Over 1 million tech questions and answers.

After Removing "Antivirus System Pro", Bad Search Results

Q: After Removing "Antivirus System Pro", Bad Search Results

Hello!

I was infected with the Antivirus System Pro virus. This caused porn pop-ups, fake error messages, fake virus-protection software, etc.

I installed MBAM, which immediately solved all of the worst problems.

However, there is still one specific issue that I cannot get rid of. When I use a search engine (Google or Yahoo), it returns strange and inaccurate results: random travel websites, medication ads, yellowpages.com, just weird stuff that has no relevance to my search. This happens in either Firefox or IE. It happens whenever I use the toolbar search box, but not when I type my search directly into Google.com

I have run Avast and AdAware and CWShredder to no avail. None of these programs have identified the virus, or whatever it is.

Here is my hijackthis log:

Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\AOL\1126379938\ee\AOLSoftware.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\SBC Self Support Tool\bin\mpbtn.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\runservice.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896" target="_blank" class="wLink">http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus.../sbcydsl/*http://www.yahoo.com/search/ie.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O1 - Hosts: ::1 localhost
O1 - Hosts: 91.212.127.226 winguard2009.microsoft.com
O1 - Hosts: 91.212.127.226 winguard-2009.com
O1 - Hosts: 91.212.127.226 www.winguard-2009.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll (file missing)
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\common\YIeTagBm.dll (file missing)
O2 - BHO: (no name) - {CD4C3CF0-4B15-11D1-ABED-709549C10000} - (no file)
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [Reminder] %WINDIR%\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1126379938\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Mixersel] C:\Program Files\Realtek\InstallShield\mixersel.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\LXCFtime.dll,[email protected]
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: AT&T Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: Install Pending Files.LNK = C:\Program Files\SIFXINST\SIFXINST.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: MLB.TV NexDef Plug-in.lnk = C:\Program Files\MLB TV Mosaic\Swarmcast\mlb-nexdef-autobahn.exe
O8 - Extra context menu item: Download with Go!Zilla - file://C:\Go!Zilla\download-with-gozilla.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: SBC Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5483.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/mcgdmgr/1,0,0,26/mcgdmgr.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: FreezeScreenSaver - Unknown owner - C:\WINDOWS\system32\FreezeScreenSaver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - C:\WINDOWS\runservice.exe
O23 - Service: lxcf_device - - C:\WINDOWS\system32\lxcfcoms.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS

--
End of file - 8651 bytes

RELEVANCY SCORE 200
Preferred Solution: After Removing "Antivirus System Pro", Bad Search Results

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: After Removing "Antivirus System Pro", Bad Search Results

Read other 12 answers
RELEVANCY SCORE 102.4

My Toshiba notebook was saved after reading one of the members' advice,
I installed "Hijackthis" to get rid of "108 Search Assistant Alert" problem, after doing that I found out my Norton Antivirus 2004 was not working. I could either re-install or uninstall Norton Antivirus 2004 as it keep asking to install higher version of Internet Explorer (something like version 5.01 or higher) but my IE version was already Verion 6.0. Then, I tried to intall IE 6.1 but the message said that I already had a higher IE version in my notebook. Shall I uninstall IE and re-intall it again, coz the version no. is mssing on IE.
p.s. My operating system is Windows XP.
 

A:Can't install Norton Antivirus 2004 after removing "108 Search Assistant Alert"

My advice would be to go to this site http://www.grisoft.com/us/us_dwnl_free.php and download the FREE AVG anti-virus its on millions of computers worldwide and in my opinion is as good as any other paid for or not
 

Read other 1 answers
RELEVANCY SCORE 98.8

Hello,

I need help manually removing the "Antivirus System Pro" virus. The same suggestions are found on many websites promoting anti-virus software for removing specific registry keys, files, and folders. But, none of these exist when I search for them. Please help... What is the most troubling is that the registry keys are not hard to locate, they are simply not there.

Here are examples of what is suggested to search for and cannot be located.
For example:

Block Antivirus System PRO sites:
hxxp://www.antivirsystem.com
hxxp://www.inetavirus.com

Stop Antivirus System PRO processes:
%ProgramFiles%\Antivirus System PRO\Antivirussystempro.exe
%ProgramFiles%\Antivirus System PRO\uninstall.exe
c:\WINDOWS\sysguard.exe

Get rid of Antivirus System PRO files:
c:\WINDOWS\system32\iehelper.dll
%ProgramFiles%\Antivirus System PRO\conf.cfg
%ProgramFiles%\Antivirus System PRO\mbase.vdb
%ProgramFiles%\Antivirus System PRO\quarantine.vdb
%ProgramFiles%\Antivirus System PRO\queue.vdb

Delete Antivirus System PRO folders:
%ProgramFiles%\Antivirus System PRO\

Remove Antivirus System PRO registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antivirus System PRO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ?Antivirus System PRO?
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad ?ieModule?
HKEY_CURRENT_USER\S... Read more

A:Manually removing the "Antivirus System Pro" virus

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 97.6

Hi!
I use Yahoo search engine and everytime I try to search for anything lately, in the search results, in addition to the words I entered, "200" and "YST" are highlighted as if they were entered in the search perameters when they weren't, thus limiting and completely screwing up what I am looking for. Can anyone help? Thanks in advance!

Here's my HijackThis log:

Logfile of HijackThis v1.97.7
Scan saved at 10:24:55 PM, on 8/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\WINDOWS\system32\pctspk.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\WFXSVC.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\wfxsnt40.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\Pop Up Stopper and Ad Killer\pusak.exe
C:\Program Files\Java\j2r... Read more

Read other answers
RELEVANCY SCORE 90.4

How can I make it such that in Search Results, when I open a folder in a new window (by right-clicking a file), I will be directed to a window with the "full path" displayed in the address bar, instead of Search Results\"Path" or Search Results>"Path"?
Edit: "Right-click -> open file location" will open the file location and have the full address displayed. But that doesn't solve the problem if I have more than one result that I need to go to and check.

A:Open a new window with "full path" instead of Search Results\"Path"

See if this works, from the control panel, click on Folder options > View tab > check the box that says "Display the full path in the title bar" (classic theme only)

Read other 9 answers
RELEVANCY SCORE 86.8

Hi

How do I get the search box "search programs and files" (i.e. the one above the Start button) to sort the results within each section by DATE, rather than by name?

Note I do NOT mean the search top right in Windows Explorer, which fwiw, is already working nicely in date order!

Clue:
I have installed Classic Shell but I read a thread saying that it wont have touched this.

J
EDIT: I am told that the files listed are ranked partly by frequency of use. And I am now wondering is this is data which my CCleaner utility is deleting. Either way the sort order have become VERY much less useful in the last couple of weeks. Any thoughts?

A:How can I change sort order for "Search Programs and files" results?

Hiyya ship mate I just went to Start > right clicked on it > Properties > Customise > there is a drop down list in there I don't know if that is of any help??

Read other 9 answers
RELEVANCY SCORE 86.8

I am having an issue with the search results window constantly popping up whenever I start up the computer or login to a profile. It also pops up a new search results windows whenever I select anything with my mouse. However I have ran several virus and malware scans with MBAM, Symantec Corporate, and PCTools Spyware Doctor, and they have located and either removed or repaired all the infected files. Yet I am still having the issue of the search results window popping up every time the computer boots up and logs in. Can someone please assist me in identifying why this is occurring. Below you will find a log from Hijack this:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:53:06, on 07.12.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\s... Read more

A:Annoying "Search Results" window popup on Startup

Hello and welcome to TSF.

It may have something to do with adding the Print Directory feature for folders in Windows XP as explained in the following article:

http://support.microsoft.com/kb/321379


Quote:




After you follow the steps in the previous sections, Search Companion may start when you double-click a folder instead of the folder being opened. Or, if you have associated other actions with file folders, those actions may be performed instead.




Having said that, although no malware is showing in the log, HijackThis is no longer used as the initial analysis tool in this forum. If you still have issues, please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 86.8

Hi all,

Please helppppp.

In my case the search does not work for any user profile!

from the search programs and files when I type in a command or program name here's what I get blank icons "programs, control panel, documents, Microsoft Outlook, Files" If I press on one of them I recieve a pop up saying "These files can't be opened. Your internet security settings prevented one or more files from being opened".

If I press on the "search more results" then the search I'm looking for is found, which in my opinion search and indexing is working from within explorer but not from within the "search programs and files" from the start Menu. Fromm within Outlook 2010 I'm also able to locate any email easily.

Here are the list of things I tried so far.

- don't have or can't find so I couldn't delete the following key "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{EF87B4CB-F2CE-4785-8658-4CA6C63E38C6}\TopViews\{00000000-0000-0000-0000-000000000000}

- deleted indexing and created it again.

- I can not restore PC to a previous state as I do not have any restore points

-search does not work in safe mode either

- search is enabled under Windows Features

- Search service is running

- Installed these 2 hotfixes KB2268596-x64 and Windows6.1-KB977380-x64

A:Windows 7 "search programs and files" displays no results.

Help still needed please

Read other 1 answers
RELEVANCY SCORE 86.8

Good day everyone! My problem here deals with the Search Results window, it "spams" itself unintentionally. First, I've encountered this problem moments ago when I turned on my PC. And during startup, suddenly, lots of windows of Search Results began to pop out! I tried to solve my problem by my own means, when I scanned my computer, it showed no virus at all. I also searched some related problems like this on the internet but found none.

Please help! It is very irritating already, because it does not only happen on startup but also occasionally, especially when it's lag. I also noticed that some keys like the Ctrl, Shift, Tab and the mouse click itself when pressed triggers this bug. There is also like a bug like thing that happens in my web browsers; the latter keys mentioned can cause sudden malfunctions like the auto appearnce of the Find (Ctrl F) and some upper case keys cannot be accessed through Shift.

PLEASE HELP! I AM BECOMING HELPLESS WITH THIS PROBLEM! It is a very big hindrance to me especially when I do graphic designing and programming.

A:Search Results window "spams" itself (it opens many times)

Hi anobilisgorse welcome to Seven Forums.

Did you do any updates on your pc with drivers or software? What anti virus are you running?

Also try to run sfc /scannow under command prompt

Start - cmd - (right click on cmd) run as administrator - Type the following command - sfc /scannow

Read other 9 answers
RELEVANCY SCORE 86.8

I'm using Windows 7 SP1, recently clean installed. The only non-Windows processes I have running in the background are DropBox and the 2 Apple iPod services.

When I use the Start Menu search box to search indexed files, it works fine. But when I click the "See more results" button at the bottom, which should open up a full search window, it opens up but *immediately* redirects the window to the top item in the tree hierarchy, which in this case is "Favorites." If I click "back" in explorer, I get my search results - but this is annoying.

Additional info: when I click the "Windows Explorer" link from the start menu, I hear the navigation "click" sound every time I open it, as if it's redirecting as soon as I open it. This does *not* happen when I open explorer with the Win+E key combo.

Any idea what's causing this? Thanks much in advance for your ideas.
 

Read other answers
RELEVANCY SCORE 86.4

I double-click and get "search" instead of "open"--only when I click a disk, like Hard Drive C: or Floppy A: or CD F: and so on.

It didn't used to do this, so I must've inadvertently changed some setting somewhere, but darned if I can find it now.

Any ideas?
 

A:Solved: On the "my computer" list, I double-click on disks and get "search" instead of "open"

Read other 12 answers
RELEVANCY SCORE 86.4

Hi I'm new here and I'm looking for some help in removing these annoying spyware problems that have gotten into my computer somehow. Let me try my bext to explain:
Getting these results in every Google & AJ search result page:

Free Virus Scan
Scan for spyware, malware and keyloggers in addition to viruses, worms and trojans. New threats
and annoyances are created faster than any individual can keep up with.
http://defender.veloz.com/ - 15k

Finding COMPUTERS is a Click Away at 2020Search.com
Having trouble finding what you re looking for on: VELOZ? 2020Search will instantly provide you
with the result you re looking for by drawing on some of the best search engines the Internet has
to offer. Your result is a click away!
http://www.2020search.com/ - 47k Click to expand...

Among others, which are obviously not related to the search, but placed in there some how.

"Web Savings"

When I Right-Click in an IE window I get an option for "web savings" I dont have a clue how it got there or what it does, but Im fairly sure it has something to do with the other spyware problems I'm having.

Browser Hijacks & Random Popups

Every time I open a new page I get a popup, and sometimes these will make my IE go to a certain site, like the ones above called "veloz"
My operating system is: Windows ME
I only use Internet Explorer
I do not use Kazaa or any other p2p programs
I've tried fixing these problems with both A-A and Sp... Read more

A:Major Spyware Problems - browser hijacks, strange search results, "web savings", etc.

Read other 11 answers
RELEVANCY SCORE 86.4

When I "search my stuff" from the start menu, some files that I know to be indexed never show up in the results. And at the top of the search window, it reads: "These results may be incomplete, search is still indexing your stuff."

I've rebuilt the search index, which says it finished successfully, indexing 3000-something items, but the problem remains.

A:Search can't find some files, says "These results may be incomplete"

Agent Ransack is an excellent program for searching. Much better for finding stuff IMO. Give it a try.

Read other 0 answers
RELEVANCY SCORE 86.4

Guys,

I found what I thought was a good tip on trying to get the "Search the Web and Windows" text box in Windows 10 to display Google Search results instead of Bing, which is the default in Windows 10 see the steps here:

http://www.gottabemobile.com/2015/08/22/how-to-change-the-search-engine-in-windows-10-to-google/

My problem is that when I get to the Advanced Settings Menu in MS Edge, all that shows to add a new search provider is Yahoo. (A choice of keeping Bing or using Yahoo.)

A few other things:

1.) IE 11 is my default search browser.

2.) I don't use Cortana and have it turned off in the "Search the Web and Windows" Settings.

3.) Is it necessary to make Firefox, which I also have, the default browser in Windows 10 to get the Search box to search via Google instead of Bing? I kind of don't want to do that, because Windows 10 is so tightly integrated with the search box and MS products that MS really expects people to use a MS product such as IE, or MS Edge with regards to searching.

4.) People who have been able to successfully change the ability to use the search with different browser results, have often found Windows 10 updates, changing the default back to Bing again.

Jack
 

Read other answers
RELEVANCY SCORE 86.4

Win 8.1 search for "restore point" gives no results found.

It used to take me to where I could create a restore point.

A:Win 8.1 search for "restore point" gives no results found

Try System File Checker, right click Windows Start Button on Desktop select Command Prompt (Admin)
Copy and Paste this

sfc /scannow

Do not close prompt then copy paste

dism /online /cleanup-image /restorehealth

Try search again.

Read other 16 answers
RELEVANCY SCORE 86.4

I have no idea why, but a week ago I tried to search for something in Google and instead of showing the results in the same tab (I have Internet Explorer), my browser opens a new tab with the title "blank page" and nothing shows up, even after refreshing or waiting forever. I ran Adaware and my AVG virus scanner, but nothing helps. I cleared my cookies, Temp. Internet files and still nothing. The Google help page directed me to try HJT and here I am. Please help. I realize the problem is semi-trivial, but something isn't right. Thanks.

The results from my HJT scan are attached.
 

Read other answers
RELEVANCY SCORE 86.4

I keep having the "search results for poker online" POPUPs on my screen.
Below is my Hijack Log. Can someone please help me.
Logfile of HijackThis v1.98.2
Scan saved at 12:06:35 AM, on 5/12/2004
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\System32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\WINNT\system32\CTSvcCDA.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\WinPoET Broadband Connection\WrOS.EXE
C:\WINNT\system32\MsPMSPSv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\WinPoET Broadband Connection\winpppoverethernet.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Kingsoft\Powerword 2003\XDICT.EXE
C:\Program Files\Common Files\Microsoft Share... Read more

A:"search results for poker online" POPUPs

AdAware SE http://www.majorgeeks.com/download506.html
SpyBot S&D http://www.safer-networking.org/en/download/

DL them (they are free), install them, check each for their definition updates and then run a scan with both AdAware and Spybot, fixing anything they say.

If this doesn't solve your problem,post whatever is left of your log.
 

Read other 1 answers
RELEVANCY SCORE 86.4

Title says it all. I open Windows Explorer, select a folder, type in a search query for files that exist but it only returns "No items match your search." It's been like this for a few days now.

The only thing I recall that might have had something to do with this is installing a lot of updates a week ago or so. However, even after that, the search function was working as usual... one thing of little consequence to me was that Explorer would never find anything on the very first search, so I'd always have to do a single "useless" search then re-search and it would find the file(s) I was looking for. That didn't bother me too much. I've lived with that for several months now.... Now, it's stopped working completely.

Any suggestions would be appreciated.
 

A:Windows Explorer "Search" returns 0 results

Have you tried this:

Try this...
start>run>c:\windows\system32\ciadv.msc

Click on Action>Properties>and under the Generation Tab, check "Index Files with Unknown extensions".

Then rt. click System>properties, and then under the Tracking and Generation Tabs, make sure the Inherit from Service is checked...

Alternatively, there is a reg edit in the following article.....

Using the "A word or phrase in the file" search criterion may not work
http://support.microsoft.com/kb/309173
 

Read other 1 answers
RELEVANCY SCORE 86.4

When I search from my IE6 address bar, I always get results from "wwo.notfounditem.net"... here's my guts:

-----------------
Deckard's System Scanner v20070426.43
Run by Mike on 2007-05-02 at 14:33:22
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
17: 2007-05-02 21:33:30 UTC - RP755 - Deckard's System Scanner Restore Point
16: 2007-05-01 22:26:26 UTC - RP754 - Software Distribution Service 2.0
15: 2007-05-01 20:43:39 UTC - RP753 - System Checkpoint
14: 2007-04-29 23:09:55 UTC - RP752 - System Checkpoint
13: 2007-04-27 21:50:06 UTC - RP751 - Software Distribution Service 2.0


-- First Restore Point --
1: 2007-04-20 18:21:05 UTC - RP739 - Removed Adobe Acrobat 7.0 - Tryout Professional - English, Fran?ais, Deutsch


Backed up registry hives.

Performed disk cleanup.


-- HijackThis (run as Mike.exe) ------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 2:35:13 PM, on 5/2/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Pr... Read more

A:bogus address bar search results always "wwo.notfounditem.net"

Won't someone help me????? My address bar has been hijacked? Is anyone out there????????

Read other 3 answers
RELEVANCY SCORE 86.4

Hi, if my language settings are USA, then search in Settings works.

But if I change the display language to British English, I get the well-known "Search results aren't quite ready yet, but we're working on getting them together".

Cortana search works (although I may be prompted to set language when changing language as above).

I have tried to find every case where language settings need to be changed to British English, and downloaded UK language packs and speech. Even when everything I can find is set to UK English, search in Settings fails.

However, if I revert to US English, it works.

I have read fixes about turning Cortana off and reinstalling apps - but this is usually where both Cortana isn't working and this message appears. This does not seem to apply in my case, and surely it should not be necessary to do that merely to support changing language.

Any thoughts? Thanks!

A:Settings: "Search results aren't quite ready yet" (UK - US ok)

Eventually solved after a couple of in-place repair installs and determined attempts to change the language and install UK English features as required. Found the system tray input method did not 'stick' on UK keyboard easily- had to keep changing it back from US. It seems to be ok usually- for now.

Read other 0 answers
RELEVANCY SCORE 86

My roommate got a particularly nasty version of the windows 7 antivirus 2012, it even installed a fake version of Malwarebytes. I was able to remove it by starting in safemode, killing it's process and running spybot followed by an avast full system scan, then a boot time scan. Now several scans and restarts later all scans are coming back clean (sfc included).

That being said, after the malware was removed .exe files were broken, windows firewall wouldn't start and the service was missing from the services list [BFE was also missing] (manually fixed the registry via various posts on this forum, these are working again). The netbook still won't connect to the internet, and I suspect windows update is broken as well. The malware also did something to Avasts realtime web shield, the shield is stuck off, attempting to turn it on does nothing. While the malware was still on the computer clicking the 'turn on' button in avast would trigger a popup from the virus (not an avast popup, a popup from the malware itself). All of the system restore points have been corrupted as well.

So, I'm not really sure what to do next... I would usually do a clean install of the OS in a situation like this, but his netbook doesn't have an optical drive (it would be easy enough to back up all his files, if there is an alternative method for reinstalling the OS...?). Any advice or suggestions would be greatly appreciated.

A:Various registry problems after removing "Windows 7 antivirus 2012"

Welcome to Windows Seven Forums.

A clean install does sound to be the best option.

Have a look at this tutorial, which explains how create a bootable USB drive.

USB Windows 7 Installation Key Drive - Create

I've done it myself and the install is far faster than installing from a DVD.

Read other 2 answers
RELEVANCY SCORE 85.6

Got a small problem of a file named 'Search results' (which appeared a few days ago) with a folder and a magnifying glass icon (the normal search result icon) on it.
I didnt save any search results as far as I know.

When I double click on it, nothing happens, and I cannot delete it either.
I tried moving it to another folder, but in that folder a shortcut gets created and the file doesn't delete.

When I right click it, i get only the following options...
Open, Explore and create shortcut.

The other user account in my PC also has this file on the desktop.

Should I try to delete this file using dos? if so how?

Pls. help guys,

Regards,

Stefan

A:"search results" file on desktop

do u use mozilla

Read other 7 answers
RELEVANCY SCORE 85.6

Hi,

I would be very grateful if someone can help me with a broken "See More Results" link after search.
Everything works fine from Windows Explorer, just after clicking "See More Results" i get a screenshot saying - Windows cannot find search:query= ? Make sure you typed the name correctly and then try again.
I am using Windows 7 Home Premium 64 bit.
Many thanks in advance,
Phil.

A:"See More Results" search link is broken

Hi Phil, welcome to SevenForums!

There's a Microsoft Answers thread about this very issue: Windows could not start the Windows Search service on Local Computer

Hope that helps!

Cheers,

Walker
Windows Outreach Team

Read other 9 answers
RELEVANCY SCORE 85.6

This is my first post to this website. For about two weeks now, I have had problems when I use a search engine. When I click on a link it redirects me to an unwanted page such as 'yawarez.net'. I move my mouse over the link and in the bottom of the web browser it has 'seocash.us'. Also, I am unable to access certain sites that I was able to before. I have used AVG, Malwarebytes, Avira, AdAware, etc and none of them find anything wrong or infected. Please help so that I may be able to surf the internet without a headache. Thank you very much!!


DDS (Ver_09-01-07.01) - NTFSx86
Run by David N. Mugerwa at 11:59:33.35 on Sun 01/11/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.323 [GMT -5:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Updated)
FW: Norton Internet Worm Protection *disabled*

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avg... Read more

A:Search results redirects with "SEOCASH.US"

Hello, FutureSuper
Welcome to TSF

My name is Billy O'Neal and I will be helping you. (Billy or Bill is fine, if you like.)
Please give me some time to look over your computer's log(s).
Please take note of the following:In the meantime, please refrain from making any changes to your computer.
Also, even if things appear to be running better, there is no guarantee that everything is finished. Please continue to check this forum post in order to ensure we get your system completely clean. We do not want to clean you part-way up, only to have the system re-infect itself. :)
If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
Finally, please reply using the button in the lower left hand corner of your screen.
Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just put a post here so that I know you're still here. We get a lot of people who simply leave, and if there is no contact for that amount of time I will have to assume you have "vanished" .

There is Evedence of Cracked/ILLEGAL software on this machine!
Using cracked/illegal software compromises your system security, and increases your chance of infection.
Please read the policy here at TSF for Cracked software: http://www.techsup... Read more

Read other 19 answers
RELEVANCY SCORE 85.6

Hi. I'm having some trouble. I just reformatted my hard drive, reinstalled Windows ME, and upgraded to Windows XP. But, when XP starts now, a "Search Results" window opens randomly. And when I close it, another one opens, and when I close that, another one... etc., Anyway, how can I get rid of that? I have antivirus software, firewall, antispyware... none of them say anything about having anything. Is something wrong with some sort of boot directory? Please help. Thanks.

A:"Search Results" windows pop-up on startup

greetings
sounds like a trojan.
please repost in the security section if one of the security techs doesnt pick it up
good luck

Read other 1 answers
RELEVANCY SCORE 84.8

Hello,

A Friend of mine asked me to look at their computer because they thought they had a virus.


You guys have helped me before and after looking in to their PC and doing a little research, I realized I would need your help again.

This rogue antivirus program called Personal Antivirus is on their computer. It keeps telling them they have a trojan and they need to "click here" to fix it. And of course, they want a credit card to bill you for "more files".

The other odd thing is that it appears to be blocking access to the internet. I'll try to access a random web page or even their DSL modem and it behaves as if it's "trying" to go to the requested address but then it comes up with a blank page and at the top it says "blocked"

They've got all kinds of crap software on here like different toolbars that I'd like to get rid of as well as some sort of proprietary browser from comcast. (and they no longer have cable, they switched to DSL)

I took their computer home as I know this is going to be a few days worth of going back and forth and I've got it set up next to me. (isolated from my network).

Per the instructions, here is the text from DDS.txt ...


DDS (Ver_09-10-13.01) - NTFSx86
Run by JoviFan123 at 20:18:52.18 on Mon 10/12/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.447.123 [GMT -5:00]

AV: Norton 360 *On-access scanning disabled* (Outdated) ... Read more

A:Need Help Removing "Personal Antivirus" (Rogue)

This is the friendly 72 hour bump.

Read other 19 answers
RELEVANCY SCORE 84

I regularly clean out my log files by going to Windows Explorer, selecting "computer" and typing "logs" into the search bar. The results have always shown quite a long list of logs.
Lately it does not find very many logs at all such as "Internet logs," WindowsUpdate logs" etc. I cannot understand why it has suddenly stopped displaying these logs.
Would anyone have a solution to this problem?
Thanks and peace!

A:"Search" not showing all results!

My guess is that because you have been cleaning them out regularly, less are being stored. Congrats. You have gotten your computer to run more smoothly than most.

Read other 9 answers
RELEVANCY SCORE 84

When I click on My Computer and then double click on Local Disk (C:) I'm taken to "Search Results" instead of to my C drive. What is going on? The same thing happens when I go from My Computer to 3 1/2 Floppy (A:) Drive or DVD Drive (D:) or CD-RW Drive (E:). Why am I being taken where I don't want to go and how can I fix this problem?

My computer is a Dell 8200 Laptop.
My OS is Windows XP with Service Pack 2.
I have an 80G hard dirve and 2G of RAM.

A:Problems with "Search Results"

Folder Opens Search Window

Go to Start > Run and type in: regsvr32 /i shell32

If that doesn't correct the issue use this automated edit:

Search Opens When Double Clicking a Folder or Drive (Line 18)
http://www.kellys-korner-xp.com/xp_tweaks.htm
To use the Regedits: Save the REG File to your hard disk. Double click it and answer yes to the import prompt. REG files can be viewed in Notepad by right clicking on the file and selecting Edit.

3/4 down the page
Folder Opens Search Window
http://www.kellys-korner-xp.com/xp_f.htm

Or here:
Fixes the problem where Search or Command Prompt opens when double clicking a folder
http://www.dougknox.com/xp/scripts_d...older_open.htm

Read other 2 answers
RELEVANCY SCORE 84

OK, I have seen posts with the same problems I have but I wasn't sure if the advice they recieve will be the same as I require. I did a "whoopsie" and opened a file I really knew was just going to ruin my day but followed my stupid impulse of "oh this is probably legit." Anyway for the last, I dunno, 6 hours I have been fighting trojans, malware, and random reboots; now I finally have some room to wiggle through the internet.

As soon as I opened this can of worms McAfee alerted me of a few Trojans and such it had blocked and I thought I had skated by unscathed but that was foolish. I was soon up to my nose in fake alerts, Windows prompts telling me that my files are infected and asking me to open an antivirus, and my browsers; Opera, Firefox, and IE had become sabbotaged with hijacked links, and popups.

The prompts were blocking my programs from running and from allowing me to open Task Manager for awhile. After a few nasty random reboots and blue screens of death I got the process causing "Antivirus System Pro" to stop. Scan with McAfee showed nothing. Tried Spywall, nothing; Ad-Aware, 700orso bad cookies; malwarebytes, a bunch of trojans and malware. Still I have all my links in Opera taking me to "thefeedwater" sometimes in firefox, I can't even run IE, and I still have to kill "Antivirus System Pro" every start up. (Also I had to install Microsoft Visual c++ 2008 or something to get Ad-aware to run which only... Read more

A:"thefeedwater" & "Antivirus System Pro"

Read other 16 answers
RELEVANCY SCORE 83.2

When I run spybot search and destroy, these "spyware,antivirus,malware" names appear and im very concerned. Does this mean anything. Here are different names that apper when im running a scan.

ad destination
ad-protect
coolwwwsearch
doctor adware
error safe
vitumode
spysheriff
pornbho.ru
 

A:Solved: When spybot search and destroy is run, these "spyware,antivirus,malware" name

Read other 7 answers
RELEVANCY SCORE 83.2

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: AMD FX(tm)-4100 Quad-Core Processor, AMD64 Family 21 Model 1 Stepping 2
Processor Count: 4
RAM: 8173 Mb
Graphics Card: NVIDIA GeForce GT 430, -2048 Mb
Hard Drives: C: Total - 953766 MB, Free - 645957 MB;
Motherboard: Gigabyte Technology Co., Ltd., GA-970A-D3
Antivirus: avast! Antivirus, Updated and Enabled

After running Avast, it found an infection, "INI: Shortcut-inf [Trj]. Avast has it named as: PC Pitstop.url. Location: C:\Users\Gary\Favorites. I then quarantined it.

After that, I ran System File Checker, and it reported that no integrity violations were found. Is it safe to say that the file can now be deleted?
 

A:Determining scan results after using "System File Checker"

Those two scans really have nothing to do with each other.

And based on what you posted Avast is just finding a bookmark/favorite to a website called PC Pitstop that it wants to remove. It's simply a shortcut to a website so you absolutely can delete it if you want.
 

Read other 1 answers
RELEVANCY SCORE 83.2

My computer picked up a bug where it continually tells me I have an alert that tells me I have a "security problem" via a pop up and asks me if I want to perform a virus scan, sometimes does a fictitious scan, and tries to load "antivirus plus". I tried various free programs such as ad-aware, anti-malware, spyware terminator and even purchased softspySE. None of the programs completely eliminate my problem. The popups have decreased some due to the running of these programs and the loading of avast antivirus but they do still popup every 10 to 15 minutes.

If I scan with antimalware I get this -
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\userinit.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\userinit.exe -> No action taken.

My hijack this log follows. Please help!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:46:37 PM, on 2/23/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:... Read more

A:Help removing "antivirus plus popups"

Can I please get some help? Thanks!
 

Read other 1 answers
RELEVANCY SCORE 82.8

I am trying to get BGInfo to use custom fields with the WMI Query to hide the network adapters not in use from showing "none" many times on the screen.
I have used the following query:
IP  Address
WMI Class: Win32_NetworkAdapterConfiguration   Class Property: IPAddress
WMI Query:
SELECT IPAddress FROM Win32_NetworkAdapterConfiguration WHERE IPEnabled=True AND NOT description LIKE "%VMware%" AND NOT description LIKE "%Virtual%"
After using this custom field and deleting the default IP Address field, the results show properly during the current session.  After rebooting the computer, the IP Address field shows correctly the IP Address for 5 seconds then changes to <IP Address>
after the network card initializes or something else happens to it.
Would someone please help to offer advice how to make this change permanent so the IP address displays properly.

Read other answers
RELEVANCY SCORE 82.8

A few weeks ago a techie friend tidied up my Vista laptop. Coincidentally a few days later, when I switched on my desktop (windows7) all my documents had disappeared. I reinstalled from a backup.
I do think this must be a coincidence.
However I now find that after working on the desktop for a while, clicking Start and then Control Panel or Computer result in a explorer.exe "System Failled Call" window appearing.
Restarting clears this but it happens again.
I have scanned with AVG & windows defender and also used the microsoft system scan tool. Nothing untoward showed up.
Attempted a system restore but no luck as it wouldn't work.
I ran Task manager, killed explorer.exe, went back into task manager, new task and typed "explorer.exe". This has worked for the moment.
Finally each time I close down I get the message programs are still running tho' none are listed. My only option is to force closedown. I feel these problems are all related.

Incidentally, when another user logged in their closedown was clean.
Very confused. Any help would be appreciated.

A:Clicking Start, Control panel/computer results in "System Call Failed"

I first would create a new Restore Point. Then I would go to MSCONFIG via WinKey--R and either disable some startup items or select Diagnostic Startup. If these stop the problem then focus on what is enabled in a full boot - including non-MS services on the Services tab of MSCONFIG.

Read other 9 answers
RELEVANCY SCORE 82.8

Hey everyone,
        I am trying to get the REST queries to work with the sharepoint end points instead of graph end points. I first created an app with relevant permissions and have given it the admin consent. Then I am hitting the https://login.microsoftonline.com/<tenant>.onmicrosoft.com/oauth2/token?Content-Type=application/x-www-form-urlencoded end
point with https://<tenant>.sharepoint.com as resource. I am then using the access token retrieved to give the rest call to https://<tenant>.sharepoint.com/_api/v2.0/drives/b!3indYSbqZ0-hVSPnCgIZy-2xDMh7jH9AuQnEzJMc6TEfQoSJvJT-R6tT0lFBQiPr/root/delta
but it is failing with "error":{"code":"generalException","message":"General exception while processing"}}. The REST response code is 401 Unauthorized. I have filed a Microsoft support ticket but they
have asked me to post on these forms. Can someone please help me with this? I am not able to move forward because the error is pretty generic and doesn't give any additional details.
Thanks,
Sai Kiran Katuri.

Read other answers
RELEVANCY SCORE 82

I am running Win 2000 SP4 and when it boots up, there is a "Search the web" box that pops up from behind the systray and a window titled C:\Documents and Settings\All Users Start Menu\Programs\Startup\Microsoft Office.hta. When I maximize this window, there are some garbage characters in there and it ends with "evanchik", more characters, and "meaning less **** i had to put here" Eventually a dialog box pops up titled "Antivirus report" with the question "Is your computer infect with spyware? Yes/No" We tried to install McAfee, but I probably should have cleaned this up first.

Can somebody please check my HijaakThis log and give me some direction? Thanks in advance.

Logfile of HijackThis v1.99.1
Scan saved at 4:03:42 PM, on 3/13/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\hidserv.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Program Files\Microsoft SQL Server\MSSQL$JURIS\Binn\sqlservr.exe
C:\WINDOWS\system32\regsvc.exe
C:\WINDOWS\system32\MSTask.exe
C:\WINDOWS\system32\stisvc.exe
C:\WINDOWS\System32\WBEM\WinMgmt.exe
C:\WINDOWS\system32\mspmspsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C... Read more

A:Desktop search.exe and "Antivirus report"

All I can tell you is fix this:

O15 - Trusted Zone: *.addictivetechnologies.net
O15 - Trusted Zone: *.admin2cash.biz
O15 - Trusted Zone: *.awmdabest.com
O15 - Trusted Zone: *.bettersearch.biz
O15 - Trusted Zone: *.c4tdownload.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.finefind.nettraffic2cash.biz
O15 - Trusted Zone: *.iframe.biz
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.newiframe.biz
O15 - Trusted Zone: *.overpro.com
O15 - Trusted Zone: *.pizdato.biz
O15 - Trusted Zone: *.private-dialer.biz
O15 - Trusted Zone: *.private-iframe.biz
O15 - Trusted Zone: *.sp2admin.biz
O15 - Trusted Zone: *.windupdates.com
O15 - Trusted Zone: *.ysbweb.com

Then post another log.

Alan
 

Read other 2 answers
RELEVANCY SCORE 80.8

I got a really bad virus that spread all over my computer and installed 2 toolbars one was called "Security ToolBar" which i uninstalled without any problems. The other was "Toolbar 88" i tried to uninstall it but it still appeared on my IE so i Disabled it from the addons. The other thing that came up was a flashing icon on my taskbar that says "Critical System Errors" and it links to virusbursters.com and norton began to detect all sorts of trojan and spyware tools so i switched to Safemode and ran my Norton AntiVirus -after updating it- and removed everything it detected, but it when i ran my windows in normal mode Norton found more trojans and they were trying to connect. I read a few thread here and there and i tried to follow the steps.. i used "SmitfraudFix" and this is the Log:

SmitFraudFix v2.129

Scan done at 4:16:50.70, 13.12.2006
Run from C:\Documents and Settings\ReeM\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{8A5849C4-93F3-429D-FF34-660A2068897C}"="OpenGL additional"

[HKEY_CLASSES_ROOT\CLSID\{8A5849C4-93F3-429D-FF34-660A2068897C}\InProcS... Read more

A:Solved: Need Help With Removing "VirusBurster" System Taskbar Icon

Read other 16 answers
RELEVANCY SCORE 80.8

When I click my My Computer icon on dsktop then click any drive... windows search results page opens up, as if I had opened search from the start menu.
This does not happen when opening other choices in My Computer such as Control panel or Shared documents, etc.
I'm looking for a tweak which will restore the default setting for My Computer function.
 

A:"SEARCH RESULTS"when you don't want 'em

Read other 7 answers
RELEVANCY SCORE 80

Hi, i've recently been infected and have no idea how to get rid of it. while browsing in google chrome or windows explorer i keep getting these ads from popup.adv.net and mtn5.goole.ws popping up. This is annoying to say the least but they appear to be able to stop me from visiting certain sites to download the latest definitions for malwarebytes and other such programs. Its been a few days since the problems started now and i've tried everything i can think of. I've read a few forums and think that this problem isn't actually on my computer but kept somewhere else? also maybe highjacking my DNS? I don't really know much about it so would really appreciate a simple step by step guide to getting rid of this awful infection. Thanks for any help! Oh also i haven't got EASY access to my router so a fix without needing to get to that would be great! If not i'll find a way to get to it. Thx a lot! Here is my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:53:05, on 25/01/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\syst... Read more

Read other answers
RELEVANCY SCORE 80

System: Acer Aspire one netbook.
Win XP home ed. SP3

Synopsis of issue:
Got this comp. from my company for a new line of work I started. Was "deep frozen" when I got it and was useless to me in that state. Got it thawed and it suddenly wanted to do loads of updates, so I let it. Apparently I was not careful enough & got the "XP antivirus 2012" malware.

Eventually conquered that beast and installed avira free. almost immediately avira picked up on the "html/infected win.gen2" malware. I quarantined, deleted, scanned comp. w. avira, rkill, & malwarebytes. all scans came up clean but I now have no connectivity. wired conn. continually tries to acquire network address and w.less has limited or no....

Not my router or modem as I have 2 home comps actively cnctd as I type this. Also tried multiple other networks w. same neg. results.

After loads of searching and t/s'ing I believe I have found the root of the problem: When I look under "services" I found that "netbios helper", "Network Location Awareness" & "dhcp client" are all not started.

Trying to start them results in failure b/c some "dependencies are marked for deletion". the afore-mentioned 3 things are dependent upon the Netbios over tcpip and tcpip protocol driver.

Those drivers are in the system32/drivers folder but I cannot find a "non plug and play" section in the device manager. Yes, I looked under ... Read more

A:[SOLVED] No Connectivity after &quot;infected win.gen2&quot; and &quot;XP antivirus 2012&quot; issues

Hello Gunnersfan13,

I do see the problem and I'll have to ask you to please stop any more action on your part to resolve this yourself or you'll make my job that much more difficult. :)

You are still very much infected with ZAccess. I need to see the dds.txt. (You posted, and attached, only the Attach.txt produced by dds.scr)

Run dds.scr again, and post the contents of the dds.txt.

==============================

Next, open Notepad and copy/paste the contents inside the quote box below, into Notepad.


Quote:




regedit /a afdexport.txt "HKEY_LOCAL_MACHINE\SYSTEM\currentcontrolset\Services\AFD"
notepad afdexport.txt




Save this as afdexport.bat Choose to "Save type as - All Files"

Double click on the .bat file & allow it to run. Then post the log which it produces

===============================

Also, download SystemLook from one of the links below and transfer it to your desktop.

Download Mirror #1
Download Mirror #2Double-click SystemLook.exe to run it.
Copy the content of the following codebox into the main textfield:


Code:
:filefind
afd.sys

Click the Look button to start the scan.
When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found at on your Desktop entitled SystemLook.txt

Read other 19 answers
RELEVANCY SCORE 79.6

Hi-
Thank you for reading and wanting to help.
From reading most of the topics on this site, I realize I am at a very beginner level of computer literacy, so please bear with me if my questions and descriptions sound silly.

Tonight, when I started up my computer, I got this message in a bubble coming from an icon representing "Antivirus System Pro alert" in the tray on the bottom right:

"[picture of white x in red circle] Windows Security Alert
Windows reports that computer is infected. Antivirus software helps to protect your computer against viruses and other security threats. Click here for the scan you computer. Your system might be at risk now."

Well, I realize now as I typed it, it has a grammatical error, which gives it away as not real, but anyway I clicked on it, and apparently I have installed some demo version of something called "Antivirus System Pro alert".

So I went to CP to remove the program, but it is not there in the list.

So question one- where is the program so I can remove it?

Question two- I purchased BIT Defender Total Security 2009 for about $90 so if this is a virus or something, why did it not catch it?

And now, that stupid window keeps popping up, along with another window on its own at the bottom right, with the header of the box being "Antivirus System Pro alert" saying
"INFILTRATION ALERT
Your computer is being attacked by an Internet Virus. It could be a password-stealing attack, a trojan-dro... Read more

A:"Antivirus System Pro Alert" Messages Popping Up BUT i never installed this program

Read other 7 answers
RELEVANCY SCORE 79.6

Hello -

I had a horrible bug called "Antivirus Soft" yesterday - it would not allow any programs to open and instead wanted me to open their antivirus software.

I ran Malwarebytes and that didn't find it so I tried a few of the other fixes I found on here but I couldn't use them because I couldn't get on the internet in safe mode to download the programs.

Anyway, I thought I had nothing to lose so I did a system restore to Friday out of safe mode, and my computer is working fine now.

Is there anything I have to do now? Will I live to regret this some day?

And by the way, what AV program should I be running? Trend Micro let this thing through --

Thanks!

Mary
 

Read other answers
RELEVANCY SCORE 79.6

A few days ago, the windows for "Vista Antivirus 2010" started popping up on my screen, and in my sleep deprived state, I had the genius idea of doing a system restore before anything else. No idea what lasting damage may have been done by it, but I suppose that'll show up in the logs.

At any rate, my machine's still mostly usable, just much slower, and with annoying pop-ups every time I open an application, which opens anywhere between one and twenty "av.exe" processes, usually all shutting down after I end one. I'm not the only one using this computer, so I couldn't tell you everything that's gone on in it, but I do know that until I uninstalled them for this, it had Bittorrent and Daemon Tools Lite.

I'm running Vista 32-bit on an HP machine. It wasn't shipped with an installation disc. All I actually have is a recovery disc I downloaded from Neosmart, that seems to work but I have no idea how to actually use it. Not sure what else there is to say, so heeeeeeeere's a DDS report! I noticed at the top it says some Norton features were enabled. I've tried disabling every feature and it invariably says this after scanning. Is this a problem? If it is, I'd guess it applies to the other logs aw well, but I don't know how to fix it short of uninstalling Norton.


DDS (Ver_09-12-01.01) - NTFSx86
Run by Owner at 10:51:35.94 on Sun 03/07/2010
Internet Explorer: 7.0.6000.16890 BrowserJavaVersion: 1.6.0_16
Microsoft? Windows Vista? Home Premium 6.0.6... Read more

A:System infected with "Vista Antivirus 2010" malware

Hello, and welcome to TSF.

I am currently reviewing your log. I will be back with a fix for your problem as soon as possible.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

Read other 7 answers
RELEVANCY SCORE 79.6

Hi there,

I think the title is self-explanatory. I have installed the Google search provider from the official Google webpage (Make Google your Default Search Engine) on IE 8 and noticed that it does not suggest as I type. I opened "Manage Search Providers" and see "Not Available" besides "Search suggestions".

Any help on this?

Thanks!

A:Cannot enable "Search suggestions" in "Google Search Provider"

At the bottom of the Manage Add-Ons page you will see, "Learn more about search engine preferences" click on that.

Scroll down to, and click on "To turn search suggestions on or off" it will lay it out for you there.

Post back if you need more clarification.

Read other 5 answers
RELEVANCY SCORE 79.2

Hi,

I opened a spam email link containing the "System Care" virus. It took over and I couldn't do anything on the computer. I unplugged it and after a week here I am...

I am having a problem with DDS. The default setting is for it to open with "AutoCAD Script." The output is a few pages in notepad containing random characters like this ... ?}j??Y?j??3<?b????N?/ ... Any suggestions to fix this?

The GMER scan results are attached. (operating system is WinXP)

Thank you,

greenhaze

A:"System Care Antivirus" Virus from email

Hello and welcome to TSF.

Please delete the present copy of DDS from your desktop and download
this version of DDS. Click on the Save button and save it to your desktop.
Disable your antivirus and then, double click on the dds.com icon on your desktop to run the tool.
Once you double-click the icon a Windows security warning may also appear asking if you are sure you would like to run the program
Click on the Run button to start DDS. If no warning appeared, then just continue reading.
Make sure that dds.txt and attach.txt boxes are checked.
Click on the Start button.
Please wait until the scan is completed and two logs are produced.
Post the contents of the logs in your next reply.

Read other 13 answers
RELEVANCY SCORE 79.2

my original thread got closed and I still had some questions, hope it's ok if I post this continuation.

original thread: http://www.techsupportforum.com/f50/...em-436294.html

original problem:
hi all,

so my mom's computer this morning was overrun with the "Antivirus System Pro Powerfull PC Protection" spyware or malware or whatever. it is redirecting her when she opens IE7 to the Antivirus System Pro website, continuous popups that her computer is "infected", ad pop-unders, windows security center keeps popping up, etc. also I had previously installed Spybot Search & Destroy, Ad-Aware, AND Hijack This on her computer, but now I can't even run any of those programs because the ASP is saying that they are "infected" and not opening them. So, I can't even post a HJT log or scan or anything...

Does anyone know how I can remedy this without being able to open any programs? or other steps I can take??

Thanks very much,
Kelz

--

chemist advised I save and run rkill but it doesn't work. I tried using an external hard drive but that still didn't work. I tried saving it to the desktop, but I can't open rkill at all. it just keeps saying "Application cannot be executed. The file rkill.com is infected. Do you want to activate your antivirus software now?" which just leads to the fake anti-virus software site opening up and a million popups overtaking my system. this happens if I save anything on to the desktop or onto the ... Read more

A:can't run any anti-virus programs due to "Antivirus System Pro"

Try each one of these....


Please download and run the following tool to help allow other programs to run. (courtesy of BleepingComputer.com)
There are 4 different versions. If one of them won't run then download and try to run the other one.
Vista and Win7 users need to right click and choose Run as Admin
You only need to get one of them to run, not all of them.


Rkill.exe
Rkill.com
Rkill.scr
Rkill.pif


Once the tool has run, do NOT reboot the machine, and then try once again to run DDS and GMER.

Read other 10 answers