Over 1 million tech questions and answers.

All sorts of problems..HJT included

Q: All sorts of problems..HJT included

Hey, this computer is really messed up. When I try and run IE it usually freezes up the first time so I have to end-task it. The second attempt does the same thing, only after I end-task it I have to end-task explorer.exe and then run it again. Then after that I can make a third attempt on IE and while its loading the homepage (which it really isn't), if I tell it to go to another page instead, it will. Thus after 5 minutes I can finally surf the web. I've run Ad-Aware and Spybot but I think I still need some help if someone doesn't mind.

Logfile of HijackThis v1.99.1
Scan saved at 11:58:35 PM, on 7/17/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\sgxbsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
C:\DOCUME~1\Owner\LOCALS~1\Temp\sysnet.exe
C:\WINDOWS\ztuldll.EXE
C:\WINDOWS\cdorenc.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\AIM\aim.exe
C:\WINDOWS\system32\rundll32.exe
c:\progra~1\intern~1\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Breana\Desktop\Bill's junk\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.iosazfkysjturi.info/lyKWnnPdXGyFckVDPhjfMpB8GLah3j1OPyEWY4HoQwH6L9bQQhObqEhh0jpp0KQF.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cnn.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://gamefacts.cmo/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: (no name) - {9368D063-44BE-49B9-BD14-BB9663FD38FC}_ - (no file)
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}_ - (no file)
R3 - URLSearchHook: (no name) - _{707E6F76-9FFB-4920-A976-EA101271BC25 - (no file)

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: AuroraHandlerObj Class - {4AA870AC-8427-42a4-B92E-ECD956197489} - C:\WINDOWS\AuroraHandler.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CleanMyPC Popup Blocker - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - C:\Program Files\CleanMyPC Popup Blocker\CleanBHO.dll
O2 - BHO: (no name) - {8098452D-6F5F-57E7-90E9-8ED84B1945CE} - C:\PROGRA~1\AIMPHO~1\Peakstore.exe (file missing)
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O2 - BHO: (no name) - {DB5BB08B-F281-53BF-C6D0-953E8FCCDD02} - C:\DOCUME~1\Breana\APPLIC~1\AIMPHO~1\Peakstore.exe
O2 - BHO: RichEditor Class - {F79A2C4B-8776-4ED7-8B2F-4786A4A3500A} - C:\WINDOWS\system32\richedtr.dll
O3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - C:\Program Files\CleanMyPC Popup Blocker\CleanBar.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [richup] C:\WINDOWS\system32\richup.exe
O4 - HKLM\..\Run: [Sysnet] C:\DOCUME~1\Owner\LOCALS~1\Temp\sysnet.exe
O4 - HKLM\..\Run: [ztuldll] C:\WINDOWS\ztuldll.EXE
O4 - HKLM\..\Run: [cdorenc] C:\WINDOWS\cdorenc.EXE
O4 - HKLM\..\Run: [each bleh global heck] C:\Documents and Settings\All Users\Application Data\Type Scr Each Bleh\flawstart.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Grid obj] C:\DOCUME~1\Breana\APPLIC~1\PLAYER~1\MIX DRAW GPL.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyPoker.net\partypokernet.exe
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Program Files\PartyPoker.net\partypokernet.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1671869C-25B3-4C80-9446-8AE6111F8765} (MaxisHotDateTeleX Control) - http://thesims.ea.com/teleport/hotdate/NPC/MaxisHotDateTeleX.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {1EB17D1C-141D-4D9D-91CB-24D99215851D} - http://akamai.downloadv3.com/binaries/IA/netia32_EN_XP.cab
O16 - DPF: {2ABE804B-4D3A-41BF-A172-304627874B45} - http://akamai.downloadv3.com/binaries/DialHTML/EGDHTML_US_XP.cab
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tricklers/AWS/MiniBugTransporter.cab?
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://dev-www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_35.cab
O16 - DPF: {4208FB4D-4E53-4F5A-BF7A-3E047DDB5281} - http://www.icannnews.com/app/ST/ActiveX.ocx
O16 - DPF: {47CD99DF-8BCF-4B9B-94EF-02E51B2F79DA} - http://www.alwaysupdatednews.com/install/aun_0018.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {886DDE35-E585-11D0-A707-000000521958} - http://69.56.176.76/webplugin.cab
O16 - DPF: {972BB342-14A7-4660-83C1-51DDBEE171DB} - http://www.pacimedia.com/install/pcs_0011.exe
O16 - DPF: {9FA45D9C-1412-4949-B735-0D73A3D20E51} - http://www.gloopers.com/VFX.CAB
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.13.14/ttinst.cab
O16 - DPF: {C8BAC37C-A8D2-425E-B7FC-80B9537FB14A} - http://www.spyblast.com/download/SBFS.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O16 - DPF: {E4961D20-6367-4C75-BCF3-5213C29A827C} (llamapro) - https://www.pimpwar.com/crew/llamapro/llamapro.cab
O16 - DPF: {EC51659D-721F-4CBF-9CEA-5E776D89CEA9} - http://www.pacimedia.com/install/pcs_0021.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{88E7CE9E-BAAD-43BD-A826-00BE92F59988}: NameServer = 204.117.214.10
O18 - Filter: text/html - {8293D547-38DD-4325-B35A-F1817EDFA5FC} - C:\Program Files\CMAPP\Client\cmappmf.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Windows VisFx Components - Unknown owner - C:\WINDOWS\sgxbsvc.exe

RELEVANCY SCORE 200
Preferred Solution: All sorts of problems..HJT included

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: All sorts of problems..HJT included

Read other 12 answers
RELEVANCY SCORE 52.4

alright, here's the deal. i bought a brand new computer. i ripped a couple of cds onto my computer using windows media player. the next day i found that wmp wont rip my cds anymore, the itunes application i installed for my new cellphone wont open neither. neither will realplayer. when i try to open itunes is says that itunes has encountered a problem and needs to close. i haven't the slightest idea what to do. anyone?
 

A:WMP problems and all sorts of ****

Spyware scans possibly.

System restore might be another option.

Uninstalling the programs you`ve installed so far,one by one.

You say it`s a new computer.Are you "net savvy" regarding spyware/viruses ?
 

Read other 9 answers
RELEVANCY SCORE 52.4

The problems started a couple days ago. I needed to burn an ISO to a CD, and Img burn had always been such a nice program. I was a bit worried, but downloaded and installed it from one of the links on the Imgburn site.
The Windows 7 machine had no antivirus software on it (I know, but my worst problems have come with av installed) so I couldn't do a quick AVG scan.
So Im getting bombed with adware. I go to uninstall, and sure enough, a bunch of other stuff is on the machine. I try to uninstall, and the box pops up that says "do you want to allow this to make changes to your computer " comes up. I clicked "yes" at least once. I'm guessing that was a really bad idea?
I downloaded AVG, did a scan, found 11 things.
Last night I downloaded REVOUninstaller to get the other programs off. Even after that and another AVG scsn, I still had issues.
So I found a site about how to get rid of one of the remaining programs, and ran several scans, all of which found stuff on the first pass. Downloaded some off this site, and generally did almost all this:http://malwaretips.com/blogs/remove-playthru-player-ads/
So then I still need a burner, so I tried looking for a good copy of imgburn (I am wondering if it exists.) I went to Softonic, and it said something about problems with imgburn. So I thought something like, "oh good, a reputable site." That's when the problems really started.
I dowloaded the burner they recommended, AVG caught something. I think I tried it again, at one po... Read more

A:All Sorts O' Problems......

Do you know that Windows 7 is capable of burning ISOs without using a third party burner?
 
You can get a copy of ImgBurn without the bundled adware from Ninite - Install or Update Multiple Apps at Once under the Utilities heading.
 
Are you still having problems with adware and or malware?

Read other 6 answers
RELEVANCY SCORE 52.4

My computer has not been "normal" in quite some time. I am under the assumption that I have the "Conficker" worm. 'Though my knowledge of computers only goes barely beyond skin deep. I am aware that some of these problems might not be related, I just want to paint a full picture.... I have Windows XP 32 bit and use Mozilla Firefox.First off I can't get rid of AVG. I have been unhappy with it for quite some time and have been unable to get rid of it. I understand this is a common problem. I did attempt to delete it from the registry. I am aware that this might have been a mistake....I can't download anything from Microsoft.com, softpedia, and seemingly random other sites, very often I would have been trying to download something to help rectify the situation. They never work. It directs me to a page resembling as if I didn't have connection to the internet. "Unable to connect"Internet Explorer has not worked in quite some time, and I can't download it (any version) or uninstall it.My CD burner will ONLY work using BurnAware... and I've tried numerous. *not sure that's entirely relevant*Fairly often, I would say at least once a week, I receive a phony prompt from an even phonier program prompting me that my computer is infected. I can't remember the name of it right now, but it has come in more than one form. One of them was something along the lines of "PC Doctor"... but that isn't the one ... Read more

A:All sorts of problems...

One more thing... This used to happen a lot, but hasn't in quite some time. And just recently began doing it again. When I do a Google search, I can no longer click on the links that Google presents me. When I do I am immediately redirected to a different site... I can copy and past the URL. I just can't click the link directly from my google search page. The website I get redirected to is not always the same, and it appears to redirect a few times before actually deciding to go to a page... Here are some of the pages it takes me too.... The search I used for the first couple examples was "meow".

http://nearlythenews.mevio.com/?utm_campaign=2a316b_570220_251894_113956_301_&utm_source=2a316b&utm_medium=2a316b

http://www.plomedia.com/click.php?query=Do%20Do%20Do&adgroupid=sn-4d9df7ef189d0&source=a61&param1=itcg-19377_3

http://scour.com/search/web/Meow/a10/rs4-4876_19377/v3/

http://www.buddytv.com/home3/glee-home3.aspx

http://www.gossipcenter.com/jessica-sutta/jessica-sutta-bikini-beach-babe-492194?utm_source=mediality&utm_medium=cpc&utm_campaign=jessica%2Bsutta

Since doing this I have discovered that if I continue to click on licks over and over again from the Google page, it will eventually stop doing it for that search word... meaning... I searched "meow" and clicked on four or five links and was redirected to one of the above sites, but then stopped doing that and would act normally. The same thing occurs wh... Read more

Read other 1 answers
RELEVANCY SCORE 52.4

well where do i start, firstly then my spec:
asus a8n-sli-se
amd athlon x2 3800
nvidia geforce 7600 gs
4 gb ram??
win xp

The first problem begins with the ram, i recently installed 2 new sticks of ram identical to the sticks i have in, upping my ram from 2gb to 4gb, this actually seemed to slow my pc down!!!! and windows will only recognise 2.75 gb of ram????

secondly my pc has slowed right down lately, ive run virus checks but nothing turns up??

and last but not least, im trying to install microsof flight sim x, i have all the system requirements but when i click intall i get D:\setup.exe is not a valid win32 application.
ive checked the disk, is not damaged, other disks work in my drive, ive tried copying the files to my hard drive and running but after initially working the install fails half way through,

im completely stuck, please help guys, heres my hjt file
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:21:41, on 12/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program File... Read more

A:all sorts of problems, please help

Hello and welcome to TSF.

We want all our members to perform the steps outlined in the link given below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 52.4

Had friend say he could fix something well...
when i boot up my computer, it asks go to dos or hit f1. after several attempts, it finally goes to start mode in windows. safe mode will not access anymore and it will only run in normal mode. the time on my computer now changes every day to an hour one way or another. But the real question i have no sound device. it's a onboard sound card. i look at the settings, says enabled. all looks good till i try to play anything. i know rob was in dos what could he have inadvertently changed? the computer on the other hand is very fast. can it be fixed, or is it even worth it?
 

A:all sorts of problems xp

Read other 9 answers
RELEVANCY SCORE 52.4

I have been away from my PC for a while. Its an old model, SP2, 512MB RAM.

I used it after a year and there are whole lots of problems. For start, it says, "Windows - No Disk" error. Then whenever I try to run NFS MW or LOTR Fellowship (dont mock me), both come out with a blank black screen and then nothing happens. I have to press Ctrl+Alt+Del to get out.

FM09 runs smoothly though. Running Dxdiag shows no problem.

The virus database is out-of-date but scanning has not solved any problems.

I can't even configure the Registry.

Help.

A:All sorts of problems

?? anyone?

Read other 2 answers
RELEVANCY SCORE 52.4

I have been having problems and was being helped out on here and they redirected me and hoped that you would be able to help me more....here is a link to what has already been done http://www.bleepingcomputer.com/forums/t/195852/having-problems-please-help/DDs.txt log:DDS (Ver_09-01-19.01) - NTFSx86 Run by Nakisha at 13:02:12.28 on Sun 01/25/2009Internet Explorer: 7.0.5730.13Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1014.524 [GMT -5:00]============== Running Processes ===============C:WINDOWSsystem32svchost -k DcomLaunchC:WINDOWSsystem32svchost -k rpcssC:WINDOWSSystem32svchost.exe -k netsvcsC:WINDOWSsystem32svchost.exe -k WudfServiceGroupC:WINDOWSsystem32svchost.exe -k NetworkServiceC:WINDOWSsystem32svchost.exe -k LocalServiceC:WINDOWSsystem32spoolsv.exeC:WINDOWSExplorer.EXEC:Program FilesCommon FilesAOLACSAOLAcsd.exeC:Program FilesCommon FilesAOLTopSpeed2.0aoltsmon.exeC:Program FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exeC:Program FilesCommon FilesAOLTopSpeed2.0aoltpspd.exeC:Program FilesBonjourmDNSResponder.exeC:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exeC:Program FilesiWin GamesiWinGamesInstaller.exeC:Program FilesiWin GamesiWinTrusted.exeC:Program FilesJavajre6binjqs.exeC:Program FilesCommon FilesLightScribeLSSrvc.exeC:WINDOWSsystem32svchost.exe -k imgsvcC:Program FilesSonicDigitalMedia Plus v7MyDVD PlusUSBDeviceService.exec:WINDOWSsystem32ZuneBusEnum.exeC:Program FilesHewlett-PackardSharedhpqwmiex.exeC... Read more

A:All sorts of problems

Hello. I am PropagandaPanda (Panda or PP for short), and I will be helping you.Disable Realtime ProtectionAntimalware programs can interfere with ComboFix and other tools we need to run. Please temporarily disable all realtime protections you have enabled. Refer to this page, if you are unsure how.Download and Run ComboFixIf you have already run ComboFix, delete your copy and download a new one. If the computer in question is unable to download ComboFix, transfer it using a removable media (CDs, flash drive).Download Combofix by sUBs from any of the links below, and save it to your desktop.Link 1, Link 2, Link 3 Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix. Refer to this page if you are not sure how.Double click on ComboFix.exe and follow the prompts. If you are using Windows Vista, right click the icon and select "Run as Administrator". You will not recieve the prompts below if you are not using Windows XP. ComboFix will check to see if you have the Windows Recovery Console installed.If you did not have it installed, you will see the prompt below. Choose YES.
When the Recovery Console has been installed, you will see the prompt below. Choose YES.
When finished, ComboFix will produce a report for you. Please post the contents of the log (C:\ComboFix.txt).Leave your computer alone while ComboFix is running. ComboFix will restart your computer if malware is found; allow it to do so.In your next reply include:-th... Read more

Read other 37 answers
RELEVANCY SCORE 52.4

pop ups everywhere espically when i open internet explorer an computer running a bit slow can anyone help me out?Moved to and appropriate forum. ~acklan~

A:Having All Sorts Of Problems

What security software do you have installed?

Read other 2 answers
RELEVANCY SCORE 52.4

ok first of all. i come to my computer and i see one of those fake "click hear to remove potential spyware" things that is actually malware itself. i ignored cuz i am smarter than that and i instead ran norton internet security. it told me it had removed a spy ware called "spyquake" but immediately after i dismissed the dialogue box i got a message saying that spyquake had been installed. i went to my start menu and sure enough "new programs installed" it was spyquake. i went to add/remove and removed it from there, and ran norton again. and again it said it removed it. then i tried my internet explorer and no response. nothing happened but my task manager displayed that internet explorer was running, but i couldnt see it anywhere. soon my task manager became disabled as well "by administrator." and the "shared" folder for limewire is full of about 700 things i never downloaded. they are things like cracks and patches for games and such, and i cant delete them because they're "in use." it was only in the past hour i discovered that netscape navigator was unharmed by all of this, and this is where i say HELP!!!!!!!!! i do not think that is is spyware quake but just spyquake. please respond quickly because i take this laptop to college on sunday!!!

EDIT
ok i think i have found the file that caused the fake warning at the beginning. it is called "atmclk.exe&... Read more

A:All Sorts Of Problems

atmclk.exe is definitely adware and it is related to spyware falcon and that family of browser hijacks. Here is link to information about that proces amtclk.exe infoIt appears you do indeed have a spyware quake hijack, among other things, based upon your symptoms. I suggest posting a HJT log in the "HJT logs and analysis' forum here at BC.Please read Prep Guide for Posting HJT LogsPlease follow these preparation directions exactly.Then run HJT and post the log it creates in the HijackThis Logs and Analysis Forum, which is found at this link: HJT ForumDO NOT FIX ANYTHING YET. An expert HJT helper will promptly respond to your post within a few days with instructions on how to fix your computer. NOTEOnce you have made your post, please do not add any replies to your post (don't bump it). HJT helpers look for posts with 0 replies to determine the proper order to help users.If you are interested in trying the self-help guide for removing spyware quake, that tutorial can be found at this link: How to Remove Spyware QuakeYou also said you are having a problem with Limewire. Just a tip: It's generally a good idea to make sure p2p programs are not running on startup if that is the case. It appears you may have more than one malware infection and there isn't much help we can provide through this forum. Please post a log in the HJT forum and we'll get your computer cleaned up

Read other 1 answers
RELEVANCY SCORE 52.4

I've been having all sorts of malware problems lately and they have escalated pretty severely over the past few days. First I was infected with System Defender, I thought I removed that successfully, but the problems have just been getting worse. Now I get pop ups even when I'm not clicking anything, any search I do on Google runs the risk of the result links being redirected, there is something that is stealing focus from my current window but nothing pops up, I can't search for Windows Updates, my Symantec Antivirus isn't working, and MalwareBytes can't run. And if it makes any difference I've been getting errors that I'm not used to about program icons not being able to display on my desktop. Can someone please help me?My HijackThis log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 12:56:50 PM, on 11/23/2009Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18319)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exeC:\Program Files\CSR\Vista Profile Pack\BtHidUi.exeC:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exeC:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exeC:\Program Files\Logitech\QuickCam10\QuickCam10.exeC:\Program ... Read more

A:All sorts of problems

Hi, jshay13 Welcome.Please read and follow all these instructions very carefully. Please download Malwarebytes' Anti-Malware from Here.Double Click mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.If an update is found, it will download and install the latest version.Once the program has loaded, select "Perform Quick Scan", then click Scan.The scan may take some time to finish,so please be patient.When the scan is complete, click OK, then Show Results to view the results.Make sure that everything is checked, and click Remove Selected.When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.Copy&Paste the entire report in your next reply.Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.=====================================================================Please download ComboFix from Here or Here to your Desktop.**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**Please, never rename Combofix unless instructed.Close any ope... Read more

Read other 12 answers
RELEVANCY SCORE 52.4

This one got me good, started 3 days ago from a acrobat page file.

My desktop takes forever to boot up(25-30 mins), when it does explorer does not start. (No icons, start menu, right clicky) Taskmgr does work, If I try and manually start explorer.exe I get access denied. I can not run msconfig, mbam, control panel, eset or any internet browsers. Ive attempted to boot in safe mode with networking, but the system just freezes and requires hard power reset. Ive tryed to do the rkill name change and mbam name change combinations all without luck (in safe mode and normal). rkill does run, however does not find any problems to terminate. mbam will not even install.

Not really sure what else to try at this point, any thought ideas?

edit forgot to add that im running xp

A:All sorts of problems...

With the information you have provided I believe you will need help from the malware removal team. Please make sure that you read the information about getting started first.Then start a new thread HERE and include or required logs.Including a link to this thread will be helpful. Good luck and be patient. Help is on the way!

Read other 1 answers
RELEVANCY SCORE 52.4

I am having a bunch of issues with my computer, and always, all the issues come at one time! I'll just start off by numbering them from most important to get fixed a.s.a.p. to the least important.

1. All of my Windows keep shutting themselves down! When I open Firefox sometimes it works for a few minutes, then all of a sudden just closes with no error or anything. Other times it has an error "Failure to initialize properly" (I will update this post with the exact error next time I open F.F.) other times when I click the Firefox shortcut on my desktop it will say "Firefox has encountered a problem" with the options to "Report Problem to Microsoft" "Dont Send". I put firefox in Safemode (through cmd prompt) and disabled all scripts and it still did the same thing in safemode. Now here's the catch. All of a sudden my MSN Messanger started doing the SAME thing. It terminates the whole program. It doesnt just sign out--it shuts down completely. Then I ****think**** that IE has done the same thing a couple of times now.

-This all started yesterday-- about 1 day after I updated I.E. to the newest version (from a very old version) and about 1 day after I updated my Firefox to the newest version (from the previous version)

Now this leads me to my next problem...

I updated I.E. for one reason. Whenever I am on a website all links, urls, anything that should be "clickable" is not clickable on I.E. --What happens is when ... Read more

Read other answers
RELEVANCY SCORE 52.4

Well the latest is my lack of ability to ping ip's getting the system32\ping.com is not a valid win32 app. I can't open task manager, and alot of times when trying to open a program my turbotax starts to try to install. I also just lost ability to open add/delete programs in control panel. I ran hijack, hope someone can help a bit.

Thanks,

Husa
 

A:All sorts of problems

Seems you have 2 Antivirus softwares happening:




C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeClick to expand...

I believe it would be best to uninstall Symantec (Norton) fully
Then continue on to:
New Preliminary Removal Instructions

If you run the HJT program yourself, you will see the entries for poker and others similar, you are able to tick these fix them too.
 

Read other 7 answers
RELEVANCY SCORE 52.4

Hi!
I'm havin a whole variety of crazy problems, so I decided to just post the log and let someone who knows wot they're talkin about tell me what's wrong! Ta very much!

Logfile of HijackThis v1.99.0
Scan saved at 23:18:56, on 15/03/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.00 (5.00.2614.3500)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SPOOLSRV32.EXE
C:\SBPCI\CTMIX32.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM\SPOOLSRV32.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\se.dll/sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\TEMP\se.dll/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\S... Read more

A:All sorts of mad problems!!

Welcome to TSF.

We'll need this log also:

Download StartDreck http://www.greyknight17.com/spy/StartDreck.zip

Unzip to its own folder and start the program:
Press 'Config'
Press 'mark all'

Uncheck the following boxes only:
System/Running Process -> List Modules
System/Drivers -> NT Services
System/Drivers -> NT Kernel- and FS-drivers
Press 'OK'

Press 'Save' and select the location to save the log file (default is the same folder as the application)

Post the log in this thread.

Read other 3 answers
RELEVANCY SCORE 52.4

Well a few days ago I noticed that in the corner my Mcafee symbol had a little red circle x thing on it. It showed that my On access scan was disabled. I tried enabling it and it did not respond at all. I then tried to enable it using Windows Security Center and nothing again. So I restarted in safe mode and ran a full scan using Mcafee and it found nothing. I downloaded Spybot, and it wouldn't even start up. I downloaded Hijackthis and again it would not even start up. Now I noticed that whatever I have is also preventing Windows Defender to update as well. Some sort of virus has breached my security and I am scared at what it could do next. Any help would be great.
Thanks,
Jeremy


DDS (Ver_09-05-14.01) - NTFSx86
Run by Jeremy at 14:12:26.58 on Mon 06/22/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14
Microsoft? Windows Vista? Home Premium 6.0.6001.1.1252.1.1033.18.3070.1869 [GMT -5:00]

AV: McAfee VirusScan Enterprise *On-access scanning disabled* (Updated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k ne... Read more

A:All sorts of problems!

Hello and Welcome to the forums!

My name is Gringo and I'll be glad to help you with your computer problems. HijackThis logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens.

Before we start: Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.

Somethings to remember while we are working together.
1.Please do not run any other tool untill instructed to do so!
2.Please reply to this thread, do not start another!
3.Please tell me about any problems that have occurred during the fix.
4.Please tell me of any other symptoms you may be having as these can help also.
5.Please try as much as possible not to run anything while executing a fix.

If you follow these instructions, everything should go smoothly.


Please subscribe to this threa... Read more

Read other 7 answers
RELEVANCY SCORE 52

Greetings!

I've tried symantec, didn't work. Tried ad-aware and spybot, no luck either. Went into safe mode, deleted programs that were obviously tied to vundo but no help either. If I could uninstall IE 6.0 I would since I use firefox anyway...

So, help!

-----------------------------------------------------
Hijack Log below:
Logfile of HijackThis v1.99.1
Scan saved at 11:39:37 AM, on 7/11/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\S24EvMon.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINNT\system32\RegSrvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZCfgSvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\1XConfig.exe
C:\WINNT\System32\SCardSvr.exe
C:\WINNT\system32\wuauclt.exe
C:\WINNT\System32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.... Read more

A:Vundo and all sorts of problems?

Read other 9 answers
RELEVANCY SCORE 52

1. Graphics-based links don't come up. (This started happening before I recently installed an ad/banner blocker)
2. Sometimes I'm getting a "connection timed out" message even though I'm on a hi-speed connection.
3. Firefox particularly affected.
4. Some internet screens take forever to load, if at all.
5. I have run my standard regimen of programs: AVG, Ad-aware, Spybot SD, and Spyware Blaster. Oh, and CCleaner (is this one something I should continue to use?). According to all that software, I should be ok.

Can anybody help? Does this sound like a job for HiJackThis?
 

A:All sorts of internet problems...

Read other 6 answers
RELEVANCY SCORE 52

I have a compaq not sure of a lot of specs, sorry. here is the hijack log. the NMIServStor has been or storserv has been running amok sending error messages sto Microsquish. also everything is "not responding' especially the Media player and internet. any help would be greatly appreciated.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:46:30 PM, on 8/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\NCH Software\Eyeline\eyeline.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Maxtor\Sync\SyncServices.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Maxtor\OneTouch S... Read more

A:All sorts of minor problems

Hiya and welcome to Tech Support Guy

Are you still having this problem? If so, do the following:
Download TFC by OldTimer to your desktop

Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
It will close all programs when run, so make sure you have saved all your work before you begin.
Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. Let it run uninterrupted to completion.
Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and... Read more

Read other 1 answers
RELEVANCY SCORE 52

Hi there,

Firstly, I am running Windows XP.

I seem be to be infected with the msb.exe virus as it is showing in my processes. I can run Malwarebytes the first time I run it but it shuts down when running a scan. Then I try to re-open it and I always gets the error "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item". I used inherit.exe to sucessfully open Malwarebytes but the same problem re-occurs when I run a scan - it just shut downs. This is also the case for Spybot S&D and a couple of other programs.

In addition to this, it sometimes plays an audio file in the background even though I have no applications open, and my PC is running considerably slower.

I followed the instructions and downloaded dds.scr to my desktop, ran it, but no log files were generated. I have no script blocker as far as I know.

I ran GMER Rootkit Scanner twice. It shut down both times when it was more than half way through the scan.

Any help would be appreciated.

Kind Regards,

Andy.

A:msb.exe virus - all sorts of problems

Bump.

It's been much more than 72 hours now.

Cheers,

Andy.

Read other 19 answers
RELEVANCY SCORE 52

I apologize for re-posting this but I am stuck in the middle. Any help would be appreciated.

Thanks

http://forums.techguy.org/security/600646-help-all-sorts-virus-problems.html?highlight=help-all
 

A:Help with All Sorts of Virus Problems

Cheeseball81 will answer your reply when she is back on line.
 

Read other 1 answers
RELEVANCY SCORE 52

I posted this in the Windows XP Home forum and looks like it might need to go here. I am having the following problems: 1. Originally had printer spooler error when booting - not showing now but still can't print.2. Safe mode not available option when booting3. There was no prior recovery date I could revert to other than the current date. I do not think I turned this off, I do not recall doing this. 4. When trying to print, opening control panel, and opening an image in Microsoft photo editor - computer freezes (These are only ones I know of so far.)5. Computer running slow - lots of freezing. 6. SSMMgr.exe error when shutting down.I have run Malware bytes, Ccleaner, and Super antispyware. They do not find anything. Thank you in advance for any help. Link to XP post, http://www.bleepingcomputer.com/forums/topic379004.html ~ Hamluis.UPDATE: - I cannot remove programs (trying to remove Samsung driver) and it freezes.

A:All sorts of problems, need Help fast

Hello and welcome. please run these,post the logs and let me know how it is now.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.Please perform a scan with Eset Online Antiivirus Scanner.This scan requires Internet Explorer,Opera or Firefox to work. Vista/Windows 7 u... Read more

Read other 1 answers
RELEVANCY SCORE 52

Ever since I've gotten this thing (Gateway POS laptop), it's had a lot of problems. Wireless always cuts on and off for no reason, and the connection would seemingly just stop randomly, and nothing I could do would fix it until I restarted. It would always say that I'm connected, it just wouldn't actually do anything. Early last year, the whole harddrive crashed and there was nothing I could do to save it. I sent it to the company and they replaced it. When I was trying to fix it by their directions, there were all these clicking noises inside of the system.

Sunday night, that started to happen again. It's still running obviously, but it's not "working." It takes over 5 minutes to boot up now... before this, it was the fastest loading thing I've ever used. Also, internet usually doesn't work at all now. I turn it on and off until I finally get lucky. Everything runs incredibly slow and the comp will freeze up for a few seconds when I try to close a window or even click on the Start menu. Even on these lucky times, it will only last a couple minutes before the freaking thing just decides to stop working again.

I've used Ad-Aware, Spybot, AVG, and HouseCall. The latter did find some infected Java files (odd) but I deleted those, and now I can say that none of the programs find anything wrong. If anybody has some advice on what it could be, how it could be fixed, anything at all... I would be very greatful.

[edit] Will a... Read more

A:My computer is having all sorts of problems.

Read other 14 answers
RELEVANCY SCORE 51.2

My computer is suddenly facing all sorts of problems everytime I restart the machine.

NAV detects different Trojans everytime I reboot.
Magicantispy installs and starts by itself
Internet explorer starts by itself although I use Firefox
Spybot detects all sorts of things including registry entries such as
Adrevolver
Advertising.com
doubleclick
Microsoft.Windows.ActiveDesktop
SpySherrif
Virtumonde
YazzleSudoku
Zedo
Just detected Vundu Trojan by NAV, it automatically deleted it.
Computer has become very very slow.

Any help would be appreciated, Thanks

Here is the HJT output.
______________________________

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:13:52 PM, on 7/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jus... Read more

A:Solved: Help-All Sorts of Virus Problems

Read other 16 answers
RELEVANCY SCORE 51.2

Hi, this is my first post on here so apologies if it is in the wrong place or anything? I have tried to find similiar problems to the ones Im having but havent been able to nail it down exactly. Ill try and explain as best I can.A few days ago I got what I think was Winpc defender/Winpc Antivirus, it took over both IE and Firefox and now neither will search properly without redirecting. Having read how to manually get rid of all the associated files I did so but the problem hasnt gone away. The computer now freezes/crashes after a few minutes of being switched on, and any spyware removal programmes I download won't work. I have tried Windows Defender, Malwarebytes, Spyware Doctor, Xoftspy and even Combofix but none will work. After installing when they are selected to run nothing happens whatsoever. The same thing happens with System Restore, it just doesnt react when clicked.I will post a Hijack this log here as I believe thats helpful but to be honest guys I havent a clue what Im doing! Any help is much appreciated!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 17:35:04, on 23/05/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\W... Read more

A:All sorts of problems following Winpc Defender

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 2 answers
RELEVANCY SCORE 51.2

Hello, I'm here hoping I can get some help regarding some adware that's been installed on my computer.
 
Audio adverts can be heard no matter what application I'm in and it's becoming extremely irritating. It started with a program I found called Sound+ which I thought I had successfully removed. When I open task manager and sort through running processes, I've discovered a few of the problem processes are called "cellar," "mellow," and "spade" (which as far as I can tell adds a bogus google chrome shortcut to my desktop when run). They seem to be run out of folders located in program files titled "obscene" and "willing." I've already jumped through some of the hoops and run various pieces of malware detection software but it doesn't solve a single problem even if Malwarebytes claims it has taken care of potential unwanted programs. I should mention that whatever malware I have on my PC actually restricts me from visiting any sites that are remotely helpful for removing malware, and I've had to install all anti-malware software using a separate computer through dropbox and the use of RKill.
 
The last thing I wanted to do was resort to posting on a forum for help, as I've always considered myself fairly tech-savvy but I'm really stumped here. It's also worth noting that I'd like to avoid a clean install of Windows, as my PC doesn't have an optical drive and I've left my USB optical drive in my apartment back up at school as I'm on holiday break. Thank you in ad... Read more

A:Adware Causing All Sorts of Problems

Hi & to Bleeping Computer Forums!
My name is Jürgen and I will be assisting you with your Malware related problems.
Before we move on, please read the following points carefully:
My native language isn't English. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.
Please read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
If you have illegal/cracked software, cracks, keygens, etc. on the system, please remove or uninstall them now!
Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 5 days from this initial or any subsequent post, then this thread will be closed.
If I don't reply within 24 hours please PM me!
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
Step 1
Please run a FRST scan. This will help us diagnose your problem.
Please download... Read more

Read other 9 answers
RELEVANCY SCORE 51.2

Ok, so here it goes:

I installed a new motherboard (Abit KW7 Socket 462, w/ Via chipset) and now im having problems with the video card.(Radeon 9200se) When I first installed the new mobo, everything was fine. I installed Call of Duty and when the game loaded, i could move around for about 30 seconds before I would get some "VRU has recovered you display" messeage, or something like that. (by the way, what is VRU?) Then I loaded up Star Wars Battlefront and I got a message saying that OpenGL could not be opened. THEN, when my screen saver came on, it said, "could not find any compatible Direct3D devices". Now, all these things worked before, so theres no reason for it not to work now. just to be sure tho, i updated the drivers but then i had even more trouble. The ATI control center would not load up and gave me a long crazy error msg at startup.

My main question is, why did everything work for a little bit, then just stop working in the middle of a game? If it would help, call of duty gave me a technical log of why the game did not load. i could copy and paste it on a later post if it would help.

Thanks!
 

A:All sorts of fun problems with the Radeon 9200se

yes, i know this card is very cheap and i should just buy a new one, but im on a tight budget and would like to get this one working if at all possible.
 

Read other 5 answers
RELEVANCY SCORE 50.8

Ok so first off ill tell you what im running too hopefully give you the info needed to help me out.
Linksys BEFSR41 = Router
Linksys EZXS88W = 8 Port Workgroup Switch
Original PC = OS = Xp, 1 Account (Admin), Bosses computer.
Second PC = OS = Xp, 2 Accounts (Both Admins), co-workers PC
Third PC = OS = Vista, 2 Accounts (Both Admins), MY PC
I def have it wired right considering no one is having problems getting the internet.

To start, i was not here originally when my company setup the Modem and Router. When i got here i was literally swapping the cable with my co-worker to use the internet. We had some electricians come and setup wall outlets, so that now, we all have internet all the time on all PC's. To do this i installed the 8 port switch to the router because prior to that with all 3 computers connected, only 2 of 3 would actually get online, using this switch fixed that. Here it is a month later, and i have been asked to NETWORK all these computers together.

I have gone in on each pc and followed any guide there is to make sure i have all settings correct to be able to share files/programs over a small office network. Each computer is on the same workgroup and all that good stuff, yet i cannot see any other computer but mine on the network.

My best guess was there is a setting in the router that is stopping me from networking, so as usual i typed 192.168.1.1 into my web browser and got the standard login screen.

NOW . i know that all linksys routers come wit a... Read more

A:Solved: All sorts of problems (networking and router help!!!!)

Read other 6 answers
RELEVANCY SCORE 50

I just spent the last 4 days reformatting my previously-XP computer, installing Windows 7, and setting up all my programs just the way I like them, installing new drivers for the move to Win7, dealing with new problems of moving onto Win7, and so forth. The OS acted like an angel for the first 2-3 days, and now, suddenly, it's acting like a moron.

The '3 Stooges' of problems I'm experiencing very often while it's running is that it often likes to go slow/freeze/(Not Responding)/white window, or give me a totally black screen with just the mouse pointer, or it shows me nothing but the desktop background and the mouse pointer.

As for rebooting issues, I've seen it reboot my computer on its own before, as well as being unable to boot all the way to the OS.

Last night I did a fresh Win7 "Upgrade" Repair Install, though it didn't fix these issues.

I have no idea why it acted so nice the first 2 days, not to mention those were the most intensive days, when I pushed it to its limits installing programs and drivers. Now that I've finally settled in and began my more casual work, it's acting like it has no power whatsoever. This is not the best time to act this way, after all the time and effort I put into installing and setting up everything I use. How can I whip it into shape and move on with my life, withOUT going back to XP? (as I read online that you must reformat to go from Win7 to XP, which would undo 3 days of effort)

Edit: I ... Read more

A:Windows 7 suddenly giving me all sorts of dysfunctional problems.

Sounds like it might be one of your drivers not working correctly. Did you download the Windows 7 drivers for your devices?

Also, I've experienced a problem with explorer.exe crashing a lot and it was due to my privacy settings in Firefox. Do you have Firefox installed?

Casey

Read other 4 answers
RELEVANCY SCORE 50

I just spent the last 4 days reformatting my previously-XP computer, installing Windows 7, and setting up all my programs just the way I like them, installing new drivers for the move to Win7, dealing with new problems of moving onto Win7, and so forth. The OS acted like an angel for the first 2-3 days, and now, suddenly, it's acting like a moron.

The '3 Stooges' of problems I'm experiencing very often while it's running is that it often likes to go slow/freeze/(Not Responding)/white window, or give me a totally black screen with just the mouse pointer, or it shows me nothing but the desktop background and the mouse pointer.

As for rebooting issues, I've seen it reboot my computer on its own before, as well as being unable to boot all the way to the OS.

Last night I did a fresh Win7 "Upgrade" Repair Install, though it didn't fix these issues.

I have no idea why it acted so nice the first 2 days, not to mention those were the most intensive days, when I pushed it to its limits installing programs and drivers. Now that I've finally settled in and began my more casual work, it's acting like it has no power whatsoever. This is not the best time to act this way, after all the time and effort I put into installing and setting up everything I use. How can I whip it into shape and move on with my life, withOUT going back to XP? (as I read online that you must reformat to go from Win7 to XP, which would undo 3 days of effort)

Edit: I forgot to say, I'm also al... Read more

A:Windows 7 suddenly giving me all sorts of dysfunctional problems.

Hi your first place to check is the eventviewer look through the logs for info of what was going on around the time of your issues,if you have reboots the instructions here would help http://www.techsupportforum.com/1871981-post2.html then you could attach the info to your next post

Read other 1 answers
RELEVANCY SCORE 50

My computer was fine one day, switched it on the next and the Internet wouldn't load. The connection is fine so I wasn't sure what it was. After some research online (using my iPhone) I decided to remove my anti-virus in case that was preventing it from opening. It opened after that (I use Chrome) but it kept coming up with Shockwave plug in unresponsive message. So I then removed Shockwave, message is gone but still no joy.

I also removed Chrome thinking if I re-install it might help, this may have been a bad move because IE is so slow I can't get the page to load to reinstall. Aside from this everything is else is mega slow, I tried emptying recycle bin and it stays on the timer forever and never does anything. It also won't shut down, it stays on the logging off screen forever.

System restote doesn't work, I've done a malware scan, removed all spyware (as I read that can slow it down). I just don't know what else I can do. Sorry for the long winded post, just need some help! :(

One other thing to note is that several times when trying to shut down it comes up with the end now box for something called AUSUpdateWTitle, no idea what that is and it's not on the start up list.

A:Really stuck- computer slow, crashing, all sorts of problems

We recommend that you read this article…
NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum
follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the Virus/Trojan/Spyware Help - Tech Support Forum section of the forum.
(Simply, click on the colored links to be re-directed.)

Please ensure that you create a new thread in the Virus/Trojan/Spyware Help - Tech Support ForumForum; not back here in this one.

When carrying out The Malware Removal Steps, if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to the Virus/Trojan/Spyware Help - Tech Support Forum Forum; where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.

Read other 1 answers
RELEVANCY SCORE 50

I formatted my hard drive recently and ever since that, my laptop has a whole list of problems.
1) Windows would sometimes freeze during startup at the "Starting Windows" black screen. Even after getting to the desktop, sometimes it would freeze up there. I have to power shut down my laptop to shut it off.
2) When I pull up my power options to try to change the plan settings, it says "Your power plan information isn't available." I have been able to change it before though. I have tried a solution by going into cmd.exe and typing powercfg -restoredefaultschemes, but that didn't work.
3) When I create a new folder on the desktop and rename it, the folder still says "new folder" and can't be moved. It does show up after I refresh my desktop.
4) My antivirus shows that a malicious url was blocked, containing win32.blackbeard(?) and it came from the Skype.exe process. I've never had trouble with Skype before and now I can't even use it properly.
5) When I play the online game Maplestory, a message pops up saying "Windows must restart because Plug and Play service terminated unexpectedly" or "Windows must now restart because DCOM server terminated unexpectedly" and my laptop restarts.
6) My Windows Update doesn't work. I have it notifying me when updates are available but when I try to update, it fails.
Here's my dds:
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 8.0.7600.17267
Run by Carmen Old Laptop at 14:44:45 on 2014-01-08
Microsoft Windows 7 Home Premium... Read more

A:Windows freezes on startup, at desktop, all sorts of other problems.

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/520127 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 2 answers
RELEVANCY SCORE 49.2

So the title pretty much says all that I know. And here is my hijackthis log. All help appreciated.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 18:45, on 2009-06-24Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16850)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\ibmpmsvc.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\IPSSVC.EXEC:\Program Files\Altiris\AClient\AClient.exeC:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exeC:\WINDOWS\system32\acs.exeC:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\Program Files\Equitrac\Professional\Client\EQSharedEngine.exeC:\Program Files\Intel\Wireless\Bin\Ev... Read more

A:All Sorts of Problems!! Windowsclick; Adobe pdf no longer works; Computer freezes up

Hello and welcome to Bleeping Computer.My name is Syler, I will be helping you to solve your Malware issues. Whilst I am helping you, I wouldbe grateful if you would note the following: Please do not run other tools or scans unless I ask you to and follow all the steps I give you, in order.
Copy and paste all logs requested in you reply, Do not attach them unless asked too.
If you don't know or understand something, please don't hesitate to say or ask before you proceed with my instructions.
Please continue to work with me, until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clear.
If I do not hear back from you within 5 days of my last post, then this topic will be closed.First I would like to see a new log since alot could have changed since your origional post.Download random's system information tool (RSIT) by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)AlsoDownload Security Check by screen317 from here or here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt.Please post the contents of that document.Thanks

Read other 2 answers
RELEVANCY SCORE 38.8

I ran Ad-aware back to back and the first time it picked up a lot. The second time immediately after it picked up almost as much as the first time and then my McAfee virus scan picked up some trojans. I also may be having problems with Golden Palace Casino. I just did a regular uninstall and so far it doesn't reinstall itself anymore. But it seems like it is still there maybe in the registry or whatnot. Any suggestions will be greatly appreciated. I have ad-aware, spyware blaster, spyware guard, spybot, cwshredder but I still do not know what is going on.

Logfile of HijackThis v1.97.7
Scan saved at 2:23:32 PM, on 2/19/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\ThinkPad\Utilities\TpKmap... Read more

A:problems (HT log included)

Read other 7 answers
RELEVANCY SCORE 38.8

Alrite, so first off, I think I might have the Myspace/Photobucket AIM virus...

Second... even since before I got that virus, whenever I did a search on Google, the link i would click on to take me to a search would actually take me to a totally unrelated random search site such as those that many people get as an error message. If someone could just check for something like that, that would help too...

Here is the log...

Logfile of HijackThis v1.99.1
Scan saved at 10:59:28 PM, on 1/17/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\WINDOWS\GWMDMMSG.exe
C:\WINDOWS\GWHotKey.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:... Read more

A:2 Problems (HJT Log Included)

I am going to PM a Mod on this file C:\WINDOWS\System32\dmfkd.exe I don't like it.
 

Read other 2 answers
RELEVANCY SCORE 38.8

So today, I turned on my laptop only to find out I get an error (bubble) on the bottom right saying "Failed to connect to a windows service" and underneath that said "group policy client service failed the logon"My desktop gets totally messed up. Sound doesn't work and most of my programs do not boot up. I found two temporary solutions: one is to go on safe mode, open command prompt and type netsh winsock reset , but that stopped working after I reset a few more times. Another possible fix was to press F8 and then start with "last best configuration settings" but that only works sometimes.Also, another error that annoys me: When I search something on Google, sometimes I click a link but it redirects me to some random search site. I ran malwarebytes and superantispyware yet I don't know what is going on.Now I want to know what the problem for this is and fix it once and for all.Here is my HijackThis Log:Logfile of Trend Micro HijackThis v2.0.4Scan saved at ?? 1:32:51, on 2010-05-24Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18444)Boot mode: NormalRunning processes:C:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\System32\WLTRAY.EXEC:\Program Files\IDT\WDM\sttray.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\Program Files\Symantec Anti... Read more

A:A lot of problems - HJT Log Included

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below I will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions... Read more

Read other 11 answers
RELEVANCY SCORE 38.8

hi, like the subject line says, i've got some odd problems with my system. First, the toolbar says that i've selected "Start menu", but it will only display "classic menu". This randomly happened when i turned on the computer a while ago. No matter what i do, it will only display classic. Second, i've got some problems with pop ups. Third, i've run spybot s&d four times over the last couple months, and each time it lists the same issues. I select that i want them to be deleted, but they won't go away.
Here's the list: Advertising.com
AvenueA, inc.
CoreMetrics
DoubleClick
Fast Click
HitBox
MediaPlex
ValueClick
WebTrends live
Windows Security Center.AntiVirusDisableNotify
Windows Security Center.FirewallDisableNotify

Fourth, over the past couple days a window will pop into the toolbar but quickly disapear. I have tried to click on it, but it either doesn't pop up onto the screen, or it disapears.
Thanks for the help!
----------------------------------------------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 7:57:08 PM, on 1/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\s... Read more

A:odd problems. HJT included

This may solve the first problem. You may have run a program called Cleanup before.

Download Luna.zip.

http://castlecops.com/zx/flrman1/luna.zip

Download it and unzip it to extract the luna.msstyles file
it contains. Copy the luna.msstyles file to the C:\WINDOWS\Resources\Themes\Luna folder.

Restart your machine and go to Display Properties and you should be able to
choose the XP theme again.
__________________________________________________________________________

It sounds like SpyBot is mostly finding tracking cookies, which are normal.

Click here to download the trial version of Ewido Security Suite:
http://www.ewido.net/en/download/

Install Ewido.
During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
Launch ewido.
It will prompt you to update click the OK button and it will go to the main screen.
On the left side of the main screen click update.
Click on Start and let it update.
DO NOT run a scan yet.

Restart your computer into Safe Mode now.
(Start tapping the F8 key at Startup, before the Windows logo screen).
Perform the following steps in Safe Mode:

* Run Ewido:
Click on scanner
Click Complete System Scan and the scan will begin.
During the scan it will prompt you to clean files, click OK.
When the scan is finished, look at the bottom of the screen and click the Save report button.
Save the report to your desktop.

Reboot.

Post a new... Read more

Read other 3 answers
RELEVANCY SCORE 38.8

Good day to youI have major problems with this PC whereby the internet is crashing after about 10 mins and other issues come and go with normal operation of windows. On startup, the messeges "Windows Cannot Find C:\windows\system32\unldrexe.exe" and following that "Could not load C:\windows\system32\unldrexe.exe" appear. I tried to run adaware, but after it found 660 objects, I tried to delete them and the whole PC crashed. Can some kind soul please help? Here is the log. Logfile of HijackThis v1.99.0 Scan saved at 19:23:54, on 19/01/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\Program Files\Common Files\Symantec Shared\ccProxy.exe C:\Program Files\Norton Int... Read more

A:PC problems - HJT Log included

Download cwshredder 2.12 from here:http://cwshredder.net/bin/CWShredder.exeRun the file after it is downloaded and click on the fix button. Let it do its thing and when its done, even if it crashes.When its done run hijackthis again post a new log

Read other 3 answers
RELEVANCY SCORE 38.8

well recently in the past day or 2 i have been having a few problems

When starting up my comp i recieve an error that says

"RUNDLL

Error loading C:\WINDOES\system32\caqsuffn.dll

Access is denied"

-the bottom task bar freezes on startup for about 10 minutes
-at times the computer screen will go black like it shut off, then it will come back on in about 30 seconds
-it takes about 10 minutes for the computer to start up
-applications take a lot longer to startup
-New icons on desktop that are "error cleaner", "spyware&malware Removal", and "Privacy protector
-pop up that comes up saying:

"temp0.exe - Application Error

The instruction at "0x00402b2f" referenced memory at 0x00000000". The memory could not be "read"
Click on OK to terminate the program
Click on CANCEL to debug the program"

then i just got a popup saying that there is an internet hacking attempt, click ok to scan for infected problems


heres HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:19:00 PM, on 5/22/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Sy... Read more

A:new problems HJT LOG INCLUDED

Read other 16 answers
RELEVANCY SCORE 38.8

I get random websites open and any page I leave open will become dormant. As in I have to click on the screen to be able to continue scrolling. My webpages also flicker from time to time.

Here is the log.

Logfile of HijackThis v1.99.1
Scan saved at 12:53:07 PM, on 11/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\PowerArchiver\POWERARC.EXE
C:\DOCUME~1\Lucas\LOCALS~1\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.popupsearches.com/sidesearch.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {1C886971-5208-4FF6-B5B5-05EB951879E5} - C:\Program Files\MSN\menoxuk4444.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.2.7.dll
O2 - BHO: BellSouth Toolbar - {4E7BD74F-2B8D-469E-8CBD-FD60BB9AAE2E} - C:\PROGRA~1\BLSTOO~1\BLSTOO~1.DLL
O2 - BHO: (no name) - {50858AE6-E082-4788-B493-1A95474FBF15} - C:\Program Files\MSN\menoxuk83122.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll ... Read more

A:A few odd problems, HJT log included

Hi and welcome to TSF.

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

--------------------------------------------------------------

Before beginning the proposed fix, read this post completely. Any questions should be kindly asked before proceeding. Ensure that there are no open browsers when carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

--------------------------------------------------------------
Download combofix.exe to your desktop.
Disconnect from the internet....pull the plug!
Disable your real time protection of your Anti-Virus. Exit the program via the SystemTray icon.
Double click on combofix.exe & follow the prompts. Type "1" and press Enter to begin the scan.
When finished, it shall produce a log for you ( C:\ComboFix.txt ). Post that log in your next reply.

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

--------------------------------------------------------------
Re-enable your Anti-Virus if it is not active...a reboot should have re-activated it.
Re-establish an internet connection.

--------... Read more

Read other 9 answers
RELEVANCY SCORE 38.8

I am a newbie here and I am in desperate need of help. My mouse started not cooperating a day or so ago. Now it will not scroll while online, but will on other applications such as help program of microsoft works. I pulled up works word processor document and cannot type in new or existing documents. I have XP and since having these problems start have run the following programs, Adaware, Avast Antivirus, Spyware Doctor, Registry Mechanic, Spybot search & Destroy, and here is my Hijack this log. Any other info that is needed please let me know.

Thanks in advance!!!!!

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 8:34:33 PM, on 4/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\Program Files\Spyware Doctor\sdhe... Read more

A:Many Problems...HJT log included

Read other 9 answers
RELEVANCY SCORE 38.8

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 4:14:30 PM, on 7/26/2007
Platform: Windows XP (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Image ActiveX Access\imsmain.exe
C:\Program Files\Image ActiveX Access\iesmn.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\WildTangent\DDC\DDCManager\DDCMan.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\Common Files\AOL\1183425482\ee\AOLSoftware.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Cookie Washer\aolwasher.exe
C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
C:\Program Files\Image ActiveX Access\imsmn.exe
C:\Program Files\Image ActiveX Access\iesmin.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program... Read more

A:A few problems. HJT included.

Read other 14 answers
RELEVANCY SCORE 38.8

Hi,

Thanks in advance for any help with this. I cannot run Adaware on this pc, it immediately reboots when launched. It will not boot in safe mode, it just hangs on a black screen. The HJT log has been transferred to my pc for posting. I'd really appreaciate it if someone could take a look.

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 3:40:05 PM, on 6/20/2007
Platform: Windows XP (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\opufkva.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\PhoneTools\CapFax.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\retadpu2000219.exe
C:\Program Files\Common Files\WinAntiVirus Pro 2006\dc6_startupmon.exe
C:\Program Files\Common Files\WinAntiVirus Pro 2006\ers_startupmon.exe
C:\Program Files\Common Files\WinAntiVirus Pro 2006\uwa6pcw.exe
C:\Program Files\Common Files\WinAntiVirus Pro 2006\ers_startupmon.exe
C:\Program Files\Common Files\WinAntiVirus Pro 2006\dc6_startupmon.exe
C:\WINDOWS\opuf... Read more

A:Serious problems... HJT log included.

Oh, and I forgot..that pc has no internet access until I resolve some of these problems.
 

Read other 3 answers
RELEVANCY SCORE 38.8

In relation to another post on here, about a slow start up and a lot of hard drive activity I have a similiar problem, my computer takes about 20seconds to load, then between 5-10 minutes before I can do anything. I have a lot of anti spy/anti adware programmes - I've run it through Spybot, Xoft Spy, AVG anti spy, ad-aware, McAfee intertet security suite and still get the same thing happening. I also think I have a system32 worm hiding in McAfee.

The computer is a Dell Inspiron 510mm laptop running Windows XP home edition. Below is the HiJackThis log I have just run. Can anyone see anything wrong here?

Logfile of HijackThis v1.99.1
Scan saved at 18:43:43, on 19/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\1XConfig.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mclogsrv.exe
C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Java\j... Read more

A:Possible problems? - hjt log included

Read other 6 answers
RELEVANCY SCORE 38.8

Over the weekend I encountered a problem where the Desktop could not be shown due to a missing wininet.dll. After installing a new wininet.dll application and running ad-aware and ewido, I find I cannot log onto anything on Internet Explorer (be it yahoo, aol, or techguy.org {using other computer right now}). Here is a copy of my hijack log. Please help

Logfile of HijackThis v1.99.1
Scan saved at 9:16:40 PM, on 4/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\DIGStream\digstream.exe
C:\Program Files\ESPNRunTime\DIGServices.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qb... Read more

A:Problems w/ IE. HJT log included. Please Help!

Read other 12 answers
RELEVANCY SCORE 38.8

Well, I've ran ad-aware and spybot already. I have run CWShredder too. I also have spyware guard running and I also use spyblaster. I ran my anti-virus program and picked up a "low-risk trojan" as it was designated by the anti-virus' information page. Lately though, when I leave my laptop on and it is idling, I always come back to a pop-up of some ad for something. Also, most of the time that I open my homepage another random ad pops up. Can somebody take a look at my log and tell me if there is anything wrong or other ways I can improve? Any help would be greatly appreciated.
Logfile of HijackThis v1.97.7
Scan saved at 11:05:25 AM, on 4/6/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\System32\gearsec.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.ex... Read more

A:Oh no, problems again...H/T log included

This object indicates you ave the peper trojan.

O4 - HKLM\..\Run: [2SM3JGY2R237DZ] C:\WINDOWS\System32\Ryf9m24V.exe
To get rid of it do this:

First run This uninstaller to get rid of the peper trojan:

*Note: Just click on the uninst.exe and let it run. When it is finished it will just close. There will be no dialogue. Also you must be connected to the internet for the uninstaller to be effective.

Restart your computer and post a new HJT log.
 

Read other 3 answers