Over 1 million tech questions and answers.

Windows security popping up constantly

Q: Windows security popping up constantly

Hi,

My laptop constantly shows windows security pop-up. I tried Spybot/Spyware Doctor, but not of use. Please help.

HJT Logs..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:52:04 PM, on 8/20/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Cisco Systems\CSAgent\bin\CSAControl.exe
C:\Program Files\Cisco Systems\CSAgent\bin\leventmgr.exe
C:\WINDOWS\system32\CmgShieldSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctalogd.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctapsd.exe
C:\Program Files\Funk Software\Odyssey Client\odClientService.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\CtaEoU.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctatransapt.exe
C:\WINDOWS\system32\netdde.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\PROGRA~1\Altiris\ALTIRI~1\AeXNSAgent.exe
C:\Program Files\Connected\AgentSrv.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Intel\AMT\atchksrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\CISCOS~1\CEPS\CEPSWA~1.EXE
C:\WINDOWS\system32\clipsrv.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Credant\Gatekeeper\Gatekeeper.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
C:\WINDOWS\System32\TPHDEXLG.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\Program Files\Intel\AMT\UNS.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Xobni\XobniService.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
c:\program files\lenovo\system update\suservice.exe
C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\taskswitch.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\WINDOWS\system32\TpShocks.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe
C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UdaterUI.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Funk Software\Odyssey Client\OdTray.exe
C:\Program Files\iPass\iPassConnect\downloader\ipccheck.exe
C:\Program Files\Credant\CMG Shield\CMGShieldUI.exe
C:\Program Files\Network Associates\Common Framework\McTray.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\PROGRA~1\THINKV~1\PrdCtr\LPMLCHK.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\RSSoft\RedSwoosh.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Connected\CBSysTray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Credant\Gatekeeper\GKProbe.exe
C:\Program Files\Cisco Systems\CSAgent\bin\okclient.exe
C:\WINDOWS\System32\WScript.exe
C:\Program Files\IBM\Sametime Connect\sametime.exe
C:\Program Files\IBM\Sametime Connect\jre\bin\sametime75.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\ccsrvc.exe
C:\Program Files\Altiris\Carbon Copy\shellker.exe
C:\PROGRA~1\Altiris\CARBON~1\client.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
C:\Program Files\RealVNC\VNC4\vncviewer.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wwwin.cisco.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {140BD8E3-C167-11D4-B4A3-080000180323} - (no file)
O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll (file missing)
O2 - BHO: FGCatchUrl - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\DOCUME~1\shrnair\LOCALS~1\Temp\RarSFX0\jccatch.dll (file missing)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [PtiuPbmd] Rundll32.exe ptipbm.dll,SetWriteBack
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [TPFNF7] C:\PROGRA~1\Lenovo\NPDIRECT\TPFNF7SP.exe /r
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [UserGuide] C:\WINDOWS\APPSRC\POSTINST\POSTINST.EXE c:\windows\appsrc\postinst\userguide.ini
O4 - HKLM\..\Run: [OdTray.exe] "C:\Program Files\Funk Software\Odyssey Client\OdTray.exe"
O4 - HKLM\..\Run: [iPCCheck] "C:\Program Files\iPass\iPassConnect\downloader\ipccheck.exe" /startup
O4 - HKLM\..\Run: [CMGShieldUI] C:\Program Files\Credant\CMG Shield\CMGShieldUI.exe
O4 - HKLM\..\Run: [AeXAgentLogon] C:\PROGRA~1\Altiris\ALTIRI~1\AeXAgentActivate.exe /logon
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe" /startup
O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [LPMailChecker] C:\PROGRA~1\THINKV~1\PrdCtr\LPMLCHK.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [DiskCleanup] C:\WINDOWS\CISCO_IT\Scripts\DiskCleanup\DiskCleanup.vbs
O4 - HKCU\..\Run: [FreeNote] C:\Program Files\FreeNote\freenote.exe
O4 - HKCU\..\Run: [Red Swoosh] C:\Program Files\RSSoft\RedSwoosh.exe /S
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Cisco Security Agent.lnk = C:\Program Files\Cisco Systems\CSAgent\bin\okclient.exe
O4 - Global Startup: Connected TaskBar Icon.LNK = C:\Program Files\Connected\CBSysTray.exe
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: GKProbe.lnk = C:\Program Files\Credant\Gatekeeper\GKProbe.exe
O4 - Global Startup: Manage Printers.lnk = C:\Program Files\Cisco Systems\CEPS\AddPrinter.exe
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: &Download All with Rapidshare Downloader - C:\DOCUME~1\shrnair\LOCALS~1\Temp\RarSFX0\jc_all.htm
O8 - Extra context menu item: &Download with Rapidshare Downloader - C:\DOCUME~1\shrnair\LOCALS~1\Temp\RarSFX0\jc_link.htm
O8 - Extra context menu item: Baixar com o Rapidown... - C:\Program Files\Rapidown\rapidownGet.htm
O8 - Extra context menu item: Baixar tudo com o Rapidown... - C:\Program Files\Rapidown\rapidownGetAll.htm
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: (no name) - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll (file missing)
O9 - Extra 'Tools' menuitem: &KeyScrambler... - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.cisco.com
O15 - Trusted Zone: http://wwwin.cisco.com
O15 - Trusted Zone: http://wwwin-asiapac.cisco.com
O15 - Trusted Zone: http://wwwin-emea.cisco.com
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1217734572343
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = cisco.com
O17 - HKLM\Software\..\Telephony: DomainName = cisco.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E64451E-1B94-487F-A72E-D8C8A9F2664A}: Domain = cisco.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{86EF5FB1-B63F-4DC3-B541-6AACAA3A8ED7}: Domain = cisco.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{C6968BD1-C9BF-4A14-ABB4-915618C8A943}: Domain = cisco.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{C7DF7573-48C4-46DB-B9CE-C8627AA8D620}: Domain = cisco.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{C7DF7573-48C4-46DB-B9CE-C8627AA8D620}: NameServer = 171.70.168.183,171.68.226.120
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = cisco.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = cisco.com,cisco.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = cisco.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = cisco.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = cisco.com,cisco.com
O20 - AppInit_DLLs: CSAUSER.DLL AMINIT.dll
O20 - Winlogon Notify: ACNotify - ACNotify.dll (file missing)
O20 - Winlogon Notify: cbXPHYst - cbXPHYst.dll (file missing)
O20 - Winlogon Notify: CMGShieldNP - C:\Program Files\Credant\CMG Shield\CMGShieldNP.dll
O20 - Winlogon Notify: PAStates - C:\WINDOWS\SYSTEM32\PAStates.dll
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Altiris Agent (AeXNSClient) - Altiris, Inc. - C:\PROGRA~1\Altiris\ALTIRI~1\AeXNSAgent.exe
O23 - Service: Connected Agent Service (AgentSrv) - Connected Corporation - C:\Program Files\Connected\AgentSrv.EXE
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Intel(R) Active Management Technology System Status Service (atchksrv) - Intel Corporation - C:\Program Files\Intel\AMT\atchksrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Altiris Carbon Copy (CarbonCopy32) - Altiris - C:\WINDOWS\system32\ccsrvc.exe
O23 - Service: Carbon Copy Scheduler (CarbonCopyScheduler) - Altiris - C:\WINDOWS\system32\schdsrvc.exe
O23 - Service: CEPS Watch - Cisco Systems - C:\PROGRA~1\CISCOS~1\CEPS\CEPSWA~1.EXE
O23 - Service: CMGShield - Credant Technologies, Inc. - C:\WINDOWS\system32\CmgShieldSvc.exe
O23 - Service: Cisco Security Agent (CSAgent) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\CSAgent\bin\CSAControl.exe
O23 - Service: Cisco Trust Agent EOU Daemon (CtaEoU) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\CiscoTrustAgent\CtaEoU.exe
O23 - Service: Cisco Trust Agent Logger Daemon (ctalogd) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\CiscoTrustAgent\ctalogd.exe
O23 - Service: Cisco Posture Server Daemon (ctapsd) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\CiscoTrustAgent\ctapsd.exe
O23 - Service: Cisco Systems, Inc. CTA Posture State Daemon (ctatransapt) - Unknown owner - C:\Program Files\Cisco Systems\CiscoTrustAgent\ctatransapt.exe
O23 - Service: Cisco Systems IT VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: CREDANT Mobile Guardian Gatekeeper (guardian) - CREDANT Technologies - C:\Program Files\Credant\Gatekeeper\Gatekeeper.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Active Management Technology Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\AMT\LMS.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Odyssey Client (odClientService) - Funk Software, Inc. - C:\Program Files\Funk Software\Odyssey Client\odClientService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\program files\lenovo\system update\suservice.exe
O23 - Service: ThinkVantage Registry Monitor Service - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: Intel(R) Active Management Technology User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\AMT\UNS.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe
O23 - Service: XobniService - Xobni Corporation - C:\Program Files\Xobni\XobniService.exe

--
End of file - 18278 bytes

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Windows security popping up constantly

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

RELEVANCY SCORE 77.6

Hello, for the past three days I have been trying to access my computer. I'm quite positive I have a malware infection but I have no idea where it is. I am running Windows Vista Home Premium SP2 32bit.

As soon as I boot up my computer an error pops up before the password screen. It reads LoginUI.exe - Bad Image in the top bar and then gives the description:

error. C:\windows\system32\WinTrust.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.

I have to click okay about 20 times before i can access the main login screen. Once i login i get another error similar but instead says Skype.exe - bad image. My windows virus protection has been disabled, and I am unable to open any virus program other than Avast and S&D. I get similar errors to the others when trying to open Norton or Ad-Aware. Even while I was trying to type my topic title to this thread, errors would come up every letter I typed.

Oh and one more thing. I am receiving window's errors constantly, the most common being Windows sidebar encountered a problem and closed, windows live id encountered a problem and closed, and gusvc encountered a problem and closed. I also cannot access msn messenger and my sound has been disabled

any help would be appreciated.

thank you in advance,

jonathon :

Read other answers
RELEVANCY SCORE 60.4

DDS (Ver_09-06-26.01) - NTFSx86
Run by Administrator at 21:33:23.80 on Tue 07/07/2009
Internet Explorer: 7.0.5730.13

============== Pseudo HJT Report ===============

uStart Page = hxxp://newsletters.fool.com/04/index.aspx?source=imysltlnk750252
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn\yt.dll
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: StumbleUpon Launcher: {145b29f4-a56b-4b90-bbac-45784ebebbb7} - c:\program files\stumbleupon\StumbleUponIEBar.dll
BHO: DriveLetterAccess: {5ca3d70e-1895-11cf-8e15-001234567890} - c:\windows\system32\dla\DLASHX_W.DLL
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.5.0_06\bin\ssv.dll
BHO: scriptproxy: {7db2d5... Read more

A:IE hijacked with porn sites; antivirus system pro alert keeps popping up; windows security alert keeps popping up

Hello pdmuhalk,Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea

Read other 4 answers
RELEVANCY SCORE 54.4

For some reason this window has started popping up!

' Please verify that both the username and password are correct for your mail server.'

To get rid of the Window I have to enter my details and password to gain access to Windows Mail.

Any tips please on resolving this problem. I am using Vista 32 bit. ISP Tiscali. AVG email scanning incoming.

Thanks Alan

A:Windows Security Window keeps popping up!

Hi alan8376
Is this problem associated with your outgoing mail too?
Try turning off your AVG email scanner & see if that makes a difference.

Read other 3 answers
RELEVANCY SCORE 54.4

Windows Security Window keeps popping up!
For some reason this window has started popping up!

' Please verify that both the username and password are correct for your mail server.'

To get rid of the Window I have to enter my details and password to gain access to Windows Mail or just cancel the Window and try again to receive/send and all is fine! This problem pops up every few minutes!

Any tips please on resolving this problem. I am using Vista 32 bit. ISP Tiscali. AVG email scanning incoming.

Thanks Alan

Read other answers
RELEVANCY SCORE 54

hi
the windows security alert balloon keeps popping up

its says my firewall is off

and auto update is off

and i have no virus protection

the fire wall is on

the AU is on

and i am using avast

i ran a scan avast boot time deleted several files then the alert was still there

i ran malware bytes scan it found several infected files

but the alert is still there

so now what should i do?
ty

A:windows security alert baloon keeps popping up

A lot of rogue apps can disguise themselves as the legitimate security center.

However to disable popups:
Click Start and then click Control Panel.
Double-click Security Center.
In the Security Center, under Resources, click Change the way Security Center alerts me.
In the Alert Settings dialog box, clear the Firewall, Automatic Updates, or Virus Protection check boxes, and then click OK.

Read other 2 answers
RELEVANCY SCORE 53.6

I don't know what may have started this, but kaspersky kept telling me that svchost.exe was performing a suspicious action trying to inject something into winlogon.exe. It asked me to allow/deny, I denied, and it kept repeating. Eventually I ran a scan and detected that "smarthook.dll" contained a trojan. I used kaspersky to remove it, and downloaded a clean copy of the .dll and put it in my system32 folder.

Now I am receiving the classic:

svchost.exe:
"The instruction at "0x7588bba5" referenced memory at "0xfede1500". The memory could not be "read".

Click on OK to terminate the program
Click on CANCEL to debug the program"

Only this pops up every 5 seconds about 6 times and then stops, and randomly will continue this pattern.

I have attached 2 logs, one is current <taken today> the other I just happen to log a few days ago for the hell of it (before I noticed any errors). I don't know if.. comparing will help I just want to provide all info I have.

~Thanks!

[edit]
**Additional: Just ran AVG Anti-Rootkit Beta and it detected system32/userinit.exe as a "Hidden Application"

extra info: sometimes when the svchost error pops up, my taskbar at the bottom changes to the old grey style and not the windows xp style.

Also: included a screenshot (edited for size).

System Info:
AMD Athlon 64 processor 3500+, 1 GB RAM
Microsoft Windows XP Professional SP2
ASUS A8N-SLI Deluxe MOBO

A:svchost constantly popping up

nobody responding, so I'm trying to help myself. A couple things I've noticed
1) in my list of services, there is a service named "Asctcgwto" set to disabled. This brings up nothing in google.
2) After turning on my computer, I type "at" in the console and it responds with "The service has not been started." I use the at command fairly often.
3) I type "net localgroup" and it tells me that the workstation service has not been started. So I start it.... I Don't know why it isn't already started, (it's set as "Automatic" but was stopped).

The problem is getting worse because from the moment I click login, it brings up multiple svchost.exe errors and takes an exceptionally longer amount of time to fully log in.

Read other 1 answers
RELEVANCY SCORE 53.6

AVG free edition shows popup window with warning re: C:\WINDOWS\system32\atl7.dll TrojanHorseBackdoor.Generic10.AMEC

I would very much appreciate some help with this.

thankyou.
 

A:AVG constantly popping up with warning

Read other 16 answers
RELEVANCY SCORE 53.6

One of the CA security center components keeps installing when I log on. This prevents me from uninstalling anything or installing anything new. Because it keeps installing (or is just installing), I can't even try to uninstall it because well, it's installing!

Help, please! Thanks!
 

Read other answers
RELEVANCY SCORE 53.2

Hi all. Someone else posted this below but I have the exact same problem. Can anyone help?

Thanks,

Erik

Hey,

I need help if anyone can... apps wont open anymore since this windows security icon has been popping up saying there is a malware infected virus called w32 worm.

Can anyone help me out to get rid of it.

Thanks in advance.
 

Read other answers
RELEVANCY SCORE 53.2

My ex used to take care of all this, folks, and now I am solo and clueless That being said...I did try to run HJT, did get a log but when I went to run it, it said HJT was being denied something to do with the hosts file.

I ran HJT because when I got home tonight, I noticed I had some windows security thing on my computer screen that said I was infected with 411 viruses, etc etc. I tried to run my symantec virus, but its been disabled by this thing apparently.

Please help if you can, I am going out of my mind, I know this is bad, I can tell from my HJT log. Also, I will probably need lots of help knowing how to find out if I have a firewall, and if so, how I make sure its working properly. This happened while I was at work, and I am the only one that uses this laptop.

Thanks so much in advance!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:47:43 PM, on 9/5/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ActivIdentity\ActivClient\accoca.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\... Read more

Read other answers
RELEVANCY SCORE 53.2

I recently had a problem with a constant popping sound and started a thread here for help: http://www.bleepingcomputer.com/forums/top...ml#entry1400691It helped me identify the source of the sound. It was suggested I post here to see if an infection is at the root of my problem.To sum up, I was hearing an almost constant bubble popping sound which ended up in fact being the Windows XP Balloon Tip Sound. After some trial and error with the advice given I found my registry had been changed to not show the balloons. Once I changed it back I began receiving the following balloon - "IP Protection Infection Detected" from Malwarebytes. Many IP's have shown up from various spots on the globe and it was suggested perhaps this forum could help me find if an infection on my PC is "calling out" to these IP's known to be associated with malware, etc.The people on the other forum were awesome and helped me get this far. If anyone can help from here it would be greatly appreciated!

A:Malwarebytes IP Protection Constantly Popping up

I reccomend you visit the Malwarebytes Forum and create an account there so they can help with you issue more easily.

Read other 2 answers
RELEVANCY SCORE 53.2

I have Windows 10 and everything is running ok. Then, yesterday, I ran Windows Update and Update installed THREE updates....

KB3881449, KB3881488, KB3081452

It seems to be a NEW and BAD HABIT of Microsoft NOT to give us any details on what these updates do to our operating systems, what problems they solve, what features they provide or take away or what they modify. It would certainly be helpful in trying to diagnose a nasty problem that develops immediately, doesn't it? I don't like this new attitude at Microsoft of "we will run your computer and you will like it". Anyway, after updating and rebooting, I immediately started having a problem with the new Microsoft Edge Browser. It is now popping up on me without being asked to. This problem started immediately after I installed the updates and I DID NOTHING ELSE on my computer after rebooting.

There are a few things I want to say here...Microsoft DID THIS to my computer. I ran an anti-virus scan and malicious software scan using ESET SECURITY SUITE 8.0 both on my computer and an external ESET Anti-Virus Scan from ESET that sits off of my computer and nothing was found.

I also got ONE OTHER ERROR, I only saw it pop up one time and here it is, attached snapshot of the Error Message attached (it says)...

RUNTIMEBROKER.EXE

"The group or resource is not in the correct state to perform the requested action."

I looked into RUNTIMEBROKER.EXE and it is an operation in Windows 8 and app... Read more

A:Edge Browser is Popping Up on Me Constantly

Edge opening constantly might be malware.

Here's a link to the Malwarebytes blog that discusses those un-closeable Tech-Support-Scam pages and sites:

PSA: Tech Support Scams Pop-Ups on the Rise | Malwarebytes Unpacked
--------------------------------------------------------------------

Edge is installed as the default Windows 10 browser. Here's how to make Internet Explorer the default browser instead.

I believe the icon for Edge is automatically installed on the Taskbar. The icon looks very similar to the Internet Explorer icon.

To pin the Internet Explorer icon to the Taskbar, click on the Start Button, click All Apps,
Scroll down and click on Windows Accessories. Right Click on Internet Explorer, click on Pin To Taskbar.
The Edge icon is a darker blue. The Internet Explorer icon is lighter blue with a gold diagonal arc across it.

Right click on the Edge icon and select Unpin From Taskbar, if you wish.

Now to make Internet Explorer the default browser:

Click on the Start Button, Settings, System, Default Apps, scroll down the Choose Default Apps list and Click on Web Browser - Edge, and choose Internet Explorer from the pop-up menu. This makes Internet Explorer the default browser.

Read other 4 answers
RELEVANCY SCORE 53.2

I reformatted by Dell Inspiron 1721 laptop a couple of months ago and everything's been working perfectly until a Windows SP2 update automatically installed itself last week - now Windows Media center opens up constantly (very distracting); I've removed it from services and from startup, but it continues to pop open.

Also, a funny looking file menu will sometimes pop up all by itself on the top left of the screen.

And windows or programs I have open may just close themselves out by themselves.

This has all been going on for a week and is becoming very annoying. I don't use Media Player, but understand it can't be deleted. Until I chose "Don't show me this message again" there was a message every time I booted up that said something like, "Your new hardware needs to be installed." I had not attached any new hardware.

Anyone have any ideas? I really don't want the hassle of reformatting again so soon.

Thanks,
SWOFKY

A:WMC Popping Open Constantly - Other Problems

Hi SWOKY, welcome to the board.

The problem could caused by anything, but you can start on making sure if the problem related to the update by restore the system to the day before the update.

Post back and let us know how is going?

Bruce

Read other 6 answers
RELEVANCY SCORE 53.2

So here is what's happening to me...

1. I've got this constant pop up thing happening that is saying contextual ads.
2. Under Uninstall or Change a program there is a program called Ron too1 addestination. If I click uninstall a box comes up asking for the verification code and in the center of the box it's got garbled letters, which I think they want you to use as the verification code.
3. I'm running on Windows Vista with several securities in place...MicroTrend, Windows Defender, AVG 8.0, Avira Antivirus, Malwarebytes' Anti-Malware, SpywareBlaster, SUPERAntiSPyware and used Spybot to search and destroy. They don't seem to be finding this thing.
4. I use Mozilla Firefox as my browers and I do frequent some social networks, specifically MySpace and Facebook. And often pay games on NovaWorld.

Is there any help for me? I'd be so very appreciatived!!!!

Suzanne

Read other answers
RELEVANCY SCORE 53.2

Hi and thanks in advance for any and all help received. I would also, in all fairness, wish to inform anyone concerned that you are currently reading the words of quite possibly the most computer illiterate human being in the free world. Having said that, I will attempt to explain my problem.
My computer has been becoming increasingly slower over the last several months. I have been dealing with/ignoring this problem until the proverbial straw that broke the camel's back began appearing on the computer screen yesterday. I am receiving this official looking warning on my computer that keeps popping up constantly with every action I attempt. The warning says:
SYSTEM ERROR
Your computer was infected by unknown trojan
It's dangerous for your system! ( critical files can be lost !)
Click to download the antispyware program to clean your system (recommended)

From what Ive read on your site and others, I am assuming this is an attempt to get me to download even more trouble than what I am currently experiencing. I almost goofed up and downloaded it when it first popped up. In fact I clicked on the ok button but thankfully was warned that it was an unrecognized site and didnt have a valid signature or something to that effect (see, I told you I was computer illiterate) and I cancelled the attempt to download.

I followed all the other steps in your instructions. I had already downloaded the Windows Service Pack 2 a long time ag... Read more

A:Trojan Warning Constantly popping up

I was informed this information was needed as well
Deckard's System Scanner v20071014.68
Run by Tony Murdock on 2008-01-06 18:52:06
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
123: 2008-01-06 23:52:54 UTC - RP742 - Deckard's System Scanner Restore Point
122: 2008-01-06 23:45:12 UTC - RP741 - Software Distribution Service 3.0
121: 2008-01-06 23:40:20 UTC - RP740 - Software Distribution Service 3.0
120: 2008-01-06 22:04:36 UTC - RP739 - Software Distribution Service 3.0
119: 2008-01-06 06:03:14 UTC - RP738 - Software Distribution Service 3.0


-- First Restore Point --
1: 2007-10-09 05:03:21 UTC - RP620 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-01-06 18:57:08
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\... Read more

Read other 16 answers
RELEVANCY SCORE 53.2

I've been having this problem where this thing pops up every few minutes and i don't know how to fix it

A:constantly popping up command promp

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be foun... Read more

Read other 21 answers
RELEVANCY SCORE 53.2

Every few seconds auto play pops up and immediately vanishes again. It's very annoying, to the point where I can barley use my computer, (I posted this from another computer.) The drive responsible says recovery H, H is my USB but there is nothing plugged in there. The Auto play fixer isn't for Vista 64 bit. I don't want to simply stop auto play as I like it when it works properly. I don't seem to have a windows restore point either. I have done everything I can think of. Any help would be greatly appreciated! Thanks for looking.

A:Auto play popping up constantly

You can try the FixIt at http://support.microsoft.com/kb/967715 , scroll down to How to disable or enable all Autorun features in Windows 7 and other operating systems.
 
Louis

Read other 1 answers
RELEVANCY SCORE 53.2

Every few seconds auto play pops up and immediately vanishes again. It's very annoying, to the point where I can barley use my computer, (I posted this from another computer.) The drive responsible says recovery H, H is my USB but there is nothing plugged in there. The Auto play fixer isn't for Vista 64 bit. I don't want to simply stop auto play as I like it when it works properly. I don't seem to have a windows restore point either. Here is my Hijack This log file. Any help would be greatly appreciated! Thanks for looking.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:55:51 AM, on 2/10/2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
C:\Users\Bec\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Sony\VAIO Mode Switch\VMSwitch.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\Sony Corporation\SmartWi Connection Utility\CCP.exe
C:\Program Files\Sony Corporation\SmartWi Connection Utility\PowerManager.exe
C:\Program Files\Sony Corporation\SmartW... Read more

A:Auto play popping up constantly

You might want to try a Clean Boot troubleshooting procedure to hopefully isolate an offending application. Run it for both Services and Startup items.

Another thing you can try:

Download the free Process Explorer.

Run it and click Find.

Click Find handle or DLL...

Search for \device\harddisk.

See if any of the search results might have a reason to be accessing the USB drive.
 

Read other 1 answers
RELEVANCY SCORE 53.2

Every few seconds auto play pops up and immediately vanishes again. It's very annoying, to the point where I can barley use my computer, (I posted this from another computer.) The drive responsible says recovery H, H is my USB but there is nothing plugged in there. The Auto play fixer isn't for Vista 64 bit. I don't want to simply stop auto play as I like it when it works properly. I don't seem to have a windows restore point either. I have done everything I can think of. Any help would be greatly appreciated! Thanks for looking.

A:Auto play popping up constantly

For security reasons, auto-play is not a good idea. There are infections that specifically take advantage of flaws in the system.

You should also enable recovery points, it can be a life-saver if something goes wrong.

You may want to try disabling it and then re-enabling it for specific drives or types of files to see if that will help with your issue:
How to disable the Autorun functionality in Windows

Disable AutoPlay in Windows Vista - How-To Geek

Read other 2 answers
RELEVANCY SCORE 53.2

I have an HP computer with Vista, Comcast as the ISP, and McAfee (I think it was provided by Comcast).
A new problem has popped up just recently. Every few minutes, I am interrupted when the black and red McAfee flash-screen is flashed on top of whatever I am working on. That is followed by a tan-colored screen called “Comcast Security - - - powered by McAfee”. (This is the same screen that comes up if I click on the McAfee shortcut on the Desk Top.) That screen changes its contents once before it quits. The coming of these screens has nothing to do with my pushing keys. They come even if my hands are not near the keyboard and if I am not on line with Comcast.
These screens flash on for only a fraction of a second – not long enough to read what they say. But they disrupt my train of thought and, if I am typing, can cause errors in my writing. I checked my McAfee and security settings and they seemed correct. If you can suggest a way to stop this, I would appreciate it. The screens have flashed on about six times while I was writing this.
 

Read other answers
RELEVANCY SCORE 53.2

I use a windows xp professional OS.
My contrast window keeps on popping up in the middle of my screen, this goes on happening constantly on its own accord.
What is this problem? and how do i rectify it?
Pls help..

Read other answers
RELEVANCY SCORE 53.2

If my lap top is on for any more than 3hrs, the help window for whatever program i am using will pop-up and will not let me continue task. Comp must he turned off for a couple of hours to resolve this.

I ran trend micro's online virus/spyware tool (http://housecall.trendmicro.com/), cwshredder, ad-aware se & spybot s&d. Problem did not resolve, then someone told me to try hijackthis, and am now in need of help to analyze the results.

PLZ HELP.

thanx in advance.

the following is the log i got w/ hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 8:25:43 PM, on 10/2/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\P... Read more

A:[SOLVED] help folder constantly popping up, plz help

i've had other issues since this post and have decided for a fresh start/formated drive
thanks all, no further help needed (for now, lol)

Read other 1 answers
RELEVANCY SCORE 52.8

Hi, all.

My pc keeps popping up 'windows script hosting' window and 'My documents' window on every startup after logging in. Well, it's not really irritating, but i prefer not to have them, if possible. My pc started behaving like this after i installed Avast!home edition, which is not the cause, i guess, as that wasn't the first time for me to install Avast antivirus--i already installed that av in many other computers before.

I've tried finding such entries in 'startup' and also in 'msconfig', but i can't any of them.

Could anyone help me the problem that i am having with the pop-up thing?
Any troubleshooting/suggestion is very much welcomed.


Regards,
F I F I.

P.S. Here is the HijackThis Logfile in case it's needed.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:41:14 PM, on 11/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOW... Read more

A:windows script hosting keeps popping up! [Moved From General Security}

Hi FIFI -

HijackThis logs are only to be posted in this forum. I've moved your thread.

I can see what's likely causing that, but the question remains ... "Why is it there?" For that, more info is required.

First....

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries if they exist (make sure you do not miss any) and click Fix Checked

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\wscript.exe,userinit.exe

Close HijackThis now.

---------------------------------------------------------------------------------------------

Please do this:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windo... Read more

Read other 13 answers
RELEVANCY SCORE 52.8

Helping my neighbor.

I have windows XP SP1 and my neighbor has the same thing.

My wife and her are friends. Anyway this just started today or last night.
She always goes to Netscape to play games and my wife does the same. Neither one has a problem till now. My computer still goes to Netscape and the games with no problem but now my neighbors when ever she is at the netscape site ( and anyplace while she is on the netscape site such as the games) she gets this error

Your current security settings prohibit running ActiveX controls on this page as a result the page may not display correctly. and then she has to click the error box ok button and then there is one behind that you click ok and then you can get around but the error keeps popping up constantly and you have to keep clicking the ok button.

Heres the delemma--She never had this problem before today or last night. I have tried everything. I am fairly good on the computer. I even got her on the phone and went through all her security settings one by one in tools>Internet Optins> security? custom tab and set hers exactly like mine and then went to the advanced tab and did the same there. I had put script defender on her computer so to make sure that was not it (although I have it on mine with no problem) I shut it down. None of that made any difference. still get the errors. The only other thing that is differnet on her computer now then before is I put zone alarm on her computer but then I also have it on mine.... Read more

A:Solved: Windows XP SP1-error keeps popping up activeX security settings not right and they ar

Sorry for the bother, I got it fixed. I guess I will try harder next time before I publish a thread. I will close this thread
 

Read other 2 answers
RELEVANCY SCORE 52.8

im getting windows security center popping up and running scans which i beleive are fake. this happens just about whenever i click something. im also not able to go into the security center and change anything/turn it off...also, a different firewall is saying the windows security center is trying to connect to a website that clearly doesnt have anything to do with microsoft.

also, firefox crashes upon loading (coinciding with the security center popping up. another browser opens but will not load any pages.

i am able to go into task manager and end the ave.exe process, and that kills the security center. though only to load up again upon clicking something.

here is the hjt log. (it may be an older HJT program, but i was not able to connect to the net on the infected computer, and that was the only HJT version i had on there.)

something certainly doesnt look right in here, but im not nearly experienced to know what, OR what to do about it. the help would be great. THANK YOU.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:17:24 PM, on 4/20/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\S... Read more

A:windows security center popping up. browser not loading/crashing.

Read other 16 answers
RELEVANCY SCORE 52.8

Hi. I don't remember failing to untick a selection, but somehow this crummy Baboom Search element has come onto my computer. I have an Asus desktop computer and have Windows 8.1. and use Google Chrome and Mozilla Firefox. Every time I restart my computer Baboom's invisible extension activates setting Baboom Search to default alongside my Google default search and at this point I cannot remove it as a default program.

There is an option to disable the Baboom Search extension and doing so will make it disappear, but it does not give me the option to find and remove the extension that continually controls my search when I restart.

I have used Windows Defender, Anvi Smart Defender and an Anvi software trial that supposedly allowed one to use a Slim Toolbar option that could find an alter extensions and add-ons but it none of them found Baboom Search.

I cannot find the extension in any extension list, in the uninstall list in the Control Panel, nor can I find the name Baboom anywhere on my computer now that I have deleted a few small files with its name. Since I have been unable to see the extension I have been unable to get its App ID in order to find out what ID I could try deleting in the Roaming App Data on my computer but it feels like I have tried everything else to find and delete it. I even tried to find it in the Registry Editor in the apps section, but it did not appear.

Please, if you can offer me any assistance in taking down this nasty virus that doesn&#... Read more

A:Baboom Search Constantly Popping Up, Hidden

Read other 6 answers
RELEVANCY SCORE 52.8

Hello,
I have a HP Pavilion m6-1045dx notebook with Windows 7 Home 64-bit SP 1, Premium, 8gb Ram, Intel HD graphics 4000, Intel Core i5-3210M.

The attached error codes keep showing up and they show up every 3-5 minutes. I recently just got my laptop back from a repair to the motherboard. They replaced the HDD and re-installed Windows 7 Home Premium and most of my needed drivers. I am also attaching the itinerary work notes of the repair for the computer.

NOTE: the error codes are not consistent after continuous pop ups, though the location of the application error seems to be the same. I realized that the errors are not the same all the time.

What is the cause and how do I fix this?

A:Error Codes popping up constantly every 3-5 mins

This sounds like a driver problem. Can you check to see if Windows is fully up to date and check Device Manager for any next to your hardware.

Read other 3 answers
RELEVANCY SCORE 52.8

Have followed the five steps including the DSS scan, below are pasted the results with main.txt, then the logfile of the HijackThis scan. The DSS extra.txt results are attached.

Deckard's System Scanner v20071014.68
Run by Idjit on 2008-02-07 19:20:01
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
38: 2008-02-08 00:20:04 UTC - RP843 - Deckard's System Scanner Restore Point
37: 2008-02-08 00:13:07 UTC - RP842 - Software Distribution Service 3.0
36: 2008-02-07 14:24:11 UTC - RP841 - Installed SUPERAntiSpyware Free Edition
35: 2008-02-07 02:35:44 UTC - RP840 - Point de v?rification syst?me
34: 2008-02-01 02:53:46 UTC - RP839 - Point de v?rification syst?me


-- First Restore Point --
1: 2007-11-10 17:18:39 UTC - RP806 - Point de v?rification syst?me


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Idjit.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:22:14, on 2008-02-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\ser... Read more

A:virus protection malware constantly popping up

Hello and welcome to TSF.

We'll begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/comb...o-use-combofix

When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system.

Read other 1 answers
RELEVANCY SCORE 52.8

Somehow, sometime, a certain virus got onto my PC, I'm familiar with the sort, since i had a similar problem when i use to use XP, unfortunately, i don't remember how i removed it, an now a new rogue spyware program has planted it's seeds on my computer once again. It calls itself Antispy Spider and always pops up on my task bar in a small yellow triangle with an exclamation mark saying something like: Windows Security Center
An attack on you computer has been detected
Then it opens the browser (Firefox in my case) and gives me it's page, with the asking me to buy it since it'll protect my computer...Yeah, sure. I'm using McAfee Security Center 2007, which is enough for me. I'm posting my log since i can't find the things that belong and don't and i certainly need to get rid of this blasted Malware.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:25:25 PM, on 10/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\OEM02Mon.exe
C:\Program Files\McAfee\MSK\mskagent.exe
C:\Program Files\DELL\MediaDirect\PCMService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DellSupport\DSAgnt.e... Read more

A:Antispy Spider constantly popping up on desktop

Read other 6 answers
RELEVANCY SCORE 52

I have Malwarebytes Anti-Malware and I get pop up warning every 3 to 4 seconds that it has blocked a Malicious Website.  Its an outbound connection with the warning:
 
Domain: (empty)
IP: (different all the time)
Port: (different all the time)
Type: Outbound
Process: C:\Windows\System32\svchost.exe
 
When I received the laptop from previous owner, Avast virus protection was installed but not updated.
I removed it and installed Malwarebytes Premium and Eset Nod32 virus protection.
Ran MBAM and quarantined infections (lMBAMlog.txt file attached), Eset found nothing.
 
It was after MBAM install that running on the wireless connection began to produce the above stated pop-ups.
When MBAM is activated, the pop-ups start immediately and I loose wireless internet.
If wireless is turned off, no pop-ups.
Wireless connection is reestablished once I deactivate MBAM.
 
In  my attempts to fix, I also ran RogueKiller and got rid of a bunch of pum.dns
 
I also notice that what ever I search for in IE goggle, the top return is always a link to "Raaz.io/SafeSearch Install Now"
I downloaded and ran the Farbar recovery Scan Tool and my log is attached.
Thank you for looking at my topic,
Pilgrim.
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:29-12-2015
Ran by Sidney (administrator) on SIDNEY-PC (29-12-2015 15:01:50)
Running from C:\Users\Sidney\Desktop
Loaded Profiles: Sidney (Available Profiles: Si... Read more

A:Outbound "Malicious Website Blocked" constantly popping up

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Remove these programs in bold Via the Control Panel > Programs and Features applet.VideoDownloadConverter Toolbar Chrome Extension (HKLM-x32\...\VideoDownloadConverter_4z Chrome Extension Uninstall) (Version: - Mindspark Interactive Network) <==== ATTENTIONWSE_Astromenda (HKLM-x32\...\WSE_Astromenda) (Version: - WSE_Astromenda) <==== ATTENTION===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file.

start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\RunOnce: [Fesulok] => C:\windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Sidney\AppData\Local\29d7106b1506c019\Dufaku.dat"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
CHR HKU\S-1-5-21-1747975209-1935908775-2939679204-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1747975209-1935908775-2939679204-1000\SOFT... Read more

Read other 9 answers
RELEVANCY SCORE 51.6

Hello!
I would appreciate any help whatsoever! This virus, or whatever it is, has me stumped!
I think I have been hijacked, only on internet explorer-when checking task manager, Internet explorer is always running, even when I "End Task" . Mozilla Firefox is working fine, but Internet explorer pops up both visible and invisible windows, and constantly asks me to make it my default program!
I suspect malware, and possibly a virus, but my spyware program cannot find anything besides cookies. My antivirus program pops up saying it has deleted multiple trojans, but something is definitely going wrong!

here are is my Hijack this log
Logfile of random's system information tool 1.04 (written by random/random)
Run by Brennan at 2008-11-05 19:05:05
Microsoft Windows XP Professional Service Pack 3
System drive C: has 34 GB (59%) free of 57 GB
Total RAM: 478 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:05:18 PM, on 11/5/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mo... Read more

A:Hijacked? Internet Explorer constantly running and popping up, but I use Mozilla!

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

Please copy this page to Notepad and Save it to your Desktop in order to assist you when carrying out the following instructions.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.
Ensure that there aren't any opened browsers when you are carrying out the procedures below.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Add or Remove Programs if they still exist:

Viewpoint Manager
Viewpoint Media Pl... Read more

Read other 2 answers
RELEVANCY SCORE 51.6

Hi!

I started getting attached pop up in my taskbar few days back and it has intensified since then. It now pops up every 2-3 min and disappears instantly. Managed to get it in screen shot.

Did bit of on-line search and there are few similar cases too but i am not sure about the reason behind it starting in my machine and solution to it.

I was getting some Bluetooth related message in Skype since i started using it just from few days back. Had skype since beginning but never used it before. Could this be because of it ? Should i uninstall and install skype again ?

And this is the first time i am facing any problem on this machine (HP Laptop with Windows 7 OS), it is about a year old.

Any suggestion appreciated!!!
Thanks
 

A:Unknown program quickly popping up and disappearing in task bar constantly

Read other 16 answers
RELEVANCY SCORE 50.8

Some program keeps popping up for a split second on my task bar every few minutes, and I can't figure out what it is.
It's pretty annoying because whenever it happens it switches the current window's focus.
It seems to happen randomly, and not at a set time interval.
I don't think it's malware... but I could be wrong. It pops ups and disappears much too quickly to identify it.
How can figure out what it is? (Btw, I'm running Windows 7.)
 

A:Solved: Unknown program quickly popping up and disappearing in task bar constantly

Read other 8 answers
RELEVANCY SCORE 50.8

The sound with both speakers/ headphones on my laptop is constantly making "popping" sounds, and sometimes it even stutters - very aggressively and without putting any load on the laptop - even with a simple mp3 playback.I've tried EVERYTHING - Realtek / Lenovo / Windows drivers, uninstalled Windows, wasted so much precious time on it.This is the second damaged unit I get from lenovo in a month's time. I hope they can provide a quick solution for this problem, or else I'm returning this laptop and never buying / recommending Lenovo ever again. 

Read other answers
RELEVANCY SCORE 50.4

DDS (Ver_10-12-12.02) - NTFSx86
Run by HP_Administrator at 19:52:23.07 on Fri 02/11/2011
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1982.921 [GMT -6:00]

AV: Norton 360 *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *Enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Canon\Memory Card Utility\iP6700D\PDUiP6700DMon.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Hp\... Read more

A:Norton is constantly blocking Instrusion attempts by several different attackers and Just-In time debugging keeps popping up.

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instru... Read more

Read other 26 answers
RELEVANCY SCORE 50.4

Hello,

My Norton 360 Antivirus keeps blocking intrusion attempts. There are a serious of different attempts every 20-30 minutes.

From the Norton Security Log,

Risk Name: HTTPS Tidserv Request 2
Attacking Computer: 01n02n4cx00.cc (91.212.226.5,443)
Source Address 91.212.226.5 (91.212.226.5)

Risk Name: HTTPS Tidserv Request
Attacking Computer: 91.212.226.182, 80
Attacking URL: 7gafd33ja90a.com/ (very long)

Risk Name: HTTP Misleading Application Detection
Attacking Computer: 91.217.162.190, 80
Attacking URL: xp-scaner.com/dm-php? (very long)

Also the Just In-Time Debugger keeps popping up on the main screen. I'm not sure if this is somehow related to viruses or attacks or simply a system error.

Please provide any assistance that you can in helping resolve this issue. I appreciate your help. Thank you!

James

A:Norton is constantly blocking Instrusion attempts by several different attackers and Just-In time debugging keeps popping up.

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

Read other 2 answers
RELEVANCY SCORE 50.4

Hi there,my problem is that certain windows such as Security center/safety panel and some others keep on popping up.i found this link which shows the pop up:http://entiremedianet.com/P/s5/?a=rophawd&...ucid=z04Zu84MYqI just dont know what to do about it, so far i just installed hijackthis and made a log.Hope someone can help me thanks stephan

A:Fake Security Panel/security Center Keeps On Popping Up

Welcome to BC stephan_wonderPlease print out and follow the instructions for using SDFix in BC's self-help tutorial "How to use SDFix".-- When using this tool, you must use the Administrator's account or an account with "Administrative rights"-- Disconnect from the Internet and temporarily disable your anti-virus and any anti-malware real time protection before performing a scan.When done, the SDFix report log will open in notepad and automatically be saved in the SDFix folder as Report.txt. Please copy and paste the contents of Report.txt in your next reply. Be sure to renable you anti-virus and and other security programs before connecting to the Internet.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on Download_mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.... Read more

Read other 9 answers
RELEVANCY SCORE 46.8

Since upgrading to Windows 10, on my Alienware 17R3, I Constantly keep getting a popup to "update Your Recovery Media".  I did update my recovery media immediately after upgrading to windows 10, But I still keep getting the popup every time i reboot my laptop and almost every hour or so.   I have clicked on "Do Not remind me" option on popup , but  I Still Get it!
I figured it no harm to trying to update my recovery media again just a couple days ago to see if I could get rid of the nagging popup, But I am still getting it.   Has anyone else experienced this and know any solution/suggestions?? 

A:"Update your Recovery Media" Constantly popping up. (Even after updating already)

Try asking your question in the Alienware owner club forum.

Read other 5 answers
RELEVANCY SCORE 46.4

Every time I try to run a program, I get a popup asking "how do you want to open this file". Is there any way to disable this annoying Windows 10 issue? A user on a Microsoft thread I found posted the following:

I found a free tech support site that resolved the problem.

http://techguy.org

It was an update that was missing information.

Please help!!

Thanks!
 

Read other answers
RELEVANCY SCORE 46.4

I did a search on this site, hoping to find someone else had this problem, but I came up empty handed.

My annoying problem is that I am using IE 6.0, and the "Work Offline, No internet connection is currently detected, blah blah blah" window keeps popping up! It will pop up even if I don't have IE 6 loaded. If I shut down all of my browsers and walk away, when I come back, there will be like 40 taskbar buttons, all the same, this annoying 'work offline' window has popped up over and over.

I have tried an IE repair, under the add/remove program. Didn't work. I am using AOL to get online, if that matters. But even if AOL is not loaded, nor any browsers, this "work offline' still pops up.

Can someone help? Thanks...
 

A:IE 6 "Work Offline" popping up constantly

Read other 11 answers
RELEVANCY SCORE 46

I'm hoping someone here can help me out. My computer keeps popping up a message at the bottom that states "You have a security problem!", and then it will automatically jump to a website and tell me I have to install Virusremover2008. Can anyone direct me in the right direction on how to make it all stop?

AAHhhhhhh....It just did it again.....

Thanks for any assistance.

Captain Jay

A:"You have a security problem!" Keeps popping up.....

Hello captainjay, welcome. Let's run an MBam scan. Please download Malwarebytes Anti-Malware and save it to your desktop.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen, click on the Show Results button to se... Read more

Read other 9 answers
RELEVANCY SCORE 46

hi, i have the xp security rogue malware thing and I cannot get rid of it, ive ran malwarebytes and it removed it for about a day,malware bytes says I have no malware then it comes back I will attach the malwarebytes log.

someone suggested I use Combofix problem is Avg doesn't wanna delete from my computer.. and combofix requires avg isn't on my computer I've tryed to delete the program, the files in C: but nothing works. please reply as quickly as possible thanks =)
 

Read other answers
RELEVANCY SCORE 46

Over the past three days, whenever I visit certain sites, like Yahoo and Hotmail and several others, I get a pop up box about security that says something to the effect that I am about to display both secure and non secure information on a page, do I want to continue. Does anyone know why this would suddenly start appearing on my computer? I've had it since August and I've never seen this particuar thing before. HaveI somehow changed something on my computer? Can I do somehting to stop this popping up? It just worries me because I've never seen it before. Thanks

A:Security certificate keeps popping up

Quote:





Originally Posted by LisaR3


Over the past three days, whenever I visit certain sites, like Yahoo and Hotmail and several others, I get a pop up box about security that says something to the effect that I am about to display both secure and non secure information on a page, do I want to continue. Does anyone know why this would suddenly start appearing on my computer? I've had it since August and I've never seen this particuar thing before. HaveI somehow changed something on my computer? Can I do somehting to stop this popping up? It just worries me because I've never seen it before. Thanks




There is a setting here that probably will stop that behavior.

Tools>options>advanced and under Security if "warn when changing between secure and not secure mode" is checked uncheck it.

Read other 2 answers
RELEVANCY SCORE 45.6

I keep getting this balloon popping up in the bottom right corner but I know that I have no virus. I am using ZoneAlarm Suite and am up to date it. I just downloaded Hijack This v1.99.1

here is the scan:
Logfile of HijackThis v1.99.1
Scan saved at 12:47:34 PM, on 8/26/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Video ActiveX Access\imsmain.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Video ActiveX Access\imsmn.exe
C:\Documents and Settings\default\My Documents\Widgets\YahooWidgetEngine.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\default\My Documents\Widgets\YahooWidgetEngine.exe
C:\Documents and Settings\default\My Documents\Widgets\YahooWidgetEngine.exe
C:\Documents and Settings\default\My Documents\Widgets\YahooWidgetEngine.exe
C:\Documents and Settings\default\My Documents\Widgets\YahooW... Read more

A:Solved: security alert keeps popping up - PSW.x-Vir

Read other 6 answers
RELEVANCY SCORE 45.6

I have Vista premium with a Norton Internet Security suite firewall enabled. Because of this I've had my Vista firewall off. About a week ago for whatever reason, Vista security center is telling me to enable the vista firewall even though I have Norton running. When I enabled it and made the stupid red shield icon go away, Norton told me to disable it, so I did. When I restarted, the red icon came back. My temporary solution is to tell security center to stop putting up its red icon. What would be my best solution to permanently solve this?

Also I've noticed to other weird possibly related issues. A couple time when I started up my computer, my keyboard wouldn't type when i tried to enter my password, but when I restarted my computer, it could type.
There also have been a couple times when my computer would randomly restart after being locked for long periods of time, and upon relogging in I would be told that the system had an error.

A:Security Monitor icon kept popping up

Do you have a spyware scanner? Sounds like you may have a visitor.

Read other 2 answers