe C WINDOWS system RAMASST exe C Program Files Cisco Systems Clean Access Agent CCAAgent exe C Program Files Internet Explorer iexplore exe C WINDOWS system dllhost exe C WINDOWS eHome ehmsas exe C Program Files iPod bin iPodService exe C Program Files Internet Explorer iexplore exe C PROGRA Intel Wireless Bin Dot XCfg exe C Program Files AIM aolsoftware exe C PROGRA Yahoo Messenger ymsgr tray exe C Program Files Internet Explorer iexplore exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www yahoo com fr fp-yie R - HKCU Software Microsoft Internet Explorer Main Start Page http www yahoo com fr fp-yie R - HKLM Software Microsoft Inte... Read more

https://forums.techguy.org/threads/your-system-is-infected-background-internet-security-2010-virus-malware-problem.889124/
Relevancy 117.8%

In Windows XP, fully updated, I have several folders full of mp3's and want to see the bit rate and duration. I right click on a column heading and select "Bit rate". I then click on "More..." so I can get to "Duration", and I select that one too.

But all the figures in the "Duration" column appear to be in "hours" and "minutes", so I see "00:04" or "00:03", but what I want is "minutes" and "seconds".

Any thoughts as to how to change this?
 

A:Solved: Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes"

https://forums.techguy.org/threads/solved-windows-explorer-duration-column-no-seconds-just-hours-and-minutes.693037/
Relevancy 116.56%

I am running Windows XP SP fully updated on an Acer Explorer Column Windows no "Minutes" "Seconds", "Hours" just "Duration" - and lap top PC I have several folders full of mp 's and want to Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes" see the bit rate and Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes" duration To Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes" do this I right click on a column heading and select quot Bit rate quot I then click on quot More quot so I can get to quot Duration quot and I select that one too The two new columns appear but the format of the quot Duration quot column appears to be quot hours minutes quot so I see quot quot or quot quot for most mp 's when what I want to see is 'hours minutes seconds quot e g quot quot This also happens for video files avi files e g all my episodes of quot Heroes quot sad I know have a duration of quot quot instead of quot xx quot Here are two pictures showing the problem with the mp 's The first is of Explorer showing the Duration as quot Hours Minutes quot The second picture is of the properties window of the first mp in the list above I copied some mp files to another old PC on my home network and it displayed the duration field correctly Also the properties window correctly shows the duration also I'm not the only person to have this problem I received a private message from a member of another forum where I posted about this problem several weeks ago That person also has the same problem with the duration field The tech guys on that forum were unable to find the source of the duration field problem But after I had such a great success on this forum with my hard disk problem here I decided to try to get help here Thanks in advance for any suggestions

A:Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes"

* bump *

Tricky, this one!

http://www.techsupportforum.com/forums/f10/windows-explorer-duration-column-no-seconds-just-hours-and-minutes-253928.html
Relevancy 112.84%

virus popup quot Malware Wipe quot quot the spy guard quot and alot of commercials like porn poker and more crap this is what I get when I start internetexplorer Recommended Anti-Spyware Software Pest Trap Malware Wipe Spy Guard Internet Security TOP RATED Pest Trap Most popular spyware adware cleaner software all commercials spy Solved: "the Wipe" "Malware virus.. alot of popup and guard" over the world Cleans all known viruses and worms Visit Website Free Scan Malware Wipe Became one of the most popular programs very fast It s really easy to use and at the same time very effective Visit Website Free Scan The Spy Guard Developed as the most efficient spyware Solved: virus.. popup "Malware Wipe" "the spy guard" and alot of commercials cleaner with realtime protection Visit Website Free Scan Brave Sentry Award-winning Solved: virus.. popup "Malware Wipe" "the spy guard" and alot of commercials spyware removal utility that will help you fighting all kinds of spyware including keyloggers trojans and password thieves Visit Website Free Scan AD Protect World s leading software application that checks protects and re-checks spyware and spam vulnerability in your home computer Visit Website Free Scan WARNING YOUR SYSTEM IS VULNERABLE TO HACKERS ATTACKS AND BREAKDOWNS Solved: virus.. popup "Malware Wipe" "the spy guard" and alot of commercials Attention Your system is currently exposed Any remote computer can easily browse following folders and files on your computer - Windows System - Program Files Internet Explorer - My Documents - Drive C files Click here to download official intrusion detection system IDS software YOUR PRIVATE INFORMATION IS IN OPEN ACCESS TO OTHER COMPUTERS Your IP address my ip Your Country SE Sweden Your Browser Mozilla compatible MSIE Windows NT SV NET CLR NET CLR Your Operation System Windows XP SP VULNERABLE System Security Status CAUTION Time of investigation Thu Jun PDT SOLUTION Download and install one of the following approved software products Malware Wipe Over threats in the database Exclusive algorythm of cleaning IE Safe Mode - simply cleans your browser Manual automatic update system Autostart items IE Objects Running Processes manager Dialer blocker Popup blocker Visit Website Free Download Pest Trap Daily updated threat databases Intelligent threat scanner Application advanced firewall IE security improvements Advanced system securty features Multiple scan options fast normal deep Visit Website Free Download nbsp

A:Solved: virus.. popup "Malware Wipe" "the spy guard" and alot of commercials

https://forums.techguy.org/threads/solved-virus-popup-malware-wipe-the-spy-guard-and-alot-of-commercials.471943/
Relevancy 112.84%

I think I am infected with Malware Spyware or some type of virus My desktop background has become a bright red screen with a toxic symbol on it and underneath it it says quot Your Privacy Is In Danger quot Red "Virus Bottom. on Desktop Says Alert!" Background! In "Your Is Danger!" Privacy On the bottom right in the Red Desktop Background! "Your Privacy Is In Danger!" Says "Virus Alert!" on Bottom. taskbar right next to the time and date it says quot Virus Alert quot My computer is also attempting to run anti-Spyware programs all by itself opening browsers with websites to Spy programs and pop-ups warning me of possible hackers Below is my HJT log Logfile of Trend Micro HijackThis v Scan saved Red Desktop Background! "Your Privacy Is In Danger!" Says "Virus Alert!" on Bottom. at VIRUS ALERT on Platform Windows XP SP WinNT Red Desktop Background! "Your Privacy Is In Danger!" Says "Virus Alert!" on Bottom. MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system LEXBCES EXE C WINDOWS system LEXPPS EXE C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files AVPersonal AVWUPSRV EXE C Program Files Bonjour mDNSResponder exe C Program Files ewido anti-malware ewidoctrl exe C Program Files Common Files Microsoft Shared VS Debug mdm exe C WINDOWS System ezSP Px exe C WINDOWS System hkcmd exe C WINDOWS AGRSMMSG exe C Program Files AVPersonal AVGNT EXE C Program Files Common Files Real Update OB realsched exe C PROGRA VERIZO SMARTB MotiveSB exe D Program Files D-Tools daemon exe C WINDOWS Samsung ComSMMgr ssmmgr exe C Program Files Common Files AOL ee AOLSoftware exe C Program Files Java jre bin jusched exe C Program Files QuickTime QTTask exe C Program Files iTunes iTunesHelper exe C WINDOWS system ctfmon exe C Program Files AIM aim exe C Program Files FinePixViewer QuickDCF exe C WINDOWS System svchost exe C Program Files InterVideo Common Bin WinCinemaMgr exe C Program Files AIM aolsoftware exe C Program Files Viewpoint Common ViewpointService exe C Program Files Verizon Online bin mpbtn exe C Program Files iPod bin iPodService exe C WINDOWS system wscntfy exe C Program Files Viewpoint Viewpoint Manager ViewMgr exe C Program Files Mozilla Firefox firefox exe C Program Files Java jre bin jucheck exe C WINDOWS system rundll exe C WINDOWS system rundll exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http softwarereferral com jump php wmid amp mid MjI Ojg amp lid R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Default Search URL http us rd yahoo com customize ie defaults su msgr http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Search Bar http us rd yahoo com customize ie defaults sb msgr http www yahoo com ext search search html R - HKLM Software Microsoft Internet Explorer Main Search Page http us rd yahoo com customize ie defaults sp msgr http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Start Page http www yahoo com R - HKCU Software Microsoft Internet Explorer SearchURL Default http us rd yahoo com customize ie defaults su msgr http www yahoo com R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www ddcd jp dd e sony cd faq html R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyServer gate temple edu R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - URLSearchHook Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files Yahoo Companion Installs cpn yt dll O - Toolbar NewsStand Tool... Read more

https://forums.techguy.org/threads/red-desktop-background-your-privacy-is-in-danger-says-virus-alert-on-bottom.732146/
Relevancy 112.84%

First off thank you for any assistance in advance Problem quot System Alert quot balloon in tray icon that will not go away and redirects me in IE to hxxp www virprotect com aff Using SpyBot Search amp Destroy and Ad-Aware SE I seem to have gotten rid of the problem of the Directs Trying Alert" That Balloon To "virprotect.com" Remove [SOLVED] To "System redirection of my home page as well as removed the trojan that caused all of this in the first place I think The pesky balloon however remains All pre-steps your forum recommeded have been completed Below are the logs your forum requests in advance please note that my DSS quot extra quot log file is attached PANDA ACTIVESCAN Incident Status Location Potentially unwanted tool application myglobalsearch Not disinfected c program files MyGlobalSearch Spyware Cookie Atlas DMT Not disinfected [SOLVED] Trying To Remove "System Alert" Balloon That Directs To "virprotect.com" C Documents and Settings Compaq Owner Cookies compaq owner atdmt txt Spyware Cookie Tribalfusion Not disinfected C Documents and Settings Compaq Owner Cookies compaq owner tribalfusion txt Hacktool HackTool KillProcWin A Not disinfected C Documents and Settings Compaq Owner Local Settings Application Data Wildtangent Cdacache E dat simple killw exe Potentially unwanted tool Application KillApp B Not disinfected C hp bin KillIt exe Spyware Spyware PeoplePC Not disinfected C Program Files Online Services PeoplePC ISP Dll RAS DLL DSS MAIN Deckard's System Scanner v Run by Compaq Owner on - - Computer is in Normal Mode -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point -- Last Restore Point s -- - - UTC - RP - Deckard's System Scanner Restore Point - - UTC - RP - Configured easy Internet sign-up - - UTC - RP - System Checkpoint - - UTC - RP - System Checkpoint - - UTC - RP - System Checkpoint -- First Restore Point -- - - UTC - RP - Software Distribution Service Backed up registry hives Performed disk cleanup -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend Micro HijackThis v Scan saved at - - Platform Windows XP Service Pack MSIE Internet Explorer Boot mode Normal Running processes C WINDOWS system smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system ati evxx exe C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system ati evxx exe C WINDOWS explorer exe C WINDOWS system spoolsv exe C WINDOWS system svchost exe C Program Files Common Files LightScribe LSSrvc exe C Program Files McAfee MSC mcmscsvc exe C Program Files Common Files McAfee MNA McNASvc exe C Program Files Common Files McAfee McProxy McProxy exe C Program Files McAfee VirusScan Mcshield exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS system hpzipm exe C WINDOWS system svchost exe C WINDOWS system wscntfy exe C Program Files McAfee com Agent mcagent exe C Program Files Hewlett-Packard Toolbox Apache Tomcat webapps Toolbox StatusClient StatusClient exe C Program Files Common Files Real Update OB realsched exe C Program Files Java jre bin jusched exe C hp KBD kbd exe C Program Files Microsoft IntelliPoint point exe C Program Files HP HP Software Update hpwuSchd exe C Program Files iTunes iTunesHelper exe C WINDOWS system ctfmon exe C Program Files Messenger msmsgs exe C Program Files Windows Media Player wmpnscfg exe C Program Files Common Files AOL EE AOLHostManager exe C Program Files Yahoo Messenger Ymsgr tray exe C Program Files Common Files AOL EE AOLServiceHost exe C Program Files iPod bin iPodService exe C Program Files Hewlett-Packard Toolbox Javasoft JRE bin javaw exe C WINDOWS ALCXMNTR EXE C Program Files ATI Technologies ATI Co... Read more

A:[SOLVED] Trying To Remove "System Alert" Balloon That Directs To "virprotect.com"

Download SDFix from here and save it to your desktop.


Please then reboot your computer in Safe Mode by doing the following :
Restart your computer

After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.

In Safe Mode, right click the SDFix.zip folder and choose Extract All,
Open the extracted folder and double click RunThis.bat to start the script.
Type Y to begin the script.

It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
Press any Key and it will restart the PC.

Your system will take longer that normal to restart as the fixtool will be running and removing files.
When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.

Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to Clipboard ready for posting back on the forum).

Finally paste the contents of the Report.txt back on the forum.


=========================================

This will help to identify malware on your system.
Please download Combofix from any of these locations:

Here
or
Here

Save ComboFix to the desktop and please ensure that you disable realtime security/virus programs that monitors your PC while CF is running.

1. Double click on combo.exe & follow the prompts.
2. When finished, it will produce a logfile located at C:\ComboFix.txt.
3. Copy and Paste the contents of that log in your next reply with a new hijackthis log. Do not use Code or html unless asked for.
Note: Do not mouseclick combofix's window while it is running. That may cause your system to stall/hang.

Caution...Never run and remove files using ComboFix without being supervised by a security analyst.

http://www.techsupportforum.com/forums/f100/solved-trying-to-remove-system-alert-balloon-that-directs-to-virprotect-com-207199.html
Relevancy 111.91%

here is my hijackthis log please help Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows Vista SP WinNT MSIE Internet i saying virus. to a "microsoft security me have redirects center" Internet Explorer v Boot mode Normal Running processes C Windows system taskeng exe C Windows system Dwm exe C Windows Explorer EXE C Windows System igfxtray exe C Windows System hkcmd exe C Windows System igfxpers exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files Motorola SMSERIAL sm hlpr exe Internet redirects me to "microsoft security center" saying i have a virus. C Windows RtHDVCpl exe C Program Files Intel Intel Matrix Storage Manager IAAnotif exe C Program Files HP QuickPlay QPService exe C Program Files Hewlett-Packard HP Quick Launch Buttons QLBCTRL exe C Program Files Hewlett-Packard HP QuickTouch HPKBDAPP exe c Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Hewlett-Packard HP Wireless Assistant HPWAMain exe C Program Files Hewlett-Packard HP Wireless Assistant WiFiMsg exe C Program Files Java jre bin jusched exe C Program Files HP HP Internet redirects me to "microsoft security center" saying i have a virus. Software Update hpwuSchd exe C Program Files iTunes iTunesHelper exe C Program Files Microsoft Office Office GrooveMonitor exe C Program Files Windows Sidebar sidebar exe C Program Files Common Files LightScribe LightScribeControlPanel exe C Program Files Windows Live Messenger msnmsgr exe C Users Travis Program Files DNA btdna exe C Program Files Windows Media Player Internet redirects me to "microsoft security center" saying i have a virus. wmpnscfg exe C Windows ehome ehtray exe C Program Files HP Digital Imaging bin hpqtra exe C Windows ehome ehmsas exe C Program Files Hewlett-Packard Shared HpqToaster exe C Windows system igfxsrvc exe C Program Files Windows Sidebar sidebar exe C Program Files Synaptics SynTP SynTPHelper exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files HP Digital Imaging bin hpqbam exe C Program Files Internet Explorer iexplore exe C Program Files Internet Explorer IEUser exe C Program Files HP Digital Imaging Smart Web Printing hpswp clipbook exe C Program Files Common Files Microsoft Shared Windows Live WLLoginProxy exe C Program Files Microsoft Office Office OUTLOOK EXE C Program Files Trend Micro HijackThis HijackThis exe C Windows system SearchFilterHost exe R - HKCU Software Microsoft Internet Explorer Main Start Page about blank R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http ie redirect hp com svs rdr TY lion amp pf laptop R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts www youtube com O - Hosts www facebook com O - Hosts www live com O - Hosts www wikipedia org O - Hosts www blogger com O - Hosts www go com O - Hosts espn go com O - Hosts www comcast net O - Hosts www wordpress com O - Hosts www ask com O - Hosts www youporn com O - Hosts www fastclick com O - Hosts www pornhub com O - Hosts www rapidshare com O - Hosts www redtube com O - Hosts www doubleclick com O - Hosts www att com O - Hosts www vnn com O - Hosts www netflix com O - Hosts www ebay co uk O - Hosts www bebo com O - Hosts www sky com O - Hosts www virginmedia com O - Hosts www aol co uk O - BHO no name - D -C F - efb- B - ECA - no file O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO NCO IE BHO - ADB E- AFF- - AA - DAC DFA - c Program Files Common Files Symantec Shared coShared... Read more

A:Internet redirects me to "microsoft security center" saying i have a virus.

Please download Malwarebytes Anti-Malware and save it to your desktop.
If you have problems with that link, you can also download it from Here or HereMake sure you are connected to the Internet.
Double-click on mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
If you encounter any problems while downloading the updates, manually download them from here
and just double-click on mbam-rules.exe to install.
On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.
Then click on the Scan button.

If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad.
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.
Note: If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process.
Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

http://www.techsupportforum.com/forums/f284/internet-redirects-me-to-microsoft-security-center-saying-i-have-a-virus-305573.html
Relevancy 111.91%

I reformatted my computer recently with all the same Center Media 32-bit and WinXP on folders "AMD64" edition "i386" hardware and software I usually do "AMD64" and "i386" folders on WinXP Media Center 32-bit edition but this time I noticed something different On my E partition non-system there is a folder called quot ca a ecf b e quot which contains two folders quot AMD quot and quot i quot I researched a little bit and found out those folders pertain to a windows -bit edition but I don't have anything to do with a -bit edition mine's a -bit Here's my system specs WinXP Media Center Edition Version SP Intel Core Duo Processor E GB RAM NVidia GeForce GS MB ST AS GB HD I have my HD partitioned to drives GB System Drive C GB Document Drive D GB Storage Drive E I also have GB partitioned as an Acronis True Image Home Secure Zone for storing Disk Images I was wondering why those two folders are on my E drive when I'm running a -bit version of Windows Also sorry if this should be in another thread my computer has been restarting unexpectedly while I've just been doing random things on it Nothing graphics-intensive or anything like that so I don't know why it's doing that either Thanks for your help and time Nic

A:"AMD64" and "i386" folders on WinXP Media Center 32-bit edition

It sounds like those are temporary files from a driver installation. A lot of companies seem to package every possible driver in the zip or executable, extract them all to the hard drive, find the one the system needs and copy it to the system32 directory, then leave the rest behind.

In that case they should be safe to delete. It would take a bit more research on your part to make sure. Maybe a readme or help file somewhere in the directory?

http://www.techsupportforum.com/forums/f10/amd64-and-i386-folders-on-winxp-media-center-32-bit-edition-368337.html
Relevancy 111.29%

My office just upgraded and I can no longer use Windows XP On this system I was able to add a separate taskbar to facilitate quick access to commonly-browsed folder locations on our vast network and another one expedited the launching of useful programs and lists Each task on each taskbar was represented with a big custom icon to save eye strain I had them installed in opposite vertical margins and they "Launchpads", to "Toolbars" for "Docks" (MSese "TASKBARS" NOT add Need were set on auto-hide to keep them out of the way when not being used Just move your mouse pointer to the left or right margin and BAM Sorry for the cliche but I really got used to the convenience of what I had set up and I just don't think I Need to add "TASKBARS" (MSese for "Launchpads", "Docks" NOT "Toolbars" can be as efficient without anything comparable Now there appears to be nothing comparable in the Windows GUI and it's making me sick with rage I see only the option to put a quot toolbar quot on an existing quot taskbar quot and no option to create any additional taskbars This cramps up your one-and-only taskbar plus the tiny toolbar access buttons require way too much precision for anything that's supposed to be quick When you've figured out how to bring up that ridiculous button the list that it yields is small enough to cause painful eyestrain - nothing efficient much less cool about this at all I have seen customization options in other OS GUIs that may have resolved some of these issues but I see none such in W I have tried every google search string that I can think of and found no answer that deals with anything other than adding that stupid toolbar to the only taskbar that Microsoft will allow you in W So If I'm wrong and have missed some options how do I access them Otherwise I'm hoping there are developers who know what I am talking about and have software to enable the creation of separate taskbars launchpads Can anybody help with either

A:Need to add "TASKBARS" (MSese for "Launchpads", "Docks" NOT "Toolbars"

Several possibilities here: Second taskbar in windows7? [Solved] - Windows 7 - Windows 7

http://www.sevenforums.com/general-discussion/306313-need-add-taskbars-msese-launchpads-docks-not-toolbars.html
Relevancy 110.98%

Hi,

When our website users click on an html attachment embedded on a web-page in IE9, the download manager will not display the "Open" option. It will only display "Save" and "Cancel" which our users don't like, having to save the
html document in a folder to open it. Whereas, when downloading attachments like pdf, word etc. all three options are displayed. 

Is there any setting to tweak , which will display all the 3 options for HTML attachments as well?

A:IE9 download manager will not display "Open" option (only "Save" and "Cancel" is displayed) for downloading HTML documents.

Hi,
As you know, the Open-Save-Cancel dialog box helps you prevent your computer from affecting by virus while downloading. 
So I suggest you test to reset all zones to a lower level temporarily and then please attempt to download this html attachment again.

However, since you can normally download the other documents, I suspect there is some restriction in the website which you are trying to view. I recommend you to contact the administrator of that website if possible.
could you please send me the link of the website from where you are trying to download the html attachment?
Thanks!


We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

https://social.technet.microsoft.com/Forums/en-US/3094ac49-8d49-4a60-a7cf-fb12c823e500/ie9-download-manager-will-not-display-quotopenquot-option-only-quotsavequot-and?forum=ieitprocurrentver
Relevancy 110.98%

Hi i ve recently been infected "mtn5.goole.ws" removing and Help Desperate "popup.adv.net" Needed and have no idea how to get rid of it while browsing in google chrome or windows explorer i Desperate Help Needed removing "popup.adv.net" and "mtn5.goole.ws" keep getting these ads from popup adv net and mtn goole ws popping Desperate Help Needed removing "popup.adv.net" and "mtn5.goole.ws" up This is annoying to say the least but they appear to be able to stop me from visiting certain sites to download the latest definitions for malwarebytes and other such programs Its been a few days since the problems started now and i ve tried everything i can think of I ve read a few forums and think that this problem isn t actually on my computer but kept somewhere else also maybe highjacking my DNS I don t really know much about it so would really appreciate a simple step by step guide to getting rid of this awful infection Thanks for any help Oh also i haven t got EASY access to my router so a fix without needing to get to that would be great If not i ll find a way to get to it Thx a lot Here is my HJT log Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin S EvMon exe C WINDOWS system spoolsv exe C Program Files Adobe Photoshop Elements PhotoshopElementsFileAgent exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Seagate Basics Service SyncServicesBasics exe C WINDOWS system CTsvcCDA exe C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C Program Files Google Common Google Updater GoogleUpdaterService exe C WINDOWS System svchost exe C Program Files M-Audio JamLab JamLabInst exe C Program Files Java jre bin jqs exe C Program Files Kontiki KService exe C Program Files Microsoft SQL Server MSSQL VAIO VEDB Binn sqlservr exe C WINDOWS system nvsvc exe C Program Files Intel Wireless Bin RegSrvc exe C WINDOWS system svchost exe C Program Files Sony VAIO Event Service VESMgr exe C Program Files Common Files Sony Shared VAIO Entertainment Platform VCSW VCSW exe C Program Files Common Files Softwin BitDefender Communicator xcommsvr exe C Program Files Common Files Sony Shared VAIO Entertainment Platform VzCdb VzCdbSvc exe C Program Files Common Files Softwin BitDefender Scan Server bdss exe C Program Files Common Files Softwin BitDefender Update Service livesrv exe C Program Files Common Files Sony Shared VAIO Entertainment Platform VzCdb VzFw exe C Program Files Softwin BitDefender vsserv exe C WINDOWS system dllhost exe C WINDOWS Explorer EXE C Program Files QuickTime QTTask exe C Program Files Softwin BitDefender bdmcon exe C Program Files Softwin BitDefender bdagent exe C Program Files Windows Live Messenger msnmsgr exe C WINDOWS system ctfmon exe C Program Files Kontiki KHost exe C Program Files MessengerDiscovery MessengerDiscovery Live exe C Program Files Internet Explorer iexplore exe C Program Files Common Files Microsoft Shared Windows Live WLLoginProxy exe C WINDOWS system NOTEPAD EXE C Program Files Java jre bin java exe C Program Files Adobe Acrobat Reader AcroRd exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www google co uk R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www vaio-link com vu asp l en amp u m amp h O - BHO no name - D -C F - efb- B - ECA - no file O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO BitComet ClickCapture - F E - A- B A-BCAF- B BFDFEA - C ... Read more

https://forums.techguy.org/threads/desperate-help-needed-removing-popup-adv-net-and-mtn5-goole-ws.794301/
Relevancy 110.67%

Srry i know this post is a bit old but i recently just got this problem i can access the internet fine but i cant access my network settings, user settings, or see the the properties of my pc. i tried running your solution Brink but the scannow showed

"Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>sfc /scannow
Windows Resource Protection could not start the repair service.
C:\Windows\system32>"

i then ran sfc /verifyonly but got the same answer.

i then ran findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >%userprofile%\Desktop\sfcdetails.txt. and the txt file came up blank.

idk wat to do rite now i am at my witts end.

A:Can't access "Network and Sharing Center" nor "User Accounts"

Hello Jayrrus, and welcome to Vista Forums.

I would recommend that you use Microsoft Standalone System Sweeper to scan your system with at boot to help make sure that your system is malware free first.

Afterwards, you might see if you may be able to do a system restore at boot using a restore point dated before you had these issues to see if that may be able to fix them.

Hope this helps,
Shawn

http://www.vistax64.com/general-discussion/292657-cant-access-network-sharing-center-nor-user-accounts.html
Relevancy 110.67%

The control panel opens fine. I can access all items in the control panel
except "Network and sharing center" and the "User accounts" (I can't access this sections via the taskbar either).

What happens when I open one of the two items is I get a popup saying the
following; WINDOWS EXPLORER HAS STOPPED WORKING.

I used to be able to access these items. And one day, I just coulodn't anymore...

Anyone knows how to solve this? Thanks.

I'm using Vista Ultimate x64

A:Can't access "Network and Sharing Center" nor "User Accounts"

Hello Newbie,

See if running a sfc /scannow can find and fix bad system files that may be responsible for this.

Hope this helps,
Shawn

http://www.vistax64.com/general-discussion/187690-cant-access-network-sharing-center-nor-user-accounts.html
Relevancy 110.36%

Hello all,
I'm suffering froma troubling problem with a Windows 7 system.
This system has a boot HDD (C and data storage RAID5 array (D. The system locked up hard requiring a power down to get Windows operational gain.

The sytem is fine now, except the ~3 TB RAID5 array is not seen by W7. The W7 disk managment snap-in reports that the 2793.97 GB "drive" exists, but the status is "Unknown" and "not initialized". Needless to say, the drve was online and contained LOTS of data before the crash. Due to it's size, the drive was GPT.

I ran a synchronize on the RAID 5 array and that finished w/o error, so I assume the actuall array is fine.

Any recommendations for what utllity/diagnostic/etc. to try next?

Further info: The RAID 5 is a creation of the AMD SB750 "southbridge", which uses tech licensed by Promise Technology.
 

http://www.techspot.com/community/topics/good-raid-array-unknown-not-initialized-after-windows-7-crash.152474/
Relevancy 110.36%

I am infected with this crap and have used the following tools to try to get rid of it Windows Defender Unible PowerSuite SpeedUpMyPC Registry Booster amp Spyware Protector and Norton's - "Error Worm-Popups-The Icons Netsky Cleaner" Protector" "Spyware..." Three "Privacy One Button Netsky Worm-Popups-The Three Icons - "Error Cleaner" "Privacy Protector" "Spyware..." Checkup and WinDoctor Not sure if it's related but my DISPLAY is locked at X Atempted the Step Process before posting and Panda ActiveScan froze and crashed after scanning files but not before identifying spyware files Here's my extra txt log from Deckard's Deckard's System Scanner v Extra logfile - please post Netsky Worm-Popups-The Three Icons - "Error Cleaner" "Privacy Protector" "Spyware..." this as an attachment with your post -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Home Edition build SP Architecture X Language English CPU Intel R Pentium R CPU GHz Percentage of Memory in Use Physical Memory total avail MiB MiB Pagefile Memory total avail MiB MiB Virtual Memory total avail MiB MiB A is Removable No Media C is Fixed NTFS - GiB total GiB free D is CDROM CDFS PHYSICALDRIVE - ST A - GiB - partition PARTITION - Unknown - MiB PARTITION bootable - Installable File System - GiB - C -- Security Center ------------------------------------------------------------- AUOptions is scheduled to auto-install Windows Internal Firewall is disabled AntiVirusDisableNotify is set FirewallDisableNotify is set FW Norton Internet Security v Symantec Corporation AV Norton Internet Security v Symantec Corporation HKLM System CurrentControlSet Services SharedAccess Parameters FirewallPolicy DomainProfile AuthorizedApplications List quot windir system sessmgr exe quot quot windir system sessmgr exe enabled xpsp res dll - quot quot C Program Files Logitech Logitech Harmony Remote Software HarmonyRemote exe quot quot C Program Files Logitech Logitech Harmony Remote Software HarmonyRemote exe Enabled Logitech Harmony Remote Software quot quot windir Network Diagnostic xpnetdiag exe quot quot windir Network Diagnostic xpnetdiag exe Enabled xpsp res dll - quot quot C Program Files Logitech Desktop Messenger Program LogitechDesktopMessenger exe quot quot C Program Files Logitech Desktop Messenger Program LogitechDesktopMessenger exe Enabled Logitech Desktop Messenger quot HKLM System CurrentControlSet Services SharedAccess Parameters FirewallPolicy StandardProfile AuthorizedApplications List quot windir system sessmgr exe quot quot windir system sessmgr exe enabled xpsp res dll - quot quot C WINDOWS system LEXPPS EXE quot quot C WINDOWS system LEXPPS EXE Enabled LEXPPS EXE quot quot C Program Files Logitech Logitech Harmony Remote Software HarmonyRemote exe quot quot C Program Files Logitech Logitech Harmony Remote Software HarmonyRemote exe Enabled Logitech Harmony Remote Software quot quot windir Network Diagnostic xpnetdiag exe quot quot windir Network Diagnostic xpnetdiag exe Enabled xpsp res dll - quot quot C Program Files Logitech Desktop Messenger Program LogitechDesktopMessenger exe quot quot C Program Files Logitech Desktop Messenger Program LogitechDesktopMessenger exe Enabled Logitech Desktop Messenger quot quot C Program Files LimeWire LimeWire exe quot quot C Program Files LimeWire LimeWire exe Enabled LimeWire quot quot C Program Files Yahoo Messenger YahooMessenger exe quot quot C Program Files Yahoo Messenger YahooMessenger exe Enabled Yahoo Messenger quot quot C Program Files Yahoo Messenger YServer exe quot quot C Program Files Yahoo Messenger YServer exe Enabled Yahoo FT Server quot quot C Program Files Messenger msmsgs exe quot quot C Program Files Messenger msmsgs exe Enabled Windows Messenger quot quot C Program Files Veoh Networks Veoh VeohCli... Read more

A:Netsky Worm-Popups-The Three Icons - "Error Cleaner" "Privacy Protector" "Spyware..."

Bump.

http://www.techsupportforum.com/forums/f284/netsky-worm-popups-the-three-icons-error-cleaner-privacy-protector-spyware-207223.html
Relevancy 110.36%
A:Webcam light turned on, "suspicious activity" alert, don't know what's going on

Hello,

They call me TwinHeadedEagle around here, and I'll be working with you.

Before we start please read and note the following:

At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.

All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
I visit forum several times at day, making sure to respond to everyone's topic as fast as possible. But bear in mind that I have private life like everyone and I cannot be here 24/7. So please be patient with me. Also, some infections require less, and some more time to be removed completely, so bear this in mind and be patient.
Please stay with me until the end of all steps and procedures and I declare your system clean. Just because there is a lack of symptoms does not indicate a clean machine. If you solved your problem yourself, set aside two minutes to let me know.

Please attach all report using button below. Doing this, you make it easier for me to analyze and fix your problem.

Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay for the repair.


Rules and policies

We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

There are some unwanted programs and settings hijacks we need to take care of.

Multiple Resident Protection warning!

Always have one (and no more than one!) AntiVirus program! In this case having more of them will not provide you with better protection - instead they may cause slowness, lock-ups and even mark another ones as harmful, leading to leave your system unstable and even damaged. Please choose only one from the listed below to stay with and uninstall the others:

Ad-Aware Antivirus
McAfee Anti-Virus

Uninstallation procedure:

Press the + R on your keyboard at the same time. Type appwiz.cpl and click OK.
Search for each uninstalled entry, right-click it and select Uninstall.
This should be done until any other steps will be taken.

I also suggest to uninstall Spybot.

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable. ​
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt h... Read more

https://malwaretips.com/threads/webcam-light-turned-on-suspicious-activity-alert-dont-know-whats-going-on.53103/
Relevancy 109.74%

Ok so im new here so hey everybody to the point my laptop is quot stuttering quot lagging skipping whatever you wanna call it its doing it my video music and cursor skip every second for a splt second it starts on start-up and dont stop til i turn my laptop off it happens in a pattern its not random ive done checked my drivers spyware and m RAM is good so can someone please help me could it be because my battery wont hold a charger so it has to be hooked up to the charger at ALL times or it dies Example is the charger not got the quot juice quot to run the laptop by itself so it studders skips i dont know if this has report viewer "studders"/"skips"/"lags" Whole Solved: (PLEASE computer .. event have anything to do with my problem but i ran quot event viewer quot and found this The following boot-start or system-start driver s failed to load Cdrom Imapi redbook PLEASE HELP OS Version Microsoft Windows XP Home Edition Service Pack bit Processor Genuine Intel R CPU Solved: Whole computer "studders"/"skips"/"lags" .. have event viewer report (PLEASE T GHz x Family Model Stepping Processor Count RAM Mb Graphics Card Mobile Intel R GM Express Chipset Family Mb Hard Drives C Total - MB Free - MB D Total - MB Free - MB Motherboard Dell Inc FF HWPLLB CN S Antivirus McAfee VirusScan Updated Yes On-Demand Scanner Disable nbsp

A:Solved: Whole computer "studders"/"skips"/"lags" .. have event viewer report (PLEASE

https://forums.techguy.org/threads/solved-whole-computer-studders-skips-lags-have-event-viewer-report-please.981934/
Relevancy 109.74%

I double-click and get "search" instead of "open"--only when I click a disk, like Hard Drive C: or Floppy A: or CD F: and so on.

It didn't used to do this, so I must've inadvertently changed some setting somewhere, but darned if I can find it now.

Any ideas?
 

A:Solved: On the "my computer" list, I double-click on disks and get "search" instead of "open"

https://forums.techguy.org/threads/solved-on-the-my-computer-list-i-double-click-on-disks-and-get-search-instead-of-open.407035/
Relevancy 109.12%

I used hijackthis and these are my results Logfile of HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system on popup, have might removing blackworm "you need "SysProtect" I and help infection" svchost exe C WINDOWS system LEXBCES EXE C WINDOWS system spoolsv exe C WINDOWS system LEXPPS EXE C PROGRA Grisoft AVGFRE avgamsvr exe C PROGRA Grisoft I need help on removing "SysProtect" popup, and "you might have blackworm infection" AVGFRE avgupsvc exe c program files mcafee com agent mcdetect exe c PROGRA mcafee com agent mctskshd exe c PROGRA mcafee com vso mcvsrte exe C WINDOWS system nvsvc exe c PROGRA mcafee com vso mcshield exe C WINDOWS System alg exe C WINDOWS Explorer EXE C PROGRA Grisoft AVGFRE avgcc exe C PROGRA Grisoft AVGFRE avgemc exe C Program Files iTunes iTunesHelper exe C PROGRA mcafee com vso mcvsshld exe C PROGRA mcafee com agent mcagent exe C WINDOWS System svchost exe C Program Files M PSNotes psn exe c progra mcafee com vso mcvsescn exe C Program Files iPod bin iPodService exe C PROGRA M PSNotes PSNGive exe c progra mcafee com vso mcvsftsn exe C Program Files Messenger msmsgs exe C Program Files mIRC mirc exe C Program Files Internet Explorer IEXPLORE EXE C Program Files Internet Explorer IEXPLORE EXE C Documents and Settings jamie chan Desktop Hijackthis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www dell me com myway R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www dell me com myway R - HKLM Software Microsoft Internet Explorer Main Search Bar http red clientapps yahoo com cust ch search html R - HKLM Software Microsoft Internet Explorer Main Start Page http www dell me com myway R - HKCU Software Microsoft Internet Explorer SearchURL Default http red clientapps yahoo com cust www yahoo com R - HKCU Software Microsoft Internet Explorer Main Local Page blank htm R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www dell me com myway O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat Reader ActiveX AcroIEHelper dll O - BHO PCTools Site Guard - C B A - DB - A -A CB-D BBFEB - C PROGRA SPYWAR tools iesdsg dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - BHO PCTools Browser Monitor - B A D D- - C -A - DF C AC - C PROGRA SPYWAR tools iesdpb dll O - BHO WTLHelper Object - BD CD - E - - - EC F - C WINDOWS system ddccc dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - Toolbar McAfee VirusScan - BA B -B - c -B - F F - c progra mcafee com vso mcvsshl dll O - HKLM Run AVG CC C PROGRA Grisoft AVGFRE avgcc exe STARTUP O - HKLM Run AVG EMC C PROGRA Grisoft AVGFRE avgemc exe O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS system NvCpl dll NvStartup O - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottime O - HKLM Run VSOCheckTask quot c PROGRA mcafee com vso mcmnhdlr exe quot checktask O - HKLM Run VirusScan Online quot c PROGRA mcafee com vso mcvsshld exe quot O - HKLM Run MCAgentExe c PROGRA mcafee com agent mcagent exe O - HKLM Run MCUpdateExe c PROGRA mcafee com agent mcupdate exe O - HKCU Run AIM C Program Files AIM aim exe -cnetwait odl O - HKCU Run MSMSGS quot C Program Files Messenger msmsgs exe quot background O - Global Startup Post-it Software Notes lnk C Program Files M PSNotes psn exe O - Extra context menu item amp Google Search - res c program files google GoogleToolbar dll cmsearch html O - Extra context menu item am... Read more

A:I need help on removing "SysProtect" popup, and "you might have blackworm infection"

Please continue all replies for this matter in your original thread here: http://forums.techguy.org/security/456666-i-need-help-sysprotect-popup.html

Closing duplicate.
 

https://forums.techguy.org/threads/i-need-help-on-removing-sysprotect-popup-and-you-might-have-blackworm-infection.457377/
Relevancy 109.12%

This just started about a month or so ago...
I'm sure this little pop up came attached to some program I downloaded, but it's not a large enough
program to even show up when you try to use Install/Remove or Revo uninstaller programs.
I would think that most programs will send out software updates or if I open a program they have
update links built into them.
Disabling the popup doesn't keep the program for looking for updates (or does it?), it just doesn't keep
popping up and being an annoyance, right?
Do I "REALLY NEED IT"? If I need it, then so be it, I just don't want it to be a nuisance and keep
popping up.
Thanks ahead of time....

A:How do I "DISABLE" the popup "Common Software Manager"?

Using a registry editor to search for Common Software Manager might give you the folder and file[s] this utility is in [on the harddrive]. Deleting that folder and said file[s] might be enough. Do not use any universal computer fixit utilities for this; such cause more problems than they fix.

http://www.eightforums.com/software-apps/63674-how-do-i-disable-popup-common-software-manager.html
Relevancy 108.5%

Ok so im new here so hey everybody to the point my laptop is quot stuttering quot lagging skipping whatever you wanna call it its doing it my video music report (PLEASE event have HELP) Whole .. viewer "studders"/"skips"/"lags" computer and cursor skip every second for a splt second it starts on start-up and dont stop til i turn my laptop off it happens in a pattern its not random ive done checked my Whole computer "studders"/"skips"/"lags" .. have event viewer report (PLEASE HELP) drivers spyware and m RAM is good so can someone please help me could it be because my battery wont hold a charger so it has to be hooked up to the charger at ALL times or it dies Example is the charger not got the quot juice quot to run the laptop by itself so it studders skips i dont know if this has anything to do with my problem but i ran quot event viewer quot and found this The following boot-start or system-start driver s failed to load Cdrom Imapi redbook PLEASE HELP nbsp

A:Whole computer "studders"/"skips"/"lags" .. have event viewer report (PLEASE HELP)

**(DONT KNOW IF THIS WILL HELP..)***

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Genuine Intel(R) CPU T2250 @ 1.73GHz, x86 Family 6 Model 14 Stepping 8
Processor Count: 2
RAM: 502 Mb
Graphics Card: Mobile Intel(R) 945GM Express Chipset Family, 224 Mb
Hard Drives: C: Total - 39723 MB, Free - 23484 MB; D: Total - 12684 MB, Free - 3633 MB;
 

https://forums.techguy.org/threads/whole-computer-studders-skips-lags-have-event-viewer-report-please-help.981932/
Relevancy 108.19%

ok!!!!!!!!!! what is it and how do i fix it,,,, eyes crossed knees woobly help?????????????????????
 

A:[Solved] mplay32.exe,1"/play/close"%L"." and sndrec32.exe"%L"."

https://forums.techguy.org/threads/solved-mplay32-exe-1-play-close-l-and-sndrec32-exe-l.197498/
Relevancy 107.88%

New member this little beauty is evading all attempts Its shield icon flashes between a red X and blue Left or right click links to quot spycrush com aff quot Here's Deckard with extra attached Deckard's System Scanner v Run by Dick Bernstein on - - at Computer is in Normal Mode -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- System Restore is disabled attempting to re-enable success -- Last Restore Point s -- - - UTC - RP - System Checkpoint Backed up registry hives Performed disk cleanup -- HijackThis run as Dick Bernstein exe -------------------------------------- Logfile of HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C Program Files Analog Devices SoundMAX Smtray exe C WINDOWS system RUNDLL EXE C Program Files Intel NCS PROSet PRONoMgr exe C Program Files Spybot - Search amp Destroy TeaTimer exe C Program Files Lavasoft Ad-Aware SE Plus Ad-Watch exe C Program Files PIXELA ImageMixer for HDD Camcorder IMx Launcher exe F Program Files InterVideo Common Bin WinCinemaMgr exe F Program Files Nikon PictureProject NkbMonitor exe C Program Files Sony Sony Picture Utility VolumeWatcher SPUVolumeWatcher exe C Program Files icon - "System systray Flashing popup alert" Grisoft AVG Anti-Spyware guard exe C PROGRA Grisoft AVG avgamsvr exe C PROGRA Grisoft AVG avgupsvc exe C Program Files Matrox X tools System digisc exe E Program Files Norton SystemWorks Norton Utilities NPROTECT EXE C WINDOWS system nvsvc exe C Program Files Analog Devices SoundMAX SMAgent exe E PROGRA NORTON SPEEDD nopdb exe C WINDOWS System svchost exe C WINDOWS system ctfmon exe F Downloads dss exe C PROGRA HIJACK Dick Bernstein exe R - HKCU Software Microsoft Internet Explorer Main Start Flashing systray icon - popup "System alert" Page http hotsheet com O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - - F - D - - D F - C Program Files Spybot - Search amp Destroy SDHelper dll O - BHO no name - BB-D F - C-B EB-D DAF D D - no file O - HKLM Run Smapp Flashing systray icon - popup "System alert" C Program Files Analog Devices SoundMAX Smtray Flashing systray icon - popup "System alert" exe O - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS system NvCpl dll NvStartup O - HKLM Run AVG CC C PROGRA Grisoft AVGFRE avgcc exe STARTUP O - HKLM Run nwiz nwiz exe install O - HKLM Run NvMediaCenter RUNDLL EXE C WINDOWS System NvMcTray dll NvTaskbarInit O - HKLM Run PRONoMgr exe c Program Files Intel NCS PROSet PRONoMgr exe O - HKCU Run SpybotSD TeaTimer C Program Files Spybot - Search amp Destroy TeaTimer exe O - HKCU Run AWMON quot C Program Files Lavasoft Ad-Aware SE Plus Ad-Watch exe quot O - HKCU Run NvMediaCenter RUNDLL EXE C WINDOWS system NVMCTRAY DLL NvTaskbarInit O - Startup Cyber-shot Viewer Media Check Tool lnk C Program Files Sony Sony Picture Utility VolumeWatcher SPUVolumeWatcher exe O - Global Startup Adobe Reader Speed Launch lnk C Program Files Adobe Acrobat Reader reader sl exe O - Global Startup ImageMixer for HDD Camcorder lnk O - Global Startup InterVideo WinCinema Manager lnk F Program Files InterVideo Common Bin WinCinemaMgr exe O - Global Startup NkbMonitor exe lnk F Program Files Nikon PictureProject NkbMonitor exe O - Extra context menu item E amp xport to Microsoft Excel - res C PROGRA MICROS OFFICE EXCEL EXE O - Extra button Research - B - CC- C -B BE- C C A - C PROGRA MICROS OFFICE REFIEBAR DLL O - Options group INTERNATIONAL International O - DPF -C A- E-A -C C BBF Windows Genuine Advantage Validation Tool - http go microsoft com fwlin... Read more

A:Flashing systray icon - popup "System alert"

Yay! It's gone!

I got frustrated enough that I started flailing --
found the following files in \windows\system32

swxcacls.exe
swsc.exe
swreg.exe
SrchSTS.dll
Process.dll
dumphive.dll

It took a while to find them because their MODIFIED dates were all prior to their
CREATED dates. When I added that field to the display, it was clear that they all showed up at the time everything went south.

I also checked a bunch of stuff in HJT to fix. Don't know if that made any difference. But the icon is gone now.

I'm attaching an image of the files & dates.

http://www.techsupportforum.com/forums/f284/flashing-systray-icon-popup-system-alert-161630.html
Relevancy 107.57%

On reboot. RPC will quickly crash and the system will force shutdown (in one minute).
Tried classic (XP) "ListenOnInternet"="N" registry key: no effect.
Tried enabling all interfaces explicitly (rpccfg): Works but useless.
Tried disabling NIC card: Works but useless (no connectivity).
Tried enabling all interfaces explicitly except externally connected NIC (rpccfg): Crash.
Added custom loopback interface (Fake NIC) to try and placate RPC: Crash.

https://social.technet.microsoft.com/Forums/en-US/eb294fc0-7454-486f-a0a2-788397fda242/win7pro-using-quotnetsh-rpc-add-127001quot-or-quotrpccfg-a-1quot-causes-rpc-subsystem?forum=w7itprosecurity
Relevancy 107.57%

My wife has a two month old Lenovo ideapad with Windows We are now getting alerts that the D partition is near full Is this system taking multipul backups of the harddrive C and storing them all What are my best backup Action Center alert disk "Check space" options to have a safe backup but not overloading the D partition I do see in Computer gt System gt Device Manager gt Disk Drives gt D Drive General tab that there are two options at the bottom option one not checked in my case quot Compress this drive to save disk space quot Option two checked quot Allow files on this drive to have contents indexed in addition to file properties quot Would selecting option one solve my problem If this system is saving a snapshot of D over and over it will only be a matter of time when option one will be overcome SO I would think that there has to be a setting that will let partition D delete older backups right Would it be a combination of selecting option one and changing a setting that would enable older backups to be automaticaly removed

A:Action Center "Check backup disk space" alert

Welcome to the forum
If your D drive is made for backup's only, you can delete all files exept the newest one.
But it's advised to make backup's on an external USB drive and change the frequency of backup's to your files and olso for images to your OS.

http://www.sevenforums.com/backup-restore/233071-action-center-check-backup-disk-space-alert.html
Relevancy 107.26%

My ASUS computer Windows bit was infected Security with with 2012" rootkit" Infected bundled "ZeroAcess "AV by quot AV Security quot It seems that it is bundled with quot ZeroAccess Rootkit quot because it won t allow any program to run claiming that they are infected Besides poping up alerts and windows it also disabled quot System Restore quot function and won t allow me to boot into Safe Mode It does not allow me to delete AV Infected with "AV Security 2012" bundled with "ZeroAcess rootkit" Security v exe either I read a bunch of articles online about how to remove it but apparently the people who developed this virus are reading them too This version of virus has rendered these instruction useless This is way beyond me now I need help from a few Infected with "AV Security 2012" bundled with "ZeroAcess rootkit" Einsteins to kick this virus s butt Below is the HijackThis log It won t let me run DDS downloaded from the first link probably killed by the quot ZeroAccess Rootkit quot The complete HijackThis log Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Program Files x Windows Live Messenger msnmsgr exe C Users Shawn AppData Roaming hAA uvvS AV Security v exe C Program Files x ASUS ATK Hotkey HControlUser exe C Program Files x ASUS ATKOSD ATKOSD exe C Program Files x ASUS ATK Media DMedia exe C Program Files x DivX DivX Update DivXUpdate exe C Program Files x Virtual Account Numbers CitiVAN exe C Program Files x Ask com Updater Updater exe C Program Files x Common Infected with "AV Security 2012" bundled with "ZeroAcess rootkit" Files Java Java Update jusched exe C Windows SysWOW OBroker exe C Windows AsScrPro exe C Program Files x CyberLink Power Go CLMLSvc exe C Users Shawn Desktop HijackThis exe F - REG system ini UserInit userinit exe O - BHO no name - D -C F - efb- B - ECA - no file O - BHO Virtual Account Numbers Helper - - - - D -B DA C A A - C Program Files x Virtual Account Numbers CitiVANHelper dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files x Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO flashget urlcatch - F -AA - B - F D- A B E EF - C Program Files x FlashGet jccatch dll O - BHO RealPlayer Download and Record Plugin for Internet Explorer - C E -B - BC - - C CA - C ProgramData Real RealPlayer BrowserRecordPlugin IE rpbrowserrecordplugin dll O - BHO Search Helper - EBF - F- bff-A F-B E AAC B - C Program Files x Microsoft Search Enhancement Pack Search Helper SEPsearchhelperie dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C PROGRA MICROS Office GROOVEEX DLL O - BHO Windows Live ID Sign-in Helper - D - C - ABF- ECC- C - C Program Files x Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO Windows Live Messenger Companion Helper - FDDE B- F- -AB F- CBEFF - C Program Files x Windows Live Companion companioncore dll O - BHO URLRedirectionBHO - B F A - E - -BA - B E FF - C PROGRA MICROS Office URLREDIR DLL O - BHO Ask Toolbar BHO - D C F- A- -A AD- D - C Program Files x Ask com GenericAskToolbar dll O - BHO Java tm Plug-In SSV Helper - DBC -A - b-BC - C C C A - C Program Files x Java jre bin jp ssv dll O - BHO FlashGet GetFlash Class - F E- EF- C- - BA DBA - C Program Files x FlashGet getflash dll O - Toolbar Virtual Account Numbers - A A -B - A - D -EF B A B - C Program Files x Virtual Account Numbers CitiVANToolbar dll O - Toolbar Ask Toolbar - D C F- A- -A AD- D - C Program Files x Ask com GenericAskToolbar dll O - HKLM Run UpdateP GoShortCut quot C Program Files x CyberLink Power Go MUITransfer MUIStartMenu exe quot quot C Program Files x CyberLink Power Go quot UpdateWithCreateOnce quot SOFTWARE CyberLink Power Go quot O - HKLM Run HControlUser C Program Files x ASUS ATK Hotkey HControlUser exe O - HKLM Run ATKOSD C Program Files x ASUS ATKOSD ATKOSD exe O -... Read more

A:Infected with "AV Security 2012" bundled with "ZeroAcess rootkit"

Oh, one more thing, after the infection, the computer told me that I need to restart the computer to install Windows updates and stupidly I did.
 

https://forums.techguy.org/threads/infected-with-av-security-2012-bundled-with-zeroacess-rootkit.1026305/
Relevancy 107.26%

I ve run SuperAntiSpyware Wizard" "Sys Pop-ups "Security & Integrity System Scan Warning" Ad-Aware SpyBot and Norton which removed some trojan files and registry items but I m still getting pop-ups quot Security System Warning quot and quot System Integrity Scan Wizard quot Below is my HiJackThis log Thanks in advance Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v "Sys Integrity Scan Wizard" & "Security System Warning" Pop-ups SP Boot mode Normal Running processes C WINDOWS System "Sys Integrity Scan Wizard" & "Security System Warning" Pop-ups smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Intel Wireless Bin EvtEng exe C Program Files Intel Wireless Bin S EvMon exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Common "Sys Integrity Scan Wizard" & "Security System Warning" Pop-ups Files Symantec Shared AppCore AppSvc exe C Program Files Common Files Symantec Shared CCPD-LC symlcsvc exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files Symantec LiveUpdate ALUSchedulerSvc exe C Program Files Bonjour mDNSResponder exe C WINDOWS system cisvc exe C Program Files Common Files Symantec Shared ccSvcHst exe C Program Files Microsoft SQL Server MSSQL VAIO VEDB Binn sqlservr exe C Program Files Intel Wireless Bin RegSrvc exe C WINDOWS system cryptainersrv exe C WINDOWS system svchost exe C Program Files Sony VAIO Event Service VESMgr exe C WINDOWS Explorer EXE C Program Files Common Files Sony Shared VAIO Entertainment Platform VCSW VCSW exe C Program Files Viewpoint Common ViewpointService exe C Program Files Common Files Sony Shared VAIO Entertainment Platform VzCdb VzCdbSvc exe C Program Files Canon CAL CALMAIN exe C Documents and Settings All Users Application Data kfsnolql ynynormr exe C WINDOWS system igfxpers exe C Program Files Common Files Sony Shared VAIO Entertainment Platform VzCdb VzFw exe C Program Files Apoint Apoint exe C WINDOWS RTHDCPL EXE C Program Files Apoint Apntex exe C Program Files Java jre bin jusched exe C Program Files Sony VAIO Power Management SPMgr exe C Program Files Sony ISB Utility ISBMgr exe C WINDOWS Logi MwX Exe C Program Files Common Files Real Update OB realsched exe C Program Files Common Files Symantec Shared ccApp exe C Program Files HP HP Software Update HPWuSchd exe C Program Files iTunes iTunesHelper exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C Program Files Plaxo PlaxoHelper exe C WINDOWS system clghcnev exe C Program Files Viewpoint Viewpoint Manager ViewMgr exe C Program Files iPod bin iPodService exe C Program Files HP Digital Imaging bin hpqtra exe C Program Files Yahoo Messenger ymsgr tray exe C Program Files HP Digital Imaging bin hpqSTE exe C Program Files HP Digital Imaging Product Assistant bin hprblog exe C WINDOWS System svchost exe C WINDOWS system wuauclt exe C WINDOWS system cidaemon exe C PROGRA MOZILL FIREFOX EXE C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http softwarereferral com jump php wmid amp mid MjI Ojg amp lid R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www sony com vaiopeople R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www sony com vaiopeople R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - URLSearchHook AOLSearchHook Class - EB EA-E BE- CFD- F F-C A C EAFA - C Program Files AOL AOL Search Enhancement AOLSearch dll R - URLSearchHook Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files Yahoo Companion Installs cpn yt dll O - BHO ... Read more

A:"Sys Integrity Scan Wizard" & "Security System Warning" Pop-ups

Hi Welcome to TSG!!
Please visit this webpage for instructions for downloading and running ComboFix.

Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.
 

https://forums.techguy.org/threads/sys-integrity-scan-wizard-security-system-warning-pop-ups.699730/
Relevancy 106.95%

Hello guys the last week I ve been strugling with these nasty BSODs At first I thought it was my HDDs as ntoskrn exe somewhat hinted towards that from googling it My HDDs have been causing a lot of trouble earlier as well due "ntoskrnl.exe" header", BSOD management", pool "Bad "Memory - to their somewhat long years of service However I ve recently reformated my computer and installed W on a brand new Corsair Force GT GB SSD hoping the BSODs would go away they didn t I googled BSOD - "Memory management", "Bad pool header", "ntoskrnl.exe" BSOD and I stumbled upon this forum and I thought I d give it a try I m somewhat desperate as I need my computer working for both work school and amusement I ve been trying to run Memtest in order to test my memory BSOD - "Memory management", "Bad pool header", "ntoskrnl.exe" but without any results I m also currently running on only on GB chip instead BSOD - "Memory management", "Bad pool header", "ntoskrnl.exe" of two to see if the problem still exists Also without any results This is the second time I m writing this thread btw I was just about to post it and my PC crashed Here is my two logs dxdiag last crash didn t generate a log oddly enough Here is additional hardware gear that I use Razer Megalodon Headset Razer Naga Logitech G Logitech C Webcam Corsair W PSU My temperatures are also good Both CPU and MB idles at around GPU s all good too I m also using a Corsair D chassi with dustfilters at both air-income so dust is minimal On top off this I use airpressure to clean away dust somewhat regularly and I also did exactly this days ago when I reinstalled the pc Thanks in advance nbsp

A:BSOD - "Memory management", "Bad pool header", "ntoskrnl.exe"

Are you over-clocking? Is the bios set to its defaults? Is the SSD set on a SATA 3 port in AHCI mode?
 

http://www.techspot.com/community/topics/bsod-memory-management-bad-pool-header-ntoskrnl-exe.182278/
Relevancy 106.95%

Hi everyone!

Yesterday my HP laptop (Windows 7) started getting BSOD with various types of errors (mostly "STOP: 0x00000F4", "STOP: 0x0000007A", "c00021a" and one "missing %hs, c0000135"). Most of the time it restarts without any issues and works fine right after the BSOD and then an hour or two later I get a BSOD again.

I have tried restoring to Last Known Good Configuration, startup repair, hard disk check, virus scans and I also uninstalled any recently added programs I could think of and cleared up more than 50% of my hard disk space. None of these seem to have helped and I still get BSOD regularly.

I have attached the folder from the SF Diagnostic Tool and would appreciate any advice!
Thank you!

A:BSOD every few hours: mostly "STOP: 0x00000F4", "c00021a" & "c0000135"

Welcome to the forum.

MSINFO32:
Please go to Start and type in "msinfo32.exe" (without the quotes) and press Enter
Save the report as an .nfo file, then zip up the .nfo file and upload/attach the .zip file with your next post.
Also, save a copy as a .txt file and include it also (it's much more difficult to read, but we have greater success in getting the info from it).
------------------------
Upload a screenshot using: CrystalDiskInfo For how to upload a screenshot or file, read here
Test your Hard Drive(s) by running: Hard Drive Diagnostic Procedure
------------------------
Test and Diagnose RAM Issues with Memtest86+: RAM - Test with Memtest86+


   Tip
Pay close attention to Part 3 of the tutorial "If you have errors"
Test the RAM with Memtest86+ for at least 7-10 passes. It may take up to 22 passes to find problems. Make sure to run it once after the system has been on for a few hours and is warm, and then also run it again when the system has been off for a few hours and is cold.


------------------------
Monitor hardware temperature with system monitoring software like Speccy or HWMonitor. Upload a screen shot of the Summary tab as well:Piriform - Speccy
CPUID - HWMonitor
For how to upload a screenshot or file, read here

Code:
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 87a2e968, 87a2ead4, 83a55cf0}

----- ETW minidump data unavailable-----
Probably caused by : csrss.exe

Followup: MachineOwner
---------
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F4, {3, 87a7bd40, 87a7beac, 83a1fcf0}

----- ETW minidump data unavailable-----
Probably caused by : csrss.exe

Followup: MachineOwner
---------

http://www.sevenforums.com/bsod-help-support/307397-bsod-every-few-hours-mostly-stop-0x00000f4-c00021a-c0000135.html
Relevancy 106.95%

Ok so I'm using a custom visual style made by another user however I don't really like the buttons used that I mentioned Changing of "minimize" buttons a theme and "close" "maximize" the above The creator states it is acceptable to change the theme to however you like Changing the "minimize" "maximize" and "close" buttons of a theme as long as you don't redistribute it anywhere Ok so I opened up the msstyles file using Restorator located in the theme folder of this VS I went into the images directory and located what seems Changing the "minimize" "maximize" and "close" buttons of a theme to be the images used for the buttons Intuitively it seems like it would make sense to replace those images with different ones perhaps from another visual style and it should change them However would this actually work Could the theme get messed up in some other way like proportions or something if the new button images are smaller I don't know of any other way to change them that would be easy But I did run into another problem For some visual styles I can't even locate those buttons in the images directory Where else would they be

A:Changing the "minimize" "maximize" and "close" buttons of a theme

Use Windows Style Builder to do that...

http://www.sevenforums.com/customization/200947-changing-minimize-maximize-close-buttons-theme.html
Relevancy 106.95%

I am using Windows 7 on my laptop and I have question about when to use "Home", "Work" and "Public" profile.

If I am logging in without setting password, and I am logging in network with "Public" profile, then will any other user, who can see my computer, be able to enter my computer and check the contents on my computer ?

I am connecting to a network and there are 6 other users connected to this network. In the set network location window, if I select the netwoek as "Home", does it mean that other 6 users will not be able to see my computer on network and if I use "Public", then all other six users will be able to see my computer on network ?

Thanks

http://www.techsupportforum.com/forums/f217/when-to-use-home-work-or-public-profile-while-connecting-to-network-478413.html
Relevancy 106.95%

Hi all So I'm kind of stuck I currently have the problem where I am in an endless cycle of quot loading files quot - gt quot Windows Boot Manager quot see How To Boot Into Safe Mode On Windows The Easy Way I have tried to load all of the options -- and none successfully load I also end up at a OneKey Recovery as well unfortunately the laptop does not have initial backup or user backup Manager" -> files Boot ..." "Loading "OneKey" "Windows -> images I have a Windows CD for repairing purposes however I cannot load the BIOS UEFI to change "Loading files ..." -> "Windows Boot Manager" -> "OneKey" the boot order to load the optical drives first I have also tried to remove the CMOS battery to fix it did not work Also - Windows "Loading files ..." -> "Windows Boot Manager" -> "OneKey" Boot Manager Windows Setup EMS Enabled -- does not load properly leads to OneKey Recovery Safe Mode does not load properly Safe Mode with Networking does not load properly Safe Mode with Command Prompt doesn't load - tries to boot and load all files onto partition that is too small can't change partition Enable Boot Logging Enable Low-Resolution Video Debugging MOde Disable automatic restart on system failure Disable Driver Signature Enforcement Display Early Launch Anti-Malware Driver Start Windows Normally Any ideas would be greatly appreciated Thanks

http://www.eightforums.com/general-support/55670-loading-files-windows-boot-manager-onekey.html
Relevancy 106.95%

Example sentence: vrytim I prss ths kys, nothing happns. Now I'm writing with my on-sreen keyboard. I'm clueless when it comes to computer stuff. How do I fix this? Is this a software problem, or a hardware problem?Help is much appreciated!

A:Kyboard deos not respond to the keys: "e", "d", "c" and "3"

My keyboard hath the thame problem with the thupid eth key. The blathted thing ith driving me nutth.

All theriousneth...er...seriousness aside, usually, that is a hardware problem. Can you find or borrow another keyboard and see if it will work correctly on your machine?

http://www.sevenforums.com/hardware-devices/311639-kyboard-deos-not-respond-keys-e-d-c-3-a.html
Relevancy 106.95%

Hello I am having a problem with a popup popup 7 Unable notification drives" win disable to center "network for every time my Windows bit computer starts up Its networked with other computers through a central server a dental Unable to disable win 7 notification center popup for "network drives" office The programs used require shared network drives in order to access the scheduling program xrays Everything is working normally The problem is that we are moving from Xp to windows I have installed win on two computers with no problems the third one is working properly but is giving me a popup every time it starts up re quot Unable to reconnect to mapped network drives quot The drives do not show as connected but the programs both work normally which leads me to believe they are connected I've just been trying to disable the popups themselves I work in an office with people who are extremely computer illiterate and having the popup every time the comp starts up is just going to cause more problems for something that is a non issue When I attempt to change the quot Windows Explorer quot category in the Notification Area to quot Hide icons and notifications quot and hit OK it always changes back to quot Only show notification quot No other category does this and they all have been disabled without reverting back for no reason I've tried regedit changes that have been posted here but nothing seems to get rid of the popups themselves Any help would be appreciated Thanks

A:Unable to disable win 7 notification center popup for "network drives"

Never ending problem with many possible solutions. It's come up many times in the past with no single solution that works for everyone.

Have you tried remapping the drive using the server IP \\serverIP\sharename rather than the \\server\name?

http://www.sevenforums.com/network-sharing/323669-unable-disable-win-7-notification-center-popup-network-drives.html
Relevancy 106.33%

Can someone help me with this I have this system tray icon blinking with quot System Alert quot "System Solved: Alert!" popup info bubbles telling me I have spyware If I try to do anything with it it sends me to quot antivermins com quot I ran Adaware and Spyware and picked up Solved: "System Alert!" popup a few things but I m still getting pop ups Thanks for any help -Beaugator Logfile of HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v Running processes C WINDOWS System smss exe C Solved: "System Alert!" popup WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS Solved: "System Alert!" popup system lsass exe C WINDOWS System ibmpmsvc exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS System svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C WINDOWS system cusrvc exe C Program Files Network Associates Common Framework FrameworkService exe C Program Files Network Associates VirusScan mcshield exe C PROGRA NETWOR COMMON naPrdMgr exe C Program Files Network Associates VirusScan vstskmgr exe C WINDOWS System QCONSVC EXE C WINDOWS System svchost exe C WINDOWS system wdfmgr exe C WINDOWS System alg exe C WINDOWS system Ati evxx exe C WINDOWS Explorer EXE C Program Files Synaptics SynTP SynTPLpr exe C Program Files Synaptics SynTP SynTPEnh exe C PROGRA ThinkPad PkgMgr HOTKEY TPHKMGR exe C Program Files ThinkPad Utilities TpKmapMn exe C PROGRA ThinkPad UTILIT EzEjMnAp Exe C Program Files ATI Technologies ATI Control Panel atiptaxx exe C Program Files ThinkPad PkgMgr HOTKEY TPONSCR exe C Program Files ThinkPad PkgMgr HOTKEY TpScrex exe C WINDOWS system wuauclt exe C WINDOWS system NWTRAY EXE C Program Files Network Associates VirusScan SHSTAT EXE C Program Files Network Associates Common Framework UpdaterUI exe C Program Files Cisco Systems Aironet Client Monitor ACUMon Exe C PROGRA LEXMAR ACMonitor X -X exe C PROGRA LEXMAR AcBtnMgr X -X exe C WINDOWS system ICO EXE C WINDOWS system FSRremoS EXE C WINDOWS system dpmw exe C Program Files Java jre bin jusched exe C Program Files Common Files Network Associates TalkBack tbmon exe C Program Files Common Files Real Update OB realsched exe C Program Files iTunes iTunesHelper exe C Program Files Google GoogleToolbarNotifier GoogleToolbarNotifier exe C WINDOWS system ctfmon exe C Program Files iPod bin iPodService exe C Program Files Internet Explorer iexplore exe D profile cu Desktop Tools HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www clemson edu R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Window Title Internet Explorer Provided by Cox High Speed Internet O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO no name - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO PCTools Site Guard - C B A - DB - A -A CB-D BBFEB - C PROGRA SPYWAR tools iesdsg dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - BHO PCTools Browser Monitor - B A D D- - C -A - DF C AC - C PROGRA SPYWAR tools iesdpb dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - Toolbar Protection Bar - d e - a c- a -afd -a ab ce c - C Program Files Video ActiveX Object iesplugin dll file missing O - HKLM R... Read more

Relevancy 106.33%

There is my log Logfile of HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v Running processes C WINDOWS System smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C "System have popup balloons I Alert" WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system I have "System Alert" popup balloons svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system spoolsv exe C PROGRA COMMON Stardock SDMCP exe C WINDOWS Explorer EXE C PROGRA Grisoft AVGFRE avgamsvr exe C PROGRA Grisoft AVGFRE avgupsvc exe C PROGRA Grisoft AVGFRE avgemc exe C Program Files Diskeeper Corporation Diskeeper DkService exe C PROGRA Grisoft AVGFRE avgcc exe C Program Files DAEMON Tools daemon exe C Program Files Common Files Microsoft Shared VS Debug mdm exe C WINDOWS system nvsvc exe C Program Files iTunes iTunesHelper exe C WINDOWS system ctfmon exe C Program Files Spyware Doctor sdhelp exe C I have "System Alert" popup balloons Program Files iPod bin iPodService exe C WINDOWS System alg exe C Program Files Xfire Xfire exe C WINDOWS System svchost exe C WINDOWS system svchost exe C Program Files MSN Messenger msnmsgr exe C Program Files Microsoft Office OFFICE WINWORD EXE C Program Files iiUsage iiNet Usage exe C Program Files Gold Codec isamonitor exe C Program Files Gold Codec pmsngr exe C Program Files Gold Codec isamini exe C Program Files Gold Codec pmmon exe C Program Files Internet Explorer IEXPLORE EXE C WINDOWS system rundll exe C PROGRA MOZILL FIREFOX EXE C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C Program Files Diskeeper Corporation Diskeeper DkIcon exe C... Read more

Relevancy 106.33%

Hi I have an icon in my system tray is that the right name which looks like a wheelchair or a forbidden sign changing once a second - Alert!" SpyWare "Virus Popup maybe Once in a while there is a popup saying Quote Your computer is infected Critical System Error System detected virus activities They may cause critical system failure Please use antimalware software to clean and protect your system from parasite programs Click here to get all available software When I click in that popup window a IE window opens and goes to http www spywarequake com aff I've run through the steps in your guide and run a lot of spyware antivirus scanning tools The only thing that changed was that my default IE start page changed to my SpyWare Popup - "Virus Alert!" own instead of someone else which I don't remember the address of Here is my HJT log file Quote Logfile of HijackThis v Scan saved at on - - Platform Windows XP SP WinNT MSIE Internet Explorer v SP Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Delade filer Symantec Shared ccSetMgr exe C Program Delade filer Symantec Shared SpyWare Popup - "Virus Alert!" SNDSrvc exe C Program Delade filer Symantec Shared SPBBC SPBBCSvc exe C Program Delade filer Symantec Shared ccEvtMgr exe C WINDOWS system spoolsv exe C Program Symantec LiveUpdate ALUSchedulerSvc exe C Program WIDCOMM Bluetooth-programvara bin btwdins exe C Program ewido anti-malware ewidoctrl exe C Program ewido anti-malware ewidoguard exe C Program Norton AntiVirus navapsvc exe C Program VeriSign NAVI naviagent exe C Program Norton AntiVirus IWP NPFMntor exe C WINDOWS System svchost exe C Program Webroot Spy Sweeper WRSSSDK exe C WINDOWS Explorer EXE C Program Delade filer Symantec Shared CCPD-LC symlcsvc exe C WINDOWS system fxssvc exe C WINDOWS system carpserv exe C Program Synaptics SynTP SynTPLpr exe C Program Synaptics SynTP SynTPEnh exe C WINDOWS System svchost exe C Program Delade filer Symantec Shared ccApp exe C Program Delade filer Real Update OB realsched exe C Program Roxio Easy CD Creator DirectCD DirectCD exe C WINDOWS Samsung ComSMMgr ssmmgr exe C Program Java jre bin jusched exe C Program Webroot Spy Sweeper SpySweeper exe C WINDOWS system ctfmon exe C Program MSN Messenger MsnMsgr Exe C Program Microsoft ActiveSync wcescomm exe C Program Logitech Desktop Messenger Program BackWeb- exe C Program MICROS rapimgr exe C Program WIDCOMM Bluetooth-programvara BTTray exe C Program Microsoft ActiveSync WCESMgr exe C Program Logitech SetPoint kem exe C Program WIDCOMM BLUETO BTSTAC EXE C PROGRAM LOGITECH SETPOINT KHALMNPR EXE C Program Microsoft Office Office OUTLOOK EXE C WINDOWS system NOTEPAD EXE C Program Mozilla Firefox firefox exe C hjt HijackThis exe C Program Messenger msmsgs exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www eniro se R - HKLM Software Microsoft Internet Explorer Main Default Page URL http desktop presario net scripts c amp lc d amp ac R - HKLM Software Microsoft Internet Explorer Main Search Bar http search presario net scripts r search amp ap b R - HKLM Software Microsoft Internet Explorer Main Start Page http desktop presario net scripts c amp lc d amp ac R - HKCU Software Microsoft Internet Connection Wizard ShellNext http go compaq com Q CPT D bF asp R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride localhost R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName L nkar R - URLSearchHook i-Nav IDN SearchHook - CE -A C- - - CD AB F - C Program VeriSign i-Nav i-nav dll O - BHO Nothing - d b e- de - b-ac - ec b aa b - C WINDOWS system hp E tmp file missing O - BHO i-Nav IDN Resolver - CE -A C- - - CD AB F - C Program VeriSign i-Nav i-nav dll O - Toolbar Norton AntiVirus - CDD BF- FFB- - AD - DF B D - C Program Norton AntiVirus NavShExt dll O - HKLM R... Read more

A:SpyWare Popup - "Virus Alert!"

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted.

Before begining the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------


Quote:




When I click in that popup window




Never, ever click in a popup window....unless you know the site (or have been directed by helpers to do an online scan, which do have popups.

Is this your chosen startpage?

http://www.eniro.se/

-----------------------------

Let's have a look.....Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Please print out or copy these instructions/tutorial to Notepad as the internet will not (while in Safe Mode) be available to you at certain points of the removal process. Make sure to work through all the Steps in the exact order in which they are listed below. If there's anything that you don't understand, ask your question(s) before moving on with the fixes.

A. Please download the trial version of Ewido anti-malware from here:
http://www.ewido.net/en/download/Install Ewido anti-malware.
When installing, under Additional Options uncheck Install background guard and Install scan via context menu.
When you run Ewido for the first time, you could get a warning "Database could not be found!". Click Ok.
The program will prompt you to update. Click the Ok button.
The program will now go to the main screen.
You will need to update Ewido to the latest definition files.On the left-hand side of the main screen click the Update Button.
Click on Start.
The update will start and a progress bar will show the updates being installed.
Once finished updating, close Ewido.

If you are having problems with the updater, you can use this link to manually update ewido.
Ewido manual updates. Make sure to close Ewido before installing the update.

Download and install CleanUp! but do not run it yet. (Not Recommended for XP64).

*WARNING* Cleanup deletes EVERYTHING out of temp/temporary folders and does not make backups.

---------------------------------------------------------------------------------------------


B. Reboot your computer in Safe Mode.If the computer is running, shut down Windows, and then turn off the power.
Wait 30 seconds, and then turn the computer on.
Start tapping the F8 key. The Windows Advanced Options Menu appears. If you begin tapping the F8 key too soon, some computers display a "keyboard error" message. To resolve this, restart the computer and try again.
Ensure that the Safe Mode option is selected.
Press Enter. The computer then begins to start in Safe mode.
Login on your usual account.
______________________________

C. Open the SmitfraudFix Folder, then double-click smitfraudfix.cmd file to start the tool.
Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : " Registry cleaning - Do you want to clean the registry?" answer Yes by typing Y and hit Enter.
The tool will also check if wininet.dll is infected. If a clean version is found, you will be prompted to replace wininet.dll. Answer Yes to the question " Replace infected file?" by typing Y and hit Enter.

A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually. Reboot in Safe Mode.

The tool will create a log named rap... Read more

http://www.techsupportforum.com/forums/f284/spyware-popup-virus-alert-97110.html
Relevancy 106.33%

Hello everyone how are you!

I have a question, actually I'm development a application for sharing internet connection. I'm using "Wireless Hosted Network and Internet Connection Sharing" that it's in https://msdn.microsoft.com/en-us/library/windows/desktop/dd815252%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396


I want change default IP Address range and I have read that these settings it's in next address:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters.

My question is, How I can restart or update the "Internet Connection Shraring" or "Wireless Hosted Network" after I change the IP Address range for that assign IP Address different to default.

Thank you!

https://social.technet.microsoft.com/Forums/en-US/9cad8769-ac99-4437-8b52-752a0cf85da9/restart-or-update-the-quotinternet-connection-shraringquot-or-quotwireless-hosted?forum=netmon
Relevancy 106.33%

I have searched to see if this was asked before without any success. Maybe someone has run into this problem before.
When I open "my computer" or "control panel" after I close it...it automatically goes into Internet Explorer as a blank page. Most of the time, when I close the IE blank page...it stops responding and I have the control-alt-delete to "end the program"
Thanks in advance for any help.
 

A:closing "my computer" or "Control Panel" open internet explorer window

Possibly malware - anything openning ie on its own raises an alarm in my books. Post a HJT log to the malware removal section of the forum and let the experts take a look at it
 

https://forums.techguy.org/threads/closing-my-computer-or-control-panel-open-internet-explorer-window.658783/
Relevancy 106.33%

Hi everybody I suddenly lost the ability to connect to the internet through cable I think it is related to the security update addressing a vulnerability in kerberus http support microsoft com kb I have no idea what it does but I m reasonably sure that it happened just after the update The network connection keeps cycling between quot identifying quot and quot network cable unplugged quot every - seconds I m running windows on an older lenovo laptop and I ve tried rebooting system restore reinstalling the drivers removing lenovo s connectivity program uninstalling the security update manually but all to no avail A thread with a similar problem led me to try changing the quot link speed and duplex quot from quot auto negotiation quot to quot mbps full duplex quot under the advanced tab of the network connection properties this gives me a network connection but no internet access Connecting the cable through the side of the computer changes nothing compared to connection through the docking station I can access the internet just fine through wifi Any ideas Any help will be much appreciated Thanks nbsp

A:Mysterious "Identifying"/"cable unplugged" cycle Internet connection problem

https://forums.techguy.org/threads/mysterious-identifying-cable-unplugged-cycle-internet-connection-problem.1137775/
Relevancy 106.33%

Hello I have an Asus Netbook P running Windows SP with Internet Explorer I am often but not always experiencing the following issue When I attempt to connect to Wifi at a caf the quot Wireless Network Connection quot for the Network shows quot Connected quot yet there is no caf a Network although also - get No I When "connected" - Access" connecting at Internet "Unidentified to wifi Internet access Placing the nbsp pointer over the Connection icon in When connecting to wifi at a caf - although "connected" I also get - "Unidentified Network No Internet Access" the Notification Area displays quot Unidentified Network No Internet Access quot The network in question always has an SSID shown in the Wireless Network Connection list This issue occurs whether I am running only the Windows firewall or am only running the firewall that I prefer which is Comodo For antivirus I have Avast Pro with its quot web shield quot currently disabled and so far as this issue When connecting to wifi at a caf - although "connected" I also get - "Unidentified Network No Internet Access" is concerned it makes no difference whether this Avast component is enabled or disabled or When connecting to wifi at a caf - although "connected" I also get - "Unidentified Network No Internet Access" whether I disable all Avast Shields When this issue occurs there are often other customers in the caf nbsp connected to the caf wifi and also using the Internet I have to ask the caf to reset or turn off and then turn back on their router nbsp yet other customers do not have to do this to get Internet connection This is the issue at whatever caf to whose Wifi I attempt to connect Please help with a solution to this issue Regards Robert

https://social.technet.microsoft.com/Forums/en-US/0d18050f-7c31-4f0f-92d1-8039e0225061/when-connecting-to-wifi-at-a-caf-although-quotconnectedquot-i-also-get-quotunidentified?forum=w7itprogeneral
Relevancy 106.33%

Hello I have an Asus Netbook P running Windows SP get - Network wifi get a also "connected" I connecting to - Access" "Unidentified caf Internet Although I When No at with Internet Explorer I am often but not always experiencing the When connecting to wifi at a caf - Although I get "connected" I also get - "Unidentified Network No Internet Access" following issue When I attempt to connect to Wifi at a caf the quot Wireless Network Connection quot for the Network shows quot Connected quot yet there When connecting to wifi at a caf - Although I get "connected" I also get - "Unidentified Network No Internet Access" is no Internet access Placing the nbsp pointer over the Connection icon in the Notification Area displays quot Unidentified Network No Internet Access quot The network in question always has an SSID shown in the Wireless Network Connection list This issue occurs whether I am running only the Windows firewall or am only running the firewall that I prefer which is Comodo For antivirus I have Avast Pro with its quot web shield quot currently disabled and so far as this issue is concerned it makes no difference whether this Avast component is enabled or disabled or whether I disable all Avast Shields When this issue occurs there are often other customers in the caf nbsp connected to the caf wifi and also using the Internet I have to ask the caf to reset or turn off and then turn back on their router nbsp yet other customers do not have to do this to get Internet connection This is the issue at whatever caf to whose Wifi I attempt to connect Please help with a solution to this issue Regards Robert

https://social.technet.microsoft.com/Forums/en-US/0d18050f-7c31-4f0f-92d1-8039e0225061/when-connecting-to-wifi-at-a-caf-although-i-get-quotconnectedquot-i-also-get-?forum=w7itprogeneral
Relevancy 106.33%

Ive been getting random popups and my homepage has been reset to http www securitynetpage com I also had two programs installed onto my desktop Online Security Guide quot and quot Security Troubleshooting quot I also have a yellow triangle sign in the lower right hand portion of my screen that says something about a system alert popups Help would be greatly appreciated Thank You Logfile of HijackThis v Scan saved at AM on Platform Windows XP WinNT MSIE Internet Explorer v Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C WINDOWS System ishost exe C Program Files QuickTime qttask exe C Program Files Java jre bin jusched Random Security "Security Guide" Troubleshooting" popups, and "Online exe Random popups, "Online Security Guide" and "Security Troubleshooting" C Program Files Messenger msmsgs exe C WINDOWS System regscan exe C Program Files Kodak Kodak EasyShare Software bin EasyShare exe C Program Files Kodak KODAK Software Updater Program Kodak Software Updater exe C WINDOWS System ismon exe C Program Files Java jre bin jucheck exe C WINDOWS system drivers KodakCCS exe C WINDOWS system pctspk exe C WINDOWS System issearch exe C WINDOWS System wuauclt exe C Program Files Internet Explorer iexplore exe C WINDOWS System isnotify exe C Program Files Internet Explorer iexplore exe C HJT HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Random popups, "Online Security Guide" and "Security Troubleshooting" Start Page http www yahoo com O - BHO no name - - F - D - - D F - C Program Files Spybot - Search amp Destroy SDHelper dll O - BHO no name - eb d-ae a- - bd- a f be - C WINDOWS System ixt dll O - BHO Random popups, "Online Security Guide" and "Security Troubleshooting" Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - Toolbar amp Radio - E - F- D - E- A C - C WINDOWS System msdxm ocx O - HKLM Run QuickTime Task quot C Program Files QuickTime qttask exe quot -atboottime O - HKLM Run SunJavaUpdateSched C Program Files Java jre bin jusched exe O - HKLM RunOnce Panda cleaner C WINDOWS System ActiveScan pavdr exe xPanda ActiveScan O - HKCU Run MSMSGS quot C Program Files Messenger msmsgs exe quot background O - HKCU Run Regscan C WINDOWS System regscan exe O - Global Startup Kodak EasyShare software lnk C Program Files Kodak Kodak EasyShare Software bin EasyShare exe O - Global Startup Kodak software updater lnk C Program Files Kodak KODAK Software Updater Program Kodak Software Updater exe O - Extra context menu item amp Google Search - res C Program Files Google GoogleToolbar dll cmsearch html O - Extra context menu item amp Translate English Word - res C Program Files Google GoogleToolbar dll cmwordtrans html O - Extra context menu item Backward Links - res C Program Files Google GoogleToolbar dll cmbacklinks html O - Extra context menu item Cached Snapshot of Page - res C Program Files Google GoogleToolbar dll cmcache html O - Extra context menu item Similar Pages - res C Program Files Google GoogleToolbar dll cmsimilar html O - Extra context menu item Translate Page into English - res C Program Files Google GoogleToolbar dll cmtrans html O - DPF B-B - D-A D -FCFDF E C WUWebControl Class - http update microsoft com microsof O - DPF E A- D- EE - C-DC FA D FC MUWebControl Class - http update microsoft com microsof O - DPF B BFD- E - -B AF- A B EA WScanCtl Class - http www ca com securityadvisor v fo webscan cab O - DPF A A - DA - DAF-B - F E E ActiveScan Installer Class - http acs pandasoftware com actives ree asinst cab O - HKLM System CCS Services Tcpip D A A - DC- D -A DD-A F A C NameServer O - Service Kodak Camera... Read more

A:Random popups, "Online Security Guide" and "Security Troubleshooting"

Hi and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem a.s.a.p

In the meantime, make sure you subscribe to this thread so that you will receive an instant email when I have replied with a fix to your problem. You may do this by clicking the Thread Tools option at the top of your post and then clicking Subscribe to this thread. Then, make sure Instant Notification by email is selected and click Add Subscription

Please be patient with me during this time.

http://www.techsupportforum.com/forums/f284/random-popups-online-security-guide-and-security-troubleshooting-112647.html
Relevancy 106.02%

Hello,

I received this popup :

Is this a legitimate message from Microsoft ? I doubt it, but I've been out of the loop on computer security matters for quite some time and cursory search about scam popups did not bring up anything looking this official. Had to use CtrlAltDel to close this window.

Thanks for help.

A:"Suspicious Activity" Popup?

Yes, it's bogus. The URL should tell you that, anything from Microsoft would come from a Microsoft domain. Regardless, Microsoft doesn't do stuff like this.

http://www.tenforums.com/antivirus-firewalls-system-security/61079-suspicious-activity-popup.html
Relevancy 105.71%

G day all I am hoping someone may be able to tell me why my local folders appear under quot The Internet quot Local Places" Solved: opening Network appear "My Folders "The as Internet"when on one of our work computers rather than under quot Local Network quot We have four machines running XP Home and one running XP Pro The front machine has XP Home on it and I cannot open any Solved: Local Folders appear as "The Internet"when opening "My Network Places" of the shared folders for this machine on any of the other three machines even though they all have the same workgroup name Solved: Local Folders appear as "The Internet"when opening "My Network Places" They are all connected via CAT cable and we have a Netcomm NB ADSL modem router a Netcomm V Telephone Adapter VOIP modem and an port switch in the boss s office And the front computer s folder s and drives that I have chosen to be shared are listed under quot The Internet quot Does anyone know why this is and how I would go about correcting it Thankyou for your help and time Aaron nbsp

A:Solved: Local Folders appear as "The Internet"when opening "My Network Places"

https://forums.techguy.org/threads/solved-local-folders-appear-as-the-internet-when-opening-my-network-places.578697/
Relevancy 105.09%

In Microsoft Security Essentials, there is an option to "check for certain patterns of suspicious activity". What are these patterns of suspicious activity? How much does this slow down my system? How likely am I to get a false positive?

A:MS Security Essentials, "certain patterns of suspicious activity"

I use MSE and cannot see the option ,
where are you seeing it?
screenshot if possible

http://www.sevenforums.com/system-security/212670-ms-security-essentials-certain-patterns-suspicious-activity.html
Relevancy 104.47%

Hi Looking for insight advice re KB According to Infoworld it was quot Optional quot in May but I was not offered it then This KB3054476 "Important"/"Recommended"/"Optional" offered as week it was offered as quot Important quot and quot Recommended quot but only for one of my Win boxes I have read the MS KB article as well as THIS FORUM THREAD the latter of which includes a report of a BSOD due to this particular update However there isn't much out on the web about it And most of the discussion about it is overly technical for me And I am confused as to why it was previously offered as quot Optional quot but now is quot Important quot KB3054476 offered as "Important"/"Recommended"/"Optional" or quot Recommended quot I don't think I quot need quot it as I have no webcam on this box And I don't like KB3054476 offered as "Important"/"Recommended"/"Optional" to tempt fate by fixing things that are not broken So questions Is it safe to install Is it really necessary important Or would I be OK to hide it Thanks very much in advance

A:KB3054476 offered as "Important"/"Recommended"/"Optional"

The status of updates changes with circumstances.
If an update isn't relevant, it won't be offered at all.
If however it's relevant but the related software is not apparently in use, it may be 'optional' - and gravitate to 'Recommended' or 'Important' if the related software is in use.
It can also be promoted through the hierarchy by MS depending on feedback through WU and error-trapped feedback.


If you have (and use) a webcam, then it's probably best to install the update.

http://www.sevenforums.com/windows-updates-activation/372782-kb3054476-offered-important-recommended-optional.html
Relevancy 104.47%

I tried to associate the file extension .txt to a new editor program
with the well known cmdline programs ASSOC and FTYPE.

No, assigning them through WinExplorer menu does not work.
But this is another problem which should not discussed here.

When I type now one of the following alternative commands at the CommandPrompt then Win7 returns me something like:

assoc .txt=txtfile

"Access denied"
The following error occurs: .txt"

or

ftype txtfile=D:\notepad++\notepad++.exe "%%1"

"Access denied"
The following error occurs: txtfile"

Why?

The command above work fine under WinXP

Peter

A:"access denied" when using "assoc" and "ftype" from cmdline?

Question:

Did you run cmd.exe with administrative previlliges?
Elevated Command Prompt

http://www.sevenforums.com/general-discussion/101442-access-denied-when-using-assoc-ftype-cmdline.html
Relevancy 104.47%

hi,

OK, this is a weird one.

I wanted to move the "My Music", "My Pictures", "My Videos" folders to another HDD. I moved the "My Documents" Folder to this HDD without a problem but the others I accidentally set the whole HDD as the folder (if that makes sense). So now the music, videos and pictures folders are set to this HDD and dont have an actual folder to change the properties of. Therein lies my dilema.

If anyone can offer any advice on this curly issue it would be greatly appreciated.

Shane

A:Remaking "My Music", "My Pictures", "My Videos" folders

  
Quote: Originally Posted by Legume


hi,

OK, this is a weird one.

I wanted to move the "My Music", "My Pictures", "My Videos" folders to another HDD. I moved the "My Documents" Folder to this HDD without a problem but the others I accidentally set the whole HDD as the folder (if that makes sense). So now the music, videos and pictures folders are set to this HDD and dont have an actual folder to change the properties of. Therein lies my dilema.

If anyone can offer any advice on this curly issue it would be greatly appreciated.

Shane


You have a backup from before the problem started? a win 7 dvd to do a repair install?
ken

http://www.sevenforums.com/customization/109624-remaking-my-music-my-pictures-my-videos-folders.html
Relevancy 104.47%

OK As I said I am new Hope this info is the way you need it MANY MANY THANKS IN ADVANCE FOR THE TIME amp HELP Check out the following HHEELLLPPP Logfile of HijackThis / THREAD "Context3.kanoodle" "xlime", "xads", NEW v Scan saved at PM on Platform Windows XP WinNT MSIE Internet Explorer NEW THREAD / "xads", "xlime", "Context3.kanoodle" v Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system logonui exe C WINDOWS system spoolsv exe C WINDOWS Explorer EXE C PROGRA mcafee com vso mcvsshld exe C WINDOWS System Promon exe c program files mcafee com agent mcagent exe c progra mcafee com vso mcvsescn exe C Program Files interMute AdSubtract AdSub exe C PROGRA VCOM Fix-It mxtask exe c PROGRA mcafee com vso mcvsrte exe C WINDOWS System NMSSvc exe C WINDOWS System svchost exe C WINDOWS System MsPMSPSv exe C Program Files McAfee com VSO mcshield exe C PROGRA VCOM Fix-It mxtask exe C WINDOWS System wuauclt exe C Documents and Settings Frank M Gazzo Local Settings Temp Temporary Directory for hijackthis zip HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http www dellnet com R - HKCU Software Microsoft Internet Explorer Main Search Bar http websearch drsnsrch com sidesearch cgi id R - HKCU Software Microsoft Internet Explorer Main Search Page http websearch drsnsrch com sidesearch cgi id R - HKLM Software Microsoft Internet Explorer Main Search Bar http websearch drsnsrch com sidesearch cgi id R - HKLM Software Microsoft Internet Explorer Main Search Page http websearch drsnsrch com sidesearch cgi id R - HKLM Software Microsoft Internet Explorer Main Start Page http www dellnet com R - HKLM Software Microsoft Internet Explorer Search SearchAssistant http websearch drsnsrch com sidesearch cgi id R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch http websearch drsnsrch com sidesearch cgi id R - HKCU Software Microsoft Internet Explorer SearchURL Default websearch drsnsrch com q cgi q R - HKCU Software Microsoft Internet Explorer Main Local Page R - HKLM Software Microsoft Internet Explorer Main Local Page R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyServer http localhost O - BHO MultiMPPObj Class - EB - - -B -FBD D B FEA - C WINDOWS multimpp dll O - BHO Band Class - F A A- C - -A - E DC AB E - no file O - BHO no name - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - Toolbar amp Radio - E - F- D - E- A C - C WINDOWS System msdxm ocx O - Toolbar McAfee VirusScan - BA B -B - c -B - F F - c progra mcafee com vso mcvsshl dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - Toolbar no name - CDE A D-A - -BF -E B C F EB - no file O - Toolbar AdSubtract Toolbar - F AABDD- - e a- B - AC A B - C WINDOWS System adsubtb dll O - HKLM Run VSOCheckTask quot c PROGRA mcafee com vso mcmnhdlr exe quot checktask O - HKLM Run VirusScan Online quot c PROGRA mcafee com vso mcvsshld exe quot O - HKLM Run Promon exe Promon exe O - HKLM Run Microsoft Works Update Detection C Program Files Common Files Microsoft Shared Works Shared WkUFind exe O - HKLM Run MCUpdateExe C PROGRA McAfee com Agent mcupdate exe O - HKLM Run MCAgentExe c PROGRA mcafee com agent mcagent exe O - Startup AdSubtract lnk C Program Files interMute AdSubtract AdSub exe O - Global Startup Microsoft Find Fast lnk C Program Files Microsoft Office Office FINDFAST EXE O - Extra context menu item amp Google Search - res c program files google GoogleToolbar dll cmsearch html O - Extra context menu item AdSubtract Bypass Site - res C Program Files interMute AdSubtract AdSub exe O - Extra context menu item AdSubtract Cloak Image - res C Program Files interMute AdSubtract A... Read more

A:NEW THREAD / "xads", "xlime", "Context3.kanoodle"

hi

how to create a folder ?

right click anywhere in your desktop
click new,a tab opens ,click folder ,name it hjtantivirus .

download again hijackthis and install it in the new created folder .

your hjt is here now
C:\Documents and Settings\Frank M. Gazzo\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

it will not work properly if it stays there .

and don t create a new thread ,keep only one thread .this one ,now .

http://www.techsupportforum.com/forums/f284/new-thread-xads-xlime-context3-kanoodle-23803.html
Relevancy 104.47%

Ok, so basically, whenever I turn the computer on, 3 error messages appear:

- A virtual driver failed to inicialize DLL. Chose close to end the program. H:/Windows/system32/code/pRee.exe

- A virtual driver failed to inicialize DLL. Chose close to end the program. H:/Windows/system32/code/pRee1.exe

- Error loading H:/Archiv~/GBPLUG~/gbiehcef.dll. Couldn't find specific module.

(sorry if some terms are incorrect, my computer is in Spanish, to I tried to translate as best as possible)

Please help me solve this terrible problem, it is really getting me on my nerves! (oh, and if this helps, I've recently donwloaded this so called "Limewire acceleration", and whenever I ran the setup, it didn't work. I don't really remember the name of the website I downloaded it from, sorry...)

A:Can't Open "My Documents", "Trash" or other files in "My Computer"!?

Hi and Welcome to the forum

I am almost certain that you have malware problems. Most like caused by you doing file sharing/ P2P - Limewire.

Suggest that you go here and follow the directions:

http://www.techsupportforum.com/secu...oval-help.html

Please be advised that the malware people are very busy and it could take a couple days to assist you.

BG

http://www.techsupportforum.com/forums/f10/cant-open-my-documents-trash-or-other-files-in-my-computer-288056.html
Relevancy 104.47%

I thought I was computer savvy until this problem came up When I double click my computer recycle bin control panel etc the hourglass comes up for a few seconds goes off and nothing else No error messages or anything just nothing I have viewed a few of the threads covering this and a common link was the hijack this result I have posted that here and really hope that someone can help me with this I have run SpyBotSD and adaware I have run mutiple virus scans I did an SFC and the final thing bin", I "control computer" "my "recycle open cannot panel" etc... was to repair windows using the original disk none of which has help I am running Window XP w SP Any other suggestions would be certainly appreciated Hope to here from someone soon MTCS out Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C Program Files Common Files Symantec Shared ccSetMgr exe C Program Files Symantec AntiVirus DefWatch exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS System svchost exe C PROGRA I cannot open "my computer" "control panel" "recycle bin", etc... TDSTEL ENTERN app pppoeservice exe C WINDOWS system svchost exe C Program Files Symantec AntiVirus Rtvscan exe C Program Files Common Files Symantec Shared ccEvtMgr exe C WINDOWS Explorer EXE C WINDOWS system wuauclt I cannot open "my computer" "control panel" "recycle bin", etc... exe C Program Files Hewlett-Packard Toolbox Apache Tomcat webapps Toolbox StatusClient StatusClient exe C Program Files ScanSoft OmniPageSE OpwareSE exe C PROGRA SYMANT VPTray exe C WINDOWS BCMSMMSG exe C Program Files Adobe Photoshop Album I cannot open "my computer" "control panel" "recycle bin", etc... Starter Edition Apps apdproxy exe C Program Files HP HP Software Update HPWuSchd exe C Program Files Common Files Real Update OB realsched exe C PROGRA DEFEND DEFEND PopUpKiller exe C WINDOWS system ctfmon exe C Program Files Messenger msmsgs exe C Program Files Hewlett-Packard Toolbox Javasoft JRE bin javaw exe C Documents and Settings Charlotte Hough Desktop HijackThis exe O - BHO HP Print Enhancer - C E- - -BF - C - C Program Files HP Smart Web Printing hpswp printenhancer dll O - BHO HP Print Clips - F -DC - -A C- F D C - C Program Files HP Smart Web Printing hpswp framework dll O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO RealPlayer Download and Record Plugin for Internet Explorer - C E -B - BC - - C CA - C Program Files Real RealPlayer rpbrowserrecordplugin dll O - BHO IE PopUp-Killer Neikeisoft - E E F - C - D - D- - C PROGRA DEFEND DEFEND PopUp dll O - BHO no name - - F - D - - D F - C Program Files Spybot - Search amp Destroy SDHelper dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - Toolbar Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files Yahoo Companion Installs cpn yt dll O - HKLM Run StatusClient C Program Files Hewlett-Packard Toolbox Apache Tomcat webapps Toolbox StatusClient StatusClient exe auto O - HKLM Run TomcatStartup C Program Files Hewlett-Packard Toolbox hpbpsttp exe O - HKLM Run OpwareSE quot C Program Files ScanSoft OmniPageSE OpwareSE exe quot O - HKLM Run REGSHAVE C Program Files REGSHAVE REGSHAVE EXE AUTORUN O - HKLM Run vptray C PROGRA SYMANT VPTray exe O - HKLM Run BCMSMMSG BCMSMMSG exe O - HKLM Run Adobe Photo Downloader quot C Program Files Adobe Photoshop Album Starter Edition Apps apdproxy exe quot O - HKLM Run HP Software Update C Program Files HP HP Software Update HPWuSchd exe O - HKLM Run TkBellExe quot C Program Files Common Files Real Update OB realsched exe quot -osboot O - HKCU Run SpybotSD TeaTimer C Program Files Spybot - Search amp... Read more

A:I cannot open "my computer" "control panel" "recycle bin", etc...

You may want to reinstall the operating system.

Backupthe files that are importantto you before you reinstall.

The "New" installation will overwrite the current one

If you do not format your hard drive before the reinstall the installation should not harm your files (That's why I suggest backingup your files) and will speed up the installation process.
 

https://forums.techguy.org/threads/i-cannot-open-my-computer-control-panel-recycle-bin-etc.717788/
Relevancy 104.47%

Hello

My Brand new Laptop: Lenovo g505 after upgrading it to windows 8.1 from MS Apps store now i am not able to connect to internet i get "limited" or "No Internet Access". i have tried to re install the driver no luck

Lenovo support suggests to do factory rest but i dont want to go back to windows 8

Does anyone else has any other idea on how to fix this issue ?
Thank you very much

A:Windows 8.1 Wifi showing "limited" or "No Internet Access"

Try rebooting the router & modem. Usually limited connection, means that the compute has failed to communicate properly with the Wireless Access Point, or wired router connection.

http://www.eightforums.com/network-sharing/41257-windows-8-1-wifi-showing-limited-no-internet-access.html
Relevancy 104.47%

I'm running a Dell Dimension 5150 that recently updated the graphics card from the stock card to an NVIDIA GeForce 9500 GT and NAV 2009, if that helps any. The adapter I'm having an issue with is a Linksys 2.4 GHz adapter (802.11g).

There are two computers running on my newtork; the above-mentioned machine and a new Mac running Leopard. The PROBLEM (at last): the Mac runs on the same network without so much as a hiccup, and my PC is stuck between "Acquiring Network Address" and being unable to connect with the access point entirely, starting the cycle all over again. Before the graphics card upgrade and the installation of Norton, this wasn't a problem.

Thanks in advance!
 

A:"Acquiring Internet Address" / "Cannot associate with access point"

https://forums.techguy.org/threads/acquiring-internet-address-cannot-associate-with-access-point.848797/
Relevancy 104.47%

Here are my hijackthis log and my filelisterLet - Alert Internet of (Security Threat Attack Center Win32.Brontok Activity for Insecure Virus (fake) me know of anything else you need Please help - on work computer and desperately need to fix it ASAP Logfile of Trend Micro HijackThis v Scan saved at on Insecure Internet Activity - Threat of Virus Attack (Security Center Alert for (fake) Win32.Brontok Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode NormalRunning processes C WINDOWS System smss exeC WINDOWS system winlogon exeC WINDOWS system services exeC WINDOWS system lsass exeC WINDOWS system svchost exeC WINDOWS System svchost exeC WINDOWS System svchost exeC WINDOWS System svchost exeC WINDOWS system spoolsv exeC Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exeC Program Files Bonjour mDNSResponder exeC WINDOWS System svchost exeC Program Files Network Associates Common Framework FrameworkService exeC Program Files Network Associates VirusScan Mcshield exeC Program Files Network Associates VirusScan VsTskMgr exeC Program Files Common Files Microsoft Shared VS DEBUG MDM EXEC WINDOWS System nvsvc exeC Program Files Analog Devices SoundMAX SMAgent exeC Program Files Viewpoint Common ViewpointService exeC WINDOWS system wscntfy exeC WINDOWS system dla tfswctrl exeC WINDOWS system ICO EXEC WINDOWS system FSRremoS EXEC WINDOWS system dpmw exeC WINDOWS system Pelmiced exeC WINDOWS system NWTRAY EXEC Program Files Network Associates VirusScan SHSTAT EXEC Program Files Network Associates Common Framework UpdaterUI exeC Program Files Common Files Network Associates TalkBack tbmon exeC Program Files Microsoft Office Office GrooveMonitor exeC Program Files iTunes iTunesHelper exeC WINDOWS system ctfmon exeC nwquota bin nwquota exeC Program Files iPod bin iPodService exeC Program Files Viewpoint Viewpoint Manager ViewMgr exeC Program Files Common Files Microsoft Shared Source Engine OSE EXEC WINDOWS explorer exeC WINDOWS system msiexec exeC Program Files Opera opera exeC Program Files Trend Micro HijackThis HijackThis exeR - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride localO - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dllO - BHO Spybot-S amp D IE Protection - - F - D - - D F - C PROGRA SPYBOT SDHelper dllO - BHO DriveLetterAccess - CA D E- - CF- E - - C WINDOWS system dla tfswshx dllO - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C Program Files Microsoft Office Office GrooveShellExtensions dllO - HKLM Run NvCplDaemon RUNDLL EXE C WINDOWS System NvCpl dll NvStartupO - HKLM Run nwiz nwiz exe installO - HKLM Run dla C WINDOWS system dla tfswctrl exeO - HKLM Run UpdateManager quot c Program Files Common Files Sonic Update Manager sgtray exe quot rO - HKLM Run Mouse Suite Daemon ICO EXEO - HKLM Run NDPS C WINDOWS system dpmw exeO - HKLM Run NWTRAY NWTRAY EXEO - HKLM Run ShStatEXE quot C Program Files Network Associates VirusScan SHSTAT EXE quot STANDALONEO - HKLM Run McAfeeUpdaterUI quot C Program Files Network Associates Common Framework UpdaterUI exe quot StartedFromRunKeyO - HKLM Run QuickTime Task quot C Program Files QuickTime QTTask exe quot -atboottimeO - HKLM Run Network Associates Error Reporting Service quot C Program Files Common Files Network Associates TalkBack tbmon exe quot O - HKLM Run GrooveMonitor quot C Program Files Microsoft Office Office GrooveMonitor exe quot O - HKLM Run iTunesHelper quot C Program Files iTunes iTunesHelper exe quot O - HKLM Run Adobe Reader Speed Launcher quot C Program Files Adobe Reader Reader Reader sl exe quot O - HKLM Run UserFaultCheck systemroot system dumprep -uO - HKCU Run ctfmon exe C WINDOWS system ctfmon exeO - Global Startup U drive nwquota exe lnk C nwquota bin nwquota exeO - Extra context menu item E amp xport to Microsoft Excel - res C PROGRA MICROS Office EXCEL EXE O - Extra button no name - B E C... Read more

A:Insecure Internet Activity - Threat of Virus Attack (Security Center Alert for (fake) Win32.Brontok

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_ScanFollow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. You can find information on A/V control HEREOrange Blossom

http://www.bleepingcomputer.com/forums/t/226659/insecure-internet-activity-threat-of-virus-attack-security-center-alert-for-fake-win32brontok/
Relevancy 104.47%

First things first thanks to all who can help I need to programmatically make some adjustments to the Internet Explorer security settings Most of these settings I have found but there are a few I have not been able to get a clear exact location for in the registry I will be using for "First "Always and "Accept" and Allow setting registry value the cookies" Session for Party Cookies" Need option EXACT location of a BAT file to make the adjustments on PCs Here is what I am looking for Under the quot Internet nbsp Properties quot found Need EXACT location and value of registry setting for "Always Allow Session cookies" and the "Accept" option for "First Party Cookies" in control panel under the quot Privacy quot tab there is an quot Advanced quot option button When I click on it I get an quot Advance Privacy Settings quot options box On it are several settings The first setting quot Override automatic cookie handling quot needs to be checked in order to access the other options I can do that by adjusting the DWord value of quot PrivacyAdvanced quot under the quot Internet Settings quot key in the registry quot HKCU Software Microsoft Windows CurrentVersion Internet settings quot to be specific What I have not been able to find are the registry entries for the quot First-party Cookies quot quot Accept Block or Prompt quot options the quot Third-party Cookies quot quot Accept Block or Prompt quot options and the quot Always allow session cookies quot check box Please see picture below I have seen references to the following settings as being where those options exist but nothing that explains what each byte bit controls so I don't know if or where in these settings I will find the control for the things I need to adjust I don't want to blindly accept some code someone says includes the settings I need I need to know exactly what to do to change ONLY the things I am looking for span span span HKEY CURRENT USER Software Microsoft Windows CurrentVersion Internet span span Settings span span Zones span span span span span span quot AEBA FA- A- A - D-B C quot span span span span hex span span span span a span span span span span span span span span span span span span span span span span span span span span span span span span span span span c span span span span a span span span span f span span span span span span span span span span span span span span f span span span span e span span span span a span span span span span span span span e span span span span b span span span span span span span span span span span span span span span span span span span span span span span span span span span span span span span span a span span span span span span span span a span span span span e span span span span c span span span span span span span span d span span span span span span span span b span span span span span span span span span span span span span span span span span span span span span span quot A A C - EB - -A A - C F quot span span span span hex span span span span a span span span span span span span span span span span span span span span span span span span span span span span span span span span span c span span span span a span span span span f span span span span span span span span span span span span span span f span span span span e span span span span a span span span span span span span span e span span span span b span span span span span span span span span span span span span span span span span span span span span span span span span span span span span span span span a span span span span span span span span span span span span e span span span span c span span span span span span span span d span span span span span span span span b span span span span span span span span span span span span span span span span span span span Any help finding those settings will be greatly appreciated Currently I am using Win Ent x and IE But I also need to know how to ... Read more

https://social.technet.microsoft.com/Forums/en-US/41b75117-44ba-4a25-b210-41d72920cafc/need-exact-location-and-value-of-registry-setting-for-quotalways-allow-session-cookiesquot-and?forum=ieitprocurrentver
Relevancy 103.54%

Hello I originally posted this thread in the HiJackThis Log Help Forum but the administrator I dealt with said that THIS WAS NOT A VIRUS but a CONFIGURATION problem and he suggested I try this forum I am using a Dell Inspiron E Notebook Admins. HiJack prompted Referred This by download, Cannot "SECURITY ALERT". with with WINDOWS XP HOME EDITION with IE as a web browser and my problem is this When I try to download something ie netflix viewer quicktime BASIC WINDOWS UPDATES or ANYTHING that requires installation Cannot download, prompted with "SECURITY ALERT". Referred by HiJack This Admins. or downloading I am immediately prompted with a Security Alert that reads quot Your current security settings do not allow this file to be downloaded quot The alert does not look malicious but I've tried everything to fix it such as LOWERING all IE security settings to low DISABLING all of my firewalls using the Cannot download, prompted with "SECURITY ALERT". Referred by HiJack This Admins. SYSTEM RESTORE feature running PANDASCAN and Mcafee anti-virus scan Nothing has worked I have Mcafee anti-virus but it is out dated and expired I was told by a guy working for DELL that the problem I have is most likely Cannot download, prompted with "SECURITY ALERT". Referred by HiJack This Admins. malware and is possibly called a 'DOWNLOAD TROJAN BLOCKER' I have tried to download Deckard's System Scanner as well as SPYWARE BLASTER HiJackThis SDFix ComboFix and IE Spybad but I cannot download any of them I recently months ago installed IE but was immediately bombarded with pop-ups so I un-installed and went back to IE seemed to fix the popup prob I also recently installed dsMax and supporting software but this was installed after I intially noticed my 'security alert' problem I went through the steps of logging and this was all the info I could obtain Hope this helps and hopefully someone can help me Here is my STEP LOG STEP I removed all malware listed by techsupport com on my computer from the 'add remove programs' STEP I ran THREE Panda Active Scans on MY COMPUTER The FIRST scanning stopped although the progress bar was only of the way complete at Files scanned on the file quot ers video onboard oemdspif dll quot It found viruses and spyware I have listed the report below The SECOND and THIRD scans both quit unexpectedly at Files scanned on the file quot C ntldr quot This caused all of my IE windows to close STEP I could not complete STEP I can not download the recommended SPYWARE BLASTER or IE Spybad due to the 'SECURITY ALERT' STEP I have SERVICE PACK and when I clicked on the direct link to download SP a I got the 'SECURITY ALERT' and was UNABLE to download it I WAS able to update from MICROSOFT WINDOWS UPDATE PAGE these critical updates Windows Genuine Advantage Validation Tool KB and Microsoft NET Framework Service Pack KB Here is a copy of my st PANDASCAN REPORT the program quit on the nd and rd scans preventing me from getting the report Incident Status Location Adware adware outerinfo Not disinfected Windows Registry Adware Adware Yazzle Not disinfected C F tmp Virus Trj Downloader RQM Disinfected C F tmp Virus Trj Downloader OBC Disinfected C F tmp Adware Adware Yazzle Not disinfected C F tmp Adware Adware Adband Not disinfected C tmp Virus Trj Downloader QDR Disinfected C tmp Adware Adware Yazzle Not disinfected C tmp Adware Adware Adband Not disinfected C tmp Virus Generic Trojan Disinfected C tmp Adware Adware Yazzle Not disinfected C B tmp Adware Adware InternetSpeedMonitor Not disinfected C B tmp Virus Trj Downloader MDW Disinfected C BC tmp Spyware Cookie Atlas DMT Not disinfected C Documents and Settings Steve Application Data Mozilla Firefox Profiles n ls i default cookies txt atdmt com Spyware Cookie Doubleclick Not disinfected C Documents and Settings Steve Application Data Mozilla Firefox Profiles n ls i default cookies txt doubleclick net Spyware Cookie QuestionMarket Not disinfected C Doc... Read more

A:Cannot download, prompted with "SECURITY ALERT". Referred by HiJack This Admins.

I also have never used/installed any P2P software on this computer.

http://www.techsupportforum.com/forums/f10/cannot-download-prompted-with-security-alert-referred-by-hijack-this-admins-220687.html
Relevancy 103.54%

The system is hanging and slow as if you're running processes at once and there's a message and some stuff telling me to scan my machine and dropping me to a website advertising a scanner quot Windows Security Alert Windows has detected an Internet attack lagging. message "Windows Alert" Fake Security Constant attempt Somebody's trying to infect your PC with spyware or harmful viruses Run full system scan now to protect your PC from Internet attacks hijacking attempts Constant lagging. Fake "Windows Security Alert" message and spyware Click here to download spyware remover for total protection quot quot Microsoft Internet Explorer Constant lagging. Fake "Windows Security Alert" message SecurePCCleaner may find dangerous traces that need to be cleaned Don't let your privacy and reputation to be ruined by them Making your private information public can cause problems with your boss family or friends Click 'Ok' to start SecurePCCleaner scanner to remove compromising traces and setup controls to protect your privacy by cleaning or removing dangerous information quot There's a process that's created a quot red X' icon in the system tray that is giving notification of viruses and trying to advertise a scanner too Please any assistance to get rid of these would be greatly appreciated Deckard's System Scanner v Run by Ryan on - - Computer is in Normal Mode -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- -- Last Restore Point s -- - - UTC - RP - Deckard's System Scanner Restore Point - - UTC - RP - X-Cleaner Before removal - - UTC - RP - X-Cleaner Before removal - - UTC - RP - System Checkpoint - - UTC - RP - System Checkpoint -- First Restore Point -- - - UTC - RP - System Checkpoint Performed disk cleanup -- HijackThis run as Ryan exe ------------------------------------------------ Logfile of Trend Micro HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system spoolsv exe C Program Files Common Files Microsoft Shared VS DEBUG MDM EXE C WINDOWS system nvsvc exe C Program Files CyberLink Shared Files RichVideo exe C WINDOWS system tcpsvcs exe C WINDOWS Explorer EXE C Program Files Logitech iTouch iTouch exe C Program Files NVIDIA Corporation NvMixer NVMixerTray exe C WINDOWS system RUNDLL EXE C Program Files Common Files AOL ee AOLSoftware exe C Program Files CyberLink PowerDVD PDVDServ exe C Program Files Java jre bin jusched exe C Program Files Logitech Desktop Messenger Program LogitechDesktopMessenger exe C WINDOWS system ctfmon exe C Program Files Messenger msmsgs exe C Program Files Logitech MouseWare system em exec exe C Program Files Adobe Acrobat Reader reader sl exe C Program Files IMVU IMVUClient exe C Program Files Trillian trillian exe C WINDOWS system devldr exe C Program Files IMVU IMVUQualityAgent exe C WINDOWS system wuauclt exe C Documents and Settings Ryan Desktop dss exe C WINDOWS system wuauclt exe C PROGRA TRENDM HIJACK Ryan exe R - HKCU Software Microsoft Internet Explorer Main Search Bar http us rd yahoo com customize ie ch search html R - HKCU Software Microsoft Internet Explorer Main Search Page http us rd yahoo com customize ie www yahoo com R - HKCU Software Microsoft Internet Explorer Main Start Page http softwarereferral com jump php MjI Ojg amp lid R - HKLM Software Microsoft Internet Explorer Main Default Page URL http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Default Search URL http us rd yahoo com customize ie www yahoo com R - HKLM Software Microsoft Internet Explorer Main Search Bar http us rd yahoo com customize ie ch search html R - HKLM Software Microsoft Internet Explorer Main ... Read more

A:Constant lagging. Fake "Windows Security Alert" message

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

You don't seems to have an active Anti-Virus program. Why is that?

Connecting to the Internet without antivirus protection is a "Welcome" doormat for malware. It can take as little as eight seconds to infect an unprotected computer.

We will address that after we regain some control of your machine.

---------------------------------------------------------------------------------------------

Please download SmitfraudFix (by S!Ri) to your Desktop. We'll use this later.

---------------------------------------------------------------------------------------------
Download combofix.exe to your desktop.
Double click on combofix.exe & follow the prompts. Type 1, then press Enter to start the fix.
When finished, it shall produce a log for you. Post that log in your next reply.
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

---------------------------------------------------------------------------------------------


Restart your computer and boot into Safe Mode by tapping the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work. Login on your usual account. Make sure to close any open browsers.

---------------------------------------------------------------------------------------------

Double-click on SmitfraudFix.exe to start the tool.
Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : " Registry cleaning - Do you want to clean the registry?" answer Yes by typing Y and hit Enter.
The tool will also check if wininet.dll is infected. If a clean version is found, you will be prompted to replace wininet.dll. Answer Yes to the question " Replace infected file?" by typing Y and hit Enter.

A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually. Reboot into Normal Windows.

The tool will create a log named rapport.txt in the root of your drive, eg: Local Disk C: (C:\rapport.txt) or partition where your operating system is installed. Please post that log along with all others requested in your next reply.

---------------------------------------------------------------------------------------------

Next go to Control Panel click Display>Desktop>Customize Desktop>Web> Now, Uncheck Everything and delete if present:"Security Info"
"Warning Message"
"Security Desktop"
"Warning Homepage"
"Desktop Uninstall" or something similar
Also make sure the 'Lock desktop items' box is unticked. Click OK, and then Click Apply, then OK.

---------------------------------------------------------------------------------------------

Double-click on SmitfraudFix.exe to start the tool.
Select option #3 - Delete Trusted zone by typing 3 and press Enter
Answer Yes to the question "Restore Trusted Zone ?" by typing Y and hit Enter.

Note, if you use SpywareBlaster and/or IE-SPYAD, it will be necessary t... Read more

http://www.techsupportforum.com/forums/f100/constant-lagging-fake-windows-security-alert-message-183791.html
Relevancy 103.54%

I keep getting these Fake "Windows Security Alert" pop-up, pornographic desktop icons.

We had this type of virus last year but did not keep the directions.

Please tell me how to get rid of it.

I have McAfee. but this doesn't help.

Thanks
Mindy

A:Fake "Windows Security Alert" pop-up, pornographic desktop icons

Hi,

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.

NEXT



Download GMER Rootkit Scanner from here or here. Extract the contents of the zipped file to desktop.
Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.


Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Uncheck the following ... Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and post it in your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

http://www.techsupportforum.com/forums/f284/fake-windows-security-alert-pop-up-pornographic-desktop-icons-424673.html
Relevancy 103.54%

I just reinstalled Win XP and now when I try to sign on to Hotmail and several other sites I get the following message:

login.live.com uses an invalid security certificate.

The certificate is not trusted because the issuer certificate has expired.
The certificate will not be valid until 6/18/2008 5:00 PM.

(Error code: sec_error_expired_issuer_certificate)
What gives?

Michael
 

A:Solved: "Invalid Security Certificate" alert when I try to open hotmail, others

Check your Windows Time & Date
 

https://forums.techguy.org/threads/solved-invalid-security-certificate-alert-when-i-try-to-open-hotmail-others.780942/
Relevancy 103.54%

Hi Thanks in advance for your help with this problem My OS is WinXP sp On Alert" Security after XPAntivirus removed "Windows continues Friday my computer became infected with XPAntivirus Joke Blusod where it replaced "Windows Security Alert" continues after XPAntivirus removed my desktop with a yellow box saying I've been infected with a virus and quot Windows Security Alert quot bugs I ran Norton Antivirus Ad-Aware and Spybot multiple times over the weekend with XP in Safe mode and normal mode Finally this morning I used Malwarebytes which removed XPAntivirus and Joke Blusod I hope - at least they haven't shown back up all day However the quot Windows Security Alert quot bug is still popping up every once in a while It says in the top portion of it's window quot To help protect your computer Windows Firewall has detected activity of harmful software quot In the middle section it says quot Do you want to block this software from sending data over the Internet quot It then names a virus which changes from one appearance to the next Trojan-Spy Win GreenScreen Trojan-Spy Win Keylogger aa etc In step of the in preparation or this post I only found Viewpoint Media Player which I then uninstalled Below is the DSS Main txt copied And attached is the DSS Extra txt and the Panda ActiveScan txt Thanks for your help Michael Deckard's System Scanner v Run by Michael on - - Computer is in Normal Mode -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- System Restore is disabled attempting to re-enable success -- Last Restore Point s -- - - UTC - RP - System Checkpoint Backed up registry hives Performed disk cleanup -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend Micro HijackThis v Scan saved at - - Platform Windows XP Service Pack MSIE Internet Explorer Boot mode Normal Running processes C WINDOWS system smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C Program Files Common Files Symantec Shared CCSETMGR EXE C Program Files Common Files Symantec Shared CCEVTMGR EXE C Program Files Common Files Symantec Shared PIF B E DD - - c -B F- F FCA A PIFSvc exe C Program Files Common Files Symantec Shared SNDSrvc exe C Program Files Common Files Symantec Shared SPBBC SPBBCSvc exe C Program Files Common Files Symantec Shared CCPD-LC symlcsvc exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system spoolsv exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C WINDOWS explorer exe C Program Files Symantec LiveUpdate AluSchedulerSvc exe C WINDOWS system cisvc exe C Program Files Canon IJPLM ijplmsvc exe C Program Files Norton AntiVirus NAVAPSVC EXE C Program Files Norton AntiVirus IWP NPFMNTOR EXE C WINDOWS system nvsvc exe C WINDOWS system ScsiAccess EXE C WINDOWS system svchost exe C Documents and Settings All Users Application Data fapcjszy vuxszkfw exe C WINDOWS ltmsg exe C WINDOWS system hpsysdrv exe C Program Files HP Digital Imaging Unload HpqCmon exe C WINDOWS system hphmon exe C WINDOWS system ps EXE C Program Files Multimedia Card Reader shwicon k exe C Program Files Hewlett-Packard PhotoSmart Photo Imaging Hpi monitor exe C Program Files Hewlett-Packard PhotoSmart HP Share-to-Web hpgs wnd exe C WINDOWS ALCXMNTR EXE C Program Files Hewlett-Packard PhotoSmart HP Share-to-Web hpgs wnf exe C WINDOWS system wuauclt exe C Program Files BroadJump Client Foundation CFD exe C Program Files Common Files Symantec Shared CCAPP EXE C Program Files PhatNoise Media Manager PNAgent exe C Program Files Nokia Nokia PC Suite LaunchApplication exe C Program Files Adobe Acrobat Distillr acrotray exe C Program Files Common Files PCSuite Services ServiceLayer exe C Program Files iTunes iTune... Read more

A:"Windows Security Alert" continues after XPAntivirus removed

Hello and welcome to TSF

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

========

Please follow all instructions and in which order they come, if you have any questions, please ask before proceeding. Its important that you follow this through until i give you the all clear, a lack of symptoms does not mean that it is no longer present.

Please DO NOT Attach logs to your posts unless you are advised to do so.

=========

P2P

P2P - I see you have P2P software LimeWire 4.18.3 installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.

Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares and their infections.

References for the risk of these programs are Here,
Here and Here.

=========

Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery mode. This allows us to help you in the case that your computer has a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once the Recovery Console is installed using ComboFix, you should see a message that says:

The Recovery Console was successfully installed.



Please continue as follows:

Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

==========

Open HijackThis and click on 'Do a System Scan and save a Logfile'. Save the log file and post it here.

==========
Logs Required
C:\Combofix.txt
Hijackthis Log

http://www.techsupportforum.com/forums/f100/windows-security-alert-continues-after-xpantivirus-removed-279088.html
Relevancy 103.54%

I have followed the five steps to do before starting a new thread except the to Continuous leads messages, virprotect.com. Remove alert" please. "security website panda active scan I cant seem to get it to finish scanning Does Continuous "security alert" messages, leads to website virprotect.com. Remove please. it always take long I am fairly new at this computer stuff and when I began to get a flashing security alert that wouldn't go away I got worried I googled the website that it kept referring me to and I realized that I had a malware but now I don't know how to get rid of it I have since lots of advice about various products but I do not want to download just anything since this is a fairly new computer Please let me know what I can do to get rid of this pesky problem my DSS log is as follows Deckard's System Scanner v Run by Itzel Alejandre on - - Computer is in Normal Mode -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point -- Last Restore Point s -- - - UTC - RP - Deckard's System Scanner Restore Point - - UTC - RP - Installed Ad-Aware - - UTC - RP - Windows Defender Checkpoint - - UTC - RP - Software Distribution Service - - UTC - RP - Installed Windows Defender -- First Restore Point -- - - UTC - RP - Installed File Print FedEx Kinko's Backed up registry hives Performed disk cleanup -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend Micro HijackThis v Scan saved at - - Platform Windows XP Service Pack MSIE Internet Explorer Boot mode Normal Running processes C WINDOWS system smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C Program Files Windows Defender MsMpEng exe C WINDOWS system svchost exe C Program Files Alwil Software Avast aswUpdSv exe C Program Files Alwil Software Avast ashServ exe C WINDOWS system spoolsv exe C WINDOWS explorer exe C WINDOWS ehome ehtray exe C Program Files HPQ HP Wireless Assistant HP Wireless Assistant exe C Program Files Java jre bin jusched exe C Program Files Synaptics SynTP SynTPEnh exe C Program Files HP QuickPlay QPService exe C Program Files Common Files InstallShield UpdateService issch exe C Program Files Hewlett-Packard HP Quick Launch Buttons QLBCTRL exe C Program Files SealedMedia sealmon exe C Program Files Lexmark Series lxddmon exe C Program Files Lexmark Series lxddamon exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files Common Files Real Update OB realsched exe C Program Files Alwil Software Avast ashDisp exe C Program Files HP HP Software Update hpwuSchd exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files iTunes iTunesHelper exe C Program Files Cisco Systems VPN Client cvpnd exe C Program Files Windows Defender MSASCui exe C WINDOWS ehome ehrecvr exe C WINDOWS ehome ehSched exe C Program Files MySpace IM MySpaceIM exe C Program Files Google Common Google Updater GoogleUpdaterService exe C Program Files Common Files LightScribe LSSrvc exe C WINDOWS system ctfmon exe C WINDOWS system lxddcoms exe C Program Files AIM aim exe C WINDOWS system nvsvc exe C Program Files Windows Live Messenger msnmsgr exe C Program Files Google Google Desktop Search GoogleDesktop exe C Program Files Google Google Updater GoogleUpdater exe C Program Files Common Files AOL Loader aolload exe C WINDOWS system svchost exe C Program Files Viewpoint Common ViewpointService exe C WINDOWS system mqsvc exe C Program Files HP Digital Imaging bin hpqimzone exe C Program Files Hewlett-Packard Shared hpqwmiex exe C WINDOWS system mqtgsvc exe C Program Files Alwil Software Avast ashMaiSv exe C Program Files Alwil Software Avast ashWebSv exe C WINDOWS system dllhost exe C Program Files AIM aolsoftware exe C WINDOWS ehome ehmsas... Read more

A:Continuous "security alert" messages, leads to website virprotect.com. Remove please.

Hello, and Welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------
Download ComboFix from one of these locations. http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe
---------------------------------------------------------------------------------------------


* IMPORTANT !!! Place combofix.exe on your Desktop


Disconnect from the internet.
Disable your AntiVirus application, usually via a right click on the System Tray icon.


Go to -> Run -> paste in the following single line command & click OK

"%userprofile%\desktop\combofix.exe" /killall


Follow the prompts. Type "1" and press Enter to begin the scan.
Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

---------------------------------------------------------------------------------------------
Ensure your AntiVirus is re-enabled. A reboot should have done this.
Re-establish an internet connection.
Please download HijackThis to your desktop

Alternate link

Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file here. Do not fix anything in HijackThis since they may be harmless.

---------------------------------------------------------------------------------------------

http://www.techsupportforum.com/forums/f100/continuous-security-alert-messages-leads-to-website-virprotect-com-remove-please-199340.html
Relevancy 103.54%

have followed the five steps to do before starting a new thread except the panda active scan cause it dont seem to finish scanning I am fairly new at this computer stuff and when I began to get a flashing security alert that wouldn't go away I got worried I googled the website that it kept referring me to and I realized that I had a malware but now I don't know how to get rid of it My friends told me that TSF were great at solving various kinds of problem so here i am my DSS log is as follows Deckard's System Scanner v Run by garen on - - Computer is in Normal Mode -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point -- Last Restore Point s leads Remove virprotect.com. "Security Alert" please. to , messages Continous website -- - - UTC - RP - Deckard's System Scanner Restore Point - - UTC - RP - Systemkontrollpunkt - - UTC - RP - Systemkontrollpunkt - - UTC - RP - Systemkontrollpunkt - - UTC - RP - Systemkontrollpunkt -- First Restore Point -- - - UTC - RP - Systemkontrollpunkt Backed up registry hives Performed disk cleanup -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend Micro HijackThis v Scan saved at - - Platform Windows XP Service Pack MSIE Internet Explorer Boot mode Normal Running processes C WINDOWS system smss exe C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe Continous "Security Alert" messages , leads to website virprotect.com. Remove please. C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS system spoolsv exe C WINDOWS explorer exe C Program Video Add-on icthis exe C Program Video Add-on isfmntr exe C Program Analog Devices SoundMAX SMTray exe C WINDOWS system rundll exe C Program ESET nod kui exe C Program iTunes iTunesHelper exe C Program Video Add-on isfmm exe C Program Java jre bin jusched exe C WINDOWS system devldr exe C Program MSN Messenger msnmsgr exe Continous "Security Alert" messages , leads to website virprotect.com. Remove please. C Continous "Security Alert" messages , leads to website virprotect.com. Remove please. WINDOWS system ctfmon exe C Program ZyDAS ZD g Utility ZDWlan exe C Program Delade filer Apple Mobile Device Support bin AppleMobileDeviceService exe C Program ESET nod krn exe C WINDOWS system nvsvc exe C WINDOWS system PnkBstrA exe C Program Analog Devices SoundMAX SMAgent exe C WINDOWS system alg exe C Program iPod bin iPodService exe C Program CheckPoint ZAForceField ISWSVC exe C Program Video Add-on icmntr exe C Program CheckPoint ZAForceField ForceField exe C Program CheckPoint ZAForceField ISWMGR exe C Program CheckPoint ZAForceField ISWMGR exe C WINDOWS system devldr exe C Program iTunes iTunes exe D ventrilomixx Ventrilo exe C Program MSN Messenger usnsvc exe C Program Internet Explorer iexplore exe C Program Internet Explorer iexplore exe D WINRAR WinRAR exe C Documents and Settings garen Lokala inst llningar Temp IswTmp DwlRun dss exe R - HKCU Software Microsoft Internet Explorer Main Start Page about blank R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName L nkar R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Bar http ie search msn com SUB RFC srchasst srchasst htm R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId O - BHO Adobe PDF Reader Link Helper - E F-C D - ... Read more

A:Continous "Security Alert" messages , leads to website virprotect.com. Remove please.

Hello, and Welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

--------------------------------------------------------------------------------------------- Download this file - http://download.bleepingcomputer.com...a/ComboFix.exe

* IMPORTANT !!! Place combofix.exe on your Desktop


Disconnect from the internet....pull the plug!
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.
Go to -> Run -> paste in the following single line command & click OK

"%userprofile%\desktop\combofix.exe" /killall


Follow the prompts. Type "1" and press Enter to begin the scan.
Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

---------------------------------------------------------------------------------------------
Ensure your AntiVirus and AntiSpyware applications are re-enabled. A reboot should have done this.
Re-establish an internet connection.
Please download HijackThis to your desktop

Alternate link

Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file here. Do not fix anything in HijackThis since they may be harmless.

---------------------------------------------------------------------------------------------

http://www.techsupportforum.com/forums/f100/continous-security-alert-messages-leads-to-website-virprotect-com-remove-please-204951.html
Relevancy 103.54%

quot dependency chain quot quot windows quot internet quot windows explorer quot At the time of this writing this search in Google will produce one result at best Am I searching the wrong things I have tried a couple handfuls of variants and "dependency 7" chain" internet "windows explorer" "windows I am coming up with zilch Though I am fairly well versed in Windows from working on other people's machines I decided to stick with good old XP because of one issue above "dependency chain" "windows 7" internet "windows explorer" all else When I instructed my firewall to block Windows Explorer from accessing the Internet it completely cut me off from the Internet no ifs ands or buts My understanding of why this is happened leads me to believe the dependency chain for Internet access goes through Windows Explorer I have long had a habit of blocking my File Manager of choice access to the Internet because well it's a file manager Admittedly my one experience with Windows on my own machine was a retired student version of Server R but as soon as I found out that was the case I decided not to make the move to Windows and went back to my XP installation I believe I was using Sunbelt Personal Firewall at the time I now use PCTools Free Firewall Is this still the case with Windows Is there a workaround if it is I haven't tried to recreate this on another person's machine KronKyrios

A:"dependency chain" "windows 7" internet "windows explorer"

Hi KronKyrios, welcome to 7F!

I did find some very old information that may shed some light:
http://www.pctools.com/forum/showthread.php?17198-explorer.exe-(W98)&p=58079#post58079

"Launch Browser Windows in a Separate Process" Setting Is Not Available in Internet Explorer 5.01 or Internet Explorer 5.5

You can go into Services and check:
Windows Firewall/Internet Connection Sharing (ICS)
Network Connections
Remote Procedure Call (RPC)
Windows Management Instrumentation

R-click on each one, then Properties, then the Dependencies Tab.
You would have to cross check each one that is listed.

Here is a good list to help you: Black Viper’s Windows 7 Service Pack 1 Service Configurations

http://www.sevenforums.com/system-security/206824-dependency-chain-windows-7-internet-windows-explorer.html
Relevancy 103.23%

When I open an old (2003) Exel-file with VBA-code in it with Excel 2007, I get one of these two responses
and I do not know what causes Excel to make different choices
-----------------
1)
A Dialog Box: "Microsoft Excel Security Notce"
This one is very similar to the one in Excel 2003 and that is how I want Excel to behave.
The user has to Enable Macros to go on and work with the file.

2)
"Security Warning"
This one is new in 2007 and the user can continue to work with the file even if he does not see the security warning.
That means that VBA-code that I (the programmer) want to run when the file is opened, does not execute.
--------------------------

My problem is that I do not know what causes the two different behaviors and cannot force Excel to open files with the first Dialog box.
Can you?
 

A:Solved: Excel "Security Notice" vs "Security Warning"

I think most of the info will be in the dailog screen, i'sn't there's more text in the dialog box than the text you mentioned?

I think if you read through it it'll become clear.

It has all to do with the improved Security settings with 2007 and up

Found this in a simple search with Google:
http://peltiertech.com/WordPress/improved-macro-security-warning-in-excel-2010/
 

https://forums.techguy.org/threads/solved-excel-security-notice-vs-security-warning.943477/
Relevancy 103.23%

I Alert" link Fake "Windows Security pop-up, desktop pornographic and redirection icons was out of town for a day and when I returned Fake "Windows Security Alert" pop-up, pornographic desktop icons and link redirection my computer was on when it is usually in sleep mode or turned off completely there were desktop icons that appeared to be links to pornographic sites and there was an annoying pop-up claiming that I have no Fake "Windows Security Alert" pop-up, pornographic desktop icons and link redirection Antivirus protection and giving me a link to download one I have the Vyper anti-virus software and if I ever tried to click a link on the pop-up a pop-up from Vyper would appear saying that a quot known bad program quot was trying to run No one uses my computer but me so there's no chance that anyone was trying to download porn When I delete the icons they still come back I have run a deep virus scan several times but the pop-up and icons still appear I'm positive that the windows alert is fake also because it says that a firewall is turned quot On quot but when I actually check my Windows Security Center it says that the firewall is turned off Also for quite a few weeks if I google something and then click links to the results I'm redirected to random sites that I have never seen before As an added frustration a blue screen with white blurred font will fill the whole screen and then suddenly turn my computer off and then back on again I have NO idea what's going on with my computer Please help

A:Fake "Windows Security Alert" pop-up, pornographic desktop icons and link redirection

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

http://www.techsupportforum.com/forums/f100/fake-windows-security-alert-pop-up-pornographic-desktop-icons-and-link-redirection-412489.html
Relevancy 103.23%

I have a Dell desktop that is being attacked.
I keep getting Security Alert Warnings along w/being scanned. I cannot connect with my intenet (broadband) nor can I run the Malware scanner (will not respond). I did manage to open the Avast scanner but after running for 48 mins and it was still at 0% I stopped it.
I know just enough about computer skills to know that this is beyond my skills to fix. I will gladly send any info requested if you just tell me how to do it as well as instructions on how to fix my comp.
 

A:Microsoft Security Alert Tojan "Nightmare"

I have been checking out all of the post that are related to this problem and I am more confused than before.I did manage to connect to the internet by doing a system restore but when I ran the Malware scan it found "No Threats"! don't understand...someone please help,as I can only use this borrowed computer for another day and I am afraid to use mine for fear of it shutting down.
 

https://forums.techguy.org/threads/microsoft-security-alert-tojan-nightmare.1031868/
Relevancy 103.23%

I believe that I have downloaded a virus of some kind onto my laptop. This has never happened to me and I'm not computer savvy. Please help me. A series of popups continue to show up on my screen saying things like "my computer has been infected" and "windows has detected an internal attack..." etc, etc. Moreover, there are now three icons on my desktop that I know I didnt download (on purpose) and so I do not trust them although they claim to be privacy protection/ spyware protection stuff. The popups seem to lead me to websites for protection, but they are very aggressive popups. The wallpaper on my computer has completely changed. I tried to do system restore about three times to about three different restor points, and each time my computer could not restore completely! Please please help. I haven't a clue what to do.

A:PLEASE, I'm Desperate! "Windows Security Alert" Pop ups and other stuff

Look over the First Steps at Removing Malware

http://www.techsupportforum.com/forums/f10/please-im-desperate-windows-security-alert-pop-ups-and-other-stuff-205348.html
Relevancy 103.23%

I entered a page Google yielded as a result for a particular Alert" Malware posing as Security "Windows file I was trying to find when my computer began to slow down considerably and my desktop got louder I immediately hit the back button on the browser as I suspected something was possibly beginning to infect my computer and as a Firefox popup appeared I opened Windows Task Manager and ended firefox exe After this in the Malware posing as "Windows Security Alert" tray appeared a yellow triangle with an exclamation point in the middle and your standard virus popup claiming to be helpful and that your computer is at risk I ended every unfamiliar process in Task Manager but the yellow triangle that said Windows Security Alert when I hovered my mouse over it remained in the tray I could not find any process that would make any impact on it by being ended It popped up again amp took over when I tried to right click it in the tray god knows why I did that and when I tried to open Firefox I got frustrated with the lack of an unfamiliar process and closed Task Manager and decided to try and refresh it by opening it again and when I did so the yellow triangle turned into a red sphere with a white X in the middle I began to get several little popups from the tray coming from the icon telling me I had numerous critical errors to do with hard drive RAM I also received another popup in the form of a Cancel Try Again Continue I was very careful never to click any of these popups nor could I end them in Task Manager as again there were no processes to do with the attack I do not have an active virus scanner but I use MalwareBytes when I need to and when I tried to do so the infection took over again Chrome however managed to get past it and I loaded this site successfully the popups in the corner warning me of critical errors were still actively appearing and disappearing but after a couple of minutes during which I was idle and didn t perform open load anything the taskbar vanished as though I had just ended explorer exe and reappeared after some computer lag There was literally no trace of the virus since then all popups vanished and it has not reappeared since after a reboot an installation of HijackThis which I have a log file from and several program executions including MalwareBytes which is currently running a full scan Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows system Dwm exe C Windows system taskeng exe C Windows Explorer EXE C Program Files Windows Defender MSASCui exe C Windows RtHDVCpl exe C hp support hpsysdrv exe C Windows System hkcmd exe C Windows System igfxpers exe C Program Files Java jre bin jusched exe C Program Files HP HP Software Update hpwuSchd exe C Program Files Lexmark Series lxctmon exe C Program Files Lexmark Series ezprint exe C Windows system igfxsrvc exe C Program Files iTunes iTunesHelper exe C Program Files Windows Sidebar sidebar exe C Program Files Windows Live Messenger msnmsgr exe C Program Files Nokia Nokia PC Suite PCSuite exe C Program Files Windows Media Player wmpnscfg exe C Program Files mIRC mirc exe C Windows system Taskmgr exe C hp kbd kbd exe C Windows system wbem unsecapp exe C Windows system wuauclt exe C Program Files Google Chrome Application chrome exe C Program Files Google Chrome Application chrome exe C Program Files Google Chrome Application chrome exe C Program Files Google Chrome Application chrome exe C Trend Micro HiJackThis HiJackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE amp tp iehome amp locale en au amp c amp bd Presario amp pf cndt R - HKCU Software Microsoft Internet Explorer Main Start Page http google com R - HKLM Software Microsoft Internet Explorer Main Default Page URL http ie redirect hp com svs rdr TYPE amp tp iehome amp locale en au amp c amp bd Presario amp pf cn... Read more

A:Malware posing as "Windows Security Alert"

Hi,

Sorry for delayed response. Forums have been really busy. If you still need help with this do following, please.
Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds file to run the tool.
When done, DDS will open two (2) logs:
DDS.txt
Attach.txt

Save both reports to your desktop. Post them back to your topic.

 

https://forums.techguy.org/threads/malware-posing-as-windows-security-alert.965650/
Relevancy 103.23%

So I ve been having A LOT of trouble with my computer recently but much of it has seemed to sort itself out HOWEVER I have been having an issue with quot Win Icon Security Taskbar Alert" "Windows in Defrag quot It appeared on "Windows Security Alert" Icon in Taskbar my desktop and ever since that I ve been getting a quot Windows Security Alert quot red cross icon in my task manager I know they re related as when I double "Windows Security Alert" Icon in Taskbar click on the icon Win Defrag opens Whenever the icon is on my task manager My Documents disappear to be "Windows Security Alert" Icon in Taskbar replaced with an empty quot Programs quot folder When I use Rkill the icon disappear and My Documents come back but I m sure it s still there -- gt I ve used MBAM countles times and it keeps finding and deleting things I ve also tried Stopzilla and Dr Webb along with just my McAffee They seem to find more things every time Plese help if you can below is my most recent HJT MBAM and Rkill logs Thanks HJT Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows Vista SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C Windows Explorer EXE C Windows system Dwm exe c PROGRA mcafee com agent mcagent exe C Program Files DellTPad Apoint exe C Windows system taskeng exe C Windows System igfxtray exe C Windows System hkcmd exe C Windows System igfxpers exe C Windows system igfxsrvc exe C Program Files Dell QuickSet quickset exe C Program Files Intel Intel Matrix Storage Manager IAAnotif exe C Program Files Dell Webcam Dell Webcam Central WebcamDell exe C Program Files Dell DataSafe Online DataSafeOnline exe C Program Files CyberLink PowerDVD DX PDVDDXSrv exe C Program Files Dell AIO Printer dldfmon exe C Program Files Dell AIO Printer memcard exe C Program Files Dell Support Center bin sprtcmd exe C Program Files Common Files Real Update OB realsched exe C Program Files IDT WDM sttray exe C Program Files iTunes iTunesHelper exe C Program Files Java jre bin jusched exe C Program Files Windows Sidebar sidebar exe C Program Files Electronic Arts EADM Core exe C Program Files Windows Media Player wmpnscfg exe C Program Files WIDCOMM Bluetooth Software BTTray exe C Program Files SetPoint SetPoint exe C Program Files Dell DellDock DellDock exe C Program Files DellTPad ApMsgFwd exe C Program Files DellTPad HidFind exe C Program Files DellTPad Apntex exe C Program Files Common Files Logitech khalshared KHALMNPR EXE C Program Files WIDCOMM Bluetooth Software BtStackServer exe C Program Files iTunes iTunes exe C Program Files Spotify spotify exe C Program Files Mozilla Firefox firefox exe C Windows system SearchFilterHost exe C Windows system SearchProtocolHost exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Default Page URL http g uk msn com USCON R - HKCU Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKCU Software Microsoft Internet Explorer Main Start Page http www google co uk R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Search SearchAssistant R - HKLM Software Microsoft Internet Explorer Search CustomizeSearch R - HKCU Software Microsoft Internet Explorer Main Window Title Internet Explorer provided by Dell R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyServer R - HKCU Software Microsoft Windows CurrentVersion Internet Settings ProxyOverride local R - HKCU Software Microsoft Internet Explorer Toolbar LinksFolderName O - Hosts localhost O ... Read more

https://forums.techguy.org/threads/windows-security-alert-icon-in-taskbar.966005/
Relevancy 102.92%

When I plugin an external USB hard disc or USB stick it appears that Windows 7 pops up a dialog window asking me:

"Do you want to scan and fix removable disc?"

After reading a while in Internet I saw two methods for disabling these popups:

1.) Disabling service "Shell Hardware detection"

2.) enabling "Turn off Autoplay" in gpedit.msc

Whats the difference?

I want be sure that if I plugin a new USB device (like an USB stick or USB printer or USB hard disc) this USB hardware IS successfuly detected and joined by Windows 7.

So I can imagine that the first method is too brutal because it prevents inclusion of new USB devices

Is this correct?

If yes: Why is it recommended so often for avoiding the popup?

Peter

A:Disable popup "Do you want to scan and fix remov.device""? 2 methods?

You get that message because Windows detects something wrong with the file system on the device. This can happen if the device was unplugged without "Safely Removing Hardware", and a transfer was not complete.

The methods you mention just mask the problem.

You can let Windows scan and fix the drive, choose: fix file system errors.
or, do a full format on the drive, not the quick format.
Or, run Chkdsk /f X: manually, X = the problem drive letter, you may have to run it more than once.

It is always a good idea to move all data off the drive first, then copy it back after the fix is complete. This also fixes bad file problems that can contribute to the error.

The drive probably has it's "Dirty Bit" set. This is a single Hex value that tells Windows the file system is no good. Chkdsk and formatting will often reset the dirty bit, but sometimes not on the first attempt.

To see if the dirty bit is set:
Open a command prompt > Start > type: cmd > right-click on Command Prompt and choose “Run as administrator”
and then type:
fsutil dirty query x:
(substitute the letter "x" with the drive letter that is giving you problems)

If the dirty bit is set you will get a message that "Volume X is DIRTY".

Keep running chkdsk /r , or chkdsk /f /r until the dirty bit clears.

http://www.sevenforums.com/hardware-devices/297857-disable-popup-do-you-want-scan-fix-remov-device-2-methods.html
Relevancy 102.92%

hi. i use the paid norton security suite. i got a popup and closed it. i got it again, etc, etc. then i couldn't even get on line. i called norton and they told me it was my fault for clicking the red x on the popup! they offered to get rid of it for me; for $139!!
now i don't know what to do. thanks for your help, boyd.
 

https://forums.techguy.org/threads/bogus-norton-security-popup-contained-virus.904072/
Relevancy 102.92%

Target Sony Vaio PCV-RX w XP SP Have Security I think) popup fake solution-search "Windows ( Essentials" with Virus a Norton antivirus Got a message from it saying it had stopped a Virus with fake "Windows Security Essentials" ( I think) solution-search popup trojan Then a window popped up offering to search multiple search engines for a solution I vaguely I was tired ok noticed that it claimed on the top bar to be quot Windows Security Essentials quot which should have caused me to yank the cord since though I'd recently installed WSE on a laptop I still had a Norton sub on this computer So I watched it as it pretended to search little green boxes as I recall and clicked on one of the four that claimed to Virus with fake "Windows Security Essentials" ( I think) solution-search popup be a solution duh Obviously no real antivirus would follow this procedure but Norton had worked before and I was not alert All the Firefox instances closed immediately and then what appeared to be a power-off -restart procedure self-initiated It was aborted by what appeared to be a memory error and now Windows keeps recycling back to the choose-startup-mode screen I stuck in the Sony System recovery CD just to see what would happen and it Virus with fake "Windows Security Essentials" ( I think) solution-search popup proceeds to the point where it says quot File i system hjalaacpi dll could not be loaded quot quot The error code is quot quot Setup cannot continue Press any key to exit quot Exiting initiates a reboot and since the recovery cd is in the drive a loop Or if I take it out the start mode loop I take that back I just looked up and this time I've got a BSOD quot windows had been shut down to prevent damage quot quot SESSION INITIALIZATION FAILED quot Bad timing I have only partial data backup duh squared and a tax deadline coming up next Friday duh cubed I think I can work around this but I would sure prefer not to So I plan to take it to someone at least semi-professional Monday to attempt data recovery but What hit me Looking online it's modus looks like some trojans that attempt to sell fake anti-virus services Can anyone ID exactly which one Nobody is going to make money by bricking my computer so I don't think that was the intent And I've been ignoring some BSODs and memory errors duh what's beyond cubed Quinted so it might have been a double whammy Was the definately a result of cd or hd problems I'm thinking of trying to create an Ultimate Boot CD but don't know ISO or slipstreaming from tapdancing and don't have a windows distribution just the restores Does this sound doable Wrong forum I know but I'm crashing now without exploring or posting elsewhere so if you have some info at your fingertips I'd appreciate the input Thanks

A:Virus with fake "Windows Security Essentials" ( I think) solution-search popup

Well, thank you all.

Btw, the Sony proved unbootable enough that the easiest solution was to slave its drive in another computer. All the files seem ok. MalwareBytes Anti-Malware did't find any trace of the virus on it.

http://www.techsupportforum.com/forums/f50/virus-with-fake-windows-security-essentials-i-think-solution-search-popup-520576.html
Relevancy 102.92%

Hello everyone,I've been having a problem since I updated to Windows 8.1My internet wi-fi connection is unusually low and is not working after only minutes of browsing the internet. The problem is always fixed after I run troubleshoot problems and is saying that the default Gateway is unavailable. My netword card might be the source of the problem even tough I updated the drivers. I'm not sure which one I have because drivers from Ralink and Qualcomm seem to be working both so :/Please help ^^

A:"Access Limited" or "No Internet Connection" windows 8.1

Hi,
Welcome to the forums, go to device manager, expand "Network Adapters" and find out the make of your card and post here, while you are in Device Manager, right click wireless adapter, click properties, select "Advanced" tab, select "Auto" from the drop down ( as in 2nd snip) for 802.11n Channel width for 2.4.

http://www.eightforums.com/network-sharing/50543-access-limited-no-internet-connection-windows-8-1-a.html
Relevancy 102.61%

hey guys i ended up with these on my pc yesterday and the pop-ups and bogus security warnings are do "bestsellerantivirus" "security 7.1" removing toolbar next what and to for starting to tick me off as i can t get rid of them i ve read some of the other posts on what what to do next for removing "bestsellerantivirus" and "security toolbar 7.1" i need to do and from what i can gather i need to use hijackthis what to do next for removing "bestsellerantivirus" and "security toolbar 7.1" and combofix and these are the logs i get HJT log Logfile of Trend Micro HijackThis v Scan saved at on Platform Windows XP SP WinNT MSIE Internet Explorer v Boot mode Normal Running processes C WINDOWS System smss exe what to do next for removing "bestsellerantivirus" and "security toolbar 7.1" C WINDOWS system csrss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS system svchost exe C WINDOWS system Ati evxx exe C WINDOWS system svchost exe C WINDOWS Explorer EXE C WINDOWS system spoolsv exe C Program Files Belkin Belkin Wireless Network Utility WLService exe C Program Files Belkin Belkin Wireless Network Utility WLanCfgG exe C Program Files Common Files InterVideo RegMgr iviRegMgr exe C Program Files PDF Complete pdfsvc exe C Program Files Spyware Doctor svcntaux exe C Program Files Spyware Doctor swdsvc exe C Program Files Spyware Doctor SDTrayApp exe C Program Files PDF Complete pdfsty exe C WINDOWS SMINST Scheduler exe C Program Files Adobe Photoshop Album Starter Edition Apps apdproxy exe C Program Files Microsoft Office Office GrooveMonitor exe C Program Files Java jre bin jusched exe C Program Files MSN Messenger MsnMsgr Exe C WINDOWS system ctfmon exe C Program Files DAEMON Tools daemon exe C Program Files AdVantage AdVantage exe C Program Files SUPERAntiSpyware SUPERAntiSpyware exe C WINDOWS System alg exe C WINDOWS system svchost exe C Program Files MSN Messenger usnsvc exe C Program Files Internet Explorer IEXPLORE EXE C Program Files Common Files Microsoft Shared Windows Live WLLoginProxy exe C Program Files internet explorer iexplore exe C Program Files Trend Micro HijackThis HijackThis exe C WINDOWS system wbem wmiprvse exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www studynet herts ac uk R - HKLM Software Microsoft Internet Explorer Main Default Page URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Default Search URL http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Search Page http go microsoft com fwlink LinkId R - HKLM Software Microsoft Internet Explorer Main Start Page http go microsoft com fwlink LinkId O - BHO Adobe PDF Reader Link Helper - E F-C D - D -B D- B D BE B - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelper dll O - BHO SysApp - AE A A -DC - C -B - B C C C D - C Program Files ApplePie ie-improver dll O - BHO Groove GFS Browser Helper - - C - D -B F - BBC D A E - C PROGRA MICROS Office GRA E DLL O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO no name - E D - A- EC-A -BA D E E - no file O - BHO Windows Live Sign-in Helper - D - C - ABF- ECC- C - C Program Files Common Files Microsoft Shared Windows Live WindowsLiveLogin dll O - BHO no name - A B - D E- -A - C DE A - C WINDOWS system frrsezyf dll O - BHO ea ad c- aa- db- - af ec - ce fa - - -bd -aa c da ae - C WINDOWS system jreeechy dll O - Toolbar Security Toolbar - A AE -FBED- -A BF- AF - C WINDOWS system frrsezyf dll O - HKLM Run amd dc opt C Program Files AMD Dual-Core Optimizer amd dc opt exe O - HKLM Run PDF Complete quot C Program Files PDF Complete pdfsty exe quot O - HKLM Run SetRefresh C Program Files Compaq SetRefresh SetRefresh exe O - HKLM Ru... Read more

A:what to do next for removing "bestsellerantivirus" and "security toolbar 7.1"

forgot to add its windows xp sp2, please help as the "alerts" are really annoyingme now
 

https://forums.techguy.org/threads/what-to-do-next-for-removing-bestsellerantivirus-and-security-toolbar-7-1.647995/
Relevancy 102.61%

The two main malware items I think I have. I've already assumed I will do a total C: delete and re-install. I've tried lots of things in safemode, etc. with Spybot, Malwarebytes, a Norten scanner, etc. either directly running or downloading/renaming, or by downloading on another computer and using memory stick to transfer. Nothing stays launched, runs nor completes.

What a pain in the butt. I use AVG and whatever it did jumped right through in no time.......I've read lots of posts in cnet, pctools, a few here, etc.

What a mess.

Some people have way to much free time......maybe they ought to get a job somehow using these skills...they'd make a mint.

Pete
 

A:"Total Security" and "Antivirus Pro 2010"

simpler to just reformat the whole computer
 

https://forums.techguy.org/threads/total-security-and-antivirus-pro-2010.862188/
Relevancy 102.61%

For the second time I have gotten the fake anti-virus that names itself quot Vista Security Center quot last time was months ago and I followed online manual removal instructions Since then I have bought McAfee and when it came up this time I just had McAfee scan and remove it However the I have NO working file program associations every time I click on the mozilla firefox shortcut I have to tell my computer to associate it with firefox exe All Associations - File/Program Center" "Vista Security lost the same thing happens even if I click All File/Program Associations lost - "Vista Security Center" directly on firefox exe This literally is for everything except computer navigation icons like quot My Computer quot or quot Control Panel quot I ran the DDS and will attach the two file but even with the gmer exe I had to tell my computer to associate it with gmer exe the exact icon I clicked on Mostly this is just a pain in the but some stuff just simply wont run help would be GREATLY appreciated DDS Ver - - - NTFSX Run by Ian at on Sun Internet Explorer BrowserJavaVersion Microsoft Windows Vista Home Premium GMT - SP Windows Defender enabled Updated D DDC A- F- FAE- E -DA C ACF Running Processes C Windows system wininit exe C Windows system lsm exe C Windows system svchost exe -k DcomLaunch C Windows system nvvsvc exe C Windows system svchost exe -k rpcss C Windows System svchost exe -k LocalServiceNetworkRestricted C Windows System svchost exe -k LocalSystemNetworkRestricted C Windows system svchost exe -k netsvcs C Windows system SLsvc exe C Windows system svchost exe -k LocalService C Windows system nvvsvc exe C Windows system svchost exe -k NetworkService All File/Program Associations lost - "Vista Security Center" C Windows System spoolsv exe C Windows system svchost exe -k LocalServiceNoNetwork C Program Files x Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C Program Files x Bonjour mDNSResponder exe C Windows system dlcqcoms exe C Program Files x Gigabyte EasySaver ESSVR EXE C Program Files Common Files McAfee McSvcHost McSvHost exe C Program Files Common Files McAfee SystemCore mfevtps exe C Program Files x McAfee Online Backup MOBKbackup exe C Windows system rundll exe C Windows SysWOW rundll exe C Windows SysWOW PnkBstrA exe C Windows system svchost exe -k NetworkServiceNetworkRestricted C Program Files x NVIDIA Corporation D Vision nvSCPAPISvr exe C Windows system svchost exe -k imgsvc C Windows System svchost exe -k WerSvcGroup C Windows system SearchIndexer exe C Program Files Common Files McAfee SystemCore mcshield exe C Program Files Common Files McAfee SystemCore mfefire exe C Windows system taskeng exe C Program Files x McAfee Online Backup MOBKbackup exe C Program Files x Common Files Intuit Update Service IntuitUpdateService exe C Program Files x McAfee Online Backup MOBKbackup exe C Windows system Dwm exe C Windows Explorer EXE C Windows system taskeng exe C Program Files Windows Media Player wmpnscfg exe C Program Files Windows Media Player wmpnetwk exe C Windows system wbem unsecapp exe C Windows system wbem wmiprvse exe c PROGRA mcafee com agent mcagent exe C Program Files x Mozilla Firefox firefox exe C Windows system vssvc exe C Windows System svchost exe -k swprv C Windows system wbem wmiprvse exe C Windows system SearchProtocolHost exe C Windows system SearchFilterHost exe C Users Administrator Downloads dds scr Pseudo HJT Report uURLSearchHooks McAfee SiteAdvisor Toolbar ebbbe -bad - b c- e a- abecae - c progra mcafee sitead mcieplg dll mWinlogon Userinit userinit exe BHO Adobe PDF Link Helper df c-e ad- -a -fa c ebdc - c program files x common files adobe acrobat activex AcroIEHelperShim dll BHO McAfee Phishing Filter b a- - a -b -be afe ab - c progra mcafee msk mskapbho dll BHO scriptproxy db d a - - e -b d- f c - c program files x common files mcafee systemcore ScriptSn dll BHO McAfee SiteAdvisor BHO b e -a b - a -b - cd e a ff - c progra mca... Read more

A:All File/Program Associations lost - "Vista Security Center"

It only let me attach two files, here is my Ark.txt also

http://www.techsupportforum.com/forums/f50/all-file-program-associations-lost-vista-security-center-475572.html
Relevancy 102.61%

Hello - back with a new XP system and a smorgasbord of new worries In a way I m almost tempted - Real Center.AntivirusDisableNotify" problem? found Security "Windows S&D to stick with the Windows SE exclusively for Net browsing and leave this one as quot pristine quot as possible but alas - the lure of speed cannot be resisted Anyhow I just updated and ran Spybot and the only item that came up is quot Windows Security Center AntivirusDisableNotify - entry quot I was only a couple days from the end of the free -day NAV trial period included with the new system so I bought the Norton renewal earlier today which may have something to do with this I m reluctant to have Spybot delete it for fear of disabling something legitimate that NAV needs But then I ve never had that particular item come up in S amp D either Should I do the fix S&D found "Windows Security Center.AntivirusDisableNotify" - Real problem? or leave it be Here s a new HJT log and thanks in advance for any S&D found "Windows Security Center.AntivirusDisableNotify" - Real problem? assistance Logfile of HijackThis v Scan saved at PM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Running S&D found "Windows Security Center.AntivirusDisableNotify" - Real problem? processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Common Files Symantec Shared ccSetMgr exe C Program Files Common Files Symantec Shared ccEvtMgr exe C WINDOWS Explorer EXE C Program Files Common Files Symantec Shared ccProxy exe C Program Files Norton Internet Security ISSVC exe C Program Files Common Files Symantec Shared SNDSrvc exe C Program Files Common Files Symantec Shared SPBBC SPBBCSvc exe C Program Files Common Files Symantec Shared CCPD-LC symlcsvc exe C WINDOWS system spoolsv exe C WINDOWS system CTsvcCDA EXE C WINDOWS eHome ehRecvr exe C WINDOWS eHome ehSched exe C Program Files Intel Intel Application Accelerator iaantmon exe C Program Files Microsoft SQL Server MSSQL MICROSOFTBCM Binn sqlservr exe C Program Files Norton AntiVirus navapsvc exe C Program Files Norton AntiVirus IWP NPFMntor exe C WINDOWS system nvsvc exe C Program Files Common Files Sony Shared WMPlugIn SonicStageMonitoring exe C Program Files Sony Sony TV Tuner Library SMceMan exe C Program Files Sony VAIO Media Integrated Server VMISrv exe C Program Files Sony VAIO Media Integrated Server Video GPVSvr exe C Program Files Common Files Sony Shared VAIO Entertainment Platform VCSW VCSW exe C WINDOWS system ZoneLabs vsmon exe C Program Files Common Files Sony Shared VAIO Entertainment Platform VzCdb VzCdbSvc exe C Program Files Sony VAIO Media Integrated Server Platform SV Httpd exe C Program Files Common Files Sony Shared VAIO Entertainment Platform VzCdb VzFw exe C Program Files Sony VAIO Media Integrated Server Platform UPnPFramework exe C Program Files Sony VAIO Media Integrated Server Platform SV Httpd exe C Program Files Sony VAIO Media Integrated Server Platform UPnPFramework exe C WINDOWS system dllhost exe C WINDOWS ehome ehtray exe C WINDOWS SOUNDMAN EXE C WINDOWS ALCWZRD EXE C Program Files Intel Intel Application Accelerator iaanotif exe C Program Files Sony VAIO Update VAIOUpdt exe C WINDOWS eHome ehmsas exe C Program Files Wireless Desktop LgWDskTp exe C Program Files Common Files Symantec Shared ccApp exe C Program Files Sony Sony TV Tuner Library RM SV exe C Program Files iTunes iTunesHelper exe C Program Files QuickTime qttask exe C Program Files Zone Labs ZoneAlarm zlclient exe C Program Files Common Files Real Update OB realsched exe C Program Files Sony VAIO Media Integrated Server Platform VMConsole exe C Program Files Messenger msmsgs exe C Program Files Creative MediaSource Detector CTDetect exe C Program Files Sony sonicstage mastering studio Audio Filter SSMSFilter exe C Program Files interMute SpySu... Read more

A:S&D found "Windows Security Center.AntivirusDisableNotify" - Real problem?

Check Here:

http://forums.techguy.org/showthread.php?t=386647&highlight=disable+notify+Spybot

Others (including myself) have experienced this 'problem'...
 

https://forums.techguy.org/threads/s-d-found-windows-security-center-antivirusdisablenotify-real-problem.430894/
Relevancy 102.61%

A strange DOS-like box appeared as well as several pop-ups appeared on my screen Then my screensaver was Explorer fake icon, security strange center infected, "TAG" replaced with a black one with a message telling me to install a security program The taskbar started displaying messages from a fake windows security icon An icon appeared on my desktop that says quot Explorer infected, strange "TAG" icon, fake security center TAG quot with the title quot Search Us quot underneath Pop ups about security occur Explorer infected, strange "TAG" icon, fake security center whenever I Explorer infected, strange "TAG" icon, fake security center use explorer They do not occur when using I am Firefox as I am right now Logfile of Trend Micro HijackThis v BETA Scan saved at AM on Platform Windows XP SP WinNT Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C WINDOWS System S EvMon exe C WINDOWS system spoolsv exe C WINDOWS System RegSrvc exe C WINDOWS System svchost exe C Program Files Webroot Spy Sweeper SpySweeper exe C WINDOWS system ZCfgSvc exe C WINDOWS AGRSMMSG exe C Program Files Apoint K Apoint exe C Program Files Fujitsu Fujitsu Hotkey Utility IndicatorUty exe C Program Files Fujitsu Application Panel QuickTouch exe C Program Files Fujitsu BtnHnd BtnHnd exe C Program Files DAEMON Tools daemon exe C Program Files QuickTime qttask exe C Program Files Java jre bin jusched exe C WINDOWS System regsvr exe C Program Files Messenger msmsgs exe C Documents and Settings Raveen Application Data WinTouch WinTouch exe C Program Files Router Router exe C Program Files Spruce X Spruce exe C Program Files Apoint K Apntex exe C WINDOWS System wuauclt exe C WINDOWS System rundll exe C PROGRA MOZILL FIREFOX EXE C WINDOWS explorer exe C Documents and Settings Raveen Desktop HiJackThis v HiJackThis v exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www yahoo com R - HKLM Software Microsoft Internet Explorer Main Start Page about blank R - HKCU Software Microsoft Internet Connection Wizard ShellNext http www fujitsupc com R - URLSearchHook Yahoo Toolbar - EF BD -C FB- D - F- D F - C Program Files Yahoo Companion Installs cpn yt dll F - REG win ini load C WINDOWS System xxywu exe N - Netscape user pref quot browser search defaultengine quot quot engine C A CProgram Files CNetscape CNetscape Csearchplugins CSBWeb src quot C Documents and Settings RAVEEN Application Data Mozilla Profiles default j p j slt prefs js O - BHO no name - -d e - bc -a bd- d ca be - no file O - BHO no name - - e- aac-afd -eff a dd - no file O - BHO Yahoo Toolbar Helper - D -C F - EFB- B - ECA - C Program Files Yahoo Companion Installs cpn yt dll O - BHO no name - e f -a e - b -b - bf db fb - no file O - BHO AcroIEHlprObj Class - E F-C D - D -B D- B D BE B - C Program Files Adobe Acrobat Reader ActiveX AcroIEHelper ocx O - BHO no name - dfedaa- - d -bfc - b a d - no file O - BHO no name - E F - CD - C - C- D A C D A - C WINDOWS System rqomn dll file missing O - BHO no name - F - D - - AD - C D ADC - no file O - BHO no name - adbcce -cf - e- b -afc a c a - no file O - BHO no name - e dc- dd - b -b b-f a dace - C WINDOWS sxmbqzsx dll O - BHO no name - d cb -cc c- -a e -f b d bcf - no file O - BHO no name - B - EB- F -A E-A D - C WINDOWS System nnnlmmn dll O - BHO egmulhxk msdn hlp - F -BA - D - E - D CAA F - C WINDOWS system egmulhxk dll O - BHO no name - ef - a a- d - -b e cc - no file O - BHO no name - - F - D - - D F - C PROGRA SPYBOT SDHelper dll O - BHO no name - B F B - DD- E - -EB E F - C WINDOWS SYSTEM zAVWtQQL dll file missing O - BHO no name - C D -A AB- B-B D-FD C FEF - no file O - BHO no name - - - - A - F D - no file O - BHO SpruceBHO - DE -C - B -BBD - BE B BD - C Program Files Spruce Spruce dll O - BHO no name - bc-a - a d- cdf-ba c f e - no file O - BHO... Read more

A:Explorer infected, strange "TAG" icon, fake security center

Update: I am now getting a flashing red X in the system tray with some BS message about fixing the spyware. Every few minutes there is an 'alert message' asking to run a scan. None of these 'alerts' are from legitimate programs. I'm at my wits end, any help would be greatly appreciated.
 

https://forums.techguy.org/threads/explorer-infected-strange-tag-icon-fake-security-center.667284/
Relevancy 102.61%

Yesterday I started getting a popup claiming to be from quot Security Center quot and telling me that I have "Security Center: and on Warning" desktop links porn Fasle no antivirus software I have AVG and instructiong me to download certain files to Fasle "Security Center: Warning" and porn links on desktop fix the problem The files are named Antivirus Security Package MS Antivirus The Spybot Antivirus Spyshredder Professional Antispyware Suite At the same time I got a series of warnings which I ignored and icons kept appearing on my desktop that gave links to porn websites I ran AVG and Ad-Aware both cleaned up a number of issues that were not there the day before The porn links are gone but the so-called Fasle "Security Center: Warning" and porn links on desktop security center warning continues I ran Hijack This yesterday and again today and found a number of suspicious entries I m tempted to just get rid of them but I would rather have someone take a look so that I can do this the right way I have other minor issues that bug me but I want to take care of the major stuff first Note there are three other people who use this PC all of whom claim innocence Yeah right Thanks for your help Here is the HJT log Logfile of Trend Micro HijackThis v Scan saved at AM on Platform Windows XP SP WinNT MSIE Internet Explorer v SP Boot mode Normal Running processes C WINDOWS System smss exe C WINDOWS system winlogon exe C WINDOWS system services exe C WINDOWS system lsass exe C WINDOWS system svchost exe C WINDOWS System svchost exe C Program Files Lavasoft Ad-Aware aawservice exe C WINDOWS system spoolsv exe C Program Files Common Files AOL ACS AOLAcsd exe C Program Files Common Files AOL TopSpeed aoltsmon exe C Program Files Common Files Apple Mobile Device Support bin AppleMobileDeviceService exe C PROGRA AVG AVG avgwdsvc exe C PROGRA AVG AVG avgfws exe C Program Files Bonjour mDNSResponder exe C Program Files Netscape Internet Service ncupdatesvc exe C Program Files Common Files New Boundary PrismXL PRISMXL SYS C WINDOWS system svchost exe C Program Files Viewpoint Common ViewpointService exe C WINDOWS system wodUpdSv exe C PROGRA AVG AVG avgam exe C PROGRA AVG AVG avgrsx exe C PROGRA AVG AVG avgnsx exe C PROGRA AVG AVG avgemc exe C WINDOWS Explorer EXE C Program Files America Online waol exe C Program Files iPod bin iPodService exe C Program Files America Online shellmon exe C WINDOWS system wuauclt exe C Program Files Trend Micro HijackThis HijackThis exe R - HKCU Software Microsoft Internet Explorer Main Start Page http www rosenet org R - HKLM Software Microsoft Internet Explorer Main Start Page http www gatewaybiz com R - URLSearchHook AOLSearchHook Class - EB EA-E BE- CFD- F F-C A C EAFA - C Program Files AIM Search AOLSearch dll O - BHO AcroIEHelperStub - DF C-E AD- -A -FA C EBDC - C Program Files Common Files Adobe Acrobat ActiveX AcroIEHelperShim dll O - BHO WormRadar com IESiteBlocker NavFilter - CA F - F E- B -A E- E E C C - C Program Files AVG AVG avgssie dll O - BHO PBlockHelper Class - B- FF- DD - -F BEDE EB - C PROGRA NETSCA NETSCA pbhelper dll O - BHO XML module - BCA - A - eaf- - C B D - C WINDOWS system msxml dll file missing O - BHO AOL Search Enhancement - EB EA-E BE- CFD- F F-C A C EAFA - C Program Files AIM Search AOLSearch dll O - BHO SSVHelper Class - BB-D F - C-B EB-D DAF D D - C Program Files Java jre bin ssv dll O - BHO AVG Security Toolbar - A A -BACC- D - - A E E - C PROGRA AVG AVG AVGTOO DLL O - BHO Google Toolbar Helper - AA ED - DD- d - -CF F - c program files google googletoolbar dll O - Toolbar amp Google - C B - - d - B - A CD F - c program files google googletoolbar dll O - Toolbar AVG Security Toolbar - A A -BACC- D - - A E E - C PROGRA AVG AVG AVGTOO DLL O - Toolbar AOL Toolbar - D A-C B- -B B-B B E D C - C Program Files AOL Toolbar toolbar dll O - HKLM Run Recguard C WINDOWS SMINST RECGUARD EXE O - HKLM Run SunKistEM C Program Files Digital Media Reader shwiconem exe ... Read more

https://forums.techguy.org/threads/fasle-security-center-warning-and-porn-links-on-desktop.746530/
Relevancy 102.61%

I continuously receive the following message within the Action Center:

Turn on Windows Security Center service (Important)

When I click on this message I get the error "The Windows Security Center service can't be started."

I am trying to apply the solution at the link support.microsoft.com/en-us/kb/2510301

However the Security Center service is not in the Services list.

http://www.sevenforums.com/system-security/390397-how-handle-windows-security-center-service-cant-started.html