Over 1 million tech questions and answers.

Permissions Win & Linux [moved from General Security]

Q: Permissions Win & Linux [moved from General Security]

How can I protect my Windows files so that my Linux does NOT see it (except as root)?

RELEVANCY SCORE 200
Preferred Solution: Permissions Win & Linux [moved from General Security]

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Permissions Win & Linux [moved from General Security]

This is probably a question better asked in a Windows or Linux section of the forum. What Windows OS is involved, so I can move this thread to the appropriate section?

Of course, if someone reading knows the answer, feel free to post.

Read other 4 answers
RELEVANCY SCORE 72.8

Hello all,

First I would like to thank you for creating such a useful forum.

I am currently encountering several issues, which I think are all caused by one source. I am experiencing the following difficulties:
- Windows Defender would not update
- Windows Update would not update
- Windows System Restore would not create restore points (automatically)
- Cannot upgrade Vista SP1 to SP2

I have already run a full scan using Malwarebyte Anti-malware. I also tried turning off both my router firewall as well as programme firewall (PCTools Firewall Plus).

I have also run the Command Prompt check to see if anything is corrupted, I have received the following:


Quote:




Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

The system file repair changes will take effect after the next reboot.




Any advice would be helpful.

A:Windows security problems [moved from general security]

What errors did the log file find?

Read other 6 answers
RELEVANCY SCORE 72.4

A few days ago, Internet Explorer started to act extremely weird. It was much more susceptible to freezing up, and then Antivirus 2009 popups and other related fake antivirus program popups started appearing, even on Firefox.

It even affected the Windows Live, particularly Hotmail. My family and I could not access our e-mail without either the page freezing up or adware popping up.

I have run the Super Anti-Spyware program at least 4 times in the past two days, it comes up with at least 40-50 instances of either Trojan.Fake Alerts or various types of Adware. I have figured out that it has something to do with Internet Explorer, and I have briefly removed it to see if it really was the case. Now I can go onto Firefox without adware popping up, but I still get annoying popups about dating and streaming sites even though Firefox is set to block them.

Windows Live is still acting up. I cannot open up Windows Live Messenger (either through double-clicking the desktop icon, clicking on it in the Programs menu, or through the Task Manager). I can go to my inbox without a problem, but if I click on a new message, it takes a long time to show up. A hypothesis I have come to is that Windows Live's servers are having trouble, or something that Super Anti-Spyware didn't catch is causing the trouble.

Usually about this time I am able to fix problems on the computer, but at this point I'm stuck. Help, please?

I moved the post over here, and installed HJT, and have inc... Read more

A:IE, MSN, etc. (Moved from General Security)

Y'know, I understand that real life gets the best of us, but this isn't even MY computer. It's pretty much my mom's since she paid for it, and I really need to get it fixed. Can I PLEASE get some answers???
 

Read other 1 answers
RELEVANCY SCORE 72.4

I have some pics with wb1 file extension and my photo software is unable to open these pics. What program can I use that will allow me to change the extension so that I may open the pics?

Thanks,

Read other answers
RELEVANCY SCORE 72.4

I have Spywareguard on my computer on this evening I keep getting this:

(See screenshot)

How can I get rid of this? I've run Spy-Bot and Ad-aware 2007 Pro restarted and it still came up.

Note: I ran Spy-Bot from Safe Mode and it couldn't delete it. Spy-Bot suggested to run it upon restart which I did but it still couldn't take care of it.

Thanks!!

I tried to delete mljjk.dll from C:/Windows/System32 but it claims that it is in use by another person or program.

A:Bho [Moved from General Security]

Hello

That is a very specific infection that needs specific procedures to remove properly. Download Deckard's System Scanner (DSS) to your Desktop.

What DSS will do:create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review.
DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.


Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your next reply.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

Please include the following in your next reply so we can begin cleaning the system:

main.txt
an attached extra.txt

Read other 12 answers
RELEVANCY SCORE 71.6

I have gotten the BSOD a couple of times lately.
The error is 0x00000050
Win32.sys address

That is all i got before it went away.
any help would be great.
Thanks
Michael


DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 10.9.2
Run by mike at 15:31:21 on 2012-12-14
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2005.1331 [GMT -6:00]
.
AV: Norton Internet Security *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
FW: Norton Internet Security *Enabled*
.
============== Running Processes ================
.
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Roxio\BackOnTrack\App\SaibSVC.exe
C:\Program Files\Intel\ASF Agent\ASFAgent.exe
C:\Program Files\Roxio\BackOnTrack\App\BService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Norton Internet Security\Engine\19.9.0.9\ccSvcHst.exe
C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Norton Internet Security\Engine\19.9.0.9\ccSvcHst.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\program files\real\realplayer\update\realsched.exe
C:\WINDOWS\... Read more

A:BSOD [moved fr general security]

Hello and Welcome to TSF.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

I see no signs of infection in your logs. You may need to seek help in our BSOD, App Crashes And Hangs Forum

We'll see if anything turns up first.

------------------------------------------------------

You have remnants of Microsoft Security Essentials still on your machine.

Please download the MSE removal tool, MicrosoftFixit50535.msi, by clicking the Fix it button and saving the file to your desktop.Close all programs.
Double-click MicrosoftFixit50535.msi then click 'Run'.
In Vista/Win7, right-click and choose 'Run as administrator'.
Follow the on-screen instructions.
Reboot your computer if not prompted already.
Then delete MicrosoftFixit50535.msi from your desktop.
------------------------------------------------------

Please download ComboFix and Save it to your Desktop.

**Note: It is important that it is saved directly to your desktop**

Disable all antivirus and antispyware programs. Get help here

Double-click ComboFix.exe and follow the prompts to run it.
As part of... Read more

Read other 19 answers
RELEVANCY SCORE 71.6

hi all l have something on my computer cqmivjb.exe can anyone till me what it is .thank you

A:cqmivjb [moved from General Security]

There was only 1 google result that was in another language but had to do with "Mail Skinner". Do you use "Mail Skinner"?

Read other 13 answers
RELEVANCY SCORE 71.6

Hi,

I had a computer with a root kit on it and then I got rid of the computer. I just recently got a new computer and when I'm on certain forums such as Topix and I type it is delayed, slow and sluggish and the bottom indicator showing the webpage keeps flickering ever so often and its like the page refreshes or something really fast every so many seconds. When I go to these sites from someone elses computer or from work I don't have this problem at work, its just at home and someone told me that I am being monitored. Is there a way that someone as accessed my system on one or two sites?

A:Being monitored [moved to General Security from VTS]

I need to add that when I run netstat -b with no broswers running I get 2 TCP Local Addresses and both say TIME_WAIT. In the Foreign address one says iw-in-f190:http and the other says Systemax2-PC:49869.

Read other 2 answers
RELEVANCY SCORE 71.6

I wasn't sure where to post this issue. If I am in the wrong forum, could you be so kind as to redirect me and I will post there.

Anyway, my computer is about 4 years old and it has been running really slow probably for the past 3 years. The fan goes on immediately after logging onto my XP account. I have Norton 360 (I know you guys aren't big fans of Norton...) currently installed on my computer and scan for viruses/malware frequently. Also, I clean the computer quite often with those air dusters, and that does not seem to help. Do you think this is a security/malware issue, or maybe there is dust trapped in the computer, or do you think the computer is just aged? I am not aware of the average life of a good computer...

Any advice will be greatly appreciated! Thanks!

A:What could be wrong? [moved from General Security]

Well that depends on the hardware specs of the computer and what kind of load you have on it. I know that Norton 360 significantly slows down the performance of a computer, have you tried Norton Internet Security 09? In terms of performance it is a major improvement over past Norton products. Open up the system information console: Start > all programs > accessories > system tools > System information. Scroll down and look to see how much available ram that you have and virtual memory. Have you defragmented your hard drive lately?

Read other 19 answers
RELEVANCY SCORE 71.6

I'm now writing this thread on my laptop because my pc is running soooo slow!. It happened all at once, my CA security went crazy on my pc, and my computer is now infected with at least 1 virus. After doing a small ammount of research I think vundo virus is one of them! please help me. Tell me how to list my exe. files for you i'm not too sure how. Anyone out there!(echo, echo) i want to play call of duty 4 and my laptop doesnt cut it. heh!
Kevin

I'm able to post off the infected pc. took like 45 minutes to load even this page. The computer has 2 gigs of ram, 2800(2.0ish ghz) processor.

A:Help! My PC is wrecked! [moved from General Security]

Hi and welcome to TSF.
I've moved your post because the HJT Log Help Forum is for HJT Logs only. If you think you have a virus please follow these steps and post a DSS log in the HiJackThis Help forum. If you can't follow any of the steps please make a note of this in your reply. Please be patient as the analysts are very busy.

Read other 9 answers
RELEVANCY SCORE 70.8

There are many threads dealing with ntosknl.exe making excessive use of system idle process - not all satisfactorily answered.
I have the same issue BUT ON CLOSER INSPECTION I find what I ACTUALLY have running is ntoskml.exe!KiCpuld+0x6a0

You see? Not ntosknl.exe but ntoskml.exe with an exclamation mark at the end as well.

Specifically - ntoskml.exe!KiCpuld+0x6a0 in system idle threads

Took me a while to spot the difference. I can find no reference to it on any internet search (or here) so this is my first post.

What is it? It just eats up all my cpu and there are four instances of it running simultaneously looking at it via Process Explorer

Voxjelly

A:M+! may be the ntosknl.exe problem (Moved from General Security)

Hello Voxjelly, welcome to TSF.

Actually it is n-t-o-s-k-r-n-l. exe (I separated the letters with a hyphen for clarification. Otherwise, when r is followed by n, it looks like m)

And, it's normal for the system idle process to be around 100% when nothing is going on.

However, I'll move this thread to the Windows section, as they are the experts in such matters.

Read other 4 answers
RELEVANCY SCORE 70.8

AVG has detected this Virus called "Exploit" and i move it to the vault and it keeps coming back, any suggestions?

A:Exploit Virus (moved over from General Security)

Hi callie3274,

Please complete the following 5 Step Process,which MicroBell has put together. Next, post your HJT log in the HijackThis Log Help Forum.

Read other 6 answers
RELEVANCY SCORE 70.8

my laptop on entering blue screen

A:blue screen [moved from general security]

http://www.techsupportforum.com/foru...ta-452654.html



-----

Read other 1 answers
RELEVANCY SCORE 70.8

Hey I've been trying to access oasisactive.com the last few days but it does not load properly, resulting in me not being able to login to the site. Its really starting to frustrate me, not because I like the site, but because I have no idea why?!!! My java, flash, shockwave plugins are all uptodate, I am running FF 3.0.10 and IE8 and neither of them work. I have used spybot search and detroy, malbytes malware, auslogics boostspeed and adware to clean my PC running Vista of any suspicious files yet it still does not work.

Any ideas?

Cheers

A:Web site not loading [moved from General Security]

Hi and welcome.

It seems to be a very slow site - took quite a while to load fully for me. Are you having trouble with any other site?

Read other 5 answers
RELEVANCY SCORE 70.8

After installing new software for a new automotive scanner device that I had to turn the firewall off for, when I tried to turn it back it, it would not restart. After running AVG 3 times - trying to get a clean scan, but getting the same 13 problems all three times and seeing that one was the Hooker mess, I searched for help with trojan, hooker and ended up here.

I have done the combofix.exe and the log looks as follows. Could you please advise what steps I should take next, if any. Thanks.

ComboFix 12-10-17.05 - Michael Tarbox 10/17/2012 18:55:25.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3764.2544 [GMT -4:00]
Running from: c:\users\Michael Tarbox\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\DRM\6521.tmp
c:\programdata\Microsoft\Windows\DRM\6522.tmp
c:\programdata\sJxqqxCu.exe.b
c:\programdata\sJxqqxCu.exe_
c:\users\Michael Tarbox\AppData\Roaming\957B.tmp
c:\users\Michael Tarbox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum
c:\users\Michael Tarbox\avg_free_stb_all_20... Read more

A:Hooker virus (moved from general security)

Ran AVG and Malware Bytes last night and all was clean. But as of this AM - its baaaaaaacccccccckkkkkkk!

Read other 1 answers
RELEVANCY SCORE 70.8

My antivirus software failed to catch this virus. Now my sytem runs very slow, surfing th net is imposible and I get popups warning me that I have a virus. I have a Dell Inspiron E1505 computer running XP. My antivirus software is Trend Micro Pc-cillin.
I have scanned my system and included for your review.
Please advise?:

Deckard's System Scanner v20071014.68
Run by Casey on 2008-01-05 17:05:06
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 4 Restore Point(s) --
4: 2008-01-05 22:05:12 UTC - RP536 - Deckard's System Scanner Restore Point
3: 2008-01-05 21:54:07 UTC - RP535 - Software Distribution Service 3.0
2: 2008-01-05 18:56:00 UTC - RP534 - System Checkpoint
1: 2008-01-04 18:03:42 UTC - RP533 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 503 MiB (512 MiB recommended).


-- HijackThis (run as Casey.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:08:20 PM, on 1/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\ls... Read more

A:Troj Vundo.ACA [moved from General Security]

Hello and welcome to TSF

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

============================

Please follow all instructions and in which order they come,if you have any questions,please ask before proceeding.Its important that you follow this through until i give you the all clear,a lack of symptoms does not mean that you are clean.

=============================

Download Combofix from any of the links below, and save it to your desktop.

Link 1
Link 2
Link 3

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

1. Disconnect from the internet.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

--------------------------------------------------------------------

Double click on ComboFix.exe & follow the prompts.

When finished, it will produce a report for you at C:\ComboFix.txt. I'll need to see that in your next reply, along with a new HijackThis log.

============================

Also post the extra.txt from Deckard System Scanner in your next reply.

=============================

Reconnect to the internet and post the required logs

=============================
... Read more

Read other 1 answers
RELEVANCY SCORE 70.8

I have a laptop that blue screens after an hour or so and turns off. It displays a message about a registry (I don't have the exact phrase, since it is fleeting). Then the computer can be power up and works fine for a while.

Below is my DDS and attached is my Attached.zip with art.txt and attach.txt.

brook_trout
-----------------------------------------
.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by Amy at 15:15:44 on 2012-08-17
Microsoft? Windows Vista? Home Basic 6.0.6002.2.1252.1.1033.18.1013.372 [GMT -4:00]
.
AV: Norton Security Suite *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Security Suite *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Security Suite *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\svchost.exe -k NetworkService ... Read more

A:Blue Screen [Moved fr General security]

Bump

brook_trout

Read other 17 answers
RELEVANCY SCORE 70.8

Hello, I have a problem with a trojan called regscan. How do I remove it. Best regards tower1948

A:[SOLVED] regscan [moved from general security]

Hi, welcome to TSF

Please follow the instructions here and then post all the requested logs in a new thread here for the security analysts to look at.

The security forum is always busy, so please be patient and you will receive a reply as soon as possible. If you go to Thread Tools > Subscribe at the top of your new thread you will receive an email as soon as a reply is posted.


http://www.processlibrary.com/directory/files/regscan

Quote:




regscan.exe is added by Trojan.W32.Rbot. It is a worm which attemps to spread via network shares. It also contains backdoor Trojan capabilities allowing unauthorised remote access to the infected computer. If found on your system make sure that you have downloaded the latest update for your antivirus application. This process is a security risk and should be removed from your system.

Read other 3 answers
RELEVANCY SCORE 70.8

Please let me know if this needs to be posted in another forum, since I'm still learning how to use this site.

My problem is complicated (to me,anyway). I have a Dell Inspiron laptop running Windows Vista. Sometimes when I turn on the laptop, a small box will appear saying that there's a problem with "framework." Other times, Norton will not appear at the bottom tray, and other times it will. Sometimes the laptop will start up without any problem, other times I have to use Control + Alt+ Delete several times to get it started. When I tried to "upgrade" to IE 8 it seemed to mess things up even more.

I took the laptop in for a look-over. They tech guys said that I would have to click on the IE icon and choose "run as administrator" to use it. They didn't know why and couldn't fix the other weird glitches. All they said for sure was that something was wrong with the security settings but didn't want to mess with them. And when I tried to download Firefox, it could download it and install it, but then it would crash when I tried to use the browser every time - even "run as administrator."

I use my laptop alot and use it to freelance online, but know very little about laptop security settings so I'm afraid to tinker with the settings.

Can you please help?

Thanks.

A:Vista Question [moved from General Security]

I would first suspect the Norton, then would suspect an issue with your .NET framework.

I suggest downloading a free antivirus (such as AVG Free, Avast Free, or Avira Free).
Then uninstall the Norton using the free Norton Removal Tool from here: http://service1.symantec.com/Support...05033108162039
Then immediately install the new antivirus and update it.
While it's updating, check your Windows Firewall to make sure that it's on.

If that doesn't fix it, then I'd suggest uninstalling the .NET framework entries in your Control Panel...Programs...Uninstall a program.
Then visit Windows Update to get the latest versions reinstalled.

Read other 1 answers
RELEVANCY SCORE 70.8

I just noticed that Firefox is using Search instead of Google. Searched the web for help, found a lot of hopefuls, but could not follow the instructions.

DDS (Ver_2012-10-19.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.5.1
Run by Roger Olson at 7:51:14 on 2012-10-27
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2037.1067 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
============== Running Processes ================
.
C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
C:\WINDOWS\agent.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\GManager.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system3... Read more

A:searchnu [moved from general computer security]

Hello and Welcome to TSF.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

It appears that you have two antivirus programs installed, Kaspersky and Security Essentials. Even though Kaspersky isn't running, they can still conflict with one another and cause system instability or even system hangs. Please choose one to keep and uninstall the other via Add or Remove Programs in your Control Panel.

------------------------------------------------------

Please download ComboFix and Save it to your Desktop.

**Note: It is important that it is saved directly to your desktop**

Disable all antivirus and antispyware programs. Get help here

Double-click ComboFix.exe and follow the prom... Read more

Read other 2 answers
RELEVANCY SCORE 70

I ran yahoo anti virus and the cws.homesearch hijacker is found on my computer. Yahoo anti virus does not remove it. I also ran spybot and ad-ware,they do not show it. Can you give me support to I can start to tackle this problem, Thank you, Ronnie777

A:cws.homesearch hi jacker problem (Moved from General Security)

Quote:





Originally Posted by Ronnie777


I ran yahoo anti virus and the cws.homesearch hijacker is found on my computer. Yahoo anti virus does not remove it. I also ran spybot and ad-ware,they do not show it. Can you give me support to I can start to tackle this problem, Thank you, Ronnie777




* Here is my Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 7:46:32 AM, on 24/02/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
... Read more

Read other 2 answers
RELEVANCY SCORE 70

I downloaded and ran Combofix. It stated that I needed to post the log file to have it analyzed. Hopefully, this is the correct place to do this as I am pretty computer illiterate. The log file I got is below. Thanks for the help!

--Jason

ComboFix 08-12-15.01 - Administrator 2008-12-15 18:15:05.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.254.65 [GMT -6:00]
Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\bjaphceawcvmrq.dll
c:\windows\system32\hpowiax2.dll
c:\windows\system32\msxml71.dll

.
((((((((((((((((((((((((( Files Created from 2008-11-16 to 2008-12-16 )))))))))))))))))))))))))))))))
.

2008-12-11 23:20 . 2008-12-11 23:20 84,310 --a------ c:\windows\system32\bjaphceawcvmrq.dll-uninst.exe
2008-12-11 23:20 . 2008-12-11 23:20 47,897 --a------ c:\windows\system32\eazpfynghsp.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-16 00:22 --------- d-----w c:\program files\Symantec AntiVirus
2008-12-15 23:26 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater
2008-11-16 21:05 --------- d-----w c:\documents and settings\Administrator\Application D... Read more

Read other answers
RELEVANCY SCORE 70

Running Windows 7 32 bit
I have done a stupid thin (how many times have you heard that opening statement) Trying to edit my preferences in Firefox I came across the certificate section and seeing Equifax there thought is was a snooping thing (I associate them with credit checks) and being sensitive about such things I deleted it! Now I keep getting a splash screen telling me I cannot go to certain sites Yahoo etc. I can use IE or Lunar but it only happens with Firefox (I think) I like firefox and would like to fix this but my searches on the subject are way beyond my comprehension. Can someone please explain in plain terms I can understand what I have done and can it be fixed? Thankyou for looking, I will be eternally greatful for any answers/advice
rgds
David

A:Deleted Equifax Certificate [moved from General Security]

Have I posted this in the wrong area, 52 views but no replies, can anyone advise or point me to the correct area?
Rgds
David

Read other 6 answers
RELEVANCY SCORE 70

I have been talking to someone in another thread about my computer just locking up on me several times a day. I bought a better power supply and it seems to have helped a little and that i can now run my virus and malware scans with out the comp locking up. The tech here thinks that the lock ups occurring over a long period of time probably affected the BIOS and other files causing errors and such. Right now i want to make sure my BIOS is clean so I can start over from scratch and pray that it solves my lock up problems or atleast make it easier to find the problem..

I have Windows XP Home with SP2 BTW

A:want to clean BIOS completly[moved from general security]

looking at the other thread gary suggested checking for a bios virus
see what security has to say on it
in the mean time d/load and run the hard drive manufacturers diognostic utility on the hard drive
if it comes up clear run
chkdsk /r

Read other 5 answers
RELEVANCY SCORE 70

How are you doing, I don't think this is a virus so im not posting it in the HJT forum. At random points when im using my computer i will get this windows popup message. It says

Windows - No Disk

Exception Processing Message c0000013 Parameters 75b6bf7c 4 75b6bf7c 75b6bf7c

|Cancel | Try Again | Continue|

I have no idea why this would be happening since im not taking out usb drives or any other hardware. When i click cancel or continue it wont close. I need to click it rapidly about 50 times before it closes. Then about 20 min later it happens again. I have been searching online and found no real solution so i figured that somebody must have an answer. I am using Windows XP SP3. If you need me to post any more info about my computer i will. Next time this happens ill post a screenshot.

A:[SOLVED] Windows - No Disk [moved from General Security]

Quote:




This problem seems to be caused either by malware (virus or spyware etc), or by software following a Windows update or some other software installation or uninstallation (particularly HP, Norton or QuickTime software) trying to check for removable media that isn't there (e.g. disc in DVD drive or card in card reader), when it shouldn't be doing that check.




http://www.consumingexperience.com/2...rocessing.html gives detailed instructions for a few possible solutions.

Read other 3 answers
RELEVANCY SCORE 69.2

I restarted my comptuer, and it told me that there was a USB mass storage device plugged into my comptuer at port_#0009.Hub_#0002, but there is nothing at all plugged into ANY USB port. I'm worried about what this means. I had a back door on my last computer, and someone stole my identity. Is it possible for someone to hook a mass storage device to my computer from a remote location, or do USB mass storage devices always have to be physcially plugged into a computer? Please help me, I need to figure out what all of this means.

A:What is Port_#0009.Hub_#0002? [Moved from General Security]

Hi

AFAIK, a USB device would have to be physically connected. Do you have a USB hub plugged in, rather than any individual device?

Read other 6 answers
RELEVANCY SCORE 69.2

Hi, all.

My pc keeps popping up 'windows script hosting' window and 'My documents' window on every startup after logging in. Well, it's not really irritating, but i prefer not to have them, if possible. My pc started behaving like this after i installed Avast!home edition, which is not the cause, i guess, as that wasn't the first time for me to install Avast antivirus--i already installed that av in many other computers before.

I've tried finding such entries in 'startup' and also in 'msconfig', but i can't any of them.

Could anyone help me the problem that i am having with the pop-up thing?
Any troubleshooting/suggestion is very much welcomed.


Regards,
F I F I.

P.S. Here is the HijackThis Logfile in case it's needed.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:41:14 PM, on 11/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOW... Read more

A:windows script hosting keeps popping up! [Moved From General Security}

Hi FIFI -

HijackThis logs are only to be posted in this forum. I've moved your thread.

I can see what's likely causing that, but the question remains ... "Why is it there?" For that, more info is required.

First....

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries if they exist (make sure you do not miss any) and click Fix Checked

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe,userinit.exe

Close HijackThis now.

---------------------------------------------------------------------------------------------

Please do this:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windo... Read more

Read other 13 answers
RELEVANCY SCORE 69.2

Hi...I've been working on a virus and one of the things I was advised to do was remove Adobe Reader 8.1.4, something I've been unable to do. Is this the right place to post for help with this problem?

Thanks!!!

A:Adobe Reader uninstall problem [moved from General Security]

How are you trying to remove adobe reader?
If you think your system is infected you should start a thread in the virus forum:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

Read other 19 answers
RELEVANCY SCORE 69.2

Hi, I am new here, & really not sure where to get help & advice for my computer problem. I am also an intermediate user, not that familiar with computer talk.
I have a couple of issues, first one is, I notice about 2 weeks ago, in my internet connections area, there was an icon called 'internet gateway', & when I connected to my local area connection, this icon would also connect, I tried to remove it, with no luck, but then it suddenly dissappeared about a week ago, about the same time, I also noticed when I tried to shut down my computer, someone else's 'computer name' popped up & it said 'there name' is shutting down. I was upset at the time to think someone got into my computer & was using there name to log on, how is this possible? How can they do this?

I will leave it to this issue first, as I have others.. I'm truly sorry if I'm not in the correct thread, just not where abouts to post.

Thanks guys for your kind help in advance....

Teesha

A:[SOLVED] attn: admistrators, please direct me [moved from General Security]

When you shut down does it say it is shutting down another PC all the time?

Read other 7 answers
RELEVANCY SCORE 69.2

Hi,

Not strictly a security question but my computer is on when I don't want it to be, so could be vulnerable.

Since connecting my new Compaq desktop (OS Vista) to Pipex Broadband through a Speedtouch wireless router (currently wired) I've found that the sleep or hibernate commands don't work - at least they do, but everything turns itself back on again after a few minutes, then off after the designated 10 minutes, then on again... ad infinitum.

My power-saving settings haven't changed at all but I'm obviously missing something!

I also installed a wireless mouse at around the same time - could that have something to do with it?

I'd be most grateful for any help.

Thanks!

Chris

A:(Resolved) Computer won't stay switched off [moved from general security]

Go into the BIOS and turn off "Wake on LAN".

Read other 9 answers
RELEVANCY SCORE 69.2

Hello,

I'm having a major problem with my PC. When I switch my PC on I hear 1 beep, my motherboards manufacturer's name pops on screen for a couple of seconds (Gigabyte) Motherboard, then one final screen with a black background and lots of white text on; after this screen passes, I'm left with a solid, black screen.

I have never had an issue with this before. I cannot boot into safe mode after hitting F8. However, I am given the option to when I hit this key. But I?m left with a black screen.

I've removed the computer from the mains, swapped the ram chips over, and replaced; I have cleaned the fans and removed the computer from the mains.

I use this machine for gaming, and have been incredibly reliable for the last 5 years.

The system specs are:
500W PSU.
NVidia Gefore 9600GT 512MB graphics card.
2x 2GB DDR2 RAM.
Can't remember the processor, but is decent for the games I play, and as I say, have not had a problem in the last 5 years.

None of my components are over clocked, nor have I ever tried.

NOTE: The last thing I did before the failure, a message popped up on my taskbar (A fake scanner) telling me I had hundreds of infections, quickly ended its process, ran malware bytes and deleted my temp files. After MWB completed, I restarted my computer. So it could very well be virus related?

Any help on resolving this problem would be greatly appreciated.

Thanks!

EDIT: When I read the MWB log, it actually said there were no infections of any typ... Read more

A:Windows Won't Boot - Black Screen [Moved from General Security]

Am I correct in assuming that you have windows XP?

Computer stops responding with a black screen when you start Windows XP

Read other 2 answers
RELEVANCY SCORE 68.4

Hello

I recently logged onto my computer today
I signed into my McAfee Security Suite '06 Privacy service.
And I had a yellow, speech-bubble style warning message saying

"MpfService.exe - Corrupt File
The file or directory \Documents and Settings\All Users\Application Data\Mcafee.com Personal Firewall\data\log.edb-journal is corrupt and unreadable. Please run Chkdsk utility."

I searched 'MpfService.exe' On google
And according to most websites it is caused by the 'Troj/Killav-V' trojan.

It is apparantly ment to turn off all active anti-virus
which is making me quite worried for the safety of my computer

The message I recieve appears repeatedly roughly every 10 seconds after
I close it.

If anyone can help, I would appreciate it greatly

A:Help! Troj/Killav-V - Trojan! MpfService Corrupt![Moved from General Security]

Hello Puppet Master:



Please read this thread


Please download HijackThis . This program will help us
determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded. Click
on the "Unzip" button to install. It will by default install to the directory - C:\PROGRAM FILES\HIJACKTHIS\
Run a scan and save the log file. Do not fix anything in HijackThis since they may be harmless.
Make sure to include the System information at the top of the log as well.


Post your HJT log in HJT Log Help Forum
and an analyst will help you.

Read other 12 answers
RELEVANCY SCORE 62

SORRY! I think this thread needed to be put in the Hijack log one. Sorry, I'm new to this forum.

Let me first say that I am new to this website, and although I would tell people that I am good with computers, I'm very bad with system files and so on.

The error message I get is much like an error message for an application, asking to send or not send an error report. The error message is that "Run a dll as an App" as encountered a problem and needs to close.

I noticed the error when I tried to change the color of my desktop background. I can successfully change from picture to picture, but not color to color. The error also occurs when I try to change themes or styles, or basically any change that results in that windows box that says "please wait" while it changes the appearance of your desktop.

I have googled this error and found thousands of threads about it, and tried 100 different cleaners, anti-virus/spyware programs, and tried manipulating alot of things. I even tried reinstalling my video card drivers. Nothing seems to work.

I am aware that there might be a virus called rund"l"32 but i have never seen the single "l" type in my system tray, or anywhere else.

I would greatly appreciate any help to this problem, thanks.




----------------------------------------------------------
I have these by the way

Deckard's System Scanner v20071014.68
Run by DePauw on 2008-07-13 18:37:43
Computer is in Normal ... Read more

Read other answers
RELEVANCY SCORE 58

Ars reports from the Linux Security Summit?and finds much work that needs to be done.

The Linux kernel today faces an unprecedented safety crisis. Much like when Ralph Nader famously told the American public that their cars were "unsafe at any speed" back in 1965, numerous security developers told the 2016 Linux Security Summit in Toronto that the operating system needs a total rethink to keep it fit for purpose.

No longer the niche concern of years past, Linux today underpins the server farms that run the cloud, more than a billion Android phones, and not to mention the coming tsunami of grossly insecure devices that will be hitched to the Internet of Things. Today's world runs on Linux, and the security of its kernel is a single point of failure that will affect the safety and well-being of almost every human being on the planet in one way or another.

"Cars were designed to run but not to fail," Kees Cook, head of the Linux Kernel Self Protection Project, and a Google employee working on the future of IoT security, said at the summit. "Very comfortable while you're going down the road, but as soon as you crashed, everybody died."

Continue Reading - http://arstechnica.co.uk/security/2016/09/linux-kernel-security-needs-fixing/

Share your thoughts and opinions below.
 

A:Linux kernel security needs a rethink, Linux Security Summit

Same thing that has been argued time and again about Windows OS over the years...
 

Read other 1 answers
RELEVANCY SCORE 57.2

I AM CLEARING AND REWORKING MY NT4 AND WAS WONDERING ABOUT A LINUX OS TO WORK ALONG WITH IT IN A PARTITION.
COULD ANYONE RECOMEND A GREAT BROTHER?
I HEARD THAT CORELS LINUX IS SUCH A PLAYER WITH NT4. ANY OTHER LINUX OS THAT MAY BE BETTER? I AM A VERY NEWBIE AT THIS POINT>

THANKS------------OKOKOPO

 

A:{Moved to Linux Forum} - NT-4 AND LINUX ?

Greetings

OK, I have never worked with Corel's Linux, but I have been told that it is a nice version to learn the Linux GUI.

Other good version's to learn on are Mandrake and Red Hat. But, if you want to get more power out of your linux installation, you need to use distributions like Slackware, or Debian.

And... I am sure that another Linux fan will have a completely different point of view. Oh well... If you want, I can move this thread to the Linux forum, and you can see what their reaction is.

My best solution for you, is to buy a "Linux for Dummies" type of book, which should come with a free CD with a Linux distribution on it. That way, you get a beginner's Guide to Linux, plus a pressed bootable CD.

What I can give you, are specific instructions to installing linux as a dual boot system with NT.

If you go to www.xperts.co.za/reuel/multiboot I have specific instructions on how to dual boot your system with NT.

Hope this helps

------------------
Reuel Miller
Windows NT Moderator (yes, that does make me biased )

[email protected]

Website: www.xperts.co.za/reuel/multiboot

Every morning is the dawn of a new error...
 

Read other 2 answers
RELEVANCY SCORE 56.8

A few weeks ago I began starting to have to log in with password twice to enter hotmail. Didnt think much of it when it started.

Last friday, my internet explorer was taken over by an anti-virus page saying I was infected and to download this cleaner - it appeared to be a MS look alike so I didnt download but it had reset my home page to "about-blank" and each time I opened IE the same page opened.

I tried AVG but it didnt clear the problem and it has been a long time since I have had a problem I dont really know where to start.

I did try to down load and run some of the packages noted in this forum but am really at a loss where to start to clean up the machine.

I did remember that it may help if I reverted to a previous system point and did this. This has solved the IE problem but since I have not cleaned the system i assume that the bug it is still there and I would like to get it cleaned out.

Can you suggest the best method and programs to use to clean the computer up.

I am reasonably computer literate but not on new things or ones that I dont really understand like this...... hard for old dogs to learn new tricks.

I am running on Windows XP with service pack 3 installed.

The computer is a Dell Dimension E521 Athlon 64 desktop.

Any and all assistance will be greatfully accepted.

Regards

Chris
 

Read other answers
RELEVANCY SCORE 53.6

Hi
Is there a way/utility to change Windows 7 x64' folders' permissions for user (C:\Users\SS) on a linux pc?

I have the boot up problem (Win 7 OS) of black screen of death with mouse pointer, after accessing the folder from Windows 10 and accidentally clicked Ok to to the prompt that 'You dont currently have permission to access this folder - click ok to permanently get access to this folder' as win 10 prompt me. So it no longer boots in to win 7 (my main win 7 which I dont want to reinstall).

As a second drive in a another win 7x64 OS, I cant even access its content or size, no bar next to the drive, just the label and the word NTFS, double clicking it you get the message 'F:\is not accessible. Access denied.' - it looks just like it is corrupted or bad partition or bad boot sector, but it isnt, I know that SSD couple of years old, never had a problem.

I run CHCDSK & SFC /scannow no problems found. Yet if I boot from this drive, it goes very fast to the Black Screen Of Death with mouse pointer - no commands, task man or any key entry, just a moveable mouse pointer, no log in, if I press press on/off button it sees that and says 'shutting down' and does but thats it.

Since I cant access it in windows environment, I am trying to access and repair it in linux if possible

Thanks for any pointers, bear in mind I am very beginner in linux.

Sean

A:How to change Win 7 folder permissions on a linux PC?

I suspect it will be ridiculously difficult to do what you are asking.

If the permission changes cascaded through the W7 folder structure, it won't be feasible to manually repair the permissions.
You might have to copy all of your data from W7 (you can use a Linux Live CD/DVD/USB to do that) and then reinstall W7.

You should wait to see if other members have some suggestions though.

You should also create a backup HDD/SSD image of your system, using something like Macrium Reflect, before you attempt repairs (just in case anything goes wrong).

Tutorials
Imaging with free Macrium
MACRIUM REFLECT - Create Bootable Rescue USB Drive

Read other 1 answers
RELEVANCY SCORE 53.6

and all suckers that are stickin to me!
spybot cant do it, AVG can't do it, AND F-Prot can't do it
i think the list is up to some variety of Virtumonde, some ******* called Banker.FAT, and a whole lot of other trojans and downloaders that show up in F-Prot's constant warning window, but never in a scan.

HJT Log:
Logfile of HijackThis v1.99.1
Scan saved at 10:19:17 PM, on 7/31/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\FRISK Software\F-PROT Antivirus for Windows\FPAVServer.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\avp.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\regsvr32.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\USoft\usoft32.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\FRISK Software\F-PROT Antivirus for Windows\FProtTray.exe
C:\Program Files\L... Read more

A:more viruses than i can count [Moved from General Sec]

Hello greenknotgrace,

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

It's IMPORTANT to carry out the instructions in the sequence listed below.

***************************************************

Download Combofix and save it to your desktop.

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

Close any open browsers.

--------------------------------------------------------------------

Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.


Double click on combofix.exe & follow the prompts. When finished, it will produce a report for you.
I'll need that report in your next reply so we can continue cleaning the system.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

--------------------------------------------------------------------

Run a new scan with HijackThis and save the log.

--------------------------------------------------------------------

Open HijackThis
*Click on the "Configure" button on the bottom right
*Click on the tab "Misc Tools"
*Click on the Box that says "Open Uninstall Manager"
*Click on the button "Save list"
The list will automatically be saved... Read more

Read other 3 answers
RELEVANCY SCORE 53.6

I need to get rid of trojan . I tried running the antivirus. But still find trojan . Now my system is hanging everytime.I use WindowsXP. Its very hard for me to even login. Can this problem be fixed in Safemode? These are the messages i get

TrojanDownloader:win32/zlob.BAH
Trojan win32/Vundo.D
Please help me.

A:Trojan Moved from General Forum

Hi Niaz,

Try running Spybot S&D and /or Malwarebytes from safe mode
Spybot
The home of Spybot-S&D!
Malwarebytes
Malwarebytes.org

Read other 9 answers
RELEVANCY SCORE 53.6

I was using IE 7 under Vista and suddenly found myself unable to download.

When I clicked on a file to download I was prompted to either Run or Save the file. Run worked fine, but Save did nothing. Actually it opened a dialog as if it was going to save the file but it never asked where to save it and the dialog immediately closed without downloading the file.

For giggles, I upgraded to IE8 Beta 2 to see if that would resolve my issues. Unfortunately, the same problem occurs in IE8. Stranger still, I don't have an option to uninstall IE8 (not that I need to) even under "Installed Updates".

I have since discovered that I have another problem that may or may not be related. If I try to manage add-ons, I receive "Internet Explorer has stopped working" and it shuts down.

Here's the really fun part. If I run IE as administrator there are no problems! I am able to download and manage add-ons without any trouble.

This makes me think that it's a permissions thing either on a file, folder, or in the registry, but I really can't imagine what it would be or where to start.

I'd really appreciate any suggestions.

Regards,
- Eric

A:Vista permissions [moved from ie]

A little more info regaring the problems I'm having. If I turn off UAC everything in IE is fine.

I also noticed what I believe to be another issue that probably started about the same time. With UAC on, I can't delete a file or create a folder in a protected folder. For example, I tried to create a folder in c:\Program Files and it doesn't even prompt for approval, it just does nothing. If I try to delete a file or folder it prompts for approval but upon hitting Continue fails to delete the file or folder. If I run a command prompt as administrator, I can delete/create just fine.

I'm not sure this is related but since my IE problems go away when run as administrator, I wouldn't be surprised.

Thanks in advance for any suggestions.

- Eric

Read other 6 answers
RELEVANCY SCORE 52.8

Don't know if already mentioned, but what really drives me up the wall, is the way IE8 opens a new link window, only half window from top to the middle of the screen.

A:IE8 Not remembering window size - moved from general

  
Quote: Originally Posted by joschw


Don't know if already mentioned, but what really drives me up the wall, is the way IE8 opens a new link window, only half window from top to the middle of the screen.


Yet another good reason to use FF.

Read other 9 answers
RELEVANCY SCORE 52.8

Hi there! I'm new to the forums so go easy on me :S. Recently my laptop has been acting oddly so I wanted to use sfc /scannow to see if it could fix up anything problematic

I've performed the sfc /scannow in cmd as an admin and it came up with "Windows resource protection found some files but was unable to fix some of them".

Then I took the step of Dism /Online /Cleanup-Image /RestoreHealth and it seemed to have gone well. So I rebooted my computer and tried SFC /scannow and it came up with the same unable to fix some of them. I have even tried SFC /scannow 3 times but it came up with the same unable to fix spiel.

I've attached the CBS log because I can't make any sense of it. Could anyone please tell me if it is anything important/crucial that is affecting my computer in the log or if that the "unable to fix some of the files" isn't for anything important?

Thanks.

A:Issues with missing permissions [Moved]

You appear to have run the SFC at least twice - and uninstalled an update in between?
The earlier scan had the following error...

Code:
Line 3900: 2015-07-11 16:25:54, Info CSI 000008f1 [SR] Repairing 1 components
Line 3901: 2015-07-11 16:25:54, Info CSI 000008f2 [SR] Beginning Verify and Repair transaction
Line 3904: 2015-07-11 16:25:54, Info CSI 000008f4 [SR] Cannot repair member file [l:24{12}]"utc.app.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.3.9600.17842, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
Line 3907: 2015-07-11 16:25:54, Info CSI 000008f6 [SR] Cannot repair member file [l:66{33}]"telemetry.ASM-WindowsDefault.json" of Microsoft-Windows-Unified-Telemetry-Client, Version = 6.3.9600.17842, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
- which according to MS isn't a problem.

The later run had no errors at all as far as the normal extract shows.

However there are a large (400+) number of folders which apparently have no Owner - here's a couple of the errors from the log...

Code:
Line 3684: 2015-07-11 16:23:57, Info ... Read more

Read other 9 answers
RELEVANCY SCORE 52.8

I downloaded a software app. called DAZ 3D. This message popped up: DAZ Install manager cannot run with elevated permissions. What do I do? I am 63 yrs and not all that bright anymore. I do not know what to do and I am afraid of causing more problems or worse problems. I have tried the following: right click icon, click properties, under compatibility i clicked run as admin. didn't work. I went to firewall and added daz3d, restarted computer, didn't work. I went on-line for answers and they scared me ... thus I turn to you for step by step instructions. This old veteran would sure be grateful for your help.
 

Read other answers
RELEVANCY SCORE 51.6

Hello,

I did a system restore the other day and now my Eclipse workspace, which was in my "Documents" folder, is now gone. When I run eclipse, it opens the workspace still, but i cannot save any changes i make to my projects. It says "Cannot write to file C:\users\robert\workspace\my app\res\layout\file_name_here." When I look in my users folder in c:\users\username\, the username folder has lock on it. In that folder is a workspace folder, but my projects in it have only 2 files when they really should have dozens. I tried giving full permissions to my username for that folder but permission was denied. Does anyone know how I can fix this issue?

Here is an error message when trying to build the project:
"The project was not built due to "Error deleting resource '/My App/bin/classes.dex' from the workspace tree.". Fix the problem, then try refreshing this project and building it since it may be inconsistent"
Thanks

A:System Restore moved my files and changed permissions

Welcome
This all powerful adminsitrator will probably be able to access the files. Then change permissions.
Built-in Administrator Account - Enable or Disable[2]=User Accounts
Permissions - Allow or Deny Users and Groups

Download and try to find the files with recuva
http://download.cnet.com/Recuva/3000...-10753287.html

Read other 9 answers
RELEVANCY SCORE 51.2

This advice is reposted from the advice given by Tony Klein, the acknowledged spyware & malware expert who supports many forums on the net.

I have added a few minor updates to it

You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:

1) Watch what you download!
Many freeware programs, and P2P programs like Grokster, Imesh, Kazaa and others are amongst the most notorious, come with an enormous amount of bundled spyware that will eat system resources, slow down your system, clash with other installed software, or just plain crash your browser or even Windows itself.

2) Go to IE > Tools > Windows Update > Product Updates, and install ALL Security Updates listed.
It's important to always keep current with the latest security fixes from Microsoft. Install those patches for Internet Explorer, and make sure your installation of Java VM is up-to-date. There are some well known security bugs with Microsoft Java VM which are exploited regularly by browser hijackers.

3) Go to Internet Options/Security/Internet, press 'default level', then OK.
Now press "Custom Level."
In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to 'prompt', and 'Initialize and Script ActiveX controls not marked as safe" to 'disable'.

Now y... Read more

A:General Security Information, How to tighten Security Settings and Warnings

Read other 7 answers
RELEVANCY SCORE 51.2

This is copied by dvk01's post in the Malware Removal/HijackThis forum.

This advice is reposted from the advice given by Tony Klein, the acknowledged spyware & malware expert who supports many forums on the net.

I have added a few minor updates to it

You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:

1) Watch what you download!
Many freeware programs, and P2P programs like Grokster, Imesh, Kazaa and others are amongst the most notorious, come with an enormous amount of bundled spyware that will eat system resources, slow down your system, clash with other installed software, or just plain crash your browser or even Windows itself.

2) Go to IE > Tools > Windows Update > Product Updates, and install ALL Security Updates listed.
It's important to always keep current with the latest security fixes from Microsoft. Install those patches for Internet Explorer, and make sure your installation of Java VM is up-to-date. There are some well known security bugs with Microsoft Java VM which are exploited regularly by browser hijackers.

3) Go to Internet Options/Security/Internet, press 'default level', then OK.
Now press "Custom Level."
In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to 'prompt', and 'Initialize and Sc... Read more

Read other answers