Over 1 million tech questions and answers.

Virus creating spuninst.exe folders and removing most working processes

Q: Virus creating spuninst.exe folders and removing most working processes

Despite having run a Norton scan on an .exe file I downloaded (called qtf.exe or qtj.exe I think), the file carried malware. I thereafter used Malwarebytes which quickly identified 3 infected files to be removed. Unfortunately, after restart. Malwarebytes did not start again properly to remove them and I had lost my internet connection.

The virus created lots of new folders with spuninst.exe in the end and also in the Internet explorer 8 folder plus numerous others. These were all written in bright blue text which makes it easy to identify the folders.

Most important programs have been disabled and I cannot get online (safari is starting but without a connection). My norton antivirus is disabled and I cannot launch the program.

I tried to run a repair from the Windows DVD but without success. It could apparently be due to the fact that the DVD has an older version and can therefore not repair a more recent SP update(?).

Is there a good antivirusprogram that can be booted directly from a CD drive (which does not require an internet connection to start working) which I could download on another computer and burn to disc?

Anyone else heard of this problem?

My computer is a desktop Dell XPS with Windows XP Media Edition SP 3

Read other answers
Preferred Solution: Virus creating spuninst.exe folders and removing most working processes

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)



I?ve got a virus, I guess named funnyvideos.

It creates new folders with the same names of my current ones. Difference: there are no folders any more but application exe.

As the name is identical with my one ones is very easy to click on them and therefore activate the exe.

once is created, you cannot copy those files. In addition infects any external.

My AVG is not able to detect them


A:Virus creating .exe folders with my own folders names

Hi Pedro00,Welcome to BC HijackThis forum. I am farbar. I am going to assist you with your problem.Please refrain from making any changes to your system (scanning or running other tools, updating Windows, installing applications, removing files, etc.) from now on as it might interfere with our fixes. Please let me know in your next reply if you agree with this.Please don't use any external storage device for now.Please download OTL by OldTimer.Save it to your desktop.Double click on the OTL icon on your desktop.Check the "Scan All Users" checkbox.Check the "Standard Output".Click Run Scan button.Two reports will open, copy and paste them to your reply:OTL.txt Will be openedExtra.txt Will be minimized[*]Download the GMER Rootkit Scanner exe file from here and save it to your desktop.Temporarily disable any real-time active protection so your security program drivers will not conflict with gmer's driver.Click on this link to see a list of programs that should be disabled.Disconnect from the Internet and close all running programs.Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.In the right panel, you will see several boxes that have been checked. Make sure the following are unchecked:SectionsIAT/EATDrives/Partition other than C:\ drive (C:\ drive should remain checked)Show All (this one also should be unchecked)Then click the Scan button ... Read more

Read other 3 answers

As stated in the title above, a virus or malware has hijacked my PC. When Task Manager is invoked, many multiples of processes are shown and when ended - reappear. Most processes look legit, but cannot be interrogated to find their file locations. I've followed the 4-step virus/spyware/malware removal preliminary instructions. My logs are shown below. I use NIS A/V and it was not much help. Any help would be appreciated!

Malwarebytes Anti-Malware

Update, 11/16/2014 2:53:34 PM, SYSTEM, ANITA, Manual, Rootkit Database, 2014.9.18.1, 2014.11.12.1,
Update, 11/16/2014 2:53:35 PM, SYSTEM, ANITA, Manual, Malware Database, 2014.9.19.5, 2014.11.16.6,
Scan, 11/16/2014 3:54:28 PM, SYSTEM, ANITA, Manual, Start:11/16/2014 3:15:07 PM, Duration:39 min 8 sec, Threat Scan, Completed, 0 Malware Detections, 26 Non-Malware Detections,

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17420 BrowserJavaVersion: 10.40.2
Run by Anita Jones-Mueller at 16:27:06 on 2014-11-16
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.9655.7129 [GMT -8:00]
AV: Norton Internet Security *Enabled/Updated* {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
SP: Norton Internet Security *Enabled/Updated* {631E4324-D31C-783F-EC5C-35AD42B18466}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton Internet Security *Enabled* {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}
============== Running Processes ===============
C:\w... Read more

A:Virus creating multiple processes - PC Crashing

Welcome aboard

Please, observe following rules:

Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
If you're stuck, or you're not sure about certain step, always ask before doing anything else.
Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
Never run more than one scan at a time.
Keep updating me regarding your computer behavior, good, or bad.
The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.


MBAM log is incorrect.
Please re-read our instructions and post correct log.

I still need Attach.txt log from DDS.

Read other 30 answers

The virus is creating maps in my download map starting at 01 02 03 all the way to 99 and then it starts doing letters insted, it sucking up my cpu. My virus programs cant find it and when im trying to start in safe mode my cpu just reboots, what to do???? any1 have a solution to this probelm?

Read other answers


There is some virus in my laptop which is creating folders of 436 KB in all my folders. I can't view hidden files and task manager has been disabled by 'administrator.' here is the HJT and DDS logs but GMER wasn't running on my laptop. It would hang and need restarting.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:17:11 PM, on 8/2/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
C:\Documents and Settings\Abhimanyu Amoli\Microsoft-Driver-... Read more

Read other answers

Hi everyone,

I have a problem with not one but a lot of machines on the network. There seems to be a virus that creates executable folders in most directories. for example, when you are in c drive, there will be an executable folder called "c", when you are in documents and settings, there is an executable folder called "documents and settings" and so on. On this machine that i have attached its log some of the programs like accessories have been removed from the start menu (start->all programs) hence if you want to access things like calculator, the only way is to start-> run and then type calc. I have tried spybot search and destroy and OfficeScan which is our corporate antivirus without any luck.
This virus has already spread to our application and file server so pls help!!

here is the log:

Logfile of HijackThis v1.99.1
Scan saved at 12:31:20, on 07/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program ... Read more

A:Virus creating executable folders

Please upload this file:


to this website: http://www.bleepingcomputer.com/subm....php?channel=4

Kindly include a link to this topic in the message.

Read other 12 answers

I have a virus going around my network creating .exe files named Porn, Sexy, Secret, Passwords, and a mpeg named X. It as also hiding my network shares and recreating them as Applications. I have scanned with Kaspersky and Norton Internet Security. It seems to remove the threats but the virus is back every morning. My server is running Windows 2008 Server R2 and clients are XP SP3.

A:Virus creating Porn.exe,hiding all shared folders and recreating as aplications

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Update Malwareby... Read more

Read other 1 answers

i cant seem to see any of my folders on my laptop the wallpaper is now all black and there are only 2 icons on my desktop are my files deleted or just hidden

A:All My Folders Are Gone After Removing Virus !!

Suggest you read this thread
Windows 7 Forums > Windows 7 help and support > General Discussion ? Lost User Profile/directory.
The support I got solved my problem of lost files.

Read other 4 answers

Under computer I go to my drive of folders. When I click new folder either by right clicking or by hitting new folder the system then creates 2 or 3 new folders at one time. I then have to go back and delete the extra folders. At first I did not mind because it only happened once or twice and now it is every time. Help please

A:Creating New Folder ends up creating 2 or 3 new folders.

Quote: Originally Posted by Sonja Leverty

Under computer I go to my drive of folders. When I click new folder either by right clicking or by hitting new folder the system then creates 2 or 3 new folders at one time. I then have to go back and delete the extra folders. At first I did not mind because it only happened once or twice and now it is every time. Help please

I don't know the cause or solution for your problem, but you could try one of the alternative methods offered in the article at the following site;

9 Ways To Create a New Folder In Windows

Read other 4 answers

After having Norton tech support remove a virus from computer using their NPC, the home screen comes up with message There was a problem starting C:\Windows\Temp The specified module could not be found. Clicking on the START button (Windows 7 Home Premium) produces the FORM, but no information or links are listed. Clicking on the Desktop>> link on the bottom of the page shows the desktop items, but shows all folders and disks as empty. There IS information on them (i.e., programs, etc) but they are not accessible. I am assuming there is still some sort of virus on this computer; it crashes intermittently, and I cannot load the AdAware program; it comes up with a message that the system administrator has set policies to prevent this installation. I was also unable to run the 3rd recommended download from your "before you post" directions, it runs it partway through and then crashes. Do you think there's any help for this, or do I have a new anchor? Any assistance or suggestions would be VERY appreciated!!! I'm attaching / copying the reports as requested in the instructions. Thank you, and hope you're having a good day


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:44:14 PM, on 3/25/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C... Read more

A:Missing dll file, empty folders, crashes after removing virus with Norton

Read other 16 answers

Dear forum members,

I have many files having the filenames in Japanese in Kanji and Kana (the files with the same name are more than one).

What I need is a software/tool that capable of:

"Batch" creating folders from that filenames and sorting/moving into the related folders having the same name properly "BASED ON UNICODE FILENAMES".

BTW, is there any software that batch translates/converts these filenames into Latin characters?

Thank you for all your help!

Read other answers

i got my new windows 7 computer about 3 days ago and just yesterday i notice the computer was acting strange but i ignored it since i didnt know much about this computer. but today i went to my 'computer' folder and i notices a new folder had been created in 'hard disk drive' called 'local disk q' i remmember i didnt creat it and that it wasnt there since i was there like five minutes ago when i was there to get my picture from my USB, another reason is that i had been there alot since i was suprised that there was no C/drive, any ways i downloaded Malwarebytes' Anti-Malware and it proved my Suspicion or dout it found this

here is the log

Malwarebytes' Anti-Malware 1.45

Database version: 3999

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

17/04/2010 01:35:08
mbam-log-2010-04-17 (01-35-08).txt

Scan type: Quick scan
Objects scanned: 120434
Time elapsed: 4 minute(s), 8 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer�... Read more

A:unknown virus blooking access to files and creating new folders which i cant access

Yes post the SAS log and Rerun MBAM (MalwareBytes) like this:Open MBAM in normal mode and click Update tab, select Check for Updates,when doneclick Scanner tab,select Quick scan and scan (normal mode).After scan click Remove Selected, Post new scan log and Reboot into normal mode.

Read other 7 answers

Yeah, my McAfee SecurityCenter and Webroot Spy Sweeper won't delete the items, The McAfee gets stuck on one file and won't move, and the spy sweeper locks up on quarantine and won't do it. And opening things is SLOW AS ANYTHING now..
Heelllp D:

Here's my HijackThis log, and the task manager likes to pop up again and again now.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:11:16 PM, on 4/30/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\Program Files... Read more

A:Solved: Help removing a virus, Virus-scans not working

Read other 16 answers

I have a laptop and am always having to or should I say want to close processes that don't close when I close programs.....

Usually there are three or four processes per program.....

Can someone help me with a basic batch file to write so close the processes I want all at once.

Thanks Alot

A:Help Creating Batch files to Close Processes...

What are these processes and are they a part of the listed OS services? If they are not services you cannot stop them from the command line.

Read other 3 answers

Hello. I had a pretty nasty combination of viruses including AntiVir, and some redirects and browser hijacks. After getting them removed, and all logs being cleaned, I'm having some issues with the eithernet/router. I'm not sure if this is an XP issue, or a networking issue. I'm running a linksys Wireless-G router and a D-Link DCM-202 modem. If everything is connected through the routher, I can get online, although some sites will not load, and others will. At first, I had no IP address, so we typed one in manually. If I disconnect the router, and try to go modem straight to the computer, I can't get online at all. It doesn't even recognize me plugging back in. Also, after scrubbing out the viruses/malware, if I open the linksys programs, it won't recognize the router.

Like I said, I'm not sure if this is an XP or a networking problem, but either way, I have some sites loading, can't refresh the IP address, and can't connect unless I'm running through the router, and have no idea what to do to solve the problem. I really appreciate any help you can offer. Thanks.

A:After removing virus, ethernet not working?

Read other 7 answers

I hope someone can help! I was hit with a virus and malware on Monday (accidentially opened and clicked on an e-mail w a link to a virus -- I thought I knew better!). I have rid my system of the virus -- at least according to Norton, Adware and Spybot. When in safe mode w networking, I can open IE and Firefox and access the Internet.But in normal mode, when I try to open either one, they hang. IE helpfully closes and says I should submit a report to Microsoft, which I have done. But Firefox just hangs, and then goes non-responding.I assume something is stuck somewhere in my normal boot registry that is causing this (maybe a fragment of the virus trying to work or something?), but have reached the edge of my computer expertise.Can someone help me?Thanks!//Mod edit: Moved from Windows XP/NT/2000/2003 forum to more appropriate.

A:After Removing Virus, Ie & Firefox Not Working

Have you tried uninstalling, then reinstalling, IE and Firefox?

Read other 8 answers

Edit: title should read 15gb of ram*
Recently I started getting incredible delays with programs on my computer, to the point where it stalls and crashes. When I looked in task manager i was either taskhost, presentationhost, ctfmon.exe, conhost.exe amongst others. There could be upwards of 5 of each of these processes but one of them would always take over 95% of my computers' memory, sometimes up to 15gb of my available ram. 
I couldn't terminate these processes as permission was denied, so I used 3rd party software to force terminate them, this temporarily resolved the issue but within minutes another one would spring up taking the same amount of memory.
A longer solution was to download malwarebytes software which effectively stopped this happening, but the notifications I was receiving from the software were telling me that every few seconds I was blocking an attack from a random website like 'go.randomdomain.com' and the threat was labelled as 'cftmon.exe' etc. Which suggested that the threat was coming through google chrome.
Does anyone have any experience with this? I don't want to rely on this malware removal software as permanent solution, I would like to purge the threat completely. I have reinstalled my browser but I still receive notifications of the threats.
Many thanks for the time reading my issue, below is an example taken from my logs from the malware removal software.
<record severity="debug" Loggin... Read more

A:Windows 7 constantly creating fake processes using 15mb+ of ram each

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the LogFile button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleanerCx.txt (x is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first ti... Read more

Read other 2 answers

Usually if I get some malicious software, like a virus, I just goto control panel, find the program and uninstall it.
Well I downloaded something and it came with a whole bunch of what I can only presume are viruses, I was pretty quick to clear 'em out.
1) But when I started up Chrome and opened a new tab, it was not the usual sight. It directed me to "feed.helperbar.com" and opened a search engine (some wannabe Google looking one). I checked my control panel to make sure I didn't miss anything, strangely it seemed more empty than normal, and I didn't see the "virus", so I checked my Chrome extensions. It was there and I deleted it. But that didn't solve it.  
2) That was yesterday, and today I had what I now know is Adware. Something called Re-markit. So after a few hours, I finally saw it in my C: drive and tried to delete it. But it said it can't delete it because it is open in Re-markit. Basically its opened in itself. I ran a full Windows Defender scan before realizing this, is it possible its opened in there? 

A:Normal ways of removing a virus NOT working

Hi and Welcome!!   
My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:
The fixes are specific to your problem and should only be used for the issues on this machine.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.
If you happen to have a flash drive/thumb drive please have that ready in the event that we need to use it.
Please be sure to subscribe to the topic if you have not already done so.
IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your operating system and losing all your programs and data.
Having said that....     Let's get going!!  
Please download DDS from either of these links
and save it to your desktop.
Disable any antivirus programs during the scan (If you have ... Read more

Read other 3 answers

My laptop seems to have a virus. I think there is an extra dllhost.exe process running and when the laptop is connected to the Internet, several COM Surrogate processes begin running as well. They can be killed, but will come back after a few minutes. They slow down the computer severely.
Can someone help me figure out how to remove this? I posted my DDS log below and attached the attach.txt file. 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17344
Run by Michael at 16:19:08 on 2014-11-30
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.3792.2512 [GMT -5:00]
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
============== Running Processes ===============
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\AVAST Software\Avast\A... Read more

A:Malware creating multiple COM Surrogate processes, slowing computer

Hi & to Bleeping Computer Forums!My name is Jürgen and I will be assisting you with your Malware related problems.Before we move on, please read the following points carefully: My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.If I don't reply within 24 hours please PM me!Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.Step 1Please download Powelikscleaner (by ESET) and save it to your Desktop.Double-click the to start the tool.Read the terms of the End-user license agreement and click Agree if you agree to them.The tool will r... Read more

Read other 8 answers

hey im new rnd here, iv noticed under my computer, windows, that ther are like 100 files called.
- $NtUninstallKB890046$
- $NtUninstallKB901017$

thers also one called
- $hf_mig$

- $NtServicePackUninstall$

under all of these files ther is stuff in ther called 'spuninst', i dnt av a clue wat they are and why ther is so many, all of these files besides '$hf_mig$' are hidden files.

any help wld be awesome since i av totally confused about wat they are, i do know some stuff with computers, but yeah not everythn.


These are the uninstall routines for the various service packs and or hotfixes that you have installed on your computer. If you do not think you are ever going to uninstall these service packs and or hotfixes you can delete the uninstall routines, but personally I leave them alone.

Read other 3 answers

I am fixing a computer for a friend which has hundreds of viruses on it...

To finally get to a stable state to install Avast Free antivirus I had to run Kapersky virus scanner off a bootable usb drive.

Anyways, I am now running the Avast pre-boot scan on windows Xp pro and it has marked Spuninst as a virus...

This, I believe is not repairable but should I delete it?

A:Spuninst Help


I would need to see diagnostic logs before I can help

Please do the following:

Please download DDS from either of these links


and save it to your desktop.Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
Please include the contents of the following in your next reply:



Download GMER Rootkit Scanner from here or here. Extract the contents of the zipped file to desktop.
Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.

Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Uncheck the following ... Sections
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and post it in your next reply.

Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Read other 2 answers

i have several things in my computer called spuninst. How do i uninstall it? i've tried several things, but i still cant remove it even though i've searched on google and attempted to do what they asked me to do.

A:how do you uninstall spuninst?

Read other 14 answers

I was going through my windows files and i found a lot of files that are named like this $ntuninstall and when i click on them there is a folder named spuninst and i was wondering are these some sorta system file or what Cuz i just changed to windows XP and windows ME never had any files like that in there or is it spyware?

A:Solved: spuninst

Yes they are System files

Read other 2 answers

Iam running XP PRO at home no problem however i can no longer create folders either in my docs or on the desktop,when i try the system locks up or all icons vanish for a sec then come back,any help would be greatly appreciated as it is driving me mad.

A:Creating folders

Do you have any antivirus software/adaware protection?

Read other 3 answers

I have Windows XP. I have hundreds of photos in the "My Documents" and the "My Pictures" sections. Some are in folders and some are lose. They are all mixed up.

I want to creat about seven folders (categories) and place each photo in a folder relating to that category. I want to do this in the "My Pictures" section.

Hopw do I create a folder? How do I select and move a photo to that folder?

A:Creating Folders?

1. Open My Pictures folder, right click, select new.....folder. Do that for as many folders that you want. When you create the folder it will be blinking...ready for you to name it. Type in the name that you want.

2. Put all of your pictures in the my pictures folder by selecting them ,then drag and drop them into your My Pictures folder.

3. Open your My Pictures folder, with the newly named folders inside. Select the pictures that you want to put into the first folder. Drag and drop them into that folder.

4. Repeat until you have all the pictures put where they belong.

You may select more than one file at a time by holding down the shift key, and clicking on the first one that you want and the last one. Then you can drag and drop the group.

This will be a lot easier if you have the folder contents in List View.
In the File Menu on top......Click on View...List.

I use PSP Photo Album. It's really great to edit, and organize your photos into Albums. There are probably freeware programs that do a good job, too.
It would be so much better than just putting them into folders.

Read other 1 answers

Could you please tell me how I can create 20 or 30 folders without having to right click on my desktop and go to New everytime?

A:Creating several folders

You can use this freeware program called 'Folder Maker':

The free version is limited to creating 20 folders at a time but i'm sure if you hunt around on Google you will be able to find alternatives :)

Read other 9 answers

hi guys; many a time i've found sound advice here from 'googling' a problem. But this time i cannot find anything relating to this;

running a search for *.exe (trying to track an elusive file) among the 1611 files found were 163 all called spuninst.exe inside C:\WINDOWS there were several setup.exe too (16) whereas my friend only has one of each. My system was bought in feb this year (2007) My system details are included in my profile(?)

If anyone can suggest why it should write so many copies (each stored in a uniquely numbered folder) at different dates, I would be most grateful.

Or if someone can tell me if it is safe to delete excess copies of file. (though this will not explain the WHY, and it may just continue to write copies ad nauseaum)


A:multiple copies (163!) of spuninst.exe

It would appear that you keep your PC updated with MS updates while your friend doesn't.

The program lives in each folder that contains an MS update and is the uninstaller for that update.

Read other 3 answers

Hi, I have a question regarding the creation of hidden folders. What I'm looking to create is a folder that can only be found when searched for specifically in Command Prompt (ie you must know the name of the file in order to find it). I don't want it to appear when hidden files are shown, or a generic command to show the computer's hidden files is run in Command Prompt. Is such a thing possible? And if so, how do I make it? Thanks!

A:Help creating hidden folders

Is this what you are looking for? Make a Super Hidden Folder in Windows Without any Extra Software
This one has the same way as above and also another way. http://windows.mercenie.com/windows-...e-file-folder/

Read other 2 answers

can someone tell me why i have some folders with MP3s inside, and if i right click
{not the MP3 itself but the folder there is a play option. but if i create another folder and copy some of the same tracks into the new one there is no right click option to play?

A:Creating Music Folders


Read other 2 answers

How does one re-set the default icon for a new folder? Every time I create a new folder, the same picture is used (one I have used before) and I must go into Properties/Customize and reset to use the default. I must have inadvertently set something to do this.

How do I correct this and what did I do to set it the way it is now?


A:Solved: Creating New Folders

Read other 8 answers

Hi,I'm new to this forum so please bear with me. Before entering this I did a search to see if there was anything like this...didn't see anything. I also looked thru quite a number of posts and topics.Here is the problem. It started about 2 weeks ago.I really wanted to create a new folder in "My Documents" to store some new items in.When I go to my desktop, click on "mydocuments", It opens fine with a list of folders and files. THEN about 20 seconds later a small gray window comes up. This looks like something is being installed. It has the open box with the disc and small computer icon. It says Window Installer... like it is running something. However it locks up the entire screen and computer. I do a CNT,ALT,DEL to get task manager. I check to see if anything strange is running. It says windows installer is running, my documents not responding as well as any other things I have running. usually a forum or SolidWorks remain responding. These usually appear to be runing ok. There doesn't seem to be excess cpu being used. I usually only have 20-21 processes running PF usage is around 140.It actually creates a folder but I can't name it at this point. This greay window looks for the world like something that is supposed to be MS installer. But I suspect that it is either corrupted or some virus thing.In order to stop it I must do multiple end tasks and either send or don't send from TM. It will finally end and I will see a folder 1 or folder 2 listed. If I a... Read more

A:Problem With Creating Folders In Xp Pro


Sorry for the late reply.
If you still need some help and because this is already a couple of days ago, please start with posting a new hijackthislog in this thread (don't start another thread), so I can take a look at it.

Also, before posting next log, please install an antivirus, because you really need one!
Let it perform a full scan and let it delete everything it is finding.
I also see you disabled things via msconfig > startup. This is not the way to deal with it, because you disable bad entries (if present) instead of deleting them. This also makes the entries invisible for us, so we can't tell you what to delete and what can stay.

Read other 4 answers

I need some help. I have upgraded from Win 98SE to XP Home edition w/ SP2. I have upgraded all of the XP upgrades microsoft offers on their web site. Now when I go into my hard drives, either c: or e:, I can't create a folder. The hour glass comes up, computer waits for about 30 seconds and goes to desktop. Computer is not locked up, it just goes to desktop. This happens on either drive. So, I went into DOS command prompt through windows and am able to create directorys. Windows recognizes the directorys and will let me place files into them. Why can't I create directorys in XP? I have run the reinstall/fix that came with XP to no avail. Please help. Thank You, Larry

Read other answers

The video shows it better than I can explain it. Any ideas? Throws an error when creating new folders.

A:Error when creating new folders

Hello Landmine,

This looks similar to the same issue in the tutorial below. You might see if it may be able to help.

Cannot Rename or Move a File or Folder in Vista Fix - Vista Forums

Hope this helps,

Read other 1 answers

Logfile of HijackThis v1.99.1Scan saved at 15:01:51, on 06/06/2007Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.exeC:\WINDOWS\web\shell.exeC:\WINDOWS\AGRSMMSG.exeC:\Program Files\Apoint2K\Apoint.exeC:\Program Files\TOSHIBA\E-KEY\CeEKey.exeC:\Program Files\TOSHIBA\TouchPad\TPTray.exeC:\WINDOWS\system32\ZoomingHook.exeC:\WINDOWS\system32\TCtrlIOHook.exeC:\WINDOWS\system32\TPSMain.exeC:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exeC:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exeC:\Program Files\TOSHIBA\Touch and Launch\PadExe.exeC:\Program Files\TOSHIBA\Tvs\TvsTray.exeC:\Program Files\TOSHIBA\ConfigFree\NDSTray.exeC:\WINDOWS\syst... Read more

A:Pc Goes Slow. Folders Creating Themselves.

Welcome to the BleepingComputer Forums. Since it has been a few days, please post a new HijackThis log. Thank you for your patience.If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. During the cleaning process, if any other issues appear, please let us know.

Read other 2 answers

in the last week, my email has started sending out random emails to my contacts list. after doing a full system scan with AVG, this was the result:
C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe";"The file is signed with a broken digital signature, issued by: Unknown company.";
Spybot caught nothing. tried malwarebytes. nothing.
it is hiding in the background or something but it keeps sending out random emails to everyone.

what is my next step?

A:computer infected by spuninst.exe and cant remove

Hello and welcome. What did AVG do with that file??Is yhis XP??This looks like an Aleuron infection.Please run the tool here How to remove Google RedirectsWhen it is done, a log file should be created on your C: drive called "TDSSKiller.txt" please copy and paste the contents of that file here.Rerun MBAM (MalwareBytes) like this:Open MBAM in normal mode and click Update tab, select Check for Updates,when doneclick Scanner tab,select Quick scan and scan (normal mode).After scan click Remove Selected, Post new scan log and Reboot into normal mode.Please ask any needed questions,post logs and Let us know how the PC is running now.

Read other 3 answers

I have windows xp home with all updates
256 mb ram
dell 8300
cd burner doubles as my rom
below is my current hijackThis log and I'd like to speed up
a bit by disableing some of the running processes.
Can somebody take a look and let me know which ones I can
can without raising haveck?
I don't use McAfee at all.. I use AVG for anti virus.
here's my hjt log:

Logfile of HijackThis v1.99.1
Scan saved at 1:21:04 PM, on 4/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\DOCUME~1\JERRYA~1\LOCALS~1\Temp\Temporary Directory 2 for hijackthis.zip\HijackTh... Read more

A:Solved: HJT log.. need help removing running processes

Read other 11 answers

I also have a computer infected with the fake Chrome processes.  Am looking for instructions and help to remove this problem.  This virus (or whatever its proper categorization is) is creating a folder under %Appdata%\LocalLow\<someApp>.  It originally placed its content folder under %Appdata%\LocalLow\Microsoft, but when I deleted this (while running in safe mode without internet), it re-created its folder under Adobe when I next started the computer up with internet.  I had also scanned the registry for any entries containing the bogus process executable (which for me is cmuocngg.exe) or folder (which for me is vvsvhiwsgirv) and deleted these entries.  Didn't help.  I ran a scan with Malwarebytes to no avail; it found more than 500 files which it quarantined (mostly under temp directories), but did not stop the virus.  Ran Autoruns, but didn't see any entries that looked obviously suspicious.  The computer is running Vista, which I was going to upgrade, but now have to deal with this problem first.  Thanks in advance for any pointers on identifying the elements at the heart of this so they can be removed.  Please let me know what info I should include to help (I'm new at this).

A:Need help removing fake Chrome processes

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/554787 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 2 answers

My dual boot system has Win 7 and Linux Mint, plus I have a storage drive that both OS's can access. The other day I made some folders on the storage drive while I was in Linux. Then I went to Win 7 and CHKDSK decided to run, the last time it did this it hosed the system and it wouldn't boot. I had to restore an Acronis image to repair it. This time mercifully the check went Ok and I could boot to 7 again.

Question is, since I didn't make any changes to the SSD boot drive where both OS's reside I thought I could work on the storage drive with no problems and not incur a run of CHKDSK. It all runs so fast there was no way to tell what it found, so I can't offer anything that might have been related to it..shouldn't I be able to edit files etc on the storage drive from either OS with no trouble?

Fwiw the folders I made and the contents, on the storage drive, are readable just fine in 7, so it's not as if I lost any data. Just puzzled as to what set off CHKDSK in the first place, maybe just and odd coincidence? I thought the disc check only applied to the boot drive.



A:Will creating folders in Win 7, using Linux, cause CHKDSK to run?

Probably would yes.

Read other 9 answers

Hi guys,
I need Help about autorun.inf.exe and newfolder folder.ex.Last NIght my Pc Is Fully suffered with Various and Dangerous Virus,it creates Duplicate Folders of Name existed the Orginal will hide,I really Try Combofix,and Flash infetor,but it doesnt Work,am using Avast antirus and in Other O.S am Using NOrton 2009,but dey are not Detech this kind of virus(spyware,adware,trojon)i aslo used all spyware ,lavasoft adware pro,and Trojon removal,but it doesnt work,and in my Other .O.S.Regedit.exe also Corrupted,PLz help me OPut This KInd of Bloody Virus,am waiting For Your Reply,u may send me mail to

A:need help about new folder.exe is creating and all my folders are hidden

ComboFix is an extremely powerful tool which should only be used when instructed to do so by someone who has been properly trained. ComboFix is intended by its creator to be "used under the guidance and supervision of an expert", NOT for private use. If this application is used improperly it could turn your computer into a door stop.

Read other 2 answers

Need to create a shortcut to games folder in windows 7 Home premium? Have done it only once before and cant remember how to, pretty avg for a techy lol. Can someone please help me?

A:Creating shortcuts to folders built into OS

Maybe I don't understand what you want to do, but you should be able to right click the folder and under sent to select desktop (as shortcut). Is that what you were asking?

Read other 2 answers

i delete documents it comes back, so i thought okay, ill just keep it all in there.. but every time i go in there the folders pictures, music, and videos are there, i delete them, its all good, i plug it in again, and the folders are back

is there a way from keeping my USB device from automatically creating these folders?

thank you in advance

A:USB drive auto creating folders

Windows itself keeps these folders in My Documents
You aren't talking about those required folders are you?

If you are talking about on your flash reader device, you may just need to format it.
Here's a good tool I've used to do that (this will only format Flash Drives, ie remove all data, so backup your flash drive first)

HP USB Disk Storage Format Utility

Will format any USB flash drive
It can be known to recover Flash drives that are un-responsive too.

Read other 4 answers

I have 3 drives setup on my pc. 2 drives are 1TB and the 3rd drive is 2TB. One is used for Windows and the 2nd is used for Linux. The 2TB drive is used for back-up. Now the problem is this:

When I install various software or drivers, there are folders being created on the Linux drive or the back-up drive. Only when using windows. I could simply disconnect the 2 drives while installing, but I would need to have access to the cables inside the PC continuously, not fair. So what is the solution?

Read other answers

On windows 2003 server, our school has a parent and child domain setup, When creating new users in the child domain via active directory, their is a place to enter Home Folder, local path. when I enter a local path to the "students" folder the student folder is NOT created. I am not sure if it is how i am entering hte path for the home folder or if it is the permissions on folders.

In active directory where you enter the local path it will not let you enter UNC addressing \\servername\directory\... it promptsyou with a message that says use drive letter, etc....
This is the line I enter into the local path location in Active Directory:
f:\data2\users$\%username%. So here is what the permission are
The Users folder is a hidden share users$ which resides on server 6 on the F drive, in the data2 directory;
The permissions and security is as follows:
-server 6 is the child domain
-F drive, named Data2, shared as F$, security settings: admin and system - full rights student users - read, execute, list, write; everyone-special permissions (read and execute)
-Data2 directory, shared as Student, permissions: everyone-change and read; security settings: admin & system full control, users-list, read, execute, write
-Users directory, shared as Users$, permissions: everyone-change and read;
security settings: admin & system full control, users-list, read, excecute

I have quite a few new students I need to create folders for and getting AD to do it for me and set the... Read more

Read other answers

When I create new folders, or open old ones I begin by getting the message the the computer can not find the folder, if I then retry things work as normal. Any suggestions short of binning the laptop, or doing a rull system restore to factory settings??????

Getting to the point where I feel technology is getting out of control - this from a computer graduate from the early 80's

Any help welcome.....

A:Solved: Error Creating New Folders

Finally gave up on the whole thing and have had my computer reset to factory settings

Read other 1 answers

I cannot create a new folder in my documents. There is a new folder button, but when I click it, nothing happens. It isn't greyed out or anything. I do not get an error message, I get nothing. If I right click and select new, the only option I have is Briefcase, which is not what I want. I am on Word 10. if that matters

A:Solved: Creating Document Folders

Read other 6 answers

Hello there,

Yes I'm new here and I really hope I won'T bother anyone with this post since i looked almost everywhere to know if my problem could be solved and well...I failed finding something. Well, i hae this dll file which is running with winlogon and some other processes, but winlogon is the main trouble...I need to delete it because it's a backdoor(I think...Whatever it is, it isn't good). Anyone knows how to unload dll from processes? Or has any idea how i can remove a dll called qomjhhg.dll? Any help will be appreciated...here is a scan from Hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 9:19:12 AM, on 27/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\... Read more

Read other answers