Over 1 million tech questions and answers.

AVG constantly popping up with warning

Q: AVG constantly popping up with warning

AVG free edition shows popup window with warning re: C:\WINDOWS\system32\atl7.dll TrojanHorseBackdoor.Generic10.AMEC

I would very much appreciate some help with this.

thankyou.

RELEVANCY SCORE 200
Preferred Solution: AVG constantly popping up with warning

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: AVG constantly popping up with warning

Read other 16 answers
RELEVANCY SCORE 78

Hi and thanks in advance for any and all help received. I would also, in all fairness, wish to inform anyone concerned that you are currently reading the words of quite possibly the most computer illiterate human being in the free world. Having said that, I will attempt to explain my problem.
My computer has been becoming increasingly slower over the last several months. I have been dealing with/ignoring this problem until the proverbial straw that broke the camel's back began appearing on the computer screen yesterday. I am receiving this official looking warning on my computer that keeps popping up constantly with every action I attempt. The warning says:
SYSTEM ERROR
Your computer was infected by unknown trojan
It's dangerous for your system! ( critical files can be lost !)
Click to download the antispyware program to clean your system (recommended)

From what Ive read on your site and others, I am assuming this is an attempt to get me to download even more trouble than what I am currently experiencing. I almost goofed up and downloaded it when it first popped up. In fact I clicked on the ok button but thankfully was warned that it was an unrecognized site and didnt have a valid signature or something to that effect (see, I told you I was computer illiterate) and I cancelled the attempt to download.

I followed all the other steps in your instructions. I had already downloaded the Windows Service Pack 2 a long time ag... Read more

A:Trojan Warning Constantly popping up

I was informed this information was needed as well
Deckard's System Scanner v20071014.68
Run by Tony Murdock on 2008-01-06 18:52:06
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
123: 2008-01-06 23:52:54 UTC - RP742 - Deckard's System Scanner Restore Point
122: 2008-01-06 23:45:12 UTC - RP741 - Software Distribution Service 3.0
121: 2008-01-06 23:40:20 UTC - RP740 - Software Distribution Service 3.0
120: 2008-01-06 22:04:36 UTC - RP739 - Software Distribution Service 3.0
119: 2008-01-06 06:03:14 UTC - RP738 - Software Distribution Service 3.0


-- First Restore Point --
1: 2007-10-09 05:03:21 UTC - RP620 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-01-06 18:57:08
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\... Read more

Read other 16 answers
RELEVANCY SCORE 53.6

I don't know what may have started this, but kaspersky kept telling me that svchost.exe was performing a suspicious action trying to inject something into winlogon.exe. It asked me to allow/deny, I denied, and it kept repeating. Eventually I ran a scan and detected that "smarthook.dll" contained a trojan. I used kaspersky to remove it, and downloaded a clean copy of the .dll and put it in my system32 folder.

Now I am receiving the classic:

svchost.exe:
"The instruction at "0x7588bba5" referenced memory at "0xfede1500". The memory could not be "read".

Click on OK to terminate the program
Click on CANCEL to debug the program"

Only this pops up every 5 seconds about 6 times and then stops, and randomly will continue this pattern.

I have attached 2 logs, one is current <taken today> the other I just happen to log a few days ago for the hell of it (before I noticed any errors). I don't know if.. comparing will help I just want to provide all info I have.

~Thanks!

[edit]
**Additional: Just ran AVG Anti-Rootkit Beta and it detected system32/userinit.exe as a "Hidden Application"

extra info: sometimes when the svchost error pops up, my taskbar at the bottom changes to the old grey style and not the windows xp style.

Also: included a screenshot (edited for size).

System Info:
AMD Athlon 64 processor 3500+, 1 GB RAM
Microsoft Windows XP Professional SP2
ASUS A8N-SLI Deluxe MOBO

A:svchost constantly popping up

nobody responding, so I'm trying to help myself. A couple things I've noticed
1) in my list of services, there is a service named "Asctcgwto" set to disabled. This brings up nothing in google.
2) After turning on my computer, I type "at" in the console and it responds with "The service has not been started." I use the at command fairly often.
3) I type "net localgroup" and it tells me that the workstation service has not been started. So I start it.... I Don't know why it isn't already started, (it's set as "Automatic" but was stopped).

The problem is getting worse because from the moment I click login, it brings up multiple svchost.exe errors and takes an exceptionally longer amount of time to fully log in.

Read other 1 answers
RELEVANCY SCORE 53.6

One of the CA security center components keeps installing when I log on. This prevents me from uninstalling anything or installing anything new. Because it keeps installing (or is just installing), I can't even try to uninstall it because well, it's installing!

Help, please! Thanks!
 

Read other answers
RELEVANCY SCORE 53.6

Greetings all,

I am running Dell Precision 370 Workstation, with Windows XP Pro.

Over the course of the last 2 hours I have received a block notification from avast reading this:

Object: 91.217.162.176/dm5.exe
Infection: URL:Mal
Action: Blocked
Process: C:\WINDOWS\System32\WScript.exe

This is confusing me a bit, as I am turning up nothing on avast and malwarebyte scans.

My question would be, is this residing on my computer, or has it been blocked entirely from making it in as indicated by Avast. Also if it has been block, I am unsure where it may be coming from, as the only site I have opened are Youtube, Facebook, Gamefaq's Xbox.com, and Google. Could it be any of these, or possible the result of an Ad on one of these sites?

Just mainly hoping for clarification so I may avoid catching this virus if I have not already.

Thanks in advance!
 

A:dm5.exe warning popping up

Read other 10 answers
RELEVANCY SCORE 53.2

So here is what's happening to me...

1. I've got this constant pop up thing happening that is saying contextual ads.
2. Under Uninstall or Change a program there is a program called Ron too1 addestination. If I click uninstall a box comes up asking for the verification code and in the center of the box it's got garbled letters, which I think they want you to use as the verification code.
3. I'm running on Windows Vista with several securities in place...MicroTrend, Windows Defender, AVG 8.0, Avira Antivirus, Malwarebytes' Anti-Malware, SpywareBlaster, SUPERAntiSPyware and used Spybot to search and destroy. They don't seem to be finding this thing.
4. I use Mozilla Firefox as my browers and I do frequent some social networks, specifically MySpace and Facebook. And often pay games on NovaWorld.

Is there any help for me? I'd be so very appreciatived!!!!

Suzanne

Read other answers
RELEVANCY SCORE 53.2

I have an HP computer with Vista, Comcast as the ISP, and McAfee (I think it was provided by Comcast).
A new problem has popped up just recently. Every few minutes, I am interrupted when the black and red McAfee flash-screen is flashed on top of whatever I am working on. That is followed by a tan-colored screen called “Comcast Security - - - powered by McAfee”. (This is the same screen that comes up if I click on the McAfee shortcut on the Desk Top.) That screen changes its contents once before it quits. The coming of these screens has nothing to do with my pushing keys. They come even if my hands are not near the keyboard and if I am not on line with Comcast.
These screens flash on for only a fraction of a second – not long enough to read what they say. But they disrupt my train of thought and, if I am typing, can cause errors in my writing. I checked my McAfee and security settings and they seemed correct. If you can suggest a way to stop this, I would appreciate it. The screens have flashed on about six times while I was writing this.
 

Read other answers
RELEVANCY SCORE 53.2

I use a windows xp professional OS.
My contrast window keeps on popping up in the middle of my screen, this goes on happening constantly on its own accord.
What is this problem? and how do i rectify it?
Pls help..

Read other answers
RELEVANCY SCORE 53.2

I've been having this problem where this thing pops up every few minutes and i don't know how to fix it

A:constantly popping up command promp

Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest version. * Once the program has loaded, select Perform quick scan, then click Scan. * When the scan is complete, click OK, then Show Results to view the results. * Be sure that everything is checked, and click Remove Selected. * When completed, a log will open in Notepad. * Post the log back here.Be sure to restart the computer.The log can also be foun... Read more

Read other 21 answers
RELEVANCY SCORE 53.2

If my lap top is on for any more than 3hrs, the help window for whatever program i am using will pop-up and will not let me continue task. Comp must he turned off for a couple of hours to resolve this.

I ran trend micro's online virus/spyware tool (http://housecall.trendmicro.com/), cwshredder, ad-aware se & spybot s&d. Problem did not resolve, then someone told me to try hijackthis, and am now in need of help to analyze the results.

PLZ HELP.

thanx in advance.

the following is the log i got w/ hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 8:25:43 PM, on 10/2/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\P... Read more

A:[SOLVED] help folder constantly popping up, plz help

i've had other issues since this post and have decided for a fresh start/formated drive
thanks all, no further help needed (for now, lol)

Read other 1 answers
RELEVANCY SCORE 53.2

I reformatted by Dell Inspiron 1721 laptop a couple of months ago and everything's been working perfectly until a Windows SP2 update automatically installed itself last week - now Windows Media center opens up constantly (very distracting); I've removed it from services and from startup, but it continues to pop open.

Also, a funny looking file menu will sometimes pop up all by itself on the top left of the screen.

And windows or programs I have open may just close themselves out by themselves.

This has all been going on for a week and is becoming very annoying. I don't use Media Player, but understand it can't be deleted. Until I chose "Don't show me this message again" there was a message every time I booted up that said something like, "Your new hardware needs to be installed." I had not attached any new hardware.

Anyone have any ideas? I really don't want the hassle of reformatting again so soon.

Thanks,
SWOFKY

A:WMC Popping Open Constantly - Other Problems

Hi SWOKY, welcome to the board.

The problem could caused by anything, but you can start on making sure if the problem related to the update by restore the system to the day before the update.

Post back and let us know how is going?

Bruce

Read other 6 answers
RELEVANCY SCORE 53.2

Every few seconds auto play pops up and immediately vanishes again. It's very annoying, to the point where I can barley use my computer, (I posted this from another computer.) The drive responsible says recovery H, H is my USB but there is nothing plugged in there. The Auto play fixer isn't for Vista 64 bit. I don't want to simply stop auto play as I like it when it works properly. I don't seem to have a windows restore point either. I have done everything I can think of. Any help would be greatly appreciated! Thanks for looking.

A:Auto play popping up constantly

You can try the FixIt at http://support.microsoft.com/kb/967715 , scroll down to How to disable or enable all Autorun features in Windows 7 and other operating systems.
 
Louis

Read other 1 answers
RELEVANCY SCORE 53.2

Hi,

My laptop constantly shows windows security pop-up. I tried Spybot/Spyware Doctor, but not of use. Please help.

HJT Logs..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:52:04 PM, on 8/20/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Cisco Systems\CSAgent\bin\CSAControl.exe
C:\Program Files\Cisco Systems\CSAgent\bin\leventmgr.exe
C:\WINDOWS\system32\CmgShieldSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctalogd.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctapsd.exe
C:\Program Files\Funk Software\Odyssey Client\odClientService.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\CtaEoU.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\CiscoTrustAgent\ctatransapt.exe
C:\WINDOWS\system32\netdde.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\PROGRA~1\Altiris\ALTIRI~1\AeXNSAgent.exe
C:\Program Files\Connected\AgentSrv.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Intel\AMT\atchksrv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\CISCOS~1\CEPS\CEPSWA~1.EXE
C:\WINDOWS\s... Read more

Read other answers
RELEVANCY SCORE 53.2

I recently had a problem with a constant popping sound and started a thread here for help: http://www.bleepingcomputer.com/forums/top...ml#entry1400691It helped me identify the source of the sound. It was suggested I post here to see if an infection is at the root of my problem.To sum up, I was hearing an almost constant bubble popping sound which ended up in fact being the Windows XP Balloon Tip Sound. After some trial and error with the advice given I found my registry had been changed to not show the balloons. Once I changed it back I began receiving the following balloon - "IP Protection Infection Detected" from Malwarebytes. Many IP's have shown up from various spots on the globe and it was suggested perhaps this forum could help me find if an infection on my PC is "calling out" to these IP's known to be associated with malware, etc.The people on the other forum were awesome and helped me get this far. If anyone can help from here it would be greatly appreciated!

A:Malwarebytes IP Protection Constantly Popping up

I reccomend you visit the Malwarebytes Forum and create an account there so they can help with you issue more easily.

Read other 2 answers
RELEVANCY SCORE 53.2

Every few seconds auto play pops up and immediately vanishes again. It's very annoying, to the point where I can barley use my computer, (I posted this from another computer.) The drive responsible says recovery H, H is my USB but there is nothing plugged in there. The Auto play fixer isn't for Vista 64 bit. I don't want to simply stop auto play as I like it when it works properly. I don't seem to have a windows restore point either. Here is my Hijack This log file. Any help would be greatly appreciated! Thanks for looking.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:55:51 AM, on 2/10/2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
C:\Users\Bec\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Sony\VAIO Mode Switch\VMSwitch.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\Sony Corporation\SmartWi Connection Utility\CCP.exe
C:\Program Files\Sony Corporation\SmartWi Connection Utility\PowerManager.exe
C:\Program Files\Sony Corporation\SmartW... Read more

A:Auto play popping up constantly

You might want to try a Clean Boot troubleshooting procedure to hopefully isolate an offending application. Run it for both Services and Startup items.

Another thing you can try:

Download the free Process Explorer.

Run it and click Find.

Click Find handle or DLL...

Search for \device\harddisk.

See if any of the search results might have a reason to be accessing the USB drive.
 

Read other 1 answers
RELEVANCY SCORE 53.2

Every few seconds auto play pops up and immediately vanishes again. It's very annoying, to the point where I can barley use my computer, (I posted this from another computer.) The drive responsible says recovery H, H is my USB but there is nothing plugged in there. The Auto play fixer isn't for Vista 64 bit. I don't want to simply stop auto play as I like it when it works properly. I don't seem to have a windows restore point either. I have done everything I can think of. Any help would be greatly appreciated! Thanks for looking.

A:Auto play popping up constantly

For security reasons, auto-play is not a good idea. There are infections that specifically take advantage of flaws in the system.

You should also enable recovery points, it can be a life-saver if something goes wrong.

You may want to try disabling it and then re-enabling it for specific drives or types of files to see if that will help with your issue:
How to disable the Autorun functionality in Windows

Disable AutoPlay in Windows Vista - How-To Geek

Read other 2 answers
RELEVANCY SCORE 53.2

I have Windows 10 and everything is running ok. Then, yesterday, I ran Windows Update and Update installed THREE updates....

KB3881449, KB3881488, KB3081452

It seems to be a NEW and BAD HABIT of Microsoft NOT to give us any details on what these updates do to our operating systems, what problems they solve, what features they provide or take away or what they modify. It would certainly be helpful in trying to diagnose a nasty problem that develops immediately, doesn't it? I don't like this new attitude at Microsoft of "we will run your computer and you will like it". Anyway, after updating and rebooting, I immediately started having a problem with the new Microsoft Edge Browser. It is now popping up on me without being asked to. This problem started immediately after I installed the updates and I DID NOTHING ELSE on my computer after rebooting.

There are a few things I want to say here...Microsoft DID THIS to my computer. I ran an anti-virus scan and malicious software scan using ESET SECURITY SUITE 8.0 both on my computer and an external ESET Anti-Virus Scan from ESET that sits off of my computer and nothing was found.

I also got ONE OTHER ERROR, I only saw it pop up one time and here it is, attached snapshot of the Error Message attached (it says)...

RUNTIMEBROKER.EXE

"The group or resource is not in the correct state to perform the requested action."

I looked into RUNTIMEBROKER.EXE and it is an operation in Windows 8 and app... Read more

A:Edge Browser is Popping Up on Me Constantly

Edge opening constantly might be malware.

Here's a link to the Malwarebytes blog that discusses those un-closeable Tech-Support-Scam pages and sites:

PSA: Tech Support Scams Pop-Ups on the Rise | Malwarebytes Unpacked
--------------------------------------------------------------------

Edge is installed as the default Windows 10 browser. Here's how to make Internet Explorer the default browser instead.

I believe the icon for Edge is automatically installed on the Taskbar. The icon looks very similar to the Internet Explorer icon.

To pin the Internet Explorer icon to the Taskbar, click on the Start Button, click All Apps,
Scroll down and click on Windows Accessories. Right Click on Internet Explorer, click on Pin To Taskbar.
The Edge icon is a darker blue. The Internet Explorer icon is lighter blue with a gold diagonal arc across it.

Right click on the Edge icon and select Unpin From Taskbar, if you wish.

Now to make Internet Explorer the default browser:

Click on the Start Button, Settings, System, Default Apps, scroll down the Choose Default Apps list and Click on Web Browser - Edge, and choose Internet Explorer from the pop-up menu. This makes Internet Explorer the default browser.

Read other 4 answers
RELEVANCY SCORE 52.8

Hi, I have Avast Home edition installed on my pc and when I logged in today the Avast warning box kept popping up about every 2 mins telling me that it has blocked a malicious url.
The object is: dobihuw.info/posting.php. Infection is URL: Mal and Process is C:Windows/explorer.
I am running the full scan right now and there are no infections found so far so can anyone please help me with this. Thanks you!
 

Read other answers
RELEVANCY SCORE 52.8

We have 2 PCs that keep getting the following popup:

Windows Security Warning
An ActiveX control on this page might be unsafe to interact with other parts of the page. Do you want to allow this transaction?

They have the options of Yes and No, but hitting either one usually just brings the popup back. There are times they're not even in IE when it pops up. I've looked in there settings of IE but nothing looks out of the ordianry. All of our PCs should have the same settings, yet it's only effecting 2. Any thoughts?
 

A:ActiveX Warning Keeps Popping Up

Read other 8 answers
RELEVANCY SCORE 52.8

Hello,
I have a HP Pavilion m6-1045dx notebook with Windows 7 Home 64-bit SP 1, Premium, 8gb Ram, Intel HD graphics 4000, Intel Core i5-3210M.

The attached error codes keep showing up and they show up every 3-5 minutes. I recently just got my laptop back from a repair to the motherboard. They replaced the HDD and re-installed Windows 7 Home Premium and most of my needed drivers. I am also attaching the itinerary work notes of the repair for the computer.

NOTE: the error codes are not consistent after continuous pop ups, though the location of the application error seems to be the same. I realized that the errors are not the same all the time.

What is the cause and how do I fix this?

A:Error Codes popping up constantly every 3-5 mins

This sounds like a driver problem. Can you check to see if Windows is fully up to date and check Device Manager for any next to your hardware.

Read other 3 answers
RELEVANCY SCORE 52.8

Have followed the five steps including the DSS scan, below are pasted the results with main.txt, then the logfile of the HijackThis scan. The DSS extra.txt results are attached.

Deckard's System Scanner v20071014.68
Run by Idjit on 2008-02-07 19:20:01
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
38: 2008-02-08 00:20:04 UTC - RP843 - Deckard's System Scanner Restore Point
37: 2008-02-08 00:13:07 UTC - RP842 - Software Distribution Service 3.0
36: 2008-02-07 14:24:11 UTC - RP841 - Installed SUPERAntiSpyware Free Edition
35: 2008-02-07 02:35:44 UTC - RP840 - Point de v?rification syst?me
34: 2008-02-01 02:53:46 UTC - RP839 - Point de v?rification syst?me


-- First Restore Point --
1: 2007-11-10 17:18:39 UTC - RP806 - Point de v?rification syst?me


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Idjit.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:22:14, on 2008-02-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\ser... Read more

A:virus protection malware constantly popping up

Hello and welcome to TSF.

We'll begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/comb...o-use-combofix

When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system.

Read other 1 answers
RELEVANCY SCORE 52.8

Hi. I don't remember failing to untick a selection, but somehow this crummy Baboom Search element has come onto my computer. I have an Asus desktop computer and have Windows 8.1. and use Google Chrome and Mozilla Firefox. Every time I restart my computer Baboom's invisible extension activates setting Baboom Search to default alongside my Google default search and at this point I cannot remove it as a default program.

There is an option to disable the Baboom Search extension and doing so will make it disappear, but it does not give me the option to find and remove the extension that continually controls my search when I restart.

I have used Windows Defender, Anvi Smart Defender and an Anvi software trial that supposedly allowed one to use a Slim Toolbar option that could find an alter extensions and add-ons but it none of them found Baboom Search.

I cannot find the extension in any extension list, in the uninstall list in the Control Panel, nor can I find the name Baboom anywhere on my computer now that I have deleted a few small files with its name. Since I have been unable to see the extension I have been unable to get its App ID in order to find out what ID I could try deleting in the Roaming App Data on my computer but it feels like I have tried everything else to find and delete it. I even tried to find it in the Registry Editor in the apps section, but it did not appear.

Please, if you can offer me any assistance in taking down this nasty virus that doesn&#... Read more

A:Baboom Search Constantly Popping Up, Hidden

Read other 6 answers
RELEVANCY SCORE 52.8

Somehow, sometime, a certain virus got onto my PC, I'm familiar with the sort, since i had a similar problem when i use to use XP, unfortunately, i don't remember how i removed it, an now a new rogue spyware program has planted it's seeds on my computer once again. It calls itself Antispy Spider and always pops up on my task bar in a small yellow triangle with an exclamation mark saying something like: Windows Security Center
An attack on you computer has been detected
Then it opens the browser (Firefox in my case) and gives me it's page, with the asking me to buy it since it'll protect my computer...Yeah, sure. I'm using McAfee Security Center 2007, which is enough for me. I'm posting my log since i can't find the things that belong and don't and i certainly need to get rid of this blasted Malware.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:25:25 PM, on 10/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Windows\OEM02Mon.exe
C:\Program Files\McAfee\MSK\mskagent.exe
C:\Program Files\DELL\MediaDirect\PCMService.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DellSupport\DSAgnt.e... Read more

A:Antispy Spider constantly popping up on desktop

Read other 6 answers
RELEVANCY SCORE 52.4

I keep getting a pop up that warns me I have low disk space. For awhile I kept deleting stuff and software that I didn't need. I have removed almost everything and I'm still getting this warning. Someone suggested I may have a virus. I don't know how to read these reports so I don't know what it may be called, etc, or if that is the problem. Thank you for your help!
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Roger at 16:16:20 on 2011-08-05
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Cisco Systems\SSL VPN Client\agent.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:... Read more

A:low disk space warning keeps popping up

Hello , And to the Bleeping Computer Malware Removal Forum. My name is Elise and I'll be glad to help you with your computer problems.I will be working on your malware issues, this may or may not solve other issues you may have with your machine.Please note that whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.The cleaning process is not instant. Logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that happen. Please reply using the Add/Reply button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.Unfortunately, if I do not hear back from you within 5 days, I will be forced to close your topic. If you still need help after I have closed your topic, send me or a moderator a personal message with the address of the thread or feel free to create a new one.You may want to keep the link to this topic in your favorites. Alternatively, you can click the button at the top bar of this topic and Track this Topic, where you can choose email notifications. The topics you are tracking are shown here.-----------------------------------------------------------If you have since resolved the original problem you were having, we would appreciate you... Read more

Read other 2 answers
RELEVANCY SCORE 52

I have Malwarebytes Anti-Malware and I get pop up warning every 3 to 4 seconds that it has blocked a Malicious Website.  Its an outbound connection with the warning:
 
Domain: (empty)
IP: (different all the time)
Port: (different all the time)
Type: Outbound
Process: C:\Windows\System32\svchost.exe
 
When I received the laptop from previous owner, Avast virus protection was installed but not updated.
I removed it and installed Malwarebytes Premium and Eset Nod32 virus protection.
Ran MBAM and quarantined infections (lMBAMlog.txt file attached), Eset found nothing.
 
It was after MBAM install that running on the wireless connection began to produce the above stated pop-ups.
When MBAM is activated, the pop-ups start immediately and I loose wireless internet.
If wireless is turned off, no pop-ups.
Wireless connection is reestablished once I deactivate MBAM.
 
In  my attempts to fix, I also ran RogueKiller and got rid of a bunch of pum.dns
 
I also notice that what ever I search for in IE goggle, the top return is always a link to "Raaz.io/SafeSearch Install Now"
I downloaded and ran the Farbar recovery Scan Tool and my log is attached.
Thank you for looking at my topic,
Pilgrim.
 
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:29-12-2015
Ran by Sidney (administrator) on SIDNEY-PC (29-12-2015 15:01:50)
Running from C:\Users\Sidney\Desktop
Loaded Profiles: Sidney (Available Profiles: Si... Read more

A:Outbound "Malicious Website Blocked" constantly popping up

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Remove these programs in bold Via the Control Panel > Programs and Features applet.VideoDownloadConverter Toolbar Chrome Extension (HKLM-x32\...\VideoDownloadConverter_4z Chrome Extension Uninstall) (Version: - Mindspark Interactive Network) <==== ATTENTIONWSE_Astromenda (HKLM-x32\...\WSE_Astromenda) (Version: - WSE_Astromenda) <==== ATTENTION===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file.

start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\RunOnce: [Fesulok] => C:\windows\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\Sidney\AppData\Local\29d7106b1506c019\Dufaku.dat"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
CHR HKU\S-1-5-21-1747975209-1935908775-2939679204-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1747975209-1935908775-2939679204-1000\SOFT... Read more

Read other 9 answers
RELEVANCY SCORE 52

This post is following instruction by BRONI to ID my system to try and remove Tidserv Activity 2 problem. Norton is still popping up warnings of the virus. I started at step 6 and ran DeFogger. Then step 7 and produced two logs - Attach.txt(Zip file) and DDS.txt.

Next, Step 8, I downloaded GMER.zip, unzipped and ran the program. I followed the instructions about unchecking. The program did not finish. I received a Micorsoft error window stating that the program had an error and asked if I wanted to send an error report to Microsoft. I clicked Send Report and the progrma ended. I attempted to run the GMER program again and it crashed my computer.

I got the Blue screen error that indicated it stopped the computer to prevent damage. It displayed a line "IRQL_NOT_LESS_OR_EQUAL". I had to manually shut down computer and reboot. The system came up without problem thought I still get the Tidserv Activity 2 warning.

A:TDSS Still popping up warning and GMER Problem

hi Chip4par,

Your post is a few days old. If you still need help simply reply back.

Read other 1 answers
RELEVANCY SCORE 52

Hey guys, today while browsing the web I visited a website that tried to automatically download an exe file. UAC blocked the download but something still was able to get through. Now Avira pops up two messages every minute about "TR/FakeAV.ijh" the path to file is in my temp dir but when I try to look in there the file isn't present. Here's my Hijack This log maybe you guys can see something I can't? It's annoying trying to use my laptop with these two messages popping up every minute.Logfile of Trend Micro HijackThis v2.0.4Scan saved at 4:15:48 PM, on 10/4/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18943)Boot mode: Safe mode with network supportRunning processes:C:\Windows\Explorer.EXEC:\Program Files\TortoiseSVN\bin\TSVNCache.exeC:\Program Files\Avira\AntiVir Desktop\avcenter.exec:\program files\avira\antivir desktop\avscan.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Users\Arial\Desktop\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=548... Read more

A:Avira popping up virus warning every minute.

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

Read other 3 answers
RELEVANCY SCORE 52

My documents is constantly popping up on its own. Also in the lower right corner tray a warning security report Your computer is infected! Its is recommended to start spyware cleaner tool. When u click the X in the tray the website for antivirus-xppro.com comes up. When i open IE at the top of the page a banner is up stating : Warning your system is in danger. your computer is in need of full scanning.Its linked to www.antivirus-xppro2009.com/cgi-bin/download.pl?code=657. Also on the desktop background is a warning box that states:Warning dangerous spyware Following viruses were founded on your computer: Trojan horse, PassCapture and etc. your private information may be potentially transferred to third parties, Please, check computer using advance software thanks.

We have 4 pc's on a network. Please help me remove this if u can thanks so much.

A:My documents is popping and warning security report

Some types of malware will disable MBAM and other security tools. If MBAM will not install, try renaming it.Before saving any of your security programs, rename them first. For example, before you save Malwarebytes', rename it to something like MBblah.exe and then click on Save and save it to your desktop. Same thing after you install it. Before running it, rename the main executable file first

Right-click on the mbam-setup.exe file and change the .exe extension to .bat, .com, .pif, or .scr and then double-click on it to run.

If after installation, MBAM will not run, open the Malwarebytes' Anti-Malware folder in Program Files, right-click on mbam.exe and change the .exe as noted above. Then double-click on it to run..Another work around is by not using the mouse to install it, Just use the arrow keys, tab, and enter keys. ~ Courtesy of boopmePlease download Malwarebytes Anti-Malware and save it to your desktop.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that... Read more

Read other 1 answers
RELEVANCY SCORE 51.6

Hello, for the past three days I have been trying to access my computer. I'm quite positive I have a malware infection but I have no idea where it is. I am running Windows Vista Home Premium SP2 32bit.

As soon as I boot up my computer an error pops up before the password screen. It reads LoginUI.exe - Bad Image in the top bar and then gives the description:

error. C:\windows\system32\WinTrust.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.

I have to click okay about 20 times before i can access the main login screen. Once i login i get another error similar but instead says Skype.exe - bad image. My windows virus protection has been disabled, and I am unable to open any virus program other than Avast and S&D. I get similar errors to the others when trying to open Norton or Ad-Aware. Even while I was trying to type my topic title to this thread, errors would come up every letter I typed.

Oh and one more thing. I am receiving window's errors constantly, the most common being Windows sidebar encountered a problem and closed, windows live id encountered a problem and closed, and gusvc encountered a problem and closed. I also cannot access msn messenger and my sound has been disabled

any help would be appreciated.

thank you in advance,

jonathon :

Read other answers
RELEVANCY SCORE 51.6

Hi!

I started getting attached pop up in my taskbar few days back and it has intensified since then. It now pops up every 2-3 min and disappears instantly. Managed to get it in screen shot.

Did bit of on-line search and there are few similar cases too but i am not sure about the reason behind it starting in my machine and solution to it.

I was getting some Bluetooth related message in Skype since i started using it just from few days back. Had skype since beginning but never used it before. Could this be because of it ? Should i uninstall and install skype again ?

And this is the first time i am facing any problem on this machine (HP Laptop with Windows 7 OS), it is about a year old.

Any suggestion appreciated!!!
Thanks
 

A:Unknown program quickly popping up and disappearing in task bar constantly

Read other 16 answers
RELEVANCY SCORE 51.6

Hello!
I would appreciate any help whatsoever! This virus, or whatever it is, has me stumped!
I think I have been hijacked, only on internet explorer-when checking task manager, Internet explorer is always running, even when I "End Task" . Mozilla Firefox is working fine, but Internet explorer pops up both visible and invisible windows, and constantly asks me to make it my default program!
I suspect malware, and possibly a virus, but my spyware program cannot find anything besides cookies. My antivirus program pops up saying it has deleted multiple trojans, but something is definitely going wrong!

here are is my Hijack this log
Logfile of random's system information tool 1.04 (written by random/random)
Run by Brennan at 2008-11-05 19:05:05
Microsoft Windows XP Professional Service Pack 3
System drive C: has 34 GB (59%) free of 57 GB
Total RAM: 478 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:05:18 PM, on 11/5/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mo... Read more

A:Hijacked? Internet Explorer constantly running and popping up, but I use Mozilla!

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

Please copy this page to Notepad and Save it to your Desktop in order to assist you when carrying out the following instructions.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.
Ensure that there aren't any opened browsers when you are carrying out the procedures below.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

------------------------------------------------------

Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.

Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.

------------------------------------------------------

Please uninstall the following via Start->(or My Computer)->Control Panel->Add or Remove Programs if they still exist:

Viewpoint Manager
Viewpoint Media Pl... Read more

Read other 2 answers
RELEVANCY SCORE 51.2

I have windows 8.1 and it seems like every couple of tabs I try to open, I get a "Warning Your Flash Player Needs Updating" message and now lately I've been getting redirected to other sites.  This problem happens in both IE and Google Chrome.  I've run AdwCleaner and Malwarebytes as suggested from a help tutorial I found online, but neither have found anything and the problem is still there.  Any suggestions would be appreciated.

A:Flash update warning popping up when I open new tabs

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeList Restore PointsClick Go and post the result. Please download Malwarebytes Anti-Malware to your desktop.NOTE. If you already have MBAM 2.0 installed scroll dow... Read more

Read other 1 answers
RELEVANCY SCORE 51.2

I somehow got infected with some spyware. I have done some research and found that it is called "Spysheriff". Although I have not downloaded the actual "spysheriff" fake spyware program, I have a red circle with a white X in my toolbar that hits me with a popup every few seconds saying that "Windows has detected a spyware infection! It is recomended to use special antispyware tools to pervent data loss...." I'm searched it online and many people have had the same thing. I ran a hijackthis log but I have no idea what to do next. Here it is:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:20:58, on 10/9/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Jen\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {58D6D2F1-EA43-4772-AA81-B076BEBF6412} - C:\WINDOWS\system32\drpro.dll
O3 - Toolbar: Verizon Broadband Toolbar - {4E7BD74F-2B8D-469E-8CB0-AB60BB9AAE22} - C:\PROGRA~1\VOL_TO~1\VOL_TO... Read more

A:First time hijackthislogger, I have a false windows warning popping up.

Hi there jennifah

Welcome to TSF

Thank you for your patience. I will be helping you deal with the issues raised in your log from this point onwards

Before we start jumping into things, here is a quick basic note which I mention to everyone. The fix which I have provided for you is for this computer only, it should not be used on any other computer. Each fix is tailor made for the specific task in hand. If for some reason you have system restore disabled, then please re-enable it before proceeding, an infected restore is better than none. Please read through the fix first and set enough time aside to complete the task in one session. If there is anything you feel needs clarification then please ask - do not guess! Please copy and paste any requested logs into replies rather than add as attachments, this makes it easier for analysis.

If this is a computer from a work place then please advise your IT department of the concerning issues before commencing past this point.

Please follow these directions in the order they are set out for you.

Please scan with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a proble... Read more

Read other 1 answers
RELEVANCY SCORE 50.8

Some program keeps popping up for a split second on my task bar every few minutes, and I can't figure out what it is.
It's pretty annoying because whenever it happens it switches the current window's focus.
It seems to happen randomly, and not at a set time interval.
I don't think it's malware... but I could be wrong. It pops ups and disappears much too quickly to identify it.
How can figure out what it is? (Btw, I'm running Windows 7.)
 

A:Solved: Unknown program quickly popping up and disappearing in task bar constantly

Read other 8 answers
RELEVANCY SCORE 50.8

The sound with both speakers/ headphones on my laptop is constantly making "popping" sounds, and sometimes it even stutters - very aggressively and without putting any load on the laptop - even with a simple mp3 playback.I've tried EVERYTHING - Realtek / Lenovo / Windows drivers, uninstalled Windows, wasted so much precious time on it.This is the second damaged unit I get from lenovo in a month's time. I hope they can provide a quick solution for this problem, or else I'm returning this laptop and never buying / recommending Lenovo ever again. 

Read other answers
RELEVANCY SCORE 50.8

Hi there,
 
I switched on my computer today and I can't get onto the internet. Every time I run Explorer (my home page is set to Google), a pop up from Avast says that it has blocked the site because it is a malicious URL. I guess that I've probably picked up some virus/trojan, but I have no idea how to start to get rid of it. I have temporarrily disabled Avast so I can get onto the Internet.
 
Any help would be genuinely appreciated,

A:Avast keeps popping up with Malicious site URL warning every time I run Explorer

Hi there,my name is Marius and I will be assisting you with your Malware related problems.Before we move on, please read the following points carefully.First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.Perform everything in the correct order. Sometimes one step requires the previous one.If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.Please download Farbar's Recovery Scan Tool to your desktop: FRST 32bit or FRST 64bit (If not sure: Start --> Computer (right click) --> properties)Run FRST.Don´t change one of the checkboxes and hit Scan.Logfiles are created on your desktop.Poste the FRST.txt and (after the first s... Read more

Read other 48 answers
RELEVANCY SCORE 50.4

Hello,

My Norton 360 Antivirus keeps blocking intrusion attempts. There are a serious of different attempts every 20-30 minutes.

From the Norton Security Log,

Risk Name: HTTPS Tidserv Request 2
Attacking Computer: 01n02n4cx00.cc (91.212.226.5,443)
Source Address 91.212.226.5 (91.212.226.5)

Risk Name: HTTPS Tidserv Request
Attacking Computer: 91.212.226.182, 80
Attacking URL: 7gafd33ja90a.com/ (very long)

Risk Name: HTTP Misleading Application Detection
Attacking Computer: 91.217.162.190, 80
Attacking URL: xp-scaner.com/dm-php? (very long)

Also the Just In-Time Debugger keeps popping up on the main screen. I'm not sure if this is somehow related to viruses or attacks or simply a system error.

Please provide any assistance that you can in helping resolve this issue. I appreciate your help. Thank you!

James

A:Norton is constantly blocking Instrusion attempts by several different attackers and Just-In time debugging keeps popping up.

Hello,Please follow the instructions in ==>This Guide<==. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it ==>HERE<== Please include a description of your computer issues and what you have done to resolve them.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.Orange Blossom

Read other 2 answers
RELEVANCY SCORE 50.4

DDS (Ver_10-12-12.02) - NTFSx86
Run by HP_Administrator at 19:52:23.07 on Fri 02/11/2011
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1982.921 [GMT -6:00]

AV: Norton 360 *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton 360 *Enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Canon\Memory Card Utility\iP6700D\PDUiP6700DMon.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Portrait Displays\Pivot Software\wpctrl.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Hp\... Read more

A:Norton is constantly blocking Instrusion attempts by several different attackers and Just-In time debugging keeps popping up.

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!These instru... Read more

Read other 26 answers
RELEVANCY SCORE 50

Okay so lately my computer has been just randomly shutting down. This didn't happen before when I first built it. Specs:

M4A88TD-EVO
4GB Mushkin Enhanced Silverline 1x4GB
AMD Phenom II X4 955
Corsair HX750
HD 4250 integrated
Samsung Spinpoint F3 1TB HDD
OCZ Vertex II 60GB SSD
 

A:Solved: Computer constantly shutting off without warning

Read other 16 answers
RELEVANCY SCORE 50

I previously posted in the "Am I infected? What do I do?" forum. The complete thread is here.I'm running Windows XP, with Symantec factory installed. I've been having issues where Symantec will pop up with threat alerts, saying it has found threats. Sometimes the "list" is blank; others it's shown one or two threats; after using other tools as recommended in my previous thread, it occasionally showed a list of around 10 threats, some of which appeared to be repeats (same file name, same location). They are all Trojan horses.All attempts to remove the viruses with Symantec seem to do nothing; the threat alerts simply reappear. I have been unable to run Malwarebytes Anti-Malware in normal mode, but even after running it in safe mode and removing the threats, there is no change; as soon as I reboot my computer, Symantec pops up with more of the same "found threats."If I ignore the threats, my computer eventually stops responding. It doesn't completely freeze, as I can still move the mouse, but the computer will not respond to any mouse clicks or keyboard commands.In my "Am I infected? What do I do?" thread, my handy helper Gunto led me through a number of steps. I used the following tools:TDSSKillerAdwCleanerRogueKillerSUPERAntiSpywareMalwarebytesESETJunkware Removal ToolI had to run SAS, MBAM, and ESET in safe mode, as they would not run in normal mode. Everything else ran successfully in normal mode.The process s... Read more

A:Symantec constantly warning about Trojans, they seem to respawn.

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.===Please download ComboFix from one of these locations:Link 1Link 2* IMPORTANT !!! Save ComboFix.exe to your DesktopDisable your Anti-Virus and Anti-Spyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
Close any open browsers, and all other programs working. Make sure you save your file if working on a document.
Do not install any other programs until this if fixed.[/b]
Double click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
Some Rookit infection may damage your boot sector. The Windows Recovery Console may be needed to restore it. Do not bypass... Read more

Read other 8 answers
RELEVANCY SCORE 50

The computer will just restart itself out of the blue with no prompt or warning, started maybe 2 weeks ago but the restarting is getting more frequent. There are a few things running in process that look questionable, i can't remember the names exactly but I googled it and it said it may be a trojan. That is really the only thing weird it is doing is these random restarts. It is also a bit slower on startup but i had just chalked it up to having so many pictures on my computer.
I have scanned it numerous times and when it finishes, it says clean but usually it won't even get to finish before it restarts again. I have ran bitdefender 2016, windows scanner tool and malwarebyes and it hasn't shown up anything overly concerning but Today alone, it has restarted 10 times. It is definitely worse today then any other time since I noticed this. I have had windows 10 on here for 2 months.

Read other answers
RELEVANCY SCORE 49.6

I have a 6 years old laptop that is constantly shutting down by itself without warning during startup.

This happened after I downloaded an ebook.

The shut down occurred more during starting up the laptop about 6 times before reaching the logon screen.
It normally shuts down a few times in normal use like surfing the web, downloading, or even when I was running hardware tests or HDD error checking.

At first, I thought the Toshiba HDD was nearing it lifespan. I did a test on the HDD. Please read 6 yo Acer Aspire laptop can't boot due to sysconfig changed & disk err. The constant shutdowns that occurred, damaged the Toshiba HDD severely especially the MBR.

I already performed Windows MemTest.
All OK, normal bootup without any problems.A pop sound!.Shutdown again after 25 minutes of use.

In safe mode, no shutdown yet in a minute or two. I did not keep the Acer power on in Safe Mode for more than 5 minutes.So the test is inconclusive.

Then I did a re-installation of windows 7 on a new Western Digital HDD. Please read I am totally blank on installation of Windows 7 on a new HDD.

After re-installation of windows 7 on a new WD HDD. The new WD HDD will auto shutdown every time during startup or bootup even before reaching the logon screen or after I logged in or when I was installing the drivers 10 to 20 minutes after startup or bootup .

I am now using the old Toshiba HDD to access the WWW.

Did search using google, next going to clean the fan.
Maybe BIOS,RAM or mobo p... Read more

A:Acer Aspire 4736G constantly shutdown by itself without warning

Sounds like a power problem.

Can you get your hands on another power supply to test with?
Do you have a multimeter you can use?

Could also be an overheating or a CPU fan problem.
Check that the CPU fan header is plugged in properly, then watch the fan at startup for any hiccups.

You can also boot directly into the BIOS settings and go to the monitoring section (different on every MB) and check your temps and voltages, at start - in 15 min - at 1 hour. See if there is any notable changes.

Read other 9 answers
RELEVANCY SCORE 49.6

I discovered today that my desktop had the blue screen witth the rectangular box in the center of the screen that said "Warning! Spyware detected on your computer" in yellow. Below that in blue it said "Install an antivirus or spyware removal program to clean your computer". My problem is that when I log in to Windows the computer is very slow & sluggish & then reboots. I am unable to access any programs or the internet. Any help would be greatly appreciated!

Thank you!

Update:

I was able to log in to Windows on one try and I was able to complete Step 1. I was not able to access internet to complete step 2 so I went into safe mode with networking. No luck as the internet connection keeps cutting out. It also affects my internet performance on my laptop which I am using to post here as my desktop is the infected computer and I cannot reach any websites so I am currently stuck. The computer also just logged itself out of safe mode & started to reboot again. Help!!

Thanks!!

A:Spyware Detection Warning/Computer reboots constantly

Bump:

Any idea if I have any options short of reformatting the hard drive?

Thanks!

Read other 10 answers
RELEVANCY SCORE 46.8

Since upgrading to Windows 10, on my Alienware 17R3, I Constantly keep getting a popup to "update Your Recovery Media".  I did update my recovery media immediately after upgrading to windows 10, But I still keep getting the popup every time i reboot my laptop and almost every hour or so.   I have clicked on "Do Not remind me" option on popup , but  I Still Get it!
I figured it no harm to trying to update my recovery media again just a couple days ago to see if I could get rid of the nagging popup, But I am still getting it.   Has anyone else experienced this and know any solution/suggestions?? 

A:"Update your Recovery Media" Constantly popping up. (Even after updating already)

Try asking your question in the Alienware owner club forum.

Read other 5 answers
RELEVANCY SCORE 46.4

Every time I try to run a program, I get a popup asking "how do you want to open this file". Is there any way to disable this annoying Windows 10 issue? A user on a Microsoft thread I found posted the following:

I found a free tech support site that resolved the problem.

http://techguy.org

It was an update that was missing information.

Please help!!

Thanks!
 

Read other answers
RELEVANCY SCORE 46.4

I did a search on this site, hoping to find someone else had this problem, but I came up empty handed.

My annoying problem is that I am using IE 6.0, and the "Work Offline, No internet connection is currently detected, blah blah blah" window keeps popping up! It will pop up even if I don't have IE 6 loaded. If I shut down all of my browsers and walk away, when I come back, there will be like 40 taskbar buttons, all the same, this annoying 'work offline' window has popped up over and over.

I have tried an IE repair, under the add/remove program. Didn't work. I am using AOL to get online, if that matters. But even if AOL is not loaded, nor any browsers, this "work offline' still pops up.

Can someone help? Thanks...
 

A:IE 6 "Work Offline" popping up constantly

Read other 11 answers