Over 1 million tech questions and answers.

security errors

Q: security errors

I was having software conflicts, so i disabled all services & restarted with only the basic, then added them back one by one. Now i am having problems using any programs as i am gettin the message ("windows cannot access the specified device,path or file. You may not have the appropriate permission to access the item") I even tried to assign software permissions using the regedt32, but still no luck. Uninstallin & re installing didnt work either. ANY HELP???

RELEVANCY SCORE 200
Preferred Solution: security errors

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: security errors

Read other 8 answers
RELEVANCY SCORE 46.4

I have had two different instances of Internet Security 2010 over the past month and I have been able to remove that, but now I think I have a nasty rootkit that is affecting my windows installer package and Generic Host Process for Win32 services. Also when browsing the web my search results are redirected usign searchsite.com and other websurvey related sites.I ran the DDS scan and have posted the log, but the RootRepeal crashes and does not finish. Thank you for the help, if possible.DDS (Ver_09-12-01.01) - NTFSx86 Run by AK at 19:25:09.20 on Tue 01/26/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_10AV: PC Tools AntiVirus 5.0.0.22 *On-access scanning enabled* (Updated) {832E7172-E406-4bb2-8B19-6D29F2C93A98}AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}============== Running Processes ============================= Pseudo HJT Report ===============uStart Page = hxxp://google.com/uInternet Settings,ProxyServer = http=127.0.0.1:5555uInternet Settings,ProxyOverride = <local>BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dllBHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dlluRun: [ctfmon.exe] c:\windows\system32\ctfmon.exeuRun: [seten] c:\windows\system32\mxy... Read more

A:Removed Internet Security 2010, now Google redirects, windows installer service errors, Generic Host Process errors

Hello, my name is fenzodahl512 and welcome to the forum.. Please do the following....Please download The Comedian.exe by Rorschach112 to your desktopPlease disable all of your antivirus/firewall before doing this step. Please visit HERE if you don't know how..Double click the program to run it. It will only take around several minutes to run.It will do a series of tasks and tell you when each one is finished.You will be prompted to press any key after each stepWhen it is done it will close and exit itself automatically.You can delete The_Comedian.exe once it is finishedSTOP HERE! if you can't complete this step.. Tell me more about it..NEXTPlease download OTL by OldTimer and save it to your desktop.Under the Custom Scans/Fixes box paste this inCODEnetsvcs%SYSTEMDRIVE%\*.exe/md5starteventlog.dllscecli.dllnetlogon.dllcngaudit.dllsceclt.dllntelogon.dlllogevent.dlliaStor.sysnvstor.sysatapi.sysIdeChnDr.sysviasraid.sysAGP440.sysvaxscsi.sysnvatabus.sysviamraid.sysnvata.sysnvgts.sysiastorv.sysViPrt.syseNetHook.dllahcix86.sysKR10N.sysnvstor32.sysahcix86s.sysnvrd32.syssymmpi.sys/md5stop%systemroot%\*. /mp /sCREATERESTOREPOINT%systemroot%\system32\*.dll /lockedfiles%systemroot%\Tasks\*.job /lockedfilesDon't change any setting... Just click on the Run Scan button.. Let it scan till finish..Then a log will pop-up at your Desktop. Post the content of the log hereNEXTWe need to scan for Rootkits with GMERPlease download GMER from one of the following locations, and save it to your deskt... Read more

Read other 19 answers
RELEVANCY SCORE 39.6

The policies for my domain were deleted by a vicious cyber-attacker.

I rebuilt them to the best of my knowledge, but I am still getting event ID errors, all on my exchange server (Server name MSX):

Event ID 565:

Object Open:
Object Server: Microsoft Exchange
Object Type: Microsoft Exchange Logon
Object Name: /o=**** Ex/ou=First Administrative Group/cn=Recipients/cn=ppef
New Handle ID: -
Operation ID: {0,2036762}
Process ID: 3344
Primary User Name: MSX$
Primary Domain: ****
Primary Logon ID: (0x0,0x3E7)
Client User Name: *****
Client Domain: *****
Client Logon ID: (0x0,0x1F1402)
Accesses Unknown specific access (bit 0)

Privileges -

Properties:
Event 675 Errors:

Pre-authentication failed:
User Name: *****
User ID: ****\*****
Service Name: krbtgt/*****
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: 172.16.50.5
Event 529 Errors:

Logon Failure:
Reason: Unknown user name or bad password
User Name: *****
Domain: *****
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: LAP-KGILLIAM
 

Read other answers
RELEVANCY SCORE 39.6

can't download av3 because security certificate errors
 

Read other answers
RELEVANCY SCORE 39.6

Earlier today I cleared all recent history (Cookies, Cache, etc) and perhaps visited a site that could have sent me a virus.

Since them, the sites I regularly visit (Facebook, Yahoo) are not able to confirm their security and are forcing me to create an exception. I can't log on to my regular client-server programs like Windows Messenger (it's telling me that the it is currently unavailable). Sometimes I am being redirected to sites that I have never tried to go to, and earlier it asked me if I was ready to install Internet Explorer 9 (I use Firefox and did not request that).

I have restarted my computer and my wireless internet connection. Has anyone experienced this and fixed it?

Thanks,
Tal
 

A:Solved: Security errors

Guess my date was set to 2010 and that was causing all of this..
 

Read other 1 answers
RELEVANCY SCORE 39.6

Didn't know what forum to place this in. Having issues with Kerberos Errors and my SCCM server. I have another issue, but I think this is related. I get the following event in my PC.

The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server aas-vm-sccm$. The target name used was HTTP/aas-vm-sccm.aas.global.amphenol-sensors.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Please ensure that the target SPN is registered on, and only registered on, the account used by the server. This error can also happen when the target service is using a different password for the target service account than what the Kerberos Key Distribution Center (KDC) has for the target service account. Please ensure that the service on the server and the KDC are both updated to use the current password. If the server name is not fully qualified, and the target domain (AAS.GLOBAL.AMPHENOL-SENSORS.COM) is different from the client domain (AAS.GLOBAL.AMPHENOL-SENSORS.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
Now when I run the setspn -Q http/tnwd07190.aas.global.amphenol-sensors.com I get
Checking domain DC=aas,DC=global,DC=amphenol-sensors,DC=com
CN=AAS-SvcAdmin,OU=Svc&Floor Accounts,OU=Users,OU=Taunto... Read more

Read other answers
RELEVANCY SCORE 39.6

Every time I go into Internet Explorer, I get the message "Internet Explorer blocked this website from displaying content with security certificate errors."  How do I stop receiving this message?

A:Security certificate errors

Welcome to BleepingComputer.
 
You posted you get this message every time you go into Internet Explorer.  Does this happen when you just click on it to open the search engine?
 
Have you tried a different search engine?

Read other 1 answers
RELEVANCY SCORE 39.6

I try running a game but when i run it i have this window that pops up and it says Cancel under it it says accept. Also says the program is unidentifyed so how can i fix this?

A:Vista security errors

Hello...

Did you purchase this game or did it come installed on your computer?

Does your username have administrative priveleges?

regards. . .

jcgriff2

Read other 6 answers
RELEVANCY SCORE 39.6

hey, im running xp and i keep having them security we need to close messages popping up time to time....it happends alot when i try to play videos which are mainly xvid,avi so im not sure if its that. ive uninstalled codecs and all sorts and still it was doing it.....

any clue would be helpful, appreciate it kindly
thanks
 

A:Security closed down errors?

You need to run some online scans to remove spyware and virus...
www.bitdefender.com
www.ewido.net
And then take some action to protect yourself for the future.
 

Read other 1 answers
RELEVANCY SCORE 39.6

I keep getting the same pop-up over and over on everypage( IE hasblocked this web site from displaying content with security certificate errors) and can not log on to an email page. I had no problem a month ago, but now its bad. I tried enabling certain propmts but that just makes it worse because the security settings are to low. Thanks for the help and here is the HJT

Logfile of HijackThis v1.99.1
Scan saved at 8:26:07 AM, on 2/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\LxrJD31s.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\mcafee.com\vso\mcvsshld.exe
c:\progra~... Read more

A:security certificates errors

The computer calander was set back to 2006
 

Read other 1 answers
RELEVANCY SCORE 39.6

OK regarding windows vista what is the very best internet security suite you know fire wall anti-virus spyware the whole shabang and also something either in the same package or a whole nother software for when lets say active-x isnt working or you get an error message when a video game crashes just those stupid little errors occur with windows what is good for fixing that mind you I use my pc for the office e-mail and some gaming on and offline if anyone is into this kind of stuff and knows of some really top of the line software Id appreciate it because I just got rid of computer assiciates internet security suite because it sometimes took 10-15 minutes to start up my pc and get online now that I am on windows firewall its a couple of minutes so if anybody can help its much appreciated thanks
 

A:security suite and something for errors

Read other 6 answers
RELEVANCY SCORE 39.6

Hi all - I'm having an error throughout many of the security and compliance pages in my instance - not getting too much help as yet so thought I'd post here. The errors I'm seeing are as follows:


error








The requested search root 'APCPR06A002.prod.outlook.com/ConfigurationUnits/XXXXXXXXXXXXXX.onmicrosoft.com/Configuration/Transport Settings/Rules/SafeAttachmentVersioned' is not within the scope
of this operation. Cannot perform searches outside the scope 'apcprd06.prod.outlook.com/Configuration/Services/Microsoft Exchange/ExchangeLabs'.








The requested search root 'APCPR06A002.prod.outlook.com/ConfigurationUnits/XXXXXXXXXXXX.onmicrosoft.com/Configuration/Transport Settings/Rules/AntiPhishVersioned' is not within the scope of this operation. Cannot
perform searches outside the scope 'apcprd06.prod.outlook.com/Configuration/Services/Microsoft Exchange/ExchangeLabs'.

The requested search root 'APCPR06A002.prod.outlook.com/ConfigurationUnits/XXXXXXXXX.onmicrosoft.com/Configuration/Transport Settings/Rules/SafeLinksVersioned'
is not within the scope of this operation. Cannot perform searches outside the scope 'apcprd06.prod.outlook.com/Configuration/Services/Microsoft Exchange/ExchangeLabs'.

Any thoughts?

Read other answers
RELEVANCY SCORE 39.2

Right, im running out of ideas!
Ive recently reinstalled my system, full format, full reinstall of everything etc.
I had only got as far as windows, firefox, winamp winrar and other lightweight apps.
I was in the process of starting to load applications back on such as photoshop, etc and came across a few problems. I have also being changing settings at the same time in between each restart. Unfortunately, I now dont really know what has caused the problems.

The first one is the Windows security Alert. It pops up and upon investigation, it says that I need to turn automatic updates on. When I click to turn them on they do indeed turn on but the security centre does not seem to know so. It therefore wont go away. Obviously I can change the settings to tell it not to monitor this and it will go away but this isnt really a prevention, its just hiding the problem.

Secondly, during boot up, I get the 'no disk' (c0000013) error message.
I changed drive letters for my DVD drives and secondary HDD so I suspect this is it. What is strange is there there is nothing installed on the HDD or anything in the DVD drives that windows should be looking for. Also, when I deleted the list of recently used docs, the problem went away on restart, and came back on a subsequent restart.

Finally (and this may be just a clue rather than a problem in its own right) explorer need to end task every time I restart.

All these things happened after I had changed the drive letters and also ins... Read more

A:Windows security alert - & various other errors

Well I have solved a few of the problems but seem to have generated more. I have got rid of the windows security centre but only by telling it not to monitor the updates anymore....not really a solution!
I have also stopped the 'No Disk' error by clearing out my 2nd HDD and removing shortcuts etc after renaming the drives.

Explorer still needs to end task on every shut down.

I have now installed Adobe suite CS3 and also office 2003 with seemingly no additional problems. However, opening any file from windows and even loading pages in Firefox seems to be taking much longer than it should. Something is going on in the background each time i open a file. Is there any way of keeping an eye on what is happening in the background as I am doing things on the pc and therefore try and track down problems?
 

Read other 2 answers
RELEVANCY SCORE 39.2

On a friends pc, whenever I run liveupdate, the virus defs update, but the Anti-Virus program will not update. It says it cannot update the savrtgui.dll...research shows that this is related to Auto-Protect by Symantec. I have uninstalled the program using the RNAV, RNIS, and even Symclean tools. I have also downloaded the registry removal tools. Made sure all of the associated folders were deleted as well as the Symantec folder in the Registry under HKLM & HKCU. And after all of this, on a SUPER Clean install, it loads fine, but I still get the error that savrtgui.dll cannot be updated.

There is no info on symantecs site in ref to this file, but to the Anti-virus not being updated...and I have performed there 3 steps to no avail. Someone mentioned uninstalling the program completely AGAIN, and unregistering the dll, have not tried that. Surely there must be a better way. The OS is 98SE.

Any help would be greatly appreciated, and thanks in advance.
 

A:Norton Internet Security errors

Read other 10 answers
RELEVANCY SCORE 39.2

Hi Everyone!

I have recently been getting security errors and wonder if I have some virus or it is my server or onboard filter.

I use K9 on my computer.

When I am on Amex's site and I try searching or stuff I sometimes get this message - "The site's security certificate is not trusted!
You attempted to reach search.americanexpress.com, but the server presented a certificate issued by an entity that is not trusted by your computer's operating system. This may mean that the server has generated its own security credentials, which Google Chrome cannot rely on for identity information, or an attacker may be trying to intercept your communications."

A few times a day a window pops up on my screen saying something like "this site's security certificate is not trusted etc." about netspark.com with an icon on the start menu of java.

Thanks for any help or advice!

Attached is the zip from DDS and GMER.

Here is my DDS log

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by Binyomin at 1:38:43 on 2012-07-09
Microsoft Windows 7 Starter 6.1.7601.1.1252.1.1033.18.2038.1159 [GMT 3:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\... Read more

A:security errors java oracle?

Here is the Security Alert from java/oracle.

This page requires a secure connection which includes server authentication.
The Certificate Issuer for this site is untrusted or unknown. Do you wish to proceed?
Yes/No/View Certificate/More Inf

The Certificate info shows "This certificate cannot be verified up to a trusted certification authority.

Issued to: jaadl-esd-secure.oracle.com
Issued by netspark.com..."

Read other 1 answers
RELEVANCY SCORE 39.2

OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 32 bit

I have been getting this pop up box. Saying Internet Explorer blocked this website from displaying content with security certificate errors.

Is there a way to stop this pop up box from coming up with every page I browse on the web?
It's driving me crazy and I don't have far to go.

handy man
 

A:Solved: Security Certificate Errors

Read other 16 answers
RELEVANCY SCORE 39.2

in my event viewer my pc is full of errows
 

A:Can't install security apps/ errors

im aving problems with my vlc freezing all the time and i cant seem to install my security services it installs but it doesnt show only in add n remove
 

Read other 2 answers
RELEVANCY SCORE 39.2

Hello,

I have Windows Vista Home Edition and use Internet Explorer 9. I stopped using my PC for a couple of months, as I had no internet access. When I resumed internet service through Comcast cable, as soon as I went online, I started getting security certificate warnings and errors at practically every site. Also, when I click on links in web pages, I get errors about the page not found, and it's been a complete mess. I have run virus scans and malware scans twice and all is well here. In desperation, I installed Reg Cure Pro to see if it would fix the problem, but it did not. Another thing that is happening is that I'll click on a link to a web page but the page that opens isn't for the website that the link was for.

I don't know what could be wrong. The last time I used my PC prior to restarting internet service, it was fine. The clock's date and time are up to date.

Any suggestions? Thank you.

Jolu
 

A:Security certificate errors at every site

Uninstall Reg Cure Pro then. Follow this guide.
< content deleted by moderator >
We do not send people off to third party sites for general advice
 

Read other 2 answers
RELEVANCY SCORE 39.2

Hello!

I recently changed my computer and after installing Windows XP SP3, I also installed Eset NOD32 Smart Security 4.
At first it all went all, until yesterday, when starting Windows I encountered two errors from NOD32, one about starting a proxy server, which I do NOT use, the other about the firewall that does not work. Errors prints attached.
Where can this be from and how can it be solved??
Note: Reinstalling didn't work.

Thanks!
 

A:NOD32 Smart Security errors

Read other 10 answers
RELEVANCY SCORE 39.2

Hi I am experiencing pop ups of windows security alerts every few mins and a lot of my programs like task manager, clock, securty settings have been restricted from admission and i have no access to them. also my internet explorer's home page cannot be changed and is always on google.com and the ie has a lot of pop up advertisments that i never had before. here is the HJT log :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:08:35 PM, on 10/30/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEA.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\winter.exe
C:\WINDOWS\system32\ctfmon... Read more

A:Windows Security Alert + others errors!

the control panel also doesn't work and i'm afraid that this can be serious. any help please? thanks in advance
 

Read other 3 answers
RELEVANCY SCORE 39.2

The security certificate presented by this website was issued for a different website's address.
I received subject error several times with the above statement when trying to access my bank credit card info. I contacted the bank and explained the problem. Bank stated problem was my browser (IE11) and site was secure.

I have accessed the site many times with IE11 without the error. Anyone ever experience the same ? Can these certificate errors be false, a result of browser incompatibility, or another problem ?

A:Website Security Certificate Errors

Found an answer in the MSN Community Forums.

Manually type in the complete url, including www, solves the issue.

Read other 1 answers
RELEVANCY SCORE 39.2

Hello, since Windows Security Center crashed and gave me errors like "no antivirus detected in your system" I run ComboFix and it fixed up, can you help me read the log?I know that I shouldn't had to run Combofix but I ever used it in various computers without problems and all other problems detected no viruses.Thank youComboFix 12-08-28.03 - user 29/08/2012 10:45:58.2.2 - x86
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.39.1040.18.2815.1714 [GMT 2:00]
Eseguito da: c:\users\user\Desktop\remover.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
FW: PC Tools Firewall Plus *Disabled* {175D0B73-9F8F-2CA9-8BF1-62277A276DC9}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Creati Da 2012-07-28 al 2012-08-29 )))))))))))))))))))))))))))))))))))
.
.
2012-08-21 16:40 . 2012-08-29 08:51 -------- d-----w- c:\users\user\AppData\Local\temp
2012-08-20 17:15 . 2012-06-29 08:44 6891424 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ADB4B259-FDF6-473D-B975-573E2C9B3683}\mpengine.dll
2012-08-20 17:12 . 2012-07-04 21:14 41984 ----a-w- c:\windows\system32\browcli.dll
2012-08-20 17:12 . 2012-07-04 21:14 102912 ----a-w- c:\windows\system32\browser.dll
2012-08-20 17:12 . 201... Read more

A:windows security center errors

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Please DownloadTDSSKiller.zip>>> Double-click on TDSSKiller.exe to run the application.Click on the Start Scan button and wait for the scan and disinfection process to be over.If an infected file is detected, the default action will be Cure, click on Continue
If a suspicious file is detected, the default action will be Skip, click on Continue
If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.Download http://public.avast.com/~gmerek/aswMBR.exe (aswMBR.exe) to your desktop. Double click the aswMBR.exe to run it Click the "Scan" button to start scan. Upon completion of the scan, click Save log, and save it to your desktop. (Note - do not select any Fix at this time) <- IMPORTANTPlease post the contents of that log in your next reply.There shall also be a file on your desktop named MBR.dat. Righ... Read more

Read other 5 answers
RELEVANCY SCORE 38.8

I tried to upload 3 files for everyone to see. I have asked this question in general. However, I neatened it up and clarified some things.

Most "secure" operations I do on the internet seem to give me errors. While it primarily seems to be Google it is any site. I ran multiple virus and maleware scans. I have tried clean and fresh installs of IE, Chrome & Mozilla, I still get the same errors. I see no serious errors in my event log. Though I do not fully understand a lot. But I am having a serious problem. Sites I have been using for years, several all of the sudden are asking for security certs. I've used Penzu (attached) for yrs. Sometimes over the last 3-4 days it asks me for a cert other times it does not. I have a different cpu on another IP. I do not have these issues

Secure Connection Failed Timed out (Not as frequent) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. The webpage at https://plus.google.com/u/0/me?tab=wX might be temporarily down or it may have moved permanently to a new web address. GOOGLE absolutely was not down I have received some type of TLS errors?

When trying to log into yahoo messenger I receive:
yahoo messenger gives this error: Any use of this Certificate
constitutes acceptance of the DigiCert CP/CPS and the Relying Party
Agreement which limit liability and are incorporated herein by
reference. It wants me to add a new cert

Thank you in advan... Read more

A:Browser Security Errors with any Secure Operations

Check your firewall.
I'm not an expert with these situations, but in my experience the firewall causes these kind of things after some kind of an update from an antivirus.

Read other 13 answers
RELEVANCY SCORE 38.8

Hi everyone,

Just found this forum. Hopefully there's someone here who could shed some light on my problem.

Several of my computers have security descriptor errors as reported by Norton's Disk Check and Microsoft's Check Disk. Each one goes through the process of rebooting the machine and attempting to "fix" the erros, but regardless of which utility I use, neither one is able to fix them.

One of the computers is a fresh install. The other one I've been using for a while. I've ruled out physical problems with the hard drives (using HD Tune) and ruled out RAM-related problems using Memtest.

What am I overlooking here? Does anyone have any ideas?

--Gary D.

A:Help! Security descriptor errors driving me insane

hello & welcome to TSF,

lets try this for starters to see if we can get your chkdsk working right so that the issues may be resolved brfor going into more intense trouble shooting or tacktics

steps
------------------------------
now what i need to do is go to your (device manager)

now once there you will want to select from the toolbar of the window(veiw) then a drop down menu / from it you will select (show all hidden devices)

now if you see any (red or yellow) quotation marks , make a note of what they

now go to the (event veiwer) this is thru the (administrator tools) in the control panel
here you will find 3 to 4 subcatagories

you will want to check each of them for this is where windows keeps track of all errors
now you will want to make notes of the errors that have been recorded ( you do not have to make notes of double entries just of the dates of their happenings & how many there is)
you will get more information on the errors if you (right) click them / then select properties
----------------------------
also
----------------------------

Insert your XP disk and boot from the disk
Select recovery console
follow the promts until you are in DOS
C:\windows
at the above prompts type FIXMBR

Why?
This will fix the Master Boot Record for Windows it will ask you if you are sure and follow the prompts

once complete type CHKDSK /r
that is CHKDSK space /r
this will check the disk and repair any bad sectors

once comp... Read more

Read other 9 answers
RELEVANCY SCORE 38.8

Keep getting blue screens with KERNAL.error and then it has to restart can happen at anytime doesn't matter what I am doing.  How do I get rid of this screen coming up??  it's driving me crazy!!! 

Read other answers
RELEVANCY SCORE 38.8

Hi.
So I have a new computer that I just installed a new security software, CA internet security suite 2009. I had uninstalled the Norton Security that had come with it because i didn't really like it and the the CA ISS was on sale. Anyway to my problem...

Now I'm getting errors form Windows Vista that says Host Process has stop working, windows is looking for a solution.
CA has no help solution for this problem on their support website. I can't really see if this is effecting how my computer runs but I get the error all the time. I was just seeing if there was a something I could do to fix the problem.

Thanks Jen
 

A:New security software install, getting errors from vista

Hi, I did a google search and a similar thread on our forum was talking about this error message on new machines. Some people updated their video and HP printer drivers and added more RAM. They did not have the CA internet security suite.
 

Read other 1 answers
RELEVANCY SCORE 38.8

Just came on this computer to help someone with their printer and found I can't do much of anything. 
 
Microsoft Security Essentials will not open, receive error message.
Windows Updates will not work or open, hover over task bar and claims, "can't check for updates"
I am also unable to view the system properties.
While waiting for a response I did find a download "package tracking toolbar by inbox" digital signature- Xacti
 
Don't even know where to start with this one, please help.

A:Errors with Security Essentials, Windows updates etc.

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware (MBAM) to your desktop.NOTE. If you already have MBAM 2.0 installed scroll down.Double-click ... Read more

Read other 1 answers
RELEVANCY SCORE 38.8

Heelo,
I have an old laptop .  Celeron processor with 1Gb RAM rnning XP Pro.  Works OK and used mainly for basic web browsing and Facebook.  However, the browser is incredidbly slow and I have noticed a lot of Security Certificate Error returns when browsing.  EG every Google site seems to come back with an error.  I ram Malwarebytes and it found issues which it cleaned, but problem still persitsts so I fear something else is at work.
 
Would appreciate some assistance in getting the unit clean.  Thank you.
 
 
Andrew

A:Very slow browser and security certificate errors

Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwarebytes' Ant... Read more

Read other 28 answers
RELEVANCY SCORE 38.8

I am having a strange problem with an old Toshiba Satellite 1000 laptop running XP Professional SP3. There is a boot delay that is similar to the delay that occurs in Windows 7 when some services are set to "Delayed Start," but Windows XP doesn't have that option. This computer actually has two delays. First, explorer.exe takes an extremely long time to start when Windows boots. Next, some ostartup items will only start after a delay.

Next, this computer thinks that most security certificates contain errors, but the same websites work on other computers without giving any errors. I have seen this happen when the date is set incorrectly, but the date and time are correct.

Finally, Malwarebytes will not update, possibly because of the security certificate issue. I get the following error code:
PROGRAM_ERROR_UPDATING (0, 0, Host not found)

What is wrong? Could it be AOL or some old malware interfering? This computer only had SP1 on it until last week, but it was last connected to the Internet in 2008.

A:Boot delay and security certificate errors

Try reinstalling MBAM.Download AutorunsAfter extracting, double click autoruns and go to File - Save - Filename : Autoruns Save as type : Text. Copy and Paste the text on your next reply

Read other 10 answers
RELEVANCY SCORE 38.4

Hello,
Thanks in advance for the help.
My PC is running XP Home. I have a family member that is not very intelligent and always leaves me lots of spyware and malware type presents.

I can't restart my computer without the Windows Recovery Console coming up, and therefore I can't install anything that requires a restart, i.e. Windows Security updates. I have not, to my knowledge, made ANY hardware changes to this PC.

Here's my HijackThis Log:

Logfile of HijackThis v1.99.0
Scan saved at 9:24:49 PM, on 12/16/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\ggviewer67-33.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\WINDOWS\... Read more

A:Can't Install XP Security Updates due to Recovery Console errors

Hi

Make sure you have already run Adaware, Spybot S & D(check for updates) as these will do a preliminary clean first.Some files below may not be present after running the above programs.

Then....
Turn off your System Restore SEE HERE Reinstate it when your log is cleaned and then create a new restore point.Close your browser window and run hjt in safe mode... HOW TO RUN SAFE MODE and have "Hijack This" fix all the following items by placing a check in the appropriate boxes and selecting "fix checked".
Folders that have been highlighted RED in the log will need to be uninstalled.Check first as some folders maybe uninstalled via the Add/Remove program. Files highlighted in BLACK in the log will need to be removed from your hard drive. Make sure to have your system set to show hidden files and folders.. HOW TO SHOW FILES ..Please reboot and post a new log when finished...

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us9.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us9.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://us9.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
R3 - URLSe... Read more

Read other 7 answers
RELEVANCY SCORE 38.4

Malwarebytes and Security Essentials have found nothing on this XP SP3 machine. Gmer found a hidden services, which I deleted. What else can I try?

Here's the error in the bar that keeps popping up when I attempt to log into Yahoo Mail:

"To help protect your security internet explorer blocked this website from displaying content with security certificate errors"
 

A:Security certificate errors with Chrome and IE ... VIrus remnants?

Read other 10 answers
RELEVANCY SCORE 38.4

Following are the DDS and GMER logs as requested.

DDS Log:

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by David Gondek at 14:53:00 on 2012-03-17
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.617 [GMT -5:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
svchost.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\OPHJLDCS.EXE
C:\WINDOWS\system32\slpservice.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\slpmonx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll3... Read more

A:DHCP, TCP/IP and Security Alert errors after virus infection

After I ran DDS and GMER my computer got extremely slow and the sound got messed up (in media player the sound is jittery and distorted). I cleaned my temporary files with TFC, ran a chkdsk scan and then I stopped and restarted the 'explorer' process and now my computer is running better. I'm still having the trouble with the sound though.

Thinking about running system file checker but something is definitely goofy here.

I will try to wait until I hear back from you.

Read other 23 answers
RELEVANCY SCORE 38.4

Hello,
Please can you try to help me? I recently received a barrage of messages from a program called 'XP Internet Security 2010 which told me that my PC was full of viruses. I seem to have removed it (the fake Internet Security program) using Super AntiSpyWare but I now have an issue with 'Open With' screen. Every time I click on an application the Open With dialog box opens, asks me to select a program from the list and in most cases I have to browse the program file directory to find the link.
Worryingly, the XP Internet Security 2010 application has been back again and I have removed it again, and I am also concerned that I pay for an applicatin such as Norton yet I don't have much protection from these other attacks?
I have downloaded my log from HiJackThis - I hope this includes enough information otherwise please let me know if I can provide anything further so that I can get assistance in cleaning up my PC. Any advice on keeping it clean would be much appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:44:17, on 24/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTSvcCDA.... Read more

Read other answers
RELEVANCY SCORE 38.4

Hi this is not my computer, so I am not sure on the history of it; however, right now it is getting worse by the day- complete disrepair. Fall 03 Win XP C: used 4.45 GB 52.8 GB Free
intel pent IV cpu 2.40 ghz 2.34 ghz processor speed, RAM 512 MB Dell
I have a pop up coming up tellling me I have registry errors. So I went d/l'd a prog and it reports 0 errors now. However this popup is still coming up. I ran and disabled the services.msc function... still happening- all the while no errors says my program. Now when he boots it up there are no icons on the screen. He has to cntrl alt del and restart then sometimes they will come up sometimes not. He recently had the internet installed, comcast. I looked at defraging but the analysis came back as it didn't need to, I have run all the virus scans. It almost seems like it's crashing or something. Any advice would be extremely helpful, thanks very much!!
 

A:Registry errors? [moved from XP; probable Security Issue]

Read other 10 answers
RELEVANCY SCORE 38.4

Hi. I have an Athlon 64 Dual Core 6000+ with 2 Gigs memory. The other night I was updating XP Pro SP2 with a number of updates including the Microsoft NET updates, and it looks like I accidentally let in some malware through my firewall. I noticed a file 'b.exe' that was in a subfolder in C:\documents and settings\. I didn't notice anything else, and was able to delete it, I think, since it no longer appears in the Task Manager or Startup.

I can boot into Windows but I'm having serious problems so I think the malware is still there.

In Normal Mode:
I get the following errors on boot up:

1. nvsvc32.exe - The exception Privileged Instruction (0 x c0000096) occurred in the application at location 0 x 0012ffbc.
2. runservice.exe - The exception unknown software exception (0 x c000001e) occurred in the application at location 0 x 00408064.
3. nSvcLog.exe - The exception Illegal Instruction. An attempt was made to execute an illegal instruction. (0 x c000001d) occurred in the application at location 0 x 00417de0.
4. loctlSvc.exe - The instruction at "0 x 0012ff9c" referenced memory at "0 x ffffffff". The memory could not be "read".
5. dwwin.exe - The exception Privileged Instruction (0 x c0000096) occurred in the application at location 0 x 30038bb3.
6. WLService.exe - The exception Privileged Instruction (0 x x0000096) occurred in the application at location 0 x 0040f005.
7. ADService.exe - The instruction at "0 x 00... Read more

A:Numerous Errors, Security Issues, Malware Suspected

Hello and to BleepingComputer.Let's see what we're looking at here.Please install RootRepealNote: Vista users ,, right click on desktop icon and select "Run as Administrator."Direct Download (Recommended)Primary MirrorSecondary MirrorSecondary MirrorSecondary MirrorZip Mirrors (Recommended if you have a slower connection or if the Direct Download mirror is down)
Primary MirrorSecondary MirrorSecondary MirrorRar Mirrors - Only if you know what a RAR is and can extract it.
Primary MirrorSecondary MirrorSecondary MirrorDisconnect from the Internet or physically unplug your Internet cable connection.Close all open programs, scheduling/updating tasks and background processes that might activate during the scan including the screensaver. Temporarily disable your anti-virus and real-time anti-spyware protection.After starting the scan, do not use the computer until the scan has completed.When finished, re-enable your anti-virus/anti-malware (or reboot) and then you can reconnect to the Internet.Extract RootRepeal.exe from the zip archive.Open on your desktop.Click the "Drivers" tab, and then click the button.Allow RootRepeal to run a scan of your system. This may take some time.Once the scan completes, push the button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.~BladeIn your next reply, please include the following:RootRepeal log

Read other 14 answers
RELEVANCY SCORE 38.4

I think I am virus free now but a month ago I got the following viruses on a Win XP 32 bit SP3 pro computer with IE8:

Rootkit.Boot.Pihar.b
Win32/Orsam!rts
DOS/Alureon.H
Win32/Alureon.FK
Win64/Alureon.gen!J
Win32/Alureon.gen!AD
Win64/Alureon.gen!F

After running TDSSKiller, Malwarebytes, MS Security Essentials, Microsoft Sweeper, Kaspersky Emergency Disc 10, aswmbr, Farbar Service Scanner the only discernible problems I have left are in Event Viewer:

1. Error: The IP address lease 192.168.1.2 for the Network Card with network address 000CF183A78B has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

2. Warning: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

(and the occasional warning: The redirector failed to determine the connection type.)

When I reset TCP/IP and Winsock or flush the dns the DHCP error goes away for one reboot but then comes right back. I have updated the network card driver but I haven't removed and reinstalled TCP/IP yet...which I guess is the next logical step.

I also get a lot of Security Alert popups in Internet Explorer which say: "You are about to view pages over a secure connection" even when I'm NOT going to s secure (https) site. In fact I get the popups on the bleeping computer site.

Another thing that is strange is that when I right-click on my hard drives in My Computer it takes a good 10 seconds for the context men... Read more

A:DHCP, TCP/IP and Security Alert errors after virus infection

Please follow the instructions in ==>Malware Removal and Log Section Preparation Guide<==.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include the link to this topic in your new topic and a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Once you have created the new topic, please reply back here with a link to the new topic.Most importantly please be patient till you get a reply to your topic. If you receive a reply from the HelpBot, then please follow the instructions outlined in the helpbot's post.

Read other 2 answers
RELEVANCY SCORE 38.4

I have defragged, removed unnecessary startup programs and uninstalled unnecessary programs too but my startup is still slow. Also I am going to 2 literally blank errors on startup. One is an NSIS error and the other i don't even know. It is all blank. That is the only problem and along with the failed windows security update which is classified currently the only important one.

I really want this fixed soon because i have a quad core pc with 8gb 1600mhz ram all built myself and it really doesn't feel powerful at the startup. During pc usage it is good.

A:[SOLVED] Windows 7 security update and 2 blank errors

Hi did you run disc clean up also have you checked for anything nasty by running your anti virus another thing you can try is running sfc /scannow the steps are here SFC /SCANNOW Command - System File Checker - Windows 7 Help Forums then run chkdsk steps here The How-To Geek Guide to Using Check Disk in Windows 7 or Vista

Read other 19 answers
RELEVANCY SCORE 38.4

It has been more than three days...
http://www.bleepingcomputer.com/forums/topic446229.html
By uninstalling/reinstalling the network adapter driver or updating the driver or resetting TCP/IP I can make the problems go away for one reboot of the computer. The 2nd time I reboot the problems are back.

I get an occasional event that says: "The browser has forced an election on network \Device\NetBT_Tcpip_{11C9F84F-98AA-44FA-8925-FD94F886A831} because a master browser was stopped.". This seems to come in conjunction with the MrxSmb "The redirector failed to determine the connection type." warning in Event Viewer.

None of these issues keep me from connecting to the Internet or seem to slow down my computer (except for the context menu issue with my hard drives and occasionally when it takes a few seconds to refresh my Desktop icons after closing a window).

The reason I am concerned is that I have read that pieces of rootkit viruses can linger (with few obvious signs) but still open up ports that can make future infections easier. I did a full scan with Microsoft Sweeper (which apparently is a Linux boot disk anti-virus). Since it didn't find anything should I feel confident that the viruses are gone?

It would be nice to have a clean Event Viewer but if it means wiping out my system and reinstalling everything I guess I can deal with these annoyances until they get more serious.

Any comments or suggestions?

A:DHCP, TCP/IP and Security Alert errors after virus infection

Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a Malware Removal Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.From this point on the Malware Removal Team should be the only members that you take advice from, until they have verified your log as clean.Please be patient. It may take a while to get a response because the Malware Removal Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the Malware Removal Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRL Team member is already assisting you and not open the thread to respond.The current wait time is 1 - 3 days and ALL logs are answered.To avoid confusion, I a... Read more

Read other 1 answers
RELEVANCY SCORE 38.4

I have been told in the Bleeping Computer Security forum that I am now malware free.
http://www.bleepingcomputer.com/forums/topic446618.html

Here are the problems I am still having in Event Viewer:

1. Error: The IP address lease 192.168.1.2 for the Network Card with network address 000CF183A78B has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).

2. The sporadic Warning: TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

3. The occasional warning: MrxSmb: The redirector failed to determine the connection type.) I also had an informational item that used to pop up from time to time that might be involved..."The browser has forced an election on network \Device\NetBT_Tcpip_{11C9F84F-98AA-44FA-8925-FD94F886A831} because a master browser was stopped."

At one point, when I reset TCP/IP and Winsock or flushed the dns or when the network card driver was reinstalled the DHCP error would go away for one reboot but then came back on the next reboot. Now, the error doesn't show up in Event Viewer on reboots...only when I shut down everything and turn it back on. I have updated the network card driver but I haven't removed and reinstalled TCP/IP yet...which I guess might be something to try.

None of these problems keeps me from connecting to the Internet or other networked computers.

I also get sporadic Security Alert popups in Internet Explorer (sometimes several in su... Read more

A:DHCP, TCP/IP and Security Alert errors after virus infection

Please download Farbar Service Scanner and run it on the computer with the issue.Make sure the following options are checked:Internet ServicesWindows FirewallSystem RestoreSecurity CenterWindows UpdatePress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.

Read other 44 answers
RELEVANCY SCORE 38

Hi,

I have a lack of programs in my start menu right now, and there are security errors popping up asking me to install fake spyware cleaners. I don't have links to My Computer, My Documents, etc. as well as the Programs Menu inside the start menu. In addition, the Task Manager has been disabled. Also, in my system tray, random icons show up saying there's a security alert. One icon is a red circle with a white X. Another is a yellow triangle with a black exclamation point. Also, the popups are titled "Windows Security Alert" and the text inside is "Windows has detected an Internet attack attempt...Somebody's trying to infect your PC with spyware or harmful viruses. Run full system scan now to protect your PC from Internet attacks, hijacking attempts and spyware! Click here to download spyware remover for total protection." with Ok and Cancel buttons. If you click OK, it opens up a browser, and if you hit cancel it closes the message. In addition to these annoying popups, it randomly switches focus to other windows/programs.

Another popup is titled "Spyware Alert" and shows up with a blinking icon in the system tray that looks like a computer monitor with a red circle and white X. Here's the text: "Worm.Win32.NetBooster detected on your machine. This virus is distributed through the Internet via e-mail and ActiveX objects..." The text is so long, but you get the gist of it. I've run HijackThis and I keep runn... Read more

Read other answers
RELEVANCY SCORE 38

Hello, for the past three days I have been trying to access my computer. I'm quite positive I have a malware infection but I have no idea where it is. I am running Windows Vista Home Premium SP2 32bit.

As soon as I boot up my computer an error pops up before the password screen. It reads LoginUI.exe - Bad Image in the top bar and then gives the description:

error. C:\windows\system32\WinTrust.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.

I have to click okay about 20 times before i can access the main login screen. Once i login i get another error similar but instead says Skype.exe - bad image. My windows virus protection has been disabled, and I am unable to open any virus program other than Avast and S&D. I get similar errors to the others when trying to open Norton or Ad-Aware. Even while I was trying to type my topic title to this thread, errors would come up every letter I typed.

Oh and one more thing. I am receiving window's errors constantly, the most common being Windows sidebar encountered a problem and closed, windows live id encountered a problem and closed, and gusvc encountered a problem and closed. I also cannot access msn messenger and my sound has been disabled

any help would be appreciated.

thank you in advance,

jonathon :

Read other answers
RELEVANCY SCORE 38

I use Windows XP home edition. I have done the prep steps from this site. I do not know what infection I have, but the current problems started with AV Security Suite. Spybot search and destroy was recommended to me, so I installed it. I then tried to fix the AV malware and I thought everything was fine. However, since that infection, I've had various random errors appear in the blue screen. My browser is also getting hijacked, although not as often as before I used Spybot. I use Firefox. I do not have enough computer knowledge to give you better information. Over the past four days, I've had the following blue screen messages: IRQL_NOT_LESS_OR_EQUAL, and BAD_POOL_CALLER. I have been able to boot up in Safe mode. Then I'll boot up and get into regular Windows. Then the next time I get another blue screen. I've tried to notice what I was doing before that happened. I suspect my USB port although this makes no sense to me.I am attaching the files mentioned in the prep guide.Thank you very much!DDS (Ver_10-03-17.01) - NTFSx86 Run by Ryan and Dara Ross at 4:51:53.01 on Fri 08/06/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.313 [GMT -4:00]============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exe 4svchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exe 4svchost.exesvchost.exeC:\W... Read more

A:Originally infected with AV Security Suite, now blue screen errors

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. Please post your HijackThis log as a reply to this thread and not as an attachment. I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. I do not think that you are attaching anything scary but others may do so. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until ... Read more

Read other 16 answers
RELEVANCY SCORE 38

I found a way to reduce 90% of the Adguard/ESET certificate errors. Go into services, and stop Adguard's service from running. Simply disabling protection by right clicking on the icon is not sufficient. If you stop the service, things start working again.

This is with HTTPS scanning enabled on ESS 9 (9.0.402.0) and Adguard (6.1.258.1302)

If unfamiliar, Go to the Run command, type services.msc, look for Adguard, right click, and Click Stop.

Also, in general ESS 9 and Adguard works ok for Firefox only. Google Chrome barely works with both enabled.

Of course, doing this may expose you to more and which seem to be a problem with propagating malware at the time. This is a workaround.

Please let me know if this works for you. May could be something I can pass along to dev.
 

Read other answers
RELEVANCY SCORE 38

Every once in a while, there will be a BSOD. It doesn't matter what I do; it's occurred when I was in game, or simply idling. Once it's rebooted, it keep on going back to blue screens and often doesn't even boot. There's been occasions where I wasn't able to boot for 3 days straight. There are also many errors:
Kernel security check failure, memory management, driver irql not less or equal, and system pte misuse.
Thanks in advance! This has been bothering me for a long time. I've tried running memory tests, but nothing so far seems to work :/

Read other answers
RELEVANCY SCORE 38

I cannot see my destop items. I can only see the taskbar. At one point i had WIndows Police Pro and it wouldn't let me run task manager. I fixed that thru this site, but now cannot run Malwarebytes. I get warnings saying my computer is infected constantly from the toolbar and Security Tool and Anti Virus 2010 is still installed on here. Here is the DDS log.

DDS (Ver_09-10-13.01) - NTFSx86
Run by Brad Hanson at 22:45:48.62 on Sat 10/17/2009
Internet Explorer: 8.0.6001.18372
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1023.413 [GMT -5:00]

AV: Norton AntiVirus *On-access scanning disabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program File... Read more

A:Security Tool won't leave! .exe's not downloading, malwarebytes will install but not run- errors.

Hi, welcome to the BC Forums. My username is Raktor, and I would be glad to take a look at your log.Please be advised, as I am still in training, all my replies to you will be checked for accuracy by one of our experts to ensure that I am giving you the best possible advice.This may cause a delay, but I will do my best to keep it as short as possible.I will be back to you shortly with instructions.

Read other 12 answers
RELEVANCY SCORE 37.6

I followed the excellent BC directions to remove the AV Secuirty Suite from my computer (which worked really well when I read them the 2nd time and removed the extra entries from the hosts file). I am running Windos XP professional 5.1 svc pack 3. My browser, while I can finally open it and somewhat surf, is still giving me errors, redirecting me, and generally my computer is running slow.Here is the log from hijack this - I am not sure what belongs and what doesn't. Much thanks for any directions!Logfile of Trend Micro HijackThis v2.0.4Scan saved at 4:28:17 PM, on 7/10/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.17055)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\Program Files\Symantec AntiVirus\Smc.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\system32\brss01a.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files&... Read more

A:Lingering AV Security Suite problems - browser errors, slow computer

Welcome to the BleepingComputer Forums. Is this a business computer?If it is, are you the domain administrator? If you are not, have you informed your domain administrator, (business manager, Systems Analyst, or Information Technology (IT) Specialist)? I ask because I do not help in cleaning business or corporate computers or Windows Server editions, like Windows 2003, for several reasons: There may be restrictions and modifications installed on such machines that could be damaged or altered by the actions we take to remove Malware. Any infection could jump terminals in a computer network. There may also be legal issues regarding any loss of business data that I do not wish to deal with.

Read other 2 answers