Over 1 million tech questions and answers.

some sort of shortcut virus on my pendrives?

Q: some sort of shortcut virus on my pendrives?

Greetings !
I apparently have some sort of shortcut virus on my pendrives. I used one on a public computer and when I reconnected that pendrive to my home laptop, all I coul see were shortcuts of the .ink kind. And when I double clicked on one it would open the cmd window and give me an error that microsoft.vbs couldn't be found. Later I connected another pendrive (one without the virus) and everything got converted ionto shortcuts again. I unchewcked the "hide essential windows files option" in folder options, so I am able to see my files on the pendrive along with the shortcuts. Both avg and malwarebytes have failed to solve this problem.my harddrives seem unaffected. Any help will be appreciated thanks !

RELEVANCY SCORE 200
Preferred Solution: some sort of shortcut virus on my pendrives?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: some sort of shortcut virus on my pendrives?

reformat the pendrives.
 
my computer>rightclick on offending pen drive>format>fat32 quick format.
 
will erase EVERYTHING from the drives.
 
I suggest you do an advanced malware scan with something like ESET online scanner though, just to be sure you don't have nasties carried across.

Read other 8 answers
RELEVANCY SCORE 55.2

I'd like to create a shortcut that sorts desktop icons by name in alphabetic order.
Wondering if this is possible. Without a shortcut it takes several clicks though the desktop content menu (right click).

A:creating a shortcut to sort desktop icons by name

Several clicks, as you do mean this ? 2 clicks

Never heard of shortcut for this

Read other 9 answers
RELEVANCY SCORE 52

I am running windows xp media edition on a dell dimension 3100.
I am having trouble with internet searches, being told that I am infected and that I should download from a link to cure it and windows security saying that it is not set to automatic updates. When I check in control panel the automatic updates are set as they always have been but the icon on the lower right of my desktop says that my computer is at risk due to auto updates being turned off.
When I try to carry out a google search using mozilla firefox usually nothing happens, as if it is taking hours to carry out the search.
I know very little about viruses and am afraid to do much without expert advice as I don't wish to do further or irreparable damage to my system.
I have run deep scans with nod32, spybot s+d, vundo.exe and lavasoft ad-aware all of which get rid of things which soon come back.
Please help me with this as I have very little idea what to do for the best, thank you.

A:I Think I Have A Virus But I Don't Know What Sort, Some Sort Of Spyware I Think.

Hello and welcome. Please Run theses 2 scans and post back their results,thanks.S!Ri's SmitfraudFix Please download SmitfraudFixDouble-click SmitfraudFix.exeSelect option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).Please copy/paste the content of that report into your next reply.Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.http://www.beyondlogic.org/consulting/proc...processutil.htmNEXT:Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems whil... Read more

Read other 20 answers
RELEVANCY SCORE 47.6

How many of you use pendrives? (USB flash memories?)
I'm looking forward to buy one cause I really need it due to my work, I've been using an SD card with a pocket SD card reader but it doens't work anymore.

So, any suggestions regarding brands?
I hear kingston and sandisk are good ones, I don;'t want to buy a ****** pendriver cause they say they go blank if it;s too hot or go erase all your data after a while.

Ok, your turn now! thanks people!
 

A:Pendrives

Read other 8 answers
RELEVANCY SCORE 47.2

Experiencing the same problem than

http://forums.techguy.org/hardware/1044627-cant-boot-usb.html

looks like the issue is in the pendrive itself. I have two PNY pendrives, one 8GB and another 16GB. I can use YUMI or any other app to add a distro to the pendrive, format them, etc, but when booting the BIOS does not recognize them.

Tried in an old X31 laptop and in a new HP ProBook laptop with same (bad) result.

I though it was because of the big size but many people use 16GB pendrives for these purposes...

(BTW, tried also formating them and the distros were way smaller than 4gb...)
 

Read other answers
RELEVANCY SCORE 47.2

pendrives malfunction for xp

Read other answers
RELEVANCY SCORE 46.8

Thank you for adding me to the site. I'm looking to import a quality pendrive and charging cables from Taiwan. What sort of pendrive should I be looking at ( memory etc) and with regards to cables are there any different products. I find most of my cables don't last long. Any help in this would be greatly appreciated as this is a new venture for me. Thank you.
 

Read other answers
RELEVANCY SCORE 46

Hi All,

I have an issue with my machine: I can't copy any files on pendrives or SD cards, unless I'll run Windows in Safe mode, everything works OK (all the pendrives or SD cards are working fine).

Tried to fix dll's, scanned for Virus even managed to format one pendrive (thought it was broken at first) but still couldn't copy any files.

The error I am getting: You'll need to provide administrator permission to copy to this folder.

I don't even have to mention that I am administrator?

Any ideas?
stanitr

Read other answers
RELEVANCY SCORE 46

unable to connect pendrives to the laptop

Read other answers
RELEVANCY SCORE 46

I use two notebooks. One running Win8.1 PRO (64bits), the other Win7 Home Premium (32bits).
I also have an external HD, and three pen-drives I use with both notebooks, as needed.
Some programs I use (a password manager, bkups, between many others) save data on these drives, and I need that the drive letters attributed to them DO NOT CHANGE no matter the notebooks they are connected to.
My problem is that the letters given to these drives keep changing when they are used on the notebooks and the programs can't find the paths to store or retrieve data from.
How can I make the drive letters to remain the same no matter the notebook they are being used with?
To choose the drive letters I use the Control Panel "Administrative Tools<>Computer Management<>Disk Management"

Any help will be welcome.

Cheers, and a Happy Holiday Season.

Flores

A:How to avoid pendrives letters changing?

I don't know if this will help but for years I have set my CD/DVD drives to Y: and Z: so that adding drives doesn't muddle it all up. How about setting the letter as Z: and seeing if that helps?

Read other 12 answers
RELEVANCY SCORE 46

Okay for some weird reason my PC are not detecting any USB storage devices plugged in... i found this in device manager (attached pic) ..

however nothing i can do.. tried update online nothing helps... so i dont know what to do... what is wrong with this actually?

and second problem.. i have creative Audigy Value card installed...i usually set it to 5.1 speakers... but the application that has been installed by Win update... i.e. Creative Audio Control Panel.. always crash on startup.. i dont even had the chance to adjust it or do anything with it... i download from the official web also the same... *sigh*

A:[SOLVED] USB not detcted.. pendrives external hdd etc

okay what is weird... i can use the USB while in safe mode... and at the moment.. when i go to manage... the usb is listed healthy... but when i want to assign letters it says "The system cannot find the file specified"

Read other 7 answers
RELEVANCY SCORE 46

recently i had set an password for detecting the usb flash drives later on my usb ports are not working in my pc please suggest an usb port drivers to my pc  hp pavilion g6

Read other answers
RELEVANCY SCORE 46

Hi all,
        I have a pendrive which having FAT32 file system previously.now what i did i open the pendrive in hex editor.i found that root directory contain entries about

myfiles.and it having high order cluster byte set to some value . now i traverse the file system  with corresponing cluster no. by conveting it in  offset value .i found the data of my file at the corresponding offset. 
             Now what i do i format the pendrive . due to formatting the pendrive the high cluster byte of corresponding file in root directory set to 0,so i am unable to traverse  data. of file.
             is their any solution so that i can found my data...............H.S.Navarkar

A:how to recover data from formatted pendrives

 
Hi,

If you want to recover the data from formatted drive, you need
 special software and competencies. When you delete or even format a disk, the files aren?t really deleted, they are marked to be overwritten.

Since there?s no such software from Microsoft, you need search it yourself. Also please note third party may cause unexpected issue.

There?s a similar thread may helpful to you:
http://social.technet.microsoft.com/forums/en-us/w7itprogeneral/thread/50E592A4-D09F-4F93-965B-D50ABC4121AD

Thank you for your understanding.
Regards,
Leo  
Huang
Leo Huang
TechNet Community Support

Read other 5 answers
RELEVANCY SCORE 45.6

Hi all! Not something that hinders my daily life but why Windows7 forgets about the name of the renamed pendrives and external drives? I give them names so that I can know their content without opening them such as
"Films" or "Pix" or "Softwares". They were fine like this during a year or more and now from one day to the other everything lost its name and became E:, F: etc. Notably, these peripherals are connected the same way: the same cable to the same USB port. I re-renamed them again yesterday but they went back to E:, F: once again. That is so stupid.

A:Windows7 forgets the name of external drivers/ pendrives

Hello akofalvi,

This normally happens when other drives/applications starts to reserve specific drive letters/path. For instance Daemon Tools (Which mounts installation images) could reserve drive letters G-H, and thus causing your other ones to change letters and therefor loose any name given.

You should try to set them to something way back in the dictionary, like Z-X:

Go to Start > Search.
Type "diskmgmt.msc" > Hit Enter.
Rightclick your drives > Change drive letters/path.

Read other 1 answers
RELEVANCY SCORE 45.2

My usb 3.0 slots are not recognizing usb 2.0 mass storage stuff and neither any usb cables..It also does not recognizes webcam or keyboard adapter..What shall i do?
I have updated chipset,usb and bios drivers but no help..

A:USB 3.0 ports do not recognize 2.0 stuff like pendrives,iphone charger

This is what I do when I suffer these types of problem, which is often by the way, and I have not found a correct way of fixing so it is temporarily at best.

I go to Device Manager, then to Universal Serial Bus Controllers and I start uninstalling the Generic USB Hubs and then the other hubs, hoping not to nuke my mouse, if I don't then I go to the Action Tab and click on Scan for Hardware changes and it will rearrange the usb drivers and IRQs in hopes that they do not clash with each other. If it does nuke the mouse then I manually restart the PC and hope that it will solve the issue once I am back at the desktop.

There is no damage done to the PC, at least I have not seen any real damage but until I find a better way, this is what I have to deal with.

Read other 1 answers
RELEVANCY SCORE 44

Hey, I tried to scan my pc with mcafee, but i was unable to scan.I downloaded hijack this, and here is my log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 00:34:09, on 06/09/2008Platform: Windows Vista (WinNT 6.00.1904)MSIE: Internet Explorer v7.00 (7.00.6000.16711)Boot mode: NormalRunning processes:C:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Windows Defender\MSASCui.exeC:\Windows\RtHDVCpl.exeC:\Windows\System32\ESB.EXEC:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Windows\System32\s3trayp.exeC:\Program Files\Genesys Logic PC Camera Device\GenePccMon.exeC:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exeC:\Program Files\Logitech\QuickCam\Quickcam.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\taskeng.exeC:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exeC:\Windows\system32\wuauclt.exeC:\Windows\system32\wuauclt.exec:\PROGRA~1\mcafee.... Read more

A:I Think I Might Have Some Sort Of Virus

Well yeh, 33 views and no replies. Pretty pathetic to say you're meant to help people.
Dont bleep bother then, ill find out somewhere else - where they aren't lazy bleeps.

Read other 2 answers
RELEVANCY SCORE 44

Alright, I'm not sure if this is a virus or a spy-ware or whatever.

On my Youtube, when I go watch videos, it's REALLY slow... and there's adds on the site of the video with AdultFriendFinder.

And sometimes, when Youtube goes the way it should, there's no AdultFriendFinder thing.

And when Youtube works slow like that, so does Google. And I can't find any other sites that goes slow like that. But when Youtube works good, so does Google.

How could I fix this problem? I've tried several anti-virus programs and still didn't work.
Please help!
 

Read other answers
RELEVANCY SCORE 44

ok so recently i've been having problems with my computer (windows vista). first i get a pop up saying my computer has been infected and i need to update then on the bottom right corner of my computer i get a message saying im being attacked by a virus and it shows their ip address. so i tried to download malware removal tools and everytime i download it says the file is infected SOMEONE PLEASE HELP!!
 

A:some sort of virus :(

and when i get the alert in the bottom right corner of my computer it gives me the option to block or not. once i click block like 3-4 windows pop up. I HATE THIS
 

Read other 1 answers
RELEVANCY SCORE 44

I have some sort of virus on my computer and after running a virus scan over night in Safe Mode using AntiVir it found a few problems, all of which I either quarantined or deleted. I tried to get back onto my PC in normal mode and the virus continued to send stuff to my contacts on MSN and stop me from going on the internet. I then went into Safe Mode with Networking to try and get an update on my AntiVir which proved impossible. It wont let me get an update, it says:

"The following error is occured on trying to start the update:

Scheduler not loaded.."

I am now stuck so I have chosen posted a log in the HijackThis forum, but is there anything anyone can suggest may be the problem?

A:Some Sort Of Virus

Once a log has been posted, it is best not to make changes to your system. The people who work the HiJackThis form are very qualified, and this sort of issue is something they deal with on a daily basis.LINK to Prittstick's HJT log.

Read other 3 answers
RELEVANCY SCORE 44

Hi,

I have a virus that Norton cannot get rid of. I have run Sypbot and Ad-aware. I tried to reboot in safe-mode but I still have the virus according to Norton. I have now run HJT. If someone can review this HJT log it would be greatly appriciated. I also cannot get the autoprotect on Norton to stay on. I am assuming that this is because of the virus.

Tiffany

Logfile of HijackThis v1.97.7
Scan saved at 3:50:17 PM, on 2/21/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Norton SystemWorks\Norton Ghost\GhostStartTrayApp.exe
C:\WINNT\GWHotKey.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Roxio\GoBack\GBTray.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE
C:\Program Files\Sony Handheld\HOTSYNC.EXE
C:\WINNT\System32\PackethSvc.exe
C:\WINNT\System32\drivers\CDAC11BA.EXE
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Roxio\GoBack\GBPoll.exe
C:\PROGRA... Read more

A:have some sort of virus help please

Read other 6 answers
RELEVANCY SCORE 44

i dont know what wrong witt my comp, it freezes too much, crashes, i dont know..

can anyone look at the file please?

thanks!
 

A:virus of some sort .

can anyone help?
 

Read other 2 answers
RELEVANCY SCORE 44

Hey guys, I think there's something wrong with my computer. As careful as I've been with antivirus and antispyware and all the other crap, it appears that I'm infected with something that disables everything. I took a look in my registry under My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security and found:

AntivirusDisableNotify
AntivirusOverride
FirewallDisableNotify
FirewallOverride
FirstRunDisabled
UpdatesDisableNotify

Pretty sure these are not good things to have in the registry... also, in the same spot, under McAfeeAntivirus, I found DisableMonitoring, same thing for McAfeeFirewall. I ran HJT, the log is as follows:

Logfile of HijackThis v1.99.1
Scan saved at 4:04:15 PM, on 10/20/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.... Read more

A:Please help, I think I have a virus of some sort

hi, welcome to TSG.
those entries are ok, thay are to do with XpSP2 security centre!
your log is clean!

you can run these tools and keep them for furthr use to clean any garbage off your computer. Also, you have far too many start up items!
you have far too many start up items, use the link below to trim them down.

http://www.pacs-portal.co.uk/startup_index.htm


go to this site and download these tools and once you get both
adaware Se 1.6 and spybot, update both of them.

Set adaware to do a full system scan and deselect, "search for neglible risk
entries". Click next to start the scan. Delete everything adaware finds.

reboot and now run spybot

Spybot: Search and destroy.

Delete what spybot finds marked in red. After updating spybot hit the
immunize button.

reboot again
With CWshredder close all browsers and programmes and select the FIX button.

Go here and download Microsoft Antispyware Beta. First in the top menu click
File then Check for updates to download the definitons updates.

After updating look in the right side of the main window under "Run Quick
Scan Now" and click Spyware scan options. In that window put a tick by Run a
full system scan and then put a check by all three options below that then
click Run Scan now.

When the scan is finished, let it fix anything that it finds (have it
quarantine the items that have that option rather than delete just in case.
It is a beta program and there may be false positives)

Re... Read more

Read other 1 answers
RELEVANCY SCORE 44

Hi.

This week I started having weird problem with one of my computers... worked whole day everything was fine then when I pressed shut down screen turned black and could see only mouse... well I thought **** happens and pressed restart now when I turn on pc windows loads to the point where I can see mouse but no desktop with black background ctrl+alt+del doesn't work ether :( and the same goes for safe mode. I did complete reinstall of windows but two days later same problem... same crap happened to 2 pc's at work and two of my friends having the same problem! every pc had windows xp installed with sp2 or sp3 and was using avg 8.5 antivirus. For fact I know that 2 pc's had windows updates turned off. Is someone having same problems or know something about this? fail on behalf of avg updates or something?

thanks in advance. any info would be helpful

A:Some sort of new virus or something?

+1 pc with the same problem! :) so? any ideas?

Read other 1 answers
RELEVANCY SCORE 44

I'm totally new to this forum here, but I'm completely at wits end. Hopefully I don't screw up, but here's my problem. I have Spybot, AdAware and Malewarebytes Anti-Malware and all three have been quarintening and removing these "TrojanC" files. But everytime I am on my computer, I keep getting random webpages popping up, sometimes just one, sometimes more. It's gotten to the point that when I load my computer up, I run all three programs to remove anything looking suspicious before I can even check my email YET I still have SpyBot popping me message saying something about something called "CPM57ed038f" trying to make changes to my registry.

I just want this crap off my computer and don't want to have to reformat my whole computer. Any help would be greatly appreciated, thanks....
 

Read other answers
RELEVANCY SCORE 44

i have some sort of virus on my laptop computer. it does something which crashes the internet everytime i try to go on, although sometimes i am able to get on for a few minutes. i use malwarebytes and have run it, but when it finishes and starts to try and delete the malicious code, it crashes and doesnt delete the code. please help me. Hijackthis log: Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:08:39 PM, on 4/2/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16791)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\ibmpmsvc.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\IPSSVC.EXEC:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files�... Read more

A:some sort of virus

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

Read other 24 answers
RELEVANCY SCORE 44

i have this annoying thing called green av that pops up constinly and will not stop, i also cannot find a location to remove it. just wondering what i can do to make it stop

A:i believe i have a virus of some sort

Hello and welcome please run these next. If you have Spybot installed temporarily disable it.Next run ATF:Note: On Vista, "Windows Temp" is disabled. To empty "Windows Temp" ATF-Cleaner must be "Run as an Administrator".Please download ATF Cleaner by Atribune & save it to your desktop.Double-click ATF-Cleaner.exe to run the program.Under Main "Select Files to Delete" choose: Select All.Click the Empty Selected button.If you use Firefox browser click Firefox at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browser click Opera at the top and choose: Select AllClick the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.Next run MBAM (MalwareBytes):NOTE: Before saving MBAM please rename it to zztoy.exe....now save it to your desktop.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to d... Read more

Read other 4 answers
RELEVANCY SCORE 44

I think i might have a virus, my computer has been turning off completely sometimes right away sometimes after a few minutes and sometimes after i try to run windows update or other security upgrades.. whats the best thing i could use that's free, that will find and eliminate the virus(if i have one)???

A:Some sort of virus???

Hello and Welcome to TSF.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new thread, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

------------------------------------------------------

Read other 1 answers
RELEVANCY SCORE 44

Hey guys, got a virus problem I hope you can help me with. It changed my desktop, always brings up popups (with no IE/firefox opened) and will keep changing my window that is active (like alt-tabbing or something). I remember from last time I was here I need logs or something, so let me know the programs and i'll get right on it! Oh also when I try do a virus scan, it COMPLETELY skips the first 10% or something, which is the c:\documents and settings\admin folder, and won't give me access to that. Any help would be great, thanks!

A:Some sort of virus or something.

Hi Cyniper !

Follow the "HJT - 5 steps against malware" link in my sig. Read the instructions carefully and go through the 5 steps process. Post your final logs in a new thread in the HijackThis section where our security analysts will review them. Please be patient as that section is very busy and it may take several days before you get an answer.

Read other 2 answers
RELEVANCY SCORE 44

So yesterday i was on my computer andi got some screen that pops up when im online. The screen that poped up says that my computer is at risk and to run some virus scan on a program that doesnt exist on my computer. So i tried closing it but it will not close. I did scans with avast and can't find the issue with this, but i restart my computer and each time this thing pops right back up and i can close the program anyhow. I'm not sure what to do or what this is, anyone?
 

A:Some sort of IE virus?

Read other 16 answers
RELEVANCY SCORE 44

I have at the minute something on my computer that makes my mouse whizz all over the place and makes it click and drag at about 750mph. It's very annoying because it always closes things im on or working on, and even sometimes makes the mouse stop completely.

Ive tried using AVG, Avast and ad-aware to sort it out but none of them work. I did use hijackthis, with a friend that helped me, that solved the problem for a couple of days. But it's back again.

I'm really not sure what I can do, I've checked my internet settings and the firewall is up, i always have an anti-virus monitoring and I've even disabled Remote Access (I think it's called, where someone from another pc can help).

Any suggestions? I've downloaded a lot of stuff to help me with this so anything that i could do without having to download more programs! And I also have done full system scans.
If it helps:

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program File... Read more

A:Some sort of virus - help! :)

Read other 8 answers
RELEVANCY SCORE 44

My friend just got on his computer and there was a file named rhcrnsj0ev8g and ads are randomly popping up on his computer now. he is running on windows xp.When he tries to delete it it pops up "lol no you dont". what should he do to fix this.
 

Read other answers
RELEVANCY SCORE 44

help please..
Scan saved at 8:42:48 AM, on 1/23/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\cidaemon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\cmd.exe
C:\Program Files\Grisoft\AVG Free\avgcc.exe
C:\Documents and Settings\Nadine\Desktop\Software\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\juihh.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\juihh.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\juihh.dll/sp.html#44768
R1 - HKLM\Software\Mic... Read more

Read other answers
RELEVANCY SCORE 44

C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\ytbb.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software&#... Read more

A:VIRUS of some sort HELP

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:***************************************************First, I need to know if you still need help! To tell me this, please click on http://www.bleepingcomputer.com/logreply/409149 and follow the instructions there. If you do not still need help, this is all you need to do. If you do need help please continue below.***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following information:If you have not done so already, include a clear description of the problems you're having, along with any steps you may have performed so far.A new DDS and GMER log. For your convenience, you will find the instructions for generating these logs repeated at the bottom of this post.
Please do this even if you have p... Read more

Read other 2 answers
RELEVANCY SCORE 44

OK, well I'm getting alot of screen/browser shut downs (it just flashes and it's gone). I also keep being invited to DL something called "Avenue A" every time I go to a new web page, windows loading is funny as well ( a lot of black screens before it actually loads) some of my screens arent showing up at all when I try to pull them up.
Finally when I use my PC for ,more than an hour or 2, it really starts to slow down as if I was running to many programs at once...

I'm using XP Home,I already defragmented and emptied my temp files as well (so I know it's not a space issue).

I've scanned it with Antivir, Adaware,Spybot and found nothing so I stumbled on this site and found one of your links to "HJT" and ran it .

This is what I got:

Logfile of HijackThis v1.97.7
Scan saved at 1:55:45 AM, on 4/5/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\CRYSTALINTITY\My Documents\Protection\AVGUARD.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Documents and Settings\CRYSTALINTITY\My Documents\Protection\AVWUPSRV.EXE
C:\PROGRA~1\MCAFEE.COM\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.... Read more

A:Please help I think I have some sort of virus ...

Read other 15 answers
RELEVANCY SCORE 44

I recently had the windows vista 2012 security fake anti-virus virus, and rather than spending $200 to have the local computer repair guy redo my whole computer (which I think I could probably do myself) I decided to fix it myself. I found a website (bleepingcomputer) that told me how to get rid of it using some file called rkill, a registry fixing file, and malwarebytes program.

That worked well, but now I have some sort of virus that is not detected by any programs. It redirects me to strange websites whenever I try to use a search engine, and sometimes randomly pops up a new tab with those same websites.

I've tried using all of the following programs with no luck:

McAfee
MalwareBytes
Iobit Malware Fighter

Here are my files (hope I did this right):

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.19088 BrowserJavaVersion: 1.6.0_24
Run by KORY at 1:11:32 on 2011-12-21
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3061.1976 [GMT -5:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.... Read more

A:What's this all about? Some sort of virus.

Update:

The virus/malware is now opening up new windows with a bunch of tabs.

I'm probably just going to try and reload everything on my computer unless someone can help within the next hour or so. Thanks for reading, I guess you can lock or delete this thread.

Read other 1 answers
RELEVANCY SCORE 44

If someone could help me out and take a look at my log it would be greatly appreciated. Thank you! Logfile of HijackThis v1.99.1Scan saved at 3:13:26 PM, on 28/11/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exeC:\Program Files\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exeC:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXEC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXEC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\System32\hkcmd.exeC:\WINDOWS\SOUNDMAN.EXEC:\W... Read more

A:I Think I Have Some Sort Of Virus

If someone could have a look at this i would be eternally grateful, i am having a lot of problems

Read other 2 answers
RELEVANCY SCORE 44

after following some links on to some rather dodgy porn sites, its infected my computer I have no idea what it is but when I 1st got it. spybot came up with a registry edit, C:\program files\bfmdxvkv wanted to change C:\windows\system32\userinit.exe I thought this was odd so declined it and did a scan, to which it found a few. I then started a malwarebytes scan and a minute later started an avg scan. I was told this is a bad idea so i stopped the malwarebytes scan. But now, AVG thinks everything is a virus. If you open a program the alerts box comes up and deletes the files. (firefox and winamp have stopped working now due to it deleting the files) I cant load up IE either as AVG thinks that some of the files are infected. Was tempted to reformat but after finding this site, I hope you can help!

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by Owner at 1:15:17.35 on 16/04/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.2047.1142 [GMT 1:00]
.
AV: AVG Anti-Virus Free *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS ... Read more

A:some sort of virus

Hi,Welcome to Bleeping Computer. My name is m0le and I will be helping you with your log.Please subscribe to this topic, if you haven't already. Click the Watch This Topic button at the top on the right.

Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.

Please reply to this post so I know you are there.The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then I will close the topic.Once I receive a reply then I will return with your first instructions.Thanks

Read other 3 answers
RELEVANCY SCORE 44

hello people!
it's a few days now that my computer has not been running very well at all.
it all started when it kept on trying to install office 2000 premium, all by it's self without me even wanting the program. then i was getting loads of pop ups telling me to buy virusremover2009 and pop ups telling me my computer was infected. and it was having system32 errors when i tried to shut it down.
it's also been very unstable and has crashed a few times during the past few days.
i also noticed yesterday that my firewall had been turned off (and i certainly didn't do that)
also sometimes if i have more than one IE open sometimes it will close one of them.
it also won't let me do a system restore to a previous date.

i've tried having a look at it but i havn't been able to do anything about it.
in task manager their's iexplore.exe which looks suspicious (note the spelling - no final R) but i'm unable to shut iexplore.exe down.
i downloaded malwearytes antimalwear and that found over 20 infected files but it doesn't seem to have resoled the problem.
also it won't let me get the updates for malwearbytes as it says my firewall may be blocking it.

one last thing is that during the past 7 to 10 days or so i noticed the upload/download packets were much the sme, which was unusual i thought.
any help or advice would be greatly appriciated.
thanks in advance.
logs follow (forgive me for posting them but i'm unable to create a zip file):


UNLESS SPECIFICALLY INSTRUCTE... Read more

A:some sort of virus

somebody please help!
i fear it's getting worse and it's constantly downloading/uploading stuff even when i'm not using the internet. :(

Read other 2 answers
RELEVANCY SCORE 44

A few days ago my mozilla and IE began to get random popups that get past the blocker. Also it makes my internet extremely slow, sometimes not even loading the page I want. I'm running avast and adware, and sometimes when I scan I find something but I either can't remove it or it comes back.
Anyway I hope yal can help heres the info yal wanted :)


DDS (Ver_09-03-16.01) - NTFSx86
Run by RAC at 15:28:04.21 on Thu 04/02/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_10
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2046.1717 [GMT -4:00]

AV: avast! antivirus 4.8.1335 [VPS 090402-1] *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\All Users\Application Data\Dell\TransferAgent\TransferAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifie... Read more

A:I have to have some sort of virus

Hello, and Welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Stay with me until given the 'all clear' even if symptoms diminish. Lack of symptoms does not always mean the job is complete.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by me or another helper at this forum.

---------------------------------------------------------------------------------------------

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Place combofix.exe on your Desktop
Disable your AntiVirus and AntiSpyware appli... Read more

Read other 15 answers
RELEVANCY SCORE 44

Hello, my computer has been running really slowly quite often, and it's getting progressively worse. I downloaded Hijack this and this is the log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:13:14 AM, on 8/31/2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.17037)
Boot mode: Safe mode with network support

Running processes:
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\WINDOWS\System32\msconfig.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\admin\Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com?o=15153&l=dis
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
R3 - URLSearchHook: (no name) - *{03402f96-3dc7-4285-bc50-9e81fefafe43} - (no file)
R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,,c:\program files\microsoft\d... Read more

A:I have some sort of virus

Read other 14 answers
RELEVANCY SCORE 44

This pc is actually a friend of mine's computer. A year or so ago you guys helped me big time when I had a virus so I thought maybe you could do the same for him.

He has a HP computer and basically what happens is when you start the computer the very first message you get is 'sysguard.exe has encountered an error and has to close'. He also was getting a popup directing him to pay to download some sort of windows system repair 2009. We googled sysguard.exe and sure enough it came up that that was a virus and what the virus does is redirect and trick you into buying that software.

In addidition to that if you go to a place like yahoomail and try to sign into your account...you'll type your username and PW and then when you hit enter it immediatly pops up saying "an unexpected error occured and IE needs to close". So basically you can't log into yahoo at all. He brought the pc over to my house and since i've been messing with it I haven't encountered any weird pop ups as of yet but you can tell the pc is running a little bit laggy when it shouldn't and also we cannot login to the yahoomail deal at all.

I also noticed that his internet explorer had been set to accept all cookies (and he doesn't remember doing that). Also he had trend micro for a while but he said he uninstalled it and I don't think it was updated to begin. Under the control panel under security his windows firewall was turned off as well as not having any antivirus software. I enabl... Read more

A:I believe this pc has some sort of virus

been right at 72 hours

Read other 8 answers
RELEVANCY SCORE 44

I am just wondering if someone knows what kind of virus is wandering in my computer and how to get rid of it. Anytime I open my browser a Zone Alarm Security Alert pops up saying that the Services and Controller app has violated outbound email rules.
Application: services.exe
Violation: more than 5 messages in 2 seconds
Destination: various
It doesn't matter whether I press allow or deny, another one pops up with a different destination.
So if anyone can help me out on this one then please give me a shout.

Shauna

A:Some sort of virus

If you are seeking help for spyware/antivirus issues, or wish to have your Hijack This log checked, please do not post here!

The Security Center has several sections specifically set up for antivirus and antispyware issues. Please read this post before you submit your question.

The Security Center is staffed with TSF's best analysts - they're the ones who can help you the most with malware related issues.

Read other 1 answers
RELEVANCY SCORE 43.6

I am not good with computers and have no idea what to do so that is why I'm asking here! My laptop runs vista , so what happend is I was looking up song lyrics and long story short it went to a different website then it was intended to, and pop ups were coming up that said something about encryption something . I just didn't click anything because I knew something was wrong. So I opened up task manager and started screwing around by ending processes hoping whatever it was would go away but it didn't work. It eventually started making my cursor blink uncontrollably and I was unable to load Internet explorer or anything else except "advanced system care 6" which is my virus protection. I ran a scan nothing malicious came up . So then I booted into safe mode in hope that I could use Internet, I could but when I tried to go download malware bytes a program that usually works, it said I need permission to. So basically I'm stuck and every time I try to open something it won't open and I just get this sorta ding noise. I tried going within my system files to see what changes were made today and I found a file that was disguised as a window file but was really malicious. I deleted it but it still didnt help anything . Also every time I boot up my computer I get a pop that says something along the lines of unable to load user data/temp have no idea what that means but also when I could open task manager I noticed something named "COM " (I ... Read more

A:Help! Virus of some sort on computer

Hi, and welcome to our malware removal forum!

My name is Richard and I'll be happy to help you with your computer problems.

Please be advised that I am currently in training, so my responses will need to be approved by one of our experts before I post them. This is only to ensure you are receiving accurate instructions. It may cause a delay in my replies.

Please note the following:
The cleaning process is not instant as logs can take time to research. Sit tight and please be patient.
I will be working on your malware issues. This may or may not solve other issues you may have with your system.
While we are fixing your problems, do NOT install/re-install any programs or run any fixes or scanners unless told to do so.
Ensure that your anti-virus definitions are up-to-date.
I would advise backing up all your important documents, personal data files and photos to a CD or DVD drive.
Do not back up any Applications (programs). These should be re-installed from the original source CD(s) or website(s).
During the course of our cleanup, please do not do any additional online work or surfing until we have verified that your system is clean.
I suggest printing out each set of instructions and reading the entire post before proceeding. It will make following them easier.
Be sure to follow the directions and run tools/scans in the order listed.
I will return as soon as possible with more instructions.

Regards,

Richard
 

Read other 3 answers
RELEVANCY SCORE 43.6

The problem I have was first noticed as the "redirection of browser links". Once it started happening it happened on all browsers IE, Firefox, Chrome ... I tried reinstalling the browsers to no avail. I also noticed that if left on the responsiveness of the computer would drop after a few hours until the best thing you could do was reboot. Disconnecting it from the net mitigated the performance degradation, but it would still happen. I found that it was related to the system service svchost.exe started with (-k netsvcs) which starts the bulk of the network services. When connected to the net, the virtual memory for the process begins to grow almost immediately and continues until a widows error box pops up indicating an svnhost error. If the network is disconnect then after a short period of time the virtual memory for the process again begins to grow but at a slower rate,with the same results. If I kill the process then the system is usable for days, but with no connectivity.
I have attached the ARK and Attach files as a zip, but unfortunately the ARK file only includes the data from everything but the C drive scan. When I do a scan on the C drive it will scan for over 6 hours and slowly the system becomes slower and slower until it is completely unresponsive & locked up. The scan never finishes and nothing can be saved. I've tried several times and even doing just a disk scan, but the same thing happens. Perhaps there is an alternative? I've tried everything... Read more

A:Some sort of virus problem

I managed to get a complete file scan from GMER on the system. It is attached as file arkFilescan.txt.

Read other 17 answers
RELEVANCY SCORE 43.6

Ok, so this virus has been going on for 3 months already and when I play some games like, Saints Row The Third, Fallout 3, Call of Duty Advanced Warfare
when ever I launch those games they completely freeze my computer I cannot use CTRL + ALT + DEL  nor  ALT + TAB. Any help would be appreciated.
I do not think it is the drivers because I have already uninstalled all my GPU drivers and reinstalled the new ones.
FRST: Files

 FRST.txt   78.93KB
  2 downloads

 Addition.txt   50.12KB
  1 downloads

A:I think I have a virus of some sort (Description on what it does in here)

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.

start

EmptyTemp:
CloseProcesses:

FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll No File
CHR HKU\S-1-5-21-4002090083-1696684404-3651351176-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - https://clients2.google.com/service/update2/crx
S3 EasyAntiCheatSys; \??\C:\Windows\system32\drivers\EasyAntiCheat.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
U0 SR; No ImagePath
U2 srservice; No ImagePath
HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION!
HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ATTENTION!
HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== A... Read more

Read other 2 answers
RELEVANCY SCORE 43.6

My dad has a dell vostro1710 laptop running windows xp. he informed me that it wasn't allowing him to connect to the internet anymore and that something about a win32 server was messed up. I changed his browser to configure his proxy server automatically. Im not sure if it somehow got changed or if it was always on the configure manually setting, but it seemed to fix the problem.

He has a subscription to norton antivirus which when ran didn't turn anything up. I tried installing spybot search & destroy, but when it attempts to connect to the server to install the program it gives the error message that says: Error sending request. A connection with the server could not be established.

I assume this is due to some sort of malware blocking this. I downloaded and ran Trojan Remover, Malwarebyte's Anti-malware, and HiJack This. I would appreciate it if someone could help me work through this mess. I really would like to get spybot installed so i can run it on his computer. I have the hijack this log incase anybody would like to look it over. Thanks in advance.

ScottyG

A:i think this computer has some sort of virus

Hi revkev:

What version of Norton Antivirus is on board. There should be a number under Help and support>about. If it begins with 16, 17 or 18 it will scan the system in safe mode. To post logs, you will likely need to get moved, or repost in either "Am I Infected" or the "Virus,and Spyware" forum. What if anything are you using for a firewall?

old off on Sybot for a while as it will attempt to prevent changes to the registry, which might have to be made. As well Teatimer conflicts with Norton.

Read other 7 answers