Over 1 million tech questions and answers.

ISP is claiming nothing is wrong when there is, any ideas on what's wrong?

Q: ISP is claiming nothing is wrong when there is, any ideas on what's wrong?

My ISP (windstream) is claiming nothing is wrong when my town is having trouble connect to internet itself. I don't know about other towns, never go there. I am suppose to have 12 Mb and The most I have had in the past 2 weeks is 3. Friends have even less somehow. Usually 10AM-10PM the average is 300 Kb. I have to pause a video for 10 minutes to load a minute sometimes.

They claim nothing is wrong. Anyone translate that into something that can be wrong?

RELEVANCY SCORE 200
Preferred Solution: ISP is claiming nothing is wrong when there is, any ideas on what's wrong?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: ISP is claiming nothing is wrong when there is, any ideas on what's wrong?

Read other 16 answers
RELEVANCY SCORE 78

Hey, I know everyone is tired of seeing this, but lately my computer has just been suffering. I currently have an Intel Pentium 4 with 1 GIG ram, and my computer acts like my old 466. I have been having problems with my computer just rebooting itself automatically then when it comes up, it was due to my video card, All-In-Wonder 9800 Pro. That doesnt seem very right, because before just about a week ago, this thing never even coughed a bit. I checked temps, everything is good, checked drivers, still all good. Did a virus test, none found. Checked my ram, test passed. Is there some type of thing in my Hijack log that I am missing? Please helps..thanks.

Logfile of HijackThis v1.98.0
Scan saved at 6:40:26 PM, on 9/29/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\System32\Ati2evxx.e... Read more

A:Any ideas what's wrong?

Moving to Security/AV/HiJack This section...

Read other 2 answers
RELEVANCY SCORE 69.2

With Windows 8.1, I am now having problems displaying and importing jpegs.   They show in odd colors, with a lot of black in them.    This wasn't the case early on, but now jpegs are impossible to work with for me.   I
only use -- Windows Photo Viewer, and place them in WORD documents.  Nothing fancy.   I cannot find a resolution here or anywhere.  Can you help?
.....
This is crazy.  When I try to save the BAD image, it looks horrible (blue, purple, heavy black frame) on my screen in PHoto Viewer, but I import it here and it looks fine.  Please, help.

Read other answers
RELEVANCY SCORE 69.2

To all -

My first post in this forum, but I've been around the block a few times building my own machines (and for others), but a month ago i ended up springing for a dell xps 8300 desktop b.c i got a great deal on a scratch and dent system with an i7-2600 processor, 1.5tb drive, and an ATI 5770 1gb graphics card.
So long story short I've added one component and upgraded one existing component. The first was adding an SSD drive to the mix, which worked out wonderfully (i boot from power off to desktop in 13 seconds). Very pleased.
The second seemed to be just as successful...I replaced the stock PSU (460watts) with an Antec 650watt continuous power PSU (certified and all). Reconnected all the cables, crossed my fingers, turned on the power supply...got the green light on the motherboard so turned on the computer and all was fantastic!!!
The catch is..........I didn't notice until hours later i'd not heard a sound from the computer in quite some time. Tested by playing a few songs and nothing.

Here's where i got lost. In the "playback devices" (right clicking on the audio icon in the task manager tray) it shows the music playing (as in the levels are bouncing up and down). First thought - i'm an idiot and plugged my speakers into the wrong hole.....not the case. Second thought - speakers could be toast - not the case. Tested speakers on mp3 player and tested the audio cable by plugging headphones in the front audio ports (th... Read more

A:Dell XPS 8300 desktop PSU upgrade gone wrong, horrible wrong....no audio!!

Read other 6 answers
RELEVANCY SCORE 68.4

Last night, My MS Paint GUI went screwy.

It looks like it is out of Aero mode or something, but Aero troubleshooter found no problem & everything else is fine. I was having an issue with a video game for PC (full screen) which normally fiddles with the Windows theme, but I honestly dont know.

I dont like the adjusted look, and fear this is one of those simple problems with a insanely complex solution.

Thanks in advance, back later

:3

This image shows what it should look like (Top) and what mine now looks like (Bottom).

A:MS Paint GUI wrong- Perhaps stuck in wrong mode- Example shown

I don't mean to insult your intelligence, but I have to ask because it's not mentioned: have you rebooted?

Read other 8 answers
RELEVANCY SCORE 66.8

Hi everybody,
since friday we have a strange problem with some clients and ARP answers. We notice that our switch recognize wrong MAC addresses on some ports.
We use wireshark to see what happens and we get the following:
5 clients:

172.30.71.6 (XX:XX:XX:F7:52:75)172.30.41.1 (XX:XX:XX:38:d1:a8)172.30.63.1 (XX:XX:XX:c2:b0:b9)172.30.14.1 (XX:XX:XX:88:c7:4f)172.30.59.1 (XX:XX:XX:7b:67:4d)
Wireshark runs on client 1 (172.30.71.6, promiscuous mod off)
Client 5 (172.30.59.1) send a broadcast arp question (who has 172.30.41.1 - tell 172.30.59.1) and client 1 (172.30.71.6) is sending ARP replies with src = XX:XX:XX: 38:d1:a8.

172.30.41.1 (XX:XX:XX:38:d1:a8) is offline (network cable removed) and 172.30.71.6 has no entry of 172.30.41.1 (XX:XX:XX:38:d1:a8) in his arp cache.
The clients run Windows 7, Windows 8 and Windows 8.1
Why we get these phenomenon and how can we solve it? Is there maybe a problem with some updates of the last patchday? 

Thanks for the reply and kind regards

Bernd

Read other answers
RELEVANCY SCORE 64.4

Good evening and thanks in advance for your help on this. I seem to have a virus or something that keeps redirecting my browser to a google or yahoo error message that says 'page not found', or to google images. I noticed that when I recently installed AIM toolbar it now also redirects me to an AIM page that says 'page not found'. I have also noticed other changes to my computer such as my desktop background disappearing, icons in my internet favorites changing and programs like FlashPlayer disappearing. Here is my DDS text:
DDS (Ver_09-06-26.01) - NTFSx86
Run by Amy at 14:40:15.73 on Wed 07/01/2009
Internet Explorer: 7.0.6000.16851
Microsoft? Windows Vista? Home Premium 6.0.6000.0.1252.1.1033.18.1013.215 [GMT -7:00]

AV: McAfee VirusScan *On-access scanning enabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
SP: McAfee VirusScan *enabled* (Updated) {C78B3C70-4777-4742-BB91-9D615CC575E6}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
FW: McAfee Personal Firewall *enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:&... Read more

A:Redirect Virus? Not sure what's wrong but something is very wrong.

Hello acarlson,Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea

Read other 4 answers
RELEVANCY SCORE 64.4

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 8.1, 64 bit
Processor: Intel(R) Core(TM) i7-3630QM CPU @ 2.40GHz, Intel64 Family 6 Model 58 Stepping 9
Processor Count: 8
RAM: 12240 Mb
Graphics Card: NVIDIA GeForce GTX 670M, -1024 Mb
Hard Drives: C: Total - 190425 MB, Free - 10048 MB; D: Total - 264644 MB, Free - 20230 MB;
Motherboard: ASUSTeK COMPUTER INC., G75VW
Antivirus: Windows Defender, Disabled

for the graphics card it says 1024 mb, but the sticker on my laptop says 3 gigabytes.... ik i had the 3 before i reset to factory...
is there just a way it doesnt detect right or what
 

A:The sysinfo tool is wrong or my pc wrong?

Check your drivers http://www.geforce.co.uk/drivers/results/70187
 

Read other 2 answers
RELEVANCY SCORE 60.8

Situation 1
-------------
Hello. I had “music store card” [gift card] that I received as a birthday gift lying around so I figured let me it out. Anyway, I purchased 3 songs from iTunes.com. Attempted to burn them. It didn’t work I got some sort of write error on the CD.

While in main screen I clicked Edit > Preferences > Advance > Burning: Discovered that the settings were set to burn an Audio CD. However, I was using a Data CD. Is this why it didn’t work? Last I read up it should have worked. The disk was a CD-R Memorex Cool Color CD-R. This shouldn’t have proven to be a problem right?

This disk can’t be played in Xbox (original not Xbox 360).

Situation 2
-------------
In another situation I tried burning a copy of and an mp3-to-Audio-CD.

When copying the Audio-CD I was using Nero Burn Ultra Edition 6.6.1.4. Got the error message saying along the lines of “write fail, unable to finish end session.” Same thing happened when I was trying to make an mp3-to-Audio-CD, except I was using Microsoft Windows Media Player Version 10.0.

This disk can’t be played in Xbox (original not Xbox 360).

So what am I doing wrong? Here are my objectives:

1) Want to burn audio CDs that will play in cars, stereo systems, DVD players, Xbox, and Xbox360 – when I get it . If I keep purchasing music from iTunes.com, this may prove difficult?

2) What media should I use for what ty... Read more

A:Burn Audio CD Wrong and Having Probs. What am I doing wrong? "What is the right Way?"

Read other 8 answers
RELEVANCY SCORE 59.6

My desktop isn't working normally and I dont know how to fix it.Deckard's System Scanner v20071014.68Run by Benjamin Moeller on 2008-06-29 00:47:56Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --60: 2008-06-29 05:48:04 UTC - RP282 - Deckard's System Scanner Restore Point59: 2008-06-27 01:14:13 UTC - RP281 - System Checkpoint58: 2008-06-25 23:31:37 UTC - RP280 - System Checkpoint57: 2008-06-23 18:51:45 UTC - RP279 - System Checkpoint56: 2008-06-20 18:16:54 UTC - RP278 - Software Distribution Service 3.0-- First Restore Point -- 1: 2008-03-29 05:59:44 UTC - RP223 - System CheckpointBacked up registry hives.Performed disk cleanup.-- HijackThis (run as Benjamin Moeller.exe) ------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:52:55 AM, on 6/29/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16674)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32�... Read more

A:Their Is Something Wrong And I Dont Know What Wrong.

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. You are running an older version of Java. This can be a security risk so let's get you the latest version.Upgrading Java:Download the latest version of Java Runtime Environment (JRE) 6 Update 6.Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".Click the "Download" button to the right.Select your Platform and check the box that says: "I agree to the Java SE Runtime Environment 6 License Agreement.".Click on Continue.Click on the link to download Windows Offline Installation (jre-6u6-windows-i586-p.exe) and save it to your desktop. Do NOT use the Sun Download Manager..Close any programs you may have running - especially your web browser.Go to Start > Control Panel, double-click on Add/Remove programs and remove all older versions of Java.Check any item with Java Runtime Environment (JRE or J2SE) in the name.Click the Remove or Change/Remove button.Repeat as many times as necessary to remove each Java version.Reboot your computer once all Java components are removed.Then from your desktop double-click on the download to install the newest version.Please post a new log from DSS.

Read other 2 answers
RELEVANCY SCORE 48

when I click on mycomputer, it takes 15 seconds to load(has the flashlight lookin around) then says "svchost.exe application error the instruction at 0x009996bc referenced memory at 0x00000000. the memory could not be "written"" does anybody know the problem, perhaps my hijackthis report can help.






Logfile of HijackThis v1.99.1
Scan saved at 8:31:27 PM, on 2/1/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\agent\McAgent.exe
C:\Program Files\McAfee.com\Personal Firewall\MPFTray.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\AOL\1136775524\ee\AOLSoftware.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Messenger\ypager.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
c:\progra~1\mcafee\mcafee antispyware\massrv.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vs... Read more

A:something is wrong

please help me, please!!!!!!!!!!!!!!!!!!!!!!!

Read other 2 answers
RELEVANCY SCORE 48

please ignore this. I accidentally posted in the wrong category. I'm sorry.
 

Read other answers
RELEVANCY SCORE 48

I went to turn on IE and it said it was not my default browser anymore?
My win patrol keeps coming on asking me if I want to allow this.

O4 - HKLM\..\RunOnce: [BrandClearStubs] RUNDLL32 IEDKCS32.DLL,BrandCleanInstallStubs MICROS

I keep saying no but it keeps coming back.
Can someone help me out with this? PLEASE?
Is there anything on this log I need to get rid of?
Is there anything I don't need?




Logfile of HijackThis v1.98.2
Scan saved at 6:38:10 PM, on 1/5/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Object Desktop\WindowBlinds\wbload.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\PROGRA~1\Lavasoft\AD-AWA~2\Ad-Watch.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\BHODemon 2\BHODemon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\... Read more

A:Something is wrong here

Allow it. It's a legit entry. iedkcs32.dll is used by Microsoft Internet Explorer during user personalization processes. I think the "Stubs" are missing for Internet Explorers default settings and it's trying to put them back and Winpatrol is seeing this. Is IE your default browser...or are you trying to make it so?

I don't see anything else in the log that needs delt with. It's clean. To set IE as default open IE...click...tools...internet options...programs and checkmark the box on the bottom that says.. "Internet Explorer should check to see whether it is the default browser"

Close IE..open it again..a message will appear "Internet Explorer is not currently your default browser. Would you like to make it your default browser?"

Say Yes...and now IE is default.

Read other 1 answers
RELEVANCY SCORE 48

There are several issues with my computer right now, here i am disappointed, famished and desperate for the aid of this forum.

- My monitor trips, like it goes blank for 2-3 seconds randomly (could be an hardware issue)

- My computer even though on SSD is slow at times

- I had 3 other hard drives and one of them was ancient and contained bad sectors so i have disconnected it, which improved my PC but the two others, one of them is relatively old and one is a brand new one, what happens is, my PC at times would crash and then PC fails to reboot from the SSD and accesses old drives for windows which have none, therefore, I cannot boot, in order to fix it, I have to open my PC, disconnect my hard drives so the only remaining is SSD and restart my PC which where the boot actually happens and then i reconnect my other drives again, this happens after every few days? ??????? >.<

- Thirdly, I am using a Samsung 27' monitor and I do not know what is wrong with all of this, i cannot enter bios, it presents me with a blank screen, so I cannot re-install windows too, I have windows written on a USB drive too and it gives me a strange error that my drives are some other type, whereas initially I have installed the windows from that very USB.

I spend decent money to get this pc made, but.... =( help.

Also my start button isn't responding and "My Computer" doesn't appear on my desktop.

--------------------------------------------------------------------... Read more

A:I do not know what is wrong.

Bump!

Read other 5 answers
RELEVANCY SCORE 48

As of last night, everytime my PC starts Windows XP a white box about the size of a tiny pop-up appears in the very upper lefthand side of my screen. There is no way to close it and I have tried ending processes, using Spybot, and stopping unknown services in the msconfig and it won't disappear. I right clicked on it and it says its coming from launch.yahoo.com, and what's worse, everytime I change my wallpaper, a different Launch! pop-up appears. I can't figure out what kind of program would be able to launch a pop-up when you change your wallpaper, but I would LOVE to get rid of it. Any help or even longshot suggestions would be greatly appreciated.

POWERSTROKE5000

A:What Is Wrong With This!!?

Try this:
click start > run
type in
msconfig
click on startup
and see if the program is listed in there. Just uncheck it and hit apply and it should ask to restart. That might get rid of it for you.

Read other 5 answers
RELEVANCY SCORE 48

I can surf with IE, PINg other computers, etc. But I cannot update AVG virus or Ad-aware from their programs. I get no internet connection found. So do I have something blocking the update access in this log?

Thanks,

Logfile of HijackThis v1.97.7
Scan saved at 6:16:23 AM, on 12/2/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ZoneLabs\vsmon.exe
C:\Program Files\WinZip\Wzqkpick.exe
C:\Program Files\TrueAssistant\TrueAssistant.exe
C:\Program Files\SBC Self Support Tool\bin\mpbtn.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Grisoft\AVG Free\avgemc.exe
C:\Program Files\Grisoft\AVG Free\avgcc.exe
C:\WINDOWS\system32\mmc.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cust...//my.yahoo.com
R1 - HKLM\Softwa... Read more

A:what is wrong?

duffer, welcome.

The HijackThis log is fairly clean.

I use AVG V7.0 Free and have no problem updating the virus reference file.
Insure that you do not have the proxy selected if you are not using a proxy or insure that you have the correct proxy settings if you are using a proxy.

Download the latest v1.98.2 version of HijackThis to post your new log:
http://aumha.org/downloads/hijackthis.exe
or
http://tools.radiosplace.com/HijackThis.exe

These entries are what I would remove:

Go to Add/Remove Programs and uninstall MyWebSearch

Start HijackThis and tick the boxes next to all these, then close all browser and explorer windows, and tell HijackThis to "Fix checked" if still present.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus...rch/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapps.yahoo.com/cus...://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus...rch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cus...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\windows\SYSTEM\blank.htm <== Yahoo rediretors that waste system resources.

O8 - Extra context menu item: &Search - ht... Read more

Read other 1 answers
RELEVANCY SCORE 48

my computer is not doig as i tell it to do seems like someone in it or has been how do i fix this problem
 

A:something wrong

http://linuxmafia.com/faq/Essays/smart-questions.html#beprecise
 

Read other 1 answers
RELEVANCY SCORE 48

hello playa!
do u find smtgh wrong in
this log?
I just receive some strange popups
while connected
I use to download and share files
with kazaa, does it hurt my pc?

thanks a lot!

Logfile of HijackThis v1.98.2
Scan saved at 12:46:04, on 17.02.2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Lexmark X1100 Series\lxbkbmgr.exe
C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmi\File comuni\Symantec Shared\ccApp.exe
C:\Programmi\Spamihilator\spamihilator.exe
C:\Programmi\NielsenNetratings\bin\insight.exe
C:\Programmi\Lexmark X1100 Series\lxbkbmon.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programmi\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Norton AntiVirus\SAVScan.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\Microsoft Offi... Read more

A:something wrong?

Nothing suspicious here.

You have an outdated version of HijackThis. Click here to get the latest version of HijackThis and run it.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Get HijackThis Analyzer and save it to the same folder as the hijackthis.log file. Run HijackThis Analyzer and type in y if you agree. The result.txt file will open up in Notepad. Copy the whole result.txt log and post it in the forum. We do not need the original hijackthis.log (unless we ask for it). Do not fix anything in HijackThis since they may be harmless.

We don't recommend using any kind of P2P programs (including Kazaa and others). Some of these programs bundle themselves with spyware. Anytime you use P2P programs, you are risking spyware/virus infection since anything can be downloaded from there with or without your knowledge.

Read other 5 answers
RELEVANCY SCORE 48

I dont know why, but everytime after i connected to the internet after a few while, the internet suddenly was cut off. i mean, i cant browse any webpages, doesnt do anything. if i click on a link, it doesnt say cannot find server or so, but it just stays at the current page. first i thought the internet was down, but the wierd thing is, im currently downloading something and the download keeps going, so the internet couldnt be down.
so, i have to disconnect my ethernet cable, and then connect it again to get into normal internet, only for a while.. this could only be my internet getting problems, but my friends said that they are good..
 

A:Something wrong..

Have you checked to see if there is power management set on your network adapters? Go to device manager; right click your adapters; the the Power Management tab. Sometimes there is a setting to turn off the network adapter to save power. Just a thought.
 

Read other 3 answers
RELEVANCY SCORE 48

Hi and thanks for the help. I have below a hi jack this log. The pc shuts down unexpectedly.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:03:30 AM, on 07/29/2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\McAfee\Common Framework\udaterui.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Program Files\Common Fil... Read more

A:Something is wrong

Hello and welcome to TSF.

HijackThis is no longer the preferred initial analysis tool in this forum.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 48

When I start up my computer, there is some sort of error that i'm missing a .dll, and that a Scvhost.exe needs to update the settings, but my desktop never shows. i have to use ctrl+alt+delete and end the process itself

the whole computer is going so slowly, i uninstalled a lot of old programs i haven't used and tried to delete as much outdated stuff as i could.

another thing i noticed is how i suddenly have about 7 local area connections out of nowhere, i used to have like 2... and when i disabled some of the newer ones, the internet went out and wouldn't come back on...its so frustrating

i followed the guide i was supposed to before posting, so i have the logs that i scanned if you want me to post them. I just need everything to work like new because of school starting soon, and this is my only computer! i can delete anything and everything, the only thing i can't lose is my :D drive, which is basically all my music.

Any help would be really appreciated!

A:everything seems to be wrong :(

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please post/attach the logs as requested in the First Steps.

------------------------------------------------------

Read other 19 answers
RELEVANCY SCORE 48

I am having some general performance problems with my computer (i.e. running slow). Also my C drive is a red X but other wise functions as it should. Just wanted to make sure everything is ok. Please take a look.

Thank you,

Jason


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:13, on 2008-02-06
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AdvancedCleaner\ADC.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.e... Read more

A:Not sure if something is wrong

Hi and welcome to TSF.

Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers.

My name is Iain and I will be helping you clean your system.

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers or live internet connections when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your logs are clean. Remember that although your symptoms may vanish, this does NOT mean that your system is clean.

If there is anything you don't understand, please ask BEFORE proceeding with the fixes.

Please ensure that you follow the instructions in the order I have them listed.


We'll begin with ComboFix. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/comb...o-use-combofix
When the tool is finished, it will produce a report for you.
Please post C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system.

Read other 10 answers
RELEVANCY SCORE 48

Hi. As I open Internet Explorer, I get this message as soon as I type in ANY address in to the URL field, and press "Enter". And it's not letting me go to any site. Luckily I have Mozilla Firefox installed,and I'm using that. What is up here?? Can somebody help me, please?? Thank You people!!!

Internet Explorer 9.0

A:Something wrong with IE

  
Quote: Originally Posted by ilyabyk83


Hi. As I open Internet Explorer


I removed IE. Using FireFox.

Is there any other ways other than the regular browser to ask to be set as "default"??

Read other 3 answers
RELEVANCY SCORE 48

i dont know why, but after a storm passed through here my computer has runned sooo slow.

i was not home so i left it plugged in. we get alot of power surges because we are in the country at the end of the road and the end of the power pole lines, they dont circle around, they just stop in my yard, so we often get surges.

anyway, it fried my tv. it did not seem to mess with my pc, everything still works perfectly, i just had xp home installed and pro removed a week ago, and my pc is clean, no virus or spyware or anything at all. actually there are barely any internet related files, i have not used it but a little. but it was working fine after installing xp home for a few days, then the storm and now this.

for instance a page will take longer than often to load, and if i try to download a file (whether its mp3 or exe program) i get a transfer rate that starts good, then slowly but surely keeps dropping to where it would take an estimated time of 4 hours to download something that would take 10 minutes normally before the storm.

i reinstalled modem its fine, did the little modem tweaks for faster internet. does anyone know what it might be? like i said, the main difference is present when i try to download a file, it just takes an unreasonable amount of time to download even something small.

i am concerned because i use this pc for recording guitar tracks and i upload them to the web, but i could not do that like this the way its running. any help would be much appreciated... Read more

A:something new wrong

oh yes,

heres a copy of my hijack this log
Logfile of HijackThis v1.98.0
Scan saved at 7:36:55 PM, on 8/3/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\wmconnect\wmtray.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\System32\PackethSvc.exe
C:\Program Files\wmconnect\wwm.exe
C:\Documents and Settings\Kenny\Desktop\hjtlog.exe
c:\hijackthis\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\Avast4\ashmaisv.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 ... Read more

Read other 1 answers
RELEVANCY SCORE 48

Hello,

Since yesterday I have been recieving a heck of alot of pop up ads and sometimes clicking on a result in a google search will take me to some other site.

I have run a bunch of programs found on majorgeeks
hs remove
hijack this
registry mechanic
Spyware remover
cwshredder
aboutbuster
Reg scrub
Arovax antispyware
cc cleaner
spybot
spyware doctor
windows defender
and disc cleanup

rebooted several times and still getting all these popups and redirections.
Happens using firefox or google chrome.

Would anyone be wiling to enlighten me with some of your expertise please?

Many thanks,
Mike.

oh and for some reason i cannot restore to any previous date.
It just won't do anything.

DDS (Ver_09-01-07.01) - NTFSx86
Run by Michael Boulton at 16:20:07.98 on Thu 01/15/2009
Internet Explorer: 8.0.6001.18241 BrowserJavaVersion: 1.6.0_01
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2558.2055 [GMT -8:00]

AV: AVG Anti-Virus *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\C... Read more

A:Something is wrong

Hi

Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
Remember to re-enable them afterwards.

Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

Read other 8 answers
RELEVANCY SCORE 48

Do you see nething wrong with my logfile?
Logfile of HijackThis v1.95.1
Scan saved at 4:32:15 PM, on 8/1/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 6 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/customize/sbcydsl/defaults/sb/*http://www.yahoo.com/search/ie.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://borr.augustana.edu/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yah... Read more

A:anything wrong with this?

Clean log.
 

Read other 1 answers
RELEVANCY SCORE 48

Not sure where to put this. Please forgive me if this is the wrong place. Please forgive my naivete as I am not all that computer literate.

I'm wondering if I have some kind of "infection" that isn't showing up through my Virus Scan.

I currently run Windows Vista and Windows Mail. When I get email from my newsletters the pictures shows up as a box with a red X in them. I receive attachments and pictures in other emails, just not newsletters. I have checked and do not have anything blocking the pictures in my security.

Also, when I try to sign in to Windows Messenger it tells me I have an invalid IP address. I can bypass this and sign into MSN Web Messenger though.

This has been ongoing for about a week now.

Please someone tell me what I'm doing wrong or what's wrong with my computer!!!!

A:What's Wrong??????

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 48

Hey, guys.

I spent over two hours on the phone with Bell's tech support last night and got absolutely nowhere, so this is my second shot at fixing whatever's wrong with my computer.

Basically, I haven't run a virus scan in an embarrassingly long time. Yesterday morning, my computer started resetting itself and then beeping at me and giving me blue error screens all over the place. So I opened up the Sympatico anti virus program I use to scan for problems and it won't work at all. It's telling me I'm missing components and blahblah, so I called Bell and let the tech guy take over my PC to uninstall and reinstall and fiddle. To no avail whatsoever.

Just now while I was uninstalling programs I don't need/use, I got a message that said "An unientified program wants access to your computer: Unwise.exe". All my files are backed up on an external drive so I'm willing to do whatever it takes to fix the problem(s).

I have the DDS log, but every time I've tried to run gmer, it's crashed my computer. The blue screen I just got said:

"aajasnkj.sys

PAGE_FAULT_IN_NONPAGED_AREA"

Hopefully some of this makes sense. Thanks so much for taking a look!

-Nicole

--


DDS (Ver_09-02-01.01) - NTFSx86
Run by User at 22:45:25.14 on Sun 03/08/2009
Internet Explorer: 7.0.6000.16809 BrowserJavaVersion: 1.6.0_11
Microsoft? Windows Vista? Home Premium 6.0.6000.0.1252.1.1033.18.2942.1693 [GMT -4:00]


============== Running Processes =============... Read more

A:Something's Definitely Wrong

Bump, please :).

Read other 7 answers
RELEVANCY SCORE 48

Hey so my computer just suddenly loses its sounds. It has the start up windows sound but then nothing else works. Also i have an error message that comes up randomly.

this is it.

"svchost.exe - Application Error"

"The instruction at "0x75606eb5" referenced memory at "0x00000008". The memory could not be "read"."

this it says click on to terminate program.

Also it then auto puts me in classic windows format.

here is the logs that u wanted.


DDS (Ver_09-02-01.01) - NTFSx86
Run by Eriks at 18:59:39.39 on Tue 03/10/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2030.1536 [GMT -5:00]

AV: Bitdefender Antivirus *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Micro Innovations\Multimedia Keyboard Driver\StartAutorun.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Micro Innovations\Multimedia Keyboard Driver\KMConfig.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Progra... Read more

A:something is wrong.

Hello, ejpukite
Welcome to TSF

My name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)
Please give me some time to look over your computer's log(s).
Please take note of the following:In the meantime, please refrain from making any changes to your computer.
Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. :)
If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
Finally, please reply using the button in the lower left hand corner of your screen.
Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just put a post here so that I know you're still here. We get a lot of people who simply leave, and if there is no contact for that amount of time I will have to assume you have "vanished" .

We Need to Run ComboFix

Note to readers of this post other than the starter of this thread:
ComboFix is a VERY POWERFUL tool which should NOT BE USED without guidance of an expert.

If this tool helped you, please consider a donation to it's author:

How ... Read more

Read other 8 answers
RELEVANCY SCORE 48

Hi, Ok so I have a pc (windows 7) and my computer always freezes. I don't use any bad sites (game sites, scams, spam etc.) I just use basic sites. I use Mozilla Firefox. Everyday I use CCleaner before turning off my laptop and every week or so run Microsoft Security Essentials. Everytime I scan my computer it says its fine and nothing bad is found but everytime I am on my laptop it will just freeze randomly during any task. Usually it will stay frozen until I turn of laptop but if I don't it could stay frozen for a long time (it was once frozen for about an hour but went into hibernation mode, when i resumed after a couple hours it still said not responding.) So the only real way for me to fix is to restart computer. I hate doing this and I know it's bad. So is there anything I can do to fix it or does anyone know if there's a problem? A reply would be appreciated so much. Thanks!! Here is a scan from Hijack this :

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:36:56 PM, on 6/12/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16766)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\FSL\FSL_Launcher\FSL_Lau... Read more

A:What is wrong with my pc

Read other 16 answers
RELEVANCY SCORE 48

Dear All,

I've been having some fun and games with my Outlook Web Access.
It was working ok one minute, then the next this happened when I logged in (see picture)
Can someone tell me why, and tell me how to make it work again.

Thank you.

Ben

 

A:OWA - something's gone wrong

is this WebMail for work?
 

Read other 2 answers
RELEVANCY SCORE 48

Got a new HP PC a few weeks ago. Finally getting around to creating recovery disks. Very slow process. Now, on disk one of three, it's been stuck at 51% verification for about 25 minutes. Oh great!

Any thoughts?

Thanks.
 

A:Something wrong here?

My son's Fujitsu Amilo laptop did that & in the end we got Fujitsu to send us the discs - only took a couple of days. Maybe HP would do that or call their tech support as it's new?
 

Read other 2 answers
RELEVANCY SCORE 48

I was cleaning out my computer yesterday and uninstalling old programs that I never use. I had to reboot my system to finish the un-installation process. When I did, my computer loaded up and there was a message saying "The application or DLL C:\\WINDOWS\system32\rinuluta.dll is not a valid Windows image. Please check this against your installation diskette." for every program I have on my computer. It also pops up when I open a program and every time I open a new tab in my browser. I have no clue what's wrong. I think I'll have to reformat, but I wanted to get a second opinion before I did and see if anyone knew what was wrong.

Here is my HijackThis logfile:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:41:53 PM, on 11/14/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG8\IdentityProtection\agent\Bin\AVGIDSAgent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDO... Read more

A:Something is very wrong...

Hello and Welcome to TSF.

The machine is infected.

We no longer use HijackThis as our initial analysis tool.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 48

It keeps jumping dialog box, warning me a series of codes. How can I deal with that?

I have checked answers from Google, however it gives me no answer.

after I checked mom.exe solution, it stopped dialog box, but my screen sometimes turns black. How Can I solve this problem?

A:Something wrong with my mom.exe

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 48

We got a new customer where I work because she said that with AOL her credit card was stolen twice.

I tried to run DSS but it failed while backing up the registry. When I tried to download HJT IE would give me the crash information. The second time I ignored the error and it downloaded. Here is the HJT report and Panda Active scan.

Logfile of HijackThis v1.99.1
Scan saved at 10:02:57 PM, on 9/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Lexmark 3100 Series\lxbrbmgr.exe
C:\PROGRA~1\LEXMAR~1\LXBRKsk.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\AOL\1172386737\ee\AOLSoftware.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Lexmark 3100 Series\lxbr... Read more

A:Not sure what is wrong

There's not much nefarious standing out in that log. Some games related adware.

That wouldn't explain why the credit card was stolen, nor how. It's possible she fell victim to a phishing exploit, or followed a bad link in an email. Those would not show up in a HJT log.

Create an uninstall list:
Open HiJackThis
Click on the button " Open the Misc Tools section"
Click on the Box that says "Open Uninstall Manager"
Click on the button "Save list"
Copy and past the List from the notepad file into your post

Read other 6 answers
RELEVANCY SCORE 48

Something is wrong with my computer. Homepage have been changed and my profile picture on MSN changed too. Nothing too damaging but I just wanted to be on the safe side. Here's the result of hijackthis analyzer.



===========================================================================================================================
Log was analyzed using HijackThis Analyzer - Updated on 12/17/04
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O23 - Service: SymWMI Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.99.0
Scan saved at 5:28:01 PM, on 4/11/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\WinPoET Broadband Connection\WrOS.EXE
C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
C:\WINNT\webshots.scr
D:\konfabulator\Konfabulator.exe
D:\konfabulator\Konfabulator.exe
D:\konfabulator\Konfabulator.exe
D:\konfabulator\Konfabulator.exe
D:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.... Read more

A:Something's wrong

Hello and welcome to TSF

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem a.s.a.p

You may wish to Subscribe to this thread (Thread Tools) so that you are notified when a reply has been made.

Please be patient with me during this time.

Read other 3 answers
RELEVANCY SCORE 48

Logfile of HijackThis v1.99.1
Scan saved at 2:46:23 PM, on 5/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Creative\Prodikeys\Prodload.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\user\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.rxve... Read more

A:please help me see this log what's wrong with it???

Greetings, and welcome to TSF!


Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below.

Go to My Computer->Tools/View->Folder Options->View tab and make sure that 'Show hidden files and folders' (or 'Show all files') is enabled. Also make sure that 'Display the contents of system folders' is checked. If you have Windows XP, the search feature is a little different. When you click on 'All files and folders' on the left pane, click on the 'More advanced options' at the bottom. Make sure that 'Search system folders', 'Search hidden files and folders', and 'Search subfolders' are checked.

For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).

===============

We'll need to unload Spybot's Teatimer before we begin. To do this, right-click on the icon in the quick launch toolbar at the bottom on the screen, then select "Exit".

===============

Download, unzip to your desktop CWShredder and run it, then:

1. Click "Check For Update" ... Read more

Read other 1 answers
RELEVANCY SCORE 48

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wqynepmi.exe
C:\WINDOWS\system32\dllcache\ivchost.exe
C:\WINDOWS\system32\wspvs.exe
C:\WINDOWS\system32\wscvs.exe
C:\Archivos de programa\MSN Messenger\usnsvc.exe
C:\Archivos de programa\MSN Messenger\msnmsgr.exe
C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\2485.tmp
C:\Archivos de programa\Mozilla Firefox\firefox.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://mx7.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://mx7.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = V?nculos
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wspvs.exe,C:\WINDOWS\system32\wscvs.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: El kit de herramientas de hp - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
O3 - Toolbar: &Goog... Read more

A:HJ LOG.. anything wrong ??

Hi
You do have a few thing to fix...


Go to Start > Run and type

cmd

and OK. Type the below commands and hit "Enter" after each line

sc stop mshexdefx
sc delete mshexdefx

Type Exit to close.

=======================
Please download VundoFix.exe to your desktop.Double-click VundoFix.exe to run it.
Put a check next to Run VundoFix as a task.
You will receive a message saying vundofix will close and re-open in a minute or less. Click OK
When VundoFix re-opens, click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will shutdown your computer, click OK.
Turn your computer back on.
Please post the contents of C:\vundofix.txt and a new HiJackThis log.
=================================

Download combofix from HERE

**Save it directly to your desktop**

Double click on combofix.exe & follow the prompts.
When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall
==================================
Please post back both logs.

Read other 1 answers
RELEVANCY SCORE 48

At times, my PC will take a LONG time to load up something. As an example, if I were to open IE, then open such a program as MSN Messanger, the MSN Messanger could take anything up to 20 MINUTES to load! My hard drive just lights up as if to say it's loading something huge, but I know it's not directly an HD issue as there's no problems in Safe Mode.

Here's the logs:

Deckard's System Scanner v20070905.67
Run by Admin on 2007-10-07 16:47:41
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Failed to create restore point; unknown error code 0x00000001


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Admin.exe) -----------------------------------------------

Unable to find log (file not found); running clone.
-- HijackThis Clone ------------------------------------------------------------

Emulating logfile of HijackThis v1.99.1
Scan saved at 2007-10-07 16:50:00
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.00.2900.2180)

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Portra... Read more

A:Not sure what's wrong with PC, would appreciate some help though.

Bumpity bump

Read other 10 answers
RELEVANCY SCORE 48

I don't know where to start.

I have (had) a computer that I was using to do business work on. It was a Pentium 4 @1.6ghz.

It's about five years old and had a series of problems.

First hard drive went so I replaced it. Then the power source went so we replace that just this past summer.

Next I had installed a brand new hard drive 250 gigs just for storage to leave the other pretty new 80 GB hard drive specifically for the operating system and programs.

I was getting all kinds of problems like it running at 100% even when there was nothing open in the foreground.

I have a hard copy of trend micro virus protection which also is supposed to scan for malicious spy ware etc.

So just by trial and error we thought maybe it was having problems with the ram so we increase the ram to 1 GB.

When it still wouldn't work properly, express shutting itself down in the middle of making an e-mail, not being able to change to a second user, and of course running at 100%.

So I took it back to the same people that change the drives and added the ram and change the power supply.

About two weeks ago they told me that it's the board and the capacitors are leaking. (I looked at the board I couldn't see any capacitors leaking but they pointed out that they were bulged ended the next step would be a leak.)

So I agreed to replace the entire board, and they replaced the processor with an AMD that they told me on the phone was running at 2.5 to 2.8 GHz but when I got it ... Read more

A:What else can go wrong?

Read other 16 answers
RELEVANCY SCORE 48

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 23:04:48, on 11/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Adobe\Photoshop Elements 4.0\apdproxy.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0H2.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSV... Read more

Read other answers
RELEVANCY SCORE 48

I don't know what's wrong with my pc can anyone help.


Logfile of HijackThis v1.97.7
Scan saved at 18:19:40, on 11/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\sesinetd.exe
C:\WINDOWS\system32\hserver.exe
C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
C:\Program Files\Alias\Maya7.0\docs\wrapper.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
C:\Program Files\Alias\Maya7.0\docs\jre\bin\java.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
C:\Program Files\Common Files\AOL\1173296351\ee\AOLSoftware.exe
C:\Program Files\Java\jre1.6.0_03\bin\ju... Read more

A:Don't know what's wrong. :-s

Hello Suge and welcome to TSF,

Your version of HijackThis is terribly outdated. Uninstall your version 1.97.7 and download the newest version of the tool:


Please download HijackThis to your desktop - this program will help us determine if there are any spyware/malware on your computer.

Alternate link

---------------------------------------------------------------

Double-click on the file you just downloaded.
Click on the "Install" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you--Close it.

---------------------------------------------------------------

Next, as noted in our sticky topic (Updated!) IMPORTANT - Read This Before Posting A Log, download Deckard's System Scanner (DSS) to your Desktop.

What DSS will do:create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review.
DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.


Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When... Read more

Read other 1 answers
RELEVANCY SCORE 48

Sorry to trouble all of you.

A quick description of my problem:
As of today, suddenly my IE started giving me problems. It started to default certain website pages to "http:///" with 3 slashes and says "Cannot find server", "Page cannot be displayed". This does not affect all the websites, but namely www.facebook.com and www.amazon.com seems to be pretty consistent.

Also, when I tried to access this forum, when I went into my IE History, found www.techsupportforum.com and tried to click on the link that said www.techsupportforum.com/register.php, the address defaulted to only "/register.php", removing the domain name. This isn't the only instance, but a few times it has occured today.

I've done the following before posting here:
1. Ran AdAware
2. Ran CWShredder
3. Ran Spybot Search&Destroy
4. Ran TrendMicro Housecall

Now I'm kindda lost as to what else can be done. The following is my HJT Log, hope you guys can make sense of it.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:04:14 AM, on 30-Dec-07
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\System32\hkcm... Read more

Read other answers
RELEVANCY SCORE 48

Something might be wrong with my computer, but I'm not sure, my SBC anti-virus reported a virus and I'm pretty sure I deleted it but I just want to make sure.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:57:22 PM, on 1/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Yahoo!\Antivirus\ISafe.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Yahoo!\Antivirus\CAVTray.exe
C:\Program Files\Yahoo!\Antivirus\CAVRID.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Yahoo!\Antivirus\VetMsg.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yah... Read more

Read other answers
RELEVANCY SCORE 48

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:58:47 PM, on 6/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe
C:\Program Files\McAfee.com\Personal Firewall\MPFTray.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
c:\program files\mcafee.com\vso\mcvsshld.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\McAf... Read more

Read other answers
RELEVANCY SCORE 48

Ok, so my computer is getting pop-ups up the wazzoo and i have used multiple system scans and none of them detect anything. but I still keep getting like 50 pop-ups every few minutes. i heard of hijackthis before but i dont know how to use it. ill post my log below and if someone can show me how to use it or just tell me how to fix it that would be great.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:56:11 PM, on 5/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/yco...search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.com/g/startpage.h...ys=DTP&M=T3508
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.com/g/startpage.h...... Read more

A:Something seriously wrong!!!

This should relieve the problem....


Please download OTMoveIt by Oldtimer and save it to your desktop.


Please double-click OTMoveIt.exe to run it.
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

C:\WINDOWS\cdti.exe

Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
Click the red Moveit! button.
Copy everything on the Results window to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it on your next reply.
Close OTMoveIt

(If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.)
Click the red Moveit! button.
Please "Copy" the results from the "Results" window (to the right) and then "Paste" them into your next reply on the forum.

Reboot into Normal Mode.

In your next reply please include the following:

The OTMoveIt log.

=========================================

Ok.We need to download ComboFix.exe. This will give me a better view to the files that are running and also the ones that are hidden on your computer.

Please visit this webpage for download links, and instructions for running ComboFix


When the tool is finished, it will produce a report... Read more

Read other 1 answers