Over 1 million tech questions and answers.

AVG detects threat and keeps healing

Q: AVG detects threat and keeps healing

Logfile of HijackThis v1.99.1
Scan saved at 4:01:52 PM, on 1/6/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\System32\fscagent.exe
C:\WINDOWS\System32\update\1.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\update\7.exe
C:\WINDOWS\System32\8.exe
F:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ClubBox] "C:\WINDOWS\System32\clubbox.exe" -l
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Regscan] C:\WINDOWS\System32\regscan.exe
O4 - HKCU\..\Run: [RealUpdate] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Update.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O16 - DPF: {072039AB-2117-4ED5-A85F-9B9EB903E021} (NowStarter Control) - http://www.clubbox.co.kr/neo.fld/NowStarter.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe

thank you.

RELEVANCY SCORE 200
Preferred Solution: AVG detects threat and keeps healing

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: AVG detects threat and keeps healing

Read other 16 answers
RELEVANCY SCORE 74.4

AVG keeps on detecting "virus found exploit" with the file extensions of .htm/.html. while in the healing process, it would result in error along in the process...
i dunno what to do but here is the HiJackThis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 947 PM, on 12/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Sony\MD Simple Burner\NetMDSB.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Hp\HP Software Update\HPWuSch... Read more

Read other answers
RELEVANCY SCORE 63.2

Hi!

My antivirus has detected a threat called: okiviman.ini and okiviman.tmp

Are these dangerous?

(I posted in the wrong forum section at first)

A:My antivirus detects a threat

Anytime you come across a suspicious file for which you cannot find any information about, the file has a legitimate name but is not located where it is supposed to be, or you want a second opinion, submit it to Jotti's virusscan or VirusTotal. In the "File to upload & scan" box, browse to the location of the suspicious file and submit (upload) it for scanning/analysis.In your case the files appear to be related to malware.Please download Malwarebytes Anti-Malware (v1.36) and save it to your desktop.alternate download link 1alternate download link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them fro... Read more

Read other 15 answers
RELEVANCY SCORE 62.4

Computer infected with high risk cloaked Malware. Prevx 3 detects svchost.exe in windows\temp\aywp.tmp\This also appears in several windows\temp directoriesI also keep getting a pop up from AVG threat detection91.213.121.11/download/new1.exe Trojan horse PSW Generic7.BEMV Object was blockedProcess name C:\WINDOWS\system32\svchost.exeProcess ID 1632I have run AVG but it doesnt detect any virus whereas Prevx detects, I run the clean function but it keeps reappearing.I also keep getting sent to incorrect web addresses when I click on a link from a google search.Your help in fixing this problem would be really appreciated.My dds.txt logDDS (Ver_09-12-01.01) - NTFSx86 Run by KevW at 5:26:07.56 on 28/01/2010Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_17Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.138 [GMT 0:00]AV: Spyware Doctor with AntiVirus *On-access scanning enabled* (Updated) By default we load generic code, php, css, sql and xml/html; load others here if desired 4AV: AVG Internet Security *On-access scanning enabled* (Updated) By default we load generic code, php, css, sql and xml/html; load others here if desired 3FW: Norton Internet Worm Protection *disabled* By default we load generic code, php, css, sql and xml/html; load others here if desired 2FW: AVG Firewall *enabled* By default we load generic code, php, css, sql and xml/html; load others here if desired 1============== Running Proc... Read more

A:Prevx 3 detects svchost.exe threat

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 18 answers
RELEVANCY SCORE 62.4

Hello!
I use Avast! Free antivirus & just recently, while browsing on Google chrome, I received a message from Avast saying they detected & blocked a malware threat. I closed it and continued browsing but the message would keep appearing each time I opened a new page or refreshed the current page. 
I tried firefox and had the same results. I ran a quick scan with MBAM but nothing turned out. I'm also not receiving the messages from Avast any more so I'm not quite sure if I've been infected or not. 
 
Some help & advice on what actions to take would be greatly appreciated! 
Edit: I forgot to mention, my OS is Windows 8.

A:Avast detects URL:Mal threat on every page

Hello Iris I would think Avast just did its job and prevented malware.. I would suspect wherever you were visiting may have been suspicious.Let's take a look and get some junk off that is probably on here now anyway.Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the con... Read more

Read other 9 answers
RELEVANCY SCORE 62.4

Hi everyone,

I currently use 3 free security programs : Avast 6, Microsoft security essentials and Malwarebytes.

I just ran a quick computer scan with Avast and just when the scan completed I got an alert from microsoft security essentials :

Does this mean that there's a virus located in my Avast temp folder? Or maybe MSE doesn't get along too well with Avast??

I wont remove the file until I get an answer cuz I'm affraid this could de-activate Avast!

Please help!

A:MSE detects a threat in Avast folder!

It's generally not advised to run multiple Anti-virus at the same time. They don't agree with each other, resulting in a lot of conflicts with virus removal as well as a multitude of other things.

For example, they could both latch onto the same infected file and try to delete it. Obviously, this doesn't work very well, usually ending in a terribly slow computer. Similar problems occur if one AV quarantines a file while the other AV tries to delete it. I once had BitDefender and Trend Micro installed on the same computer. My computer was so slow, it was barely usable.

Most AV software nowadays attempts to detect and remove other competitors at installation. it's probably for the best as having more than one AV will probably cause you more problems than do you good. If there's any AV software you prefer, I recommend keeping it and uninstalling the others. Malwarebytes in my opinion, is great. You should be able to use it in conjunction with avast! or MSE though as it doesn't offer real-time protection. Though in the end, it really comes down to what you feel more comfortable with. Alternatively, you may have to set exclusions for the related file folders in order to avoid any complications.

Read other 9 answers
RELEVANCY SCORE 62

Ive always trusted Spybot SD, and it has always detected a lot of adware and spyware etc. Anyway, while doing a scan, it detected something called BPSS Spyware Remover. Ive never head of such a program on my PC, and I never remember downloading it so I figured I would delete it like all threats found by Spybot. However, when I click on it, it is labeled as a Registry Key, so I'm obviously wary of removing it. The information on the threat is as follows:

Company: Bulletproof Soft
Threat: Malware

Functionality: Supposed to be an anti-spyware software.

Description: Downloaded through an .exe file. Uses false posotive in order to threaten the user to purchase the full version. It also flags Spybot SD. Used to have Users a stolen Sybot SD database and therefore is a copyright infrigment.


Should I delete this or what? Remember, it is a registry key!

A:Spybot SD detects a Registry Key as a threat...delete?

Hi

That is a rogue application - see here

http://www.spywarewarrior.com/rogue_anti-spyware.htm

and scroll down to BPS Spyware & Adware Remover

Allow Spybot to delete the Registry key - it will be quite safe.

Read other 2 answers
RELEVANCY SCORE 62

Everytime I open Internet Explorer or sometime's just browsing through my C Drive, this message would appear:

*******************

Real-time Scan
Trend Micro PC-cillin Internet Security has detected a virus, spyware application, or other Internet threat, and performed the action specified.

Infected file: C:\WINDOWS\system32\winlogon.exe
Virus name: TROJ_Generic
User name: Exciddius
Scan action result: The Quarantine action was unsuccessful. Manually delete the file if you are sure that it is not needed.
Note: If Search for and clean Trojans is enabled and is executed after scanning, you can click Next to view final scan result information.

*******************

I have Trend Micro Internet Security 12 and have run the antivirus but didnt seem too clear it. I have also tried using AVG Antivirus, but same thing. I've ran CCleaner, Xoftspy, and Ad-Adware, but I still get the pop up. This has only started happening today, last night I never once recieved such a pop up. I've tried searching for a thread about this, but usually came up with some specific trojan, if there's one that helps fix my problem, please direct me to it, in the meantime I'll keep searching, thanks.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:49:32 PM, on 7/14/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOW... Read more

Read other answers
RELEVANCY SCORE 62

Hi

I keep getting messages from Avast that a malicious URL has been blocked in process C:\windows\system32\svchost.exe
It also discovered a rootkit when I ran a boot scan.

I've tried to get rid of this but it keeps returning:(
Any help would be greatly appreciated.

Thanks.

A:Avast detects threat in svchost.exe + rootkit

OK now. TDSSKiller did the trick.

Read other 2 answers
RELEVANCY SCORE 48

This is an older via chipset 1.5 Sata with a sata 3.0 WDC 1TB drive, and I have the OPT limiter jumper in place
Problems encountered installing SATA 3.0 Gb/s hard drives on SATA 1.5 Gb/s controllers

Before I put the jumper on the drive, the bios ignored the WDC sata drive. With the jumper in place, the bios detects and recognizes the drive.
In the bios setting, I turned on SATA enabled and set from raid to IDE.

But when boot Windows or Linux, the drive is not showing up in disk management or anywhere.

So how can I get the OS to see the drive?

A:Sata drive bios detects, but os not detects neither windows or linux

well it is not solved, but clonezilla nows sees the drive, and is cloning the IDE onto the SATA.
perhaps a flaky connection?

I got a 1tb SATA for an external storage drive and wanted to see if it could work on this older MB 1.5 SATA connector. See if the drive did any better than the 320 GB IDE Maxtor drive.

Drive is Cavier Green Sata WD10EADS

Read other 2 answers
RELEVANCY SCORE 47.6

I just did a lot of playing with all of my computer equipment in order to learn a bit...anyways I took my 300 gB HDD from one computer and put it on a lesser computer, on which I am going to install an evaluation version of Win2000 Server. Then I took the 40 gG HDD from the lesser computer and put in on the better computer.

Ok...now the problem...Win2000 server setup recognizes 131068 mB of hdd space on two seperate unpartitioned spaces. And I find this abnormal for 3 reasons...
first - I know windows will only recognize 137 gB of each partition, but why 131 gB.
second - usually unpartitioned space is combined into one, not 2 seperate spots
And by the way, everything worked fine before the HDD swap and everything reads fine in the BIOS.

I also tried to partition the hdd before the installation with a seagate utility that came with the hdd, but windows wouldn't recognize that properly either.

Thanks for any suggestions.
 

A:Setup only detects 131068mB of HDD space, but bios detects all of it.

The 'lesser' PC may not be able to handle such big HDs. Check that 48-bit support is available and activated in the BIOS. Or get a BIOS update.
Also, check the Master/Slave jumpers. And are you using 40-wire IDE cable instead of 80-wire?
 

Read other 6 answers
RELEVANCY SCORE 46.4

Listen, guys,
MY OS: WinXP
Antivirus: AVG
VIRUS NAME: Trojan Horse PSW.Generic2.QEO ... i didnt find single link on internet.
File size: 3,88kb

I noticed the file keeps popping up -- C:\Windows\system32\CsdDriver.sys , I was reading a post here http://forums.techguy.org/security/502809-solved-virus-keeps-popping-up.htm , but there is a bit different, it pop ups again and again, I updated my AVG, its fixing it, but it appears after a few seconds. The thing is that there are no C:\WINDOWS\system32\UpperHost.dll file... And this is quite odd, if there was, I could act as the man said in the previous Link..

Here is my Hijackthis log:

Logfile of HijackThis v1.99.1
Scan saved at 22:21:16, on 2006.11.14
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Notepad++\notepad++.exe
C:\Program Files\Borland\InterBase\bin\ibguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files... Read more

A:Please, help me healing this one virus :|

Read other 8 answers
RELEVANCY SCORE 46.4

Hi,

I have AVG internet security installed on my computer. It runs really well (despite it slowing my computer slightly )

However when I run a scan, reaching the end, it automatically begins "healing" any threats it may have come across. This is all well and good but when it gets right to the end of this process it seems to get stuck almost like it crashes. My cursor turns into the sand timer and "(NOT RESPONDING)" appears in the top of the window?!

It's not a massive problem but I thought I'd post the query in case there's either something I'm doing wrong or in case anyone else has encountered this problem before.
 

A:AVG Stuck Healing

Hi Mr C, Please stop creating new threads on same subject. You have 2 going already and a moderator will have to close 1 of them.
 

Read other 2 answers
RELEVANCY SCORE 46.4

I recently wrote a review of a just-being-released addition to the ThinkPad line, the 14? T490s.  My writeup was based on the one system I had in front of me and, as always with pre-released systems, documentation was sparse at best.  The computer had very early drivers and system software but was remarkably stable and reliable.  New system software started to appear, and I noticed a new BIOS image, that was described as the initial release, but was substantially newer than what was on my computer.  I always try to apply updates as early as possible on any machines I review, hoping to identify any unexpected issues before the general market.  During the BIOS update, a message I had never seen flashed by.  As a result of nothing more than blind luck, my camera happened to be within reach and the battery was charged.  I apologize for the quality of the photo, but there was no time for staging.
 
New message
 
Based on what I can ascertain, the process is intended to be completely invisible to the user, other than the message I noticed.  After a BIOS update, the BIOS restarts and, after initialization, the image is backed up before booting into Windows or another operating system.   On subsequent startups, if there is a problem starting, the backed-up BIOS image is restored automatically.  In some ways, this is similar to the way Microsoft handles drivers in Windows. 
 
As I would expect, Phoenix Techno... Read more

Read other answers
RELEVANCY SCORE 46

Hi, for the last few months I have been using AVG, and in that time I have encountered a few viruses, mainly called JavaByte/Verify, that will not heal, delete, or move to virus vault. Can someone tell me why?
Thanks a lot.

A:Help with AVG removing/healing viruses.

I have ran into this on a clients computer he wanted me to fix. The only way I removed it was to slave the his drive into my test bench computer and used F-Secure to remove it.
Another note. Turn off system restore when removing viruses or removing spyware/malware.

Read other 3 answers
RELEVANCY SCORE 45.6

I spent the night at my sister's the other day. She was agitated while using her laptop. Typical complaints, it is slow to respond, some programs won't open at all, and pop ups. I ran a few of the scans that I've used in the past and it's more responsive, there aren't any more popups flashing, but it still lags. I am hoping some wise soul on here can take it to the next level.

Thanks in advance!
 

A:Healing my sister's slow laptop

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-04-2015
Ran by Cyndy (administrator) on SANDERS on 24-04-2015 11:28:21
Running from C:\Users\Cyndy\Downloads
Loaded Profiles: Cyndy (Available profiles: Cyndy)
Platform: Windows 8.1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Sear... Read more

Read other 20 answers
RELEVANCY SCORE 45.6

I am using AVG Free version 7.5 and it is updated but it doesn't heal viruses anymore example RavmonE.exe that can be healed by other computers with AVG FREEMoved from the "XP" Forum. ~acklan~

A:My Avg Free Is Not Healing Viruses Anymore!

Do you have any other anti-virus software on your computer or something loike security suite?

Read other 1 answers
RELEVANCY SCORE 45.6

I have had this issue for many months, now. I loaded Vista x64 Home Premium to run in a dual-boot configuration with my XP Pro. I do critical work so I didn't trust going to Vista exclusively. I mainly wanted it to see if I could utilize all my RAM and speed up Photoshop processing.
I have had it working three or four times, (except for tablet functionality) then when I must re-boot because of SP1 and other security updates or in one case, I installed Office 2007, it does nothing on restart; black screens and just sits there, totally unresponsive. No blinking of the LED which shows drive activity. When re-booting, F8 isn't working (nothing happens). Regarding the previous instances, I gave up trying to get it to respond and went back to booting into XP, which always works fine. Then after a period (usually a month or more) I will try booting into Vista, on restart, and viola, it works again!
WTF is going on?

ASUS A8N32-SLI Deluxe motherboard
AMD Athlon 64 X2 4400+ Toledo: 2,400 Mhz on air (10% OC)
Thermalright XP-90C with 92MM Thermoflow temperature sensing fan
4 Gig of OCZ Titanium DDR400 (PC3200) dual channel, unbuffered RAM
MSI NX6600-TD256E video card & dual 24? wide screen LCDs setup
2X - WD 250Gb 7200RPM SATA main drive, w. 16Mb cache
(one for XP Pro and one for Vista x64 Home Premium)
2X - Fujitsu MAU3036NP (15K RPM hard drives running SCSI 0 [striped])
Lian 7077A - full tower case with optional 120mm fan in top,
90mm fan (stock AMD-CPU) angled facing MB chips... Read more

A:No reboot after updates and then mystery healing

How did you set up the dual boot?

Read other 8 answers
RELEVANCY SCORE 45.6

I'm currently disturbed by this popup every time i open my computer. Whatever user I log-in the same popup appears. The title of the popup is "C:\WINDOWS\system32\keyboard\services.exe" Below that, a message says that Windows cannot find 'C:\WINDOWS\system32\keyboard\services.exe'.This started when I transferred video clips from an mp4(ipod). Of coarse, I scanned it first using my updated AVG free edition and found no threat. After that i downloaded a free realplayer11 from cnet (here's the url: http://download.cnet.com/RealPlayer/3000-1...-10073040.html). It was saved to my desktop so as the video clips that I transferred. Then I tried to install realplayer but upon running the downloaded installer, it warned me that the computer will be restarted after the installation. So, I decided to cancel it first and remove first the mp4(ipod) and the flash drive of my cousin (which was already there when I used the computer). I failed in safely removing the mp4(ipod) but succeeded in removing the flash drive. I then, decided to forcefully remove the mp4(ipod) and started a computer scan. As expected, I found 1 trojan and successfully healed it. AVG asked for a restart and I clicked 'yes'. From that time, this annoying popup shows.The incident happened while I'm using the Administrator Account.I'm using Windows XP Professional SP2Please help me with this problem....

A:Popup After Healing Infected File

Hi and welcome..Its not unusual to receive such an error after using specialized fix tools.A "Cannot find...", "Could not run...", "Error loading... or "specific module could not be found" message is usually related to malware that was set to run at startup but has been deleted. Windows is trying to load this file but cannot locate it since the file was mostly likely removed during an anti-virus or anti-malware scan. However, an associated orphaned registry entry remains and is telling Windows to load the file when you boot up. Since the file no longer exists, Windows will display an error message. You need to remove this registry entry so Windows stops searching for the file when it loads. To resolve this, download Autoruns, search for the related entry and then delete it.Create a new folder on your hard drive called AutoRuns (C:\AutoRuns) and extract (unzip) the file there. (click here if you're not sure how to do this.)Open the folder and double-click on autoruns.exe to launch it.Please be patient as it scans and populates the entries.When done scanning, it will say Ready at the bottom.Scroll through the list and look for a startup entry related to the file(s) in the error message.Right-click on the entry and choose delete.Reboot your computer and see if the startup error returns.Next run MBAM:Please download Malwarebytes Anti-Malware (v1.34) and save it to your desktop.alternate download link 1alternate download link 2If you have a previous version of MBAM, remove it via ... Read more

Read other 17 answers
RELEVANCY SCORE 45.6

Somehow my computer contracted a Win32.HEUR virus off of an accidental spam site visit, and now my computer is full of infections.

At first I tried using AVG, but the virus basically overpowered it and tried to uninstall it.. So I got Kaspersky's virus removal tool. It seems to have taken care of the heur for the most part, but now I have a rootkit.tdss that just won't go away.

The problem is, I can't kill any processes, it's locked my taskbar out, I can hardly open any programs, it just says "This file does not have a program associated with it for performing this action. Please install a program or, if one is alread yinstalled, create an association in the Default Programs control panel." I can run programs if I select "run as administrator" but thats the only way they will work right now..

There are other symptoms as well, the whole pc is a complete mess right now, I've been working on it all day and night trying to get the infections cleared out. I just ran Hijackthis and I have a log I can post if necessary.

Is there anything else that I can do get this thing off of my computer??

-EDIT

I forgot to mention that when running malwarebytes or kasperskys virus removal, before I can complete the scan, the computer forces a shutdown.

A:Got a nasty virus on my laptop now, need some help healing it.

Hello and welcome let's do these. tell me how we are after.>>>> Download this file and doubleclick on it to run it. Allow the information to be merged with the registry.RKill....Download and Run RKillPlease download RKill by Grinler from one of the 4 links below and save it to your desktop.

Link 1
Link 2
Link 3
Link 4

Before we begin, you should disable your anti-malware softwares you have installed so they do not interfere RKill running as some anti-malware softwares detect RKill as malicious. Please refer to this page if you are not sure how.
Double-click on Rkill on your desktop to run it. (If you are using Windows Vista, please right-click on it and select Run As Administrator)
A black screen will appear and then disappear. Please do not worry, that is normal. This means that the tool has been successfully executed.
If nothing happens or if the tool does not run, please let me know in your next replyTDDS Killer Please read carefully and follow these steps. Download TDSSKiller and save it to your Desktop.Extract its contents to your desktop and make sure TDSSKiller.exe (the contents of the zipped file) is on the Desktop itself, not within a folder on the desktop.Go to Start > Run (Or you can hold down your Windows key and press R) and copy and paste the following into the text field. (make sure you include the quote marks) Then press OK. (If Vista, click on the Vista Orb and copy and paste the following into the Search field. (make... Read more

Read other 1 answers
RELEVANCY SCORE 45.2

Xi'an Double Road Import and Export Co., Ltd. is the production and sales of biotechnology products, has always focused on high quality, is China's biotechnology industry's leading enterprises supply.
Since 2010, China in production and sales of our products have been ranked first in the industry, has become a silver antimicrobial technology and products, including silver antibacterial agent 1-MCP preservation of professional manufacturers, the company has a complete and scientific quality management system, integrity, strength and quality of being recognized products, welcome friends from all walks of life come to visit and negotiate business.Skin Wound Healing Cream suppliers
website:http://www.zgxianbilu.com/
 

Read other answers
RELEVANCY SCORE 45.2

Quote:
We?ve covered how to use the old school CHKDSK command check on disk in Windows 7 yesterday but what we didn?t touch is actually even better. It?s a nice new feature that I didn?t realize its existed either until very recently.

Basically, once the feature is turned on, Window will detect a physical file system error and automatically fix it on the fly without you even noticing it happened. Because of this, you actually have a lot less chances having to run CHKDSK to check the disk manually because most likely the errors you suspected may have been fixed by this self-healing process already.

NTFS Self-healing is turned on by default in Windows 7 but if you are not sure you can use the following command to make sure. Note that the command has to be run as Administrator.

fsutil repair query c:



However, there is a possible downside that you may have already been thinking and wondering. Yes, the data may potentially be removed silently without user?s knowledge during the self-healing process. To address this issue, Microsoft added BugCheckOnCorrupt option that does something you may think it?s crazy.

It throws a BSOD (blue screen of death) and shuts everything down instead of attempting to fix the error, if the system discovers any NTFS corruptions.

Yes, not every BSOD is bad. Some of them happened in purpose, just like this as designed. It does sound crazy because why you would want the system crash, but from the data safety perspective, this att... Read more

A:NTFS Self-Healing is An Overlooked but Useful Feature in Windows 7

Thanks Nick, interesting read.

Read other 2 answers
RELEVANCY SCORE 44.4

Does anybody have any information on this virus in English, the only references are in Russian that I can find.

After AVG has scanned and healed the thing it comes up with warning box saying it has been found (Krepper.V) and to run AVG but it does not show up after scanning.

A:trojan horse virus and AVG healing THEN displaying warning

Sophos KrepperSee this link for info on Krepper from Sophos. There's also removal instructions but this means running Sav32Cli but this is command line based if you aren't happy using the command line I suggest using my tool RescueME see the sig.I would also suggest taking a hijack this log before and after cleaning and post both http://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-logs/ here for analysis to ensure that you are clean.

Read other 3 answers
RELEVANCY SCORE 44

Hello guys, I am new here. I'm starting to think my PC is infected, although it shows no solid signs that it is. Here's what led me to think so.
 
Yesterday, my brother brought a flashdrive and asked me if I could type a document for him and copy that to the drive. I inserted the drive in to my USB port (I had already disabled Autorun using Microsoft TweakUI and was also using Ninja Pen disk), and the drive did not autorun. I decided to scan it using Avira AntiVir Free Edition anyway, although my brother said it was clean, and Avira showed two threats - one was a trojan TR/Autoit.CI.14, as a file named New folder .exe (with a space after 'folder'), and the other was an INF virus INF/AutoRun.lj.7. Avira removed them both and I formatted the pendrive. The thing is, I was checking the Avira Report log this morning and it shows that there were three threats in the pendrive (the above mentioned two, plus another Trojan TR/Spy.Ardamax.J), which is also contained in the file New folder .exe! The report also showed something like Archive type: AutoIt --> svchost.exe, I have no idea what it is. When Avira began disinfection, the Ardamax trojan was logged as TR/Autoit.CI.14. Ardamax is a keylogger, isn't it?
 
My PC has about 8 svchost.exe running (5 SYSTEM, 2 NETWORK and 1 LOCAL). I downloaded Process Explorer to check the services associated with the svchost files and as soon as I exited the program, my computer displayed a "c000021a FATAL ERROR" BSOD. I should also note... Read more

A:Antivirus detected threat and disinfected threat are different?

Welcome aboard   Download Security Check from here or here and save it to your Desktop. Double-click SecurityCheck.exe Follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt; please post the contents of that document.NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.NOTE 2 SecurityCheck may produce some false warning(s), so leave the results reading to me. Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderOther ServicesPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply. Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result. Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop.* Double-click mbam-setup.exe and follow the prompts to install the program.* At the end, be sure a checkmark is placed next to Up... Read more

Read other 6 answers
RELEVANCY SCORE 40

Panda


Incident Status Location

Adware:adware/ilookup Not disinfected c:\windows\iLookup
Adware:adware/comet Not disinfected c:\documents and settings\all users\application data\Starware
Potentially unwanted tool:application/funweb Not disinfected hkey_local_machine\software\FunWebProducts
Adware:adware/s... Read more

A:Weird "can't find file" message on startup, viruses not deleting or healing

Please go HERE and carry out the instructions that are posted.Thankyou..

Read other 19 answers
RELEVANCY SCORE 33.2

HELP!

I don't know what the heck happened!

Just a few days ago my win7 HP was working PERFECTLY and it was detecting all of my 8Gb of DDR3 @ 1333 Mhz and now... it says ONLY 3.25Gb Usable!

WHAT THE HECK!!

Please help me resolve this problem
all my ram bars are working perfectly, my motherboard is brand new

A:HELP!! x64 bit OS detects only 3.25G ram out of 8G

Did you disable Memory Remap in your BIOS? (it must be enabled)
Reset the settings to your BIOS to default values
Is your BIOS detecting all the 8GB?

Uncheck Max mem from msconfig (msconfig>Boot>Advanced options)

Read other 7 answers
RELEVANCY SCORE 33.2

Hello All,

This is my first post , so be gentle
I have a machine that "MY COMPUTER" is showing a CD Rom, and assigned the letter "H" to it. Sounds great doesn't it?

The problem is, there is no CD ROM at the letter its' been assigned and this CD ROM does not show up in Device Manager, even after exposing all hidden devices.

I have run PassMarks Burn In tests and it is the reason the tests fail.

Does any one have any ideas about how to delete this ghost CD Rom?

Thanks in advance !

A:XP Detects CD Rom That Isn't There

did you check to see if any programs, like (alcohol 120%) for instance, or some .iso applications, aren't creating a virtual drive on startup?
good luck

Read other 3 answers
RELEVANCY SCORE 33.2

Hi guys I would like to see if i can get some help on this please. I have 2gb of ocz pc2-6400 and i just added another two 2gb. On first boot the bios only recognized 3gb and xp only detected 3gb also. So I switched all the memory modules thru each mem slot and they all tested fine. So I read around on asus forums and someone noted to change the bios feature "enable memory remapping". So i went and did that and the bios recognizes the 4gb on boot but when it enters xp, xp now detects only 2gb. i had on my previous p4 rig 4gb of ddr400 and i never had a problem. Is there some limitation on xp that won't allow 4gb if you are using core2 or p965 chipset? Any help would be appreciated. Thank you in advance.
 

A:xp detects 2gb instead of 4gb

Read other 10 answers
RELEVANCY SCORE 32.8

hi guys,

i have just noticed that on my DELL work PC, win7 detects that i have an i7 3540M but i am pretty sure that it's an i5, always had... i had a look in the BIOS and it detects i7 at the moment, even just upgraded BIOS to the latest from Dell's website, really weird..

i am just worried that now frequency is running really high, in fact according to CPU-z it's boosting up to 3.6Ghz, which is in fact the correct spec for that i7... ARK | Intel? Core? i7-3540M Processor (4M Cache, up to 3.70 GHz) but that's not what is on the machine...

what's the deal? cant remember doing any other BIOS update... win7 updates, sure... really odd..

thanks
Gab

A:Win7 Detects i7 instead of i5

Hi Gab,

What is the model of the Dell laptop you are using? You might be actually using i7.

Read other 4 answers
RELEVANCY SCORE 32.8

Hey everyone I'd got a question I hope someone with more knowledge can help me with. I just recently upgraded my ram to 4gb (i previously had 2gb) of the same OCZ ddr2 memory.

I noticed during boot my asus p5b board detects the total of 4gb on the black screen boot, but when I am in xp, my free-ram and computer properties only report 2gb. i used cpu-z and it detects 4gb but how come windows only sees 2gb? I've tried to research lots of forums and even the asus forums whether this is a hardware or software problem.

From what I gathered it's because my xp pro is only 32bit? I thought xp was able to expand to 4gb and my asus board specs that 8gb can be handled. Now it's making me wonder if I am suppose to move over to 64bit xp pro. i don't want to spend extra money for a new OS just to be able to utilize that extra ram. If i had known this, i would have never upgraded the extra 2gb.

I just wanted a more detail explanation if anyone can inform me that would be wonderful. thank you in advance.
 

A:XP PRO only detects 2gb out of 4gb total

I believe XP has a real limit of 3.5 even though it says 4.0 but thaqt does not explain 2.0 showing in Windows. And I would bet with 4 gig of ram you don't have onboard video to absorb any of it either?
 

Read other 3 answers
RELEVANCY SCORE 32.8

Avira claims 99.99% in malware detection but most of the samples downloaded from MT is undetected only one or two out of ten are detected is Avira going down the hill ?
 

A:Will Avira Really detects 99.99% ?

Yes.

Also known as marketing.

Avira's detection isn't going downhill, because it's not based on missed samples.
 

Read other 18 answers
RELEVANCY SCORE 32.8

After I installed CCC 11.1, CCC and gpu z detects it as 10.5.

I uninstalled 10.12 before I installed 11.1

A:Installed CCC 11.1, detects as 10.5

Did you uninstall the Catalyst software before installing the new one?? that may be the cause of the problem!

Uninstall, run Driver Sweeper to delete leftovers and re-install

Read other 6 answers
RELEVANCY SCORE 32.8

hello,

For some time now my Spyboy Search and Destroy has not detected any spyware. I have even gone to sites that i know puts spyware onto my computer, however when i do, no spyware appears when i run my scan. I am thinking there is a program blinding my spybot from anything and everything.

- I even update my spybot and do the immunization and that works as well.

- I can post a hi-jack this log if necessary,

- can someone please help me to figure out why my spybot does not pull up any spyware on my computer?

Thanks,

Nick

A:Spybot Detects Nothing?!?!

Wait a minute... did you just say you purposely infected your computer just for the sole purpose of seeing whether or not Spybot S&D would detect anything?!? Not smart at all! If your computer is infected and something is blinding Spybot that method of testing wasn't a good idea. Here's a basic overview of your malware cure strategy (I'll give you the comprehensive on when I have time or maybe a more experienced member will drop by and add on).1. Ewido Anti-Malware - Download from: www.ewido.neta. Install itb. Update itc. Close it without scanning2. Use Ad-Aware SE - Download from: http://www.lavasoft.de/english/default.shtmla. Install itb. Update itc. Close it without scanning3. Reboot into safe mode. If you don't know how use bootsafe.exe from:http://www.superadblocker.com/bootsafe.html4. Scan with Ewido in safe mode and remove all malware detected5. Scan with Ad-Aware SE and remove all malware detected.6. Now scan with Spybot S&D, if nothing is found that should indicate either A) Ewido and Ad-Aware SE got most of the malware or You're still infected. But, more than likely you'll be clean.7. Reboot back into normal mode by selecting the Normal Reboot option in the bootsafe.exe tool.8. Use HiJackThis and post a HJT log in the HJT forum NOT HERE!http://www.subratam.org/main/ - download link for HJThttp://www.bleepingcomputer.com/tutorials/how-to-use-hijackthis/ - HJT Tutorial

Read other 14 answers
RELEVANCY SCORE 32.8

Am trying to help a friend with his Dell XPS laptop. AV is AVG, and is reporting 28 rootkits that it cannot remove. I installed Avast and had it do a full boot scan. It didn't even mention the rootkits, but subsequent use of the laptop is getting some "Threat detected" popups from Avast, so I assume AVG is correct that the rootkits exist. They all have the file name "IRP hook rootkit. . ."

I'm out of my league when it comes to removing rootkits, so need some help removing them. Here's the HiJackThis log from the laptop:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:22:58 PM, on 8/1/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe
C:\Users\Jose Alvarez Blanco\AppData\Local\Akamai\netsession_win.exe
C:\Users\Jose Alvarez Blanco\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
C:\Program Files (x86)\AVG Secure Search\vprot.exe
C:\Program Files\AVAST Software\Avast... Read more

A:AVG detects 28 rootkits

Read other 16 answers
RELEVANCY SCORE 32.8

I have 512MB of ram and my computer has random periods when it detects only 384MB, I start it up and it start counting my ram as usual and it stops at 384MB then it dectects my drives and boots up windows, and in windows I also have only 384 and it's very frustrating because this is random, it recovers after 1 or 2 days and then it does the same thing again and I don't know what's causing it. Can anyone please help me?
 

A:Computer detects less ram

Please post more information...

How old of a computer is this?

What type of motherboard is this?

What type/size/double/single sided memory does the machine have inserted in it?

You could have a motherboard limitation or you have two peices of single sided memory.
 

Read other 9 answers
RELEVANCY SCORE 32.8

I saw many threads like that, I searched them up, but I cannot find an answer.
 
Once I got an cracked minecraft (like 4 years ago) from site ru-minecraft.org
 
I didn't know yet how to be safe from malware etc.
 
So I found out my homepage changed to ru-minecraft.org, but I didn't care. This year I deleted it.
 
(also I deleted something in system32, there was a strange notepad what had listed many dangerous sites and there was also ru-minecraft.org, I deleted it on both of my computers. On one computer when I open it up, it always show what I want to open the file with. Then comes up something strange, I don't member the name)
 
Few weeks back I found out some more files left from ru-minecraft.org, some strange files and I deleted them.
 
Home Website does not change and anything, but when I scanned my computer with adwcleaner, I found something at my "firefox" and "internet explorer" section (for now I disabled internet explorer, doesn't show up in there anymore).
 Logs:

Spoiler
# AdwCleaner v3.210 - Report created 07/10/2014 at 18:52:20
# Updated 19/05/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : THOMAS - THOMAS-PC
# Running from : C:\Users\THOMAS\Desktop\AdwCleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17280
-\\ Mozilla Firefox v32.0.3 ... Read more

A:Adwcleaner detects...

Hello TadadaThis is a bit confusing so let do all these and see how it is.Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.Download TDSSKiller and save it to your desktop.Extract (unzip) its contents to your desktop.Open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.If an infected file is detected, the default action will be Cure, click on Continue.If a suspicious file is detected, the default action will be Skip, click on Continue.It may ask you to reboot the computer to complete the process. Click on Reboot Now.If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.If a reboot is required, the report can also be found in your root directory (usually C:\ folder) in the form of TDSSKiller_xxxx_log.txt. Please copy and paste the contents of that file here....ADW CleanerPlease download AdwCleaner by Xplode and save to your Desktop.Double-click on AdwCleaner.exe to run the ... Read more

Read other 1 answers
RELEVANCY SCORE 32.8

The laptop only boots and plays dvd except for cd. How do I fix this issue?
 

A:Laptop detects DVD but not CD

It sounds like the laser has failed and the reader/ burner needs to be replaced.
 

Read other 3 answers
RELEVANCY SCORE 32.8

for some reason xp wont detect if i put in new discs, it only changes on startup. to use a new disc i have to right click and go to explore, if i double clcik it uses the method on my old disc (as in the autoplay file or go into explore) and it will tell me the new content of the disc but it still "thinks" its the old disc :S

my pc (at time of error)
------------
512mb of DDR ram
windows xp PRO
dvd rw (atapi)
cd rw
2 virtual dvd drives
80gig harddrive
radeon 7000 64mb
now (ive only listed changes)
1 gig DDR ram
geforceFX 5500 128mb
1 virtual drive (didnt need the second one nemore)

If theres ne questions u need to know dont b afraid to ask ^^
 

A:xp only detects new cds on startup

Read other 10 answers
RELEVANCY SCORE 32.8

Hi all!
I just got a system with 2 COM ports (I can see them from the back of the PC), but Win 98 only claims to have one (COM 1). How can I "force" windows to see the other one?
Is this a Motherboard issue?

Thanks,

Ed.
 

A:Win 98 only detects 1 COM port, I have 2

Hi edusem, welcome.

Do you know how to enter your bios to make sure they are both enabled?
 

Read other 1 answers
RELEVANCY SCORE 32.8

ok, ty and i have a problom, right now my AVG free is saying that i have ALOT of trogens, some from programs....like malwarebytes free trial....and malwarebytes said my comps clean, my brother was the only one on today, and i made it towhere he cant go on bad site, like porn and stuff like that, i know u can get virus from any and every site if that site isnt cared for properly, but is there any chance that AVG is crap? i downloaded the real AVG but its never picked up a virus untill today, but malwarebytes has, i have them both instaled, is that the problom? and its sayin that adobe is a trogen, that windows media is a trogen....and i dont think it means that it HAS a trogen, it means it IS a trogen......my comp is running really slow and im kinda scared its gana crash, i ran malwarebytes and it said im clean, so the AVG i downloaded isnt a rouge virus fake, please help
 

A:AVG detects infection

Read other 16 answers
RELEVANCY SCORE 32.8

My AVG anti virus scan detected a worm, said "virus identified worm/SpyBot 17.T'

It couldn't take it out (move to the vault)

When I brought up AVG and clicked on test results it says it's in C:\WINDOWS\SYSTEM\ZONEalarm.

Doesn't say what worm it is.

It says the virus wasn't moved, is still on the drive.

I came here looking in SEARCH for the online virus scan (Symantec) but all I can find is separate downloads for specific viruses/worms. I can't find the link to their online virus scan. I've used this before, but it takes a very long time and if I remember right, after several hours with it not going more than 30% I've given up.

So, maybe that's not the right approach?

I don't think looking in WIN SYSTEMS and taking out what I find works, because it might also have reg keys and such?

I uninstalled SpyBot (figuring I can put it back in again) and tried to uninstall Zonealarm, but even though it say it had uninstalled, it's still there (working)

I'm thinking maybe the virus is in the results that came from SpyBot or Zone Alarm and not actually in my computer? I haven't run SpyBot in a long time, I mainly use Adaware.

My HJT log is:

Logfile of HijackThis v1.97.7
Scan saved at 10:43:48 AM, on 5/13/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE... Read more

A:AVG detects worm

There is nothing bad showing in your log.

Did AVG not move the file to the vault? If not you can boot to safe mode and delete it.

How to start your computer in safe mode

Go here and do an online virus scan:

http://housecall.trendmicro.com/

Be sure and put a check in the box by "Auto Clean" before you do the scan. If it finds anything that it cannot clean have it delete it or make a note of the file location so you can delete it yourself.
 

Read other 2 answers
RELEVANCY SCORE 32.8

Everything was working fine i.e my Seagate Harddisk with Sony DVD rom. i replaced my harddisk. now using Western Digital 80GB. from that day there is a strange problem :|.
when i start my PC, dos screen with a cursor appears for about 1 min then windows starts and DVD rom does not detected in my computer. if i restart my PC it detects Dvd rom in mycomputer. again when i turn off PC and turn on it does not detect Dvd rom

thnx
 

Read other answers
RELEVANCY SCORE 32.8

All my protection programs don't detect a file with viruses within on my computer. I get a lot of spam in my inbox and I tend to follow them, safely, seeing if the programs have viruses. I also like to test my system to see if it picks up the viruses.

I downloaded a file called Watch, to watch online movies (ahaha, not). The virus total virus scanner(s) record shows me this:

http://www.virustotal.com/reanalisis.html?d11ac1477200855724d1b8a1fc86b528

I use ESET, Spybot Search and Destroy and Windows Defender. Windows Defender is on virus total, and appears to have detected something in this file. Although, on my computer it doesn't detect anything. My definitions are up to date and vaild. I have also tried a scan with Kaspersky and it came back positive, although on Virustotal it has came back negative.

I'm really wondering what is going on. Why isn't any of my protection programs not doing anything? I have also tried it on a different computer with the same software and again no go.

What's going on?
 

A:Nothing detects virus?

There can be discrepancies between antivirus vendors. It all depends on whose signatures you trust. And there can be false positives sometimes.

To balance it out, you can try ThreatFire, which is a heuristics behavorial antivirus. It detects malicious actions, and its not signatures based. It is designed to compliment your existing signature based antivirus solution.
 

Read other 3 answers
RELEVANCY SCORE 32.8

Hi, new to the boards so I hope this is in the right place, if not you have my apologies.
Theres probably a really simple solution to this th atI haven't thought of. I built a new system on a Foxconn motherboard recently, thought everything was working fine until I tried to burn a disc for the 1st time. Found that the dvd burner I'd bought and cd burner I'd taken from a previous machine weren't being recognised as anything other that readers. After lots of swearing I realised that both are being detected by XP as being SCSI instead of IDE. Anyone experienced this before and know how to get around it?

XP Home SP2
Foxconn P9657AA-8KS2H Motherboard (95% sure, not at home to check it)
Sony AW-G170A DVD+/-R/RW
(Some old Lite-On CD +/-R/RW)

Don't think any of the other spec are particularly relevant but happy to give more info. Both ODDs use windows generic drivers and I've checked that I've got the most up to date drivers and firmware for them.
Thanks in advance.
Joe
 

A:XP detects IDE ODD as SCSI

Are you running any SATA hard drives? If not, make sure you set the SATA controller (if any) to IDE
 

Read other 6 answers
RELEVANCY SCORE 32.4

Hello BC, This is a Dell Inspiron E1505 with WinXP sp3. It was previously cleaned thanks to (BC's) Myrti's help, after infection when I clicked on an evil nacha.org email and phoney "failed ACH transfer" message about 6 months ago. That thread is here. The computer was apparently clean after combofix'd. However, since this infection earlier this year, I've not trusted this machine for contacting my financial institutions. But, it's getting increasingly inconvenient to instead use separate Win7 machine for that purpose and I'd love to go back to this WinXP machine as my main computer, including for talking to my trading accounts. I don't have any specific symptom that told me this WinXP computer was in trouble... but just to feel better, I just ran RKU (still on my desktop from downloading earlier with Myrti) according to the instructions from Myrti earlier. The report ends with several "unknown threads" and the warning "possible rootkit activity!" So, I hope I can get some handholding in sorting this out. Here's the RKU report...RkU Version: 3.8.388.590, Type LE (SR2)==============================================OS Name: Windows XPVersion 5.1.2600 (Service Pack 3)Number of processors #2==============================================>Drivers==============================================0x804D7000 C:\WINDOWS\system32\ntkrnlpa.exe 2154496 bytes (Microsoft Corporation, NT Kernel & System)0x80... Read more

A:RKU detects possible rootkit activity

Hello and welcome to Bleeping Computer We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. Please take note: If you have since resolved the original problem you were having, we would appreciate you letting us know. If you are unable to create a log because your computer cannot start up successfully please provide detailed information about your installed Windows Operating System including the Version, Edition and if it is a 32bit or a 64bit system.
If you are unsure about any of these characteristics just post what you can and we will guide you.Please tell us if you have your original Windows CD/DVD available. If you are unable to perform the steps we have recommended please try one more time and if unsuccessful alert us of such and we will design an alternate means of obtaining the necessary information. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far. Upon completing the steps below another staff member will review your topic an do their best to resolve your issues. If you have already posted a DDS log, please do so again, as your situation may have changed. Use the '... Read more

Read other 21 answers
RELEVANCY SCORE 32.4

Hello so I have  Dell inspiron 660 Model 2013  Specs:
Intel core i5 3330 3.0 Ghz 
OS: Windows 10 home
Ram: 8 Gb xms3 not stock
Hard drive: Seagate 3 TB Not stock
Motherboard Stock
Powersupply 450 watt antec not stock
Graphics card GTX 650 1 GB not stock 
So I change the stick of ram to the one stick I listed now I want to go back to the original in it but when i put the 2 sticks in it only recognize one 
I checked bios windows etc still says 4 I even reset the cmos nothing.. 
Original ram 2x4 8 GB 1600 skhynix korea 

Read other answers