Over 1 million tech questions and answers.

2 evil friends on desktop "Live Safety Center" and "Online Security Guide" Help?

Q: 2 evil friends on desktop "Live Safety Center" and "Online Security Guide" Help?

Ok where do I begin?! I have been dealing with viruses, spyware/malware for the past week. It all started with Norton advising me that I had been infected with Trojan. Vundo and Trojan.Zonebac. After that I started receiving many different pop ups warning me about critical system alerts. I also had an annoying yellow triangle at the bottom of my screen warning me about different trojans and worms. More evil friends included 2 new icons that had made their home on my desktop one named "Live Safety Center" and the other "Online Security Guide", also installed was a new toolbar named "Security Toolbar 7.1". I have scanned my computer with many different programs and have somehow finally managed to get rid of the pop ups and toolbar, although I know I'm probably still infected somewhere. I'm sorry this is so long but, I wanted to explain EVERYTHING! I'm running Windows XP SP2, and have followed all steps to post. I downloaded DSS, but after many attempts to run, it just wouldn't let me. I do have a fresh hijackthis log and my Panda report, I hope this is good enough.
Many thanks in advance to whomever helps me, I am desperate!
Monica

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:58:35 PM, on 11/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\bak\qttask.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\AOL\1189379618\ee\AOLSoftware.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: (no name) - {211FDA94-E4E7-4BDA-BBE3-0DB7757CDDB5} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {789C867A-F968-4826-A13F-A748A8D495F2} - (no file)
O2 - BHO: (no name) - {99611D24-B521-4F62-B2CA-664521665E74} - (no file)
O2 - BHO: (no name) - {A2BC9A29-89CF-424B-9B3D-B4C0686B3CD0} - (no file)
O2 - BHO: (no name) - {A7460C74-475F-483E-8ECB-265D20950878} - (no file)
O2 - BHO: (no name) - {A95B2816-1D7E-4561-A202-68C0DE02353A} - (no file)
O2 - BHO: {6971927f-6a23-f3ab-0534-2bfab5f4a6bf} - {fb6a4f5b-afb2-4350-ba3f-32a6f7291796} - C:\WINDOWS\system32\npsbqepw.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: (no name) - {11A69AE4-FBED-4832-A2BF-45AF82825583} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\bak\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1189379618\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [407df185] rundll32.exe "C:\WINDOWS\system32\leebrosf.dll",b
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\Program Files\AWS\WeatherBug\Weather.exe (file missing) (HKCU)
O15 - Trusted Zone: *.doginhispen.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1195189485953
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O20 - Winlogon Notify: dpcrkqhi - C:\WINDOWS\
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 9101 bytes



Incident Status Location

Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Nikki\Cookies\[email protected][2].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Nikki\Cookies\[email protected][1].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Nikki\Cookies\[email protected][2].txt
Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Nikki\Desktop\ComboFix.exe[nircmd.exe]
Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\Nikki\Desktop\ComboFix.exe[nircmd.cfexe]
Virus:Generic Trojan Disinfected C:\qoobox\Quarantine\C\Program Files\WinBudget\bin\crap.1193189168.old.vir
Virus:Generic Trojan Disinfected C:\qoobox\Quarantine\C\Program Files\WinBudget\bin\crap.1193850125.old.vir
Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\WINDOWS\NirCmd.exe
Spyware:Spyware/Virtumonde Not disinfected C:\WINDOWS\SYSTEM32\atrtjnhv.dll
Virus:Trj/Agent.HCL Disinfected C:\WINDOWS\SYSTEM32\leebrosf.dll
Spyware:Spyware/Vundo Not disinfected C:\WINDOWS\SYSTEM32\llqxnsbf.dll

RELEVANCY SCORE 200
Preferred Solution: 2 evil friends on desktop "Live Safety Center" and "Online Security Guide" Help?

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: 2 evil friends on desktop "Live Safety Center" and "Online Security Guide" Help?

Hi, thanks for trying to perform all the steps.


Quote:




I downloaded DSS, but after many attempts to run, it just wouldn't let me.




At what stage does DSS stop working?

Read other 7 answers
RELEVANCY SCORE 248.4

I'm having the same problem that a lot of people are having. These icons have showed up on my desktop and i keep getting pop ups telling me to download them because i have a virus. i would really applicate the help.
thanks!
John

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
91: 2007-11-17 16:39:03 UTC - RP554 - Deckard's System Scanner Restore Point
90: 2007-11-17 15:47:18 UTC - RP553 - System Checkpoint
89: 2007-11-16 15:05:33 UTC - RP552 - System Checkpoint
88: 2007-11-15 01:17:54 UTC - RP551 - Software Distribution Service 3.0
87: 2007-11-13 22:39:57 UTC - RP550 - Removed Banctec Service Agreement


-- First Restore Point --
1: 2007-11-12 23:17:11 UTC - RP464 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.

Percentage of Memory in Use: 81% (more than 75%).
Total Physical Memory: 510 MiB (512 MiB recommended).
System Drive C: has 2.78 GiB (less than 15%) free.


-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2007-11-17 11:42:27
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\... Read more

A:"online security guide" and "live safety center" deckard log here

Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Please download VundoFix.exe to your desktop. We'll use this later.

Download SDFix and save it to your Desktop.

Please download & install - ERUNT (This is a utility that'll replicate a copy of your Registry)
Start ERUNT, confirm the Welcome message.

Next, select the backup options:

System registry
Current User Registry
Other open user registry

Click "OK" and wait until the backup process is complete. (Note that depending on your system configuration this may take some time, and that the first bar is NOT a progress bar, just an indicator that the program is still running.)
# Note: To ensure proper operation of ERUNT, you should be logged in a... Read more

Read other 13 answers
RELEVANCY SCORE 248.4

I don't have a clue where to begin trying to fix this problem. Spybot doesn't seem to fix the problem. I keep getting random icons on my desktop and start menu called "online security guide" and "live saftey center". There are also many fake balloon warnings appearing and a window titled "Critical System Warning!" that wants me to download stuff. What process can I go through to clean my system. Any help would be great...thank you!

A:i need help - "online security guide" & "live safety center" icons!!

Please follow MicroBell's 5 Step process outlined here:

http://www.techsupportforum.com/secu...tml#post342651

After running through all the steps, please post the requested logs.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Read other 1 answers
RELEVANCY SCORE 246

My son uses his computer on the net a lot and of course there is a virus out there waiting to serve its twisted master.

He got the wellknown "Live Safety Center" and "Online Security Guide" and it keeps comming back and hijacks his internet browser to redirect to the same page that promises peace and wellbeing for money ... of course.

Here is the DDS log:
"
Deckard's System Scanner v20071014.68
Run by Emil on 2007-11-10 20:43:53
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- HijackThis (run as Emil.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:44:39, on 10-11-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmer\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmer\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmer\F?lles filer\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\agsdyely.exe
C:\Programmer\F?lles filer\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Progra... Read more

A:Need to get rid of "Live Safety Center" and "Online Security Guide"

I did follow MicroBell's 5 Step process and the Panda scan said that no virus could be found. However, my Avast anti-virus warned me 5-6 times about files while I was running the Panda virus scanning. One of them was named "win.exe" and was in C:\temp\ but has now been deleted. Every time Avast issued a virus alert I chose the option to delete the file in question.

Read other 19 answers
RELEVANCY SCORE 246

I don't have a clue where to begin trying to fix this problem. I keep getting random icons on my desktop called "online security guide" and "live safety center". There are also many fake balloon warnings appearing and a window titled "Critical System Warning!" that wants me to download stuff. What process can I go through to clean my system. I didn't have this problem until I upgraded to Norton 2008. I am currently running IP tool antivirus and spyware, I also have ran Smitfraudfix, still getting pop ups like crazy. Also my IP tools is finding Trojan.Virtumonde. I use Quicken and it seems to have attacked it because I am no longer able to use it. Any help would be great...thank you!

A:"online security guide" and "live safety center"

Hi and welcome to TSF.

Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers.

Since it has been a few days since you first posted, please follow these instructions if you still need assistance.

Download Deckard's System Scanner (DSS) to your Desktop . Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - minimised > extra.txt and maximised > main.txt.
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt back in this thread (do not attach it).
Please attach extra.txt to your post.


To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

I will monitor this thread for your reply.

Thank you for your patience.

Read other 1 answers
RELEVANCY SCORE 228

Hey guys, recently my computer started behaving strangely and I believe I have some sort of a virus. Two icons, with the names of "Live Safety Center" and "Online Security Guide," downloaded themselves onto my desktop. Also I would receive random pop-ups in IE imploring me to "find true love," among other things. Also I would receive a flashing exclamation point on my desktop toolbar stating that I had some sort of a virus and that I should go to a certain site to download software to remove it. There were a few other notifications that would pop up that would say other things, but at the moment I can't remember exactly what they said (although I think it also had to do with a virus on the computer and asking me to click on something to get rid of it). Any ideas on what's happening here? Thank you in advance for taking a look for me.

Here's my hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:37:06 AM, on 11/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system... Read more

A:Malware/Virus Problem ("Live Safety Center/Online Security Guide")

Please do this:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your thread in the HijackThis Log Help Forum.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.

What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

---------------------------------------------------------------------------------------------

Read other 9 answers
RELEVANCY SCORE 177.6

Ive been getting random popups and my homepage has been reset to http://www.securitynetpage.com/. I also had two programs installed onto my desktop, Online Security Guide" and "Security Troubleshooting". I also have a yellow triangle sign in the lower right hand portion of my screen that says something about a system alert: popups. Help would be greatly appreciated. Thank You.

Logfile of HijackThis v1.99.1
Scan saved at 4:15:12 AM, on 8/17/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ishost.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\regscan.exe
C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\WINDOWS\System32\ismon.exe
C:\Program Files\Java\jre1.5.0_03\bin\jucheck.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\issearch.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\isnotify.exe
C:\Program... Read more

A:Random popups, "Online Security Guide" and "Security Troubleshooting"

Hi and welcome to TSF.

I am currently reviewing your log. Please note that this is under the supervision of an expert analyst, and I will be back with a fix for your problem a.s.a.p

In the meantime, make sure you subscribe to this thread so that you will receive an instant email when I have replied with a fix to your problem. You may do this by clicking the Thread Tools option at the top of your post and then clicking Subscribe to this thread. Then, make sure Instant Notification by email is selected and click Add Subscription

Please be patient with me during this time.

Read other 2 answers
RELEVANCY SCORE 160.8

This began after dumbly going to some non-commercial website. NAV auto-protect did initially detect an infection, but indicated it could not quarantine or delete.

Now when launching IE6, it attempts to redirect to a fake virus software website. When I choose the "not recommended" link, IE crashes shortly afterward. Also, I get a fake "Security Center Alert" popup every few minutes. I stupidly clicked on the link to update the security center.

With System Restore deactivated, I have run (all updated, full scans in safe mode) NAV, Ad-aware, Spybot, SpySweeper, Avira and CCleaner. (Then I found this website and learned I should have waited to do this.) Spybot found a couple of registry entries, but that was the only detection made by any of the programs, other than NAV's initial auto-protect message. File gmer.txt is attached.

dds.txt:

DDS (Version 1.0) - NTFSx86
Run by Mike at 13:22:43.09 on Sat 12/06/2008
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2038.1399 [GMT -6:00]

============== Running Processes ===============

C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
svchost.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\... Read more

A:IE crash after "Insecure Internet activity", "Security Center Alert" popup

Before any work can be done on this machine, there is something that requires your immediate intervention.

This machine is messed up pretty badly because you have several anti-virus programs on your machine. That's not a good idea!!

Alike firewalls, anti-virus programs have conflicts co-existing with each other & produces undesirable results. Please uninstall ALL leaving only one of them.

ALL the antivirus programs must be removed via add/remove program.
For any program that doesn't have an add/remove entry, you will have to do this:re-install the program -> reboot -> uninstallPost a fresh logs when you have completed the above task.

Read other 11 answers
RELEVANCY SCORE 159.6

Hello,

I'm running Windows XP SP 3. I have fake "Security Center Alert" popups and "Security Center" popups. A program called "Malware Defense" has also seemed to installed itself onto my computer. And I've just noticed porn icons appearing on my desktop. It's also disabled my Avira software.

GMER doesn't seem to run. I've clicked on it a couple of times but it doesn't seem to do anything. The DDS logs are attached/follows.

Thanks in advance!

DDS (Ver_09-12-01.01) - NTFSx86
Run by zili at 23:28:31.96 on Wed 01/06/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Professional 5.1.2600.3.1252.61.1033.18.1022.493 [GMT 11:00]

AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WI... Read more

A:"Security Center Alert" popups, "Malware Defense" self install

Let's try this version of gmer.


Download GMER Rootkit Scanner from here to your desktop. Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Read other 4 answers
RELEVANCY SCORE 158.8

Hello, i have followed the 5 steps and have the reports which you will need, we have the online security guide pop-up on the computer asking us to buy it to ensure protection. Upon doing a Panda ActiveScan, it has shown 3 Spyware files, and also 3 hacking tools, i have saved the report from panda scan and i can post it in this thread if required along with the attached extra.txt. Below is the main.txt copied from the Deckard System Scanner.

Deckard's System Scanner v20071014.68
Run by brian lee on 2008-02-25 2028
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
13: 2008-02-25 2032 UTC - RP155 - Deckard's System Scanner Restore Point
12: 2008-02-25 20:01:07 UTC - RP154 - Software Distribution Service 3.0
11: 2008-02-24 21:25:01 UTC - RP153 - System Checkpoint
10: 2008-02-17 20:05:19 UTC - RP152 - System Checkpoint
9: 2008-02-16 19:51:49 UTC - RP151 - Software Distribution Service 3.0


-- First Restore Point --
1: 2007-12-04 14:27:11 UTC - RP143 - Software Distribution Service 3.0


Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 503 MiB (512 MiB recommended).


-- HijackThis (run as brian lee.exe) -------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
... Read more

Read other answers
RELEVANCY SCORE 154.4

Hello, i have the shield like pop-up on my computer directing me to virportect.com

I have done a search on here and installed combofix but the problem has not been removed, i have only just completed the combofix run so here is the log below

Any help would be appreciated

ComboFix 08-01-09.2 - brian lee 2008-01-15 18:08:10.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.220 [GMT 0:00]
Running from: C:\Documents and Settings\brian lee\desktop\combofix.exe
Command switches used :: /killall
.

((((((((((((((((((((((((( Files Created from 2007-12-15 to 2008-01-15 )))))))))))))))))))))))))))))))
.

2008-01-15 17:58 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-15 17:42 . 2008-01-15 17:42 <DIR> d-------- C:\Program Files\CCleaner
2008-01-15 16:48 . 2008-01-15 16:48 <DIR> d-------- C:\Program Files\Enigma Software Group
2008-01-15 16:38 . 2007-06-05 10:56 44,928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS
2008-01-15 16:33 . 2007-06-08 09:44 8,576 --a------ C:\WINDOWS\system32\drivers\kjycotmrffct.sys
2008-01-15 16:04 . 2008-01-15 16:04 <DIR> d-------- C:\Documents and Settings\brian lee\Application Data\Grisoft
2008-01-15 16:04 . 2007-05-30 12:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-01-15 16:02 . 2008-01-15 17:22 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2008-01-15 16:02 . 2008-01-15 16:02 1,406 --a------ C:\WINDOWS\system32\Help.ico
2008-01-14 16:30... Read more

A:"Online Security Guide" Help

Can anyone help please?

Read other 2 answers
RELEVANCY SCORE 153.2

In Windows XP, fully updated, I have several folders full of mp3's and want to see the bit rate and duration. I right click on a column heading and select "Bit rate". I then click on "More..." so I can get to "Duration", and I select that one too.

But all the figures in the "Duration" column appear to be in "hours" and "minutes", so I see "00:04" or "00:03", but what I want is "minutes" and "seconds".

Any thoughts as to how to change this?
 

A:Solved: Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes"

Read other 16 answers
RELEVANCY SCORE 152

Hi all,

I'm sorry to post again, but I've some problems....

Recently I've got a lot of pop-up ads for anti-spyware etc. I've got a flashing icon in my system tray that says I have all sorts of malware (which I think is malware), and I had these two icons added to my programs list "live safety center" and some security thing which I deleted. I've been getting a lot of norton alerts telling me that it's found and deleted certain viruses etc. I think largely it started with Virtumundo and I downloaded to Vundofix programs and ran them and they seemed to work except that I'm still infected and I have no idea how I keep getting infected. I've ran norton, spybot, AVG, cleaned all my prefetch, temp files, garbage files, cache etc using CCleaner, Clean Up! and ATF Cleaner. But it keeps coming back. I'm running spybot again now and I think it's found some more stuff. I'm posting my HJT log below.

Since my last post, where my IE was knocked out, I haven't been using IE but using Firefox instead, which is now my default browser. But the pop-ups still come up in IE windows.

Currently, I've run VundoFix and Vurtomondubegone, spybot, and AVG, and combined i thought I picked up whatever virus I had. My system looked clean and then I started up a again, and as soon as I loaded my homepage, another popup came on!!! Then I thought it was maybe a widget that i had on my igoogle homepage--something created not by google or something. So i've removed and am now awaiting t... Read more

A:Help Please: pop-ups, system alerts, added "live security center" etc

EDIT: So I've still been having some pop-up problems. The big system alert pop-up in the system tray has gone away. But, I was still getting some IE pop-ups whenever I had IE open; they would pop-up right on top of the window that would be open so it looked like it was a redirection. Anyway, after running some more VundoFixes and spybots, etc., I found a cache of infected .dll files in the C:\Windows\system32 dir created recently and so cleared them out. That improved my system but I was still getting pop-ups. I ran panda activescan (after feeling comfortable running IE) and here is the report:


Incident Status Location

Spyware:Spyware/Virtumonde Not disinfected C:\WINDOWS\system32\mlljg.dll
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Steve Sha\My Docume... Read more

Read other 1 answers
RELEVANCY SCORE 151.2

I am running Windows XP SP3, fully updated, on an Acer lap top PC.

I have several folders full of .mp3's and want to see the bit rate and duration. To do this I right click on a column heading and select "Bit rate". I then click on "More..." so I can get to "Duration", and I select that one too.

The two new columns appear, but the format of the "Duration" column appears to be "hours:minutes", so I see "00:04" or "00:03" for most .mp3's, when what I want to see is 'hours:minutes:seconds", e.g. "00:03:45".

This also happens for video files (.avi files), e.g. all my episodes of "Heroes" (sad, I know) have a duration of "00:42" instead of "00:42:xx".


Here are two pictures showing the problem with the .mp3's. The first is of Explorer showing the Duration as "Hours:Minutes":




The second picture is of the properties window of the first .mp3 in the list above:




I copied some .mp3 files to another (old) PC on my home network, and it displayed the duration field correctly:




Also, the properties window correctly shows the duration also:





I'm not the only person to have this problem. I received a private message from a member of another forum where I posted about this problem several weeks ago. That person also has the same problem with the duration field.

The tech guys on that forum were unable to find the source... Read more

A:Windows Explorer "Duration" Column - no "Seconds", just "Hours" and "Minutes"

* bump *

Tricky, this one!

Read other 8 answers
RELEVANCY SCORE 148.4

Yesterday I started getting a popup claiming to be from "Security Center" and telling me that I have no antivirus software (I have AVG) and instructiong me to download certain files to fix the problem. The files are named:

Antivirus Security Package
MS Antivirus
The Spybot Antivirus
Spyshredder Professional Antispyware Suite

At the same time I got a series of warnings (which I ignored) and icons kept appearing on my desktop that gave links to porn websites. I ran AVG and Ad-Aware. both cleaned up a number of issues that were not there the day before. The porn links are gone but the so-called security center warning continues.

I ran Hijack This yesterday and again today and found a number of suspicious entries. I'm tempted to just get rid of them, but I would rather have someone take a look so that I can do this the right way. I have other minor issues that bug me, but I want to take care of the major stuff first. (Note: there are three other people who use this PC, all of whom claim innocence. Yeah, right)

Thanks for your help.

Here is the HJT log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:14:35 AM, on 9/3/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Fi... Read more

Read other answers
RELEVANCY SCORE 147.2

I have a trojan that has put the Online Security Guide and Live Safety Center on my desktop. It is also popping up error messages saying that I have a virus, or spyware (multiple messages). I need some help!!

A:Online Security Guide and Live Safety Center

I decided to go ahead and run VundoFix, since the Online Security Guide and Live Safety Center are commonly associated with Vundo. It got rid of two DLL's that I had been trying to remove manually (both my AVG and ClamWin detected them as virus-related but didn't remove them). A log wasn't made of the VundoFix.

I then ran ComboFix, just to be sure. THAT removed the links from the desktop. However, I'm not entirely sure that it's COMPLETELY gone. So, here's the ComboFix log.

ComboFix 07-11-01.1 - Sean Gaston 2007-11-04 18:18:07.4 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.94 [GMT -6:00]
Running from: C:\Documents and Settings\Sean Gaston\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Administrator\Desktop\Live Safety Center.lnk
C:\Documents and Settings\Administrator\Desktop\Online Security Guide.lnk
C:\Documents and Settings\Administrator\Favorites\Online Security Guide.lnk
C:\Documents and Settings\All Users\Start Menu\Live Safety Center.lnk
C:\Documents and Settings\All Users\Start Menu\Online Security Guide.lnk
C:\Documents and Settings\Sean Gaston\Desktop\Live Safety Center.lnk
C:\Documents and Settings\Sean Gaston\Desktop\Online Security Guide.lnk
C:\Documents and Settings\Sean Gaston\Favorites\Online Security Guide.lnk
C:\Program Files\SecCenter
C:\Program Files\SecCen... Read more

Read other 1 answers
RELEVANCY SCORE 146.4

Fix for "Tuner Not Found" error and "Receiver service has stopped working" error listed in next post! --Errors I'm receiving: "Tuner Not Found""Windows Media Center Receiver Service has stopped working.""Welcome - An upgrade is currently in progress."SpecsIntel P4 3GHz2GB RAMVisionTek Radeon X1300Hauppauge WinTV PVR-150 PCI IIWindows 7 32bit1. Tuner Not FoundOkay, the entire install went without a hitch. On opening Media Center I was told that I needed to setup Live TV. When I click the link I was given the dreaded "The TV signal cannot be configured because no tuner hardware was detected." If I run WinTV from Hauppauge I can view TV just fine.MCE ran fine this morning on Vista SP1 before the install.For the tuner issue I have done the following:-Reseated the card-Updated the drivers-Uninstalled the hardware and rescanned/installed the hardware and drivers-All Windows Updates-Uninstalled all references to Hauppauge on the machine and installed JUST the drivers, no Hauppauge software-Adjusted Log On preferences for Windows Media Center services to Local and manually started ehrecvr and ehsched along with cmd line manual starts-Downloaded new codecs from WinDVD and MSFT-Run the WMC Decoder Checkup Utility from MSFT and changed to Miscrosoft DTV-DVD Video Decoder (the utility recommended I change to this -- only one that is MCE compatible -- but once I did it told me that it is incompatible with sync on WMP10 and that... Read more

A:*RESOLVED* Media Center "Tuner Not Found" error, "Receiver service has stopped"

Okay, I resolved the first two issues, Tuner error and ehrecvr error.It had to do with multiple Admin user accounts on my computer. My computer was originally set up with a user Robert Baker with full privileges as administrator. I then also set up a MediaCenter account with full privilidges. For whatever reason the MediaCenter account has access to EVERY action on the computer except starting the ehrecvr service.1. First set Media Center Service Launcher to log on at NT Authority Services > Right-Click Windows Media Center Service Launcher > Properties > Log On tab > Log On As 'This account: ' > Type " NT AUTHORITY/LocalService " > Click Apply > General tab > Start service.2. I then set the Media Center Scheduler Service AND Media Center Receiver Service to log on as my other admin account. Same as above but with other account credentials and started the services.3. Reboot and no ehrecvr errors. Since this was a good sign I tried WMC and was able to set up my TV fine.I STILL, however, get the "Upgrade in progress" message when I open Media Center. Anyone know how to fix that? I've run setup again and can't get rid of it.

Read other 19 answers
RELEVANCY SCORE 145.6

I have been workng on this based on previous posts but I am still gettingpop-ups and my sytem is very slow. I have pasted HijackThis and DSS below. I have installed AVG, SmitFraudfix, Vundofix,Combofix and Adaware.

Logfile of HijackThis v1.99.1
Scan saved at 10:24:23 PM, on 11/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
c:\Toshiba\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe
C:\Program Files\Trend Micro\Client Server Security Agent\OfcPfwSvc.exe
C:\WINDOWS\TEMP\SXC521.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Pr... Read more

A:Online Security Guide & Live safety Center and IE popups

Hi, welcome to TSF

Sorry for the delay. if you still need help,

Please click Here to download HijackThis to your desktop.

Click the Download button. When the Trend Micro HJT install box appears, double click on the HJTInstall.exe. Click on Install.

It will be installed by default here: C:\Program Files\Trend Micro\HijackThis

A shortcut to the application will also be placed on your Desktop.

The program will open automatically after installation.

You can double-click the icon that was placed on the Desktop to run subsequent HijackThis scans or you can use the icon inside the folder. The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.

Click on "Do a system scan and save logfile" When the log pops up in Notepad, copy and paste that file back here.

Read other 1 answers
RELEVANCY SCORE 145.6

i keep getting these above icons poping up on my desktop and system alerts, etc.. telling me i have a virus and need to download their software(official security software). also i have an added security toolbar on my homepage and additional adds that keep poping us including porn sites. i've tried a ad-aware program and the avg anti-spyware programs and can't seem to get rid of it. it actually went away for awhile when i used the avg program(came up with a trojan-Small virus) but now it's back. here's a hijack this log and a smitfraud log:

Logfile of HijackThis v1.99.1
Scan saved at 6:10:34 PM, on 11/13/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
... Read more

A:online security guide/live safety center virus

ad-aware log:
ArchiveData(auto-quarantine- 2007-11-13 19-36-07.bckp)
Referencefile : SE1R202 12.11.2007
======================================================

MRU LIST

obj[0]=MRU FileReference : C:\Documents and Settings\Debra Ritzema\recent\smitfraud.wps.lnk
obj[2]=MRU RegReference : software\microsoft\directdraw\mostrecentapplication name
obj[3]=MRU RegReference : S-1-5-21-105441914-3170374919-175278027-1005\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru\*
obj[4]=MRU RegReference : S-1-5-21-105441914-3170374919-175278027-1005\software\microsoft\windows\currentversion\explorer\recentdocs\.wps
obj[6]=MRU RegReference : S-1-5-21-105441914-3170374919-175278027-1005\software\microsoft\windows media\wmsdk\general computername

WIN32.TROJANDOWNLOADER.ZLOB

obj[6]=Regkey : clsid\{11a69ae4-fbed-4832-a2bf-45af82825583}
obj[7]=Regkey : clsid\{a95b2816-1d7e-4561-a202-68c0de02353a}
obj[8]=Regkey : software\microsoft\windows\currentversion\explorer\browser helper objects\{a95b2816-1d7e-4561-a202-68c0de02353a}
obj[9]=RegValue : S-1-5-21-105441914-3170374919-175278027-1005\software\microsoft\internet explorer\toolbar\webbrowser "{11a69ae4-fbed-4832-a2bf-45af82825583}"
obj[10]=RegValue : software\microsoft\internet explorer\toolbar "{11a69ae4-fbed-4832-a2bf-45af82825583}"
obj[16]=File : c:\docum... Read more

Read other 3 answers
RELEVANCY SCORE 144.8

I reformatted my computer recently, with all the same hardware and software I usually do, but this time I noticed something different.

On my E: partition (non-system), there is a folder called "9ca233a934811ecf86022b48e5" which contains two folders: "AMD64" and "i386".

I researched a little bit, and found out those folders pertain to a windows 64-bit edition, but I don't have anything to do with a 64-bit edition, mine's a 32-bit.

Here's my system specs:WinXP Media Center Edition Version 2002 SP3
Intel Core 2 Duo Processor E6300
3GB RAM
NVidia GeForce 7600 GS 512MB
ST3300831AS 300GB HD
I have my HD partitioned to 3 drives:14GB System Drive (C:)
40GB Document Drive (D:)
190GB Storage Drive (E:)
I also have 40GB partitioned as an Acronis True Image Home Secure Zone, for storing Disk Images.

I was wondering why those two folders are on my E: drive, when I'm running a 32-bit version of Windows. Also, (sorry if this should be in another thread) my computer has been restarting unexpectedly while I've just been doing random things on it. Nothing graphics-intensive, or anything like that, so I don't know why it's doing that either.

Thanks for your help and time,
Nic

A:"AMD64" and "i386" folders on WinXP Media Center 32-bit edition

It sounds like those are temporary files from a driver installation. A lot of companies seem to package every possible driver in the zip or executable, extract them all to the hard drive, find the one the system needs and copy it to the system32 directory, then leave the rest behind.

In that case they should be safe to delete. It would take a bit more research on your part to make sure. Maybe a readme or help file somewhere in the directory?

Read other 3 answers
RELEVANCY SCORE 144.4

My office just upgraded, and I can no longer use Windows XP. On this system, I was able to add a separate taskbar to facilitate quick access to commonly-browsed folder locations on our vast network, and another one expedited the launching of useful programs and lists. Each task on each taskbar was represented with a big custom icon to save eye strain. I had them installed in opposite vertical margins, and they were set on auto-hide to keep them out of the way when not being used. Just move your mouse pointer to the left or right margin, and BAM! Sorry for the cliche, but I really got used to the convenience of what I had set up, and I just don't think I can be as efficient without anything comparable.

Now there appears to be nothing comparable in the Windows 7 GUI, and it's making me sick with rage! I see only the option to put a "toolbar" on an existing "taskbar", and no option to create any additional taskbars! This cramps up your one-and-only taskbar, plus the tiny toolbar access buttons require way too much precision for anything that's supposed to be quick. When you've figured out how to bring up that ridiculous button, the list that it yields is small enough to cause painful eyestrain - nothing efficient, much less cool about this at all! I have seen customization options in other OS GUIs that may have resolved some of these issues, but I see none such in W7.

I have tried every google search string that I can think of, and found... Read more

A:Need to add "TASKBARS" (MSese for "Launchpads", "Docks" NOT "Toolbars"

Several possibilities here: Second taskbar in windows7? [Solved] - Windows 7 - Windows 7

Read other 1 answers
RELEVANCY SCORE 144

Hi,

When our website users click on an html attachment embedded on a web-page in IE9, the download manager will not display the "Open" option. It will only display "Save" and "Cancel" which our users don't like, having to save the
html document in a folder to open it. Whereas, when downloading attachments like pdf, word etc. all three options are displayed. 

Is there any setting to tweak , which will display all the 3 options for HTML attachments as well?

A:IE9 download manager will not display "Open" option (only "Save" and "Cancel" is displayed) for downloading HTML documents.

Hi,
As you know, the Open-Save-Cancel dialog box helps you prevent your computer from affecting by virus while downloading. 
So I suggest you test to reset all zones to a lower level temporarily and then please attempt to download this html attachment again.

However, since you can normally download the other documents, I suspect there is some restriction in the website which you are trying to view. I recommend you to contact the administrator of that website if possible.
could you please send me the link of the website from where you are trying to download the html attachment?
Thanks!


We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Read other 6 answers
RELEVANCY SCORE 144

hi

recenltly caught sumthing i think a trojan. I have windows xp and am using mcafee whaich found the problem and i thought it had sorted it out. it had not and now messages saying you have a back door trojan and click here to download the official software keep poping up. need big help please.

i have a hijackthis logfile below

any help realy apriciated

thanks
luke

--------------------------------------------------
hijack this log file
---------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 19:48:24, on 16/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\... Read more

A:[SOLVED] help geting rid of 'Live safety center' and 'Online security guide'

Hello and welcome to TSF

You have an outdated version of Hijackthis installed,please uninstall that version as then next part will install the latest version

======================================================

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
Please attach extra.txt to your post.
To attach a file to a new post, simplyClick the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:C:\Deckard\System Scanner\extra.txt

Click Upload.
What DSS will do: create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

==================... Read more

Read other 3 answers
RELEVANCY SCORE 144

Please help. Have a trojan I cannot fully remove. The symptoms are setting off avast virus detector, 2 icons on the desktop one called Safety Center and one called Online Security Guide. Also constant redirection to an spyware removal website.

Have already run vundofix.exe and combofix.exe, which seems to have temporarily fixed the problem. From the hijack this log can you tell if the problem is completely resolved?

Hijack This log below

Logfile of HijackThis v1.99.1
Scan saved at 14:21:26, on 23/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:... Read more

A:Live Safety Center and Online Security Guide icons Trojan

Hi frenchfry and welcome to TSF

Sorry for the delay getting to you, the forum has been really busy and all our helpers are volunteers.

Please post the logs from vundofix and combofix

------------------
Required Logs

c:\vundofix.txt
c:\combofix.txt

Read other 7 answers
RELEVANCY SCORE 144

I got my dell few days ago. Installed it with Samsung EVO 850 SSD 500 Gb and Kingston 8GB PC3L - 12800 SODIMM.The Windows 10 Home OEM home is installed on HDD 1TB so I decided to use Samsung Data Migration software to clone the data to SSD. However, the OS crashed and decided to install a fresh Windows 10 Enterprise to SSD and deleted the previous OS on HDD using diskpart.Now after Installing Windows 10 Ent OS files. Every after BIOS run, I got BSOD errors "MEMORY MANAGEMENT" + "Page Fault it non paged area" + "IRQL NOT LESS OR EQUAL" 

Read other answers
RELEVANCY SCORE 143.6

The control panel opens fine. I can access all items in the control panel
except "Network and sharing center" and the "User accounts" (I can't access this sections via the taskbar either).

What happens when I open one of the two items is I get a popup saying the
following; WINDOWS EXPLORER HAS STOPPED WORKING.

I used to be able to access these items. And one day, I just coulodn't anymore...

Anyone knows how to solve this? Thanks.

I'm using Vista Ultimate x64

A:Can't access "Network and Sharing Center" nor "User Accounts"

Hello Newbie,

See if running a sfc /scannow can find and fix bad system files that may be responsible for this.

Hope this helps,
Shawn

Read other 16 answers
RELEVANCY SCORE 143.6

Srry i know this post is a bit old but i recently just got this problem i can access the internet fine but i cant access my network settings, user settings, or see the the properties of my pc. i tried running your solution Brink but the scannow showed

"Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Windows\system32>sfc /scannow
Windows Resource Protection could not start the repair service.
C:\Windows\system32>"

i then ran sfc /verifyonly but got the same answer.

i then ran findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >%userprofile%\Desktop\sfcdetails.txt. and the txt file came up blank.

idk wat to do rite now i am at my witts end.

A:Can't access "Network and Sharing Center" nor "User Accounts"

Hello Jayrrus, and welcome to Vista Forums.

I would recommend that you use Microsoft Standalone System Sweeper to scan your system with at boot to help make sure that your system is malware free first.

Afterwards, you might see if you may be able to do a system restore at boot using a restore point dated before you had these issues to see if that may be able to fix them.

Hope this helps,
Shawn

Read other 7 answers
RELEVANCY SCORE 143.2

I am infected with this crap and have used the following tools to try to get rid of it:
Windows Defender, Unible PowerSuite (SpeedUpMyPC, Registry Booster & Spyware Protector) and Norton's One Button Checkup and WinDoctor.

Not sure if it's related, but my DISPLAY is locked at 640 X 480.

Atempted the 5 Step Process before posting and Panda ActiveScan froze and crashed after scanning 59253 files, but not before identifying 28 spyware files.

Here's my extra.txt log from Deckard's:

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: Intel(R) Pentium(R) 4 CPU 2.80GHz
Percentage of Memory in Use: 36%
Physical Memory (total/avail): 1277.95 MiB / 810.39 MiB
Pagefile Memory (total/avail): 1516.89 MiB / 1165.44 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1930.88 MiB

A: is Removable (No Media)
C: is Fixed (NTFS) - 37.21 GiB total, 18.7 GiB free.
D: is CDROM (CDFS)

\\.\PHYSICALDRIVE0 - ST340014A - 37.25 GiB - 1 partition
\PARTITION0 - Unknown - 39.19 MiB
\PARTITION1 (bootable) - Installable File System - 37.21 GiB - C:



-- Security Center -------------------------------------------------------------

AUOptions is scheduled... Read more

A:Netsky Worm-Popups-The Three Icons - "Error Cleaner" "Privacy Protector" "Spyware..."

Bump.

Read other 14 answers
RELEVANCY SCORE 142.4

I double-click and get "search" instead of "open"--only when I click a disk, like Hard Drive C: or Floppy A: or CD F: and so on.

It didn't used to do this, so I must've inadvertently changed some setting somewhere, but darned if I can find it now.

Any ideas?
 

A:Solved: On the "my computer" list, I double-click on disks and get "search" instead of "open"

Read other 12 answers
RELEVANCY SCORE 142.4

Ok, so im new here so hey everybody..

to the point: my laptop is "stuttering"/lagging/skipping.
whatever you wanna call it its doing it.
my video/music/and cursor skip every second for a splt second it starts on start-up and dont stop til i turn my laptop off. it happens in a pattern its not random, ive done checked my drivers, spyware, and m RAM is good.. so can someone please help me? ***could it be because my battery wont hold a charger? so it has to be hooked up to the charger at ALL times or it dies Example: is the charger not got the "juice" to run the laptop by itself so it studders/skips..*** i dont know if this has anything to do with my problem but i ran "event viewer" and found this : The following boot-start or system-start driver(s) failed to load:
Cdrom
Imapi
redbook

PLEASE HELP




OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Genuine Intel(R) CPU T2250 @ 1.73GHz, x86 Family 6 Model 14 Stepping 8
Processor Count: 2
RAM: 502 Mb
Graphics Card: Mobile Intel(R) 945GM Express Chipset Family, 224 Mb
Hard Drives: C: Total - 39723 MB, Free - 23484 MB; D: Total - 12684 MB, Free - 3633 MB;
Motherboard: Dell Inc., 0FF049, , .HWPLLB1.CN1296167S5169.
Antivirus: McAfee VirusScan, Updated: Yes, On-Demand Scanner: Disable
 

A:Solved: Whole computer "studders"/"skips"/"lags" .. have event viewer report (PLEASE

Read other 6 answers
RELEVANCY SCORE 142.4

It seems that no matter how I set this, after the next start-up it reverts to "15 minutes".  What registry key controls this?

Read other answers
RELEVANCY SCORE 141.6

Got my computer back today (Windows XP), and my background is now all green with a black box in the middle saying "Your System Is Infected...etc"

Also a red circle with a white X in the task bar

I can't open the task manager

Can Anyone Help???...

Downloaded HiJackThis

My log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:04:51 AM, on 12/29/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\dlcqcoms.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TDispVol.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\sy... Read more

A:"Your System Is Infected" Background + "Internet Security 2010" virus/malware problem

Hi and welcome to TSF.

I'm afraid HijackThis no longer provides the information we require.

We want all our members to perform the steps outlined in the link given below, as far as they possibly can, before posting for assistance.

http://www.techsupportforum.com/f50/...lp-305963.html

If you have problems with any of the steps, simply move on to the next one and make a note of the problem in your reply.

Please note that the Security Forum is always busy, so I would ask for your patience while waiting for a reply - it may take a few days.

This thread will now be closed.

Read other 1 answers
RELEVANCY SCORE 141.6

Got my computer back today (Windows XP), and my background is now all green with a black box in the middle saying "Your System Is Infected...etc"

Also a red circle with a white X in the task bar

I can't open the task manager

Can Anyone Help???...

Downloaded HiJackThis

My log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:04:51 AM, on 12/29/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\dlcqcoms.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TDispVol.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\i... Read more

Read other answers
RELEVANCY SCORE 141.2

Hey folks,

My first post on here but I'm in serious trouble. I got a "new" (to me anyway) desktop running XP today and found the audio hardware wasn't working. So I pillaged an old machine for its sound card, and inserted that onto the motherboard. Also connected the Aux and CD lines to the top of the daughterboard.

Since then, to my horror, the machine has failed to boot. All plugged in, keyboard working, screen on and being used on another box for this very post. All I get now is the usual chirps from the internal soundcard followed by a few very low notes, definitely depressing so I guess they're suggesting something's failed. There's no further action from the CPU, the fan still works, but there is no screen output whatever.

Have I fried the motherboard without realising?!

Also, ironically, the last failure tone was delivered by my speakers through the originally non-responsive audio hardware!

I'd love a bit of help on this one, because my knowledge of computers' insidey bits is pretty poor.

Many thanks,

Joe.
 

A:Desktop boot problem after sound card "meddling"... just a "beep" failure tone.

Read other 6 answers
RELEVANCY SCORE 141.2

Ok, so im new here so hey everybody..

to the point: my laptop is "stuttering"/lagging/skipping.
whatever you wanna call it its doing it.
my video/music/and cursor skip every second for a splt second it starts on start-up and dont stop til i turn my laptop off. it happens in a pattern its not random, ive done checked my drivers, spyware, and m RAM is good.. so can someone please help me? ***could it be because my battery wont hold a charger? so it has to be hooked up to the charger at ALL times or it dies Example: is the charger not got the "juice" to run the laptop by itself so it studders/skips..*** i dont know if this has anything to do with my problem but i ran "event viewer" and found this : The following boot-start or system-start driver(s) failed to load:
Cdrom
Imapi
redbook

PLEASE HELP
 

A:Whole computer "studders"/"skips"/"lags" .. have event viewer report (PLEASE HELP)

**(DONT KNOW IF THIS WILL HELP..)***

Tech Support Guy System Info Utility version 1.0.0.1
OS Version: Microsoft Windows XP Home Edition, Service Pack 3, 32 bit
Processor: Genuine Intel(R) CPU T2250 @ 1.73GHz, x86 Family 6 Model 14 Stepping 8
Processor Count: 2
RAM: 502 Mb
Graphics Card: Mobile Intel(R) 945GM Express Chipset Family, 224 Mb
Hard Drives: C: Total - 39723 MB, Free - 23484 MB; D: Total - 12684 MB, Free - 3633 MB;
 

Read other 2 answers
RELEVANCY SCORE 140.8

Good day all.

I recently restarted my computer only to be met with an empty desktop.

Also, My Start Menu is empty. I can't locate any of programs or documents.a Right clicking and going to windows explorer, I could only view : "My Computer", "Windows (C); and when I click on them, they contain few irrelevant files.

In other words I can't find my personal saved documents, "my document" folder , recycle bin and all other programs.

My wifi still works so the only thing I can do on my system is browse on the internet.

However, I can open a microsoft office file, PDF files, if I download it directly from my email or from an external drive.

I can save files on my new blank desktop.

I presume this is a virus attack.

Can anyone be kind enough to advise me on what to do?

Thanking you in advance.
 

A:Desktop erased. Can't Locate "My Documents" folder and "Start Menu" folders

Your files and folders may have been hidden by the virus, go to folder options and 'show hidden files and folder' to see if they actually are hidden. If they are, you can use Grindler's UnHide tool to 'unhide' all of your files and folders. As for the virus, move this thread to the virus and other malware removal forum in order for it to be noticed by an authorised malware removal member.
Good luck!
 

Read other 1 answers
RELEVANCY SCORE 140.8

Good day all.

I recently restarted my computer only to be met with an empty desktop.

Also, My Start Menu is empty. I can't locate any of programs or documents.a Right clicking and going to windows explorer, I could only view : "My Computer", "Windows (C); and when I click on them, they contain few irrelevant files.

In other words I can't find my personal saved documents, "my document" folder , recycle bin and all other programs.

My wifi still works so the only thing I can do on my system is browse on the internet.

However, I can open a microsoft office file, PDF files, if I download it directly from my email or from an external drive.

I can save files on my new blank desktop.

I presume this is a virus attack.

Can anyone be kind enough to advise me on what to do?

AFTER FOLLOWING SOME ADVICE I AM BEGINNING TO GET SOME OF MY FILES BACK BUT MY START PROGRAM FOLDERS ARE ALL EMPTY. For example; when i click the microsoft office folder, it is empty.

HOW CAN I GET RID OF THIS VIRUS PLEASE?

Thanking you in advance.
 

A:Desktop erased. Can't Locate "My Documents" folder and "Start Menu" folders

closing duplicate, please respond at http://forums.techguy.org/windows-7/1003509-desktop-erased-cant-locate-my.html . Please do not create duplicate threads for the same issue.

thanks,

v
 

Read other 1 answers
RELEVANCY SCORE 140.8

Hi all

Ill cut to the chase.

What I am asking is someway of turning the Entire Windows Desktop/Screen "Black and White" not simply High Contrast.

I am one of those unfortunate ones, like many, that suffer from quite severe migraines from time to time. Couple this with frequent headaches, sometimes daily. This obviously isnt helped by the fact that my hobby and career are both in IT. I have tried every possible solution to alleviate the headaches. Lay off certain foods, make sure to have a balanced diet. Turn off any strong lighting around my computer screen, remove any strong colours from the desktop etc......

Windows XP / Vista have tried to address this issue with the accessibility wizard, where you can select the High Contrast Options to take any strong colours off the screen. Unfortunately this still doesnt get rid of everything.

When you make any major changes or "logoff" in XP/Vista, the screen fades to "black and white" for a short period. If you know what I am on about, thats the effect I am after.

More than likely a black and white layer is laid over the desktop to create this effect, unfortunately you would not be able to access anything underneath.

I need a fully functional XP machine in complete black and white.

On old CRT monitors you were able to remove the colour, making the screen B&W, but with alot of LCD screens this function is not available.

If anyone has any ideas, you would be helping so many people.

Any assist... Read more

A:Turning the Windows Desktop completely "Black and White" not just "High Contrast"

Read other 9 answers
RELEVANCY SCORE 140.8

I have been plagued for years by this bug (see attached Mad_Explorer_col.JPG screen dump), and this morning after visiting Tech Support Guy > Windows XP then searching for "Windows Explorer", on page 2 in "Solved: Explorer tree display curiosity, AKA Odd Windows Explorer Bug", page 2, I found the cause and solution brought by Mosaic1 Wed 07 Mar 2007 05:48 GMT:
Do you have the desktop toolbar on the taskbar?​and mrwes Tue 07 Aug 2007 18:34 GMT:
You can get around this by making the toolbar point to the Desktop but using c:\Documents and Settings > (Profile name) > Desktop. You don't see the My Computer and IE icons in the list, but everything else shows up...​Thanks a lot to Mosaic1 and mrwes!

Versailles, Sat 13 Feb 2010 10:34:25 +0100
 

Read other answers
RELEVANCY SCORE 140.8

Good day all.

I recently restarted my computer only to be met with an empty desktop.

Also, My Start Menu is empty. I can't locate any of programs or documents.a Right clicking and going to windows explorer, I could only view : "My Computer", "Windows (C); and when I click on them, they contain few irrelevant files.

In other words I can't find my personal saved documents, "my document" folder , recycle bin and all other programs.

My wifi still works so the only thing I can do on my system is browse on the internet.

However, I can open a microsoft office file, PDF files, if I download it directly from my email or from an external drive.

I can save files on my new blank desktop.

I presume this is a virus attack.

Can anyone be kind enough to advise me on what to do?

Thanking you in advance.
 

A:Desktop erased. Can't Locate "My Documents" folder and "Start Menu" folders

closing thread, please do not create more than one thread for the same issue. Please respond at http://forums.techguy.org/windows-7/1003509-desktop-erased-cant-locate-my.html .

thanks,

v
 

Read other 1 answers
RELEVANCY SCORE 140.8

Good Morning,

I would like to introduce myself. I am new to the forum. Should I address an issue inappropriately, kindly alert me.

Most recently, I have experienced multiple PC issues. Recently, I performed a System Recovery and encountered the following ?

1. Cannot perform a SYSTEM RESTORE. The message is: ?Restoration Incomplete. Your computer cannot be restored."

2. When I booted up this morning, and DID NOT HAVE A DESKTOP.
The screen was blank ? no Icons.

3. The items below are APPEARING IN MY TEMP FOLDER, and are located at: C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp:

........a. 415303181927525125.tmp
......... plus similar numbers.

........b. IswTmp
........c. msohtmlclip1
........d. msohtmlclip

I delete the above items through safe mode but they re-appear.
** I am MOST CONCERNED ABOUT Items 1 & 2.

SYSTEM SPECIFICATION:

? (DESKTOP PC) Windows XP
? (SP3) HP Compaq Presario 061 - Media Center Edition,
? AMD Athlon (m) 64 Processor / (X 86-Based PC - 32-bit package)
? MOTHERBOARD Chipset - ATI RADEON XPRESS 200 CHIPSET
? Version 5.1 / 2600 Build Processor

** If someone would give me some feedback, I would appreciate it tremendously.
** THANKS IN ADVANCE.

Kind regards,
AJ

A:NO DESKTOP after booting up & SYSTEM RESTORE "Incomplete" & "Strange" Temp Files

Usually when the machine has a "blank" desktop, the boot/startup process has been interupted or is frozen to before Explorer is launched.

You can launch Explorer manually be navigating C:\Windows and double-clicking "Explorer".

If successful, do the following:

Start>Run>(type) "msconfig" and turn off all non-MS services and all startups.

Then, Start>Run>(type) "cmd", and at the command prompt type "chkdsk /f" and schedule a chkdsk to run on next reboot.

Reboot system and report results.

Read other 3 answers
RELEVANCY SCORE 140.4

ok!!!!!!!!!! what is it and how do i fix it,,,, eyes crossed knees woobly help?????????????????????
 

A:[Solved] mplay32.exe,1"/play/close"%L"." and sndrec32.exe"%L"."

Read other 9 answers
RELEVANCY SCORE 140

I right clicked on the Taskbar and checked Quick Launch and hit the Apply button. This put the Quick Launch toolbar on the Taskbar with the Show Desktop and Internet Explorer icons. I deleted them and now I can't duplicate this action. I can get the Internet Explorer icon back. But I can't get the Show Desktop icon back.

Does anyone know how to get the Show Desktop icon back on the Quick Launch toolbar.

Thanks,

royeo
 

A:How to get the "Show Desktop" icon back the "Quick Launch" toolbar

Go here http://www.kellys-korner-xp.com/taskbarplus!.htm and go down to where it says 'Restore Show Desktop Icon'. Download the exe and run it.
 

Read other 1 answers
RELEVANCY SCORE 140

This is a resurection of an old unresolved Vista Post, and it also happens in Windows 7.
====================================
Original subject - Start Menu - program search issue
I use Windows Mail for my daily email tasks, and would like to be able to
open the program by using the vista search bar built into the start menu. The
problem is, when i search for "mai" it brings up Windows Mail, and I can hit
enter and load the program. However, when I search for "mail", it returns:
"No items match your search." I have it set to index both the start menu and
my programs directory, and have even tried to rebuild the index.

It seems kind of strange that Vista would recognize that when I type "mai" I
want my mail programs, but when I actually type "mail", it gets confused...
and this in turn has -me- confused.
====================================
and
====================================
Oh thank goodness, I've finally found someone else with the same problem.
The word I have issues with is "photo" ("phot" works great, but no results
for "photo"). Not a show-stopper, but WHY!?
====================================

I've noticed the same thing with Windows Desktop Search in Windows 7. After some experimenting I think I have the reason why, but not a fix.

It seems to em that mail and photo are probably used as "kind =" prefixes in Windows search, and even if you enter photo with out ... Read more

Read other answers
RELEVANCY SCORE 140

Greetings.
So, I would like to remove "Paste shortcut" and "Undo delete" from the right-click desktop menu.
Wasn't able to locate either in the registry.

Read other answers
RELEVANCY SCORE 140

I think I am infected with Malware, Spyware, or some type of virus. My desktop background has become a bright red screen with a toxic symbol on it and underneath it, it says "Your Privacy Is In Danger!" On the bottom right, in the taskbar, right next to the time and date, it says "Virus Alert!" My computer is also attempting to run anti-Spyware programs all by itself, opening browsers with websites to Spy programs and pop-ups warning me of possible hackers. Below is my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:36: VIRUS ALERT!, on 7/20/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched... Read more

Read other answers