Over 1 million tech questions and answers.

Strange Requests on Messenger

Q: Strange Requests on Messenger

I logged into MSN messenger tonight and had two people asking to be accepted on my friends list. I have never heard of either of them. Niko Lo Mas Mejor...[email protected]....and Liefde Is Een Plek Waar Je Niet Kan Krabben...[email protected].. Oh maybe I should have not put their e-mail addys on here because a bot may pick them up. Bad me. I suspect there intentions were not good. Anyone had a similar experience lately?

RELEVANCY SCORE 200
Preferred Solution: Strange Requests on Messenger

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Strange Requests on Messenger

It could of been someone who found you on MSN's directory, but odds are those are in fact bots. I would ignore them.

Read other 1 answers
RELEVANCY SCORE 57.6

My firewwall is getting strange outgoing requests for net access from a Temp folder. I have run scans and have cleaned out temporary files but somehow something keeps trying to send data out.Log followsLogfile of Trend Micro HijackThis v2.0.2Scan saved at 16:06, on 2008-10-19Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\nvraidservice.exeC:\WINDOWS\RTHDCPL.EXEC:\Program Files\Common Files\InstallShield\UpdateService\issch.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Active SMART\ActiveSMART.exeC:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exeC:\Program Files\Windows Live\Messenger\MsnMsgr.ExeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\DAEMON Tools\daemon.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Program Files\Logitech\SetPoint\SetPoint.exeC:\Program Files\Log... Read more

A:Strange outgoing requests

Welcome to Bleeping Computer, please be sure you have read and followed the Preparation Guide For Use Before Posting A Hijackthis Log, Instructions for receiving help in cleaning your computerhttp://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/All advice given is taken at your own risk.I apologize for the wait, if your issues are not resolved, read the instructions posted above and then follow the directions below. If you no longer need help, I would appreciate a quick post letting me know so I can close your topic.O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dllhttp://www.bleepingcomputer.com/startups/c....dll-21047.htmlhttp://www.sophos.com/security/analyses/vi...ojagentgjr.htmlSince malware can change quickly, if you still have issues, please describe the symptoms, include any error messages word for word and a fresh HJT log.Thanks

Read other 7 answers
RELEVANCY SCORE 57.6

I recently got 3 firewall requests from these pieces of windows software:explorer.exedllhost.exeruntimebroker.exe all 3 originating from their proper folders. Why are they requesting firewall access?

A:Strange Firewall requests

Can you tell us what firewall access these processes requested exactly?

Read other 2 answers
RELEVANCY SCORE 57.6

I recently got 3 firewall requests from these pieces of windows software:explorer.exedllhost.exeruntimebroker.exe all 3 originating from their proper folders. Why are they requesting firewall access?

A:Strange Firewall requests

Can you tell us what firewall access these processes requested exactly?

Read other 2 answers
RELEVANCY SCORE 56.8

Hi.
 
I help run a network, and have noticed a number of users devices hitting strange URLs - one for example is pasted below. All appear in the same format with a static IP and an encoded path. 
 
http://198.11.189.91/X%8E%5Ci%DF%1E%90%B4%A6%E4%02%5B%A3%D5%AC%A5%8C%11%BCOm%AB%0C%B5%B6%E1%08:%A5;h%B9%B2%06%BE%O%12i%FD%A6%87%D6%D3
 
For all of the URLs I've checked, they all seem to be operating a web server on port 2080, which is "Powered by wjas". I haven't found any useful information about this sort of web server

# curl http://198.11.189.91
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<h1>403 Forbidden</h1>
<p>You don't have permission to access the URL on this server. Sorry for the inconvenience.<br/>
Please report this message and include the following information to us.<br/>
Thank you very much!</p>
<table>
<tr>
<td>URL:</td>
<td>http://198.11.189.91:2080/</td>
</tr>
<tr>
<td>Server:</td>
<td>aserver010103188140.et2</td>
</tr>
<tr>
<td>Date:</td>
<td>2016/09/20 19:33:57</td>
</tr>
</table>
<hr/>Powered by wjas</body>
</html>
Does anyone have any information about what type of server these clients are connecting to, or what the data is in the encoded str... Read more

Read other answers
RELEVANCY SCORE 56.4

I have the Zone Alarm firewall and I have been getting outgoing requests to IP sites that I have blocked since I do not think that these are good sites.

A few months ago I was somehow infected by a Smitfraud trojan and I blocked all sites mentioned in bulletins as those that this trojan might call. I still get outbound requests to some of these sites. I may have been infected by other trojans as well....sites that I have blocked too. (Cadux family perhaps??)

The sites in question are realsearch.cc, www.nymex.com (I may have been infected by a unvise32.exe trojan variant), www.topadwarereviews.com, ecjnoe3inwe.com, among others. Zone alarm allows you to put in a web address and find the IP address.

I have tried to protect my computer as much as possible. I put on IE-Spy-Ad, SpyBot, SpyBlaster, and I try to use Firefox. I previously had Norton Internet Security and I now use a different Antivirus program. I have done numerous online scans Panda (Activescan2, nanoscan), BitDefender, Kaspersky, Trend-Micro among others and my computer seems clean at present.

How can I find out what is triggering these outbound requests so that I can put a stop to it.. Somehow I must have gotton a file, trojan, or registry key that has activated this behavior.

I have traced the outbound IP address from my Zone alarm log (program log). Is the IP address necessarily bad or could another computer be accessing mine through using those IP addresses?

Please advise!! Thank you.
 

A:Strange Outbound IP Requests Blocked by Firewall

Maybe you should post a HJT log.
 

Read other 3 answers
RELEVANCY SCORE 56.4

Can log onto my ISP but then my IE6 won't open. Instead I'm getting download request windows - one refers to a missing file sp something or other. Tried reloading my netzero software since it links with IE but it isn't listed in the add/remove software list and if I try to just delete the file it says its write protected. Uninstall icon doesn't work either - says it can't find the file.

Here's my HJT log:

Logfile of HijackThis v1.99.0
Scan saved at 11:57:37 AM, on 12/29/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\VERITAS Software\Update Manager\sgtray.exe
c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\NetZero\exec.exe
C:\Program Files\Hewlett-Packard\AiO\hp officejet v series\FRU\Remind32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us7.hpwis.com/
R1 -... Read more

A:Can't access browser - getting strange download requests instead

I would suggest downloading Ad-Aware and Spybot Search & Destroy
Lifted this from $teve...follow these directions with these programs and repost a HJT log after you finish

Before you scan with AdAware, check for updates of the reference file by using the "webupdate".
Then ........

Make sure the following settings are made and on -------"ON=GREEN"
From main window :Click "Start" then " Activate in-depth scan"

Then......

Click "Use custom scanning options>Customize" and have these options on: "Scan within archives" ,"Scan active processes","Scan registry", "Deep scan registry" ,"Scan my IE Favorites for banned URL" and "Scan my host-files"

Then.........

Go to settings(the gear on top of AdAware)>Tweak>Scanning engine and tick "Unload recognized processes during scanning" and "Let windows remove files in use at next reboot"

Then...... click "proceed" to save your settings.

Now to scan itīs just to click the "Scan" button.

When scan is finished mark everything for removal and get rid of it.(Right-click the window and choose"select all" from the drop down menu)
Now re-boot...

Then
Search & Destroy

After installing, first press Online, and search for, put a check mark at, and install all updates.
Next, close all Internet Explorer and OE windows, hit 'Check for Problems', and have ... Read more

Read other 3 answers
RELEVANCY SCORE 55.6

Hello,I use Windows XP and Firefox is my default browser. Google searches have been redirecting to random sites.Also, since I have AVG (Free) firewall installed, I am getting unusual requests from new exe files to connect to the internet.I am attaching DDS and GMER logs with this post. Any help is appreciated.Thanks in advance.El Guapo.

A:Google/Firefox redirects, strange exe sending n/w requests

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 17 answers
RELEVANCY SCORE 46.4

hey everyone.
this morning i got up and when i went to go onto msn messenger it won't let me log on. i took this in stide because sometimes it just doesn't work when they are updating it or something.

later on my boyfriend got up and logged onto his computer (on the other side of the apartment) and msn worked just fine. i tried a few more times and mine is still not working.

it tells me to check the internet connection, claiming that i am not online or something. i reinstalled it and it's still doing the same thing.

i am connected through a hub, but we have 2 IP adresses. it's been working fine so far, until today. anyone know what the problem is here?

thanks for any help!!
 

A:messenger is being strange.

okay, nevermind. as soon as i got mad enough to come and post about this it fixes itself!!

i tried to delete this thread but apparently i'm not good enough.

stupid msn.
 

Read other 1 answers
RELEVANCY SCORE 46

OK, so i'm just chatting and surfing the web as usual, and then Comodo comes up with one of its warnings.it says the Msn Messenger is trying to use Mozilla Firefox throught an OLE automation that can be used to hijack other programs.I never requested this action, so i click deny. All of a sudden, Firefox cannot connect to the internet. I have to use Internet Explorer. I suspect IRCbot is responsible, becuase i found a program linked to it in my processes on task manager. But if course, i cannot use F-bot to fix it because of problem siwth my temp folder which can be found hereThis happens every now and again, i always click deny because i dont think msn would even need to connect to the internet- must be some sort of malware!Can IRCbot do this? Or is it something else? Thanks for help in advance

A:Msn Messenger Acting Strange

Do you use Hotmail?
There was a recent Firefox update for Firefox 2, which I don't use, that this warning sounds like what the update was to protect against. I wonder if this is related to the update.
You might want to post a Hijack This log to find the malware if you suspect that it is malware related.

Read other 3 answers
RELEVANCY SCORE 46

I have been having some bizarre behavior from MSN messenger on XP.

It kept crashing, and I reinstalled it. Everytime I run it, a window pops up and says "Select the person you would like to use the feature with and click OK.

Well, there was one person on line, and without any input from me, this window repeatedly pops up with their name and keeps going accumulating 30 plus messages and still going, until I alt-ctrl-del to stop it.

My contacts still are there, but it is unusuable, as it locks the computer up as it is opening all these messages.

Any ideas?
 

A:MSN Messenger - Strange problem

Read other 10 answers
RELEVANCY SCORE 45.2

So this morning the last thing I done was shut down the computer. It said it had 6 updates to install before shut down and that was fine. I started it up this afternoon and everything was ok. I started MSN messenger and then went into my emails via messanger. I checked them (never clicked on any links or anything like that and then logged out. When I log out it defaults to MSN UK through IE8. There was a story at the bottom about mothers day. It's in life and style column entitled "Make your mum's day meaningful this year with these great items". Then when I click on this and then scroll through the images messenger tries to start up on its own.

In fact when I click on any story that has a story where it has say 10 images and then I have to click through "view first image", "view second image" etc messanger starts on its own through msn uk via IE8. Anyone else seen this issue or having this problem?

I am running malware bytes and eset at the moment in case something is going on.

A:Strange messenger startup problem

Still haven't found a solution to the problem. I have uninstalled and reinstalled messenger and it still happens. Every time I click on a link on msn uk when it says "view first image" etc it starts messenger. Any body any ideas?

Read other 2 answers
RELEVANCY SCORE 45.2

Can someone please tell me why I get the following MSN Messenger Alert:
"You have signed in to Messenger on another computer. Click here to sign in again."
So I click on it and it either (sometimes) shuts down, or restarts!!
Just started doing it.
As far as I know, I am the only user on my Account.

Thx in advance!!
 

A:Solved: Strange MSN Messenger Alert!!

Read other 6 answers
RELEVANCY SCORE 44.8

For about the past week and a half I've had a random person sign in on messenger. Such as...

Are you ready as just signed in

and most recently Phil.

The thing is, I've never heard or seen these people in my life, and when clicking the box I get an error and it will not allow me to send a message to that person. They also do not appear on my list, or contacts.

I'm thinking it could be a virus. Any suggestions?

Thanks
 

A:Strange Windows Live Messenger problem

http://www.online-tech-tips.com/com...computer-email-monitoring-or-spying-software/ Jazz
 

Read other 1 answers
RELEVANCY SCORE 44.8

Hello,
I have an odd issue with one of the computers in my organization. The user has an HP Pavilion DV6000 series laptop with Vista 32 Home Premium. Occasionally if he is sending a message through Yahoo Messenger, after tabbing from another window, instead of typing his intended message, Yahoo Messenger shows a keyboard layout sequence. For example, if he intends to type "Thank you", it shows "Asdfj Kl;"

The only fix (temporary), is to tab to another program such as Outlook, compose an email message (characters show properly there)., then tab back to Yahoo Messenger and type away. This happens both with external Logitech cordless keyboard and the built in keyboard on the laptop. I have tried removing Yahoo Messenger and reinstalling, checked language settings on keyboard in control panel, uninstalled/reinstalled Logitech driver, replaced batteries in laptop.

Anyone ever seen this before? I'm stumped, and google searches for problem almost always lead to a stuck shift or ALT key, which is not the case here.

Thanks in advance!
 

A:Strange issue typing in Yahoo Messenger

Remember that even when using an external keyboard the original one is still effectively connected and working.

At a guess I would start to blame the laptop keyboard, or at leat the connection to it.

A real odd problem though.
 

Read other 1 answers
RELEVANCY SCORE 44.4

Win 7 RC. Legit Key.

Just like everyone else(except this is on all of my machines and just immediately happened) I'm receiving the error:

"Windows Live Messenger has stopped working"
A problem caused the program to stop working correctly. Windows will close the program and notify you if a solution is available.

My problem started yesterday while I was working. I opened up my laptop and my MSN IM's wouldn't open. I could highlight them but not bring them up. So I ended the process of WLM and then proceeded to re open it. I then received that error. The weird thing is. So I decide to TS into my work station and I turn on MSN, I get the same error. I needed to get some information from my brother at home and my cell doesn't work in our labs. I decided to mesh into my PC at home turn on WLM and I get the same freaking error!?!? I have spent some time trying to repair and uninstall etc.. so to verify this is on my end. I sign into Web WLM works fine. I then decide to open up my Virtual XP machine. I sign into regular MSN messenger, everything is ok there. I then download WLM to my VPC and sign in with out any issues....

I'm freaking stumped now. My settings on my WLM were to be signed into multiple locations, so I turned that off, changed my recent display picture tried to set all the settings to default. Turned off adobe from start up restarted my pc, repaired\uninstalled 2 times for msn. I'm about to try JV16 and remove it from my registry but I dou... Read more

A:Windows Live Messenger Issue. Mine is strange.

Hi and welcome.
Do you have a recent restore point saved? If so I'd try that or uninstall and reinstall Media Center again.

Read other 3 answers
RELEVANCY SCORE 44.4

Has anyone come across a situation where netscape messanger (v4.7) randomly creates folders with weird names (always beginning with X)and a .TMP extension and then moves mail from the inbox to that folder? This has happened several time now. I delete them and they come back. I have tried creating a new profile and importing the mail from the old mail file to the new one. Is there a virus I should be looking for or is it some weird glitch in Netscape?
 

A:Netscape messenger creating strange temp folders

Hi rlserena

I have just installed Netscape Communicator 4.76 myself.

If you could post the path these temp files are being created in, I'll keep a look out for them.

Is it actually moving the mail files or just creating copies of them?
 

Read other 2 answers
RELEVANCY SCORE 43.6

Hi all,Basically, the problem is: when I upgraded to the new version of Windows Live Messenger (2009) a folder called "WindowsLiveMessenger" appeared on my desktop. Inside it is something called Transport0.log which contains the text:"23:10:11.031 4F4:27C ADVCED :: Module:Transport DLL-version:3.5.6872.0 Retail Adv:0" (I think the numbers at the beginning change sometimes, maybe the time or something )I can delete this folder if I close WLM, but the next time I run WLM it just appears again. I asked for help on the Windows Live site and received an e-mail which told me to check for spyware and gave me instructions on how to uninstall and reinstall WLM including doing the following:The following commands delete files that are used when you sign in and the Contacts Cache folders.i. Click Start, click Run, type %USERPROFILE%\Application Data\Microsoft\ and then press Enter. Delete the IdentityCRL folder.ii. Click Start, click Run, type %ALLUSERSPROFILE%\Application Data\Microsoft\ and then press Enter. Delete the IdentityCRL folder.iii. Click Start, click Run, type %USERPROFILE%\Local Settings\Application Data\Microsoft\ and then press Enter. Delete the Windows Live Contacts folder.andClick Start, click Run, type CMD, and then press ENTER to open the command window. b. Type the following commands exactly as they appear below. Press ENTER after typing each command to execute the command. Note: In some case yo... Read more

A:Please help? Strange folder appeared on desktop after upgrading to the new Windows Live Messenger

Did you take their advice and check for malware? Deleting the registry keys should have fixed this provided there are no traces of malware hiding some place deep and dark inside your system...I would suggest posting a new topic here:http://www.bleepingcomputer.com/forums/f/103/am-i-infected-what-do-i-do/Follow their expert advice in checking that you don't have something like that going on...

Read other 9 answers
RELEVANCY SCORE 36.4

i cannot enter captcha on any site as i cant see it for some reason i have attached few images which shows the cause of my problem.i have scanned my pc with multiple antivirus but nothing found."]3rd image is tested using Ubuntu but of no use. hope some one can help me as i found no solution for my problem which is causing problems in registering on various sites.i can enter captcha on very few sites eg. - YouTube.but it also says too many request from my network.thank you.

A:too many requests but from where??? help!!!!!!!

Hmm, have you tried clearing you cache?

Read other 4 answers
RELEVANCY SCORE 36.4

I don't know if this should go here or elsewhere but I am attempting to find a new gamertag for my xbox profile on the xbox.com account management page. After I make 20 or so checks for availability an error shows up below the input field saying an unexpected
error has occurred. This message does not stop showing up unless I wait a couple days which makes finding a new name very difficult. Am I being blocked by the server or is this another issue?

Read other answers
RELEVANCY SCORE 36

The network that I am currently trying to patch up is peer to peer with about 20 machines (win 98 and nt workstation). The company is not willing to switch to a server based configuration at this point. However I am trying to do as much centralized administration as possible.
I want to be able to view the connections (net watcher) to any given computer on the network from one 98 machine. It was easy to set this up on all of the 98 machines, how can I view this information on the nt boxes from the 98 machine. When I try to access the nt machines with net watcher it tells me that the computer does not accept remote requests. If this is not possible can you tell me how to view this information on all of the nt boxes from one nt box.

Thanks,
Monty
 

Read other answers
RELEVANCY SCORE 36

I'm a programmer, and installed wireshark on my xp machine to do some tcp/ip work. I noticed, even with no programs running I get a constant stream of dns requests to my routers ip.

the requests look like this:
46189 3959.607565 192.168.2.2 192.168.2.1 DNS Standard query PTR 4.160.15.219.in-addr.arpa

46247 3991.834562 192.168.2.2 192.168.2.1 DNS Standard query PTR 210.168.161.188.in-addr.arpa

46201 3972.852314 192.168.2.2 192.168.2.1 DNS Standard query PTR 20.71.103.82.in-addr.arpa

and the responses look like this:
46212 3985.801191 192.168.2.1 192.168.2.2 DNS Standard query response PTR WL.hsd1.fl.comcast.net

46206 3980.680231 192.168.2.1 192.168.2.2 DNS Standard query response PTR pool-173-67-9-33.bltmmd.fios.verizon.net

46199 3968.951943 192.168.2.1 192.168.2.2 DNS Standard query response PTR c-75-70-255-177.hsd1.co.comcast.net

From what I can gather, the requests all look like home isps. There also seems to be a lot of foreign countries like .br and .jp a lot. Has anyone seen anything like this before?
 

A:weird dns requests

welcome to TSG

have you googled all those names? there seems to be no warnings about them
 

Read other 1 answers
RELEVANCY SCORE 36

Well, when I installed IE8, it requested to run add-ons on websites:On some web-sites I ran this add-ons:but, when I run add-ons IE displays Security Warning:I have already installed Adobe Flash Player 10 ActiveX and Adobe flash player plugin, but I think one of them is Opera's Which of them should I run? Run add-on on each website or run add-ons on all websites?

A:IE 8 requests to run add-ons on websites

You can safely run Adobe flash player. That warning is just to let you know that this add-on was already there and asks you to confirm that you want to run it.
Its up to you if you want to decide for every site apart with flash-content if you want to run it or if you want to enable it for all sites. Its no security risk to allow it for all sites.

Read other 5 answers
RELEVANCY SCORE 36

hello mates... i am facing problwm from few days back that when i send request then i get a message i forgot.. can any one plz help me?

A:MSN requests problem

plz help me frieds..

Read other 2 answers
RELEVANCY SCORE 36

O2 - BHO: (no name) - {cd6caa5d-7035-43dc-abea-a89090a098fd} - C:\WINDOWS\system32\boheyuje.dll
O4 - HKLM\..\Run: [kagizoriha] Rundll32.exe "C:\WINDOWS\system32\kuririme.dll",s
O20 - AppInit_DLLs: C:\WINDOWS\system32\rirebuva.dll

The above lines from hijackthis seems suspicious and is persistent (returns after deletion). I think they are linked to the problem I am having with kasperski detecting requests to get to the address 77.74.48.105 to download what it thinks is malware from programs IE and win 32 services. It may even be causing my IE7 to not function once opened (currently using firefox).

A:PC slowdown; requests to 77.74.48.105

Howdy, my name is Hoov, and I will be helping you with your dilemma. I appologize for the delay in getting you help.Please make sure you watch this thread for responses. If you click the options tab at the top of your first post, you can select to track this thread. Here is what I am asking you to do during the repair of your computer*Tell me everything that you have done, if anything, to try and fix this problem.*Please only use 1 forum to help clear up your problem. Posting on more than 1 and following instructions from more than 1 forum will cause those helping you to pull out thier hair.*Follow my instructions - If you can't for some reason, or if you don't understand something, please tell me. If you deviate from my instructions, tell me, it may make a difference on where we go. Don't install anything, even other programs that have nothing to do with security or malware, it could cause things to change, and I would never know it. *Have faith. I will do all I can to get your computer working, and if I can't - someone else here will know something else to try. *Stick with me to the end. My aim is to fix your problems, and give you the tools and knowledge to keep this from happening again.Now onto trying to fix your computer.Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, f... Read more

Read other 3 answers
RELEVANCY SCORE 36

Please read this carefully before posting.
The idea:
This thread is meant to collect user's request of new features to add to Windows 7, or to bring back features that were taken out since XP / Vista, and are sorely missed.
The idea is to create a list that MS might want to take a look at.
For this to have a chance, we need to keep the thread clean, and free of unnecessary comments and discussions.
So we need a set of rules.
The rules:


   Information

1. No rants, no debates or discussions, no personal comments, no reactions to other posters, no MS bashing, period!

2. Maximum of 10 lines. So make sure your post is clear and to the point.
One or two words more won't matter, but don't push your luck.

3. Posting of screenshots is allowed to clarify your point.

4. No utopian requests, keep it reasonable.

5. Double posts and posts with features already requested by others will be deleted.

6. Adding a reason why you want it is allowed, but remember the 10 line rule.

7. If a user posts a problem that can be fixed, no help allowed other than saying poster should open a thread about his problem.


   Warning

Not complying with these simple rules, will get your post removed.


   Information

1. Please examine the list to see if your request is already there.

2. Please think about what you're requesting is a good thing for less knowledgeable users.
Example: Making editing the context menu easier, could lead to u... Read more

A:Requests to Microsoft.

A small (IMO not needed) but greatly requested feature reinstated. Put back the wireless icon activity in the tray of the Superbar

Read other 9 answers
RELEVANCY SCORE 36

Hello I am looking forward to an updated P72!! Some features I would like to see added vs P71: HDMI 2.0a support and DP 1.44k touchscreen option and a precision stylusTablet mode like the yoga hasHDR optionGsync external and LCD variable refreshUHD optical drive option10GB Ethernet or the interim 2.5/5Gb would be fineLatest WiFi standard .axtitanium to reduce the weightintel real3d camaracamera mechanical cover

A:P72 and features requests

Agree with all suggestions. Hoping for pen digitizer support mostly as I have the P51 version with digitizer presently.

Read other 8 answers
RELEVANCY SCORE 36

I set up family safety for my 12 year old daughter, and ticked all the apps she can use freely. Every time she logs on the computer it pops up little messages telling her to request permission to use all the apps that I didn't give her access to. It's very annoying, so how do I stop it, other than the obvious but unhelpful step of letting her access everything?

A:Permission requests

Hello Andy, and welcome to Eight Forums.

The apps that are checked are the ones that are blocked instead. Only the unchecked ones are allowed.
Family Safety App Restrictions - Set and Manage in Windows 8
When you get a request to allow an app and either allow or block it as per the tutorial below, you and the user should not see the messages for that app anymore.

Family Safety Requests - Send and View in Windows 8
Hope this helps for now,
Shawn

Read other 1 answers
RELEVANCY SCORE 36

this keeps coming up day in day out and it's getting o be a pain

pic of IRQ's from device manager attached

is there a fault/issue with any?
 

A:Multiple IRQ Requests

This May Help
http://forum.notebookreview.com/showthread.php?t=54401
 

Read other 1 answers
RELEVANCY SCORE 36

pl plllllllllllllllllll help
its urgent as my windows is showing stop screen error
i hav done antispyware scanning an then it asked for reboot i said yes an wen i started da windows its saying multiple irp requests
i cant even uninstall antispyware in safe mode as it is sayind windows installer is not proper pl reply soon..........

A:multiple irp requests

Hello and Welcome to TSF

You should have been patient and let the security team in the Hijackthis forum help you remove your infection, improper removal has caused your issue.

Use System Restore to a previous date to see if you can at least access windows in normal mode, then Look over the First Steps at Removing Malware and post the logs requested in the thread you started over in the Hijackthis forum.

Read other 1 answers
RELEVANCY SCORE 36

Hi there all,

I am using a Vodafone 3G Modem om my pc, however I cant send receive USSD commands .. is the software that you can direct me towards that I can use. I am using the Cell C Network in South Africa. I have searched on the net and most of the stuff I find simply doesnt work. If possible could someone assist me wit this request? Just a nice & simple interface that actualy works.
Kind regards

Read other answers
RELEVANCY SCORE 36

Is there a place that we can leave feedback or requests for the ATA product?

There are a few things i would like to see changed.  

1.  Alerting
We get alerts during backup windows that the ATA cant keep up but it doesn't seem to have anything to do with CPU or RAM.  In addition, we have no users in the system at that time so i find it very hard to believe
that this is true.  I would like to set time windows where we can exclude these alerts or maybe thresholds where if it is seeing that for 5 minutes, 10 minutes etc.
2.  Email Audience
I would like to be able to say these types of emails go to this distribution list and those go to another so that we keep the number of alerts the team gets down a bit.  
3.  Suspicious Activity
When we get an alert warning of suspicious activity and click the link to take a look, the first thing you have to do is answer whether it is normal or not, but we cant click the link to see the suspicious activity unless
we open the excel file in the email.  This should be adjusted.  

Read other answers
RELEVANCY SCORE 36

I certainly appreciate your position. Indeed you are correct that I originally posted a request for assistance on another forum. After getting a reply from another user on that forum and nothing from the moderators for 2 days I decided to post on your site/forum...thinking that the user reply had suggested to the moderators on the other site that I was already receiving assistance.I have since received a request for my HJT log and info files from the other site so I will rely on them for assistance, My apologies for any confusion this may have caused. It was not my intent. More it was my misunderstanding of how these forums work.Thank you again and again, my apologies for duplicate postings. It was not my intent to over-tax either forum. I was simply getting impatient and after some reading thought erroneously that the user reply to my original post suggested to them that I was already receiving assistance when I was not.

A:Multiple Requests for help

This thread will now be closed since the issue seems to be resolved.If you need this topic reopened, please send a Private Message to any one of the moderating team member or myself. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.

Read other 1 answers
RELEVANCY SCORE 36

It's time for me to replace my old HP 200LX, and I can't seem to find a PDA that is suitable. Here are my search criteria:

I am 50 & my eyes aren't as good as they used to be.
I need a decent sized display (Palm Pilot types are
too tiny).

Besides the usual PDA (calendar, contacts, etc.), I want
to be able to run some Excel spreadsheets. My spread-
sheets can be robust, so I prefer a landscape display,
not the portrait shape of Palm Pilot type PDAs). Bonus
points for syncing up with my Quicken on my PC.

Connecting & syncing with my Windows PC is a good
idea. This device should augment my PC, not replace it.
(I do use MS Outlook).

My handwriting is horrible -- I need a keyboard, but
the keyboard can be small -- I don't mind hunting &
pecking on the PDA. I also don't mind navigating with
arrow keys.

Ideally, I'd like something about the size of a paperback book. I don't want a full sized laptop -- laptops are a bit big & too expensive. Finally, it would be nice if the device had modern conveniences, like ability to play MP3 files, surf the net, play some basic games, etc. I also wouldn't exclude from consideration any PDA / cell phone combination (although I don't have/use a cell phone yet).

Thanks in advance.run some Excel spreadsheets
 

A:PDA Recommendation Requests

Read other 6 answers
RELEVANCY SCORE 36

I suspect some kind of phishing bug but I am not sure what might cause this issue.
In the 17 years since I started using a computer I have gotten only a few requests to log into the server when I opened my email client. It has been more than a decade since I saw one.
In mid October this happened randomly and I ignored it. Instead I opened my properties folder and checked each tab and closed it. Then I was able to get my email.
After that I think the next day maybe a couple of days later it came back only this time it wouldn't let me get my email when I checked the properties. I ran an MSE scan and it seemed to fix the problem.
Then a week later the same thing happened. This time checking properties and doing an MSE scan had no effect. I was able to send a test email but I did not receive it. I ran an ESET online scan. This seemed to "fix" whatever was causing the log in request. Since about 28 Oct until today there was nothing then this morning it has come up again with a twist; When I check the properties folder my user name and password lines were blank!
I am running an MSE scan and ESET is on deck to run right after. I feel like I am getting a bug from somewhere that is raising a false need to log in so that my password can be gotten. IDK ?????
 

A:Suspicious log in requests

Read other 7 answers
RELEVANCY SCORE 35.6

I don't know if I have a malware problem or not. I know enough to know that I don't know enough about hijackthis. So, if someone with the knowledge will take a look at the hijackthis file below and let me know what I should do, It will be much appreciated.

Thanks in advance,

karic123

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:16:39 PM, on 2/18/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.my.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...ARIO&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ... Read more

Read other answers
RELEVANCY SCORE 35.6

I've spent the last hour or so looking over several pages of these activation threads and haven't found one that addresses the problem I've recently had with my Win8 x64 activation. My copy of "8.0" Win8x64 has been activated since I bought it direct from Microsoft in January for $39.99 and burned the iso to DVD and installed it (This post does not concern "8.1" as I installed that on another partition entirely just to play with until it is ready for prime time.) I also got the free copy of Windows Media Center with its separate key. For the past six months I've had no problems at all relative to activation. I've actually never had any problems with activation (that I couldn't fix pretty quickly) ever since Microsoft initially started doing its activation bit with its OSes several years ago.

Yesterday, (I've listed my system specs) I'd been experimenting with using my UEFI bios to push the clock rates for my cpu with an attendant .15V rise in power to the cpu core--standard clock is 3.5GHz with Turbo to 4.1GHz--and I incrementally moved the cpu clock to 4.515GHz and turned off Turbo mode (of course), and found that my idle temps while running AMD's Cool 'n Quiet mode (through a UEFI setting) averaged 38C-45C; and ~55C under load (@4.515GHz), which is not much different at all from the standard stock-clocked temps. OK, that's as it should be for a well-binned, good-yielding chip, etc. It overclocks well with very little resistance... Read more

A:Mistaken OS requests for activation

Hi waltc,

Wow, you really know how to write a book with no stone left unturned! Anyway, since you have had 0 responses from the forum, I decided to just throw in my two cents. First off, my reactivations have been much more simple than yours; however, I can tell you that I have been successful every time. Some of these reactivations have included major components and the phone reactivation has always worked for me but the key to success in this area is, when they start to ask you questions, always respond with "one" as the answer. Now, since nobody knows for sure what information MS collects to identify an installation configuration, you can probably expect more of the same down the road but since Win 8 Pro is actually a retail license you should be able to get through a reactivation time and time again (if necessary). Remember, the answer is always "ONE." Cheers.

Read other 10 answers
RELEVANCY SCORE 35.6

I thought we had cleaned up all the keylogger spyware from the ex-boyfriend but it's all started again. Even my stored password accounts are asking for a password 2 or 3 times. Very unusual. I didn't open email with attachments either. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:54:15 PM, on 9/9/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16705)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\AOL\ACS\AOLAcsd.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\LogMeIn\x86\RaMaint.exeC:\Program Files\LogMeIn\x86\LogMeIn.exeC:\Program Files\LogMeIn\x86\LMIGuardian.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Mozy\mozybackup.exeC:\Program Files\Mi... Read more

A:Mulitiple Password Requests

I apologize for the very long delay. We have a huge backlog of HijackThis Logs to handle and it has been taking us greater time than normal to get caught up. If you are still having a problem, and want us to analyze your information, please reply to this topic stating that you still need help and I will work with you on resolving your computer problems. If your problem has been resolved, please post a reply letting us know so we can close your topic.

Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, feel free to create a new one.

Once again, I apologize for the delay in responding to this topic.

Read other 1 answers
RELEVANCY SCORE 35.6

I had a virus on Windows 7 and norton removed it. Now, when I type mozilla.org in the URL bar I get redirected to another site. This is quite annoying. The only place I know to check for this is in the hosts file but it seems benign. Please help. Thank You.I tried running gmer but I keep receiving errors when it runs so I'm posting what I have. Below are the hijack this log and dds log. The attach.txt is attached.The viruses/problems that Norton Removed have been: SpywareGuard200842441975-585950advmain.class78d6980a-35b72d9dvmain.classDWH2D74.tmp---------------------------------------HijackThis log:Logfile of Trend Micro HijackThis v2.0.4Scan saved at 10:27:30 AM, on 8/4/2010Platform: Windows 7 (WinNT 6.00.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Symantec AntiVirus\VPTray.exeC:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exeC:\Program Files\TortoiseSVN\bin\TSVNCache.exeC:\Program Files\Microsoft Office\Office12\OUTLOOK.EXEC:\Program Files\MagicDisc\MagicDisc.exeC:\Program Files\Microsoft Office\Office12\EXCEL.EXEC:\Program Files\Microsoft Office\Office12\EXCEL.EXEC:\P... Read more

A:Firefox redirecting my url requests

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.Download OTL to your desktop.Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.When the window appears, underneath Output at the top change it to Minimal Output.Under the Standard Registry box change it to All.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The... Read more

Read other 2 answers
RELEVANCY SCORE 35.6

Quote:




A reader has sent along the results of his script-based analysis of the top feedback requests for Windows 10 in the Windows Technical Preview. And it won't surprise you to discover that the most popular requests are an interesting mix of common sense ideas and superficial changes.

According to Matt Goldstein, who, among other things, has been incredibly helpful with typo/grammar fixes (always appreciated), this list is comprised of all of the feedback Microsoft has received that has garnered 25 or more "likes." So it's sort of a popularity contest. And the top results (edited for legibility and removing feedback that does not represent an actual request) are:

400 or more "likes"

1. Let us move or disable the new search and/or taskview buttons. I just wrote about this in Next Steps for Windows 10, so it is of course an excellent idea. :) And over two of the top 10 requests, it has garnered a grand total of 701 votes: 415 for this one and 286 for "Option to remove search button from taskbar". FTW.

2. Add a little animation/transition when opening the Start menu. Yep, the number one request, with 453 votes. Part of me wonders at the lack of imagination here, but then I also should point out that if this is what we're really worried about right now, t... Read more

Read other answers
RELEVANCY SCORE 35.6

Hey Guys,

Just wondering if anybody could help me out with this issue I am having. In Outlook is there a way to CC: people on a task request assigned to someone else without assigning the task to the people on the CC: list? Been trying to locate a way to do this without any success. Thanks again guys

Norton
 

Read other answers
RELEVANCY SCORE 35.6

I am being frustrated with constant requests for a password. I have just started using this system and during updates the screen would go blank and I had to use CTRL+ALT+DEL to return to the desktop.

On return to the desktop the user name is displayed with the remark LOCKED and the need to enter the password.

When loading music CDs again and again the system displayed the request for a password. This happened at least once during the download sequence and at times twice for a CD with a large number of tracks.

What do I need to do to stop all this nonsense?

A:Constant password requests

Hi Scunnered

Im Not sure if im reading this wrong but what it sounds like to me is you have your screen saver set to password on resume
if this is the case then all you simply need to do is right click your desktop, personalisation, screen-saver
ether change the length of idle time to a longer one or uncheck on resume, display login screen

sorry if i am misunderstanding your problem

Read other 4 answers
RELEVANCY SCORE 35.6

I am running a Windows XP Pro on a Windows Server 2008 network. I am using Symantec Endpoint and Malware bytes for anti-virus/anti-malware protection. The network has a WSUS server pushing Windows updates out. Due to certain software on the computer, I can only use Internet Explorer 7 or Mozilla Firefox for internet browsing.I keep getting warnings from Symantec about HTTP TIDSERV requests. I have tried everything to remove it, but have been unsuccessful. So, I have followed the steps as best as I can. I ran the Defogger, I used DDS to get a log, and tried to run GMER, but GMER and I are having issues running. Please help!Here is my SSD Log:DDS (Ver_10-03-17.01) - NTFSx86 Run by epainter at 8:54:45.81 on Thu 06/03/2010Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_20Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3037.2056 [GMT -5:00]AV: Symantec Endpoint Protection *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}FW: Symantec Endpoint Protection *enabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exesvchost.exesvchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Fil... Read more

A:HTTP TIDSERV requests

Hi and welcome. My name is Extremeboy (or EB for short), and I will be helping you with your log. I apologize for the delay.If you still require assistance we would like to see the current condition of your system so please post a new set of DDS Logs as well as a GMER log and a description of any remaining problems or symptoms you may still have please.If for any reason you did not post a DDS log or GMER log please refer to this page and in step #6 and Step #7 and Step #8 for further instructions on downloading and running DDS & GMER. If you have any problems when running the tools or unable to produce a report for any reason, just let me know in your next reply.For your next reply I would like to see:-The DDS logs---DDS.txt and Attach logs-GMER log-Description of any remaining problems you may still have.With Regards,Extremeboy

Read other 29 answers
RELEVANCY SCORE 35.6

Got the BSOD with the multiple irp requests error. Help would be appreciated in solving this issue :(

P.S How can I upload the dmp file for debugging?

A:BSOD - multiple irp requests

Here is the dmp

Read other 4 answers
RELEVANCY SCORE 35.6

Using Outlook Web Access to access an Exchange 2003 server: the server does not have a security certificate, so when IE first touches the site, it issues a security warning. I click through that and log in. Nothing new there. However, I am now having a problem reading messages. Every time I open one, I get ANOTHER security warning that I have to click through. That is new in the last month or so. I launched a Virtual Machine of XP that is not current with its Windows Updates. It works as expected.

Does anyone know which recent update from MS might be causing this problem. It is really annoying.
 

Read other answers
RELEVANCY SCORE 35.6

My system system seems to randomly try to access my floppy drive for no apparent reason. It didn't do this when it was new. How to I disable it ?

A:How to Disable Floppy Requests

I found this maybe it'll help you

If you have a Windows PC, you will sometimes get into a situation where the computer randomly access the floppy disk drive every few minutes -- for no apparent reason! Typically, the harmless annoyance occurs because some program "thinks" it needs to read or write some data to a diskette.

In most cases, there may be a document in your recent history folder (Start >> Documents) that was once on a diskette. Here are the steps to clear the document history file Windows uses:

1. Click Start
2. Click Settings
3. Click Taskbar
4. In the Documents area, click Clear
5. Click OK

Other causes of the problem:

* Microsoft Office's Find Fast utility may be running and trying to index your FDD. Remove it from the Startup group, or in Control Panel, look for Find Fast and disable it from starting. Find Fast installs automatically with Office and can be a resource hog as well!
* The System Agent may be running a task; if present, click the System Agent icon in your System Tray for further information.
* A virus scanner program may be trying to check the drive. Check the setup of your virus scanning software for further information. A diskette scan at startup or shut down may be normal, but a scan between these times is typically a user-controlled option.

Read other 1 answers