Over 1 million tech questions and answers.

MSN Album Virus

Q: MSN Album Virus

Please help i dont know how to remove it
here is the hijack log

Logfile of HijackThis v1.99.1
Scan saved at 2:36:22 PM, on 6/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\America Online 9.0\aoltray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Java\jre1.5.0_10\bin\jucheck.exe
C:\Program Files\SwiftSwitch\SwiftSwitch.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
c:\program files\aim6\anotify.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\pcclient.exe
C:\WINDOWS\system32\calc.exe
C:\Program Files\Azureus\Azureus.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com" target="_blank" class="wLink">http://www.dell.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [ISUSPM Startup] "c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [ws_uninst] C:\DOCUME~1\ABDULL~1\LOCALS~1\Temp\ws_uninst.exe -s
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [OE_OEM] "C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend Micro Incorporated. - C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
O23 - Service: WLANKEEPER - Intelģ Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

RELEVANCY SCORE 200
Preferred Solution: MSN Album Virus

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: MSN Album Virus

Read other 11 answers
RELEVANCY SCORE 48.4

Hi,

yesterday I was browsing Orkut and clicked on a link that says:

In Portuguese: "Meu album completo est? nesse site: <http://www.freewebtown.com/fotos_orkut">
In English: "My complete album is on this site: <http://www.freewebtown.com/fotos_orkut">

An empty browser window appeared, and I realized I did something stupid.

Since then, my browser shows an error every 10 seconds, saying it's trying to connect to something. I managed to stop it by changing my Orkut password. But I can't acess some sites and browsing is extremely slow.

Can someone help me? Here's DDS log. Thanks a lot!!!
DDS (Ver_09-03-16.01) - NTFSx86
Run by user at 22:27:54,64 on ter 17/03/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Home Edition 5.1.2600.2.1252.55.1046.18.1023.499 [GMT -3:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

============== Running Processes ===============

C:\ARQUIV~1\GbPlugin\GbpSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Arquivos de programas&#... Read more

A:Orkut "My full album.../Meu Šlbum completo..."

Hi,

Sorry for delayed response. Forums have been really busy. If you still need help with this post a fresh dds log, please.

Read other 2 answers
RELEVANCY SCORE 48.4

Hi all!

I know you're probably sick of dealing with requests for help from idiots like me who open attachments they shouldn't (it was from a trusted source...oh well!), but I'd be very grateful for your help.

I've contracted the MSN album.zip virus. I downloaded MSN Photo Virus Remover and removed the virus successfully (at least that's what it told me), but within minutes of restarting my computer, it was back. As with most variations of the virus (from what I can tell), it changes the message it sends to my contact (this is so funnnny etc., can I upload your pics to my myspace etc.). Can anyone help? Thanks in advance! Below is the HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 2:20:17 PM, on 26/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.... Read more

A:MSN Album Virus

Hi, welcome to tsf!

You're using an older version of Hijackthis. Please uninstall the older version via control panel > add/remove programs

Please click Here to download HijackThis to your desktop.

Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.

It will be installed by default here: C:\Program Files\Trend Micro\HijackThis

A shortcut to the application will also be placed on your Desktop.

The program will open automatically after installation.

You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.

Click on "Do a system scan and save logfile" When the log pops up in Notepad, close it and exit hijackthis.
____________

Download Deckard's System Scanner to your Desktop.

Note: You must be logged onto an account with administrator privileges.

1. Close all applications and windows.
2. Double-click on dss.exe to run it, and follow the prompts.
3. When the scan is complete, a text file will open - main.txt.txt<<this one will be maximized and extra.txt <<this one will be minimized.
4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt.txt in ... Read more

Read other 16 answers
RELEVANCY SCORE 48.4

Hi all!

I know you're probably sick of dealing with requests for help from idiots like me who open attachments they shouldn't (it was from a trusted source...oh well!), but I'd be very grateful for your help.

I've contracted the MSN album.zip virus. I downloaded MSN Photo Virus Remover and removed the virus successfully (at least that's what it told me), but within minutes of restarting my computer, it was back. As with most variations of the virus (from what I can tell), it changes the message it sends to my contact (this is so funnnny etc., can I upload your pics to my myspace etc.). Can anyone help? Thanks in advance! Below is the HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 2:20:17 PM, on 26/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.ex... Read more

Read other answers
RELEVANCY SCORE 48

HELP! got that MSN Photo Album virus, can't get rid of it. AVG says it is Trojan Horse 11B. Here is my Hijack This log file.
Logfile of HijackThis v1.99.1
Scan saved at 7:44:38 PM, on 4/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Aliant Dial-up Accelerator\slipcore.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Aliant Dial-up Accelerator\slipgui.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Internet Call Manager\ICM.EXE
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common File... Read more

A:MSN Photo Album virus

Read other 6 answers
RELEVANCY SCORE 48

Hotmail-Album-???? virus. i opened a link from one of my MSN contacts. I have performed multiple scans/cleaners. I just ran HijackThis and here's my log!! Logfile of Trend Micro HijackThis v2.0.2Scan saved at 1:32:57 PM, on 11/8/2007Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exeC:\WINDOWS\system32\drivers\KodakCCS.exec:\program files\mcafee.com\agent\mcdetect.exeC:\WINDOWS\Explorer.EXEc:\PROGRA~1\mcafee.com\vso\mcshield.exec:\PROGRA~1\mcafee.com\agent\mctskshd.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEc:\PROGRA~1\mcafee.com\vso\OasClnt.exeC:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exec:\program files\mcafee.com\vso\mcvsshld.exec:\progra~1 ... Read more

A:Hotmail-album Virus And Hjt Log

One or more of the identified infections is a backdoor trojan.This allows hackers to remotely control your computer, steal critical system information and Download and Execute filesI would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the Trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?When Should I Format, How Should I ReinstallHowever, if you do not have the resources to reinstall your computer and would like me to attempt to clean it, I will be happy to do so.Should you have any questions, please feel free to ask.Please let us know what you have decided to do in your next post.

Read other 8 answers
RELEVANCY SCORE 48

Hi,

I did the dumbest thing by accepting this file from my friend thinking it was a genuine message and the next dumbest thing by opening it. Then all hell broke loose. AVG keeps telling me I have trojans e.g. Trojan Horse Downloader.Generic4.ZQI, BHO.AKY etc.. Although I place them in the virus fault, new ones keep popping out and hijack my MSN by sending out the same file to folks on my list. My IE has also been infiltrated and pop ups with links to spyware pages pop out now and then. I'm using firefox though.

Think I'm not the only one having this problem now. Here is my Hijackthis log. Appreciate any help here!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:38:01 AM, on 8/11/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenge... Read more

A:MSN Photo Album Virus

Read other 11 answers
RELEVANCY SCORE 48

I got a virus or something on msn, and i thought i deleted it from my computer, but it keeps coming back. I can no longer find any files relating to it, but i can tell it it still there. What it does is when i get on msn messenger and am on there for a while, it sends out those spam IM messages to eveyone online. I can't stop it! How can i get rid of it?!

A:MSN Hotmail Album virus, can't get rid of

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:51:42 PM, on 11/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\winsys2.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system\named.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system\named.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\iTunes\iTu... Read more

Read other 1 answers
RELEVANCY SCORE 48

Hi guys, I clicked on the Photo Album.zip my friend sent me and even launched the file zipped inside. As we often talk about photography, the file looked unsuspecting. Argh. Now it's causing so much distress and disruption!

Here's my HijackThis log and I really hope someone can help me resolve this painful issue soon. Many thanks!

I've tried several remedies i found on the forums like ComboFix.exe and MsnVirRem.exe but to no avail.

C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\conime.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\eklpeskj.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\System32\uioaafgg.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35... Read more

A:MSN Photo Album Virus

Hi will appreciate any help please thanks!
 

Read other 2 answers
RELEVANCY SCORE 48

I got some sort of a virus by clicking on a link that one of my MSN contacts sent me. The file was called Hotmail-Album with some 4 digit #. Now my MSN is all screwed up and my friends are saying that I'm sending THEM this virus! I've run a few scans and have deleted all of the Hotmail-Album files from Windows Explorer....but it's still not getting rid of it! Help!

A:Hotmail-album Virus (?)

Welcome to BC jami_auggie_love...Please download MsnCleaner.zip and save to you Desktop.Extract (unzip) the file to your desktop. (click here if your not sure how to do this) but DO NOT use it yet.Reboot your computer in "SAFE MODE" using the F8. To do this restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A boot menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".Double-click MsnCleaner.exe to run the tool.Click the "Analyze" button.A report will be created after the scan and will be saved to C:\MsnCleaner.txt.If it finds an infection, click the "Deleted" button.Reboot normally when done.Please download ATF Cleaner by Atribune & save it to your desktop. DO NOT use yet. Please download and install SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here and unzip into the program's folder.)Under "General and Startup", make sure "Start SUPERAntiSpyware when Windows starts... Read more

Read other 5 answers
RELEVANCY SCORE 48

A few days ago i clicked what i thought were some pictures from a freind on msn, but it turned out to be a very annoying virus. It messages everyone on my contact list a different message along with the virus if they click the download.
Here is the Hijack This scan, if someone could help me interpret this it would be very helpful.
thanks!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:02:40 PM, on 06/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Syman... Read more

A:MSN Album Virus: Hijack This Help

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Your HijackThis is running from a TEMP location. This is not good, as HijackThis will create backups and we don't want them to be deleted when Temp folders are cleared out..

It appears as though you chose "Run" instead of "Save" when you clicked on the HijackThis link. It may be easier just to do this:


Download HijackThis to your desktop

Alternate link

Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micr... Read more

Read other 19 answers
RELEVANCY SCORE 48

I am not all that knowledgeable about fighting viruses. But What I can tell you about this is my friend on msn was infected, it took over their msn and sent me a message, i stupidly opened the file and voila.

Here is what the file name is. It's something to the effect of hotmail-album-####. the number seems to change each time it gets sent to a contact.

How can I delete this and get my msn back?

Also, here is the results of HijackThis. I have no idea what I am looking for!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:01:46 PM, on 11/4/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bell\Security Manager\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRe... Read more

A:msn virus - hotmail-album-####.

Hi, welcome to TSF!

If you still require help, please post a fresh HijackThis log.

Read other 1 answers
RELEVANCY SCORE 48

hi hi

I was looking through the threads... but am not sure if the solutions work on Vista too

so as the others have done, i have downloaded the HijackThis and did a run. here is the log.....

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:37:03 AM, on 24/1/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Windows\System32\rundll32.exe
C:\Users\Catrina\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Acer\OrbiCam10\OrbiCam.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
... Read more

A:MSN Photo Album Virus.... Help

can someone pls help?

P.S. I did not save the virus file, just "run only"

my anti-virus software avg did not find any virus....
 

Read other 2 answers
RELEVANCY SCORE 48

I am having trouble removing a photo album virus that got from MSN. Symantec identified it as W32.Scrimge!gen, but it cannot quarantine the file. I searched the forums and couldnt find this exact issue. Any help would be greatly appreciated. I ran Hijackthis and this was the log:

Logfile of HijackThis v1.99.1
Scan saved at 3:38:45 PM, on 9/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\system32\ntss.exe
C:\WINDOWS\system32\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\sy... Read more

A:MSN Photo Album Virus. Please Help!

Being helped here

http://forums.techguy.org/malware-removal-hijackthis-logs/626693-w32-scrimge-gen.html
 

Read other 2 answers
RELEVANCY SCORE 48

Hi Cybertech, i have the photo album virus, and have tried the advice you have given previously, but when I get to the step that says:
"Open the extracted SDFix folder and double click RunThis.bat to start the script."
I can not find the "extracted SDFix folder", so I am stuck as to what to do!

Hope you can help me because it is really annoying me, and I think it has hacked its' way into my Myspace account as well. I'm just a bit concerned that I have been told that this particular virus is a keylogger, or something to that effect, by a friend, and logs all the information that I input into the my internet making it easier to access my passwords. And whilst I have had this virus i have logged into my back account online, but have changed the passwords in the last hour in fear of my bank account bein tampered with. Am i safe? Can you help! Sorry for such a lengthy message!
 

A:MSN Photo Album virus?

Hi, Warringtonian. Welcome to TSG!!

I've moved your post to a thread of your own so please reply here.

I like to start at the beginning so please do this.
Click here to download HJTsetup.exe
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

Read other 1 answers
RELEVANCY SCORE 47.2

Hi,

I'm using Windows XP version and recently encountered a virus attack. Yesterday, my sister was using Windows Live Messenger & apparently, one of her friends sent her a virus titled 'Photo Album'. See below:

"VIVIAN~ sends PictureAlbum2007.zip
8/10/2007 9:06:50 PM You have successfully received C:\Documents and Settings\User\My Documents\My Received Files\PictureAlbum2007(1).zip from VIVIAN~."

I'm aware that this type of files are actually viruses, but she wasn't aware & went to click on it. Now MSN keeps sending this virus to all our contacts, and forced me to delete the programme from the PC. I'm not sure if the virus is still there & do i have to remove it?

I have tried restoring the computer to an earlier date but unfortunately, it did not work as I did not make the restore dates available previously.

I've tried following the instructions given to a user, dannyb92, on this page:
http://forums.techguy.org/malware-removal-hijackthis-logs/561867-solved-msn-photo-album-virus.html

And I've downloaded and installed programmes like HijackThis and SUPERAntiSpyware. These programmes have scanned my computer and detected the threats, and i have saved the logfiles. But i'm not sure what to do next as different computers have variations.

Can you tell me what to do? And will such viruses on MSN affect the whole PC?

Your help is much appreciated, thank you!
 

A:Photo Album zipfile virus on MSN

Read other 6 answers
RELEVANCY SCORE 47.2

My computer have been affected through the accepting of "Photo Album 2007" , due to my foolishness , i runned it and my msn messenger went sending the files to my contacts . How can i solve this problem , much help will be appreciated .

This is my hijackit Log

Logfile of HijackThis v1.99.1
Scan saved at 11:16:26 AM, on 11-Aug-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\brss01a.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Jun\Desktop\hijackthis_sfx\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
... Read more

A:Solved: Help! Msn photo album virus

Read other 15 answers
RELEVANCY SCORE 47.2

Here's my Hijack this log, any help would be very very very much appreciated

__________________________________________________________________________

Logfile of HijackThis v1.99.1
Scan saved at 5:40:01 PM, on 8/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\clipsrv.exe
C:\WINDOWS\system32\E_S00RP1.EXE
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\Tablet.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\PROGRA~1\LAUNCH~1\CPLBCL53.EXE
C:\Program Files\CyberLink DVD Solution\Powe... Read more

A:Help to get rid of MSN photo album virus needed

Read other 7 answers
RELEVANCY SCORE 47.2

Hi everyone. A friend of mine has the MSN Photo Album virus. She has three anti-viruses and none of them have been able to remove this virus. How does she go about removing it?
 

A:How do you remove the MSN Photo Album virus?

Read other 8 answers
RELEVANCY SCORE 47.2

Hi
one of my fren sent me a zip file that says it;s a picture album. i downloaded the file and unzipped it. to my horror, i realised it's a virus file. And now, my MSN messenger keeps sending images with virus to my friends on my contact list automatically. i had used superAntiSpyware n Hijack This. below are the logs respectively. pls advise me on how to remove this virus. thks

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 08/10/2007 at 02:42 PM

Application Version : 3.9.1008

Core Rules Database Version : 3283
Trace Rules Database Version: 1294

Scan type : Quick Scan
Total Scan Time : 00:21:46

Memory items scanned : 520
Memory threats detected : 0
Registry items scanned : 743
Registry threats detected : 70
File items scanned : 25671
File threats detected : 212

Adware.Tracking Cookie
C:\Documents and Settings\Weijia\Cookies\[email protected][2].txt
C:\Documents and Settings\Weijia\Cookies\[email protected][2].txt
C:\Documents and Settings\Weijia\Cookies\[email protected][2].txt
C:\Documents and Settings\Weijia\Cookies\[email protected][1].txt
C:\Documents and Settings\Weijia\Cookies\[email protected][2].txt
C:\Documents and Settings\Weijia\Cookies\[email protected][2].txt
C:\Documents and Settings\Weijia\Cookies\[email protected][2].txt
C:\Documents and Settings\Weijia\Cookies\[email protected][1].txt
C:\Documents and Settings\Weijia\Cookies\[email protected][2].txt
C:\Documents and Settings\Weijia... Read more

A:Solved: MSN picture album virus

Read other 9 answers
RELEVANCY SCORE 47.2

I was wondering if someone could help me, recently i got the MSN Photo Album Virus and i do not think it has cleared my system after running various antivirus and spyware programs im still having issues. And to top it all off im getting Win antivirus pro popups!

Please help me if you can, here is my HJT log file.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:54:38 PM, on 9/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:... Read more

A:Solved: MSN Photo Album Virus HJT Log

Read other 12 answers
RELEVANCY SCORE 47.2

Hey, I just got hit by the Photo Album virus on MSN and I REALLY want to get rid of it!

Can anyone help me out please?

HijackThis Log File:
Code:
Logfile of HijackThis v1.99.1
Scan saved at 00:44:09, on 31/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\acer\epm\epm-dm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewl... Read more

Read other answers
RELEVANCY SCORE 47.2

Please help me!

I scan with avast but it can't fix my problem. I can't use MSN Messenger anymore, it automatic sending this to all people in my online list.
I really need some help!

Please, anyone?
 

A:How do you remove the MSN Photo Album virus?

* Click here to download HJTsetup.exe.
Save HJTsetup.exe to your desktop.

Double click on the HJTsetup.exe icon on your desktop.
By default it will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 

Read other 1 answers
RELEVANCY SCORE 47.2

Help!
I'm sure I have some version of the msn photo album virus. I was sent a link by a friend and since we were exchanging photos already I clicked on it and downloaded it.
It immediately started sending the file to all of my contacts and would not let me open the windows to talk to them unless they sent me a message first.
I immediately logged out... which stopped the transfers... and logged back in and warned everyone not to open a file from me.
I went into my documents/recieved files and deleted the file that was downloaded onto my computer. Then I emptied my recycle bin. The file had "photo album" in it. I can't remember exactly what it was called as I just wanted to get rid of it.
So... thought everything was fine and it was for a while... then today... a day later.... it did it again.
I have tried EVERYTHING. Have spent hours online today and searched for every variation of the virus that came up. Nothing!
It's driving me nuts!
Please help!
Thanks so much.
 

A:Solved: MSN Photo Album Virus

Read other 7 answers
RELEVANCY SCORE 47.2

ok. I'm infected with that crazy Hotmail-Album-???? virus.
and there is this very suspicious (?) thing in my computer's registry. and friend and i [he has the hotmail virus thing too] both have this thing in our registries and another of my friends [whose computer is fine] does NOT have the thing.
it's called dla and i have no idea what it is or if it is harming my computer! but i would really love to know
anybody know if its supposed to be there? or if it is safe to remove it from my registry???
oh. address of this dla is C:\WINDOWS\System32\dla
would appreciate any help at all!

A:Dla? Possible Connection To Hotmail-album Virus?

Hello jami_auggie_loverHave you run any scans with your Antivirus yet, and run it from Safe Mode? If not do so and I stongly recommend a scan with SUPERAntiSpyware from Safe Mode also.Download,install and uodate it firstRun a Full Scan.If you need an Anitivirus program go HEREAlso run 2 Scans from the ONLINE listLet us know and ask any questions you may have.

Read other 4 answers
RELEVANCY SCORE 47.2

Last week i was stupid enough to accept a file and now i have a virus. It doesnt seem to do anything to my pc (xp) except try and send my contacts it. This is annoying and im gettin blocked because of it. I found what i thought was the sent file and deleted it. However, no luck. I then tried 'regedit' and searched for it but no luck. Then i tried 'msconfig' nd still no luck. What can i do!?


Here is my hijack this thing:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:09:02, on 04/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\KMaestro\KMaestro.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
E:\iTunesHelper.exe
C:\WINDOWS\tsnp2std.exe
C:\WINDOWS\vsnp2std.exe
C:\WINDOWS\system32\ekyxqo.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\svchost.exe
... Read more

A:MSN album.zip virus. Need assitance ASAP

Would i be better off just reformatting the hard drive and re-installin windows xp?
 

Read other 1 answers
RELEVANCY SCORE 47.2

Pls help i keep sending a photo album to my friends on msn and cannot talk to them i also have a file called blastcln.exe which will not go away its good to talk but this is driving me nuts
 

A:photo album virus msn messenger

Read other 6 answers
RELEVANCY SCORE 46.8

i was on msn and in my stupidity i accepted a photo album and it appears to be a virus and it keeps sending the file to all my online contacts. this makes my pc freeze till its finished sending it to everyone , then once its sent it out msn is really slow and i cannot talk to the people i think its bin sent to. this is really annoying and i dont no how to remove it.
any help will be much appreciated thank you
 

A:Solved: msn photo album virus any help much appreciated :)

Read other 16 answers
RELEVANCY SCORE 46.8

Hey guys,
A non-laptop related topic for once...

Earlier tonight a good friend of mine in Sweden has gotten struck with the MSN Photo Album Virus. She says she has accepted it from someone and now it appears to be trying to send 114kb ZIP files named 'Photo_Album28.zip' to friends on her MSN. She also says upon logging into MSN now, her PC acts strangely and she cannot move her mouse curser. It's allready infected some of her other friends too she says, which isn't a good thing.

Does anyone know how to fix this? We really need some help, I've never been struck with it myself but I hear it's a pain to get rid of. x_x

Thanks,
- Lee

PS. Will I need to get a 'Hi-Jack this' log from her?
 

A:Solved: A friends MSN Photo Album Virus...

Read other 11 answers
RELEVANCY SCORE 46.8

This is what I get from hijackthis. What is the next step?

Logfile of HijackThis v1.99.1
Scan saved at 8:41:12 AM, on 8/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Rising\Rav\RavService.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Em... Read more

A:Solved: Need help to solve MSN photo album virus

Read other 15 answers
RELEVANCY SCORE 46.4

I recently, stupidly, accepted a file called Hotmail-Album-2064 which was a .rar file. I opened the file and the .exe file in there disappeared and ever since my msn messenger has been sending the same file to all my online contacts, saying "Is this your cousin?" or "Check out these pics of you can I use them?". Really need to get rid of it coz I can't use messenger anymore....PLEASE HELP!!!!!!!!!!!
 

A:Windows Live Messenger (hotmail-album) Virus

Read other 7 answers
RELEVANCY SCORE 45.2

How do I get rid of the wrong album art displaying for an album in windows 7 windows media player?
There is no such "folder option" as "show hidden files", which is an answer I keep seeing. No answer given on the other thread is helpful at all.

Read other answers
RELEVANCY SCORE 42

I've been using the Windows 7 RC and having a great time, but after restoring or adding to the music library ("My Music" and what not), I've noticed that it is impossible for me to manage album art. For all the positive experiences with Windows 7, this one completely baffles me. When I try to drag album art over to an album in the library, it simply tells me "Album art can't be changed when a song from the album is in use. Please try again later." I've Googled this to death for over 6 hours and haven't found a solution. Obviously I wasn't playing the songs, but there is no obvious reason as to why they may be in use.

A:"Album art can't be changed when a song from the album is in use. Please try again later."

Yes, this is a bug in the RC.† The team is aware of it and will be addressing it post-RC.† Thanks for helping point it out.

Read other 31 answers
RELEVANCY SCORE 42

I added an album to my library in Windows Media Player.

For some reason the album art resolution got gimped.

I tried to drag the album art to the album, but it keeps saying "album art cannot be changed when a song from the album is in use"

The album is not in use. How do I fix this? I deleted it from the library and re-added, but got the same problem.

Read other answers
RELEVANCY SCORE 41.6

{Note from Moderator: Hi Rams16, you tacked your post onto an active thread, though marked Solved, these threads can become active sometimes, and it is always your best move to start your own thread when dealing with Hijackthis logs, malware, etc as it becomes way too confusing for all of us when more than one computer is being worked on in a thread> so, I have moved your post into a thread for you. Thanks. Some one will help you soon.} By Byteman

Hey, I'm suffering from the same problem too , I've read and followed the steps in your post so this is a copy from the notepad.
Logfile of HijackThis v1.99.1
Scan saved at 10:17:15 PM, on 4/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Encarta\Encarta Premium DVD 2006\EDICT.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\devld... Read more

A:MSN Photo Album Virus {Moved to new thread from active thread}

Download this tool to your desktop:
http://www.uploads.ejvindh.net/rootchk.exe
Run the program. After a short time a logfile will turn up. Copy the contents of the log into the thread.

Notice: Some security-programs prevent the creation of dummy drivers with certain names. This may cause false positives. If the log of rootchk contains a lot of hidden drivers, you may want to turn of your security programs while rootchk is scanning (you should then unhook your network connection as well)

Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.

Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your... Read more

Read other 1 answers
RELEVANCY SCORE 34.8

In WMP 10, I get one line per listing in Library view. In WMP 11, Album Art fills the screen with useless icons and only allows 4 or 5 entries per screen to be seen. Newer is NOT always better!

How do I get rid of Album Art all together? I want to see my song listings the same as I did in WMP 10.

Thanks.
 

A:WMP 11 - Album Art

Bump
 

Read other 2 answers
RELEVANCY SCORE 34.8

Hi all

i post my question here, posted in microsoft forum, but the issue not resolved yet...
WMP 11 & ALBUM ART
WMP 11 on my XP PRO SP3 stopped from auto. downloading album arts (for mp3/cda). ALL music files & legal audio CD's were tested on another vista PC with wmp 11 and auto. downloading album arts/names of tracks works fine(so it means album art are present on the online database).
i've no problem manually downloading album arts. i checked all player definitions again'n'again all are fine. i un/reinstalled WMP, moved back to version 9, rebuild WMP library , did sfc/scan, i do not use system restore and i do not recall any new update/software i installed lately,no virus/malware present,booting in to clean boot did not help also. -but still no good...
i read this article as well
Add or Change Album Art
especially the part-"Why Album Art Is Sometimes Missing"
and found one intresting line in it-"...administrator has prevented your computer from downloading items such as album art."
Now- i'm the admin on my PC and my questions are:
1-how\where exactly can i check if administrator(me) prevented computer from downloading items such as album art ?(may be i did it by mistake ?)
2-is there another way to fix the issue (except repair installation for windows which i want to avoid)
Thanks

A:Wmp 11 & album art

AT LAST......here is the solution works fine for me:

-close wmp
-go to internet explorer>tools>options>advanced>http1.1 settings>uncheck the 2 boxes below.
press ok .
-now insert your CD/media and that's it!

Read other 1 answers
RELEVANCY SCORE 34.8

Hi...whenever i add a bigger resolution album art for my songs in Windows Media Player 11.0.6000.6324, it automatically gets adjusted to a smaller resolution. My OS is Win Vista Home Basic. I had no problems with XP. Please help...
 

Read other answers
RELEVANCY SCORE 34.8

Hello all!

I have recently spent considerable time and energy applying correct album art to my entire music collection, along with digitizing the CDs into the FLAC format. Then the entire collection is converted to MP3 format for use in portable music players, etc.

I have been using Tag&Rename to do the tagging. It reports that every file in the collection has album art. However, when I open the files in winamp, many albums dont. And it appears random which ones work. My guess is that I have used an incorrect format for the images, ie, used a gif inside of TR instead of a jpeg or something like that, but I am not sure.

Anyone have any ideas on making the files more portable with their art?

Billy3

Oh, a further note: The flac files have been converted to FLAC 1.2.1 to support album art, they were in too old a version at the start; the format at the time I originally did some of my disks did not support it.

Read other answers
RELEVANCY SCORE 34.8

I went to download wmp album art 3d in wmp and the player crashed and i havent been able to open the player since. I checked to see what the error was and its message is albumart 3d.dll wmp error. Can someone help? Im not to computer savvy
 

A:Album Art 3d

Read other 8 answers
RELEVANCY SCORE 34.8

Hi ,
How can I stop this kind of problem "AlbumArt_{2D1E40DD-CD1D-4E73-9F1A-5DDF10085408}_Large" ?
For some reason .. Some of my song with album art appear that . After I uncheck "Hide protected operating system files" I see lots of this junk file ~.~

A:Album Art

Thats normal, windows media player creates those files and uses them to display the album art when its open. Hide them again and forget about them. If you delete them media player will just create them again anyway.

Read other 2 answers
RELEVANCY SCORE 34.8

How can i stop windows creating album art files? how can i get rid of them??

Read other answers
RELEVANCY SCORE 34.8

some of the cd's i ripped to windows media player do not have album art. how do i put it on after the ripping process is done?

A:album art

well i solved it myself. all you have to do is copy an image then go to the album art. right click and hit paste album art. so this is resolved :)

Read other 1 answers
RELEVANCY SCORE 34.8

Recently Iíve been organizing my MP3 collection and I have realized that Windows Media Player has been collecting album art for my songs. They donít take up much room but thereís just so freaking many of them. And every time I delete them they always come back.

How can I get WMP to stop collecting them?
 

A:album art

Where are you deleting the album art from? It is stored in the hidden tags each track has. Also which version of WMP do you have?
In WMP10 under tools, options and on the library tag, make sure the 'retrieve additional information from the internet' box is not checked.
You can get free music tagging programmes which will allow you to delete them all in one go, you need to ensure that any changes you make to a group of tracks are only applied to the album art part of the tag - ie delete the art only and not the whole tag.
The art really isn't that big though and causes no problems in playback. My 6,000 odd tracks with album art makes for a more colourful display when playing
 

Read other 1 answers
RELEVANCY SCORE 34.8

Having a small problem:

I can't figure out how to change the album art that is displayed in the artist view of WMP. I don't have any problem getting the artwork I want, I just want to control which album art is displayed on the artist icon, instead of WMP choosing it at random (or however it picks the artwork).

A:WMP Album Art

It always picks the album art of the first song that's in the album. (if that makes any sense)
So put the album art you want displayed in the #1 song (see if that works for you)

good luck

Read other 4 answers
RELEVANCY SCORE 34.8

not sure where to post this but as its music related..here it goes, since whatever solution I'm offered is gonna involve software...

got a bunch of mp3s I wanna load onto my nintendo 3ds.

I have windows 8 as my OS.

how do I remove album art from a bunch of mp3s on windows 8, so I can stuff them onto my nintendo 3ds?

A:help with mp3 album art please?

mp3tag can do what you need and much more and yes it is free.

just right click on any of your music files, click extended tags and then over on the right you will see the album art work, you can then choose to change it, remove it or add new, whatever you want.

Mp3tag - the universal Tag Editor (ID3v2, MP4, OGG, FLAC, ...)

Read other 4 answers